I checked for the add-ons already and couldn't find anything in firefox or IE
This is the OTL file and I will post the other gmer next.
OTL logfile created on: 3/23/2010 7:52:39 AM - Run 1
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Users\Nancy\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 39.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 72.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 222.62 Gb Total Space | 36.60 Gb Free Space | 16.44% Space Free | Partition Type: NTFS
Drive D: | 10.26 Gb Total Space | 1.77 Gb Free Space | 17.24% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 465.65 Gb Total Space | 141.75 Gb Free Space | 30.44% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NANCY-PC
Current User Name: Nancy
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan
========== Processes (SafeList) ==========
PRC - [2010/03/23 07:51:26 | 000,555,520 | —- | M] (OldTimer Tools) – C:\Users\Nancy\Downloads\OTL.exe
PRC - [2010/03/13 14:40:21 | 000,910,296 | —- | M] (Mozilla Corporation) – C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/03/07 07:53:08 | 000,160,328 | —- | M] (Siber Systems) – C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
PRC - [2010/02/05 17:19:46 | 000,728,016 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Windows OneCare Live\WinSSUI.exe
PRC - [2010/02/05 17:19:46 | 000,065,256 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe
PRC - [2010/02/05 17:19:44 | 001,141,112 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Windows OneCare Live\winss.exe
PRC - [2010/02/05 17:19:42 | 000,026,120 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe
PRC - [2010/02/05 17:19:38 | 000,245,976 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Windows OneCare Live\BackupWizard.exe
PRC - [2009/10/10 14:32:18 | 000,203,264 | —- | M] (ArcSoft Inc.) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2009/09/28 10:42:50 | 000,109,056 | —- | M] (ArcSoft Inc.) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2009/09/06 07:06:20 | 000,169,312 | —- | M] (Adobe Systems Incorporated) – C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
PRC - [2009/07/21 22:33:32 | 000,458,844 | —- | M] (IDT, Inc.) – C:\Program Files\IDT\WDM\sttray.exe
PRC - [2009/07/21 22:33:32 | 000,221,266 | —- | M] (IDT, Inc.) – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe
PRC - [2009/04/11 02:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
PRC - [2009/03/30 16:28:36 | 001,533,808 | —- | M] (Microsoft Corporation) – C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2009/03/30 16:28:36 | 000,183,152 | —- | M] (Microsoft Corporation) – C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2009/03/02 18:43:08 | 000,081,920 | —- | M] (Andrea Electronics Corporation) – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\AEstSrv.exe
PRC - [2009/02/07 08:56:47 | 000,266,240 | —- | M] () – C:\Windows\System32\CSHelper.exe
PRC - [2008/09/29 13:19:22 | 000,415,744 | —- | M] () – C:\Program Files\Atomic Alarm Clock\timeserv.exe
PRC - [2008/08/22 16:32:06 | 000,361,808 | —- | M] () – C:\Windows\SMINST\BLService.exe
PRC - [2008/07/09 18:05:22 | 000,018,704 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
PRC - [2008/06/13 12:04:02 | 000,025,256 | —- | M] () – C:\Program Files\Lexmark 3600-4600 Series\lxdxmsdmon.exe
PRC - [2008/06/13 12:04:01 | 000,668,328 | —- | M] () – C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe
PRC - [2008/04/15 21:54:42 | 000,354,840 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/04/15 21:54:40 | 000,178,712 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008/02/27 20:53:25 | 000,594,600 | —- | M] ( ) – C:\Windows\System32\lxdxcoms.exe
PRC - [2007/11/27 23:45:02 | 000,869,952 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe
PRC - [2007/04/25 14:18:48 | 000,537,520 | —- | M] ( ) – C:\Windows\System32\lxbvcoms.exe
PRC - [2007/01/04 17:38:08 | 000,024,652 | —- | M] (Viewpoint Corporation) – C:\Program Files\Viewpoint\Common\ViewpointService.exe
PRC - [2001/05/31 15:59:44 | 000,585,728 | —- | M] (Beuger Enterprises) – C:\Program Files\sweep\Sweep.exe
========== Modules (SafeList) ==========
MOD - [2010/03/23 07:51:26 | 000,555,520 | —- | M] (OldTimer Tools) – C:\Users\Nancy\Downloads\OTL.exe
MOD - [2009/04/11 02:21:38 | 001,686,016 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2010/02/05 17:19:44 | 001,141,112 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Microsoft Windows OneCare Live\winss.exe – (winss)
SRV - [2010/02/05 17:19:42 | 000,026,120 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe – (OcHealthMon)
SRV - [2009/11/16 13:46:57 | 000,867,080 | —- | M] (Acresso Software Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe – (FLEXnet Licensing Service)
SRV - [2009/09/28 10:42:50 | 000,109,056 | —- | M] (ArcSoft Inc.) [Auto | Running] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2009/09/24 21:27:04 | 000,793,088 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\FntCache.dll – (FontCache)
SRV - [2009/09/06 07:06:20 | 000,169,312 | —- | M] (Adobe Systems Incorporated) [Auto | Running] – C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe – (AdobeActiveFileMonitor8.0)
SRV - [2009/08/24 07:36:45 | 000,377,344 | —- | M] (Microsoft Corporation) [On_Demand | Running] – winhttp.dll – (WinHttpAutoProxySvc)
SRV - [2009/08/19 14:30:42 | 000,098,984 | —- | M] () [Auto | Stopped] – C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxdxserv.exe – (lxdxCATSCustConnectService)
SRV - [2009/07/21 22:33:32 | 000,221,266 | —- | M] (IDT, Inc.) [Auto | Running] – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe – (STacSV)
SRV - [2009/03/30 16:28:36 | 001,533,808 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE – (wlidsvc)
SRV - [2009/03/02 18:43:08 | 000,081,920 | —- | M] (Andrea Electronics Corporation) [Auto | Running] – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\AEstSrv.exe – (AESTFilters)
SRV - [2009/02/07 08:56:47 | 000,266,240 | —- | M] () [Auto | Running] – C:\Windows\System32\CSHelper.exe – (CSHelper)
SRV - [2008/09/29 13:19:22 | 000,415,744 | —- | M] () [Auto | Running] – C:\Program Files\Atomic Alarm Clock\timeserv.exe – (AtomicAlarmClock)
SRV - [2008/08/22 16:32:06 | 000,361,808 | —- | M] () [Auto | Running] – C:\Windows\SMINST\BLService.exe – (Recovery Service for Windows)
SRV - [2008/07/09 18:05:22 | 000,018,704 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe – (OneCareMP)
SRV - [2008/04/15 21:54:42 | 000,354,840 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe – (IAANTMON) Intel®
SRV - [2008/02/27 20:53:25 | 000,594,600 | —- | M] ( ) [Auto | Running] – C:\Windows\System32\lxdxcoms.exe – (lxdx_device)
SRV - [2008/01/20 22:23:32 | 000,272,952 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2007/11/27 23:45:02 | 000,869,952 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe – (msfwsvc)
SRV - [2007/04/25 14:18:48 | 000,537,520 | —- | M] ( ) [Auto | Running] – C:\Windows\System32\lxbvcoms.exe – (lxbv_device)
SRV - [2007/01/04 17:38:08 | 000,024,652 | —- | M] (Viewpoint Corporation) [Auto | Running] – C:\Program Files\Viewpoint\Common\ViewpointService.exe – (Viewpoint Manager Service)
SRV - [2005/02/09 11:59:00 | 000,014,165 | —- | M] (Pinnacle Systems GmbH) [Auto | Stopped] – C:\Windows\System32\drivers\Pclepci.sys – (PCLEPCI)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cnnb
IE - HKLM\..\URLSearchHook: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files\Swag_Bucks\tbSwa0.dll (Conduit Ltd.)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cnnb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cnnb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files\Swag_Bucks\tbSwa0.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "AOL Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Swag Bucks Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "
http://search.aol.com/aolcom/search?invocationType=tb50-ff-aolmailtb-chromesbox-en-us&query="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://us.mc365.mail.yahoo.com/mc/welcome?.gx=1&.rand=3crq6tfqc9u09|http://www.skype.com/go/help.guides.ffextension?lang=EN"
FF - prefs.js..extensions.enabledItems: {22119944-ED35-4ab1-910B-E619EA06A115}:6.9.98
FF - prefs.js..extensions.enabledItems: {097d3191-e6fa-4728-9826-b533d755359d}:0.7.11
FF - prefs.js..extensions.enabledItems: {0C7E3F01-99E9-4095-9BDC-F84724960B57}:[removed]
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.7.2
FF - prefs.js..extensions.enabledItems: {6e84150a-d526-41f1-a480-a67d3fed910d}:[removed]
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:[removed]
FF - prefs.js..extensions.enabledItems: {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}:[removed]
FF - prefs.js..extensions.enabledItems: {a92aadf8-193f-4a62-8740-5cce81775afc}:1.0.7
FF - prefs.js..extensions.enabledItems: [removed]:1.6
FF - prefs.js..extensions.enabledItems: {ff356687-aa08-463d-a46c-11c451824939}:5.0.0
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/01/30 15:49:54 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files\Siber Systems\AI RoboForm\Firefox [2008/12/01 19:47:27 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/03/19 09:34:26 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/03/19 09:34:26 | 000,000,000 | —D | M]
[2008/12/01 12:04:41 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Mozilla\Extensions
[2010/03/23 06:58:34 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions
[2010/01/18 09:05:27 | 000,000,000 | —D | M] (All-in-One Sidebar) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{097d3191-e6fa-4728-9826-b533d755359d}
[2009/02/06 08:51:07 | 000,000,000 | —D | M] (Coupon Manager) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{0C7E3F01-99E9-4095-9BDC-F84724960B57}
[2008/12/02 07:10:45 | 000,000,000 | —D | M] (Adblock) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{34274bf4-1d97-a289-e984-17e546307e4f}
[2010/01/26 10:06:26 | 000,000,000 | —D | M] (IE View) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{6e84150a-d526-41f1-a480-a67d3fed910d}
[2010/03/20 09:07:56 | 000,000,000 | —D | M] (NoScript) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010/02/01 09:09:32 | 000,000,000 | —D | M] (Swag Bucks Toolbar) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94}
[2010/02/07 10:14:32 | 000,000,000 | —D | M] (Woot Watcher) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{a92aadf8-193f-4a62-8740-5cce81775afc}
[2010/03/21 07:06:55 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/03/16 10:35:49 | 000,000,000 | —D | M] (Red Cats (blue flavor)) – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\{ff356687-aa08-463d-a46c-11c451824939}
[2009/11/18 06:56:04 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\extensions\[removed]
[2010/01/23 07:42:37 | 000,000,652 | —- | M] () – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\searchplugins\aol-search.xml
[2009/09/01 12:24:10 | 000,000,882 | —- | M] () – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\searchplugins\conduit.xml
[2009/05/25 10:02:54 | 000,002,357 | —- | M] () – C:\Users\Nancy\AppData\Roaming\Mozilla\Firefox\Profiles\ignl4m9r.default\searchplugins\photobucket.xml
[2010/03/16 10:34:50 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2009/01/07 13:16:58 | 000,609,280 | —- | M] (ArtistScope) – C:\Program Files\Mozilla Firefox\plugins\npArtistScope42.dll
[2009/09/09 13:40:34 | 000,442,368 | —- | M] (Invenda Corporation) – C:\Program Files\Mozilla Firefox\plugins\NPcol308.dll
[2009/11/19 17:16:28 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
[2009/11/19 17:16:29 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll
O1 HOSTS File: ([2009/08/18 06:36:26 | 000,321,588 | R— | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 11019 more lines…
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O2 - BHO: (no name) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - No CLSID value found.
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (Swag Bucks Toolbar) - {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files\Swag_Bucks\tbSwa0.dll (Conduit Ltd.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (&RoboForm) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Swag Bucks Toolbar) - {8bdea9d6-6f62-45eb-8ee9-8a81af0d2f94} - C:\Program Files\Swag_Bucks\tbSwa0.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (&RoboForm) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Swag Bucks Toolbar) - {8BDEA9D6-6F62-45EB-8EE9-8A81AF0D2F94} - C:\Program Files\Swag_Bucks\tbSwa0.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [lxdxamon] C:\Program Files\Lexmark 3600-4600 Series\lxdxamon.exe ()
O4 - HKLM..\Run: [lxdxmon.exe] C:\Program Files\Lexmark 3600-4600 Series\lxdxmon.exe ()
O4 - HKLM..\Run: [mumservice] C:\Program Files\Motorola\Software Update\mumservice.exe (Motorola)
O4 - HKLM..\Run: [OneCareUI] C:\Program Files\Microsoft Windows OneCare Live\winssnotify.exe (Microsoft Corporation)
O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [UCam_Menu] C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [USB2Check] C:\Windows\System32\PCLECoInst.DLL (Pinnacle Systems)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [RoboForm] C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)
O4 - Startup: C:\Users\Nancy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Vacation_Countdown.lnk = C:\Program Files\Vacation Countdown v1\Vacation_Countdown.exe ()
O8 - Extra context menu item: Customize Menu - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Fill Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O8 - Extra context menu item: RoboForm Toolbar - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O8 - Extra context menu item: Save Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra Button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - Reg Error: Key error. File not found
O9 - Extra Button: SmartShopper - Compare travel rates - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - Reg Error: Key error. File not found
O9 - Extra Button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra 'Tools' menuitem : RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: //@signup.mar@/ ([]money in Computer)
O15 - HKCU\..Trusted Domains: //@surf.mar@/ ([]money in Local intranet)
O15 - HKCU\..Trusted Domains: mysavings.com ([www] http in Trusted sites)
O15 - HKCU\..Trusted Ranges: Range1 ([http] in Local intranet)
O16 - DPF: {0B195D55-0AB4-48C7-828F-34BE10BA4266}
http://www.worldwinner.com/games/v53/dealo…ealornodeal.cab (DealOrNoDeal Control)
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} http://www.worldwinner.com/games/shared/wwlaunch.cab (Wwlaunch Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\Nancy\Saved Games\Pictures\Pictures\New Folder\potatoshead.jpg
O24 - Desktop BackupWallPaper: C:\Users\Nancy\Saved Games\Pictures\Pictures\New Folder\potatoshead.jpg
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/03/31 12:48:42 | 000,000,169 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2007/05/18 10:37:12 | 000,000,069 | RH– | M] () - G:\autorun.inf – [ FAT32 ]
O33 - MountPoints2\{3b8002d0-bc94-11de-a7ba-00238b32ad36}\Shell\AutoRun\command - "" = H:\VKC180PV.exe – File not found
O33 - MountPoints2\{541b0adb-bfca-11dd-a0fb-00238b32ad36}\Shell\AutoRun\command - "" = G:\wd_windows_tools\Setup.exe – [2007/06/26 12:02:12 | 000,212,992 | —- | M] (Western Digital Technologies, Inc.)
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\wd_windows_tools\setup.exe – File not found
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\wd_windows_tools\Setup.exe – [2007/06/26 12:02:12 | 000,212,992 | —- | M] (Western Digital Technologies, Inc.)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias [2008/01/20 22:34:27 | 000,000,000 | —D | M]
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
OTL cannot create restorepoints on Vista OSs!
========== Files/Folders - Created Within 14 Days ==========
[2010/03/21 14:25:38 | 000,000,000 | —D | C] – C:\Program Files\TrendMicro
[2010/03/13 19:08:25 | 000,000,000 | —D | C] – C:\Users\Nancy\AppData\Roaming\skypePM
[2010/03/13 19:07:48 | 000,000,000 | —D | C] – C:\Users\Nancy\AppData\Roaming\Skype
[2010/03/13 19:07:17 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2009/08/13 08:23:00 | 000,438,272 | —- | C] ( ) – C:\Windows\System32\LXDXhcp.dll
[2009/08/13 08:22:59 | 000,843,776 | —- | C] ( ) – C:\Windows\System32\lxdxusb1.dll
[2009/08/13 08:22:59 | 000,364,544 | —- | C] ( ) – C:\Windows\System32\lxdxinpa.dll
[2009/08/13 08:22:59 | 000,339,968 | —- | C] ( ) – C:\Windows\System32\lxdxiesc.dll
[2009/08/13 08:22:58 | 001,105,920 | —- | C] ( ) – C:\Windows\System32\lxdxserv.dll
[2009/08/13 08:22:58 | 000,647,168 | —- | C] ( ) – C:\Windows\System32\lxdxpmui.dll
[2009/08/13 08:22:58 | 000,569,344 | —- | C] ( ) – C:\Windows\System32\lxdxlmpm.dll
[2009/08/13 08:22:58 | 000,053,248 | —- | C] ( ) – C:\Windows\System32\lxdxprox.dll
[2009/08/13 08:22:56 | 000,663,552 | —- | C] ( ) – C:\Windows\System32\lxdxhbn3.dll
[2009/08/13 08:22:54 | 000,376,832 | —- | C] ( ) – C:\Windows\System32\lxdxcomm.dll
[2009/08/13 08:22:53 | 000,851,968 | —- | C] ( ) – C:\Windows\System32\lxdxcomc.dll
[2009/07/17 20:55:10 | 000,409,600 | —- | C] ( ) – C:\Windows\System32\lxdxcoin.dll
[2009/01/16 10:29:48 | 000,047,360 | —- | C] (VSO Software) – C:\Users\Nancy\AppData\Roaming\pcouffin.sys
[2007/04/04 07:40:30 | 000,643,072 | —- | C] ( ) – C:\Windows\System32\lxbvpmui.dll
[2007/04/04 07:39:22 | 001,224,704 | —- | C] ( ) – C:\Windows\System32\lxbvserv.dll
[2007/04/04 07:34:14 | 000,421,888 | —- | C] ( ) – C:\Windows\System32\lxbvcomm.dll
[2007/04/04 07:32:50 | 000,585,728 | —- | C] ( ) – C:\Windows\System32\lxbvlmpm.dll
[2007/04/04 07:31:40 | 000,397,312 | —- | C] ( ) – C:\Windows\System32\lxbviesc.dll
[2007/04/04 07:29:30 | 000,094,208 | —- | C] ( ) – C:\Windows\System32\lxbvpplc.dll
[2007/04/04 07:28:44 | 000,684,032 | —- | C] ( ) – C:\Windows\System32\lxbvcomc.dll
[2007/04/04 07:28:12 | 000,163,840 | —- | C] ( ) – C:\Windows\System32\lxbvprox.dll
[2007/04/04 07:22:26 | 000,413,696 | —- | C] ( ) – C:\Windows\System32\lxbvinpa.dll
[2007/04/04 07:21:52 | 000,995,328 | —- | C] ( ) – C:\Windows\System32\lxbvusb1.dll
[2007/04/04 07:18:20 | 000,696,320 | —- | C] ( ) – C:\Windows\System32\lxbvhbn3.dll
========== Files - Modified Within 14 Days ==========
[2010/03/23 07:55:09 | 008,388,608 | -HS- | M] () – C:\Users\Nancy\ntuser.dat
[2010/03/23 07:53:38 | 000,000,418 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{4589B50F-0A1A-4793-AFDB-E1E44D61A7E4}.job
[2010/03/23 07:52:59 | 000,000,552 | —- | M] () – C:\Windows\System32\DO_NOT_DELETE.backupSetID
[2010/03/23 07:42:35 | 000,003,216 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/03/23 07:42:35 | 000,003,216 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/03/23 05:49:30 | 000,747,142 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2010/03/23 05:49:30 | 000,634,088 | —- | M] () – C:\Windows\System32\perfh009.dat
[2010/03/23 05:49:30 | 000,117,244 | —- | M] () – C:\Windows\System32\perfc009.dat
[2010/03/23 05:46:21 | 000,001,752 | —- | M] () – C:\Users\Nancy\Documents\cc_20100323_054616.reg
[2010/03/23 05:43:25 | 000,000,284 | —- | M] () – C:\Users\Public\Documents\hpqp.ini
[2010/03/23 05:42:38 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/03/23 05:42:20 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/03/23 05:42:17 | 3147,034,624 | -HS- | M] () – C:\hiberfil.sys
[2010/03/22 18:08:18 | 000,524,288 | -HS- | M] () – C:\Users\Nancy\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2010/03/22 18:08:18 | 000,065,536 | -HS- | M] () – C:\Users\Nancy\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2010/03/22 18:08:14 | 003,313,379 | -H– | M] () – C:\Users\Nancy\AppData\Local\IconCache.db
[2010/03/22 12:28:56 | 000,010,752 | —- | M] () – C:\Users\Nancy\Documents\matt.xlr
[2010/03/22 12:28:56 | 000,001,434 | —- | M] () – C:\Users\Nancy\AppData\Roaming\wklnhst.dat
[2010/03/21 14:25:39 | 000,001,946 | —- | M] () – C:\Users\Nancy\Desktop\HiJackThis.lnk
[2010/03/21 14:21:52 | 000,000,349 | —- | M] () – C:\Users\Public\Documents\PCLECHAL.INI
[2010/03/21 13:24:48 | 000,002,542 | —- | M] () – C:\Users\Nancy\Documents\cc_20100321_132446.reg
[2010/03/21 08:06:53 | 000,006,944 | —- | M] () – C:\Users\Nancy\Documents\cc_20100321_080649.reg
[2010/03/20 09:09:53 | 000,004,492 | —- | M] () – C:\Users\Nancy\Documents\cc_20100320_090950.reg
[2010/03/19 09:52:04 | 000,000,400 | —- | M] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/03/18 18:13:32 | 000,008,391 | —- | M] () – C:\Windows\System32\hpasset.xml
[2010/03/17 05:41:59 | 000,001,798 | —- | M] () – C:\Users\Nancy\Documents\cc_20100317_054157.reg
[2010/03/13 19:08:26 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/03/13 08:48:34 | 000,002,388 | —- | M] () – C:\Users\Nancy\Documents\cc_20100313_074831.reg
[2010/03/11 18:33:05 | 000,008,391 | —- | M] () – C:\Windows\System32\hpasset.xml.bkp
[2010/03/11 10:36:59 | 000,010,128 | —- | M] () – C:\Users\Nancy\Documents\NANCY.CRD
[2010/03/09 15:00:35 | 000,961,414 | —- | M] () – C:\Users\Nancy\Documents\Ditty Diego - War Chant.mp3
========== Files Created - No Company Name ==========
[2010/03/23 07:52:59 | 000,000,552 | —- | C] () – C:\Windows\System32\DO_NOT_DELETE.backupSetID
[2010/03/23 05:46:18 | 000,001,752 | —- | C] () – C:\Users\Nancy\Documents\cc_20100323_054616.reg
[2010/03/21 14:25:39 | 000,001,946 | —- | C] () – C:\Users\Nancy\Desktop\HiJackThis.lnk
[2010/03/21 13:24:47 | 000,002,542 | —- | C] () – C:\Users\Nancy\Documents\cc_20100321_132446.reg
[2010/03/21 08:06:50 | 000,006,944 | —- | C] () – C:\Users\Nancy\Documents\cc_20100321_080649.reg
[2010/03/20 09:23:18 | 000,010,752 | —- | C] () – C:\Users\Nancy\Documents\matt.xlr
[2010/03/20 09:09:52 | 000,004,492 | —- | C] () – C:\Users\Nancy\Documents\cc_20100320_090950.reg
[2010/03/17 05:41:58 | 000,001,798 | —- | C] () – C:\Users\Nancy\Documents\cc_20100317_054157.reg
[2010/03/13 19:08:26 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/03/13 08:48:33 | 000,002,388 | —- | C] () – C:\Users\Nancy\Documents\cc_20100313_074831.reg
[2009/10/02 17:35:39 | 000,021,840 | —- | C] () – C:\Windows\System32\SIntfNT.dll
[2009/10/02 17:35:39 | 000,017,212 | —- | C] () – C:\Windows\System32\SIntf32.dll
[2009/10/02 17:35:39 | 000,012,067 | —- | C] () – C:\Windows\System32\SIntf16.dll
[2009/10/02 17:32:51 | 000,000,115 | —- | C] () – C:\Windows\disney.ini
[2009/09/08 08:44:02 | 000,208,896 | —- | C] () – C:\Windows\System32\lxdxgrd.dll
[2009/08/13 08:28:19 | 000,040,960 | —- | C] () – C:\Windows\System32\lxdxvs.dll
[2009/08/13 08:26:47 | 000,081,920 | —- | C] () – C:\Windows\System32\lxdxcaps.dll
[2009/08/13 08:26:47 | 000,069,632 | —- | C] () – C:\Windows\System32\lxdxcnv4.dll
[2009/08/13 08:26:46 | 000,782,336 | —- | C] () – C:\Windows\System32\lxdxdrs.dll
[2009/08/13 08:25:51 | 000,045,056 | —- | C] () – C:\Windows\System32\LXF3PMON.DLL
[2009/08/13 08:25:51 | 000,032,768 | —- | C] () – C:\Windows\System32\LXF3FXPU.DLL
[2009/08/13 08:25:30 | 000,053,248 | —- | C] () – C:\Windows\System32\lxf3oem.dll
[2009/08/13 08:25:30 | 000,012,288 | —- | C] () – C:\Windows\System32\LXF3PMRC.DLL
[2009/08/13 08:23:19 | 000,000,044 | —- | C] () – C:\Windows\System32\lxdxrwrd.ini
[2009/08/13 08:23:00 | 000,348,160 | —- | C] () – C:\Windows\System32\LXDXinst.dll
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009/06/16 09:38:24 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/04/24 08:06:09 | 000,120,200 | —- | C] () – C:\Windows\System32\DLLDEV32i.dll
[2009/04/24 08:05:40 | 000,005,937 | —- | C] () – C:\Windows\mgxoschk.ini
[2009/03/31 13:41:32 | 000,000,024 | —- | C] () – C:\ProgramData\__FileUploader.log
[2009/03/31 13:32:39 | 000,000,017 | —- | C] () – C:\Windows\MovingPicture.ini
[2009/03/31 12:33:54 | 000,196,096 | —- | C] () – C:\Windows\System32\macd32.dll
[2009/03/31 12:33:54 | 000,138,752 | —- | C] () – C:\Windows\System32\mase32.dll
[2009/03/31 12:33:54 | 000,136,192 | —- | C] () – C:\Windows\System32\mamc32.dll
[2009/03/31 12:33:54 | 000,057,856 | —- | C] () – C:\Windows\System32\masd32.dll
[2009/03/31 12:33:54 | 000,027,648 | —- | C] () – C:\Windows\System32\ma32.dll
[2009/03/30 08:07:10 | 000,000,511 | —- | C] () – C:\Users\Nancy\AppData\Roaming\alarms.ini
[2009/03/30 08:06:24 | 000,000,812 | —- | C] () – C:\Users\Nancy\AppData\Roaming\AtomicAlarmClock.ini
[2009/03/05 06:54:58 | 000,073,728 | —- | C] () – C:\Windows\System32\RtNicProp32.dll
[2009/02/24 09:18:22 | 000,000,680 | —- | C] () – C:\Users\Nancy\AppData\Local\d3d9caps.dat
[2009/02/12 18:40:08 | 000,000,321 | —- | C] () – C:\Windows\System32\XMLConfig_SYSID.ini
[2009/01/18 17:10:07 | 000,012,288 | —- | C] () – C:\Windows\impborl.dll
[2009/01/18 08:34:55 | 000,000,094 | —- | C] () – C:\Windows\family.ini
[2009/01/18 08:00:44 | 000,000,000 | —- | C] () – C:\Windows\QuickInstall.INI
[2009/01/16 10:35:23 | 000,001,041 | —- | C] () – C:\Users\Nancy\AppData\Roaming\vso_ts_preview.xml
[2009/01/16 10:30:22 | 000,000,034 | —- | C] () – C:\Users\Nancy\AppData\Roaming\pcouffin.log
[2009/01/16 10:29:48 | 000,087,608 | —- | C] () – C:\Users\Nancy\AppData\Roaming\inst.exe
[2009/01/16 10:29:48 | 000,007,887 | —- | C] () – C:\Users\Nancy\AppData\Roaming\pcouffin.cat
[2009/01/16 10:29:48 | 000,001,144 | —- | C] () – C:\Users\Nancy\AppData\Roaming\pcouffin.inf
[2008/12/18 14:45:31 | 000,000,050 | —- | C] () – C:\Windows\coowiz20.ini
[2008/12/05 10:46:05 | 000,000,466 | —- | C] () – C:\Windows\Lexstat.ini
[2008/12/03 09:42:04 | 000,001,434 | —- | C] () – C:\Users\Nancy\AppData\Roaming\wklnhst.dat
[2008/12/03 09:36:23 | 000,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2008/12/02 06:40:09 | 000,098,304 | —- | C] () – C:\Users\Nancy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/12/01 23:28:41 | 000,000,000 | —- | C] () – C:\Users\Nancy\AppData\Local\QSwitch.txt
[2008/12/01 23:28:41 | 000,000,000 | —- | C] () – C:\Users\Nancy\AppData\Local\DSwitch.txt
[2008/12/01 23:28:41 | 000,000,000 | —- | C] () – C:\Users\Nancy\AppData\Local\AtStart.txt
[2008/07/01 04:28:04 | 000,000,736 | —- | C] () – C:\ProgramData\hpzinstall.log
[2008/06/12 14:59:22 | 000,147,456 | —- | C] () – C:\Windows\System32\igfxCoIn_v1502.dll
[2008/06/04 13:54:12 | 000,004,608 | —- | C] () – C:\Windows\System32\HdmiCoin.dll
[2007/04/24 07:47:28 | 000,413,696 | —- | C] () – C:\Windows\System32\lxbvutil.dll
[2007/02/22 14:32:00 | 000,344,064 | —- | C] () – C:\Windows\System32\lxbvcoin.dll
[2006/11/02 08:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/03/09 05:58:00 | 001,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2005/10/25 23:12:10 | 000,040,960 | —- | C] () – C:\Windows\System32\lxbvvs.dll
========== LOP Check ==========
[2010/02/07 10:11:05 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Audacity
[2009/12/21 10:45:45 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Auslogics
[2009/01/05 11:50:45 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\FFTS
[2009/10/02 07:33:41 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\GARMIN
[2009/05/21 06:36:48 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\GoodSync
[2009/12/04 17:28:51 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\HandBrake
[2009/01/18 08:34:55 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\HotSync
[2008/12/02 09:22:23 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Leadertech
[2009/08/13 08:52:04 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Lexmark Productivity Studio
[2009/04/21 17:15:48 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\MAGIX
[2009/11/16 14:56:06 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\PhotoshopdotcomInspirationBrowser.4C35C4D325D350FE0114230CBADCA2DDD0AC8D25.
1
[2009/03/31 13:31:41 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\proDAD
[2008/12/16 14:05:10 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Red Kawa
[2009/01/11 19:16:30 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Serif
[2009/12/25 11:00:16 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Skinux
[2009/01/09 20:20:47 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Template
[2009/08/19 15:33:24 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\uTorrent
[2009/12/27 09:00:24 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\Vso
[2008/12/03 10:37:40 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\WildTangent
[2009/03/26 09:48:29 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\wootalyzer
[2010/01/22 08:35:02 | 000,000,000 | —D | M] – C:\Users\Nancy\AppData\Roaming\ZiggyTV
[2009/03/31 05:51:25 | 000,000,458 | —- | M] () – C:\Windows\Tasks\Ad-Aware Update (Weekly).job
[2010/03/19 09:52:04 | 000,000,400 | —- | M] () – C:\Windows\Tasks\EasyShare Registration Task.job
[2010/03/22 18:08:21 | 000,032,552 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2010/03/23 07:53:38 | 000,000,418 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{4589B50F-0A1A-4793-AFDB-E1E44D61A7E4}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2008/01/20 22:23:01 | 000,056,376 | —- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 – C:\Windows\System32\drivers\AGP440.sys
[2008/01/20 22:23:01 | 000,056,376 | —- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 – C:\Windows\System32\DriverStore\FileRepository\machine.inf_51b95d75\AGP440.sys
[2008/01/20 22:23:01 | 000,056,376 | —- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 – C:\Windows\System32\DriverStore\FileRepository\machine.inf_f750e484\AGP440.sys
[2008/01/20 22:23:01 | 000,056,376 | —- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 – C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6001.18000_none_ba12ed3bbeb0d97a\AGP440.sys
[2008/01/20 22:23:01 | 000,056,376 | —- | M] (Microsoft Corporation) MD5=13F9E33747E6B41A3FF305C37DB0D360 – C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.0.6002.18005_none_bbfe6647bbd2a4c6\AGP440.sys
[2006/11/02 05:49:52 | 000,053,864 | —- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 – C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
< MD5 for: ATAPI.SYS >
[2009/04/11 02:32:26 | 000,019,944 | —- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 – C:\Windows\System32\drivers\atapi.sys
[2009/04/11 02:32:26 | 000,019,944 | —- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 – C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/11 02:32:26 | 000,019,944 | —- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 – C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/20 22:23:00 | 000,021,560 | —- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 – C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/20 22:23:00 | 000,021,560 | —- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 – C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 05:49:36 | 000,019,048 | —- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F – C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2006/11/02 05:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\System32\cngaudit.dll
[2006/11/02 05:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
< MD5 for: EVENTLOG.DLL >
[2007/01/13 01:30:08 | 000,007,216 | —- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 – C:\Program Files\CyberLink\PowerDirector\EventLog.dll
< MD5 for: IASTOR.SYS >
[2008/04/15 21:54:16 | 000,388,120 | —- | M] (Intel Corporation) MD5=8D58627FEF3F8767665D9F4DC91CBD97 – C:\Program Files\Intel\Intel Matrix Storage Manager\driver64\IaStor.sys
[2008/04/15 21:53:44 | 000,312,344 | —- | M] (Intel Corporation) MD5=DB0CC620B27A928D968C1A1E9CD9CB87 – C:\Program Files\Intel\Intel Matrix Storage Manager\driver\IaStor.sys
[2008/04/15 21:53:44 | 000,312,344 | —- | M] (Intel Corporation) MD5=DB0CC620B27A928D968C1A1E9CD9CB87 – C:\Windows\System32\drivers\iaStor.sys
[2008/04/15 21:53:44 | 000,312,344 | —- | M] (Intel Corporation) MD5=DB0CC620B27A928D968C1A1E9CD9CB87 – C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_77c04a30\iaStor.sys
< MD5 for: IASTORV.SYS >
[2008/01/20 22:23:23 | 000,235,064 | —- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 – C:\Windows\System32\drivers\iaStorV.sys
[2008/01/20 22:23:23 | 000,235,064 | —- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 – C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_c9df7691\iaStorV.sys
[2008/01/20 22:23:23 | 000,235,064 | —- | M] (Intel Corporation) MD5=54155EA1B0DF185878E0FC9EC3AC3A14 – C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.0.6001.18000_none_af11527887c7fa8f\iaStorV.sys
[2006/11/02 05:51:25 | 000,232,040 | —- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 – C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2009/04/11 02:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\System32\netlogon.dll
[2009/04/11 02:28:23 | 000,592,896 | —- | M] (Microsoft Corporation) MD5=95DAECF0FB120A7B5DA679CC54E37DDE – C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6002.18005_none_ffa3304f351bb3a3\netlogon.dll
[2008/01/20 22:24:05 | 000,592,384 | —- | M] (Microsoft Corporation) MD5=A8EFC0B6E75B789F7FD3BA5025D4E37F – C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6001.18000_none_fdb7b74337f9e857\netlogon.dll
< MD5 for: NVSTOR.SYS >
[2006/11/02 05:50:13 | 000,040,040 | —- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC – C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
[2008/01/20 22:23:21 | 000,045,112 | —- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 – C:\Windows\System32\drivers\nvstor.sys
[2008/01/20 22:23:21 | 000,045,112 | —- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 – C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_31c3d71d\nvstor.sys
[2008/01/20 22:23:21 | 000,045,112 | —- | M] (NVIDIA Corporation) MD5=ABED0C09758D1D97DB0042DBB2688177 – C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.0.6001.18000_none_39dac327befea467\nvstor.sys
< MD5 for: SCECLI.DLL >
[2008/01/20 22:24:50 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=28B84EB538F7E8A0FE8B9299D591E0B9 – C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6001.18000_none_380de25bd91b6f12\scecli.dll
[2009/04/11 02:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\System32\scecli.dll
[2009/04/11 02:28:24 | 000,177,152 | —- | M] (Microsoft Corporation) MD5=8FC182167381E9915651267044105EE1 – C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6002.18005_none_39f95b67d63d3a5e\scecli.dll
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2009/04/11 02:27:47 | 000,241,128 | —- | M] (Microsoft Corporation)
Unable to obtain MD5 – C:\Windows\System32\rsaenh.dll
[2009/04/11 02:28:23 | 000,228,352 | —- | M] (Microsoft Corporation)
Unable to obtain MD5 – C:\Windows\System32\SLC.dll
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2008/01/20 23:14:18 | 016,846,848 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/20 23:14:08 | 000,106,496 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2008/01/20 23:14:18 | 000,020,480 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 06:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 06:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV
========== Alternate Data Streams ==========
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:5C321E34
< End of report >
OTL Extras logfile created on: 3/23/2010 7:52:39 AM - Run 1
OTL by OldTimer - Version 3.1.37.3 Folder = C:\Users\Nancy\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 39.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 72.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 222.62 Gb Total Space | 36.60 Gb Free Space | 16.44% Space Free | Partition Type: NTFS
Drive D: | 10.26 Gb Total Space | 1.77 Gb Free Space | 17.24% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 465.65 Gb Total Space | 141.75 Gb Free Space | 30.44% Space Free | Partition Type: FAT32
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: NANCY-PC
Current User Name: Nancy
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile – "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – C:\Program Files\VideoLAN\VLC\vlc.exe –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] – C:\PROGRA~1\MICROS~3\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] – C:\Program Files\VideoLAN\VLC\vlc.exe –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06CCEEEE-B2FD-4D9B-A6FB-3C399559174B}" = lport=139 | protocol=6 | dir=in | app=system |
"{2B1769B1-AB79-44CD-A789-48949BEC5ECC}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{2FC10A39-CB87-4B1E-9689-1544BFEB22A3}" = rport=138 | protocol=17 | dir=out | app=system |
"{3E7456EE-EBA6-4CC7-A9AA-B50E436ED698}" = rport=445 | protocol=6 | dir=out | app=system |
"{51AD8329-1341-4075-A468-C7C2A4D793CF}" = lport=63331 | protocol=6 | dir=in | name=windows live onecare |
"{74B487C2-C8C1-4A7F-8E46-F468556EE4AE}" = lport=63331 | protocol=6 | dir=in | name=windows live onecare |
"{7A701DE4-6E18-4966-84E2-6B91C1B84A5A}" = lport=63331 | protocol=6 | dir=in | name=windows live onecare |
"{83E1CD29-D477-442D-AF3B-29AAFE3E69A1}" = rport=139 | protocol=6 | dir=out | app=system |
"{95C46074-5F1F-4BA0-8A0B-963425C73422}" = rport=137 | protocol=17 | dir=out | app=system |
"{9959A1C8-999A-4AD6-B19A-D51EAADF29FE}" = lport=138 | protocol=17 | dir=in | app=system |
"{BB1CA5D3-B81B-4246-A9FC-5A0D5610AC7D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{DD41FA77-6448-419F-B4CE-D2928DDE6F64}" = lport=137 | protocol=17 | dir=in | app=system |
"{DE6ED714-1C19-4805-AB83-D3925B7E8C54}" = lport=445 | protocol=6 | dir=in | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03C13A78-FE89-4DD0-AE3D-F86B10E652FE}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{0491F73D-2C22-400C-97C0-E01D7508864B}" = protocol=17 | dir=in | app=c:\users\nancy\appdata\local\temp\lxdx\wireless\lxdxwpss.exe |
"{0E0B6797-8386-443B-A48B-9574320D844C}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxdxjswx.exe |
"{17FC5711-33FE-45F2-9E1F-125606D2669E}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpsapp.exe |
"{1955615E-9FC7-4FF6-B1DD-41BFBEFF6E30}" = protocol=6 | dir=in | app=c:\windows\system32\lxdxcfg.exe |
"{1E56F8C6-5ED9-4B53-B38A-CFB603568531}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxbvpswx.exe |
"{23313FA4-7520-4DD4-B1C2-50D65DA645FA}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxbvpswx.exe |
"{282D2C7C-C292-42CE-BDD2-9DED70030065}" = dir=in | app=c:\program files\hp\quickplay\qp.exe |
"{2E48C46D-6509-4A4A-B92B-53FD1A8509F8}" = protocol=17 | dir=in | app=c:\program files\lexmark fax solutions\faxctr.exe |
"{33EABA94-E5F5-4A0F-8223-47F3B0E63F4F}" = protocol=17 | dir=in | app=c:\windows\system32\lxdxcoms.exe |
"{35F583FD-05EE-4652-A375-70468EE2BF0E}" = protocol=6 | dir=in | app=c:\program files\lexmark 3600-4600 series\lxdxlscn.exe |
"{363CD74F-6396-4C01-889A-2CD4E767269A}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 11\programs\studio.exe |
"{382732BE-9E57-4736-A4BC-C7138E3E47E5}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxdxpswx.exe |
"{40A1F33F-A32F-465D-8BFC-79D8D3397A8D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{4818692E-EA24-4FD1-A157-4D943FC6A46E}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 11\programs\pmsregisterfile.exe |
"{48EC9754-16B9-469B-83D9-A47763880D57}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 11\programs\studio.exe |
"{517BAC0F-C48B-499B-BB22-A02DC8435799}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{56683BC5-72BE-41C3-A2C2-8B9FDD8B3F7B}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{58F79017-2DCC-4701-9B59-ABB641767F9F}" = protocol=6 | dir=in | app=c:\program files\lexmark fax solutions\faxctr.exe |
"{5E74A649-B32F-401C-8F36-104CA7D9DEB2}" = protocol=17 | dir=in | app=c:\users\nancy\appdata\local\temp\wzse0.tmp\symnrt.exe |
"{6409DDC3-E073-42C8-80D0-5B79D473C804}" = protocol=17 | dir=in | app=c:\program files\lexmark 3600-4600 series\frun.exe |
"{643B3E5E-603E-497B-9B44-090D9FBE6950}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 11\programs\rm.exe |
"{69A8F83C-02E9-43AA-AD9D-1CBFD0AD9F1E}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{6A5797E3-A2A1-443C-A1AF-5648FDF571A7}" = protocol=6 | dir=in | app=c:\users\nancy\appdata\local\temp\wzse0.tmp\symnrt.exe |
"{6E55FD26-DDFC-4DBF-80E7-953CCC5D383B}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 11\programs\umi.exe |
"{71D82733-CA8A-4680-9D0A-7D4DD16E7490}" = protocol=6 | dir=in | app=c:\program files\abbyy finereader 6.0 sprint\scan\scanman6.exe |
"{7465A45F-D620-4744-9474-BA7DCE93A0A6}" = protocol=17 | dir=in | app=c:\windows\system32\lxdxcfg.exe |
"{757B18CD-9374-4517-843C-9F1FFF59D196}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{7A105AE8-707E-4B4E-AA76-D7924E7CAB10}" = protocol=17 | dir=in | app=c:\program files\lexmark 3600-4600 series\lxdxmon.exe |
"{7DF3602D-E85E-4ADD-AB87-3ECE13BA819B}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{83776BE5-5AE7-4089-8937-5CEF599C8E04}" = protocol=6 | dir=in | app=c:\users\nancy\appdata\local\temp\lxdx\wireless\lxdxwpss.exe |
"{8979E202-3C51-46A1-B712-8F4560837B27}" = protocol=6 | dir=in | app=c:\windows\system32\lxdxcoms.exe |
"{8C18103B-5459-47BE-900C-4542CD5A480B}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{8D3F5540-FAD8-4B53-B6A5-228EA390B44C}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{94B22FC1-44D4-40C8-895F-59D5E10BC234}" = protocol=17 | dir=in | app=c:\program files\pinnacle\studio 11\programs\pmsregisterfile.exe |
"{9B03D075-AB17-4648-8386-B5E800F28EBC}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxdxtime.exe |
"{A11FB4F5-C2AF-4C0A-93E3-160957BDC3BA}" = protocol=17 | dir=in | app=c:\program files\lexmark 3600-4600 series\lxdxlscn.exe |
"{A258EB0F-CBF1-40F4-B4E2-2D3B46F27882}" = protocol=6 | dir=in | app=c:\windows\system32\lxbvcoms.exe |
"{A2E4EC87-9165-496A-8DC3-7F29FB888AE5}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{ABF85EDA-934F-4201-944A-775212FAB6E2}" = dir=in | app=c:\program files\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{AD7A971F-3FB1-4890-BB5C-4267890BBEEB}" = dir=in | app=c:\program files\hp\quickplay\qpservice.exe |
"{BF5C97BD-EE6A-41E9-92BA-4068F6FAE139}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxdxpswx.exe |
"{BFE59730-305B-4179-A2F8-13F8F6854D31}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxdxtime.exe |
"{C23565F8-7F24-4DD7-B87B-4983029AE704}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqsudi.exe |
"{C4A38379-8B2E-49B7-A024-B82F344BE82B}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{C77A2ABD-87BD-4DA3-88F1-ACF8D81E4C42}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\lxdxjswx.exe |
"{C93BD927-C5E9-4669-A7C0-BF5AC62745D8}" = protocol=6 | dir=in | app=c:\program files\lexmark 3600-4600 series\frun.exe |
"{CE743636-5AAD-4B8C-A753-7522D0BAA7F5}" = dir=in | app=c:\program files\hp\hp software update\hpwucli.exe |
"{CEE82779-14D6-4F9C-ABF5-D325FB79F2A4}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{D0D5DCD3-F8DF-4DFD-999C-34C5839F990A}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqpse.exe |
"{D49CF06A-D716-41E4-8CBE-D8DECCA7188A}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{DECC8F68-B4DB-4398-9F0A-8FA5E1619193}" = protocol=6 | dir=in | app=c:\program files\lexmark 3600-4600 series\lxdxamon.exe |
"{DF1F505B-A0F2-467E-9FD0-3C9BCF91AD5F}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 11\programs\rm.exe |
"{E0321F69-0217-46DB-99E1-85C01A57B4B3}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{E284054B-A59E-4599-B6ED-6C88EA7A6025}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{E66205C7-B72D-4FA3-81A2-5E04575AB04A}" = dir=in | app=c:\program files\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{EC499C7C-C4CA-4A6A-8C07-F770BA6C7F31}" = protocol=6 | dir=in | app=c:\program files\lexmark 3600-4600 series\lxdxmon.exe |
"{EC83CE5C-B0B9-492C-BA5F-3CDEE607B7DC}" = protocol=17 | dir=in | app=c:\program files\lexmark 3600-4600 series\lxdxamon.exe |
"{ECC05825-3FDB-4AA1-AFB2-9A9F1BDA9C0F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{F4CB0A0D-6305-4724-9C8F-A03C0E75D3FC}" = protocol=17 | dir=in | app=c:\windows\system32\lxbvcoms.exe |
"{F546E005-06AC-4A83-8E44-B11CF02FD59A}" = protocol=6 | dir=in | app=c:\program files\pinnacle\studio 11\programs\umi.exe |
"{FB5B2DFD-BBFA-422F-8D75-C87396196D9C}" = protocol=17 | dir=in | app=c:\program files\abbyy finereader 6.0 sprint\scan\scanman6.exe |
"{FF9CF77A-BCAB-4493-B13E-18EE562C1AAB}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{004B0DCB-4C60-465B-8F01-44B0A4111187}" = SlingPlayer
"{007B37D9-0C45-4202-834B-DD5FAAE99D63}" = ArcSoft Print Creations - Slimline Card
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{06E74B9B-631F-4378-BF3A-40D868450C05}" = HPPhotoSmartPhotobookHolidayPack1
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}" = HiJackThis
"{082702D5-5DD8-4600-BCE5-48B15174687F}" = HP Doc Viewer
"{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}" = WD Diagnostics
"{10A44844-4465-456E-8C97-80BDD4F68845}" = Windows Live ID Sign-in Assistant
"{110B1ADF-2EAE-4E8F-B501-D2A1E6D8ED9D}" = Studio 11
"{12A76360-388E-4B27-ABEB-D5FC5378DD2A}" = HPPhotoSmartPhotobookWebPack1
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}" = ESSPCD
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{172AEB5E-CBB2-4CDD-A4CF-388600825839}" = HPPhotoSmartPhotobookPlayfulPack1
"{17DFE37C-064E-4834-AD8F-A4B2B4DF68F8}" = Adobe Photoshop Elements 8.0
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}" = Adobe Shockwave Player
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{228C6B46-64E2-404E-898A-EF0830603EF4}" = HPNetworkAssistant
"{254C37AA-6B72-4300-84F6-98A82419187E}" = Hewlett-Packard Active Check for Health Check
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron JMB38X Flash Media Controller
"{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java™ 6 Update 18
"{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1" = ConvertHelper 2.2
"{280235E3-D1FB-408A-A1D5-C77BA584FBBA}" = BlService Web Update
"{2D03B6F8-DF36-4980-B7B6-5B93D5BA3A8F}" = essvatgt
"{30DAA715-5032-40F9-A0AE-95C9AEBB3E3F}" = HP QuickTouch 1.00 D2
"{31216452-5540-4C96-B754-94890A63D5AB}" = HP Help and Support
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.40 D1
"{35F83303-C0C0-46B7-B8A8-ADA7C2AC5645}" = muvee autoProducer 6.1
"{36BD88D7-8F1A-408E-8810-C267D4C3E524}" = BigOven
"{3851147E-5A91-4469-BA4D-13FFFCC8A920}" = Microsoft Windows OneCare Live v2.5.2900.20 Idcrl Install
"{38EAC694-0D90-445F-8C17-8B50ADFE3162}" = Slingbox Flash Tour
"{395A57A6-E0E1-C599-3A28-19A96682B4C6}" = Adobe Photoshop.com Inspiration Browser
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3AC54383-31D1-4907-961B-B12CBB1D0AE8}" = MobileMe Control Panel
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{42938595-0D83-404D-9F73-F8177FDD531A}" = ESScore
"{4537EA4B-F603-4181-89FB-2953FC695AB1}" = netbrdg
"{45A1BF92-700A-4408-B95E-79F462E3D67D}" = Studio 11 Bonus DVD
"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP QuickPlay 3.7
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B66BA95-9C4E-4C1C-BD01-E3A66113F0D5}" = Motorola Software Update
"{4C5D15D2-5351-4F05-A96E-56C20554F977}" = RollerCoaster Tycoon 2 Triple Thrill Pack
"{4CACFCD9-F71B-413A-8DF5-1A6419D5CDC6}" = Cards_Calendar_OrderGift_DoMorePlugout
"{5316DFC9-CE99-4458-9AB3-E8726EDE0210}" = skin0001
"{56589DFE-0C29-4DFE-8E42-887B771ECD23}" = ArcSoft Print Creations - Photo Book
"{5660022E-F3F2-4126-8CC5-9726C47150EB}" = Microsoft Windows Live OneCare Resources v2.5.2900.30
"{5DAA9C36-8F8B-462F-8CCA-E205BC3751F5}" = HP Active Support Library
"{605A4E39-613C-4A12-B56F-DEFBE6757237}" = SHASTA
"{608D2A3C-6889-4C11-9B54-A42F45ACBFDB}" = fflink
"{643EAE81-920C-4931-9F0B-4B343B225CA6}" = ESSBrwr
"{6513E869-647F-40FD-A55D-CFC92579B9BA}" = PX Engine
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = Hewlett-Packard Asset Agent for Health Check
"{67878E2E-9A34-4374-8F07-A40714B06296}" = BigOven Palm Companion
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B224EF2-1D45-4225-ABE0-E22F69062D81}" = BigOven
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{8943CE61-53BD-475E-90E1-A580869E98A2}" = staticcr
"{89E052B2-5CA5-4B7A-AF0C-28CA2836B030}" = HPPhotoSmartPhotobookModernPack1
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A502E38-29C9-49FA-BCFA-D727CA062589}" = ESSTOOLS
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8B21B9EF-6DBF-4F63-8CC7-9F6A56D1EE8E}" = GTOneCare
"{8C0DF485-DB3E-453C-BFB3-4C47E636ECF9}" = Serif WebPlus 10
"{8E92D746-CD9F-4B90-9668-42B74C14F765}" = ESSini
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{901B0409-6000-11D3-8CFE-0050048383C9}" = Microsoft Word 2002
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91517631-A9F3-4B7C-B482-43E0068FD55A}" = ESSgui
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9591C049-5CAE-4E89-A8D9-191F1899628B}" = ArcSoft Print Creations - Funhouse
"{98C4F0D9-3C09-4BD9-B835-29744B94931A}" = BigOven
"{999D43F4-9709-4887-9B1A-83EBB15A8370}" = VPRINTOL
"{9A68AF4D-B8B2-4356-8A57-D0FDE00A26DD}" = BigOven
"{A07840FC-CE63-4CB8-8030-EF4B9805925A}" = HPPhotoSmartDiscLabel_PaperLabel
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A5CE7175-080D-49AC-B5A3-E7E3502428F5}" = HP Wireless Assistant
"{A869A1DA-9571-4287-B170-4A7246994C84}" = Serif WebPlus 10 Resources
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AAD72731-807A-4B79-AE05-9190B7002B7B}" = ProtectSmart Hard Drive Protection
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.1
"{AC95121F-1576-45B8-82F7-3911D27882E6}" = HPPhotoSmartPhotobookScrapbookPack1
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{ADFB9653-F44C-460C-BF58-189CC552DFFE}" = hpphotosmartdisclabelplugin
"{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}" = ESSCDBK
"{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B0D83FCD-9D42-43ED-8315-250326AADA02}" = ArcSoft Print Creations - Scrapbook
"{B1102A25-3AA3-446B-AA0F-A699B07A02FD}" = Garmin USB Drivers
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B162D0A6-9A1D-4B7C-91A5-88FB48113C45}" = OfotoXMI
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B4B44FE7-41FF-4DAD-8C0A-E406DDA72992}" = CCScore
"{B4E91E95-A5BA-4E50-A465-DB7EFEB176E8}" = HPPhotoSmartDiscLabel_PrintOnDisc
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5
"{BB406CEB-6207-4512-9BB2-89950DC9D6B6}_is1" = ConvertXtoDVD 2.2.3.258h
"{C27C82E4-9C53-4D76-9ED3-A01A3D5EE679}" = HP Customer Experience Enhancements
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C8FD5BC1-92EF-4C15-92A9-F9AC7F61985F}" = HP Update
"{CA9ED5E4-1548-485B-A293-417840060158}" = ArcSoft Print Creations - Photo Calendar
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CAE8A0F1-B498-4C23-95FA-55047E730C8F}" = ArcSoft Print Creations
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CB54ABA8-D67F-47AD-A76C-2631BADA9FE5}" = Microsoft Works Suite Add-in for Microsoft Word
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D07A8E7E-D324-4945-BA8C-E532AD008FF3}" = Microsoft Windows OneCare Live v2.5.2900.30
"{D32470A1-B10C-4059-BA53-CF0486F68EBC}" = Kodak EasyShare software
"{D9C8DEF8-D07B-4164-BEF0-6D879A70C212}" = Microsoft Easy Assist v2
"{DB02F716-6275-42E9-B8D2-83BA2BF5100B}" = SFR
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DC2A9072-FB6E-4E0A-BC11-CDF1796A661A}" = BigOven
"{DD3C88A0-C53C-41D0-A21B-6D021981D23E}" = HPPhotoSmartDiscLabelContent1
"{DDC2B636-4F9F-4241-9B15-4DF12C97CF4A}" = Studio 11
"{DE1AF137-C455-494A-A817-EFE44BCCFDEE}" = Works Upgrade
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{E0267007-A6FD-4304-8131-346D1CEA6F82}" = BigOven
"{E0783143-EAE2-4047-A8D6-E155523C594C}" = Garmin WebUpdater
"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01
"{E26B83D1-C0BB-41BC-8F44-31D5354DD6AF}" = Microsoft Windows OneCare Live AntiSpyware and AntiVirus
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E6B4117F-AC59-4B13-9274-EB136E8897EE}" = ArcSoft Print Creations - Album Page
"{EF781A5C-58F5-4BFD-87F9-E4F14D382F25}" = Pinnacle Instant DVD Recorder
"{EFF87108-C9D0-43F1-BEE1-28DA87778F1A}" = Garmin Communicator Plugin
"{F04F9557-81A9-4293-BC49-2C216FA325A7}" = ArcSoft Print Creations - Greeting Card
"{f32502b5-5b64-4882-bf61-77f23edcac4f}" = HP Total Care Advisor
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F3B58D4E-7324-44E4-A6B3-65D2DB8D1FE9}" = Microsoft Protection Service
"{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}" = iTunes
"{F48098CD-2D66-4861-85EC-DC1D4D09D5F9}" = HP User Guides 0102
"{F4A2E7CC-60CA-4AFA-B67F-AD5E58173C3F}" = SKINXSDK
"{F636EE9A-F9EC-4606-BCFA-77DD0E210788}" = HPPhotoSmartDiscLabel_Tattoo
"{F9001C89-8036-4673-9577-E7CD8564807C}" = The Print Shop 20
"{F9593CFB-D836-49BC-BFF1-0E669A411D9F}" = WIRELESS
"{F9AEEC34-CF00-4CBD-9E36-DF9DC4002685}" = Yahoo! Desktop Login
"{FA3B34BE-4246-4062-90A3-34CBBEA12B72}" = HPTCSSetup
"{FA54AFB1-5745-4389-B8C1-9F7509672ED1}" = iPhone Configuration Utility
"{FA61D601-A0FC-48BD-AE7A-54946BCD7FB6}_is1" = BitPim 1.0.6
"{FCDB1C92-03C6-4C76-8625-371224256091}" = ESSPDock
"45A7283175C62FAC673F913C1F532C5361F97841" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (03/08/2007 2.2.1.0)
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop Elements 8.0" = Adobe Photoshop Elements 8.0
"AI RoboForm" = AI RoboForm (All Users)
"AIM_6" = AIM 6
"ArtistScope Plugin FX 424.2.0.0" = ArtistScope Plugin FX 42
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.10 (Unicode)
"AviSynth" = AviSynth 2.5
"Broadcom 802.11b Network Adapter" = Broadcom 802.11 Wireless LAN Adapter
"CCleaner" = CCleaner
"CleanUp!" = CleanUp!
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"Coupon Printer for Windows4.0" = Coupon Printer for Windows
"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5_is1" = DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.2.3.2
"HDMI" = Intel® Graphics Media Accelerator Driver
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Photosmart Essential" = HP Photosmart Essential 2.5
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"InstallShield_{004B0DCB-4C60-465B-8F01-44B0A4111187}" = SlingPlayer
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"LAME for Audacity_is1" = LAME v3.98.2 for Audacity
"Lexmark 3600-4600 Series" = Lexmark 3600-4600 Series
"Lexmark Fax Solutions" = Lexmark Fax Solutions
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Money2005b" = Microsoft Money 2005
"Mouse Manager 1.1.1_is1" = Mouse Manager Version 1.1.1
"Move Networks Player - IE" = Move Networks Media Player for Internet Explorer
"Mozilla Firefox (3.6)" = Mozilla Firefox (3.6)
"PhotoshopdotcomInspirationBrowser.4C35C4D325D350FE0114230CBADCA2DDD0AC8D25.
1" = Adobe Photoshop.com Inspiration Browser
"proDAD-Heroglyph-2.5" = proDAD Heroglyph 2.5
"proDAD-Vitascene-1.0" = proDAD Vitascene 1.0
"Product_Name" = Disney Vacation Planner
"screensaver" = screensaver
"Shockwave" = Shockwave
"SlingMedia.QPSlingPlayer_is1" = QuickPlay SlingPlayer 0.4.6
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"SpywareBlaster_is1" = SpywareBlaster 4.2
"Swag_Bucks Toolbar" = Swag_Bucks Toolbar
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Videora iPod classic Converter" = Videora iPod classic Converter 5.03
"Videora iPod Converter" = Videora iPod Converter 5
"ViewpointMediaPlayer" = Viewpoint Media Player
"VKC180 Photo Viewer_is1" = VKC180 Photo Viewer
"VLC media player" = VLC media player 0.9.8a
"wdcruise2_is1" = wdcruise2
"WebPost" = Microsoft Web Publishing Wizard 1.52
"WildTangent hp Master Uninstall" = My HP Games
"WinSS" = Windows Live OneCare
"Wootalyzer" = Wootalyzer!
"Works2005Setup" = Microsoft Works 2005 Setup Launcher
"YouTube Downloader App" = YouTube Downloader App 2.00
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent
"Vacation Countdown v1" = Vacation_Countdown
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 3/16/2010 6:32:44 AM | Computer Name = Nancy-PC | Source = WinMgmt | ID = 10
Description =
Error - 3/16/2010 10:34:42 AM | Computer Name = Nancy-PC | Source = Application Error | ID = 1000
Description = Faulting application firefox.exe, version 1.9.2.3667, time stamp 0x4b5102f0,
faulting module ntdll.dll, version 6.0.6002.18005, time stamp 0x49e03821, exception
code 0xc0000005, fault offset 0x00066592, process id 0x13f4, application start time
0x01cac4f42a915adc.
Error - 3/17/2010 5:32:05 AM | Computer Name = Nancy-PC | Source = WinMgmt | ID = 10
Description =
Error - 3/19/2010 5:41:00 AM | Computer Name = Nancy-PC | Source = WinMgmt | ID = 10
Description =
Error - 3/20/2010 4:56:18 AM | Computer Name = Nancy-PC | Source = WinMgmt | ID = 10
Description =
Error - 3/20/2010 5:56:13 PM | Computer Name = Nancy-PC | Source = Application Error | ID = 1000
Description = Faulting application Explorer.EXE, version 6.0.6002.18005, time stamp
0x49e01da5, faulting module msxml6.dll, version 6.20.5002.0, time stamp 0x4a81a047,
exception code 0xc0000005, fault offset 0x00002d51, process id 0x520, application
start time 0x01cac80afe0a4268.
Error - 3/21/2010 5:39:17 AM | Computer Name = Nancy-PC | Source = WinMgmt | ID = 10
Description =
Error - 3/21/2010 2:08:28 PM | Computer Name = Nancy-PC | Source = Application Error | ID = 1000
Description = Faulting application RegSeeker.exe, version 0.0.0.0, time stamp 0x2a425e19,
faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code
0xc0000005, fault offset 0xff493015, process id 0x1654, application start time 0x01cac91f0cbfdc70.
Error - 3/22/2010 6:36:07 AM | Computer Name = Nancy-PC | Source = WinMgmt | ID = 10
Description =
Error - 3/22/2010 12:25:33 PM | Computer Name = Nancy-PC | Source = Application Hang | ID = 1002
Description = The program msmoney.exe version 14.0.0.1105 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Problem Reports and Solutions control panel. Process
ID: 16b8 Start Time: 01cac9dc3d7a78a8 Termination Time: 22
[ Media Center Events ]
Error - 7/3/2009 5:28:38 PM | Computer Name = Nancy-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
[ System Events ]
Error - 3/23/2010 5:42:39 AM | Computer Name = Nancy-PC | Source = HTTP | ID = 15021
Description =
Error - 3/23/2010 5:42:39 AM | Computer Name = Nancy-PC | Source = HTTP | ID = 15021
Description =
Error - 3/23/2010 5:42:39 AM | Computer Name = Nancy-PC | Source = HTTP | ID = 15021
Description =
Error - 3/23/2010 5:42:39 AM | Computer Name = Nancy-PC | Source = HTTP | ID = 15021
Description =
Error - 3/23/2010 5:42:39 AM | Computer Name = Nancy-PC | Source = HTTP | ID = 15021
Description =
Error - 3/23/2010 5:43:57 AM | Computer Name = Nancy-PC | Source = Service Control Manager | ID = 7000
Description =
Error - 3/23/2010 5:43:57 AM | Computer Name = Nancy-PC | Source = Service Control Manager | ID = 7000
Description =
Error - 3/23/2010 5:43:57 AM | Computer Name = Nancy-PC | Source = Service Control Manager | ID = 7009
Description =
Error - 3/23/2010 5:43:57 AM | Computer Name = Nancy-PC | Source = Service Control Manager | ID = 7000
Description =
Error - 3/23/2010 5:44:44 AM | Computer Name = Nancy-PC | Source = Service Control Manager | ID = 7022
Description =
[ Windows OneCare Events ]
Error - 1/30/2010 8:12:56 PM | Computer Name = Nancy-PC | Source = WinSS | ID = 1011
Description = Could not update WMI to communicate to WSC.
Error - 3/15/2010 8:46:24 PM | Computer Name = Nancy-PC | Source = WinSS | ID = 1011
Description = Could not update WMI to communicate to WSC.
Error - 3/19/2010 7:13:32 PM | Computer Name = Nancy-PC | Source = WinSS | ID = 1011
Description = Could not update WMI to communicate to WSC.
< End of report >
![[external image: Posted Image]](http://i266.photobucket.com/albums/ii277/sUBs_/Gmer_initScan.gif){kind=link}