[Closed] search redirect

I have an infection on my laptop. Microsoft Security Essentials keeps popping up saying it detected W32.koobface.

I ran MBAM and it removed some of the infection. I also ran CCleaner.

I still can't update microsoft security essentials or MBAM. it seems like the virus is blocking it. I can't browse the web either. When I enter a URL, i get a page cannot be displayed error. The only site that works is the homepage on firefox and IE. If I try to search for a site through google or something, I get redirected continuously.

Here is the OTS Log:

OTS logfile created on: 3/28/2010 1:55:11 PM - Run 1
OTS by OldTimer - Version 3.1.27.1 Folder = C:\Users\Joe\Desktop
Ultimate Edition N (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 66.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465.66 Gb Total Space | 423.09 Gb Free Space | 90.86% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JOE-PC
Current User Name: Joe
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days

[Processes - Safe List]
ots.exe -> C:\Users\Joe\Desktop\OTS.exe -> [2010/03/28 13:51:54 | 000,637,440 | —- | M] (OldTimer Tools)
msseces.exe -> C:\Program Files\Microsoft Security Essentials\msseces.exe -> [2010/02/21 06:03:12 | 001,093,208 | —- | M] (Microsoft Corporation)
acrotray.exe -> C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe -> [2009/12/21 19:35:18 | 000,640,440 | —- | M] (Adobe Systems Inc.)
msmpeng.exe -> c:\Program Files\Microsoft Security Essentials\MsMpEng.exe -> [2009/12/09 19:02:38 | 000,017,904 | —- | M] (Microsoft Corporation)
onenotem.exe -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE -> [2009/11/03 23:32:18 | 000,225,680 | —- | M] (Microsoft Corporation)
explorer.exe -> C:\Windows\explorer.exe -> [2009/10/30 22:45:39 | 002,614,272 | —- | M] (Microsoft Corporation)
photoshopelementsfileagent.exe -> C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe -> [2009/10/09 06:45:56 | 000,169,312 | —- | M] (Adobe Systems Incorporated)
officesasscheduler.exe -> C:\Program Files\Microsoft Office\Office14\OfficeSAS\OfficeSASScheduler.exe -> [2009/09/26 06:00:52 | 000,202,648 | —- | M] (Microsoft Corporation)
taskhost.exe -> C:\Windows\System32\taskhost.exe -> [2009/07/13 18:14:42 | 000,049,152 | —- | M] (Microsoft Corporation)
spmgr.exe -> C:\Program Files\Sony\VAIO Power Management\SPMgr.exe -> [2007/02/02 17:25:20 | 000,923,768 | —- | M] (Sony Corporation)
e_fati8ja.exe -> C:\Windows\System32\spool\drivers\w32x86\3\E_FATI8JA.EXE -> [2007/01/16 06:00:00 | 000,177,664 | —- | M] (SEIKO EPSON CORPORATION)
vesmgr.exe -> C:\Program Files\Sony\VAIO Event Service\VESMgr.exe -> [2007/01/11 14:20:56 | 000,202,360 | —- | M] (Sony Corporation)
vesmgrsub.exe -> C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe -> [2007/01/11 14:20:56 | 000,100,472 | —- | M] (Sony Corporation)

[Modules - Safe List]
ots.exe -> C:\Users\Joe\Desktop\OTS.exe -> [2010/03/28 13:51:54 | 000,637,440 | —- | M] (OldTimer Tools)
sspicli.dll -> C:\Windows\System32\sspicli.dll -> [2009/07/13 18:16:15 | 000,099,840 | —- | M] (Microsoft Corporation)
sechost.dll -> C:\Windows\System32\sechost.dll -> [2009/07/13 18:16:13 | 000,092,160 | —- | M] (Microsoft Corporation)
samcli.dll -> C:\Windows\System32\samcli.dll -> [2009/07/13 18:16:13 | 000,050,688 | —- | M] (Microsoft Corporation)
profapi.dll -> C:\Windows\System32\profapi.dll -> [2009/07/13 18:16:12 | 000,031,744 | —- | M] (Microsoft Corporation)
netutils.dll -> C:\Windows\System32\netutils.dll -> [2009/07/13 18:16:03 | 000,022,016 | —- | M] (Microsoft Corporation)
kernelbase.dll -> C:\Windows\System32\KernelBase.dll -> [2009/07/13 18:15:35 | 000,288,256 | —- | M] (Microsoft Corporation)
dwmapi.dll -> C:\Windows\System32\dwmapi.dll -> [2009/07/13 18:15:13 | 000,067,072 | —- | M] (Microsoft Corporation)
devobj.dll -> C:\Windows\System32\devobj.dll -> [2009/07/13 18:15:11 | 000,064,512 | —- | M] (Microsoft Corporation)
cryptbase.dll -> C:\Windows\System32\cryptbase.dll -> [2009/07/13 18:15:07 | 000,036,864 | —- | M] (Microsoft Corporation)
cfgmgr32.dll -> C:\Windows\System32\cfgmgr32.dll -> [2009/07/13 18:15:02 | 000,145,920 | —- | M] (Microsoft Corporation)
comctl32.dll -> C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll -> [2009/07/13 18:03:50 | 001,680,896 | —- | M] (Microsoft Corporation)

[Win32 Services - Safe List]
(Adobe Version Cue CS4) Adobe Version Cue CS4 [On_Demand | Stopped] -> C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe -> [2010/03/06 21:55:56 | 000,288,112 | —- | M] (Adobe Systems Incorporated)
(FLEXnet Licensing Service) FLEXnet Licensing Service [On_Demand | Stopped] -> C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -> [2010/01/19 01:28:11 | 000,867,080 | —- | M] (Acresso Software Inc.)
(getPlusHelper) getPlus® Helper [On_Demand | Stopped] -> C:\Program Files\NOS\bin\getPlus_Helper.dll -> [2009/12/17 17:36:24 | 000,067,360 | —- | M] (NOS Microsystems Ltd.)
(MsMpSvc) Microsoft Antimalware Service [Auto | Running] -> c:\Program Files\Microsoft Security Essentials\MsMpEng.exe -> [2009/12/09 19:02:38 | 000,017,904 | —- | M] (Microsoft Corporation)
(Microsoft SharePoint Workspace Audit Service) Microsoft SharePoint Workspace Audit Service [On_Demand | Stopped] -> C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -> [2009/10/29 11:22:50 | 030,603,640 | —- | M] (Microsoft Corporation)
(AdobeActiveFileMonitor8.0) Adobe Active File Monitor V8 [Auto | Running] -> C:\Program Files\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe -> [2009/10/09 06:45:56 | 000,169,312 | —- | M] (Adobe Systems Incorporated)
(osppsvc) Office Software Protection Platform [On_Demand | Stopped] -> C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -> [2009/09/26 05:28:22 | 004,639,136 | —- | M] (Microsoft Corporation)
(WwanSvc) WWAN AutoConfig [On_Demand | Stopped] -> C:\Windows\System32\wwansvc.dll -> [2009/07/13 18:16:21 | 000,185,856 | —- | M] (Microsoft Corporation)
(WbioSrvc) Windows Biometric Service [On_Demand | Stopped] -> C:\Windows\System32\wbiosrvc.dll -> [2009/07/13 18:16:17 | 000,151,552 | —- | M] (Microsoft Corporation)
(cpqoko6) Drag Protocol PnP Web Disk [Auto | Running] -> C:\Windows\System32\erokosvc.dll -> [2009/07/13 18:16:17 | 000,121,856 | —- | M] (Autodesk)
(Power) Power [Auto | Running] -> C:\Windows\System32\umpo.dll -> [2009/07/13 18:16:17 | 000,119,808 | —- | M] (Microsoft Corporation)
(Themes) Themes [Auto | Running] -> C:\Windows\System32\themeservice.dll -> [2009/07/13 18:16:16 | 000,037,376 | —- | M] (Microsoft Corporation)
(sppuinotify) SPP Notification Service [On_Demand | Stopped] -> C:\Windows\System32\sppuinotify.dll -> [2009/07/13 18:16:15 | 000,053,760 | —- | M] (Microsoft Corporation)
(RpcEptMapper) RPC Endpoint Mapper [Unknown | Running] -> C:\Windows\System32\RpcEpMap.dll -> [2009/07/13 18:16:13 | 000,043,520 | —- | M] (Microsoft Corporation)
(SensrSvc) Adaptive Brightness [On_Demand | Stopped] -> C:\Windows\System32\sensrsvc.dll -> [2009/07/13 18:16:13 | 000,025,088 | —- | M] (Microsoft Corporation)
(PeerDistSvc) BranchCache [On_Demand | Stopped] -> C:\Windows\System32\PeerDistSvc.dll -> [2009/07/13 18:16:12 | 001,004,544 | —- | M] (Microsoft Corporation)
(PNRPsvc) Peer Name Resolution Protocol [On_Demand | Running] -> C:\Windows\System32\pnrpsvc.dll -> [2009/07/13 18:16:12 | 000,269,824 | —- | M] (Microsoft Corporation)
(p2pimsvc) Peer Networking Identity Manager [On_Demand | Running] -> C:\Windows\System32\pnrpsvc.dll -> [2009/07/13 18:16:12 | 000,269,824 | —- | M] (Microsoft Corporation)
(HomeGroupProvider) HomeGroup Provider [On_Demand | Running] -> C:\Windows\System32\provsvc.dll -> [2009/07/13 18:16:12 | 000,165,376 | —- | M] (Microsoft Corporation)
(PNRPAutoReg) PNRP Machine Name Publication Service [On_Demand | Stopped] -> C:\Windows\System32\pnrpauto.dll -> [2009/07/13 18:16:12 | 000,020,480 | —- | M] (Microsoft Corporation)
(WinDefend) Windows Defender [On_Demand | Stopped] -> C:\Program Files\Windows Defender\MpSvc.dll -> [2009/07/13 18:15:41 | 000,680,960 | —- | M] (Microsoft Corporation)
(HomeGroupListener) HomeGroup Listener [On_Demand | Running] -> C:\Windows\System32\ListSvc.dll -> [2009/07/13 18:15:36 | 000,194,560 | —- | M] (Microsoft Corporation)
(FontCache) Windows Font Cache Service [On_Demand | Stopped] -> C:\Windows\System32\FntCache.dll -> [2009/07/13 18:15:21 | 000,797,696 | —- | M] (Microsoft Corporation)
(Dhcp) DHCP Client [Auto | Running] -> C:\Windows\System32\dhcpcore.dll -> [2009/07/13 18:15:11 | 000,253,440 | —- | M] (Microsoft Corporation)
(defragsvc) Disk Defragmenter [On_Demand | Stopped] -> C:\Windows\System32\defragsvc.dll -> [2009/07/13 18:15:10 | 000,218,624 | —- | M] (Microsoft Corporation)
(BDESVC) BitLocker Drive Encryption Service [Unknown | Stopped] -> C:\Windows\System32\bdesvc.dll -> [2009/07/13 18:14:59 | 000,076,800 | —- | M] (Microsoft Corporation)
(AxInstSV) ActiveX Installer (AxInstSV) [On_Demand | Stopped] -> C:\Windows\System32\AxInstSv.dll -> [2009/07/13 18:14:58 | 000,088,064 | —- | M] (Microsoft Corporation)
(AppIDSvc) Application Identity [On_Demand | Stopped] -> C:\Windows\System32\appidsvc.dll -> [2009/07/13 18:14:53 | 000,027,648 | —- | M] (Microsoft Corporation)
(sppsvc) Software Protection [Auto | Stopped] -> C:\Windows\System32\sppsvc.exe -> [2009/07/13 18:14:29 | 003,179,520 | —- | M] (Microsoft Corporation)
(VAIO Event Service) VAIO Event Service [Auto | Running] -> C:\Program Files\Sony\VAIO Event Service\VESMgr.exe -> [2007/01/11 14:20:56 | 000,202,360 | —- | M] (Sony Corporation)

[Driver Services - Safe List]
(adfs) adfs [Kernel | Auto | Running] -> C:\Windows\System32\drivers\adfs.sys -> [2010/01/22 17:33:35 | 000,073,312 | —- | M] (Adobe Systems, Inc.)
(Mvc25U870_VID_1262&PID_25FD) Sony Visual Communication Camera VGP-VCC2 [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\Mvc25U870.sys -> [2010/01/10 14:46:55 | 000,055,680 | —- | M] (Micro Vision Co.,Ltd)
(MpFilter) Microsoft Malware Protection Driver [File_System | System | Running] -> C:\Windows\System32\drivers\MpFilter.sys -> [2009/12/02 16:23:40 | 000,149,040 | —- | M] (Microsoft Corporation)
(MpNWMon) Microsoft Malware Protection Network Driver [File_System | On_Demand | Running] -> C:\Windows\System32\drivers\MpNWMon.sys -> [2009/12/02 16:23:40 | 000,042,368 | —- | M] (Microsoft Corporation)
(cmdide) cmdide [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\cmdide.sys -> [2009/07/13 18:26:21 | 000,015,952 | —- | M] (CMD Technology, Inc.)
(adpahci) adpahci [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\adpahci.sys -> [2009/07/13 18:26:17 | 000,297,552 | —- | M] (Adaptec, Inc.)
(adp94xx) adp94xx [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\adp94xx.sys -> [2009/07/13 18:26:15 | 000,422,976 | —- | M] (Adaptec, Inc.)
(amdsbs) amdsbs [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\amdsbs.sys -> [2009/07/13 18:26:15 | 000,159,312 | —- | M] (AMD Technologies Inc.)
(adpu320) adpu320 [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\adpu320.sys -> [2009/07/13 18:26:15 | 000,146,512 | —- | M] (Adaptec, Inc.)
(arcsas) arcsas [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\arcsas.sys -> [2009/07/13 18:26:15 | 000,086,608 | —- | M] (Adaptec, Inc.)
(amdsata) amdsata [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\amdsata.sys -> [2009/07/13 18:26:15 | 000,079,952 | —- | M] (Advanced Micro Devices)
(arc) arc [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\arc.sys -> [2009/07/13 18:26:15 | 000,076,368 | —- | M] (Adaptec, Inc.)
(amdxata) amdxata [Kernel | Boot | Running] -> C:\Windows\system32\DRIVERS\amdxata.sys -> [2009/07/13 18:26:15 | 000,023,616 | —- | M] (Advanced Micro Devices)
(aliide) aliide [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\aliide.sys -> [2009/07/13 18:26:15 | 000,014,400 | —- | M] (Acer Laboratories Inc.)
(nvstor) nvstor [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\nvstor.sys -> [2009/07/13 18:20:44 | 000,142,416 | —- | M] (NVIDIA Corporation)
(nvraid) nvraid [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\nvraid.sys -> [2009/07/13 18:20:44 | 000,117,312 | —- | M] (NVIDIA Corporation)
(nfrd960) nfrd960 [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\nfrd960.sys -> [2009/07/13 18:20:44 | 000,044,624 | —- | M] (IBM Corporation)
(LSI_SAS) LSI_SAS [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\lsi_sas.sys -> [2009/07/13 18:20:37 | 000,089,168 | —- | M] (LSI Corporation)
(iaStorV) iaStorV [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\iaStorV.sys -> [2009/07/13 18:20:36 | 000,332,352 | —- | M] (Intel Corporation)
(MegaSR) MegaSR [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\MegaSR.sys -> [2009/07/13 18:20:36 | 000,235,584 | —- | M] (LSI Corporation, Inc.)
(KSecPkg) KSecPkg [Kernel | Boot | Running] -> C:\Windows\System32\Drivers\ksecpkg.sys -> [2009/07/13 18:20:36 | 000,133,200 | —- | M] (Microsoft Corporation)
(LSI_SCSI) LSI_SCSI [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\lsi_scsi.sys -> [2009/07/13 18:20:36 | 000,096,848 | —- | M] (LSI Corporation)
(LSI_FC) LSI_FC [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\lsi_fc.sys -> [2009/07/13 18:20:36 | 000,095,824 | —- | M] (LSI Corporation)
(LSI_SAS2) LSI_SAS2 [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\lsi_sas2.sys -> [2009/07/13 18:20:36 | 000,054,864 | —- | M] (LSI Corporation)
(iirsp) iirsp [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\iirsp.sys -> [2009/07/13 18:20:36 | 000,041,040 | —- | M] (Intel Corp./ICP vortex GmbH)
(megasas) megasas [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\megasas.sys -> [2009/07/13 18:20:36 | 000,030,800 | —- | M] (LSI Corporation)
(hwpolicy) Hardware Policy Driver [Kernel | Boot | Running] -> C:\Windows\System32\drivers\hwpolicy.sys -> [2009/07/13 18:20:36 | 000,013,904 | —- | M] (Microsoft Corporation)
(elxstor) elxstor [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\elxstor.sys -> [2009/07/13 18:20:28 | 000,453,712 | —- | M] (Emulex)
(aic78xx) aic78xx [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\djsvs.sys -> [2009/07/13 18:20:28 | 000,070,720 | —- | M] (Adaptec, Inc.)
(HpSAMD) HpSAMD [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\HpSAMD.sys -> [2009/07/13 18:20:28 | 000,067,152 | —- | M] (Hewlett-Packard Company)
(FsDepends) File System Dependency Minifilter [File_System | On_Demand | Stopped] -> C:\Windows\System32\drivers\fsdepends.sys -> [2009/07/13 18:20:28 | 000,046,160 | —- | M] (Microsoft Corporation)
(vsmraid) vsmraid [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\vsmraid.sys -> [2009/07/13 18:19:11 | 000,141,904 | —- | M] (VIA Technologies Inc.,Ltd)
(vmbus) Virtual Machine Bus [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\vmbus.sys -> [2009/07/13 18:19:10 | 000,175,824 | —- | M] (Microsoft Corporation)
(vhdmp) vhdmp [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\vhdmp.sys -> [2009/07/13 18:19:10 | 000,159,824 | —- | M] (Microsoft Corporation)
(storflt) Disk Virtual Machine Bus Acceleration Filter Driver [Kernel | Boot | Running] -> C:\Windows\system32\DRIVERS\vmstorfl.sys -> [2009/07/13 18:19:10 | 000,040,896 | —- | M] (Microsoft Corporation)
(vdrvroot) Microsoft Virtual Drive Enumerator Driver [Kernel | Boot | Running] -> C:\Windows\system32\DRIVERS\vdrvroot.sys -> [2009/07/13 18:19:10 | 000,032,832 | —- | M] (Microsoft Corporation)
(storvsc) storvsc [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\storvsc.sys -> [2009/07/13 18:19:10 | 000,028,224 | —- | M] (Microsoft Corporation)
(WIMMount) WIMMount [File_System | On_Demand | Stopped] -> C:\Windows\System32\drivers\wimmount.sys -> [2009/07/13 18:19:10 | 000,019,008 | —- | M] (Microsoft Corporation)
(viaide) viaide [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\viaide.sys -> [2009/07/13 18:19:10 | 000,016,976 | —- | M] (VIA Technologies, Inc.)
(ql2300) ql2300 [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\ql2300.sys -> [2009/07/13 18:19:04 | 001,383,488 | —- | M] (QLogic Corporation)
(rdyboost) ReadyBoost [Kernel | Boot | Running] -> C:\Windows\System32\drivers\rdyboost.sys -> [2009/07/13 18:19:04 | 000,173,648 | —- | M] (Microsoft Corporation)
(ql40xx) ql40xx [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\ql40xx.sys -> [2009/07/13 18:19:04 | 000,106,064 | —- | M] (QLogic Corporation)
(SiSRaid4) SiSRaid4 [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\sisraid4.sys -> [2009/07/13 18:19:04 | 000,077,888 | —- | M] (Silicon Integrated Systems)
(pcw) Performance Counters for Windows Driver [Kernel | Boot | Running] -> C:\Windows\System32\drivers\pcw.sys -> [2009/07/13 18:19:04 | 000,043,088 | —- | M] (Microsoft Corporation)
(SiSRaid2) SiSRaid2 [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\SiSRaid2.sys -> [2009/07/13 18:19:04 | 000,040,016 | —- | M] (Silicon Integrated Systems Corp.)
(stexstor) stexstor [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\stexstor.sys -> [2009/07/13 18:19:04 | 000,021,072 | —- | M] (Promise Technology)
(CNG) CNG [Kernel | Boot | Running] -> C:\Windows\System32\Drivers\cng.sys -> [2009/07/13 18:17:54 | 000,369,568 | —- | M] (Microsoft Corporation)
(apto6ko) Bridge Playlist Cabinet Display Management Wizard [Kernel | System | Running] -> C:\Windows\System32\drivers\imapioko.sys -> [2009/07/13 18:16:17 | 000,032,768 | —- | M] (Juniper Networks, Inc.)
(Brserid) Brother MFC Serial Port Interface Driver (WDM) [Kernel | On_Demand | Stopped] -> C:\Windows\System32\Drivers\Brserid.sys -> [2009/07/13 17:57:25 | 000,272,128 | —- | M] (Brother Industries Ltd.)
(rdpbus) Remote Desktop Device Redirector Bus Driver [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\rdpbus.sys -> [2009/07/13 17:02:41 | 000,018,944 | —- | M] (Microsoft Corporation)
(RDPREFMP) Reflector Display Driver used to gain access to graphics data [Kernel | System | Running] -> C:\Windows\System32\drivers\RDPREFMP.sys -> [2009/07/13 17:01:41 | 000,007,168 | —- | M] (Microsoft Corporation)
(RasAgileVpn) WAN Miniport (IKEv2) [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\agilevpn.sys -> [2009/07/13 16:55:00 | 000,049,152 | —- | M] (Microsoft Corporation)
(WfpLwf) WFP Lightweight Filter [Kernel | System | Running] -> C:\Windows\System32\drivers\wfplwf.sys -> [2009/07/13 16:53:51 | 000,009,728 | —- | M] (Microsoft Corporation)
(NdisCap) NDIS Capture LightWeight Filter [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\ndiscap.sys -> [2009/07/13 16:52:44 | 000,027,136 | —- | M] (Microsoft Corporation)
(vwifibus) Virtual WiFi Bus Driver [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\vwifibus.sys -> [2009/07/13 16:52:02 | 000,019,968 | —- | M] (Microsoft Corporation)
(1394ohci) 1394 OHCI Compliant Host Controller [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\1394ohci.sys -> [2009/07/13 16:52:00 | 000,163,328 | —- | M] (Microsoft Corporation)
(UmPass) Microsoft UMPass Driver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\umpass.sys -> [2009/07/13 16:51:35 | 000,008,192 | —- | M] (Microsoft Corporation)
(WinUsb) WinUSB Driver [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\winusb.sys -> [2009/07/13 16:51:11 | 000,034,944 | —- | M] (Microsoft Corporation)
(mshidkmdf) Pass-through HID to KMDF Filter Driver [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\mshidkmdf.sys -> [2009/07/13 16:51:08 | 000,004,096 | —- | M] (Microsoft Corporation)
(MTConfig) Microsoft Input Configuration Driver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\MTConfig.sys -> [2009/07/13 16:46:55 | 000,012,288 | —- | M] (Microsoft Corporation)
(CompositeBus) Composite Bus Enumerator Driver [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\CompositeBus.sys -> [2009/07/13 16:45:26 | 000,031,232 | —- | M] (Microsoft Corporation)
(AppID) AppID Driver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\drivers\appid.sys -> [2009/07/13 16:36:52 | 000,050,176 | —- | M] (Microsoft Corporation)
(scfilter) Smart card PnP Class Filter Driver [Kernel | Unknown | Stopped] -> C:\Windows\System32\drivers\scfilter.sys -> [2009/07/13 16:33:50 | 000,026,624 | —- | M] (Microsoft Corporation)
(s3cap) s3cap [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\vms3cap.sys -> [2009/07/13 16:28:47 | 000,005,632 | —- | M] (Microsoft Corporation)
(VMBusHID) VMBusHID [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\VMBusHID.sys -> [2009/07/13 16:28:45 | 000,017,920 | —- | M] (Microsoft Corporation)
(discache) System Attribute Cache [Kernel | System | Running] -> C:\Windows\System32\drivers\discache.sys -> [2009/07/13 16:24:05 | 000,032,256 | —- | M] (Microsoft Corporation)
(HidBatt) HID UPS Battery Driver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\HidBatt.sys -> [2009/07/13 16:19:21 | 000,021,504 | —- | M] (Microsoft Corporation)
(AcpiPmi) ACPI Power Meter Driver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\acpipmi.sys -> [2009/07/13 16:16:36 | 000,009,728 | —- | M] (Microsoft Corporation)
(AmdPPM) AMD Processor Driver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\amdppm.sys -> [2009/07/13 16:11:04 | 000,052,736 | —- | M] (Microsoft Corporation)
(hcw85cir) Hauppauge Consumer Infrared Receiver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\drivers\hcw85cir.sys -> [2009/07/13 15:54:14 | 000,026,624 | —- | M] (Hauppauge Computer Works, Inc.)
(BrUsbMdm) Brother MFC USB Fax Only Modem [Kernel | On_Demand | Stopped] -> C:\Windows\System32\Drivers\BrUsbMdm.sys -> [2009/07/13 15:53:33 | 000,012,160 | —- | M] (Brother Industries Ltd.)
(BrUsbSer) Brother MFC USB Serial WDM Driver [Kernel | On_Demand | Stopped] -> C:\Windows\System32\Drivers\BrUsbSer.sys -> [2009/07/13 15:53:33 | 000,011,904 | —- | M] (Brother Industries Ltd.)
(BrSerWdm) Brother WDM Serial driver [Kernel | On_Demand | Stopped] -> C:\Windows\System32\Drivers\BrSerWdm.sys -> [2009/07/13 15:53:32 | 000,062,336 | —- | M] (Brother Industries Ltd.)
(BrFiltLo) Brother USB Mass-Storage Lower Filter Driver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\BrFiltLo.sys -> [2009/07/13 15:53:28 | 000,013,568 | —- | M] (Brother Industries, Ltd.)
(BrFiltUp) Brother USB Mass-Storage Upper Filter Driver [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\BrFiltUp.sys -> [2009/07/13 15:53:28 | 000,005,248 | —- | M] (Brother Industries, Ltd.)
(SrvHsfV92) SrvHsfV92 [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\VSTDPV3.SYS -> [2009/07/13 15:13:46 | 000,980,992 | —- | M] (Conexant Systems, Inc.)
(SrvHsfWinac) SrvHsfWinac [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\VSTCNXT3.SYS -> [2009/07/13 15:13:45 | 000,661,504 | —- | M] (Conexant Systems, Inc.)
(SrvHsfHDA) SrvHsfHDA [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\VSTAZL3.SYS -> [2009/07/13 15:13:45 | 000,207,360 | —- | M] (Conexant Systems, Inc.)
(yukonw7) NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\yk62x86.sys -> [2009/07/13 15:02:53 | 000,311,296 | —- | M] (Marvell)
(netw5v32) Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\netw5v32.sys -> [2009/07/13 15:02:51 | 004,231,168 | —- | M] (Intel Corporation)
(b57nd60x) Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\b57nd60x.sys -> [2009/07/13 15:02:49 | 000,229,888 | —- | M] (Broadcom Corporation)
(ebdrv) Broadcom NetXtreme II 10 GigE VBD [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\evbdx.sys -> [2009/07/13 15:02:48 | 003,100,160 | —- | M] (Broadcom Corporation)
(b06bdrv) Broadcom NetXtreme II VBD [Kernel | On_Demand | Stopped] -> C:\Windows\system32\DRIVERS\bxvbdx.sys -> [2009/07/13 15:02:48 | 000,430,080 | —- | M] (Broadcom Corporation)
(igfx) igfx [Kernel | On_Demand | Stopped] -> C:\Windows\System32\drivers\igdkmd32.sys -> [2009/06/10 14:19:30 | 004,756,480 | —- | M] (Intel Corporation)
(SPI) Sony Programmable I/O Control Device [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\SonyPI.sys -> [2007/08/03 06:41:10 | 000,014,720 | —- | M] (Sony Corporation)
(SFEP) Sony Firmware Extension Parser [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\SFEP.sys -> [2007/08/03 06:36:10 | 000,009,344 | —- | M] (Sony Corporation)
(nvlddmkm) nvlddmkm [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\nvlddmkm.sys -> [2007/02/20 17:44:00 | 004,457,920 | —- | M] (NVIDIA Corporation)
(ti21sony) ti21sony [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\ti21sony.sys -> [2007/01/24 15:46:00 | 000,808,448 | —- | M] (Texas Instruments)
(DMICall) Sony DMI Call service [Kernel | System | Running] -> C:\Windows\System32\drivers\DMICall.sys -> [2006/10/18 12:56:30 | 000,010,216 | —- | M] (Sony Corporation)
(HSF_DPV) HSF_DPV [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\HSF_DPV.sys -> [2005/10/18 17:53:24 | 000,998,656 | —- | M] (Conexant Systems, Inc.)
(HSFHWAZL) HSFHWAZL [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\HSFHWAZL.sys -> [2005/10/18 17:52:34 | 000,202,112 | —- | M] (Conexant Systems, Inc.)
(winachsf) winachsf [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\HSF_CNXT.sys -> [2005/10/18 17:52:30 | 000,721,280 | —- | M] (Conexant Systems, Inc.)

[Registry - Safe List]
< Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> ->
< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> ->
HKEY_CURRENT_USER\: Main\\"Start Page Redirect Cache" -> http://www.msn.com/ ->
HKEY_CURRENT_USER\: Main\\"Start Page Redirect Cache AcceptLangs" -> en-us ->
HKEY_CURRENT_USER\: Main\\"Start Page Redirect Cache_TIMESTAMP" -> B2 D7 73 7E D4 C9 CA 01 [binary data] ->
HKEY_CURRENT_USER\: "ProxyEnable" -> 0 ->
HKEY_CURRENT_USER\: "ProxyOverride" -> *.local ->
< FireFox Settings [Prefs.js] > -> C:\Users\Joe\AppData\Roaming\Mozilla\FireFox\Profiles\klr8rizu.default\prefs.js ->
< FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions -> ->
HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components -> C:\Program Files\Mozilla Firefox\components [C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS] -> [2010/01/11 23:41:54 | 000,000,000 | —D | M]
HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins -> C:\Program Files\Mozilla Firefox\plugins [C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS] -> [2010/03/12 16:57:58 | 000,000,000 | —D | M]
< FireFox Extensions [User Folders] > ->
-> C:\Users\Joe\AppData\Roaming\Mozilla\Extensions -> [2010/01/10 14:53:23 | 000,000,000 | —D | M]
-> C:\Users\Joe\AppData\Roaming\Mozilla\Firefox\Profiles\klr8rizu.default\extensions -> [2010/01/10 14:53:23 | 000,000,000 | —D | M]
< FireFox Extensions [Program Folders] > ->
-> C:\Program Files\Mozilla Firefox\extensions -> [2010/01/10 14:53:13 | 000,000,000 | —D | M]
< HOSTS File > ([2009/06/10 14:39:37 | 000,000,824 | —- | M] - 21 lines) -> C:\Windows\System32\drivers\etc\hosts ->
Reset Hosts
< BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ ->
{074C1DC5-9320-4A9A-947D-C042949C6216} [HKLM] -> C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [ContributeBHO Class] -> [2008/09/10 02:07:52 | 000,136,560 | —- | M] ()
{72853161-30C5-4D22-B7F9-0BBC1D38A37E} [HKLM] -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [Groove GFS Browser Helper] -> [2009/10/29 11:22:48 | 004,150,160 | —- | M] (Microsoft Corporation)
{AE7CD045-E861-484f-8273-0445EE161910} [HKLM] -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [Adobe PDF Conversion Toolbar Helper] -> [2009/12/21 19:33:03 | 000,349,640 | —- | M] (Adobe Systems Incorporated)
{B4F3A835-0E21-4959-BA22-42B3008E02FF} [HKLM] -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [Office Document Cache Handler] -> [2009/11/03 22:12:00 | 000,556,432 | —- | M] (Microsoft Corporation)
{F4971EE7-DAA0-4053-9964-665D8EE6A077} [HKLM] -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [SmartSelect Class] -> [2009/12/21 19:33:03 | 000,349,640 | —- | M] (Adobe Systems Incorporated)
< Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar ->
"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [Adobe PDF] -> [2009/12/21 19:33:03 | 000,349,640 | —- | M] (Adobe Systems Incorporated)
"{517BDDE4-E3A7-4570-B21E-2B52B6139FC7}" [HKLM] -> C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [Contribute Toolbar] -> [2008/09/10 02:07:52 | 000,136,560 | —- | M] ()
< Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ ->
WebBrowser\\"{47833539-D0C5-4125-9FA8-0819E2EAAC93}" [HKLM] -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [Adobe PDF] -> [2009/12/21 19:33:03 | 000,349,640 | —- | M] (Adobe Systems Incorporated)
< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"" -> [] -> File not found
"Acrobat Assistant 8.0" -> C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe ["C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"] -> [2009/12/21 19:35:18 | 000,640,440 | —- | M] (Adobe Systems Inc.)
"Adobe Acrobat Speed Launcher" -> C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe ["C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"] -> [2009/12/22 02:26:01 | 000,038,840 | —- | M] (Adobe Systems Incorporated)
"Adobe_ID0ENQBO" -> C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE] -> [2008/08/15 06:46:20 | 000,378,224 | —- | M] (Adobe Systems Incorporated)
"AdobeCS4ServiceManager" -> C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe ["C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin] -> [2010/01/22 17:33:31 | 000,611,712 | —- | M] (Adobe Systems Incorporated)
"BCSSync" -> C:\Program Files\Microsoft Office\Office14\BCSSync.exe ["C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices] -> [2009/09/27 00:32:26 | 000,083,312 | —- | M] (Microsoft Corporation)
"MSSE" -> c:\Program Files\Microsoft Security Essentials\msseces.exe ["c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey] -> [2010/02/21 06:03:12 | 001,093,208 | —- | M] (Microsoft Corporation)
"NvCplDaemon" -> C:\Windows\System32\NvCpl.DLL [RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup] -> [2007/02/20 17:44:00 | 007,770,112 | —- | M] (NVIDIA Corporation)
"NvMediaCenter" -> C:\Windows\System32\NvMcTray.DLL [RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit] -> [2007/02/20 17:44:00 | 000,081,920 | —- | M] (NVIDIA Corporation)
< Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ->
"AdobeBridge" -> [] -> File not found
"EPSON Stylus Photo R800" -> C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATI8JA.EXE [C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATI8JA.EXE /FU "C:\Windows\TEMP\E_S4659.tmp" /EF "HKCU"] -> [2007/01/16 06:00:00 | 000,177,664 | —- | M] (SEIKO EPSON CORPORATION)
< Software Policy Settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer ->
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A89C4660-3DD9-44bc-8194-4824F1733289}
\Low Rights\ElevationPolicy\{A89C4660-3DD9-44bc-8194-4824F1733289}\\"AppName" -> [MyCamera.exe] -> File not found
\Low Rights\ElevationPolicy\{A89C4660-3DD9-44bc-8194-4824F1733289}\\"AppPath" -> C:\Program Files\Canon\CameraWindow\MyCamera [C:\Program Files\Canon\CameraWindow\MyCamera] -> [2010/02/09 10:33:35 | 000,000,000 | —D | M]
\Low Rights\ElevationPolicy\{A89C4660-3DD9-44bc-8194-4824F1733289}\\"Policy" -> [3] -> File not found
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F365CC6C-656A-4108-8CF0-16DF98696395}
\Low Rights\ElevationPolicy\{F365CC6C-656A-4108-8CF0-16DF98696395}\\"AppName" -> [ZoomBrowser.exe] -> File not found
\Low Rights\ElevationPolicy\{F365CC6C-656A-4108-8CF0-16DF98696395}\\"AppPath" -> C:\Program Files\Canon\ZoomBrowser EX\Program [C:\Program Files\Canon\ZoomBrowser EX\Program] -> [2010/02/09 10:33:54 | 000,000,000 | —D | M]
\Low Rights\ElevationPolicy\{F365CC6C-656A-4108-8CF0-16DF98696395}\\"Policy" -> [3] -> File not found
< CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
\\"ConsentPromptBehaviorAdmin" -> [0] -> File not found
\\"ConsentPromptBehaviorUser" -> [3] -> File not found
\\"EnableLUA" -> [0] -> File not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats
< Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ ->
Append Link Target to Existing PDF -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html] -> [2009/12/21 19:33:03 | 000,349,640 | —- | M] (Adobe Systems Incorporated)
Append to Existing PDF -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html] -> [2009/12/21 19:33:03 | 000,349,640 | —- | M] (Adobe Systems Incorporated)
Convert Link Target to Adobe PDF -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html] -> [2009/12/21 19:33:03 | 000,349,640 | —- | M] (Adobe Systems Incorporated)
Convert to Adobe PDF -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html] -> [2009/12/21 19:33:03 | 000,349,640 | —- | M] (Adobe Systems Incorporated)
E&xport to Microsoft Excel -> C:\Program Files\Microsoft Office\Office14\EXCEL.EXE [res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000] -> [2009/09/27 00:20:02 | 020,800,336 | —- | M] (Microsoft Corporation)
Se&nd to OneNote -> C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll [res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105] -> [2009/10/29 00:28:50 | 000,633,760 | —- | M] (Microsoft Corporation)
< Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ ->
{2670000A-7350-4f3c-8081-5663EE0C6C49}:{48E73304-E1D6-4330-914C-F5F514E3486C} [HKLM] -> C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll [Button: Send to OneNote] -> [2009/10/29 00:28:50 | 000,633,760 | —- | M] (Microsoft Corporation)
{2670000A-7350-4f3c-8081-5663EE0C6C49}:{48E73304-E1D6-4330-914C-F5F514E3486C} [HKLM] -> C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll [Menu: Se&nd to OneNote] -> [2009/10/29 00:28:50 | 000,633,760 | —- | M] (Microsoft Corporation)
{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}:{FFFDC614-B694-4AE6-AB38-5D6374584B52} [HKLM] -> C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll [Button: OneNote Lin&ked Notes] -> [2009/10/29 00:28:48 | 000,493,984 | —- | M] (Microsoft Corporation)
{789FE86F-6FC4-46A1-9849-EDE0DB0C95CA}:{FFFDC614-B694-4AE6-AB38-5D6374584B52} [HKLM] -> C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll [Menu: OneNote Lin&ked Notes] -> [2009/10/29 00:28:48 | 000,493,984 | —- | M] (Microsoft Corporation)
< Internet Explorer Plugins [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\ ->
< Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix
"" -> http://
< Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. ->
< Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ ->
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. ->
< Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ ->
{0E8D0700-75DF-11D3-8B4A-0008C7450C4A} [HKLM] -> http://www.caminova.net/ja/downloads/getmodule.aspx?lang=ja [DjVuCtl Class] ->
{4871A87A-BFDD-4106-8153-FFDE2BAC2967} [HKLM] -> http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.5.0.cab [DLM Control] ->
{E2883E8F-472F-4FB0-9522-AC9BF37916A7} [HKLM] -> http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab [get_atlcom Class] ->
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ ->
DhcpNameServer -> [removed] [removed] ->
< Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ ->
{1DA9469F-5E37-4023-AE55-91CCF1E2824B}\\DhcpNameServer -> [removed] [removed] (Intel® PRO/Wireless 3945ABG Network Connection) ->
< Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon ->
*Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell ->
explorer.exe -> C:\Windows\explorer.exe -> [2009/10/30 22:45:39 | 002,614,272 | —- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
*VMApplet* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet ->
SystemPropertiesPerformance.exe -> C:\Windows\System32\SystemPropertiesPerformance.exe -> [2009/07/13 18:14:42 | 000,081,920 | —- | M] (Microsoft Corporation)
/pagefile -> -> File not found
*MultiFile Done* -> ->
< Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ ->
VESWinlogon -> C:\Windows\System32\VESWinlogon.dll -> [2007/01/11 14:20:58 | 000,098,304 | —- | M] (Sony Corporation)
< SSODL [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad ->
"{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" [HKLM] -> Reg Error: Key error. [WebCheck] -> File not found
< ShellExecuteHooks [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks ->
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}" [HKLM] -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [Groove GFS Stub Execution Hook] -> [2009/10/29 11:22:48 | 004,150,160 | —- | M] (Microsoft Corporation)
< LSA Security Packages [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Security Packages ->
*LSA Security Packages* -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\\Security Packages ->
pku2u -> C:\Windows\System32\pku2u.dll -> [2009/07/13 18:16:12 | 000,186,880 | —- | M] (Microsoft Corporation)
*MultiFile Done* -> ->
< SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot ->
< CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom ->
"AutoRun" -> 1 ->
"DisplayName" -> CD-ROM Driver ->
"ImagePath" -> [system32\DRIVERS\cdrom.sys] -> File not found
< Drives with AutoRun files > -> ->
C:\autoexec.bat [REM Dummy file for NTVDM | ] -> C:\autoexec.bat [ NTFS ] -> [2009/06/10 14:42:20 | 000,000,024 | —- | M] ()
< MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 ->
< Registry Shell Spawning - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command ->
comfile [open] -> "%1" %* ->
exefile [open] -> "%1" %* ->
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\ ->
.com [@ = comfile] -> "%1" %* ->
.exe [@ = exefile] -> "%1" %* ->

[Registry - Additional Scans - Safe List]
< File Associations - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\ ->
.bat [@ = batfile] -> "%1" %* ->
.cmd [@ = cmdfile] -> "%1" %* ->
.com [@ = comfile] -> "%1" %* ->
.cpl [@ = cplfile] -> C:\Windows\System32\control.exe -> [2009/07/13 18:14:15 | 000,113,152 | —- | M] (Microsoft Corporation)
.exe [@ = exefile] -> "%1" %* ->
.hlp [@ = hlpfile] -> C:\Windows\winhlp32.exe -> [2009/07/13 18:14:45 | 000,009,728 | —- | M] (Microsoft Corporation)
.pif [@ = piffile] -> "%1" %* ->
.scr [@ = scrfile] -> "%1" /S ->
< File Associations - Select to Repair > -> HKEY_CURRENT_USER\SOFTWARE\Classes\\ ->
.html [@ = FirefoxHTML] -> C:\Program Files\Mozilla Firefox\firefox.exe -> [2009/12/22 10:41:29 | 000,908,248 | —- | M] (Mozilla Corporation)
< Protocol Filters [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\ ->
text/xml:{807573E5-5146-11D5-A672-00B0D022E945} [HKLM] -> C:\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL[Microsoft Office InfoPath XML Mime Filter] -> [2009/09/27 00:54:44 | 000,049,008 | —- | M] (Microsoft Corporation)
< Protocol Handlers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ ->
ms-help:{314111c7-a502-11d2-bbca-00c04f8ec294} [HKLM] -> C:\Program Files\Common Files\microsoft shared\Help\hxds.dll[HxProtocol Class] -> [2009/05/23 04:58:36 | 000,877,368 | —- | M] (Microsoft Corporation)
< Security Center Settings > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
\\"cval" -> [1] -> File not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\ -> ->
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc
\Svc\\"VistaSp1" -> Reg Error: Unknown registry data type [Reg Error: Unknown registry data type] -> File not found
\Svc\\"AntiVirusOverride" -> [0] -> File not found
\Svc\\"AntiSpywareOverride" -> [0] -> File not found
\Svc\\"FirewallOverride" -> [0] -> File not found
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol\ -> ->
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
\\"DisableNotifications" -> [0] -> File not found
\\"EnableFirewall" -> [1] -> File not found
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging\ -> ->
< Winsock2 Catalogs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\ ->
NameSpace_Catalog5\Catalog_Entries\000000000008 [mdnsNSP] -> C:\Program Files\Bonjour\mdnsNSP.dll -> [2008/12/12 12:11:44 | 000,147,456 | —- | M] (Apple Inc.)
< Default Protocols [HKEY_LOCAL_MACHINE\] - Select to Repair > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults ->
ldap -> 4 = Restricted sites (Not a Default Protocol) ->
news -> 4 = Restricted sites (Not a Default Protocol) ->
nntp -> 4 = Restricted sites (Not a Default Protocol) ->
oecmd -> 4 = Restricted sites (Not a Default Protocol) ->
snews -> 4 = Restricted sites (Not a Default Protocol) ->
< Uninstall List [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ ->
{00ADFB20-AE75-46F4-AD2C-F48B15AC3100} -> Adobe Color NA Recommended Settings CS4
{05308C4E-7285-4066-BAE3-6B50DA6ED755} -> Adobe Update Manager CS4
{054EFA56-2AC1-48F4-A883-0AB89874B972} -> Adobe Extension Manager CS4
{07287123-B8AC-41CE-8346-3D777245C35B} -> Bonjour
{098727E1-775A-4450-B573-3F441F1CA243} -> kuler
{0D6013AB-A0C7-41DC-973C-E93129C9A29F} -> Adobe Color JA Extra Settings CS4
{0F723FC1-7606-4867-866C-CE80AD292DAF} -> Adobe CSI CS4
{105CFC7C-6992-11D5-BD9D-000102C10FD8} -> LizardTech DjVu Control
{1451DE6B-ABE1-4F62-BE9A-B363A17588A2} -> QuickTime
{14F70205-1940-4000-88C7-BE799A6B2CAD} -> Adobe Soundbooth CS4
{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B} -> Adobe SGM CS4
{1618734A-3957-4ADD-8199-F973763109A8} -> Adobe Anchor Service CS4
{16E16F01-2E2D-4248-A42F-76261C147B6C} -> Adobe Drive CS4
{16E6D2C1-7C90-4309-8EC4-D2212690AAA4} -> AdobeColorCommonSetRGB
{17DFE37C-064E-4834-AD8F-A4B2B4DF68F8} -> Adobe Photoshop Elements 8.0
{1B7C06E1-4888-47A6-992A-0990B9683486} -> Adobe Version Cue CS4 Server
{1DCA3EAA-6EB5-4563-A970-EA14D75037BA} -> Adobe InDesign CS4
{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1} -> Adobe InDesign CS4 Icon Handler
{20140000-0011-0000-0000-0000000FF1CE} -> Microsoft Office Professional Plus 2010 (Beta)
{20140000-0015-0409-0000-0000000FF1CE} -> Microsoft Office Access MUI (English) 2010 (Beta)
{20140000-0016-0409-0000-0000000FF1CE} -> Microsoft Office Excel MUI (English) 2010 (Beta)
{20140000-0018-0409-0000-0000000FF1CE} -> Microsoft Office PowerPoint MUI (English) 2010 (Beta)
{20140000-0019-0409-0000-0000000FF1CE} -> Microsoft Office Publisher MUI (English) 2010 (Beta)
{20140000-001A-0409-0000-0000000FF1CE} -> Microsoft Office Outlook MUI (English) 2010 (Beta)
{20140000-001B-0409-0000-0000000FF1CE} -> Microsoft Office Word MUI (English) 2010 (Beta)
{20140000-001F-0409-0000-0000000FF1CE} -> Microsoft Office Proof (English) 2010 (Beta)
{20140000-001F-040C-0000-0000000FF1CE} -> Microsoft Office Proof (French) 2010 (Beta)
{20140000-001F-0C0A-0000-0000000FF1CE} -> Microsoft Office Proof (Spanish) 2010 (Beta)
{20140000-002C-0409-0000-0000000FF1CE} -> Microsoft Office Proofing (English) 2010 (Beta)
{20140000-003B-0000-0000-0000000FF1CE} -> Microsoft Office Project Professional 2010 (Beta)
{20140000-0044-0409-0000-0000000FF1CE} -> Microsoft Office InfoPath MUI (English) 2010 (Beta)
{20140000-006E-0409-0000-0000000FF1CE} -> Microsoft Office Shared MUI (English) 2010 (Beta)
{20140000-00A1-0409-0000-0000000FF1CE} -> Microsoft Office OneNote MUI (English) 2010 (Beta)
{20140000-00B4-0409-0000-0000000FF1CE} -> Microsoft Office Project MUI (English) 2010 (Beta)
{20140000-00BA-0409-0000-0000000FF1CE} -> Microsoft Office Groove MUI (English) 2010 (Beta)
{20140000-0115-0409-0000-0000000FF1CE} -> Microsoft Office Shared Setup Metadata MUI (English) 2010 (Beta)
{20140000-0117-0409-0000-0000000FF1CE} -> Microsoft Office Access Setup Metadata MUI (English) 2010 (Beta)
{20140000-011A-0000-0000-0000000FF1CE} -> Microsoft Office Send-a-Smile
{2168245A-B5AD-40D8-A641-48E3E070B5B6} -> Adobe Flash CS4 STI-en
{25140000-0048-0409-0000-0000000FF1CE} -> Microsoft Outlook Hotmail Connector 32-bit (Beta)
{297190A1-4B0D-4CD6-8B9F-3907F15C3FD8} -> Adobe CS4 American English Speech Analysis Models
{2BAF2B96-7560-48B4-87D4-10178DDBE217} -> Adobe InDesign CS4 Application Feature Set Files (Roman)
{30C8AA56-4088-426F-91D1-0EDFD3A25678} -> Adobe Dreamweaver CS4
{35D94F92-1D3A-43C5-8605-EA268B1A7BD9} -> PDF Settings CS4
{39F6E2B4-CFE8-C30A-66E8-489651F0F34C} -> Adobe Media Player
{3A4E8896-C2E7-4084-A4A4-B8FD1894E739} -> Adobe XMP Panels CS4
{3D2C9DE6-9ADE-4252-A241-E43723B0CE02} -> Adobe Color - Photoshop Specific CS4
{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF} -> Adobe WinSoft Linguistics Plugin
{3FA365DF-2D68-45ED-8F83-8C8A33E65143} -> Apple Application Support
{428FDF9F-E010-4C4C-A8BB-156960AFCA1C} -> Adobe Fireworks CS4
{43509E18-076E-40FE-AF38-CA5ED400A5A9} -> Pixel Bender Toolkit
{44E240EC-2224-4078-A88B-2CEE0D3016EF} -> Adobe After Effects CS4 Presets
{45EC816C-0771-4C14-AE6D-72D1B578F4C8} -> Adobe After Effects CS4
{4943EFF5-229F-435D-BEA9-BE3CAEA783A7} -> Adobe Service Manager Extension
{4A52555C-032A-4083-BDD9-6A85ABFB39A8} -> Adobe SING CS4
{52232EF4-CC12-4C21-ABCF-ADB79618302D} -> Adobe Soundbooth CS4 Codecs
{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4} -> Adobe Color EU Extra Settings CS4
{561968FD-56A1-49FD-9ED0-F55482C7C5BC} -> Adobe Media Encoder CS4 Exporter
{59452470-A902-477F-9338-9B88101681BD} -> Setting Utility Series
{5EAD5443-7194-46CC-A055-428E6ABB1BAF} -> Adobe Encore CS4
{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D} -> Adobe Dynamiclink Support
{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C} -> Adobe Creative Suite 4 Master Collection
{63C24A08-70F3-4C8E-B9FB-9F21A903801D} -> Adobe Color Video Profiles CS CS4
{63E5CDBF-8214-4F03-84F8-CD3CE48639AD} -> Adobe Photoshop CS4 Support
{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E} -> Adobe After Effects CS4 Third Party Content
{67F0E67A-8E93-4C2C-B29D-47C48262738A} -> Adobe Device Central CS4
{68243FF8-83CA-466B-B2B8-9F99DA5479C4} -> AdobeColorCommonSetCMYK
{6956856F-B6B3-4BE0-BA0B-8F495BE32033} -> Apple Software Update
{7406DF60-016D-476B-A2C7-55D997592047} -> Adobe OnLocation CS4
{793D1D88-6141-43DE-BE58-59BCE31B4090} -> Adobe Flash CS4 Extension - Flash Lite STI en
{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C} -> Adobe InDesign CS4 Common Base Files
{8186FF34-D389-4B7E-9A2F-C197585BCFBD} -> Adobe Media Encoder CS4 Importer
{81CB77FF-9789-4337-A46E-185F7876AC40} -> Adobe Photoshop Lightroom 2.6
{820D3F45-F6EE-4AAF-81EF-CE21FF21D230} -> Adobe Type Support CS4
{83877DB1-8B77-45BC-AB43-2BAC22E093E0} -> Adobe Bridge CS4
{842B4B72-9E8F-4962-B3C1-1C422A5C4434} -> Suite Shared Configuration CS4
{87532CAB-7932-4F84-8937-823337622807} -> Adobe Illustrator CS4
{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} -> Microsoft Silverlight
{931AB7EA-3656-4BB7-864D-022B09E3DD67} -> Adobe Linguistics CS4
{94D398EB-D2FD-4FD1-B8C4-592635E8A191} -> Adobe CMaps CS4
{9E319E96-ED8E-4B01-9775-C521A1869A25} -> VAIO Power Management
{A2BCA9F1-566C-4805-97D1-7FDC93386723} -> Adobe AIR
{A462213D-EED4-42C2-9A60-7BDD4D4B0B17} -> SigmaTel Audio
{A6EC82A0-1414-475D-8AFD-469089F3080D} -> Adobe Contribute CS4
{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE} -> Apple Mobile Device Support
{AC76BA86-1033-F400-7760-000000000004} -> Adobe Acrobat 9 Pro - English, Français, Deutsch
{AC76BA86-1033-F400-7760-000000000004}_931 -> Adobe Acrobat 9.3.1 - CPSID_50570
{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15} -> Adobe MotionPicture Color Files CS4
{B15381DD-FF97-4FCD-A881-ED4DB0975500} -> Adobe Color Video Profiles AE CS4
{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7} -> Adobe Premiere Pro CS4 Functional Content
{B29AD377-CC12-490A-A480-1452337C618D} -> Connect
{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494} -> Adobe Photoshop CS4
{B9F4561A-924D-4510-A85A-BB0960C338CB} -> Adobe Asset Services CS4
{BB4E33EC-8181-4685-96F7-8554293DEC6A} -> Adobe Output Module
{BE9CEAAA-F069-4331-BF2F-8D350F6504F4} -> Adobe Media Encoder CS4 Additional Exporter
{C52E3EC1-048C-45E1-8D53-10B0C6509683} -> Adobe Default Language CS4
{C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B} -> Acrobat.com
{C938BE91-3BB5-4B84-9EF6-88F0505D0038} -> Adobe Premiere Pro CS4 Third Party Content
{CC75AB5C-2110-4A7F-AF52-708680D22FE8} -> Photoshop Camera Raw
{D0DDF9EE-C67F-368B-EB42-ECB44FD7556D} -> Adobe Photoshop.com Inspiration Browser
{D16A31F9-276D-4968-A753-FFEAC56995D0} -> Epson Print CD
{D499F8DE-3F31-4900-9157-61061613704B} -> Adobe Premiere Pro CS4
{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E} -> Adobe Media Encoder CS4
{E2883E8F-472F-4fb0-9522-AC9BF37916A7} -> Adobe Download Manager
{E590FD1C-E8C6-4D2E-8CA9-77B403F7EE01} -> Microsoft Antimalware
{E8EE9410-8AC4-4F43-A626-DDECA75C79F3} -> Adobe Setup
{EE353798-E875-42E0-B58D-7E6696182EA8} -> Adobe Media Encoder CS4 Dolby
{EF3D45BB-2260-4008-88EA-492E7744A9DF} -> Sony Utilities DLL
{EF98A02A-1748-4762-9B7D-5ED1600520D5} -> Microsoft Security Essentials
{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B} -> VAIO Event Service
{F0E64E2E-3A60-40D8-A55D-92F6831875DA} -> Adobe Search for Help
{F439D7AF-03F3-4F8E-AEC4-571BFE977C61} -> iTunes
{F570A6CC-53ED-4AA9-8B08-551CD3E38D8B} ->
{F6E99614-F042-4459-82B7-8B38B2601356} -> Adobe Flash CS4
{F8EF2B3F-C345-4F20-8FE4-791A20333CD5} -> Adobe ExtendScript Toolkit CS4
{F93C84A6-0DC6-42AF-89FA-776F7C377353} -> Adobe PDF Library Files CS4
{FB2A5FCC-B81B-48C2-A009-7804694D83E9} -> Adobe Encore CS4 Codecs
{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794} -> Adobe Fonts All
Adobe AIR -> Adobe AIR
Adobe Flash Player ActiveX -> Adobe Flash Player 10 ActiveX
Adobe Flash Player Plugin -> Adobe Flash Player 10 Plugin
Adobe Photoshop Elements 8.0 -> Adobe Photoshop Elements 8.0
Adobe_b2d6abde968e6f277ddbfd501383e02 -> Adobe Creative Suite 4 Master Collection
CameraWindowDVC6 -> Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
CameraWindowLauncher -> Canon Utilities CameraWindow
CANON iMAGE GATEWAY Task -> CANON iMAGE GATEWAY Task for ZoomBrowser EX
Canon Internet Library for ZoomBrowser EX -> Canon Internet Library for ZoomBrowser EX
Canon MOV Decoder -> Canon MOV Decoder
Canon MOV Encoder -> Canon MOV Encoder
CCleaner -> CCleaner
CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_20030003 -> HDAUDIO SoftV92 Data Fax Modem with SmartCP
com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 -> Adobe Media Player
com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 -> Acrobat.com
DjVu -> LizardTech DjVu Control (autoinstall)
DPP -> Canon Utilities Digital Photo Professional 3.6
EOS Utility -> Canon Utilities EOS Utility
EPSON Printer and Utilities -> EPSON Printer Software
Foxit Reader -> Foxit Reader
Malwarebytes' Anti-Malware_is1 -> Malwarebytes' Anti-Malware
Microsoft Security Essentials -> Microsoft Security Essentials
MovieEditTask -> Canon MovieEdit Task for ZoomBrowser EX
Mozilla Firefox (3.5.7) -> Mozilla Firefox (3.5.7)
MyCamera -> Canon Utilities MyCamera
NVIDIA Drivers -> NVIDIA Drivers
Office14.PRJPRO -> Microsoft Project Professional 2010
Office14.PROPLUS -> Microsoft Office Professional Plus 2010
Original Data Security Tools -> Canon Utilities Original Data Security Tools
PhotoshopdotcomInspirationBrowser.4C35C4D325D350FE0114230CBADCA2DDD0AC8D25.1 -> Adobe Photoshop.com Inspiration Browser
PhotoStitch -> Canon Utilities PhotoStitch
Picture Style Editor -> Canon Utilities Picture Style Editor
RemoteCaptureTask -> Canon Utilities RemoteCapture Task for ZoomBrowser EX
WFTK -> Canon Utilities WFT-E1/E2/E3/E4 Utility
ZoomBrowser EX -> Canon Utilities ZoomBrowser EX
ZoomBrowser EX Memory Card Utility -> Canon ZoomBrowser EX Memory Card Utility
< EventViewer Logs - Last 10 Errors > -> Event Information -> Description
Application [ Error ] 2/15/2010 3:12:09 PM Computer Name = Joe-PC | Source = SideBySide | ID = 16842815 -> Description = Activation context generation failed for "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
Application [ Error ] 2/15/2010 4:27:25 PM Computer Name = Joe-PC | Source = SideBySide | ID = 16842815 -> Description = Activation context generation failed for "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
Application [ Error ] 2/17/2010 4:11:18 PM Computer Name = Joe-PC | Source = SideBySide | ID = 16842815 -> Description = Activation context generation failed for "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
Application [ Error ] 2/19/2010 1:43:59 PM Computer Name = Joe-PC | Source = SideBySide | ID = 16842815 -> Description = Activation context generation failed for "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
Application [ Error ] 3/6/2010 11:15:47 PM Computer Name = Joe-PC | Source = SideBySide | ID = 16842815 -> Description = Activation context generation failed for "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
Application [ Error ] 3/12/2010 7:57:12 PM Computer Name = Joe-PC | Source = VSS | ID = 8194 -> Description =
Application [ Error ] 3/17/2010 12:34:37 AM Computer Name = Joe-PC | Source = Application Error | ID = 1000 -> Description = Faulting application name: iexplore.exe, version: 8.0.7600.16385, time stamp: 0x4a5bc69e Faulting module name: mshtml.dll, version: 8.0.7600.16490, time stamp: 0x4b2c9557 Exception code: 0xc0000005 Fault offset: 0x002447a6 Faulting process id: 0xee4 Faulting application start time: 0x01cac587f3990c0b Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe Faulting module path: C:\Windows\System32\mshtml.dll Report Id: 6494ad05-317e-11df-901b-0002c7e6c6d4
Application [ Error ] 3/17/2010 9:55:16 PM Computer Name = Joe-PC | Source = SideBySide | ID = 16842815 -> Description = Activation context generation failed for "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
Application [ Error ] 3/18/2010 12:55:34 PM Computer Name = Joe-PC | Source = SideBySide | ID = 16842815 -> Description = Activation context generation failed for "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid.
Application [ Error ] 3/24/2010 12:21:19 AM Computer Name = Joe-PC | Source = Application Error | ID = 1000 -> Description = Faulting application name: rdr_1269404468.exe, version: 0.0.0.0, time stamp: 0x2a425e19 Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdaae Exception code: 0x0eedfade Fault offset: 0x00009617 Faulting process id: 0x978 Faulting application start time: 0x01cacb096f5fb560 Faulting application path: C:\Users\Rachelle\AppData\Local\rdr_1269404468.exe Faulting module path: C:\Windows\system32\KERNELBASE.dll Report Id: b1696515-36fc-11df-9935-0002c7e6c6d4
System [ Error ] 3/26/2010 11:55:52 AM Computer Name = Joe-PC | Source = Microsoft Antimalware | ID = 2001 -> Description = %%861 has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.79.99.0 Update Source: %%851 Update Stage: %%852 Source Path: http://go.microsoft.com/fwlink/?LinkID=121…DE-D861FCBCFCDE Signature Type: %%800 Update Type: %%803 User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.5605.0 Error code: 0x80004005 Error description: Unspecified error
System [ Error ] 3/26/2010 11:55:52 AM Computer Name = Joe-PC | Source = Microsoft Antimalware | ID = 2001 -> Description = %%861 has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.79.99.0 Update Source: %%851 Update Stage: %%852 Source Path: http://go.microsoft.com/fwlink/?LinkID=121…DE-D861FCBCFCDE Signature Type: %%801 Update Type: %%803 User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.5605.0 Error code: 0x80004005 Error description: Unspecified error
System [ Error ] 3/26/2010 11:55:52 AM Computer Name = Joe-PC | Source = Microsoft Antimalware | ID = 2001 -> Description = %%861 has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.79.99.0 Update Source: %%851 Update Stage: %%852 Source Path: http://go.microsoft.com/fwlink/?LinkID=121…DE-D861FCBCFCDE Signature Type: %%800 Update Type: %%803 User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.5605.0 Error code: 0x80004005 Error description: Unspecified error
System [ Error ] 3/26/2010 11:55:52 AM Computer Name = Joe-PC | Source = Microsoft Antimalware | ID = 2001 -> Description = %%861 has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.79.99.0 Update Source: %%851 Update Stage: %%852 Source Path: http://go.microsoft.com/fwlink/?LinkID=121…DE-D861FCBCFCDE Signature Type: %%801 Update Type: %%803 User: NT AUTHORITY\NETWORK SERVICE Current Engine Version: Previous Engine Version: 1.1.5605.0 Error code: 0x80004005 Error description: Unspecified error
System [ Error ] 3/28/2010 4:18:48 PM Computer Name = Joe-PC | Source = Server | ID = 2505 -> Description = The server could not bind to the transport \Device\NetBT_Tcpip_{1DA9469F-5E37-4023-AE55-91CCF1E2824B} because another computer on the network has the same name. The server could not start.
System [ Error ] 3/28/2010 4:18:48 PM Computer Name = Joe-PC | Source = NetBT | ID = 4321 -> Description = The name "JOE-PC :0" could not be registered on the interface with IP address 192.168.1.106. The computer with the IP address 192.168.1.103 did not allow the name to be claimed by this computer.
System [ Error ] 3/28/2010 4:18:48 PM Computer Name = Joe-PC | Source = NetBT | ID = 4321 -> Description = The name "JOE-PC :20" could not be registered on the interface with IP address 192.168.1.106. The computer with the IP address 192.168.1.103 did not allow the name to be claimed by this computer.
System [ Error ] 3/28/2010 4:42:05 PM Computer Name = Joe-PC | Source = Server | ID = 2505 -> Description = The server could not bind to the transport \Device\NetBT_Tcpip_{1DA9469F-5E37-4023-AE55-91CCF1E2824B} because another computer on the network has the same name. The server could not start.
System [ Error ] 3/28/2010 4:42:05 PM Computer Name = Joe-PC | Source = NetBT | ID = 4321 -> Description = The name "JOE-PC :0" could not be registered on the interface with IP address 192.168.1.106. The computer with the IP address 192.168.1.103 did not allow the name to be claimed by this computer.
System [ Error ] 3/28/2010 4:42:05 PM Computer Name = Joe-PC | Source = NetBT | ID = 4321 -> Description = The name "JOE-PC :20" could not be registered on the interface with IP address 192.168.1.106. The computer with the IP address 192.168.1.103 did not allow the name to be claimed by this computer.

[Files/Folders - Created Within 30 Days]
OTS.exe -> C:\Users\Joe\Desktop\OTS.exe -> [2010/03/28 13:54:17 | 000,637,440 | —- | C] (OldTimer Tools)
CCleaner -> C:\Program Files\CCleaner -> [2010/03/28 13:45:29 | 000,000,000 | —D | C]
Malwarebytes -> C:\Users\Joe\AppData\Roaming\Malwarebytes -> [2010/03/28 13:32:23 | 000,000,000 | —D | C]
mbamswissarmy.sys -> C:\Windows\System32\drivers\mbamswissarmy.sys -> [2010/03/28 13:32:18 | 000,038,224 | —- | C] (Malwarebytes Corporation)
mbam.sys -> C:\Windows\System32\drivers\mbam.sys -> [2010/03/28 13:32:15 | 000,019,160 | —- | C] (Malwarebytes Corporation)
Malwarebytes' Anti-Malware -> C:\Program Files\Malwarebytes' Anti-Malware -> [2010/03/28 13:32:15 | 000,000,000 | —D | C]
Malwarebytes -> C:\ProgramData\Malwarebytes -> [2010/03/28 13:32:15 | 000,000,000 | —D | C]
rdr_1269807549.exe -> C:\Users\Joe\AppData\Local\rdr_1269807549.exe -> [2010/03/28 13:19:13 | 000,228,864 | —- | C] (Microsoft Corp.)
rdr_1269618280.exe -> C:\Users\Joe\AppData\Local\rdr_1269618280.exe -> [2010/03/26 08:44:50 | 000,228,352 | —- | C] (Ray Hinchliffe)
rdr_1269469997.exe -> C:\Users\Joe\AppData\Local\rdr_1269469997.exe -> [2010/03/24 15:33:24 | 000,231,936 | —- | C] (Simtec Limited)
rdr_1269468287.exe -> C:\Users\Joe\AppData\Local\rdr_1269468287.exe -> [2010/03/24 15:04:51 | 000,231,936 | —- | C] (Simtec Limited)
rdr_1269397741.exe -> C:\Users\Joe\AppData\Local\rdr_1269397741.exe -> [2010/03/23 19:29:06 | 000,225,280 | —- | C] (Igor Pavlov)
rdr_1269363849.exe -> C:\Users\Joe\AppData\Local\rdr_1269363849.exe -> [2010/03/23 10:04:16 | 000,223,744 | —- | C] (Sun Microsystems)
rdr_1269357794.exe -> C:\Users\Joe\AppData\Local\rdr_1269357794.exe -> [2010/03/23 08:23:18 | 000,223,744 | —- | C] (Sun Microsystems)
rdr_1269273292.exe -> C:\Users\Joe\AppData\Local\rdr_1269273292.exe -> [2010/03/22 08:54:59 | 000,223,744 | —- | C] (Philips)
rdr_1269272752.exe -> C:\Users\Joe\AppData\Local\rdr_1269272752.exe -> [2010/03/22 08:46:00 | 000,223,744 | —- | C] (Philips)
rdr_1269271727.exe -> C:\Users\Joe\AppData\Local\rdr_1269271727.exe -> [2010/03/22 08:28:53 | 000,223,744 | —- | C] (Philips)
rdr_1268977225.exe -> C:\Users\Joe\AppData\Local\rdr_1268977225.exe -> [2010/03/18 22:40:30 | 000,224,768 | —- | C] (Lexmark)
rdr_1268881616.exe.exe -> C:\Users\Joe\AppData\Local\rdr_1268881616.exe.exe -> [2010/03/17 20:07:01 | 000,225,280 | —- | C] (AIMP DevTeam)
rdr_1268881616.exe -> C:\Users\Joe\AppData\Local\rdr_1268881616.exe -> [2010/03/17 20:07:00 | 000,225,280 | —- | C] (AIMP DevTeam)
DJVUCTRL-6.1.4-en-r2013.exe -> C:\Users\Joe\Documents\DJVUCTRL-6.1.4-en-r2013.exe -> [2010/03/12 16:53:24 | 006,931,008 | —- | C] (Caminova, Inc. )
LizardTech -> C:\Program Files\LizardTech -> [2010/03/12 16:51:46 | 000,000,000 | —D | C]
EPSON -> C:\ProgramData\EPSON -> [2010/03/06 23:12:33 | 000,000,000 | —D | C]
E_FLB8JA.DLL -> C:\Windows\System32\E_FLB8JA.DLL -> [2010/03/06 23:10:09 | 000,076,800 | —- | C] (SEIKO EPSON CORPORATION)
E_FD4B8JA.DLL -> C:\Windows\System32\E_FD4B8JA.DLL -> [2010/03/06 23:10:07 | 000,062,976 | —- | C] (SEIKO EPSON CORPORATION)
EPSON -> C:\Program Files\EPSON -> [2010/03/06 23:09:58 | 000,000,000 | —D | C]
epson -> C:\epson -> [2010/03/06 23:09:46 | 000,000,000 | —D | C]
Epson -> C:\Users\Joe\AppData\Roaming\Epson -> [2010/03/06 23:05:15 | 000,000,000 | —D | C]
Epson Software -> C:\Program Files\Epson Software -> [2010/03/06 22:49:12 | 000,000,000 | —D | C]
InstallShield -> C:\Users\Joe\AppData\Roaming\InstallShield -> [2010/03/06 22:47:21 | 000,000,000 | —D | C]
OneNote Notebooks -> C:\Users\Joe\Documents\OneNote Notebooks -> [2010/03/01 08:42:13 | 000,000,000 | —D | C]

[Files/Folders - Modified Within 30 Days]
ntuser.dat -> C:\Users\Joe\ntuser.dat -> [2010/03/28 13:56:54 | 003,145,728 | -HS- | M] ()
PerfStringBackup.INI -> C:\Windows\System32\PerfStringBackup.INI -> [2010/03/28 13:55:06 | 000,717,892 | —- | M] ()
perfh009.dat -> C:\Windows\System32\perfh009.dat -> [2010/03/28 13:55:06 | 000,618,264 | —- | M] ()
perfc009.dat -> C:\Windows\System32\perfc009.dat -> [2010/03/28 13:55:06 | 000,104,546 | —- | M] ()
OTS.exe -> C:\Users\Joe\Desktop\OTS.exe -> [2010/03/28 13:51:54 | 000,637,440 | —- | M] (OldTimer Tools)
7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 -> C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 -> [2010/03/28 13:49:10 | 000,014,800 | -H– | M] ()
7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 -> C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 -> [2010/03/28 13:49:10 | 000,014,800 | -H– | M] ()
CCleaner.lnk -> C:\Users\Joe\Desktop\CCleaner.lnk -> [2010/03/28 13:45:35 | 000,001,835 | —- | M] ()
SA.DAT -> C:\Windows\tasks\SA.DAT -> [2010/03/28 13:42:03 | 000,000,006 | -H– | M] ()
bootstat.dat -> C:\Windows\bootstat.dat -> [2010/03/28 13:41:55 | 000,067,584 | –S- | M] ()
hiberfil.sys -> C:\hiberfil.sys -> [2010/03/28 13:41:45 | 1609,129,984 | -HS- | M] ()
IconCache.db -> C:\Users\Joe\AppData\Local\IconCache.db -> [2010/03/28 13:41:01 | 002,191,554 | -H– | M] ()
Malwarebytes' Anti-Malware.lnk -> C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk -> [2010/03/28 13:32:21 | 000,000,983 | —- | M] ()
rdr_1269807549.exe -> C:\Users\Joe\AppData\Local\rdr_1269807549.exe -> [2010/03/28 13:19:13 | 000,228,864 | —- | M] (Microsoft Corp.)
ligh -> C:\Windows\ligh -> [2010/03/28 13:19:09 | 000,000,001 | —- | M] ()
rdr_1269618280.exe -> C:\Users\Joe\AppData\Local\rdr_1269618280.exe -> [2010/03/26 08:44:50 | 000,228,352 | —- | M] (Ray Hinchliffe)
bill106.exe -> C:\Windows\bill106.exe -> [2010/03/26 08:44:35 | 000,064,512 | -H– | M] ()
rdr_1269469997.exe -> C:\Users\Joe\AppData\Local\rdr_1269469997.exe -> [2010/03/24 15:33:24 | 000,231,936 | —- | M] (Simtec Limited)
010112010146114101.xxe -> C:\Users\Joe\AppData\Local\010112010146114101.xxe -> [2010/03/24 15:04:54 | 000,000,002 | —- | M] ()
01011201014650115.xxe -> C:\Users\Joe\AppData\Local\01011201014650115.xxe -> [2010/03/24 15:04:52 | 000,000,002 | —- | M] ()
rdr_1269468287.exe -> C:\Users\Joe\AppData\Local\rdr_1269468287.exe -> [2010/03/24 15:04:51 | 000,231,936 | —- | M] (Simtec Limited)
rdr_1269397741.exe -> C:\Users\Joe\AppData\Local\rdr_1269397741.exe -> [2010/03/23 19:29:06 | 000,225,280 | —- | M] (Igor Pavlov)
rdr_1269363849.exe -> C:\Users\Joe\AppData\Local\rdr_1269363849.exe -> [2010/03/23 10:04:16 | 000,223,744 | —- | M] (Sun Microsystems)
rdr_1269357794.exe -> C:\Users\Joe\AppData\Local\rdr_1269357794.exe -> [2010/03/23 08:23:18 | 000,223,744 | —- | M] (Sun Microsystems)
rdr_1269273292.exe -> C:\Users\Joe\AppData\Local\rdr_1269273292.exe -> [2010/03/22 08:54:59 | 000,223,744 | —- | M] (Philips)
rdr_1269272752.exe -> C:\Users\Joe\AppData\Local\rdr_1269272752.exe -> [2010/03/22 08:46:00 | 000,223,744 | —- | M] (Philips)
rdr_1269271727.exe -> C:\Users\Joe\AppData\Local\rdr_1269271727.exe -> [2010/03/22 08:28:53 | 000,223,744 | —- | M] (Philips)
Breakdown_sergio's(1).xls -> C:\Users\Joe\Documents\Breakdown_sergio's(1).xls -> [2010/03/19 14:55:45 | 000,182,784 | —- | M] ()
rdr_1268977225.exe -> C:\Users\Joe\AppData\Local\rdr_1268977225.exe -> [2010/03/18 22:40:30 | 000,224,768 | —- | M] (Lexmark)
010112010146111103.xxe -> C:\Users\Joe\AppData\Local\010112010146111103.xxe -> [2010/03/17 20:14:26 | 000,000,002 | —- | M] ()
rdr_1268881616.exe.exe -> C:\Users\Joe\AppData\Local\rdr_1268881616.exe.exe -> [2010/03/17 20:07:00 | 000,225,280 | —- | M] (AIMP DevTeam)
rdr_1268881616.exe -> C:\Users\Joe\AppData\Local\rdr_1268881616.exe -> [2010/03/17 20:07:00 | 000,225,280 | —- | M] (AIMP DevTeam)
bill104.exe -> C:\Windows\bill104.exe -> [2010/03/17 20:06:54 | 000,065,536 | -H– | M] ()
DJVUCTRL-6.1.4-en-r2013.exe -> C:\Users\Joe\Documents\DJVUCTRL-6.1.4-en-r2013.exe -> [2010/03/12 16:53:26 | 006,931,008 | —- | M] (Caminova, Inc. )
BN68-02344A-00L03-0722.pdf.djvu -> C:\Users\Joe\Documents\BN68-02344A-00L03-0722.pdf.djvu -> [2010/03/12 16:47:15 | 004,276,934 | —- | M] ()
100302_Bulleting__4_Dwgs.zip -> C:\Users\Joe\Documents\100302_Bulleting__4_Dwgs.zip -> [2010/03/10 09:37:39 | 003,765,429 | —- | M] ()
Microsoft Security Essentials.lnk -> C:\Users\Public\Desktop\Microsoft Security Essentials.lnk -> [2010/03/09 16:39:44 | 000,001,031 | —- | M] ()
2606_E_WASHINGTON_comps[1].pdf -> C:\Users\Joe\Documents\2606_E_WASHINGTON_comps[1].pdf -> [2010/03/07 09:27:01 | 000,121,593 | —- | M] ()
cenveoplans.pdf -> C:\Users\Joe\Documents\cenveoplans.pdf -> [2010/03/07 09:04:25 | 001,976,145 | —- | M] ()
Print CD.lnk -> C:\Users\Public\Desktop\Print CD.lnk -> [2010/03/06 22:49:25 | 000,000,828 | —- | M] ()
Keys Registration.rtf -> C:\Users\Joe\Documents\Keys Registration.rtf -> [2010/03/06 22:41:21 | 000,031,635 | —- | M] ()
Adobe Photoshop Lightroom 2.6.lnk -> C:\Users\Public\Desktop\Adobe Photoshop Lightroom 2.6.lnk -> [2010/03/06 19:51:44 | 000,002,067 | —- | M] ()
Apha1PumpStationCO001.doc -> C:\Users\Joe\Documents\Apha1PumpStationCO001.doc -> [2010/03/04 10:07:25 | 000,046,080 | —- | M] ()
close_out_sch Sergios_12-17-09[1].mpp -> C:\Users\Joe\Documents\close_out_sch Sergios_12-17-09[1].mpp -> [2010/03/03 09:44:08 | 000,228,864 | —- | M] ()
OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Users\Joe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk -> [2010/03/01 08:41:52 | 000,001,266 | —- | M] ()

[Files - No Company Name]
CCleaner.lnk -> C:\Users\Joe\Desktop\CCleaner.lnk -> [2010/03/28 13:45:35 | 000,001,835 | —- | C] ()
Malwarebytes' Anti-Malware.lnk -> C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk -> [2010/03/28 13:32:21 | 000,000,983 | —- | C] ()
ligh -> C:\Windows\ligh -> [2010/03/28 13:19:09 | 000,000,001 | —- | C] ()
bill106.exe -> C:\Windows\bill106.exe -> [2010/03/26 08:44:35 | 000,064,512 | -H– | C] ()
010112010146114101.xxe -> C:\Users\Joe\AppData\Local\010112010146114101.xxe -> [2010/03/24 15:04:54 | 000,000,002 | —- | C] ()
01011201014650115.xxe -> C:\Users\Joe\AppData\Local\01011201014650115.xxe -> [2010/03/24 15:04:52 | 000,000,002 | —- | C] ()
Breakdown_sergio's(1).xls -> C:\Users\Joe\Documents\Breakdown_sergio's(1).xls -> [2010/03/19 14:55:45 | 000,182,784 | —- | C] ()
010112010146111103.xxe -> C:\Users\Joe\AppData\Local\010112010146111103.xxe -> [2010/03/17 20:14:26 | 000,000,002 | —- | C] ()
bill104.exe -> C:\Windows\bill104.exe -> [2010/03/17 20:06:54 | 000,065,536 | -H– | C] ()
BN68-02344A-00L03-0722.pdf.djvu -> C:\Users\Joe\Documents\BN68-02344A-00L03-0722.pdf.djvu -> [2010/03/12 16:47:03 | 004,276,934 | —- | C] ()
100302_Bulleting__4_Dwgs.zip -> C:\Users\Joe\Documents\100302_Bulleting__4_Dwgs.zip -> [2010/03/10 09:37:29 | 003,765,429 | —- | C] ()
2606_E_WASHINGTON_comps[1].pdf -> C:\Users\Joe\Documents\2606_E_WASHINGTON_comps[1].pdf -> [2010/03/07 09:27:01 | 000,121,593 | —- | C] ()
cenveoplans.pdf -> C:\Users\Joe\Documents\cenveoplans.pdf -> [2010/03/07 09:04:25 | 001,976,145 | —- | C] ()
Print CD.lnk -> C:\Users\Public\Desktop\Print CD.lnk -> [2010/03/06 22:49:25 | 000,000,828 | —- | C] ()
Adobe Photoshop Lightroom 2.6.lnk -> C:\Users\Public\Desktop\Adobe Photoshop Lightroom 2.6.lnk -> [2010/03/06 19:51:44 | 000,002,067 | —- | C] ()
Apha1PumpStationCO001.doc -> C:\Users\Joe\Documents\Apha1PumpStationCO001.doc -> [2010/03/04 10:04:00 | 000,046,080 | —- | C] ()
close_out_sch Sergios_12-17-09[1].mpp -> C:\Users\Joe\Documents\close_out_sch Sergios_12-17-09[1].mpp -> [2010/03/03 09:44:08 | 000,228,864 | —- | C] ()
GlobalUserInterface.CompositeFont -> C:\Windows\Fonts\GlobalUserInterface.CompositeFont -> [2009/07/13 21:51:09 | 000,043,318 | —- | C] ()
GlobalSerif.CompositeFont -> C:\Windows\Fonts\GlobalSerif.CompositeFont -> [2009/07/13 21:51:09 | 000,029,779 | —- | C] ()
GlobalSansSerif.CompositeFont -> C:\Windows\Fonts\GlobalSansSerif.CompositeFont -> [2009/07/13 21:51:09 | 000,026,489 | —- | C] ()
GlobalMonospace.CompositeFont -> C:\Windows\Fonts\GlobalMonospace.CompositeFont -> [2009/07/13 21:51:09 | 000,026,040 | —- | C] ()
BthpanContextHandler.dll -> C:\Windows\System32\BthpanContextHandler.dll -> [2009/07/13 16:51:43 | 000,073,728 | —- | C] ()
BWContextHandler.dll -> C:\Windows\System32\BWContextHandler.dll -> [2009/07/13 16:42:10 | 000,064,000 | —- | C] ()
< End of report >

MBAM Log

Malwarebytes' Anti-Malware 1.44
Database version: 3510
Windows 6.1.7600
Internet Explorer 8.0.7600.16385

3/28/2010 1:39:30 PM
mbam-log-2010-03-28 (13-39-30).txt

Scan type: Quick Scan
Objects scanned: 128856
Time elapsed: 5 minute(s), 18 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysfbtray (Worm.KoobFace) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Windows\bk23567.dat (KoobFace.Trace) -> Quarantined and deleted successfully.
C:\Windows\fdgg34353edfgdfdf (KoobFace.Trace) -> Quarantined and deleted successfully.