Spyware / Malware / Virus Removal

Infected with something that keeps running

32 min read

Looking for the outcome? Ask AI

LastPaladin

Post #16July 5, 2010, 5:52 AM UTC

========== FILES ==========
File\Folder C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText.zip not found.
File\Folder D:\I386\Apps\APP32525\src\HPSummer2005.exe not found.

OTL by OldTimer - Version 3.2.7.1 log created on 07042010_193035

________________________________________________________________________________
_________________________________________________

OTL logfile created on: 7/4/2010 7:31:52 PM - Run 3
OTL by OldTimer - Version 3.2.7.1 Folder = C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

895.00 Mb Total Physical Memory | 419.00 Mb Available Physical Memory | 47.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 180.31 Gb Total Space | 131.05 Gb Free Space | 72.68% Space Free | Partition Type: NTFS
Drive D: | 5.99 Gb Total Space | 0.98 Gb Free Space | 16.42% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-F78BF48CE2
Current User Name: Compaq_Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010/07/04 19:19:18 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\OTL.exe
PRC - [2010/06/28 09:57:27 | 004,105,576 | —- | M] (Symantec Corporation) – C:\Program Files\Norton Utilities 14\nu.exe
PRC - [2010/06/02 14:50:58 | 001,144,104 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/02/25 14:21:50 | 000,126,392 | R— | M] (Symantec Corporation) – C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccsvchst.exe
PRC - [2008/11/09 10:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/13 14:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2008/02/12 07:24:26 | 001,811,120 | —- | M] () – C:\Program Files\Ocucom\PreCast\tmon.exe
PRC - [2005/05/14 02:30:01 | 001,191,936 | —- | M] (InterMute, Inc.) – C:\Program Files\InterMute\SpySubtract\SpySub.exe
PRC - [2005/05/14 02:04:04 | 000,036,972 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Java\jre1.5.0\bin\jusched.exe
PRC - [2005/01/04 20:52:52 | 000,331,776 | —- | M] (Silicon Integrated Systems Corporation) – C:\WINDOWS\system32\sistray.exe
PRC - [2003/04/09 18:11:12 | 000,028,672 | —- | M] (Hewlett-Packard) – C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
PRC - [2003/04/09 17:41:38 | 000,323,646 | —- | M] (Hewlett-Packard Co.) – C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe

========== Modules (SafeList) ==========

MOD - [2010/07/04 19:19:18 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\OTL.exe
MOD - [2010/05/13 19:35:01 | 000,415,088 | R— | M] (Symantec Corporation) – C:\Program Files\Norton Internet Security\Engine\17.7.0.12\asoehook.dll
MOD - [2009/07/11 21:02:02 | 000,653,120 | R— | M] (Microsoft Corporation) – C:\Program Files\Norton Internet Security\Engine\17.7.0.12\microsoft.vc90.crt\msvcr90.dll
MOD - [2009/07/11 21:02:00 | 000,569,664 | R— | M] (Microsoft Corporation) – C:\Program Files\Norton Internet Security\Engine\17.7.0.12\microsoft.vc90.crt\msvcp90.dll
MOD - [2008/04/13 14:10:20 | 000,110,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\msscript.ocx

========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] – C:\WINDOWS\System32\appmgmts.dll – (AppMgmt)
SRV - [2010/02/25 14:21:50 | 000,126,392 | R— | M] (Symantec Corporation) [Unknown | Running] – C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exe – (NIS)
SRV - [2008/11/09 10:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)

========== Driver Services (SafeList) ==========

DRV - [2010/07/03 07:16:52 | 001,347,504 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\Definitions\VirusDefs\20100704.002\NAVEX15.SYS – (NAVEX15)
DRV - [2010/07/03 07:16:52 | 000,085,552 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\Definitions\VirusDefs\20100704.002\NAVENG.SYS – (NAVENG)
DRV - [2010/07/03 07:16:51 | 000,371,248 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys – (eeCtrl)
DRV - [2010/07/03 07:16:51 | 000,102,448 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys – (EraserUtilRebootDrv)
DRV - [2010/07/03 07:13:30 | 000,124,976 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\SYMEVENT.SYS – (SymEvent)
DRV - [2010/06/19 00:46:00 | 000,691,248 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\Definitions\BASHDefs\20100619.001\BHDrvx86.sys – (BHDrvx86)
DRV - [2010/05/28 09:33:19 | 000,331,640 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\Definitions\IPSDefs\20100702.001\IDSXpx86.sys – (IDSxpx86)
DRV - [2010/05/05 18:01:59 | 000,361,904 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\WINDOWS\System32\Drivers\NIS\1107000.00C\SYMTDI.SYS – (SYMTDI)
DRV - [2010/04/28 19:03:51 | 000,116,784 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\NIS\1107000.00C\Ironx86.SYS – (SymIRON)
DRV - [2010/04/21 17:02:20 | 000,173,104 | —- | M] (Symantec Corporation) [File_System | Boot | Running] – C:\WINDOWS\system32\drivers\NIS\1107000.00C\SYMEFA.SYS – (SymEFA)
DRV - [2010/04/21 16:29:50 | 000,325,680 | —- | M] (Symantec Corporation) [File_System | System | Running] – C:\WINDOWS\System32\Drivers\NIS\1107000.00C\SRTSP.SYS – (SRTSP)
DRV - [2010/04/21 16:29:50 | 000,043,696 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\NIS\1107000.00C\SRTSPX.SYS – (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV - [2010/02/25 14:22:57 | 000,501,888 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\NIS\1107000.00C\ccHPx86.sys – (ccHP)
DRV - [2010/02/03 15:40:47 | 000,328,752 | R— | M] (Symantec Corporation) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\NIS\1107000.00C\SYMDS.SYS – (SymDS)
DRV - [2009/05/09 01:14:20 | 000,014,736 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\nuidfltr.sys – (NuidFltr)
DRV - [2005/04/20 11:00:56 | 002,317,696 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ALCXWDM.SYS – (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2005/04/12 11:42:16 | 000,011,904 | —- | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\srvkp.sys – (SiSkp)
DRV - [2005/04/12 11:08:44 | 000,247,296 | —- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\sisgrp.sys – (SiS315)
DRV - [2005/03/09 11:53:00 | 000,036,352 | —- | M] (Advanced Micro Devices) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\AmdK8.sys – (AmdK8)
DRV - [2005/01/19 14:21:56 | 000,012,416 | —- | M] (Windows ® 2000 DDK provider) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\PcdrNdisuio.sys – (PcdrNdisuio)
DRV - [2004/08/03 18:31:34 | 000,020,992 | —- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\RTL8139.sys – (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2004/06/29 07:07:18 | 001,268,204 | —- | M] (Agere Systems) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\AGRSM.sys – (AgereSoftModem)
DRV - [2003/12/02 15:23:20 | 000,142,336 | —- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\fasttx2k.sys – (fasttx2k)
DRV - [2003/07/11 12:28:56 | 000,032,768 | —- | M] (SiS Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\sisnic.sys – (SISNIC)
DRV - [2002/07/29 11:43:50 | 000,023,808 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\PS2.sys – (Ps2)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop

IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…arm1=seconduser
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-181441672-238794695-2266662844-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop
IE - HKU\S-1-5-21-181441672-238794695-2266662844-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop
IE - HKU\S-1-5-21-181441672-238794695-2266662844-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/def…//www.yahoo.com
IE - HKU\S-1-5-21-181441672-238794695-2266662844-1009\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/?fr=fp-sem
IE - HKU\S-1-5-21-181441672-238794695-2266662844-1009\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn17\yt.dll (Yahoo! Inc.)
IE - HKU\S-1-5-21-181441672-238794695-2266662844-1009\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\IPSFFPlgn\ [2010/07/03 07:23:47 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.6.0.32\coFFPlgn\ [2010/07/03 07:14:20 | 000,000,000 | —D | M]

O1 HOSTS File: ([2004/08/04 08:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn17\yt.dll (Yahoo! Inc.)
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Yahooo Search Protection) - {25BC7718-0BFA-40EA-B381-4B2D9732D686} - C:\Program Files\Yahoo!\Search Protection\ysp.dll (Yahoo! Inc.)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O2 - BHO: (CNavExtBho Class) - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll File not found
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn17\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (&Google;) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn17\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-181441672-238794695-2266662844-1009\..\Toolbar\WebBrowser: (&Google;) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKU\S-1-5-21-181441672-238794695-2266662844-1009\..\Toolbar\WebBrowser: (Norton AntiVirus) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll File not found
O3 - HKU\S-1-5-21-181441672-238794695-2266662844-1009\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coieplg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-181441672-238794695-2266662844-1009\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn17\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [HPBootOp] C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [regcmdcons] c:\hp\bin\cloaker.exe (Hewlett-Packard Co.)
O4 - HKLM..\Run: [SiSPower] C:\WINDOWS\System32\SiSPower.dll (Silicon Integrated Systems Corporation)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKU\S-1-5-21-181441672-238794695-2266662844-1009..\Run: [NortonUtilities] C:\Program Files\Norton Utilities 14\nu.exe (Symantec Corporation)
O4 - HKU\S-1-5-21-181441672-238794695-2266662844-1009..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\YspService.exe (Yahoo! Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\hpoddt01.exe.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\PreCast Monitor.lnk = C:\Program Files\Ocucom\PreCast\tmon.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\SpySubtract.lnk = C:\Program Files\InterMute\SpySubtract\sslaunch.exe (InterMute, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-181441672-238794695-2266662844-1009\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Google; Search - C:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Backward Links - C:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Cached Snapshot of Page - C:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Similar Pages - C:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O8 - Extra context menu item: Translate into English - C:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\NPJPI150.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()
O9 - Extra 'Tools' menuitem : Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\Microsoft\Wallpaper2.bmp
O28 - HKLM ShellExecuteHooks: {FA010552-4A27-4cb1-A1BB-3E2D697F1639} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/01/26 18:53:38 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2001/07/28 07:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT – [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/07/04 19:19:14 | 000,574,976 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\OTL.exe
[2010/07/03 23:08:26 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2010/07/03 22:57:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\scripting
[2010/07/03 22:57:45 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en
[2010/07/03 22:57:45 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2010/07/03 22:30:38 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\WinBatch
[2010/07/03 11:50:21 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2010/07/03 07:20:01 | 000,361,904 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symtdi.sys
[2010/07/03 07:20:01 | 000,339,504 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symtdiv.sys
[2010/07/03 07:20:00 | 000,328,752 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symds.sys
[2010/07/03 07:20:00 | 000,325,680 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1107000.00C\srtsp.sys
[2010/07/03 07:20:00 | 000,173,104 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symefa.sys
[2010/07/03 07:20:00 | 000,116,784 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1107000.00C\ironx86.sys
[2010/07/03 07:20:00 | 000,043,696 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1107000.00C\srtspx.sys
[2010/07/03 07:19:59 | 000,501,888 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\NIS\1107000.00C\cchpx86.sys
[2010/07/03 07:19:19 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\NIS\1107000.00C
[2010/07/03 07:13:31 | 000,060,808 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\S32EVNT1.DLL
[2010/07/03 07:13:30 | 000,124,976 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2010/07/03 07:11:55 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\NIS
[2010/07/03 07:11:48 | 000,000,000 | —D | C] – C:\Program Files\Norton Internet Security
[2010/07/03 06:40:20 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\PCSettings
[2010/07/03 06:16:29 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Tific
[2010/07/02 23:53:09 | 000,000,000 | —D | C] – C:\_OTL
[2010/07/02 23:04:03 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\AdobeUM
[2010/07/02 23:04:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\Adobe
[2010/07/02 23:03:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\My Documents\My eBooks
[2010/07/02 05:17:50 | 000,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2010/07/02 05:17:05 | 000,000,000 | —D | C] – C:\Program Files\ERUNT
[2010/07/02 05:15:27 | 000,791,393 | —- | C] (Lars Hederer ) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\erunt-setup.exe
[2010/06/30 23:20:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Malwarebytes
[2010/06/30 23:20:04 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/06/30 23:20:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/06/30 23:19:47 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2010/06/30 23:19:43 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2010/06/30 23:17:33 | 006,153,352 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\mbam-setup-1.46.exe
[2010/06/30 22:41:40 | 000,050,688 | —- | C] (Atribune.org) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\ATF-Cleaner.exe
[2010/06/29 10:56:37 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Sun
[2010/06/29 10:50:09 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\DivX
[2010/06/29 10:49:34 | 000,133,616 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\pxafs.dll
[2010/06/29 10:49:34 | 000,126,448 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\pxinsi64.exe
[2010/06/29 10:49:34 | 000,123,888 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\pxcpyi64.exe
[2010/06/29 10:49:34 | 000,072,176 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\pxhpinst.exe
[2010/06/29 10:49:34 | 000,068,592 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\pxinsa64.exe
[2010/06/29 10:49:34 | 000,068,080 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\pxcpya64.exe
[2010/06/29 10:49:34 | 000,009,200 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\drivers\cdralw2k.sys
[2010/06/29 10:49:34 | 000,009,072 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\drivers\cdr4_xp.sys
[2010/06/29 10:45:30 | 000,895,256 | —- | C] (DivX, Inc. ) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\DivXInstaller.exe
[2010/06/28 10:50:25 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Adobe
[2010/06/28 10:43:23 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\IECompatCache
[2010/06/28 10:38:36 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\PrivacIE
[2010/06/28 10:35:46 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\IETldCache
[2010/06/28 10:28:41 | 000,055,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/06/28 10:28:40 | 000,599,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/06/28 10:28:39 | 001,985,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2010/06/28 10:28:37 | 011,076,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2010/06/28 10:28:37 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2010/06/28 10:17:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\en-US
[2010/06/28 10:00:38 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Norton Utilities 14
[2010/06/28 09:53:52 | 001,101,824 | —- | C] (Woodbury Associates Limited) – C:\WINDOWS\System32\UniBox210.ocx
[2010/06/28 09:53:52 | 000,880,640 | —- | C] (Woodbury Associates Limited) – C:\WINDOWS\System32\UniBox10.ocx
[2010/06/28 09:53:52 | 000,212,992 | —- | C] (Woodbury Associates Limited) – C:\WINDOWS\System32\UniBoxVB12.ocx
[2010/06/28 09:23:50 | 000,000,000 | —D | C] – C:\Program Files\NortonInstaller
[2010/06/28 09:07:40 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidserv.dll
[2010/06/28 00:26:40 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2010/06/28 00:26:38 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2010/06/28 00:26:37 | 000,712,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecs.dll
[2010/06/28 00:26:37 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2010/06/28 00:26:34 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2010/06/28 00:26:34 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2010/06/28 00:26:33 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2010/06/28 00:26:33 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2010/06/28 00:26:33 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2010/06/28 00:26:33 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2010/06/28 00:26:32 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2010/06/28 00:26:31 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2010/06/28 00:26:30 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2010/06/28 00:26:25 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2010/06/28 00:26:13 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdwxp.exe
[2010/06/28 00:26:12 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spdwnwxp.exe
[2010/06/28 00:26:06 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2010/06/28 00:26:06 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2010/06/28 00:26:06 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2010/06/28 00:26:06 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2010/06/28 00:26:06 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2010/06/28 00:26:06 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2010/06/28 00:26:05 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2010/06/28 00:26:05 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2010/06/28 00:26:05 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2010/06/28 00:26:05 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2010/06/28 00:26:05 | 000,040,960 | —- | C] (Silicon Integrated Systems Corporation) – C:\WINDOWS\System32\drivers\sisagp.sys
[2010/06/28 00:26:05 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2010/06/28 00:26:01 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2010/06/28 00:25:57 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2010/06/28 00:25:57 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2010/06/28 00:25:55 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2010/06/28 00:25:54 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2010/06/28 00:25:53 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2010/06/28 00:25:52 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rasqec.dll
[2010/06/28 00:25:51 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qutil.dll
[2010/06/28 00:25:50 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2010/06/28 00:25:50 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2010/06/28 00:25:46 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2010/06/28 00:25:41 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\onex.dll
[2010/06/28 00:25:37 | 004,274,816 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2010/06/28 00:25:37 | 001,897,408 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\drivers\nv4_mini.sys
[2010/06/28 00:25:36 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2010/06/28 00:25:28 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2010/06/28 00:25:27 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2010/06/28 00:25:27 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2010/06/28 00:25:27 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2010/06/28 00:25:27 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2010/06/28 00:25:27 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2010/06/28 00:25:26 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2010/06/28 00:25:26 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2010/06/28 00:25:25 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2010/06/28 00:25:25 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2010/06/28 00:25:25 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2010/06/28 00:25:23 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2010/06/28 00:25:23 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2010/06/28 00:25:06 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2010/06/28 00:25:05 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2010/06/28 00:25:05 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2010/06/28 00:25:05 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2010/06/28 00:25:02 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2010/06/28 00:24:58 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2010/06/28 00:24:56 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2010/06/28 00:24:56 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2010/06/28 00:24:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2010/06/28 00:24:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2010/06/28 00:24:48 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ieencode.dll
[2010/06/28 00:24:42 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2010/06/28 00:24:40 | 000,144,384 | —- | C] (Windows ® Server 2003 DDK provider) – C:\WINDOWS\System32\drivers\hdaudbus.sys
[2010/06/28 00:24:33 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\faxpatch.exe
[2010/06/28 00:24:30 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2010/06/28 00:24:30 | 000,180,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2010/06/28 00:24:30 | 000,126,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappcfg.dll
[2010/06/28 00:24:30 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2010/06/28 00:24:30 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2010/06/28 00:24:30 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappprxy.dll
[2010/06/28 00:24:30 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapolqec.dll
[2010/06/28 00:24:24 | 000,650,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2010/06/28 00:24:24 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2010/06/28 00:24:24 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2010/06/28 00:24:24 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2010/06/28 00:24:24 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3api.dll
[2010/06/28 00:24:24 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3dlg.dll
[2010/06/28 00:24:21 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2010/06/28 00:24:20 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2010/06/28 00:24:10 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2010/06/28 00:24:08 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2010/06/28 00:24:07 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2010/06/28 00:24:06 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2010/06/28 00:24:05 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2010/06/28 00:24:05 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2010/06/28 00:24:05 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2010/06/28 00:24:05 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2010/06/28 00:24:05 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2010/06/28 00:24:04 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2010/06/28 00:24:04 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2010/06/28 00:24:04 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2010/06/28 00:24:04 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2010/06/28 00:24:04 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2010/06/28 00:24:04 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2010/06/28 00:24:04 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2010/06/28 00:24:04 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2010/06/28 00:24:04 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2010/06/28 00:24:03 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2010/06/28 00:24:03 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2010/06/28 00:24:03 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2010/06/28 00:24:03 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2010/06/28 00:24:03 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2010/06/28 00:24:03 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2010/06/28 00:24:03 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2010/06/28 00:24:03 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2010/06/28 00:24:02 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2010/06/28 00:24:02 | 000,327,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2010/06/28 00:24:02 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2010/06/28 00:24:02 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2010/06/28 00:24:02 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2010/06/28 00:24:02 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2010/06/28 00:24:02 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2010/06/28 00:24:02 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2010/06/28 00:24:02 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2010/06/28 00:24:02 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2010/06/28 00:24:02 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2010/06/28 00:24:02 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2010/06/28 00:24:02 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2010/06/28 00:24:02 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2010/06/28 00:23:57 | 000,043,008 | —- | C] (Advanced Micro Devices, Inc.) – C:\WINDOWS\System32\drivers\amdagp.sys
[2010/06/28 00:23:54 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2010/06/28 00:23:54 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2010/06/28 00:23:54 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2010/06/28 00:23:54 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2010/06/28 00:23:54 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2010/06/28 00:23:54 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2010/06/28 00:23:54 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2010/06/28 00:23:52 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2010/06/28 00:23:40 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2010/06/28 00:23:36 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\Yahoo
[2010/06/28 00:23:30 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2010/06/28 00:23:29 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2010/06/28 00:23:09 | 000,138,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\afd.sys
[2010/06/28 00:22:55 | 000,353,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srv.sys
[2010/06/28 00:22:25 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Yahoo!
[2010/06/28 00:22:08 | 000,455,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/06/28 00:22:01 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsbyuv.dll
[2010/06/28 00:21:19 | 000,691,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010/06/28 00:20:45 | 002,189,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/06/28 00:20:45 | 002,066,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2010/06/28 00:20:45 | 002,024,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/06/28 00:20:44 | 002,146,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/06/28 00:20:03 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cabview.dll
[2010/06/28 00:19:59 | 000,272,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2010/06/28 00:19:53 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2010/06/28 00:18:56 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2010/06/28 00:18:38 | 000,689,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpsp3res.dll
[2010/06/28 00:17:20 | 000,000,000 | RHSD | C] – C:\cmdcons
[2010/06/28 00:17:01 | 000,000,000 | —D | C] – C:\WINDOWS\setupupd
[2010/06/27 23:51:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2010/06/27 23:51:26 | 000,026,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2010/06/27 20:39:56 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\UserData
[2010/06/27 20:39:52 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Macromedia
[2010/06/27 20:38:16 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Recent
[2010/06/27 20:38:15 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\PreCast
[2010/06/27 20:38:02 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asycfilt.dll
[2010/06/27 20:36:12 | 000,000,000 | –SD | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Microsoft
[2010/06/27 20:36:12 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data
[2010/06/27 20:36:12 | 000,000,000 | R–D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Favorites
[2010/06/27 20:36:12 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Cookies
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\SampleView
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Real
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\Microsoft
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\InterMute
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Identities
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\Google
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\ApplicationHistory
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\Apple Computer
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Apple Computer
[2010/06/27 20:36:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings\Application Data\{3248F0A6-6813-11D6-A77B-00B0D0150000}
[2010/06/27 20:36:11 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\SendTo
[2010/06/27 20:36:11 | 000,000,000 | R–D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\My Documents\My Videos
[2010/06/27 20:36:11 | 000,000,000 | R–D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\My Documents\My Pictures
[2010/06/27 20:36:11 | 000,000,000 | R–D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\My Documents\My Music
[2010/06/27 20:36:11 | 000,000,000 | R–D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\My Documents
[2010/06/27 20:36:11 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\PrintHood
[2010/06/27 20:36:11 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\NetHood
[2010/06/27 20:36:11 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Local Settings
[2010/06/27 20:36:10 | 000,000,000 | R–D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Start Menu
[2010/06/27 20:36:10 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Templates
[2010/06/27 20:36:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\WINDOWS
[2010/06/27 20:30:49 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2010/06/27 19:50:52 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2010/06/26 13:22:32 | 000,000,000 | —D | C] – C:\Program Files\Windows Sidebar
[2010/06/26 12:50:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NortonInstaller
[2010/06/26 12:47:59 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Norton
[2010/06/26 12:47:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Norton
[2010/06/26 10:55:33 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Norton Installer
[2010/06/26 10:53:46 | 000,000,000 | —D | C] – C:\Program Files\Norton Utilities 14
[2010/06/25 22:51:49 | 000,000,000 | —D | C] – C:\e10946a8e70c4d3cdb21
[2010/06/20 12:31:47 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2010/06/20 11:30:53 | 000,000,000 | -H-D | C] – C:\WINDOWS\ie8
[2010/06/20 11:25:50 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Autorun Eater
[2010/06/20 11:25:46 | 000,000,000 | —D | C] – C:\Program Files\Autorun Eater
[24 C:\WINDOWS\Fonts\*.tmp files -> C:\WINDOWS\Fonts\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/07/04 19:19:18 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\OTL.exe
[2010/07/04 19:16:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/07/04 18:52:06 | 000,000,248 | —- | M] () – C:\WINDOWS\System\hpsysdrv.dat
[2010/07/04 18:49:36 | 000,003,072 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Cache.db
[2010/07/04 18:42:04 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/07/04 18:42:04 | 000,000,292 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1737049430-1430350790-2627329290-1009.job
[2010/07/04 18:41:58 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/07/04 18:41:55 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/07/04 18:41:46 | 939,053,056 | -HS- | M] () – C:\hiberfil.sys
[2010/07/04 18:40:12 | 001,310,720 | -H– | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\NTUSER.DAT
[2010/07/04 18:40:12 | 000,000,178 | -HS- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\ntuser.ini
[2010/07/04 18:38:41 | 002,018,748 | —- | M] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\Cat.DB
[2010/07/04 18:36:53 | 000,001,355 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/07/04 13:58:15 | 000,293,376 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\4lzbrrut.exe
[2010/07/04 12:21:00 | 000,000,404 | —- | M] () – C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 2170 series#1230934797.job
[2010/07/04 09:38:07 | 000,382,022 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/07/04 09:38:07 | 000,053,640 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/07/04 09:38:06 | 000,441,626 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/07/04 09:12:00 | 000,000,404 | —- | M] () – C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 2170 series#1131995486.job
[2010/07/04 07:36:00 | 000,000,300 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1737049430-1430350790-2627329290-1009.job
[2010/07/04 03:53:55 | 000,171,488 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/07/04 03:00:00 | 000,000,330 | -H– | M] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2010/07/03 23:12:50 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2010/07/03 23:08:36 | 000,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/07/03 22:54:32 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010/07/03 07:22:20 | 000,001,981 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Norton Internet Security.LNK
[2010/07/03 07:13:30 | 000,124,976 | —- | M] (Symantec Corporation) – C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2010/07/03 07:13:30 | 000,060,808 | —- | M] (Symantec Corporation) – C:\WINDOWS\System32\S32EVNT1.DLL
[2010/07/03 07:13:30 | 000,007,443 | —- | M] () – C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2010/07/03 07:13:30 | 000,000,805 | —- | M] () – C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2010/07/02 05:17:07 | 000,000,600 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\ERUNT.lnk
[2010/07/02 05:15:33 | 000,791,393 | —- | M] (Lars Hederer ) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\erunt-setup.exe
[2010/07/02 05:13:06 | 000,000,156 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\folderlook.bat
[2010/07/01 01:00:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\McQcTask.job
[2010/06/30 23:20:08 | 000,000,704 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/06/30 23:17:40 | 006,153,352 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\mbam-setup-1.46.exe
[2010/06/30 23:06:29 | 000,050,688 | —- | M] (Atribune.org) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\ATF-Cleaner.exe
[2010/06/29 10:50:30 | 000,001,504 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\DivX Movies.lnk
[2010/06/29 10:50:00 | 000,000,785 | —- | M] () – C:\Documents and Settings\All Users\Desktop\DivX Plus Player.lnk
[2010/06/29 10:48:55 | 000,000,825 | —- | M] () – C:\Documents and Settings\All Users\Desktop\DivX Plus Converter.lnk
[2010/06/29 10:45:31 | 000,895,256 | —- | M] (DivX, Inc. ) – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\DivXInstaller.exe
[2010/06/29 09:19:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/06/28 10:35:53 | 000,000,823 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/06/28 09:55:38 | 000,000,731 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Norton Utilities.lnk
[2010/06/28 09:22:20 | 000,000,783 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\Norton Installation Files.lnk
[2010/06/28 09:08:14 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2010/06/28 09:08:12 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2010/06/28 00:17:53 | 000,000,283 | RHS- | M] () – C:\boot.ini
[2010/06/27 20:39:40 | 000,002,158 | —- | M] () – C:\WINDOWS\System32\ssmute.ini
[2010/06/27 20:38:50 | 000,000,286 | —- | M] () – C:\WINDOWS\tasks\Easy Internet Sign-up.job
[2010/06/27 20:38:39 | 000,000,742 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Easy Internet Sign-up.lnk
[2010/06/27 20:38:12 | 000,000,601 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\Register with HP.url
[2010/06/27 20:36:52 | 000,001,852 | RHS- | M] () – C:\WINDOWS\System32\drivers\103C_HP_CPC_PX807AA-ABA SR1575CL NA530_YC_0Pres_QCNH523_E53NAheRED2_47_ISalmon_SASUSTek Computer INC._V1.04_B3.15_T051019_WXH2_L409_M896_J200_7AMD_8Athlon 64_92.41_#050908_N10390900_Z11C1048C_G10396330.MRK
[2010/06/27 20:34:19 | 000,000,993 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2010/06/27 20:34:12 | 000,262,144 | —- | M] () – C:\Documents and Settings\All Users\NTUSER.DAT
[2010/06/27 20:33:14 | 000,000,213 | RHS- | M] () – C:\BOOT.BAK
[2010/06/27 20:29:00 | 000,000,231 | —- | M] () – C:\WINDOWS\system.ini
[2010/06/26 10:20:01 | 000,000,770 | —- | M] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\F+E (2).lnk
[2010/06/21 06:59:00 | 000,000,304 | —- | M] () – C:\WINDOWS\tasks\Defraggler Volume C Task.job
[2010/06/20 11:25:47 | 000,000,678 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Autorun Eater.lnk
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/07/04 13:58:13 | 000,293,376 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\4lzbrrut.exe
[2010/07/03 07:21:06 | 002,018,748 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\Cat.DB
[2010/07/03 07:20:01 | 000,007,787 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symnetv.cat
[2010/07/03 07:20:01 | 000,001,473 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symnetv.inf
[2010/07/03 07:20:00 | 000,007,873 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symefa.cat
[2010/07/03 07:20:00 | 000,007,442 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\srtspx.cat
[2010/07/03 07:20:00 | 000,007,438 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\srtsp.cat
[2010/07/03 07:20:00 | 000,007,438 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\iron.cat
[2010/07/03 07:20:00 | 000,007,425 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symds.cat
[2010/07/03 07:20:00 | 000,007,368 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symnet.cat
[2010/07/03 07:20:00 | 000,003,373 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symefa.inf
[2010/07/03 07:20:00 | 000,002,793 | R— | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symds.inf
[2010/07/03 07:20:00 | 000,001,445 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\symnet.inf
[2010/07/03 07:20:00 | 000,001,388 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\srtspx.inf
[2010/07/03 07:20:00 | 000,001,382 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\srtsp.inf
[2010/07/03 07:20:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\iron.inf
[2010/07/03 07:19:59 | 000,007,396 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\cchpx86.cat
[2010/07/03 07:19:59 | 000,001,754 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\cchpx86.inf
[2010/07/03 07:19:19 | 000,000,172 | —- | C] () – C:\WINDOWS\System32\drivers\NIS\1107000.00C\isolate.ini
[2010/07/03 07:13:30 | 000,007,443 | —- | C] () – C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2010/07/03 07:13:30 | 000,000,805 | —- | C] () – C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2010/07/03 07:13:03 | 000,001,981 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Norton Internet Security.LNK
[2010/07/02 05:17:07 | 000,000,600 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\ERUNT.lnk
[2010/07/02 05:13:06 | 000,000,156 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\folderlook.bat
[2010/06/30 23:20:08 | 000,000,704 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/06/29 10:50:30 | 000,001,504 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\DivX Movies.lnk
[2010/06/29 10:50:00 | 000,000,785 | —- | C] () – C:\Documents and Settings\All Users\Desktop\DivX Plus Player.lnk
[2010/06/28 10:36:42 | 000,003,072 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Cache.db
[2010/06/28 09:55:37 | 000,000,731 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Norton Utilities.lnk
[2010/06/28 09:08:14 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2010/06/28 09:08:12 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2010/06/28 09:07:21 | 000,000,783 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\Norton Installation Files.lnk
[2010/06/28 00:25:31 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2010/06/28 00:24:45 | 000,001,261 | —- | C] () – C:\WINDOWS\System32\pid.inf
[2010/06/28 00:24:16 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2010/06/28 00:24:04 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2010/06/28 00:18:59 | 001,291,776 | —- | C] () – C:\WINDOWS\System32\dllcache\quartz.dll
[2010/06/27 20:38:39 | 000,000,286 | —- | C] () – C:\WINDOWS\tasks\Easy Internet Sign-up.job
[2010/06/27 20:38:11 | 000,000,601 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\Register with HP.url
[2010/06/27 20:36:30 | 000,001,852 | RHS- | C] () – C:\WINDOWS\System32\drivers\103C_HP_CPC_PX807AA-ABA SR1575CL NA530_YC_0Pres_QCNH523_E53NAheRED2_47_ISalmon_SASUSTek Computer INC._V1.04_B3.15_T051019_WXH2_L409_M896_J200_7AMD_8Athlon 64_92.41_#050908_N10390900_Z11C1048C_G10396330.MRK
[2010/06/27 20:36:23 | 939,053,056 | -HS- | C] () – C:\hiberfil.sys
[2010/06/27 20:36:14 | 000,001,640 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk
[2010/06/27 20:36:14 | 000,001,132 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop\Help and Support.lnk
[2010/06/27 20:36:14 | 000,000,923 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Microsoft\Internet Explorer\Quick Launch\RealPlayer.lnk
[2010/06/27 20:36:14 | 000,000,823 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/06/27 20:36:14 | 000,000,750 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk
[2010/06/27 20:36:14 | 000,000,079 | —- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
[2010/06/27 20:36:10 | 000,049,152 | -H– | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\ntuser.dat.LOG
[2010/06/27 20:36:10 | 000,000,178 | -HS- | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\ntuser.ini
[2010/06/27 20:36:09 | 001,310,720 | -H– | C] () – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\NTUSER.DAT
[2010/06/20 11:25:47 | 000,000,678 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Autorun Eater.lnk
[2010/02/09 23:20:20 | 000,767,952 | —- | C] () – C:\WINDOWS\BDTSupport.dll.old
[2010/02/09 23:20:20 | 000,767,952 | —- | C] () – C:\WINDOWS\BDTSupport.dll
[2009/01/02 12:27:06 | 000,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2008/08/24 21:51:22 | 000,000,037 | —- | C] () – C:\WINDOWS\wwwbatch.ini
[2006/09/05 21:13:42 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlSz.INI
[2005/10/06 22:55:30 | 000,000,081 | —- | C] () – C:\WINDOWS\ImportClient.INI
[2005/10/06 22:33:13 | 000,000,751 | —- | C] () – C:\WINDOWS\Bti.ini
[2005/09/27 20:43:34 | 000,000,246 | —- | C] () – C:\WINDOWS\wininit.ini
[2005/09/08 11:13:06 | 000,000,037 | —- | C] () – C:\WINDOWS\Acroread.ini
[2005/05/14 03:00:54 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2005/05/14 02:58:41 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\IVIresizeW7.dll
[2005/05/14 02:58:41 | 000,200,704 | —- | C] () – C:\WINDOWS\System32\IVIresizeA6.dll
[2005/05/14 02:58:41 | 000,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeP6.dll
[2005/05/14 02:58:41 | 000,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeM6.dll
[2005/05/14 02:58:41 | 000,188,416 | —- | C] () – C:\WINDOWS\System32\IVIresizePX.dll
[2005/05/14 02:58:41 | 000,020,480 | —- | C] () – C:\WINDOWS\System32\IVIresize.dll
[2005/05/14 02:30:27 | 000,013,975 | —- | C] () – C:\WINDOWS\System32\CHODDI.SYS
[2005/05/14 02:30:22 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\hpreg.dll
[2005/05/14 02:30:02 | 000,002,158 | —- | C] () – C:\WINDOWS\System32\ssmute.ini
[2005/05/14 02:27:33 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2005/05/14 02:14:55 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2005/05/14 02:09:14 | 000,094,143 | —- | C] () – C:\WINDOWS\System32\VGAunistlog.ini
[2005/05/14 02:09:14 | 000,083,779 | —- | C] () – C:\WINDOWS\VGAsetup.ini
[2005/05/14 02:00:10 | 000,000,780 | —- | C] () – C:\WINDOWS\orun32.ini
[2005/05/14 01:58:20 | 000,323,584 | —- | C] () – C:\WINDOWS\System32\pythoncom22.dll
[2005/05/14 01:58:20 | 000,094,208 | —- | C] () – C:\WINDOWS\System32\pywintypes22.dll
[2005/05/14 01:57:59 | 000,016,896 | —- | C] () – C:\WINDOWS\System32\bcbmm.dll
[2005/02/18 07:56:18 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2005/01/19 19:45:40 | 000,090,112 | —- | C] () – C:\WINDOWS\System32\PcdrKernelModeServices.dll
[2005/01/19 19:45:40 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\ProgressTrace.dll
[2004/06/29 14:47:28 | 000,003,072 | —- | C] () – C:\WINDOWS\WinIo.sys
[2004/06/15 18:38:00 | 000,000,592 | —- | C] () – C:\WINDOWS\System32\oeminfo.ini
[2003/04/10 19:04:00 | 000,028,672 | —- | C] () – C:\WINDOWS\System32\JAWTAccessBridge.dll
[2003/01/07 19:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI

========== LOP Check ==========

[2010/01/14 16:11:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\5600-6600 Series
[2010/06/20 11:26:22 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Autorun Eater
[2010/03/07 19:13:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2010/03/07 19:05:37 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\avg9
[2010/04/15 10:19:11 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DriverCure
[2010/01/15 08:57:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Lexmark 5600-6600 Series
[2008/09/15 09:02:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
[2010/04/03 08:00:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ParetoLogic
[2008/08/25 23:45:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2010/07/03 06:40:20 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PCSettings
[2007/06/02 09:02:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Quintech
[2010/07/04 19:04:37 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2005/09/23 12:31:57 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2008/11/27 16:27:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2009/11/13 12:15:04 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2005/09/23 12:30:24 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\Aim
[2008/03/23 20:51:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\GetRightToGo
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\InterMute
[2005/09/08 11:12:51 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\InterTrust
[2005/10/23 03:39:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\InterVideo
[2007/05/20 19:53:09 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\Juniper Networks
[2006/08/22 20:31:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\Leadertech
[2008/05/17 04:13:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\LimeWire
[2007/08/15 00:28:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\My Games
[2010/05/02 12:02:33 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\PreCast
[2005/09/23 12:29:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\Proof
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\SampleView
[2005/09/23 12:30:28 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\Template
[2008/04/01 00:26:14 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\Terrapin
[2010/06/27 11:31:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner\Application Data\Tific
[2008/08/28 13:04:22 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2\Application Data\GetRightToGo
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2\Application Data\InterMute
[2008/10/03 01:20:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2\Application Data\InterVideo
[2008/08/29 06:34:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2\Application Data\Leadertech
[2008/08/25 14:18:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2\Application Data\PreCast
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2\Application Data\SampleView
[2008/10/30 10:59:19 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2\Application Data\Template
[2009/01/04 14:58:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.000\Application Data\GetRightToGo
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.000\Application Data\InterMute
[2009/01/01 12:55:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.000\Application Data\PreCast
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.000\Application Data\SampleView
[2010/01/15 08:56:28 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\5600-6600 Series
[2009/10/07 16:24:37 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\GetRightToGo
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\InterMute
[2009/12/14 14:38:29 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\InterVideo
[2010/01/11 12:19:27 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\Leadertech
[2010/01/15 08:56:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\Lexmark Productivity Studio
[2009/01/08 13:15:11 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\PreCast
[2010/02/20 07:47:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\Registry Mechanic
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\SampleView
[2009/03/15 16:57:19 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.001\Application Data\Template
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.002\Application Data\InterMute
[2010/03/13 18:22:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.002\Application Data\PreCast
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.002\Application Data\SampleView
[2010/04/03 08:01:14 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.003\Application Data\DriverCure
[2010/05/17 05:32:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.003\Application Data\E5E962481DE05DDC6421D0AE2F15A524
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.003\Application Data\InterMute
[2010/03/31 10:46:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.003\Application Data\Lexmark Productivity Studio
[2010/03/15 14:19:31 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.003\Application Data\PreCast
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.003\Application Data\SampleView
[2010/05/17 05:31:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.004\Application Data\E5E962481DE05DDC6421D0AE2F15A524
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.004\Application Data\InterMute
[2010/05/07 06:23:49 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.004\Application Data\PreCast
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.004\Application Data\SampleView
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\InterMute
[2010/06/27 20:38:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\PreCast
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\SampleView
[2010/07/03 06:16:29 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\Tific
[2010/07/03 22:30:38 | 000,000,000 | —D | M] – C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Application Data\WinBatch
[2005/05/14 02:47:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Default User\Application Data\InterMute
[2005/05/14 02:42:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Default User\Application Data\SampleView
[2007/07/11 12:12:30 | 000,000,000 | —D | M] – C:\Documents and Settings\LocalService\Application Data\Juniper Networks
[2007/10/26 21:01:28 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Application Data\Juniper Networks
[2010/06/21 06:59:00 | 000,000,304 | —- | M] () – C:\WINDOWS\Tasks\Defraggler Volume C Task.job
[2010/06/27 20:38:50 | 000,000,286 | —- | M] () – C:\WINDOWS\Tasks\Easy Internet Sign-up.job
[2010/07/04 09:12:00 | 000,000,404 | —- | M] () – C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2170 series#1131995486.job
[2008/11/26 04:01:34 | 000,000,356 | —- | M] () – C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2170 series#1219755942.job
[2010/07/04 12:21:00 | 000,000,404 | —- | M] () – C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2170 series#1230934797.job
[2009/04/10 18:06:07 | 000,000,356 | —- | M] () – C:\WINDOWS\Tasks\FRU Task #Hewlett-Packard#hp psc 2170 series#1231462530.job
[2010/01/15 01:00:00 | 000,000,354 | —- | M] () – C:\WINDOWS\Tasks\McDefragTask.job
[2010/07/01 01:00:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\McQcTask.job
[2010/07/04 03:00:00 | 000,000,330 | -H– | M] () – C:\WINDOWS\Tasks\MP Scheduled Scan.job

========== Purity Check ==========

========== Alternate Data Streams ==========

@Alternate Data Stream - 135 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D287FACF
< End of report >

LastPaladin

Post #17July 5, 2010, 7:57 AM UTC

OTL Extras logfile created on: 7/4/2010 7:31:52 PM - Run 3
OTL by OldTimer - Version 3.2.7.1 Folder = C:\Documents and Settings\Compaq_Owner.YOUR-F78BF48CE2.005\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

895.00 Mb Total Physical Memory | 419.00 Mb Available Physical Memory | 47.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 180.31 Gb Total Space | 131.05 Gb Free Space | 72.68% Space Free | Partition Type: NTFS
Drive D: | 5.99 Gb Total Space | 0.98 Gb Free Space | 16.42% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-F78BF48CE2
Current User Name: Compaq_Owner
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Scan with SpySubtract…] – "C:\Program Files\InterMute\SpySubtract\SpySub.exe" "-sc" "%1" (InterMute, Inc.)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%ProgramFiles%\iTunes\iTunes.exe" = %ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes – (Apple Computer, Inc.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Computer, Inc.)
"C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe" = C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe:*:Enabled:BackWeb for Presario – (Hewlett-Packard)
"C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" = C:\Program Files\EarthLink TotalAccess\TaskPanl.exe:*:Enabled:Earthlink – File not found

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data
"{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}" = Microsoft Plus! Photo Story 2 LE
"{19C989C4-50AE-43A4-B06E-8C70FFFF852F}" = PC-Doctor for Windows
"{1A103D70-5C9B-4E1A-B306-5106C68F9914}" = Microsoft Plus! Dancer LE
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3912A629-0020-0005-3757-2FBA74D4DF0A}" = InterVideo WinDVD Player
"{3BA95526-6AE0-4B87-A62D-17187EF565FC}" = HP Boot Optimizer
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler
"{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}" = Microsoft Plus! Digital Media Edition Installer
"{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Easy Internet Sign-up
"{91120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD Player
"{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}" = HP Help and Support 4.0
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio
"{AC76BA86-0000-0000-0000-6028747ADE01}" = Adobe Acrobat - Reader 6.0.2 Update
"{AC76BA86-7AD7-1033-7B44-A00000000001}" = Adobe Reader 6.0.1
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy
"{BE20E2F5-1903-4AAE-B1AF-2046E586C925}" = iTunes
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D0122362-6333-4DE4-93F6-A5A2F3CC101A}" = Compaq Organize
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"045C89A0-CA37-443C-8826-F750227DE69C" = Shooting Stars Pool from Compaq (remove only)
"05E21449-3BA3-42BF-BBDA-95205F4EA40A" = Polar Bowler from Compaq (remove only)
"29FF6D07-4A15-41F1-9D5E-E0F3A58012C6" = Bounce Symphony from Compaq (remove only)
"3330A279-CC39-4A17-AE19-DA464B26AD9A" = Polar Golfer from Compaq (remove only)
"657A0149-EEC7-4FB2-AB4F-CB7AA027748E" = Final Drive Nitro from Compaq (remove only)
"66195170-D19D-46C5-8FB7-8A4630071ADC" = Tradewinds from Compaq (remove only)
"75528D5F-DD82-402E-BA7C-045B7DC6A712" = Blasterball 2 from Compaq (remove only)
"8BA6F58B-7A91-461F-95F8-E34F8BD8AA4E" = Slyder from Compaq (remove only)
"9D7E7CDA-051E-4B0D-8CEE-58F41F449CF9" = Blasterball 2 Remix from Compaq (remove only)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe_PhotoShop_Album" = Remove Adobe Photoshop Album 2.0 Starter Edition installer
"Agere Systems Soft Modem" = Agere Systems PCI Soft Modem
"BackWeb-6750491 Uninstaller" = Compaq Connections
"BFAF1EEC-E987-415B-BCB8-80CDB0BC6CDF" = Blackhawk Striker 2 from Compaq (remove only)
"C43D84CD-EBFC-48D3-A330-7868C8AD415A" = Crystal Maze from Compaq (remove only)
"CCCDE323-C76D-44DA-BB5B-B8ABE767756E" = Phoenix Assault from Compaq (remove only)
"D06AB82F-D68E-405A-9886-AB8804291B6D" = Blasterball 2 Holidays from Compaq (remove only)
"DE87FA96-7840-420C-86F9-33F3B7B3CED1" = Super Granny from Compaq (remove only)
"DivX Setup.divx.com" = DivX Setup
"ERUNT_is1" = ERUNT 1.1j
"ESET Online Scanner" = ESET Online Scanner v3
"F05A08BF-E600-4FBD-A53A-3D47296B1275" = Lexibox Deluxe from Compaq (remove only)
"FA7F5211-C629-4711-BD82-7DFFB08CB518" = Overball from Compaq (remove only)
"Help and Support Additions" = Help and Support Additions
"ie8" = Windows Internet Explorer 8
"InstallShield_{19C989C4-50AE-43A4-B06E-8C70FFFF852F}" = PC-Doctor for Windows
"InstallShield_{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Easy Internet Sign-up
"InstallShield_{BE20E2F5-1903-4AAE-B1AF-2046E586C925}" = iTunes
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Money" = Remove Microsoft Money 2005 installer
"NIS" = Norton Internet Security
"Norton Utilities_is1" = Norton Utilities
"PS2" = PS2
"Python 2.2.3" = Python 2.2.3
"pywin32-py2.2" = Python 2.2 pywin32 extensions (build 203)
"Quicken_NUE" = Remove Quicken New User Edition installer
"QuickTime" = QuickTime
"RealPlayer 6.0" = RealPlayer
"SiS VGA Driver" = SiS VGA Utilities
"SpySubtract" = SpySubtract
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WeatherBug" = Remove WeatherBug installer
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 3
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Search Defender" = Yahoo! Search Protection
"Yahoo! Software Update" = Yahoo! Software Update
"YInstHelper" = Yahoo! Install Manager

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 7/1/2010 4:38:08 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/1/2010 4:59:04 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application ATF-Cleaner.exe, version 3.0.0.2, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/1/2010 4:59:58 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application ATF-Cleaner.exe, version 3.0.0.2, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/1/2010 5:00:05 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application ATF-Cleaner.exe, version 3.0.0.2, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/1/2010 5:00:24 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application ATF-Cleaner.exe, version 3.0.0.2, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/1/2010 5:00:32 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application ATF-Cleaner.exe, version 3.0.0.2, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/1/2010 5:05:52 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application ATF-Cleaner.exe, version 3.0.0.2, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/1/2010 5:10:25 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application ATF-Cleaner.exe, version 3.0.0.2, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/1/2010 5:14:35 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application ATF-Cleaner.exe, version 3.0.0.2, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 7/5/2010 1:15:17 AM | Computer Name = YOUR-F78BF48CE2 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 7/4/2010 3:29:02 PM | Computer Name = YOUR-F78BF48CE2 | Source = NetBT | ID = 4321
Description = The name "WORKGROUP :1d" could not be registered on the Interface
with IP address 192.168.1.101. The machine with the IP address 192.168.1.103 did
not allow the name to be claimed by this machine.

Error - 7/4/2010 10:29:20 PM | Computer Name = YOUR-F78BF48CE2 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error
message: Insufficient system resources exist to complete the requested service.
.

Error - 7/4/2010 10:29:21 PM | Computer Name = YOUR-F78BF48CE2 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:\PROGRAM FILES\NORTON INTERNET
SECURITY\ENGINE\17.7.0.12\ASOEHOOK.DLL. Reference error message: The operation completed
successfully. .

Error - 7/4/2010 10:29:21 PM | Computer Name = YOUR-F78BF48CE2 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.VC90.CRT.mui. Reference
error message: Insufficient system resources exist to complete the requested service.
.

Error - 7/4/2010 10:29:21 PM | Computer Name = YOUR-F78BF48CE2 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:\PROGRAM FILES\NORTON INTERNET
SECURITY\ENGINE\17.7.0.12\ASOEHOOK.DLL. Reference error message: The operation completed
successfully. .

Error - 7/4/2010 10:29:22 PM | Computer Name = YOUR-F78BF48CE2 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.VC90.CRT. Reference error
message: Insufficient system resources exist to complete the requested service.
.

Error - 7/4/2010 10:29:22 PM | Computer Name = YOUR-F78BF48CE2 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:\PROGRAM FILES\NORTON INTERNET
SECURITY\ENGINE\17.7.0.12\ASOEHOOK.DLL. Reference error message: The operation completed
successfully. .

Error - 7/4/2010 10:33:11 PM | Computer Name = YOUR-F78BF48CE2 | Source = Srv | ID = 2019
Description = The server was unable to allocate from the system nonpaged pool because
the pool was empty.

Error - 7/4/2010 10:45:11 PM | Computer Name = YOUR-F78BF48CE2 | Source = Srv | ID = 2019
Description = The server was unable to allocate from the system nonpaged pool because
the pool was empty.

Error - 7/4/2010 10:57:11 PM | Computer Name = YOUR-F78BF48CE2 | Source = Srv | ID = 2019
Description = The server was unable to allocate from the system nonpaged pool because
the pool was empty.

< End of report >

_______________________________________________________________________________

LastPaladin

Post #18July 5, 2010, 8:29 AM UTC

Yes, the Autoplay is still running. It just looks like a "normal" window except that it's about 1.5 inches by 4 inches. It says "Autoplay" in the blue bar at the top (starting on the left), has a flashlight rolling left+right, an "activity bar" near the bottom that quickly moves several times across, and a "cancel" button to the right of the activity bar (that doesn't work). And it "opens" 1-10 windows on the bottom bar next to the "Start" button. There is no symbol on the "top bar" of the window but there is a "file" symbol on the "bottom" windows. It's screwing up my usage of the computer by constantly opening windows while I'm typing so I keep having to "click" the left button on my mouse where I'm typing so I can actually input words. Try typing something while a child is playing with your mouse. It also minimizes my screen if I try to watch full screen videos.

Attachments:

📎VEW.txt

LastPaladin

Post #19July 5, 2010, 8:37 AM UTC

GMER Log.

Attachments:

📎Gmer.txt

Jack&Jill

Post #20July 5, 2010, 3:42 PM UTC

Hello LastPaladin :),

I think I found the source of your problem, but I need to check a little bit further before I get rid of it to prevent any leftovers.

Check USB storage devices / removable drives

Please download USBNoRisk© by bobby and save to your desktop. Click here.
Double click on usbnorisk.exe and wait a couple of seconds for the initial scan to finish.
Connect your USB storage devices to the computer one at a time. Scanning will be done automatically.
If there are more than one USB storage devices, please take note of the order they are connected.
When all the devices are plugged in and the scanning done, right click on any location in the white box where the results are shown and select Save log.
Click OK when prompted and a log will open. It is saved to C:\USBNoRisk\UsbNoRisk.txt.
Post the contents of that log in your reply and close the program.

——————–

Please post back:
1. USBNoRisk log

LastPaladin

Post #21July 5, 2010, 7:20 PM UTC last edited July 5, 2010, 7:24 PM UTC

Unfortunately I cannot download the USBNoRisk to my computer from this site. It keeps coming up "Internet Explorer cannot display the webpage." Plus, no USB devices have been connected to this computer. As far as I know. At one time I did connect an external DVD drive to it because the current internal one isn't working, but that was at least 4 months ago.

Jack&Jill

Post #22July 6, 2010, 12:38 AM UTC

Hello LastPaladin :),

Lets skip the USBNoRisk step first while I clarify the issue with the developer.
——————–

Please download RegQuery© by Noviciate and save it to your desktop. Click here.

Double click on RegQuery.exe to run the program.

Copy and paste the following text into the white box:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9b88fe2f-827c-11df-80a3-806d6172696f}

Click the Query button. A Notepad file will open, please save it to a convenient location and post the contents of the report in your reply.
Click Exit to close the program.

——————–

Please post back:
1. the RegQuery result

LastPaladin

Post #23July 6, 2010, 8:49 AM UTC

Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9b88fe2f-827c-11df-80a3-806d6172696f}] "BaseClass"="Drive" "_AutorunStatus"=hex:01,00,01,00,00,01,00,df,df,5f,df,5f,5f,5f,5f,df,df,5f,5f,\ 5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,5f,df,df,df,5f,5f,df,\ 5f,5f,5f,5f,5f,cf,5f,5f,5f,5f,5f,cf,cf,5f,5f,5f,5f,cf,cf,cf,cf,cf,cf,cf,cf,\ 5f,cf,cf,cf,5f,5f,5f,5f,5f,5f,5f,5f,5f,5f,00,00,10,00,00,00,00,00,00

Jack&Jill

Post #24July 6, 2010, 1:19 PM UTC

Hello LastPaladin :),

Lets try USBNoRisk again. I know what went wrong.

Check for autorun infections

Please download USBNoRisk© by bobby and save to your desktop. Click here.
Double click on usbnorisk.exe and wait a couple of seconds for the initial scan to finish.
Right click on any location in the white box where the results are shown and select Save log.
Click OK when prompted and a log will open. It is saved to C:\USBNoRisk\UsbNoRisk.txt.
Post the contents of that log in your reply and close the program.

——————–

Please post back:
1. USBNoRisk log

LastPaladin

Post #25July 6, 2010, 7:25 PM UTC

USBNoRisk 2.5 (26 July 2009) by bobby

Started at 7/6/2010 9:22:50 AM

Searching for connected USB Mass storage…
—————————————-
========================================

Searching for other storage…
—————————————-
D: {9b88fe2a-827c-11df-80a3-806d6172696f}
C: {9b88fe2b-827c-11df-80a3-806d6172696f}
========================================

Scanning fixed storage…
—————————————-

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for 9b88fe2b-827c-11df-80a3-806d6172696f
—————————————-
Desktop.ini found at C:\temp\ contains file:// string
—————————————-
;[ExtShellFolderViews]
;Default={5984FFE0-28D4-11CF-AE66-08002B2E1262}
;{5984FFE0-28D4-11CF-AE66-08002B2E1262}={5984FFE0-28D4-11CF-AE66-08002B2E1262}

;[{5984FFE0-28D4-11CF-AE66-08002B2E1262}]
;PersistMoniker=file://Folder.htt

[.ShellClassInfo]
ConfirmFileOp=0
NoSharing=0
IconFile=cbplay.exe
IconIndex=0
InfoTip=CyberBoard ™ Play-by-EMail System
—————————————-
Referenced file C:\temp\Folder.htt not found
—————————————-

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for 9b88fe2a-827c-11df-80a3-806d6172696f
—————————————-
Desktop.ini found at D:\cmdcons\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\hp\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\I386\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\MiniNT\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\PRELOAD\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\RECOVERY\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\SYSTEM.SAV\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\TOOLS\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\System Volume Information\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-
Desktop.ini found at D:\Recycled\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}
—————————————-
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
—————————————-
Desktop.ini found at D:\ contains interesting CLSID string
—————————————-
[.ShellClassInfo]
CLSID={7f67036b-66f1-411a-ad85-759fb9c5b0db}

[ShellvRTF]
RTFPath="protect.ed"
—————————————-
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKCR\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\DefaultIcon,@ = C:\WINDOWS\system32\ShellvRTF.dll,0
HKLM\Software\Classes\CLSID\{7f67036b-66f1-411a-ad85-759fb9c5b0db}\InprocServer32,@ = C:\WINDOWS\system32\ShellvRTF.dll
—————————————-

========================================
Initial scan finished!
========================================

New device connected at 7/6/2010 9:22:52 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:22:53 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:22:53 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:22:53 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:22:53 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:22:54 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:22:54 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:23:05 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:23:07 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:23:14 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:23:15 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:23:16 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:23:16 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:23:16 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:23:16 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:23:16 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:23:44 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:23:49 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:23:50 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:23:51 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:23:51 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:23:52 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:23:52 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:23:52 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:23:52 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:23:52 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:24:04 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:24:09 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:24:10 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:24:10 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

New device connected at 7/6/2010 9:24:10 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================
========================================

========================================

New device connected at 7/6/2010 9:24:13 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:24:14 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

========================================

========================================

New device connected at 7/6/2010 9:24:15 AM

Scanning for connected removable storage…
—————————————-

========================================
New drive connected, but USBNoRisk can't find it
========================================

Jack&Jill

Post #26July 7, 2010, 12:29 AM UTC

Hello LastPaladin :),

Please backup your registry again with ERUNT.

Fix with OTL

Please disable your real time protection of any Antivirus, Antispyware or Antimalware programs temporarily. They will interfere and may cause unexpected results.
If you need help to disable your protection programs see here.
Double click on OTL.exe to run it.

Copy and paste the following text into the white box below Custom Scans/Fixes:

:reg
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9b88fe2f-827c-11df-80a3-806d6172696f}]

Click Run Fix.
Please post the contents of the fix log file back here if you are prompted to open the file. It can also be found at C:\_OTL\Moved Files as MMDDYYY_HHMMSS.log where MMDDYYY is date format and HHMMSS is time format.
If requested to reboot, please do so. The log file will open after restart.
Enable back your security softwares as soon as you completed the OTL fix steps.

——————–

Please post back:
1. the OTL fix log
2. does that fix your problem?

LastPaladin

Post #27July 7, 2010, 9:00 AM UTC last edited July 7, 2010, 9:20 AM UTC

1.

========== REGISTRY ==========
Registry key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9b88fe2f-827c-11df-80a3-806d6172696f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9b88fe2f-827c-11df-80a3-806d6172696f}\ not found.

OTL by OldTimer - Version 3.2.7.1 log created on 07062010_225202

2. I REALLY hope it does. But, I will try waiting 3 days to make sure. What, ME paranoid? I prefer the word PERCEPTIVE.

EDIT:

3. Yep, perceptive. It's still running.

Jack&Jill

Post #28July 8, 2010, 12:25 AM UTC

Hello LastPaladin :), Please wait a while to allow me to consult the issue with experts.

Jack&Jill

Post #29July 10, 2010, 1:57 AM UTC

Hello LastPaladin :), Do you have any special software that is used for mobile data synchronization? Or devices that you plug into your computer for similar purposes?

LastPaladin

Post #30July 11, 2010, 4:30 AM UTC

No, I have nothing that connects to any type of phone (or other device). And I normally don't plug anything into my computer either.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Infected with something that keeps running

✨ Ask AI

Ask AI