This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Win32.Pornpopup

13 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

In a Spybot scan I've been doing everyday, Win32.Pornpopup keeps on showing up on the list. Is there anyway to get rid of it? I've been noticing that my computer has been going a bit slower then usual, and also the weird thing is that I've had this before I reformatted and a few days later after the reformat, it's appeared again! Some help on what to do would be awesome. Here's the log from DDS: DDS (Ver_10-03-17.01) - NTFSX64 Run by [removed] at 8:07:03.88 on Thu 07/08/2010 Internet Explorer: 8.0.7600.16385 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.6143.4412 [GMT -4:00] SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Program Files (x86)\AVG\AVG9\avgchsva.exe C:\Program Files (x86)\AVG\AVG9\avgrsa.exe C:\Windows\system32\lsm.exe C:\Program Files (x86)\AVG\AVG9\avgcsrva.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Program Files (x86)\ASUS\ATK Hotkey\ASLDRSrv.exe C:\Program Files\ATKGFNEX\GFNEXSrv.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\WBVGAservice.exe C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\wbctlvga.exe C:\Program Files (x86)\AVG\AVG9\avgnsa.exe C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files (x86)\ASUS\Direct Console\DCHelper.exe C:\Program Files (x86)\ASUS\Splendid\ACMON.exe C:\Windows\SysWOW64\ACEngSvr.exe C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\wbctlvga.exe C:\Windows\sysWOW64\wbem\wmiprvse.exe C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files (x86)\Trillian\trillian.exe C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\AVG\AVG9\avgtray.exe C:\Program Files\Wireless Console 2\wcourier.exe C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe C:\Program Files\ASUS\Turbo Gear\GearHelp.exe C:\Program Files\ASUS\Turbo Gear\TurboGear.exe C:\Program Files (x86)\ASUS\Direct Console\Direct Console.exe C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\sysWOW64\wbem\wmiprvse.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Program Files\iPod\bin\iPodService.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\sppsvc.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\Ray\Downloads\dds.scr C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe ============== Pseudo HJT Report =============== mLocal Page = c:\windows\syswow64\blank.htm uInternet Settings,ProxyOverride = *.local mWinlogon: Userinit=userinit.exe BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files (x86)\avg\avg9\avgssie.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~2\spybot~1\SDHelper.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files (x86)\java\jre6\bin\jp2ssv.dll uRun: [Google Update] "c:\users\ray\appdata\local\google\update\GoogleUpdate.exe" /c uRun: [Steam] "c:\program files (x86)\steam\Steam.exe" -silent mRun: [SunJavaUpdateSched] "c:\program files (x86)\common files\java\java update\jusched.exe" mRun: [AVG9_TRAY] c:\progra~2\avg\avg9\avgtray.exe mRun: [HControlUser] c:\program files (x86)\asus\atk hotkey\HControlUser.exe mRun: [ATKOSD2] c:\program files (x86)\asus\atkosd2\ATKOSD2.exe mRun: [ATKMEDIA] c:\program files (x86)\asus\atk media\DMedia.exe mRun: [Turbo Gear Help] "c:\program files\asus\turbo gear\GearHelp.exe" mRun: [Turbo Gear] "c:\program files\asus\turbo gear\TurboGear.exe" -r mRun: [DirectConsole2] c:\program files (x86)\asus\direct console\Direct Console.exe mRun: [QuickTime Task] "c:\program files (x86)\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files (x86)\itunes\iTunesHelper.exe" StartupFolder: c:\users\ray\appdata\roaming\micros~1\windows\startm~1\programs\startup\trillian.lnk - c:\program files (x86)\trillian\trillian.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-explorer: ForceActiveDesktopOn = 0 (0x0) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - c:\progra~2\micros~1\office12\EXCEL.EXE/3000 IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~2\micros~1\office12\REFIEBAR.DLL IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~2\spybot~1\SDHelper.dll DPF: {169BC825-426A-4A96-940C-103DCC5363B1} - hxxp://audition2.ndolfin.com/Cab/GameStart.cab DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos/OnlineScanner.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab DPF: {E8408A1A-DADF-4212-BB96-AB8E0146CDCA} - hxxp://audition2.ndolfin.com/download/zdn.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files (x86)\avg\avg9\avgpp.dll BHO-X64: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - c:\program files (x86)\avg\avg9\avgssiea.dll BHO-X64: WormRadar.com IESiteBlocker.NavFilter - No File mRun-x64: [set] c:\programdata\SetWallpaper.cmd mRun-x64: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun-x64: [RtHDVCpl] c:\program files\realtek\audio\hda\RAVCpl64.exe -s mRun-x64: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe AppInit_DLLs-X64: avgrssta.dll Hosts: 127.0.0.1 www.spywareinfo.com ============= SERVICES / DRIVERS =============== R1 AvgLdx64;AVG Free AVI Loader Driver x64;c:\windows\system32\drivers\avgldx64.sys [2010-7-5 269904] R1 AvgMfx64;AVG Free On-access Scanner Minifilter Driver x64;c:\windows\system32\drivers\avgmfx64.sys [2010-7-5 35536] R1 AvgTdiA;AVG Free Network Redirector x64;c:\windows\system32\drivers\avgtdia.sys [2010-7-5 317520] R1 EIO64;EIO Driver;c:\windows\system32\drivers\EIO64.sys [2010-7-5 16384] R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-13 59904] R2 ASMMAP64;ASMMAP64;c:\program files\atkgfnex\ASMMAP64.sys [2010-7-5 14904] R2 avg9wd;AVG Free WatchDog;c:\program files (x86)\avg\avg9\avgwdsvc.exe [2010-7-5 308136] R2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\spybot - search & destroy\SDWinSec.exe [2010-7-5 1153368] R2 WBVGAservice;WB VGA Service;c:\program files (x86)\asus\turbo gear enhanced vga driver\WBVGAservice.exe [2010-7-5 72248] R3 enecir;ENE CIR Receiver;c:\windows\system32\drivers\enecir.sys [2009-5-20 70656] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt64win7.sys [2010-7-5 215040] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\microsoft.net\framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver;c:\windows\system32\drivers\SiSG664.sys [2009-6-10 56832] S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-7-5 1255736] =============== Created Last 30 ================ 2010-07-07 19:23:53 34152 —-a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-07-07 19:23:53 126312 —-a-w- c:\windows\system32\GEARAspi64.dll 2010-07-07 19:23:53 107368 —-a-w- c:\windows\syswow64\GEARAspi.dll 2010-07-07 19:23:42 0 d—–w- c:\program files\iPod 2010-07-07 19:23:41 0 d—–w- c:\programdata\{93E26451-CD9A-43A5-A2FA-C42392EA4001} 2010-07-07 19:23:41 0 d—–w- c:\program files\iTunes 2010-07-07 19:23:41 0 d—–w- c:\program files (x86)\iTunes 2010-07-07 19:22:34 0 d—–w- c:\programdata\Apple Computer 2010-07-07 19:22:17 0 d—–w- c:\program files\common files\Apple 2010-07-07 19:22:11 0 d—–w- c:\program files\Bonjour 2010-07-07 19:22:11 0 d—–w- c:\program files (x86)\Bonjour 2010-07-07 19:22:08 0 d—–w- c:\programdata\Apple 2010-07-07 15:08:40 0 d—–w- c:\programdata\NexonUS 2010-07-07 15:06:49 0 d—–w- C:\Nexon 2010-07-07 12:20:02 0 d—–w- c:\users\ray\appdata\roaming\Azureus 2010-07-07 12:19:21 0 d—–w- c:\program files (x86)\Vuze 2010-07-07 04:25:29 0 d—–w- c:\program files (x86)\Ndolfin 2010-07-06 17:29:29 0 d—–w- c:\users\ray\appdata\roaming\Auslogics 2010-07-06 10:13:16 70656 —-a-w- c:\windows\system32\PCLECoInst64.dll 2010-07-06 10:13:16 6400 —-a-w- c:\windows\system32\drivers\emFilter64.sys 2010-07-06 10:13:16 6144 —-a-w- c:\windows\system32\drivers\emScan64.sys 2010-07-06 10:13:16 215808 —-a-w- c:\windows\system32\drivers\emDevice64.sys 2010-07-06 10:13:15 57344 —-a-w- c:\windows\syswow64\emVFW.dll 2010-07-06 10:13:15 32768 —-a-w- c:\windows\syswow64\emProp.ax 2010-07-06 10:13:15 17808 —-a-w- c:\windows\syswow64\emYUV.dll 2010-07-06 10:13:15 13824 —-a-w- c:\windows\system32\emUSD64.dll 2010-07-06 10:13:13 79872 —-a-w- c:\windows\system32\drivers\emAudio64.sys 2010-07-06 10:12:55 0 d—–w- c:\program files (x86)\Pinnacle 2010-07-06 10:12:55 0 d—–w- c:\program files (x86)\common files\Pinnacle 2010-07-06 04:04:12 0 d—–w- c:\users\ray\appdata\roaming\Trillian 2010-07-05 22:53:38 24 —-a-w- c:\windows\ATKPF.ini 2010-07-05 21:58:02 0 —ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2010-07-05 21:01:51 0 d—–w- c:\windows\syswow64\directx 2010-07-05 20:57:03 0 d—–w- c:\program files\Ventrilo 2010-07-05 20:57:01 262 —-a-w- c:\windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini 2010-07-05 20:34:55 0 d—–w- C:\Audition2 2010-07-05 17:17:35 0 d—–w- c:\program files (x86)\ESET 2010-07-05 16:25:23 0 d–h–w- C:\$AVG 2010-07-05 16:16:49 183296 —-a-w- c:\windows\syswow64\ACEngSvr.exe 2010-07-05 16:15:58 0 d—–w- c:\program files (x86)\Wireless Console 2 2010-07-05 16:15:56 0 d—–w- c:\program files\Wireless Console 2 2010-07-05 16:14:17 16384 —-a-w- c:\windows\system32\drivers\EIO64.sys 2010-07-05 16:14:01 0 d—–w- c:\program files\ASUS 2010-07-05 16:13:06 90112 —-a-w- c:\windows\system32\snymsico.dll 2010-07-05 16:13:05 67584 —-a-w- c:\windows\system32\drivers\rimmpx64.sys 2010-07-05 16:13:04 57856 —-a-w- c:\windows\system32\drivers\rixdpx64.sys 2010-07-05 16:13:04 55296 —-a-w- c:\windows\system32\drivers\rimspx64.sys 2010-07-05 16:13:04 172032 —-a-w- c:\windows\system32\rixdicon.dll 2010-07-05 16:11:53 0 d—–w- c:\program files\DIFX 2010-07-05 16:11:52 0 —ha-w- c:\windows\system32\drivers\Msft_Kernel_enecir_01009.Wdf 2010-07-05 16:11:50 1436920 —-a-w- c:\windows\system32\WdfCoInstaller01009.dll 2010-07-05 16:11:37 42176 —-a-w- c:\windows\system32\drivers\sncduvc.sys 2010-07-05 16:11:37 386 —-a-w- c:\windows\Uninstuxga.reg 2010-07-05 16:11:37 386 —-a-w- c:\windows\Uninstsxga.reg 2010-07-05 16:11:37 384 —-a-w- c:\windows\Uninstvga.reg 2010-07-05 16:11:37 2266 —-a-w- c:\windows\Uninstvga.bat 2010-07-05 16:11:37 2008 —-a-w- c:\windows\Uninstsxga.bat 2010-07-05 16:11:37 19008 —-a-w- c:\windows\DrvInst.exe 2010-07-05 16:11:37 1806400 —-a-w- c:\windows\system32\drivers\snp2uvc.sys 2010-07-05 16:11:37 1682 —-a-w- c:\windows\Uninstuxga.bat 2010-07-05 16:08:48 0 —ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01007.Wdf 2010-07-05 16:08:45 0 d—–w- c:\program files\Synaptics 2010-07-05 16:08:40 274480 —-a-w- c:\windows\system32\drivers\SynTP.sys 2010-07-05 16:08:40 107816 —-a-w- c:\windows\syswow64\SynTPCOM.dll 2010-07-05 16:08:39 261416 —-a-w- c:\windows\system32\SynCtrl.dll 2010-07-05 16:08:39 206120 —-a-w- c:\windows\syswow64\SynCtrl.dll 2010-07-05 16:08:39 204072 —-a-w- c:\windows\system32\SynTPAPI.dll 2010-07-05 16:08:39 169256 —-a-w- c:\windows\syswow64\SynCOM.dll 2010-07-05 16:08:39 1490656 —-a-w- c:\windows\system32\WdfCoInstaller01007.dll 2010-07-05 16:08:39 147752 —-a-w- c:\windows\system32\SynTPCo4.dll 2010-07-05 16:08:07 0 d—–w- c:\windows\syswow64\RTCOM 2010-07-05 16:08:07 0 d—–w- c:\program files\Realtek 2010-07-05 16:07:33 0 d–h–w- c:\program files (x86)\Temp 2010-07-05 16:06:43 67584 —-a-w- c:\windows\system32\RtNicProp64.dll 2010-07-05 16:06:29 215040 —-a-w- c:\windows\system32\drivers\Rt64win7.sys 2010-07-05 16:06:28 0 d—–w- c:\program files (x86)\Realtek 2010-07-05 16:04:51 0 d—–w- c:\windows\syswow64\AGEIA 2010-07-05 16:04:33 0 d—–w- c:\program files (x86)\common files\Wise Installation Wizard 2010-07-05 16:02:00 0 d—–w- c:\program files (x86)\ASUS 2010-07-05 16:01:20 0 d—–w- c:\program files\ATKGFNEX 2010-07-05 16:00:12 15416 —-a-w- c:\windows\system32\drivers\kbfiltr.sys 2010-07-05 15:56:25 53248 —-a-r- c:\windows\syswow64\CSVer.dll 2010-07-05 15:56:07 0 d—–w- C:\Intel 2010-07-05 15:38:01 13048 —-a-w- c:\windows\system32\avgrssta.dll 2010-07-05 15:37:59 317520 —-a-w- c:\windows\system32\drivers\avgtdia.sys 2010-07-05 15:37:53 269904 —-a-w- c:\windows\system32\drivers\avgldx64.sys 2010-07-05 15:37:51 35536 —-a-w- c:\windows\system32\drivers\avgmfx64.sys 2010-07-05 15:37:51 0 d—–w- c:\windows\system32\drivers\Avg 2010-07-05 15:37:44 0 d—–w- c:\programdata\avg9 2010-07-05 15:37:44 0 d—–w- c:\program files (x86)\AVG 2010-07-05 15:36:10 0 d—–w- c:\programdata\Spybot - Search & Destroy 2010-07-05 15:36:10 0 d—–w- c:\program files (x86)\Spybot - Search & Destroy 2010-07-05 15:34:51 0 d—–w- c:\windows\PCHEALTH 2010-07-05 15:33:37 0 d—–w- c:\program files\Microsoft Office 2010-07-05 15:33:09 0 d—–w- c:\programdata\Microsoft Help 2010-07-05 15:26:51 0 d—–w- c:\program files (x86)\K-Lite Codec Pack 2010-07-05 15:26:46 0 d—–w- c:\program files (x86)\Auslogics 2010-07-05 15:26:29 0 d—–w- c:\program files (x86)\Steam 2010-07-05 15:26:29 0 d—–w- c:\program files (x86)\common files\Steam 2010-07-05 15:26:25 0 d—–w- c:\program files\WinRAR 2010-07-05 15:26:25 0 d—–w- c:\program files (x86)\CCleaner 2010-07-05 15:26:24 0 d—–w- c:\programdata\Sun 2010-07-05 15:25:54 0 d—–w- c:\windows\syswow64\Macromed 2010-07-05 15:19:01 311808 —-a-w- c:\windows\system32\msv1_0.dll 2010-07-05 15:19:01 257024 —-a-w- c:\windows\syswow64\msv1_0.dll 2010-07-05 15:16:42 0 d—–w- c:\programdata\NVIDIA 2010-07-05 15:13:59 0 d—–w- c:\windows\syswow64\Wat 2010-07-05 15:13:59 0 d—–w- c:\windows\system32\Wat 2010-07-05 15:07:39 539168 —-a-w- c:\windows\system32\nvuninst.exe 2010-07-05 15:05:19 0 d-sh–w- c:\windows\Installer 2010-07-05 15:04:09 14336 —-a-w- c:\windows\system32\drivers\sffp_sd.sys 2010-07-05 15:04:09 109056 —-a-w- c:\windows\system32\drivers\sdbus.sys 2010-07-05 15:03:02 99176 —-a-w- c:\windows\syswow64\PresentationHostProxy.dll 2010-07-05 15:03:02 49472 —-a-w- c:\windows\syswow64\netfxperf.dll 2010-07-05 15:03:02 48960 —-a-w- c:\windows\system32\netfxperf.dll 2010-07-05 15:03:02 444752 —-a-w- c:\windows\system32\mscoree.dll 2010-07-05 15:03:02 320352 —-a-w- c:\windows\system32\PresentationHost.exe 2010-07-05 15:03:02 297808 —-a-w- c:\windows\syswow64\mscoree.dll 2010-07-05 15:03:02 295264 —-a-w- c:\windows\syswow64\PresentationHost.exe 2010-07-05 15:03:02 1942856 —-a-w- c:\windows\system32\dfshim.dll 2010-07-05 15:03:02 1130824 —-a-w- c:\windows\syswow64\dfshim.dll 2010-07-05 15:03:02 109912 —-a-w- c:\windows\system32\PresentationHostProxy.dll 2010-07-05 14:57:10 270208 ——w- c:\windows\system32\MpSigStub.exe 2010-07-05 14:51:47 220672 —-a-w- c:\windows\system32\wintrust.dll 2010-07-05 14:51:47 172032 —-a-w- c:\windows\syswow64\wintrust.dll 2010-07-05 14:51:36 139264 —-a-w- c:\windows\system32\cabview.dll 2010-07-05 14:51:36 132608 —-a-w- c:\windows\syswow64\cabview.dll ==================== Find3M ==================== 2010-07-05 15:26:13 411368 —-a-w- c:\windows\syswow64\deployJava1.dll 2010-07-05 15:26:13 153376 —-a-w- c:\windows\syswow64\javaws.exe 2010-07-05 15:26:13 145184 —-a-w- c:\windows\syswow64\javaw.exe 2010-07-05 15:26:13 145184 —-a-w- c:\windows\syswow64\java.exe 2010-06-28 08:00:00 108032 —-a-w- c:\windows\syswow64\ff_vfw.dll 2010-06-08 16:10:50 790528 —-a-w- c:\windows\syswow64\xvidcore.dll 2010-06-08 16:10:50 134144 —-a-w- c:\windows\syswow64\xvidvfw.dll 2010-06-02 08:55:30 77656 —-a-w- c:\windows\system32\XAPOFX1_5.dll 2010-06-02 08:55:30 74072 —-a-w- c:\windows\syswow64\XAPOFX1_5.dll 2010-06-02 08:55:30 527192 —-a-w- c:\windows\syswow64\XAudio2_7.dll 2010-06-02 08:55:30 518488 —-a-w- c:\windows\system32\XAudio2_7.dll 2010-06-02 08:55:30 239960 —-a-w- c:\windows\syswow64\xactengine3_7.dll 2010-06-02 08:55:30 176984 —-a-w- c:\windows\system32\xactengine3_7.dll 2010-05-27 07:24:13 34304 —-a-w- c:\windows\syswow64\atmlib.dll 2010-05-27 06:34:09 46080 —-a-w- c:\windows\system32\atmlib.dll 2010-05-27 04:11:32 366080 —-a-w- c:\windows\system32\atmfd.dll 2010-05-27 03:49:37 293888 —-a-w- c:\windows\syswow64\atmfd.dll 2010-05-26 15:41:02 511328 —-a-w- c:\windows\system32\d3dx10_43.dll 2010-05-26 15:41:02 470880 —-a-w- c:\windows\syswow64\d3dx10_43.dll 2010-05-26 15:41:02 276832 —-a-w- c:\windows\system32\d3dx11_43.dll 2010-05-26 15:41:02 2526056 —-a-w- c:\windows\system32\D3DCompiler_43.dll 2010-05-26 15:41:02 248672 —-a-w- c:\windows\syswow64\d3dx11_43.dll 2010-05-26 15:41:02 2106216 —-a-w- c:\windows\syswow64\D3DCompiler_43.dll 2010-05-26 15:41:02 1998168 —-a-w- c:\windows\syswow64\D3DX9_43.dll 2010-05-26 15:41:02 1907552 —-a-w- c:\windows\system32\d3dcsx_43.dll 2010-05-26 15:41:02 1868128 —-a-w- c:\windows\syswow64\d3dcsx_43.dll 2010-05-26 15:41:00 2401112 —-a-w- c:\windows\system32\D3DX9_43.dll 2010-05-21 05:52:30 1192960 —-a-w- c:\windows\system32\wininet.dll 2010-05-21 05:18:06 977920 —-a-w- c:\windows\syswow64\wininet.dll 2010-05-21 05:14:50 48128 —-a-w- c:\windows\syswow64\jsproxy.dll 2010-05-18 20:55:18 95520 —-a-w- c:\windows\system32\dnssd.dll 2010-05-18 20:55:18 69408 —-a-w- c:\windows\system32\jdns_sd.dll 2010-05-18 20:55:18 237856 —-a-w- c:\windows\system32\dnssdX.dll 2010-05-18 20:55:18 119584 —-a-w- c:\windows\system32\dns-sd.exe 2010-05-18 20:35:16 91424 —-a-w- c:\windows\syswow64\dnssd.dll 2010-05-18 20:35:16 75040 —-a-w- c:\windows\syswow64\jdns_sd.dll 2010-05-18 20:35:16 197920 —-a-w- c:\windows\syswow64\dnssdX.dll 2010-05-18 20:35:16 107808 —-a-w- c:\windows\syswow64\dns-sd.exe 2010-05-09 09:46:00 961024 —-a-w- c:\windows\system32\CPFilters.dll 2010-05-09 09:45:57 552960 —-a-w- c:\windows\system32\msdri.dll 2010-05-09 09:14:55 641536 —-a-w- c:\windows\syswow64\CPFilters.dll 2010-05-06 12:42:05 1225216 —-a-w- c:\windows\syswow64\urlmon.dll 2010-05-06 12:41:55 606208 —-a-w- c:\windows\syswow64\mstime.dll 2010-05-06 12:41:53 64512 —-a-w- c:\windows\syswow64\msfeedsbs.dll 2010-05-06 12:41:53 5970944 —-a-w- c:\windows\syswow64\mshtml.dll 2010-05-06 12:41:49 381440 —-a-w- c:\windows\syswow64\iedkcs32.dll 2010-05-06 12:41:49 10984448 —-a-w- c:\windows\syswow64\ieframe.dll 2010-05-01 15:07:05 3122176 —-a-w- c:\windows\system32\win32k.sys 2010-04-23 07:13:36 2048 —-a-w- c:\windows\syswow64\tzres.dll 2010-04-23 07:11:58 2048 —-a-w- c:\windows\system32\tzres.dll 2009-07-14 05:37:38 31548 —-a-w- c:\windows\inf\perflib\0409\perfd.dat 2009-07-14 05:37:38 31548 —-a-w- c:\windows\inf\perflib\0409\perfc.dat 2009-07-14 05:37:38 291294 —-a-w- c:\windows\inf\perflib\0409\perfi.dat 2009-07-14 05:37:38 291294 —-a-w- c:\windows\inf\perflib\0409\perfh.dat 2009-07-14 04:54:24 174 –sha-w- c:\program files\desktop.ini 2009-07-14 04:54:24 174 –sha-w- c:\program files (x86)\desktop.ini 2009-07-14 01:00:34 291294 —-a-w- c:\windows\inf\perflib\0000\perfi.dat 2009-07-14 01:00:34 291294 —-a-w- c:\windows\inf\perflib\0000\perfh.dat 2009-07-14 01:00:32 31548 —-a-w- c:\windows\inf\perflib\0000\perfd.dat 2009-07-14 01:00:32 31548 —-a-w- c:\windows\inf\perflib\0000\perfc.dat 2009-06-10 20:44:08 9633792 –sha-r- c:\windows\fonts\StaticCache.dat 2009-07-14 01:39:53 398848 –sha-w- c:\windows\winsxs\amd64_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_4d4d1f2f696639a2\WinMail.exe 2009-07-14 01:14:45 396800 –sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe ============= FINISH: 8:08:45.05 ===============
Clean out all your cookies and temp file history

empty the spybot quarantine

then do the following:

Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't, manually reboot to ensure a complete clean
It's normal after running TFC cleaner that the PC will be slower to boot the first time.


NEXT




Download OTL to your Desktop
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Under the Custom Scan box paste this in


    netsvcs
    drivers32 /all
    %SYSTEMDRIVE%\*.*
    %systemroot%\system32\*.wt
    %systemroot%\system32\*.ruy
    %systemroot%\Fonts\*.com
    %systemroot%\Fonts\*.dll
    %systemroot%\Fonts\*.ini
    %systemroot%\Fonts\*.ini2
    %systemroot%\system32\spool\prtprocs\w32x86\*.tmp
    %systemroot%\system32\Spool\prtprocs\w32x86\*.dll
    %systemroot%\*. /mp /s
    CREATERESTOREPOINT
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\user32.dll /md5
    %systemroot%\system32\ws2_32.dll /md5
    %systemroot%\system32\ws2help.dll /md5
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs


  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them in your next reply.
Here's the OTL.txt log.


OTL logfile created on: 7/10/2010 11:25:49 AM - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Ray\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

6.00 Gb Total Physical Memory | 5.00 Gb Available Physical Memory | 75.00% Memory free
12.00 Gb Paging File | 10.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453.94 Gb Total Space | 377.82 Gb Free Space | 83.23% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 465.75 Gb Total Space | 53.60 Gb Free Space | 11.51% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: RAY-PC
Current User Name: Ray
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Minimal
Quick Scan

========== Processes (SafeList) ==========

PRC - C:\Users\Ray\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\Direct Console\Direct Console.exe (ASUSTek.)
PRC - C:\Program Files\ASUS\Turbo Gear\TurboGear.exe ()
PRC - C:\Program Files\ASUS\Turbo Gear\GearHelp.exe ()
PRC - C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\wbctlvga.exe (ASUSTeK Inc.)
PRC - C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\WBVGAservice.exe ()
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\Direct Console\DCHelper.exe (TODO: )
PRC - C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()


========== Modules (SafeList) ==========

MOD - C:\Users\Ray\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (ATKGFNEXSrv) – C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (avg9wd) – C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (Apple Mobile Device) – C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (clr_optimization_v4.0.30319_64) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ASLDRService) – C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe (ASUS)
SRV - (WBVGAservice) – C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\WBVGAservice.exe ()
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (AvgTdiA) – C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgLdx64) – C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgMfx64) – C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (athr) – C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (EIO64) – C:\Windows\SysNative\drivers\EIO64.sys (ASUSTeK Computer Inc.)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (kbfiltr) – C:\Windows\SysNative\drivers\kbfiltr.sys ( )
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (rimmptsk) – C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV:64bit: - (rismxdp) – C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimsptsk) – C:\Windows\SysNative\drivers\rimspx64.sys (REDC)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (SiSGbeLH) – C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) – C:\Windows\SysNative\drivers\snp2uvc.sys ()
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (enecir) – C:\Windows\SysNative\drivers\enecir.sys (ENE TECHNOLOGY INC.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (MTsensor) – C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS)
DRV:64bit: - (emAudio) – C:\Windows\SysNative\drivers\emAudio64.sys (eMPIA Technology, Inc.)
DRV:64bit: - (ASMMAP64) – C:\Program Files\ATKGFNEX\ASMMAP64.sys ()
DRV:64bit: - (DCamUSBEMPIA) – C:\Windows\SysNative\drivers\emDevice64.sys (eMPIA Technology, Inc.)
DRV:64bit: - (FiltUSBEMPIA) – C:\Windows\SysNative\drivers\emFilter64.sys (eMPIA Technology, Inc.)
DRV:64bit: - (ScanUSBEMPIA) – C:\Windows\SysNative\drivers\emScan64.sys (eMPIA Technology, Inc.)
DRV:64bit: - (MarvinBus) – C:\Windows\SysNative\drivers\MarvinBus64.sys (Pinnacle Systems GmbH)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 97 DE C4 F7 50 1C CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local



O1 HOSTS File: ([2010/07/05 11:41:33 | 000,411,486 | R— | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14216 more lines…
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [set] c:\programdata\SetWallpaper.cmd File not found
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DirectConsole2] C:\Program Files (x86)\ASUS\Direct Console\Direct Console.exe (ASUSTek.)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Turbo Gear] C:\Program Files\ASUS\Turbo Gear\TurboGear.exe ()
O4 - HKLM..\Run: [Turbo Gear Help] C:\Program Files\ASUS\Turbo Gear\GearHelp.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - Startup: C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk = C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {169BC825-426A-4A96-940C-103DCC5363B1} http://audition2.ndolfin.com/Cab/GameStart.cab (Game Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {E8408A1A-DADF-4212-BB96-AB8E0146CDCA} http://audition2.ndolfin.com/download/zdn.cab (Zdn Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{97830052-8859-11df-b9aa-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{97830052-8859-11df-b9aa-806e6f6e6963}\Shell\AutoRun\command - "" = D:\InstAll.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*


Drivers32:64bit: aux - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midimapper - midimap.dll (Microsoft Corporation)
Drivers32:64bit: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:64bit: MSVideo8 - VfWWDM32.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.I420 - File not found
Drivers32:64bit: VIDC.IYUV - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.UYVY - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YUY2 - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YVU9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YVYU - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: wave - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: aux - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - C:\Windows\SysWow64\midimap.dll (Microsoft Corporation)
Drivers32: mixer - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.ac3acm - C:\Windows\SysWow64\ac3acm.acm (fccHandler)
Drivers32: msacm.imaadpcm - C:\Windows\SysWow64\imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\SysWow64\lameACM.acm (http://www.mp3dev.org/)
Drivers32: msacm.msadpcm - C:\Windows\SysWow64\msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - C:\Windows\SysWow64\msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - C:\Windows\SysWow64\msgsm32.acm (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: vidc.i420 - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.iyuv - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - C:\Windows\SysWow64\msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - C:\Windows\SysWow64\msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: VIDC.XVID - C:\Windows\SysWow64\xvidvfw.dll ()
Drivers32: vidc.yuy2 - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: VIDC.YV12 - C:\Windows\SysWow64\yv12vfw.dll (www.helixcommunity.org)
Drivers32: vidc.yvu9 - C:\Windows\SysWow64\tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: wave - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - C:\Windows\SysWow64\msacm32.drv (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 90 Days ==========

[2010/07/10 11:23:43 | 000,574,976 | —- | C] (OldTimer Tools) – C:\Users\Ray\Desktop\OTL.exe
[2010/07/10 11:19:11 | 000,444,416 | —- | C] (OldTimer Tools) – C:\Users\Ray\Desktop\TFC.exe
[2010/07/07 15:24:02 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Apple Computer
[2010/07/07 15:24:02 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Apple Computer
[2010/07/07 15:23:52 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2010/07/07 15:23:42 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/07/07 15:23:41 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/07/07 15:23:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2010/07/07 15:23:41 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2010/07/07 15:22:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2010/07/07 15:22:34 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2010/07/07 15:22:28 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Apple
[2010/07/07 15:22:26 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2010/07/07 15:22:17 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2010/07/07 15:22:11 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/07/07 15:22:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2010/07/07 15:22:08 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2010/07/07 15:22:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2010/07/07 14:47:49 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\WinRAR
[2010/07/07 11:08:40 | 000,000,000 | —D | C] – C:\ProgramData\NexonUS
[2010/07/07 11:06:49 | 000,000,000 | —D | C] – C:\Nexon
[2010/07/07 11:06:41 | 000,000,000 | –SD | C] – C:\Users\Ray\Documents\Mabinogi
[2010/07/07 08:23:12 | 000,000,000 | —D | C] – C:\Users\Ray\Documents\Vuze Downloads
[2010/07/07 08:20:02 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Azureus
[2010/07/07 08:19:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Vuze
[2010/07/07 00:25:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Ndolfin
[2010/07/06 15:25:12 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Media Player Classic
[2010/07/06 13:29:29 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Auslogics
[2010/07/06 06:15:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe
[2010/07/06 06:15:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Adobe
[2010/07/06 06:13:16 | 000,215,808 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\drivers\emDevice64.sys
[2010/07/06 06:13:16 | 000,070,656 | —- | C] (Pinnacle Systems) – C:\Windows\SysNative\PCLECoInst64.dll
[2010/07/06 06:13:16 | 000,006,400 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\drivers\emFilter64.sys
[2010/07/06 06:13:16 | 000,006,144 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\drivers\emScan64.sys
[2010/07/06 06:13:15 | 000,057,344 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysWow64\emVFW.dll
[2010/07/06 06:13:15 | 000,032,768 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysWow64\emProp.ax
[2010/07/06 06:13:15 | 000,013,824 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\emUSD64.dll
[2010/07/06 06:13:13 | 000,079,872 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\drivers\emAudio64.sys
[2010/07/06 06:12:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Pinnacle
[2010/07/06 06:12:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Pinnacle
[2010/07/06 06:12:18 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Downloaded Installations
[2010/07/06 00:04:12 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Trillian
[2010/07/06 00:03:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trillian
[2010/07/05 17:52:06 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Microsoft Games
[2010/07/05 17:01:51 | 000,000,000 | —D | C] – C:\Windows\SysWow64\directx
[2010/07/05 16:57:19 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Ventrilo
[2010/07/05 16:57:03 | 000,000,000 | —D | C] – C:\Program Files\Ventrilo
[2010/07/05 16:34:55 | 000,000,000 | —D | C] – C:\Audition2
[2010/07/05 13:28:15 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2010/07/05 13:20:27 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010/07/05 13:17:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\ESET
[2010/07/05 12:25:23 | 000,000,000 | -H-D | C] – C:\$AVG
[2010/07/05 12:16:49 | 000,183,296 | —- | C] (ASUSTeK) – C:\Windows\SysWow64\ACEngSvr.exe
[2010/07/05 12:15:58 | 000,000,000 | —D | C] – C:\Program Files (x86)\Wireless Console 2
[2010/07/05 12:15:56 | 000,000,000 | —D | C] – C:\Program Files\Wireless Console 2
[2010/07/05 12:14:17 | 000,016,384 | —- | C] (ASUSTeK Computer Inc.) – C:\Windows\SysNative\drivers\EIO64.sys
[2010/07/05 12:14:01 | 000,000,000 | —D | C] – C:\Program Files\ASUS
[2010/07/05 12:13:05 | 000,067,584 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rimmpx64.sys
[2010/07/05 12:13:04 | 000,172,032 | —- | C] (Ricoh Company,Ltd) – C:\Windows\SysNative\rixdicon.dll
[2010/07/05 12:13:04 | 000,057,856 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rixdpx64.sys
[2010/07/05 12:13:04 | 000,055,296 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rimspx64.sys
[2010/07/05 12:11:53 | 000,000,000 | —D | C] – C:\Program Files\DIFX
[2010/07/05 12:11:37 | 000,019,008 | —- | C] (Chicony © 2006 ATC) – C:\Windows\DrvInst.exe
[2010/07/05 12:08:45 | 000,000,000 | —D | C] – C:\Program Files\Synaptics
[2010/07/05 12:08:40 | 000,274,480 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\drivers\SynTP.sys
[2010/07/05 12:08:40 | 000,107,816 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynTPCOM.dll
[2010/07/05 12:08:39 | 000,261,416 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynCtrl.dll
[2010/07/05 12:08:39 | 000,206,120 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynCtrl.dll
[2010/07/05 12:08:39 | 000,204,072 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynTPAPI.dll
[2010/07/05 12:08:39 | 000,169,256 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynCOM.dll
[2010/07/05 12:08:39 | 000,147,752 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynTPCo4.dll
[2010/07/05 12:08:07 | 000,000,000 | —D | C] – C:\Windows\SysWow64\RTCOM
[2010/07/05 12:08:07 | 000,000,000 | —D | C] – C:\Program Files\Realtek
[2010/07/05 12:07:49 | 000,513,536 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSTSX64.dll
[2010/07/05 12:07:49 | 000,211,376 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSTSH64.dll
[2010/07/05 12:07:49 | 000,150,528 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSWOW64.dll
[2010/07/05 12:07:48 | 000,193,536 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSHP64.dll
[2010/07/05 12:07:41 | 000,304,640 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DHT64.dll
[2010/07/05 12:07:41 | 000,304,640 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DAA64.dll
[2010/07/05 12:07:38 | 000,311,296 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPO20.dll
[2010/07/05 12:07:35 | 000,294,400 | —- | C] (Fortemedia Corporation) – C:\Windows\SysNative\FMAPO64.dll
[2010/07/05 12:07:33 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Temp
[2010/07/05 12:07:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InstallShield
[2010/07/05 12:06:29 | 000,215,040 | —- | C] (Realtek ) – C:\Windows\SysNative\drivers\Rt64win7.sys
[2010/07/05 12:06:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Realtek
[2010/07/05 12:04:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\AGEIA Technologies
[2010/07/05 12:04:51 | 000,000,000 | —D | C] – C:\Windows\SysWow64\AGEIA
[2010/07/05 12:04:33 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2010/07/05 12:02:00 | 000,000,000 | —D | C] – C:\Program Files (x86)\ASUS
[2010/07/05 12:01:20 | 000,000,000 | —D | C] – C:\Program Files\ATKGFNEX
[2010/07/05 12:01:12 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2010/07/05 12:00:24 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\InstallShield
[2010/07/05 12:00:12 | 000,015,416 | —- | C] ( ) – C:\Windows\SysNative\drivers\kbfiltr.sys
[2010/07/05 11:56:25 | 000,053,248 | R— | C] (Windows XP Bundled build C-Centric Single User) – C:\Windows\SysWow64\CSVer.dll
[2010/07/05 11:56:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Intel
[2010/07/05 11:56:07 | 000,000,000 | —D | C] – C:\Intel
[2010/07/05 11:53:13 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Macromedia
[2010/07/05 11:53:13 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Adobe
[2010/07/05 11:38:01 | 000,013,048 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\avgrssta.dll
[2010/07/05 11:37:59 | 000,317,520 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgtdia.sys
[2010/07/05 11:37:53 | 000,269,904 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgldx64.sys
[2010/07/05 11:37:51 | 000,035,536 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgmfx64.sys
[2010/07/05 11:37:51 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\Avg
[2010/07/05 11:37:44 | 000,000,000 | —D | C] – C:\ProgramData\avg9
[2010/07/05 11:37:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\AVG
[2010/07/05 11:36:10 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2010/07/05 11:36:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\Spybot - Search & Destroy
[2010/07/05 11:35:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Works
[2010/07/05 11:34:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Visual Studio
[2010/07/05 11:34:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2010/07/05 11:34:51 | 000,000,000 | —D | C] – C:\Windows\PCHEALTH
[2010/07/05 11:33:37 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2010/07/05 11:33:10 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Microsoft Help
[2010/07/05 11:33:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2010/07/05 11:33:09 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Help
[2010/07/05 11:32:51 | 000,000,000 | RH-D | C] – C:\MSOCache
[2010/07/05 11:26:53 | 000,839,680 | —- | C] (http://www.mp3dev.org/) – C:\Windows\SysWow64\lameACM.acm
[2010/07/05 11:26:53 | 000,217,088 | —- | C] (www.helixcommunity.org) – C:\Windows\SysWow64\yv12vfw.dll
[2010/07/05 11:26:53 | 000,151,552 | —- | C] (fccHandler) – C:\Windows\SysWow64\ac3acm.acm
[2010/07/05 11:26:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\K-Lite Codec Pack
[2010/07/05 11:26:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\ImgBurn
[2010/07/05 11:26:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Auslogics
[2010/07/05 11:26:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Steam
[2010/07/05 11:26:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Steam
[2010/07/05 11:26:25 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2010/07/05 11:26:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\CCleaner
[2010/07/05 11:26:24 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/07/05 11:26:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/07/05 11:26:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Java
[2010/07/05 11:25:54 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2010/07/05 11:25:41 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Google
[2010/07/05 11:16:42 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA
[2010/07/05 11:13:59 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2010/07/05 11:13:59 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2010/07/05 11:05:33 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft.NET
[2010/07/05 11:05:19 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2010/07/05 10:40:40 | 000,000,000 | R–D | C] – C:\Users\Ray\Searches
[2010/07/05 10:40:40 | 000,000,000 | -H-D | C] – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2010/07/05 10:40:28 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Identities
[2010/07/05 10:40:23 | 000,000,000 | R–D | C] – C:\Users\Ray\Contacts
[2010/07/05 10:40:20 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\VirtualStore
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\AppData\Local\Temporary Internet Files
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Templates
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Start Menu
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\SendTo
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Recent
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\PrintHood
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\NetHood
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Documents\My Videos
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Documents\My Pictures
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Documents\My Music
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\My Documents
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Local Settings
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\AppData\Local\History
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Cookies
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Application Data
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\AppData\Local\Application Data
[2010/07/05 10:39:59 | 000,000,000 | –SD | C] – C:\Users\Ray\AppData\Roaming\Microsoft
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Videos
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Saved Games
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Pictures
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Music
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Links
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Favorites
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Downloads
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\My Documents
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Desktop
[2010/07/05 10:39:59 | 000,000,000 | -H-D | C] – C:\Users\Ray\AppData
[2010/07/05 10:39:59 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Temp
[2010/07/05 10:39:59 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Microsoft
[2010/07/05 10:39:59 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Media Center Programs

========== Files - Modified Within 90 Days ==========

[2010/07/10 11:28:24 | 005,242,880 | -HS- | M] () – C:\Users\Ray\NTUSER.DAT
[2010/07/10 11:23:43 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\Ray\Desktop\OTL.exe
[2010/07/10 11:22:43 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/07/10 11:22:36 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/07/10 11:22:25 | 536,109,055 | -HS- | M] () – C:\hiberfil.sys
[2010/07/10 11:21:37 | 000,013,968 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/07/10 11:21:37 | 000,013,968 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/07/10 11:21:29 | 001,335,125 | -H– | M] () – C:\Users\Ray\AppData\Local\IconCache.db
[2010/07/10 11:19:11 | 000,444,416 | —- | M] (OldTimer Tools) – C:\Users\Ray\Desktop\TFC.exe
[2010/07/10 10:30:00 | 000,000,900 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-866293761-256753920-4100414289-1001UA.job
[2010/07/10 09:43:45 | 061,821,997 | —- | M] () – C:\Windows\SysNative\drivers\Avg\incavi.avm
[2010/07/10 08:28:37 | 000,726,316 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/07/10 08:28:37 | 000,624,178 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/07/10 08:28:37 | 000,106,522 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/07/09 11:30:00 | 000,000,848 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-866293761-256753920-4100414289-1001Core.job
[2010/07/07 15:04:27 | 079,925,284 | —- | M] () – C:\Users\Ray\Desktop\Audition2Installer.part3.rar
[2010/07/07 15:03:37 | 629,145,600 | —- | M] () – C:\Users\Ray\Desktop\Audition2Installer.part2.rar
[2010/07/07 14:57:28 | 629,145,600 | —- | M] () – C:\Users\Ray\Desktop\Audition2Installer.part1.rar
[2010/07/07 11:08:17 | 000,001,182 | —- | M] () – C:\Users\Ray\Desktop\ Mabinogi .lnk
[2010/07/07 09:55:15 | 000,000,917 | —- | M] () – C:\Users\Public\Desktop\Steam.lnk
[2010/07/07 08:19:33 | 000,001,848 | —- | M] () – C:\Users\Public\Desktop\Vuze.lnk
[2010/07/06 06:15:14 | 000,001,144 | —- | M] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Flash Media Live Encoder 3.lnk
[2010/07/06 06:15:14 | 000,001,120 | —- | M] () – C:\Users\Public\Desktop\Adobe Flash Media Live Encoder 3.lnk
[2010/07/06 00:04:12 | 000,001,091 | —- | M] () – C:\Users\Ray\Desktop\Trillian.lnk
[2010/07/06 00:04:12 | 000,001,043 | —- | M] () – C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
[2010/07/05 18:53:38 | 000,000,024 | —- | M] () – C:\Windows\ATKPF.ini
[2010/07/05 17:58:02 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/07/05 16:57:04 | 000,000,913 | —- | M] () – C:\Users\Ray\Desktop\Ventrilo.lnk
[2010/07/05 16:57:04 | 000,000,262 | —- | M] () – C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2010/07/05 13:35:16 | 000,039,252 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2010/07/05 13:35:16 | 000,039,252 | —- | M] () – C:\Windows\SysNative\license.rtf
[2010/07/05 12:17:06 | 000,064,352 | —- | M] () – C:\Users\Ray\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/07/05 12:16:48 | 000,001,108 | —- | M] () – C:\Users\Public\Desktop\Splendid Utility.Lnk
[2010/07/05 12:11:52 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_enecir_01009.Wdf
[2010/07/05 12:08:48 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01007.Wdf
[2010/07/05 11:58:26 | 000,298,648 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/07/05 11:53:04 | 000,002,300 | —- | M] () – C:\Users\Ray\Desktop\Google Chrome.lnk
[2010/07/05 11:41:33 | 000,411,486 | R— | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2010/07/05 11:38:01 | 000,013,048 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\avgrssta.dll
[2010/07/05 11:38:01 | 000,001,854 | —- | M] () – C:\Users\Public\Desktop\AVG Free 9.0.lnk
[2010/07/05 11:37:59 | 000,317,520 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgtdia.sys
[2010/07/05 11:37:53 | 000,269,904 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgldx64.sys
[2010/07/05 11:37:51 | 000,113,461 | —- | M] () – C:\Windows\SysNative\drivers\Avg\iavichjw.avm
[2010/07/05 11:37:51 | 000,035,536 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgmfx64.sys
[2010/07/05 11:36:13 | 000,001,282 | —- | M] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/07/05 11:36:13 | 000,001,258 | —- | M] () – C:\Users\Ray\Desktop\Spybot - Search & Destroy.lnk
[2010/07/05 11:33:30 | 000,000,478 | —- | M] () – C:\Windows\win.ini
[2010/07/05 11:26:54 | 000,001,291 | —- | M] () – C:\Users\Public\Desktop\Media Player Classic.lnk
[2010/07/05 11:26:49 | 000,001,865 | —- | M] () – C:\Users\Public\Desktop\ImgBurn.lnk
[2010/07/05 11:26:47 | 000,001,136 | —- | M] () – C:\Users\Ray\Desktop\Auslogics Disk Defrag.lnk
[2010/07/05 11:26:26 | 000,000,993 | —- | M] () – C:\Users\Public\Desktop\WinRAR.lnk
[2010/07/05 11:26:25 | 000,001,007 | —- | M] () – C:\Users\Ray\Desktop\CCleaner.lnk
[2010/07/05 11:12:04 | 000,524,288 | -HS- | M] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010/07/05 11:12:04 | 000,524,288 | -HS- | M] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010/07/05 11:12:04 | 000,065,536 | -HS- | M] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010/07/05 10:47:14 | 000,001,437 | —- | M] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/07/05 10:40:00 | 000,000,020 | -HS- | M] () – C:\Users\Ray\ntuser.ini
[2010/06/28 04:00:00 | 000,108,032 | —- | M] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/06/28 04:00:00 | 000,000,038 | —- | M] () – C:\Windows\avisplitter.ini
[2010/06/08 12:10:50 | 000,790,528 | —- | M] () – C:\Windows\SysWow64\xvidcore.dll
[2010/06/08 12:10:50 | 000,134,144 | —- | M] () – C:\Windows\SysWow64\xvidvfw.dll

========== Files Created - No Company Name ==========

[2010/07/07 15:03:37 | 079,925,284 | —- | C] () – C:\Users\Ray\Desktop\Audition2Installer.part3.rar
[2010/07/07 14:57:28 | 629,145,600 | —- | C] () – C:\Users\Ray\Desktop\Audition2Installer.part2.rar
[2010/07/07 14:51:31 | 629,145,600 | —- | C] () – C:\Users\Ray\Desktop\Audition2Installer.part1.rar
[2010/07/07 11:08:15 | 000,001,182 | —- | C] () – C:\Users\Ray\Desktop\ Mabinogi .lnk
[2010/07/07 08:19:33 | 000,001,848 | —- | C] () – C:\Users\Public\Desktop\Vuze.lnk
[2010/07/06 06:15:14 | 000,001,144 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Flash Media Live Encoder 3.lnk
[2010/07/06 06:15:14 | 000,001,120 | —- | C] () – C:\Users\Public\Desktop\Adobe Flash Media Live Encoder 3.lnk
[2010/07/06 00:04:12 | 000,001,091 | —- | C] () – C:\Users\Ray\Desktop\Trillian.lnk
[2010/07/06 00:04:12 | 000,001,043 | —- | C] () – C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
[2010/07/05 18:53:38 | 000,000,024 | —- | C] () – C:\Windows\ATKPF.ini
[2010/07/05 17:58:02 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/07/05 16:57:04 | 000,000,913 | —- | C] () – C:\Users\Ray\Desktop\Ventrilo.lnk
[2010/07/05 16:57:01 | 000,000,262 | —- | C] () – C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2010/07/05 13:20:27 | 536,109,055 | -HS- | C] () – C:\hiberfil.sys
[2010/07/05 12:16:48 | 000,001,108 | —- | C] () – C:\Users\Public\Desktop\Splendid Utility.Lnk
[2010/07/05 12:14:02 | 000,011,832 | —- | C] () – C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2010/07/05 12:14:02 | 000,010,216 | —- | C] () – C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2010/07/05 12:11:52 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_enecir_01009.Wdf
[2010/07/05 12:11:37 | 001,806,400 | —- | C] () – C:\Windows\SysNative\drivers\snp2uvc.sys
[2010/07/05 12:11:37 | 000,042,176 | —- | C] () – C:\Windows\SysNative\drivers\sncduvc.sys
[2010/07/05 12:11:37 | 000,002,266 | —- | C] () – C:\Windows\Uninstvga.bat
[2010/07/05 12:11:37 | 000,002,008 | —- | C] () – C:\Windows\Uninstsxga.bat
[2010/07/05 12:11:37 | 000,001,682 | —- | C] () – C:\Windows\Uninstuxga.bat
[2010/07/05 12:11:37 | 000,000,386 | —- | C] () – C:\Windows\Uninstuxga.reg
[2010/07/05 12:11:37 | 000,000,386 | —- | C] () – C:\Windows\Uninstsxga.reg
[2010/07/05 12:11:37 | 000,000,384 | —- | C] () – C:\Windows\Uninstvga.reg
[2010/07/05 12:08:48 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01007.Wdf
[2010/07/05 12:07:57 | 000,000,520 | R— | C] () – C:\Windows\SysNative\drivers\SamSfPa.dat
[2010/07/05 12:06:43 | 000,067,584 | —- | C] () – C:\Windows\SysNative\RtNicProp64.dll
[2010/07/05 11:38:01 | 000,001,854 | —- | C] () – C:\Users\Public\Desktop\AVG Free 9.0.lnk
[2010/07/05 11:37:51 | 061,821,997 | —- | C] () – C:\Windows\SysNative\drivers\Avg\incavi.avm
[2010/07/05 11:37:51 | 000,113,461 | —- | C] () – C:\Windows\SysNative\drivers\Avg\iavichjw.avm
[2010/07/05 11:36:13 | 000,001,282 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/07/05 11:36:13 | 000,001,258 | —- | C] () – C:\Users\Ray\Desktop\Spybot - Search & Destroy.lnk
[2010/07/05 11:26:58 | 000,001,291 | —- | C] () – C:\Users\Public\Desktop\Media Player Classic.lnk
[2010/07/05 11:26:54 | 000,165,376 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2010/07/05 11:26:54 | 000,000,038 | —- | C] () – C:\Windows\avisplitter.ini
[2010/07/05 11:26:53 | 000,790,528 | —- | C] () – C:\Windows\SysWow64\xvidcore.dll
[2010/07/05 11:26:53 | 000,134,144 | —- | C] () – C:\Windows\SysWow64\xvidvfw.dll
[2010/07/05 11:26:53 | 000,108,032 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/07/05 11:26:53 | 000,000,547 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010/07/05 11:26:53 | 000,000,414 | —- | C] () – C:\Windows\SysWow64\lame_acm.xml
[2010/07/05 11:26:49 | 000,001,865 | —- | C] () – C:\Users\Public\Desktop\ImgBurn.lnk
[2010/07/05 11:26:47 | 000,001,136 | —- | C] () – C:\Users\Ray\Desktop\Auslogics Disk Defrag.lnk
[2010/07/05 11:26:29 | 000,000,917 | —- | C] () – C:\Users\Public\Desktop\Steam.lnk
[2010/07/05 11:26:26 | 000,000,993 | —- | C] () – C:\Users\Public\Desktop\WinRAR.lnk
[2010/07/05 11:26:25 | 000,001,007 | —- | C] () – C:\Users\Ray\Desktop\CCleaner.lnk
[2010/07/05 11:25:53 | 000,002,300 | —- | C] () – C:\Users\Ray\Desktop\Google Chrome.lnk
[2010/07/05 11:25:49 | 000,000,900 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-866293761-256753920-4100414289-1001UA.job
[2010/07/05 11:25:44 | 000,000,848 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-866293761-256753920-4100414289-1001Core.job
[2010/07/05 10:47:14 | 000,001,437 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/07/05 10:40:00 | 000,524,288 | -HS- | C] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010/07/05 10:40:00 | 000,524,288 | -HS- | C] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010/07/05 10:40:00 | 000,262,144 | -HS- | C] () – C:\Users\Ray\ntuser.dat.LOG1
[2010/07/05 10:40:00 | 000,065,536 | -HS- | C] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010/07/05 10:40:00 | 000,000,020 | -HS- | C] () – C:\Users\Ray\ntuser.ini
[2010/07/05 10:40:00 | 000,000,000 | -HS- | C] () – C:\Users\Ray\ntuser.dat.LOG2
[2010/07/05 10:39:59 | 005,242,880 | -HS- | C] () – C:\Users\Ray\NTUSER.DAT
[2010/07/05 10:39:59 | 000,000,290 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/07/05 10:39:59 | 000,000,272 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2009/08/18 15:45:45 | 000,000,010 | —- | C] () – C:\Windows\SysWow64\ABLKSR.ini
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2008/10/07 09:13:30 | 000,197,912 | —- | C] () – C:\Windows\SysWow64\physxcudart_20.dll
[2008/10/07 09:13:22 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelFrench.dll

========== LOP Check ==========

[2010/07/06 13:29:29 | 000,000,000 | —D | M] – C:\Users\Ray\AppData\Roaming\Auslogics
[2010/07/09 12:29:22 | 000,000,000 | —D | M] – C:\Users\Ray\AppData\Roaming\Azureus
[2010/07/06 00:04:28 | 000,000,000 | —D | M] – C:\Users\Ray\AppData\Roaming\Trillian
[2009/07/14 01:08:49 | 000,005,860 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009/07/13 21:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2009/08/18 16:18:01 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2010/07/10 11:22:25 | 536,109,055 | -HS- | M] () – C:\hiberfil.sys
[2010/07/10 11:22:29 | 2146,471,935 | -HS- | M] () – C:\pagefile.sys
[2010/07/05 12:08:16 | 000,003,059 | —- | M] () – C:\RHDSetup.log
[2010/07/05 12:15:59 | 000,000,166 | —- | M] () – C:\setup.log

< %systemroot%\system32\*.wt >

< %systemroot%\system32\*.ruy >

< %systemroot%\Fonts\*.com >
[2009/07/14 01:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 01:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 01:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 01:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 16:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\system32\spool\prtprocs\w32x86\*.tmp >

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\user32.dll /md5 >
[2009/07/13 21:11:24 | 000,833,024 | —- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 – C:\Windows\SysWOW64\user32.dll

< %systemroot%\system32\ws2_32.dll /md5 >
[2009/07/13 21:16:20 | 000,206,336 | —- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D – C:\Windows\SysWOW64\ws2_32.dll

< %systemroot%\system32\ws2help.dll /md5 >
[2009/07/13 21:11:26 | 000,004,608 | —- | M] (Microsoft Corporation) MD5=808AABDF9337312195CAFF76D1804786 – C:\Windows\SysWOW64\ws2help.dll

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Files - Unicode (All) ==========
[2010/07/09 08:44:11 | 000,000,000 | —D | M](C:\Users\Ray\Documents\????) – C:\Users\Ray\Documents\마비노기
[2010/07/09 08:33:33 | 000,000,000 | —D | C](C:\Users\Ray\Documents\????) – C:\Users\Ray\Documents\마비노기
< End of report >


And here's the extras log.


OTL Extras logfile created on: 7/10/2010 11:25:49 AM - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Ray\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

6.00 Gb Total Physical Memory | 5.00 Gb Available Physical Memory | 75.00% Memory free
12.00 Gb Paging File | 10.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453.94 Gb Total Space | 377.82 Gb Free Space | 83.23% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 465.75 Gb Total Space | 53.60 Gb Free Space | 11.51% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: RAY-PC
Current User Name: Ray
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Minimal
Quick Scan

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
htmlfile – "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files (x86)\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{328CC232-CFDC-468B-A214-2E21300E4CB5}" = Apple Mobile Device Support
"{53529DAD-F7C9-476E-87CC-1547C4E3E821}" = iTunes
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Pinnacle Video Driver
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}" = Bonjour
"{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}" = Ventrilo Client for Windows x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"5F4DD0919B4763856B77AD385DEEEFCDF01784A8" = ENE CIR Receiver Driver
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam
"WinRAR archiver" = WinRAR archiver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"????(?????)" = ????(?????)
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 20
"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{3B05F2FB-745B-4012-ADF2-439F36B2E70B}" = ATKOSD2
"{3D9892BB-A751-4E48-ADC8-E4289956CE1D}" = QuickTime
"{3E981E45-833E-44C4-AB75-3668AA77F8EC}" = Adobe Flash Media Live Encoder 3
"{439F7BFD-4F1B-4CAE-834A-4136396C2738}" = ASUS Turbo Gear Enhanced VGA Driver
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{558B0625-03A7-491C-9693-FD1066005CBB}" = Turbo Gear Extreme
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5U8xx Media Driver ver.3.62.02
"{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{91120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C3B6103A-C76F-45CF-898E-22E74BD33CFF}" = Direct Console 2.0
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{D1E5870E-E3E5-4475-98A6-ADD614524ADF}" = ATK Media
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"8461-7759-5462-8226" = Vuze
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Audition2" = Audition2
"AVG9Uninstall" = AVG Free 9.0
"CCleaner" = CCleaner
"ESET Online Scanner" = ESET Online Scanner v3
"ImgBurn" = ImgBurn
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.1.0 (Full)
"Mabinogi" = Mabinogi
"STANDARDR" = Microsoft Office Standard 2007
"Steam App 17460" = Mass Effect
"Steam App 240" = Counter-Strike: Source
"Steam App 400" = Portal
"Steam App 440" = Team Fortress 2
"Steam App 500" = Left 4 Dead
"Steam App 550" = Left 4 Dead 2
"Steam App 564" = Left 4 Dead 2 Add-on Support
"Trillian" = Trillian

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 7/5/2010 12:09:01 PM | Computer Name = Ray-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 01D
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 7/5/2010 12:09:01 PM | Computer Name = Ray-PC | Source = Microsoft-Windows-LoadPerf | ID = 3006
Description = Unable to read the performance counter strings defined for the 0816
language ID. The first DWORD in the Data section contains the Win32 error code.

Error - 7/5/2010 12:09:01 PM | Computer Name = Ray-PC | Source = Microsoft-Windows-LoadPerf | ID = 3011
Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)
failed. The first DWORD in the Data section contains the error code.

Error - 7/5/2010 1:31:16 PM | Computer Name = Ray-PC | Source = EventSystem | ID = 4621
Description =

Error - 7/5/2010 3:17:39 PM | Computer Name = Ray-PC | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:\program files (x86)\ESET\eset
online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line
. A component version required by the application conflicts with another component
version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest.
Component
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.

Error - 7/5/2010 3:18:14 PM | Computer Name = Ray-PC | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\program files (x86)\spybot
- search & destroy\DelZip179.dll".Error in manifest or policy file "c:\program
files (x86)\spybot - search & destroy\DelZip179.dll" on line 8. The value "*" of
attribute "language" in element "assemblyIdentity" is invalid.

Error - 7/6/2010 1:48:18 AM | Computer Name = Ray-PC | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:\program files (x86)\ESET\eset
online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line
. A component version required by the application conflicts with another component
version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest.
Component
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.

Error - 7/6/2010 1:48:45 AM | Computer Name = Ray-PC | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\program files (x86)\spybot
- search & destroy\DelZip179.dll".Error in manifest or policy file "c:\program
files (x86)\spybot - search & destroy\DelZip179.dll" on line 8. The value "*" of
attribute "language" in element "assemblyIdentity" is invalid.

Error - 7/7/2010 12:52:57 PM | Computer Name = Ray-PC | Source = SideBySide | ID = 16842832
Description = Activation context generation failed for "c:\program files (x86)\ESET\eset
online scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line
. A component version required by the application conflicts with another component
version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_fa645303170382f6.manifest.
Component
2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc.manifest.

Error - 7/7/2010 12:54:02 PM | Computer Name = Ray-PC | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\program files (x86)\spybot
- search & destroy\DelZip179.dll".Error in manifest or policy file "c:\program
files (x86)\spybot - search & destroy\DelZip179.dll" on line 8. The value "*" of
attribute "language" in element "assemblyIdentity" is invalid.

[ System Events ]
Error - 7/5/2010 12:04:29 PM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7000
Description = The Steam Client Service service failed to start due to the following
error: %%1053

Error - 7/5/2010 12:10:54 PM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the SBSD
Security Center Service service to connect.

Error - 7/5/2010 12:10:54 PM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7000
Description = The SBSD Security Center Service service failed to start due to the
following error: %%1053

Error - 7/5/2010 12:14:47 PM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7030
Description = The WB VGA Service service is marked as an interactive service. However,
the system is configured to not allow interactive services. This service may not
function properly.

Error - 7/5/2010 12:19:32 PM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the SBSD
Security Center Service service to connect.

Error - 7/5/2010 12:19:32 PM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7000
Description = The SBSD Security Center Service service failed to start due to the
following error: %%1053

Error - 7/7/2010 8:03:15 AM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the SBSD
Security Center Service service to connect.

Error - 7/7/2010 8:03:15 AM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7000
Description = The SBSD Security Center Service service failed to start due to the
following error: %%1053

Error - 7/9/2010 6:36:23 AM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the SBSD
Security Center Service service to connect.

Error - 7/9/2010 6:36:23 AM | Computer Name = Ray-PC | Source = Service Control Manager | ID = 7000
Description = The SBSD Security Center Service service failed to start due to the
following error: %%1053


< End of report >
Hi

Please do the following:

Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :OTL
    O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
    O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
    O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
    O33 - MountPoints2\{97830052-8859-11df-b9aa-806e6f6e6963}\Shell - "" = AutoRun
    O33 - MountPoints2\{97830052-8859-11df-b9aa-806e6f6e6963}\Shell\AutoRun\command - "" = D:\InstAll.exe – File not found
    
    :Commands
    [resethosts]
    [emptyflash]
    [purity]
    [emptytemp]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post the OTL log



NEXT





Please download Malwarebytes' Anti-Malware
  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected. <– very important
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.



NEXT

**Vista users - right click on the IE icon and run as administrator

Run an on-line scan with Kaspersky

Using Internet Explorer or Firefox, visit Kaspersky On-line Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.
2. To optimize scanning time and produce a more sensible report for review:
  • Close any open programs
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
3. Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Click View scan report at the bottom.

    [external image: Posted Image]
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
Here's the OTL log before I run the next program in the instructions. All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{97830052-8859-11df-b9aa-806e6f6e6963}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{97830052-8859-11df-b9aa-806e6f6e6963}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{97830052-8859-11df-b9aa-806e6f6e6963}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{97830052-8859-11df-b9aa-806e6f6e6963}\ not found. File D:\InstAll.exe not found. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYFLASH] User: All Users User: Default User: Default User User: Public User: Ray ->Flash cache emptied: 587 bytes Total Flash Files Cleaned = 0.00 mb [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public User: Ray ->Temp folder emptied: 430995 bytes ->Temporary Internet Files folder emptied: 35883 bytes ->Java cache emptied: 0 bytes ->Google Chrome cache emptied: 122780713 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 0 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 6765508 bytes Total Files Cleaned = 124.00 mb OTL by OldTimer - Version 3.2.9.0 log created on 07102010_134934 Files\Folders moved on Reboot… C:\Users\Ray\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. Registry entries deleted on Reboot…
And here is the mbam log. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4300 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 7/10/2010 2:16:21 PM mbam-log-2010-07-10 (14-16-21).txt Scan type: Quick scan Objects scanned: 125516 Time elapsed: 3 minute(s), 10 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
Kaspersky online scan log ——————————————————————————– KASPERSKY ONLINE SCANNER 7.0: scan report Saturday, July 10, 2010 Operating system: Microsoft (build 7600) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Saturday, July 10, 2010 14:18:52 Records in database: 4242417 ——————————————————————————– Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - Critical areas: C:\Program Files C:\Program Files (x86) C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup C:\Windows Scan statistics: Objects scanned: 127233 Threats found: 0 Infected objects found: 0 Suspicious objects found: 0 Scan duration: 01:13:58 No threats found. Scanned area is clean. Selected area has been scanned.
Hi

Please do the following:

[external image: Posted Image] Your Java is out of date.
Java™ 6 Update 20 can be updated from the Java control panel Start > Control Panel (Classic View) > Java (looks like a coffee cup) > Update Tab > Update Now.
An update should begin; > follow the prompts.


Clear Sun Jave cache

Go into the Control Panel and double-click the Java Icon. (looks like a coffee cup) If you do not see the icon, look to your left and click 'Switch to Classic View'.
  • On the General tab, under Temporary Internet Files, click the Settings button.
  • Next, click on the Delete Files button
  • There are two options in the window to clear the cache - Leave BOTH Checked
    • Applications and Applets
      Trace and Log Files
  • Click OK on Delete Temporary Files Window
    Note: This deletes ALL the Downloaded Applications and Applets from the CACHE.
  • Click OK to leave the Temporary Files Window
  • Click OK to leave the Java Control Panel.


NEXT


Please post a fresh OTL log and advise how your computer is running now and if there are any outstanding issues.
When I tried to update Java it says it's already updated to the latest version. What options should I do when I run OTL?
OTL logfile created on: 7/11/2010 9:57:14 AM - Run 2
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\Ray\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Here's the OTL log. And as for my computer… it's running fine though boot up feels faster then it was before and although Spybot still found Win32.Pornpop up yesterday night. When I tried scanning with spybot again after the otl scan it didn't show up.

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

6.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 71.00% Memory free
12.00 Gb Paging File | 10.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 453.94 Gb Total Space | 373.33 Gb Free Space | 82.24% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 465.75 Gb Total Space | 52.35 Gb Free Space | 11.24% Space Free | Partition Type: NTFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: RAY-PC
Current User Name: Ray
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Users\Ray\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Users\Ray\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControl.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\Direct Console\Direct Console.exe (ASUSTek.)
PRC - C:\Program Files\ASUS\Turbo Gear\TurboGear.exe ()
PRC - C:\Program Files\ASUS\Turbo Gear\GearHelp.exe ()
PRC - C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\ATKOSD.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\wbctlvga.exe (ASUSTeK Inc.)
PRC - C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\WBVGAservice.exe ()
PRC - C:\Program Files (x86)\ASUS\ATK Hotkey\WDC.exe (ASUS)
PRC - C:\Program Files (x86)\ASUS\Direct Console\DCHelper.exe (TODO: )
PRC - C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()


========== Modules (SafeList) ==========

MOD - C:\Users\Ray\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (ATKGFNEXSrv) – C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (avg9wd) – C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (Apple Mobile Device) – C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (clr_optimization_v4.0.30319_64) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ASLDRService) – C:\Program Files (x86)\ASUS\ATK Hotkey\AsLdrSrv.exe (ASUS)
SRV - (WBVGAservice) – C:\Program Files (x86)\ASUS\Turbo Gear Enhanced VGA Driver\WBVGAservice.exe ()
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)


========== Driver Services (SafeList) ==========

DRV:64bit: - (AvgTdiA) – C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgLdx64) – C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgMfx64) – C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (athr) – C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (EIO64) – C:\Windows\SysNative\drivers\EIO64.sys (ASUSTeK Computer Inc.)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (kbfiltr) – C:\Windows\SysNative\drivers\kbfiltr.sys ( )
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (rimmptsk) – C:\Windows\SysNative\drivers\rimmpx64.sys (REDC)
DRV:64bit: - (rismxdp) – C:\Windows\SysNative\drivers\rixdpx64.sys (REDC)
DRV:64bit: - (rimsptsk) – C:\Windows\SysNative\drivers\rimspx64.sys (REDC)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (SiSGbeLH) – C:\Windows\SysNative\drivers\SiSG664.sys (Silicon Integrated Systems Corp.)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) – C:\Windows\SysNative\drivers\snp2uvc.sys ()
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (enecir) – C:\Windows\SysNative\drivers\enecir.sys (ENE TECHNOLOGY INC.)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (MTsensor) – C:\Windows\SysNative\drivers\ATK64AMD.sys (ASUS)
DRV:64bit: - (emAudio) – C:\Windows\SysNative\drivers\emAudio64.sys (eMPIA Technology, Inc.)
DRV:64bit: - (ASMMAP64) – C:\Program Files\ATKGFNEX\ASMMAP64.sys ()
DRV:64bit: - (DCamUSBEMPIA) – C:\Windows\SysNative\drivers\emDevice64.sys (eMPIA Technology, Inc.)
DRV:64bit: - (FiltUSBEMPIA) – C:\Windows\SysNative\drivers\emFilter64.sys (eMPIA Technology, Inc.)
DRV:64bit: - (ScanUSBEMPIA) – C:\Windows\SysNative\drivers\emScan64.sys (eMPIA Technology, Inc.)
DRV:64bit: - (MarvinBus) – C:\Windows\SysNative\drivers\MarvinBus64.sys (Pinnacle Systems GmbH)

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 97 DE C4 F7 50 1C CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local



O1 HOSTS File: ([2010/07/10 13:49:34 | 000,000,098 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [NvCplDaemon] C:\Windows\SysNative\NvCpl.DLL (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [set] c:\programdata\SetWallpaper.cmd File not found
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [AVG9_TRAY] C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DirectConsole2] C:\Program Files (x86)\ASUS\Direct Console\Direct Console.exe (ASUSTek.)
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Turbo Gear] C:\Program Files\ASUS\Turbo Gear\TurboGear.exe ()
O4 - HKLM..\Run: [Turbo Gear Help] C:\Program Files\ASUS\Turbo Gear\GearHelp.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)
O4 - Startup: C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk = C:\Program Files (x86)\Trillian\trillian.exe (Cerulean Studios)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {169BC825-426A-4A96-940C-103DCC5363B1} http://audition2.ndolfin.com/Cab/GameStart.cab (Game Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {E8408A1A-DADF-4212-BB96-AB8E0146CDCA} http://audition2.ndolfin.com/download/zdn.cab (Zdn Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/07/10 14:19:02 | 000,000,000 | —D | C] – C:\Windows\Sun
[2010/07/10 14:02:04 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Malwarebytes
[2010/07/10 14:01:54 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/07/10 14:01:54 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2010/07/10 14:01:53 | 000,024,664 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2010/07/10 14:01:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/07/10 13:49:34 | 000,000,000 | —D | C] – C:\_OTL
[2010/07/10 11:23:43 | 000,574,976 | —- | C] (OldTimer Tools) – C:\Users\Ray\Desktop\OTL.exe
[2010/07/07 15:24:02 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Apple Computer
[2010/07/07 15:24:02 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Apple Computer
[2010/07/07 15:23:53 | 000,126,312 | —- | C] (GEAR Software Inc.) – C:\Windows\SysNative\GEARAspi64.dll
[2010/07/07 15:23:53 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2010/07/07 15:23:53 | 000,034,152 | —- | C] (GEAR Software Inc.) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2010/07/07 15:23:52 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2010/07/07 15:23:42 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/07/07 15:23:41 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/07/07 15:23:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2010/07/07 15:23:41 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2010/07/07 15:22:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2010/07/07 15:22:34 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2010/07/07 15:22:28 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Apple
[2010/07/07 15:22:26 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2010/07/07 15:22:17 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2010/07/07 15:22:11 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/07/07 15:22:11 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2010/07/07 15:22:08 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2010/07/07 15:22:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2010/07/07 14:47:49 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\WinRAR
[2010/07/07 11:08:40 | 000,000,000 | —D | C] – C:\ProgramData\NexonUS
[2010/07/07 11:06:49 | 000,000,000 | —D | C] – C:\Nexon
[2010/07/07 11:06:41 | 000,000,000 | –SD | C] – C:\Users\Ray\Documents\Mabinogi
[2010/07/07 08:23:12 | 000,000,000 | —D | C] – C:\Users\Ray\Documents\Vuze Downloads
[2010/07/07 08:20:02 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Azureus
[2010/07/07 08:19:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Vuze
[2010/07/07 00:25:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Ndolfin
[2010/07/06 15:25:12 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Media Player Classic
[2010/07/06 13:29:29 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Auslogics
[2010/07/06 06:15:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe
[2010/07/06 06:15:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Adobe
[2010/07/06 06:13:16 | 000,215,808 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\drivers\emDevice64.sys
[2010/07/06 06:13:16 | 000,070,656 | —- | C] (Pinnacle Systems) – C:\Windows\SysNative\PCLECoInst64.dll
[2010/07/06 06:13:16 | 000,006,400 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\drivers\emFilter64.sys
[2010/07/06 06:13:16 | 000,006,144 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\drivers\emScan64.sys
[2010/07/06 06:13:15 | 000,057,344 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysWow64\emVFW.dll
[2010/07/06 06:13:15 | 000,032,768 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysWow64\emProp.ax
[2010/07/06 06:13:15 | 000,017,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\emYUV.dll
[2010/07/06 06:13:15 | 000,013,824 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\emUSD64.dll
[2010/07/06 06:13:13 | 000,079,872 | —- | C] (eMPIA Technology, Inc.) – C:\Windows\SysNative\drivers\emAudio64.sys
[2010/07/06 06:12:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Pinnacle
[2010/07/06 06:12:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Pinnacle
[2010/07/06 06:12:18 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Downloaded Installations
[2010/07/06 00:04:12 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Trillian
[2010/07/06 00:03:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trillian
[2010/07/05 17:52:06 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Microsoft Games
[2010/07/05 17:13:48 | 000,527,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_7.dll
[2010/07/05 17:13:48 | 000,518,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_7.dll
[2010/07/05 17:13:48 | 000,077,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_5.dll
[2010/07/05 17:13:48 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_5.dll
[2010/07/05 17:13:47 | 002,526,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_43.dll
[2010/07/05 17:13:47 | 002,106,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_43.dll
[2010/07/05 17:13:47 | 001,907,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dcsx_43.dll
[2010/07/05 17:13:47 | 001,868,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dcsx_43.dll
[2010/07/05 17:13:47 | 000,276,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx11_43.dll
[2010/07/05 17:13:47 | 000,248,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx11_43.dll
[2010/07/05 17:13:47 | 000,239,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_7.dll
[2010/07/05 17:13:47 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_7.dll
[2010/07/05 17:13:46 | 002,401,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_43.dll
[2010/07/05 17:13:46 | 001,998,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_43.dll
[2010/07/05 17:13:46 | 000,530,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_6.dll
[2010/07/05 17:13:46 | 000,528,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_6.dll
[2010/07/05 17:13:46 | 000,511,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_43.dll
[2010/07/05 17:13:46 | 000,470,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_43.dll
[2010/07/05 17:13:46 | 000,078,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_4.dll
[2010/07/05 17:13:46 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_4.dll
[2010/07/05 17:13:45 | 000,517,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_5.dll
[2010/07/05 17:13:45 | 000,515,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_5.dll
[2010/07/05 17:13:45 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_6.dll
[2010/07/05 17:13:45 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_6.dll
[2010/07/05 17:13:45 | 000,024,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_7.dll
[2010/07/05 17:13:45 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_7.dll
[2010/07/05 17:13:44 | 002,582,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_42.dll
[2010/07/05 17:13:44 | 001,974,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_42.dll
[2010/07/05 17:13:44 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_5.dll
[2010/07/05 17:13:44 | 000,176,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_5.dll
[2010/07/05 17:13:43 | 005,554,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dcsx_42.dll
[2010/07/05 17:13:43 | 005,501,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dcsx_42.dll
[2010/07/05 17:13:43 | 000,523,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_42.dll
[2010/07/05 17:13:43 | 000,453,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_42.dll
[2010/07/05 17:13:43 | 000,285,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx11_42.dll
[2010/07/05 17:13:43 | 000,235,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx11_42.dll
[2010/07/05 17:13:42 | 002,475,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_42.dll
[2010/07/05 17:13:42 | 002,430,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_41.dll
[2010/07/05 17:13:42 | 001,892,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_42.dll
[2010/07/05 17:13:42 | 001,846,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_41.dll
[2010/07/05 17:13:42 | 000,520,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_41.dll
[2010/07/05 17:13:42 | 000,453,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_41.dll
[2010/07/05 17:13:41 | 005,425,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_41.dll
[2010/07/05 17:13:41 | 004,178,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_41.dll
[2010/07/05 17:13:40 | 000,521,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_4.dll
[2010/07/05 17:13:40 | 000,517,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_4.dll
[2010/07/05 17:13:40 | 000,235,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_4.dll
[2010/07/05 17:13:40 | 000,174,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_4.dll
[2010/07/05 17:13:40 | 000,073,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_3.dll
[2010/07/05 17:13:40 | 000,069,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_3.dll
[2010/07/05 17:13:39 | 000,024,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_6.dll
[2010/07/05 17:13:39 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_6.dll
[2010/07/05 17:13:37 | 005,631,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_40.dll
[2010/07/05 17:13:37 | 004,379,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_40.dll
[2010/07/05 17:13:37 | 002,605,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_40.dll
[2010/07/05 17:13:37 | 002,036,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_40.dll
[2010/07/05 17:13:37 | 000,519,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_40.dll
[2010/07/05 17:13:37 | 000,452,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_40.dll
[2010/07/05 17:13:36 | 000,518,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_3.dll
[2010/07/05 17:13:36 | 000,514,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_3.dll
[2010/07/05 17:13:36 | 000,074,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_2.dll
[2010/07/05 17:13:36 | 000,070,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_2.dll
[2010/07/05 17:13:35 | 000,235,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_3.dll
[2010/07/05 17:13:35 | 000,175,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_3.dll
[2010/07/05 17:13:35 | 000,025,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_5.dll
[2010/07/05 17:13:35 | 000,023,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_5.dll
[2010/07/05 17:13:34 | 000,513,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_2.dll
[2010/07/05 17:13:34 | 000,509,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_2.dll
[2010/07/05 17:13:34 | 000,072,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_1.dll
[2010/07/05 17:13:34 | 000,068,616 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_1.dll
[2010/07/05 17:13:33 | 004,992,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_39.dll
[2010/07/05 17:13:33 | 003,851,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_39.dll
[2010/07/05 17:13:33 | 001,942,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_39.dll
[2010/07/05 17:13:33 | 001,493,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_39.dll
[2010/07/05 17:13:33 | 000,540,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_39.dll
[2010/07/05 17:13:33 | 000,467,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_39.dll
[2010/07/05 17:13:33 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_2.dll
[2010/07/05 17:13:33 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_2.dll
[2010/07/05 17:13:31 | 000,511,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_1.dll
[2010/07/05 17:13:31 | 000,507,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_1.dll
[2010/07/05 17:13:31 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_1.dll
[2010/07/05 17:13:31 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_1.dll
[2010/07/05 17:13:31 | 000,068,104 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_0.dll
[2010/07/05 17:13:31 | 000,065,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_0.dll
[2010/07/05 17:13:30 | 001,941,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_38.dll
[2010/07/05 17:13:30 | 001,491,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_38.dll
[2010/07/05 17:13:30 | 000,540,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_38.dll
[2010/07/05 17:13:30 | 000,467,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_38.dll
[2010/07/05 17:13:30 | 000,028,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_4.dll
[2010/07/05 17:13:30 | 000,025,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_4.dll
[2010/07/05 17:13:29 | 004,991,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_38.dll
[2010/07/05 17:13:29 | 003,850,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_38.dll
[2010/07/05 17:13:29 | 000,489,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_0.dll
[2010/07/05 17:13:29 | 000,479,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_0.dll
[2010/07/05 17:13:28 | 001,860,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_37.dll
[2010/07/05 17:13:28 | 001,420,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_37.dll
[2010/07/05 17:13:28 | 000,529,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_37.dll
[2010/07/05 17:13:28 | 000,462,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_37.dll
[2010/07/05 17:13:28 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_0.dll
[2010/07/05 17:13:28 | 000,177,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_0.dll
[2010/07/05 17:13:28 | 000,028,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_3.dll
[2010/07/05 17:13:28 | 000,025,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_3.dll
[2010/07/05 17:13:27 | 004,910,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_37.dll
[2010/07/05 17:13:27 | 003,786,760 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_37.dll
[2010/07/05 17:13:26 | 000,411,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_10.dll
[2010/07/05 17:13:26 | 000,267,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_10.dll
[2010/07/05 17:13:25 | 002,006,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_36.dll
[2010/07/05 17:13:25 | 001,374,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_36.dll
[2010/07/05 17:13:25 | 000,508,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_36.dll
[2010/07/05 17:13:25 | 000,444,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_36.dll
[2010/07/05 17:13:24 | 005,081,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_36.dll
[2010/07/05 17:13:24 | 003,734,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_36.dll
[2010/07/05 17:13:23 | 005,073,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_35.dll
[2010/07/05 17:13:23 | 003,727,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_35.dll
[2010/07/05 17:13:23 | 001,985,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_35.dll
[2010/07/05 17:13:23 | 001,358,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_35.dll
[2010/07/05 17:13:23 | 000,508,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_35.dll
[2010/07/05 17:13:23 | 000,444,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_35.dll
[2010/07/05 17:13:23 | 000,411,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_9.dll
[2010/07/05 17:13:23 | 000,267,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_9.dll
[2010/07/05 17:13:21 | 004,496,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_34.dll
[2010/07/05 17:13:21 | 003,497,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_34.dll
[2010/07/05 17:13:21 | 001,401,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_34.dll
[2010/07/05 17:13:21 | 001,124,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_34.dll
[2010/07/05 17:13:21 | 000,506,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_34.dll
[2010/07/05 17:13:21 | 000,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_34.dll
[2010/07/05 17:13:21 | 000,409,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_8.dll
[2010/07/05 17:13:21 | 000,266,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_8.dll
[2010/07/05 17:13:21 | 000,021,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_2.dll
[2010/07/05 17:13:21 | 000,017,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_2.dll
[2010/07/05 17:13:20 | 000,107,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_3.dll
[2010/07/05 17:13:20 | 000,081,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_3.dll
[2010/07/05 17:13:19 | 004,494,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_33.dll
[2010/07/05 17:13:19 | 003,495,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_33.dll
[2010/07/05 17:13:19 | 001,400,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_33.dll
[2010/07/05 17:13:19 | 001,123,696 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_33.dll
[2010/07/05 17:13:19 | 000,506,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_33.dll
[2010/07/05 17:13:19 | 000,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_33.dll
[2010/07/05 17:13:19 | 000,403,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_7.dll
[2010/07/05 17:13:19 | 000,261,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_7.dll
[2010/07/05 17:13:18 | 000,393,576 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_6.dll
[2010/07/05 17:13:18 | 000,255,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_6.dll
[2010/07/05 17:13:17 | 000,469,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10.dll
[2010/07/05 17:13:17 | 000,440,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10.dll
[2010/07/05 17:13:17 | 000,390,424 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_5.dll
[2010/07/05 17:13:17 | 000,251,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_5.dll
[2010/07/05 17:13:16 | 004,398,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_32.dll
[2010/07/05 17:13:16 | 003,977,496 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_31.dll
[2010/07/05 17:13:16 | 003,426,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_32.dll
[2010/07/05 17:13:16 | 002,414,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_31.dll
[2010/07/05 17:13:16 | 000,364,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_4.dll
[2010/07/05 17:13:16 | 000,237,848 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_4.dll
[2010/07/05 17:13:16 | 000,017,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\x3daudio1_1.dll
[2010/07/05 17:13:16 | 000,015,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\x3daudio1_1.dll
[2010/07/05 17:13:15 | 000,363,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_3.dll
[2010/07/05 17:13:15 | 000,354,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_2.dll
[2010/07/05 17:13:15 | 000,236,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_3.dll
[2010/07/05 17:13:15 | 000,230,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_2.dll
[2010/07/05 17:13:15 | 000,083,736 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_2.dll
[2010/07/05 17:13:15 | 000,083,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xinput1_1.dll
[2010/07/05 17:13:15 | 000,062,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_2.dll
[2010/07/05 17:13:15 | 000,062,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xinput1_1.dll
[2010/07/05 17:13:14 | 000,352,464 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_1.dll
[2010/07/05 17:13:14 | 000,229,584 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_1.dll
[2010/07/05 17:13:12 | 003,927,248 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_30.dll
[2010/07/05 17:13:12 | 002,388,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_30.dll
[2010/07/05 17:13:09 | 003,830,992 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_29.dll
[2010/07/05 17:13:09 | 003,815,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_28.dll
[2010/07/05 17:13:09 | 002,332,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_29.dll
[2010/07/05 17:13:09 | 002,323,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_28.dll
[2010/07/05 17:13:09 | 000,355,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine2_0.dll
[2010/07/05 17:13:09 | 000,230,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine2_0.dll
[2010/07/05 17:13:09 | 000,016,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\x3daudio1_0.dll
[2010/07/05 17:13:09 | 000,014,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\x3daudio1_0.dll
[2010/07/05 17:13:08 | 003,823,312 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_25.dll
[2010/07/05 17:13:08 | 003,807,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_27.dll
[2010/07/05 17:13:08 | 003,767,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_26.dll
[2010/07/05 17:13:08 | 002,337,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_25.dll
[2010/07/05 17:13:08 | 002,319,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_27.dll
[2010/07/05 17:13:08 | 002,297,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_26.dll
[2010/07/05 17:13:07 | 003,544,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx9_24.dll
[2010/07/05 17:13:07 | 002,222,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx9_24.dll
[2010/07/05 17:01:51 | 000,000,000 | —D | C] – C:\Windows\SysWow64\directx
[2010/07/05 16:57:19 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Ventrilo
[2010/07/05 16:57:03 | 000,000,000 | —D | C] – C:\Program Files\Ventrilo
[2010/07/05 16:34:55 | 000,000,000 | —D | C] – C:\Audition2
[2010/07/05 13:28:15 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2010/07/05 13:20:27 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010/07/05 13:17:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\ESET
[2010/07/05 12:25:23 | 000,000,000 | -H-D | C] – C:\$AVG
[2010/07/05 12:16:49 | 000,183,296 | —- | C] (ASUSTeK) – C:\Windows\SysWow64\ACEngSvr.exe
[2010/07/05 12:15:58 | 000,000,000 | —D | C] – C:\Program Files (x86)\Wireless Console 2
[2010/07/05 12:15:56 | 000,000,000 | —D | C] – C:\Program Files\Wireless Console 2
[2010/07/05 12:14:17 | 000,016,384 | —- | C] (ASUSTeK Computer Inc.) – C:\Windows\SysNative\drivers\EIO64.sys
[2010/07/05 12:14:01 | 000,000,000 | —D | C] – C:\Program Files\ASUS
[2010/07/05 12:13:06 | 000,090,112 | —- | C] (Sony Corporation) – C:\Windows\SysNative\snymsico.dll
[2010/07/05 12:13:05 | 000,067,584 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rimmpx64.sys
[2010/07/05 12:13:04 | 000,172,032 | —- | C] (Ricoh Company,Ltd) – C:\Windows\SysNative\rixdicon.dll
[2010/07/05 12:13:04 | 000,057,856 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rixdpx64.sys
[2010/07/05 12:13:04 | 000,055,296 | —- | C] (REDC) – C:\Windows\SysNative\drivers\rimspx64.sys
[2010/07/05 12:11:53 | 000,000,000 | —D | C] – C:\Program Files\DIFX
[2010/07/05 12:11:50 | 001,436,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WdfCoInstaller01009.dll
[2010/07/05 12:11:37 | 000,019,008 | —- | C] (Chicony © 2006 ATC) – C:\Windows\DrvInst.exe
[2010/07/05 12:08:45 | 000,000,000 | —D | C] – C:\Program Files\Synaptics
[2010/07/05 12:08:40 | 000,274,480 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\drivers\SynTP.sys
[2010/07/05 12:08:40 | 000,107,816 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynTPCOM.dll
[2010/07/05 12:08:39 | 001,490,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\WdfCoInstaller01007.dll
[2010/07/05 12:08:39 | 000,261,416 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynCtrl.dll
[2010/07/05 12:08:39 | 000,206,120 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynCtrl.dll
[2010/07/05 12:08:39 | 000,204,072 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynTPAPI.dll
[2010/07/05 12:08:39 | 000,169,256 | —- | C] (Synaptics Incorporated) – C:\Windows\SysWow64\SynCOM.dll
[2010/07/05 12:08:39 | 000,147,752 | —- | C] (Synaptics Incorporated) – C:\Windows\SysNative\SynTPCo4.dll
[2010/07/05 12:08:07 | 000,000,000 | —D | C] – C:\Windows\SysWow64\RTCOM
[2010/07/05 12:08:07 | 000,000,000 | —D | C] – C:\Program Files\Realtek
[2010/07/05 12:07:49 | 000,513,536 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSTSX64.dll
[2010/07/05 12:07:49 | 000,211,376 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSTSH64.dll
[2010/07/05 12:07:49 | 000,150,528 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSWOW64.dll
[2010/07/05 12:07:48 | 000,193,536 | —- | C] (SRS Labs, Inc.) – C:\Windows\SysNative\SRSHP64.dll
[2010/07/05 12:07:47 | 000,332,320 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtlCPAPI64.dll
[2010/07/05 12:07:47 | 000,149,536 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkCfg64.dll
[2010/07/05 12:07:46 | 001,663,008 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkAPO64.dll
[2010/07/05 12:07:46 | 000,417,824 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtkApi64.dll
[2010/07/05 12:07:45 | 001,421,856 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RtPgEx64.dll
[2010/07/05 12:07:44 | 001,178,656 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RTCOM64.dll
[2010/07/05 12:07:43 | 000,611,872 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RTSnMg64.cpl
[2010/07/05 12:07:41 | 000,304,640 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DHT64.dll
[2010/07/05 12:07:41 | 000,304,640 | —- | C] (Dolby Laboratories, Inc.) – C:\Windows\SysNative\RP3DAA64.dll
[2010/07/05 12:07:41 | 000,064,544 | —- | C] (Realtek Semiconductor Corp.) – C:\Windows\SysNative\RCoInst64.dll
[2010/07/05 12:07:38 | 000,311,296 | —- | C] (Waves Audio Ltd.) – C:\Windows\SysNative\MaxxAudioAPO20.dll
[2010/07/05 12:07:35 | 000,294,400 | —- | C] (Fortemedia Corporation) – C:\Windows\SysNative\FMAPO64.dll
[2010/07/05 12:07:34 | 000,166,400 | —- | C] (Andrea Electronics Corporation) – C:\Windows\SysNative\AERTAC64.dll
[2010/07/05 12:07:34 | 000,108,032 | —- | C] (Andrea Electronics Corporation) – C:\Windows\SysNative\AERTAR64.dll
[2010/07/05 12:07:33 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Temp
[2010/07/05 12:07:29 | 000,831,488 | R— | C] (Realtek Semiconductor Corp.) – C:\Windows\RtlExUpd.dll
[2010/07/05 12:07:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InstallShield
[2010/07/05 12:06:29 | 000,215,040 | —- | C] (Realtek ) – C:\Windows\SysNative\drivers\Rt64win7.sys
[2010/07/05 12:06:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Realtek
[2010/07/05 12:04:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\AGEIA Technologies
[2010/07/05 12:04:51 | 000,000,000 | —D | C] – C:\Windows\SysWow64\AGEIA
[2010/07/05 12:04:33 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Wise Installation Wizard
[2010/07/05 12:02:00 | 000,000,000 | —D | C] – C:\Program Files (x86)\ASUS
[2010/07/05 12:01:20 | 000,000,000 | —D | C] – C:\Program Files\ATKGFNEX
[2010/07/05 12:01:12 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2010/07/05 12:00:24 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\InstallShield
[2010/07/05 12:00:12 | 000,015,416 | —- | C] ( ) – C:\Windows\SysNative\drivers\kbfiltr.sys
[2010/07/05 11:56:25 | 000,053,248 | R— | C] (Windows XP Bundled build C-Centric Single User) – C:\Windows\SysWow64\CSVer.dll
[2010/07/05 11:56:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\Intel
[2010/07/05 11:56:07 | 000,000,000 | —D | C] – C:\Intel
[2010/07/05 11:53:13 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Macromedia
[2010/07/05 11:53:13 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Adobe
[2010/07/05 11:38:01 | 000,013,048 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\avgrssta.dll
[2010/07/05 11:37:59 | 000,317,520 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgtdia.sys
[2010/07/05 11:37:53 | 000,269,904 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgldx64.sys
[2010/07/05 11:37:51 | 000,035,536 | —- | C] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgmfx64.sys
[2010/07/05 11:37:51 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\Avg
[2010/07/05 11:37:44 | 000,000,000 | —D | C] – C:\ProgramData\avg9
[2010/07/05 11:37:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\AVG
[2010/07/05 11:36:10 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2010/07/05 11:36:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\Spybot - Search & Destroy
[2010/07/05 11:35:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Works
[2010/07/05 11:34:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Visual Studio
[2010/07/05 11:34:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2010/07/05 11:34:51 | 000,000,000 | —D | C] – C:\Windows\PCHEALTH
[2010/07/05 11:33:37 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2010/07/05 11:33:10 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Microsoft Help
[2010/07/05 11:33:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2010/07/05 11:33:09 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Help
[2010/07/05 11:32:51 | 000,000,000 | RH-D | C] – C:\MSOCache
[2010/07/05 11:26:53 | 000,839,680 | —- | C] (http://www.mp3dev.org/) – C:\Windows\SysWow64\lameACM.acm
[2010/07/05 11:26:53 | 000,217,088 | —- | C] (www.helixcommunity.org) – C:\Windows\SysWow64\yv12vfw.dll
[2010/07/05 11:26:53 | 000,151,552 | —- | C] (fccHandler) – C:\Windows\SysWow64\ac3acm.acm
[2010/07/05 11:26:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\K-Lite Codec Pack
[2010/07/05 11:26:49 | 000,000,000 | —D | C] – C:\Program Files (x86)\ImgBurn
[2010/07/05 11:26:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Auslogics
[2010/07/05 11:26:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Steam
[2010/07/05 11:26:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Steam
[2010/07/05 11:26:25 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2010/07/05 11:26:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\CCleaner
[2010/07/05 11:26:24 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/07/05 11:26:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/07/05 11:26:17 | 000,411,368 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\deployJava1.dll
[2010/07/05 11:26:17 | 000,153,376 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2010/07/05 11:26:17 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2010/07/05 11:26:17 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2010/07/05 11:26:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Java
[2010/07/05 11:25:54 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2010/07/05 11:25:41 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Google
[2010/07/05 11:16:42 | 000,000,000 | —D | C] – C:\ProgramData\NVIDIA
[2010/07/05 11:13:59 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2010/07/05 11:13:59 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2010/07/05 11:07:39 | 000,539,168 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvuninst.exe
[2010/07/05 11:05:33 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft.NET
[2010/07/05 11:05:19 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2010/07/05 11:04:09 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\sdbus.sys
[2010/07/05 11:03:02 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\dfshim.dll
[2010/07/05 11:03:02 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2010/07/05 11:03:02 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHost.exe
[2010/07/05 11:03:02 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2010/07/05 11:03:02 | 000,109,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\PresentationHostProxy.dll
[2010/07/05 11:03:02 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2010/07/05 11:03:02 | 000,049,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2010/07/05 11:03:02 | 000,048,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\netfxperf.dll
[2010/07/05 10:56:36 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CPFilters.dll
[2010/07/05 10:56:36 | 000,641,536 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CPFilters.dll
[2010/07/05 10:56:36 | 000,613,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\psisdecd.dll
[2010/07/05 10:56:36 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msdri.dll
[2010/07/05 10:56:36 | 000,465,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\psisdecd.dll
[2010/07/05 10:56:36 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\MSNP.ax
[2010/07/05 10:56:36 | 000,258,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mpg2splt.ax
[2010/07/05 10:56:36 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MSNP.ax
[2010/07/05 10:56:36 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2010/07/05 10:56:35 | 014,629,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmp.dll
[2010/07/05 10:56:33 | 011,406,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2010/07/05 10:56:32 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wmploc.DLL
[2010/07/05 10:56:32 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2010/07/05 10:56:32 | 001,975,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\CertEnroll.dll
[2010/07/05 10:56:32 | 001,320,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\CertEnroll.dll
[2010/07/05 10:56:29 | 001,446,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\lsasrv.dll
[2010/07/05 10:56:28 | 000,612,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\vbscript.dll
[2010/07/05 10:56:28 | 000,427,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\vbscript.dll
[2010/07/05 10:56:25 | 002,870,272 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2010/07/05 10:56:25 | 002,614,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2010/07/05 10:56:25 | 000,424,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc.dll
[2010/07/05 10:56:25 | 000,422,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_isv.dll
[2010/07/05 10:56:25 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\winlogon.exe
[2010/07/05 10:56:25 | 000,369,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc.dll
[2010/07/05 10:56:25 | 000,365,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_isv.dll
[2010/07/05 10:56:25 | 000,357,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_isv.exe
[2010/07/05 10:56:25 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate.exe
[2010/07/05 10:56:25 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_isv.exe
[2010/07/05 10:56:25 | 000,320,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate.exe
[2010/07/05 10:56:25 | 000,306,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp.exe
[2010/07/05 10:56:25 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2010/07/05 10:56:25 | 000,280,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp.exe
[2010/07/05 10:56:25 | 000,277,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2010/07/05 10:56:25 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp_isv.dll
[2010/07/05 10:56:25 | 000,121,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\secproc_ssp.dll
[2010/07/05 10:56:25 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp_isv.dll
[2010/07/05 10:56:25 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\secproc_ssp.dll
[2010/07/05 10:56:24 | 005,509,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2010/07/05 10:56:24 | 003,899,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2010/07/05 10:56:23 | 003,954,568 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2010/07/05 10:56:22 | 001,736,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntdll.dll
[2010/07/05 10:56:21 | 001,572,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\quartz.dll
[2010/07/05 10:56:21 | 001,328,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2010/07/05 10:56:21 | 000,091,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2010/07/05 10:56:21 | 000,084,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2010/07/05 10:56:19 | 000,852,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2010/07/05 10:56:19 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2010/07/05 10:56:19 | 000,243,200 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wow64.dll
[2010/07/05 10:56:19 | 000,148,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\t2embed.dll
[2010/07/05 10:56:19 | 000,108,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2010/07/05 10:56:19 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\setup16.exe
[2010/07/05 10:56:18 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntvdm64.dll
[2010/07/05 10:56:18 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\instnm.exe
[2010/07/05 10:56:18 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wow32.dll
[2010/07/05 10:56:18 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\user.exe
[2010/07/05 10:56:14 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msasn1.dll
[2010/07/05 10:56:13 | 000,366,080 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysNative\atmfd.dll
[2010/07/05 10:56:13 | 000,293,888 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2010/07/05 10:56:13 | 000,100,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fontsub.dll
[2010/07/05 10:56:13 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2010/07/05 10:56:13 | 000,046,080 | —- | C] (Adobe Systems) – C:\Windows\SysNative\atmlib.dll
[2010/07/05 10:56:13 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2010/07/05 10:51:47 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2010/07/05 10:51:47 | 000,172,032 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wintrust.dll
[2010/07/05 10:51:36 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cabview.dll
[2010/07/05 10:51:36 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2010/07/05 10:40:40 | 000,000,000 | R–D | C] – C:\Users\Ray\Searches
[2010/07/05 10:40:40 | 000,000,000 | -H-D | C] – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2010/07/05 10:40:28 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Identities
[2010/07/05 10:40:23 | 000,000,000 | R–D | C] – C:\Users\Ray\Contacts
[2010/07/05 10:40:20 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\VirtualStore
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\AppData\Local\Temporary Internet Files
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Templates
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Start Menu
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\SendTo
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Recent
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\PrintHood
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\NetHood
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Documents\My Videos
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Documents\My Pictures
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Documents\My Music
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\My Documents
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Local Settings
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\AppData\Local\History
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Cookies
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\Application Data
[2010/07/05 10:40:00 | 000,000,000 | -HSD | C] – C:\Users\Ray\AppData\Local\Application Data
[2010/07/05 10:39:59 | 000,000,000 | –SD | C] – C:\Users\Ray\AppData\Roaming\Microsoft
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Videos
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Saved Games
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Pictures
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Music
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Links
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Favorites
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Downloads
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\My Documents
[2010/07/05 10:39:59 | 000,000,000 | R–D | C] – C:\Users\Ray\Desktop
[2010/07/05 10:39:59 | 000,000,000 | -H-D | C] – C:\Users\Ray\AppData
[2010/07/05 10:39:59 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Temp
[2010/07/05 10:39:59 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Local\Microsoft
[2010/07/05 10:39:59 | 000,000,000 | —D | C] – C:\Users\Ray\AppData\Roaming\Media Center Programs

========== Files - Modified Within 30 Days ==========

[2010/07/11 09:57:54 | 005,505,024 | -HS- | M] () – C:\Users\Ray\NTUSER.DAT
[2010/07/11 09:57:43 | 000,013,968 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/07/11 09:57:43 | 000,013,968 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/07/11 09:30:00 | 000,000,900 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-866293761-256753920-4100414289-1001UA.job
[2010/07/11 09:18:24 | 000,726,316 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/07/11 09:18:24 | 000,624,178 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/07/11 09:18:24 | 000,106,522 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/07/11 09:15:39 | 061,877,765 | —- | M] () – C:\Windows\SysNative\drivers\Avg\incavi.avm
[2010/07/11 09:09:39 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/07/11 09:09:34 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/07/11 09:09:28 | 536,109,055 | -HS- | M] () – C:\hiberfil.sys
[2010/07/11 00:41:39 | 001,339,202 | -H– | M] () – C:\Users\Ray\AppData\Local\IconCache.db
[2010/07/10 14:01:57 | 000,001,009 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/07/10 13:49:34 | 000,000,098 | —- | M] () – C:\Windows\SysNative\drivers\etc\Hosts
[2010/07/10 11:30:04 | 000,000,848 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-866293761-256753920-4100414289-1001Core.job
[2010/07/10 11:23:43 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\Ray\Desktop\OTL.exe
[2010/07/07 15:04:27 | 079,925,284 | —- | M] () – C:\Users\Ray\Desktop\Audition2Installer.part3.rar
[2010/07/07 15:03:37 | 629,145,600 | —- | M] () – C:\Users\Ray\Desktop\Audition2Installer.part2.rar
[2010/07/07 14:57:28 | 629,145,600 | —- | M] () – C:\Users\Ray\Desktop\Audition2Installer.part1.rar
[2010/07/07 11:08:17 | 000,001,182 | —- | M] () – C:\Users\Ray\Desktop\ Mabinogi .lnk
[2010/07/07 09:55:15 | 000,000,917 | —- | M] () – C:\Users\Public\Desktop\Steam.lnk
[2010/07/07 08:19:33 | 000,001,848 | —- | M] () – C:\Users\Public\Desktop\Vuze.lnk
[2010/07/06 06:15:14 | 000,001,144 | —- | M] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Flash Media Live Encoder 3.lnk
[2010/07/06 06:15:14 | 000,001,120 | —- | M] () – C:\Users\Public\Desktop\Adobe Flash Media Live Encoder 3.lnk
[2010/07/06 00:04:12 | 000,001,091 | —- | M] () – C:\Users\Ray\Desktop\Trillian.lnk
[2010/07/06 00:04:12 | 000,001,043 | —- | M] () – C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
[2010/07/05 18:53:38 | 000,000,024 | —- | M] () – C:\Windows\ATKPF.ini
[2010/07/05 17:58:02 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/07/05 16:57:04 | 000,000,913 | —- | M] () – C:\Users\Ray\Desktop\Ventrilo.lnk
[2010/07/05 16:57:04 | 000,000,262 | —- | M] () – C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2010/07/05 13:35:16 | 000,039,252 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2010/07/05 13:35:16 | 000,039,252 | —- | M] () – C:\Windows\SysNative\license.rtf
[2010/07/05 12:17:06 | 000,064,352 | —- | M] () – C:\Users\Ray\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/07/05 12:16:48 | 000,001,108 | —- | M] () – C:\Users\Public\Desktop\Splendid Utility.Lnk
[2010/07/05 12:11:52 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_enecir_01009.Wdf
[2010/07/05 12:08:48 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01007.Wdf
[2010/07/05 11:58:26 | 000,298,648 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/07/05 11:53:04 | 000,002,300 | —- | M] () – C:\Users\Ray\Desktop\Google Chrome.lnk
[2010/07/05 11:38:01 | 000,013,048 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\avgrssta.dll
[2010/07/05 11:38:01 | 000,001,854 | —- | M] () – C:\Users\Public\Desktop\AVG Free 9.0.lnk
[2010/07/05 11:37:59 | 000,317,520 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgtdia.sys
[2010/07/05 11:37:53 | 000,269,904 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgldx64.sys
[2010/07/05 11:37:51 | 000,113,461 | —- | M] () – C:\Windows\SysNative\drivers\Avg\iavichjw.avm
[2010/07/05 11:37:51 | 000,035,536 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Windows\SysNative\drivers\avgmfx64.sys
[2010/07/05 11:36:13 | 000,001,282 | —- | M] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/07/05 11:36:13 | 000,001,258 | —- | M] () – C:\Users\Ray\Desktop\Spybot - Search & Destroy.lnk
[2010/07/05 11:33:30 | 000,000,478 | —- | M] () – C:\Windows\win.ini
[2010/07/05 11:26:54 | 000,001,291 | —- | M] () – C:\Users\Public\Desktop\Media Player Classic.lnk
[2010/07/05 11:26:49 | 000,001,865 | —- | M] () – C:\Users\Public\Desktop\ImgBurn.lnk
[2010/07/05 11:26:47 | 000,001,136 | —- | M] () – C:\Users\Ray\Desktop\Auslogics Disk Defrag.lnk
[2010/07/05 11:26:26 | 000,000,993 | —- | M] () – C:\Users\Public\Desktop\WinRAR.lnk
[2010/07/05 11:26:25 | 000,001,007 | —- | M] () – C:\Users\Ray\Desktop\CCleaner.lnk
[2010/07/05 11:26:13 | 000,411,368 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\deployJava1.dll
[2010/07/05 11:26:13 | 000,153,376 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2010/07/05 11:26:13 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2010/07/05 11:26:13 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2010/07/05 11:12:04 | 000,524,288 | -HS- | M] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010/07/05 11:12:04 | 000,524,288 | -HS- | M] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010/07/05 11:12:04 | 000,065,536 | -HS- | M] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010/07/05 10:47:14 | 000,001,437 | —- | M] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/07/05 10:40:00 | 000,000,020 | -HS- | M] () – C:\Users\Ray\ntuser.ini
[2010/06/28 04:00:00 | 000,108,032 | —- | M] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/06/28 04:00:00 | 000,000,038 | —- | M] () – C:\Windows\avisplitter.ini

========== Files Created - No Company Name ==========

[2010/07/10 14:01:57 | 000,001,009 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/07/07 15:03:37 | 079,925,284 | —- | C] () – C:\Users\Ray\Desktop\Audition2Installer.part3.rar
[2010/07/07 14:57:28 | 629,145,600 | —- | C] () – C:\Users\Ray\Desktop\Audition2Installer.part2.rar
[2010/07/07 14:51:31 | 629,145,600 | —- | C] () – C:\Users\Ray\Desktop\Audition2Installer.part1.rar
[2010/07/07 11:08:15 | 000,001,182 | —- | C] () – C:\Users\Ray\Desktop\ Mabinogi .lnk
[2010/07/07 08:19:33 | 000,001,848 | —- | C] () – C:\Users\Public\Desktop\Vuze.lnk
[2010/07/06 06:15:14 | 000,001,144 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Flash Media Live Encoder 3.lnk
[2010/07/06 06:15:14 | 000,001,120 | —- | C] () – C:\Users\Public\Desktop\Adobe Flash Media Live Encoder 3.lnk
[2010/07/06 00:04:12 | 000,001,091 | —- | C] () – C:\Users\Ray\Desktop\Trillian.lnk
[2010/07/06 00:04:12 | 000,001,043 | —- | C] () – C:\Users\Ray\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Trillian.lnk
[2010/07/05 18:53:38 | 000,000,024 | —- | C] () – C:\Windows\ATKPF.ini
[2010/07/05 17:58:02 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/07/05 16:57:04 | 000,000,913 | —- | C] () – C:\Users\Ray\Desktop\Ventrilo.lnk
[2010/07/05 16:57:01 | 000,000,262 | —- | C] () – C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2010/07/05 13:20:27 | 536,109,055 | -HS- | C] () – C:\hiberfil.sys
[2010/07/05 12:16:48 | 000,001,108 | —- | C] () – C:\Users\Public\Desktop\Splendid Utility.Lnk
[2010/07/05 12:14:02 | 000,011,832 | —- | C] () – C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2010/07/05 12:14:02 | 000,010,216 | —- | C] () – C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2010/07/05 12:11:52 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_enecir_01009.Wdf
[2010/07/05 12:11:37 | 001,806,400 | —- | C] () – C:\Windows\SysNative\drivers\snp2uvc.sys
[2010/07/05 12:11:37 | 000,042,176 | —- | C] () – C:\Windows\SysNative\drivers\sncduvc.sys
[2010/07/05 12:11:37 | 000,002,266 | —- | C] () – C:\Windows\Uninstvga.bat
[2010/07/05 12:11:37 | 000,002,008 | —- | C] () – C:\Windows\Uninstsxga.bat
[2010/07/05 12:11:37 | 000,001,682 | —- | C] () – C:\Windows\Uninstuxga.bat
[2010/07/05 12:11:37 | 000,000,386 | —- | C] () – C:\Windows\Uninstuxga.reg
[2010/07/05 12:11:37 | 000,000,386 | —- | C] () – C:\Windows\Uninstsxga.reg
[2010/07/05 12:11:37 | 000,000,384 | —- | C] () – C:\Windows\Uninstvga.reg
[2010/07/05 12:08:48 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01007.Wdf
[2010/07/05 12:07:57 | 000,000,520 | R— | C] () – C:\Windows\SysNative\drivers\SamSfPa.dat
[2010/07/05 12:06:43 | 000,067,584 | —- | C] () – C:\Windows\SysNative\RtNicProp64.dll
[2010/07/05 11:38:01 | 000,001,854 | —- | C] () – C:\Users\Public\Desktop\AVG Free 9.0.lnk
[2010/07/05 11:37:51 | 061,877,765 | —- | C] () – C:\Windows\SysNative\drivers\Avg\incavi.avm
[2010/07/05 11:37:51 | 000,113,461 | —- | C] () – C:\Windows\SysNative\drivers\Avg\iavichjw.avm
[2010/07/05 11:36:13 | 000,001,282 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/07/05 11:36:13 | 000,001,258 | —- | C] () – C:\Users\Ray\Desktop\Spybot - Search & Destroy.lnk
[2010/07/05 11:26:58 | 000,001,291 | —- | C] () – C:\Users\Public\Desktop\Media Player Classic.lnk
[2010/07/05 11:26:54 | 000,165,376 | —- | C] () – C:\Windows\SysWow64\unrar.dll
[2010/07/05 11:26:54 | 000,000,038 | —- | C] () – C:\Windows\avisplitter.ini
[2010/07/05 11:26:53 | 000,790,528 | —- | C] () – C:\Windows\SysWow64\xvidcore.dll
[2010/07/05 11:26:53 | 000,134,144 | —- | C] () – C:\Windows\SysWow64\xvidvfw.dll
[2010/07/05 11:26:53 | 000,108,032 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/07/05 11:26:53 | 000,000,547 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010/07/05 11:26:53 | 000,000,414 | —- | C] () – C:\Windows\SysWow64\lame_acm.xml
[2010/07/05 11:26:49 | 000,001,865 | —- | C] () – C:\Users\Public\Desktop\ImgBurn.lnk
[2010/07/05 11:26:47 | 000,001,136 | —- | C] () – C:\Users\Ray\Desktop\Auslogics Disk Defrag.lnk
[2010/07/05 11:26:29 | 000,000,917 | —- | C] () – C:\Users\Public\Desktop\Steam.lnk
[2010/07/05 11:26:26 | 000,000,993 | —- | C] () – C:\Users\Public\Desktop\WinRAR.lnk
[2010/07/05 11:26:25 | 000,001,007 | —- | C] () – C:\Users\Ray\Desktop\CCleaner.lnk
[2010/07/05 11:25:53 | 000,002,300 | —- | C] () – C:\Users\Ray\Desktop\Google Chrome.lnk
[2010/07/05 11:25:49 | 000,000,900 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-866293761-256753920-4100414289-1001UA.job
[2010/07/05 11:25:44 | 000,000,848 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-866293761-256753920-4100414289-1001Core.job
[2010/07/05 10:47:14 | 000,001,437 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/07/05 10:40:00 | 000,524,288 | -HS- | C] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010/07/05 10:40:00 | 000,524,288 | -HS- | C] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010/07/05 10:40:00 | 000,262,144 | -HS- | C] () – C:\Users\Ray\ntuser.dat.LOG1
[2010/07/05 10:40:00 | 000,065,536 | -HS- | C] () – C:\Users\Ray\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010/07/05 10:40:00 | 000,000,020 | -HS- | C] () – C:\Users\Ray\ntuser.ini
[2010/07/05 10:40:00 | 000,000,000 | -HS- | C] () – C:\Users\Ray\ntuser.dat.LOG2
[2010/07/05 10:39:59 | 005,505,024 | -HS- | C] () – C:\Users\Ray\NTUSER.DAT
[2010/07/05 10:39:59 | 000,000,290 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/07/05 10:39:59 | 000,000,272 | —- | C] () – C:\Users\Ray\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2009/08/18 15:45:45 | 000,000,010 | —- | C] () – C:\Windows\SysWow64\ABLKSR.ini
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2008/10/07 09:13:30 | 000,197,912 | —- | C] () – C:\Windows\SysWow64\physxcudart_20.dll
[2008/10/07 09:13:22 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\SysWow64\AgCPanelFrench.dll

========== Files - Unicode (All) ==========
[2010/07/09 08:44:11 | 000,000,000 | —D | M](C:\Users\Ray\Documents\????) – C:\Users\Ray\Documents\마비노기
[2010/07/09 08:33:33 | 000,000,000 | —D | C](C:\Users\Ray\Documents\????) – C:\Users\Ray\Documents\마비노기
< End of report >
The log appears to be clean

You have peer to peer download programs installed on your computer

We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It likely contributed to your current situation. This page will give you further information.
Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.
Please see this topic for more information:
Perils of P2P File Sharing.
I would strongly recommend that you uninstall this/these now. You can do so via Control Panel >> Add or Remove Programs.

NEXT

Clean up with OTL:
  • Double-click OTL.exe to start the program.
  • Close all other programs apart from OTL as this step will require a reboot
  • On the OTL main screen, press the CLEANUP button
  • Say Yes to the prompt and then allow the program to reboot your computer.


NEXT

Please advise how the computer is running and is there are any outstanding issues.
Sorry I was out all day yesterady. Uninstalled the P2P program and did the OTL cleanup. System seems to be running fine, although spybot still detects the Win.32Pornpopup in a scan.
Spybot is just finding cookies.

Run Spybot and scan for problems,
Have Spybot delete the items in red, the right click and copy results. Paste the results here in your next reply.

Then manually delete all cookies from your browsers just to make certain they are removed.

How to delete cookies in Internet Explorer

1. Select "Tools"
2, Select "Internet Options".
3. Open the "General" tab.
4. In "Browsing history" area click the "Delete" button.
5. In "Delete browsing history" window select "cookies" then select the "Delete" button
6. Click OK.

Note: In Internet Explorer even if you delete cookies manually, cookies index.dat file stores Internet surfing information. This file can't be deleted manually as it is used by Windows all the time.


How to delete cookies in Firefox

1. Select "Tools"
2. Select "Options".
3. Select "Privacy".
4. Select "show cookies"
5 Select "remove all cookies"
6. Click close.
MediaPlex: Tracking cookie (Chrome: Chrome) (Cookie, fixed) DoubleClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed) FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed) FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed) FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed) FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) BurstMedia: Tracking cookie (Chrome: Chrome) (Cookie, fixed) BurstMedia: Tracking cookie (Chrome: Chrome) (Cookie, fixed) FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed) FastClick: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) Win32.PornPopUp: Tracking cookie (Chrome: Chrome) (Cookie, fixed) — Spybot - Search & Destroy version: 1.6.2 (build: 20090126) — 2009-01-26 blindman.exe (1.0.0.8) 2009-01-26 SDFiles.exe (1.6.1.7) 2009-01-26 SDMain.exe (1.0.0.6) 2009-01-26 SDShred.exe (1.0.2.5) 2009-01-26 SDUpdate.exe (1.6.0.12) 2009-01-26 SDWinSec.exe (1.0.0.12) 2009-01-26 SpybotSD.exe (1.6.2.46) 2009-03-05 TeaTimer.exe ([removed]) 2010-07-05 unins000.exe (51.49.0.0) 2009-01-26 Update.exe (1.6.0.7) 2009-11-04 advcheck.dll ([removed]) 2007-04-02 aports.dll (2.1.0.0) 2008-06-14 DelZip179.dll (1.79.11.1) 2009-01-26 SDHelper.dll (1.6.2.14) 2008-06-19 sqlite3.dll 2009-01-26 Tools.dll (2.1.6.10) 2009-01-16 UninsSrv.dll (1.0.0.0) 2010-06-29 Includes\Adware.sbi (*) 2010-07-06 Includes\AdwareC.sbi (*) 2010-01-25 Includes\Cookies.sbi (*) 2009-11-03 Includes\Dialer.sbi (*) 2010-07-06 Includes\DialerC.sbi (*) 2010-01-25 Includes\HeavyDuty.sbi (*) 2009-05-26 Includes\Hijackers.sbi (*) 2010-07-06 Includes\HijackersC.sbi (*) 2010-06-29 Includes\iPhone.sbi (*) 2010-01-20 Includes\Keyloggers.sbi (*) 2010-07-06 Includes\KeyloggersC.sbi (*) 2004-11-29 Includes\LSP.sbi (*) 2010-06-01 Includes\Malware.sbi (*) 2010-07-06 Includes\MalwareC.sbi (*) 2010-05-18 Includes\PUPS.sbi (*) 2010-07-06 Includes\PUPSC.sbi (*) 2010-01-25 Includes\Revision.sbi (*) 2009-01-13 Includes\Security.sbi (*) 2010-07-06 Includes\SecurityC.sbi (*) 2008-06-03 Includes\Spybots.sbi (*) 2008-06-03 Includes\SpybotsC.sbi (*) 2010-06-29 Includes\Spyware.sbi (*) 2010-07-06 Includes\SpywareC.sbi (*) 2010-03-08 Includes\Tracks.uti 2010-06-29 Includes\Trojans.sbi (*) 2010-07-06 Includes\TrojansC-02.sbi (*) 2010-07-06 Includes\TrojansC-03.sbi (*) 2010-07-06 Includes\TrojansC-04.sbi (*) 2010-07-06 Includes\TrojansC-05.sbi (*) 2010-07-06 Includes\TrojansC.sbi (*) 2008-03-04 Plugins\Chai.dll 2008-03-05 Plugins\Fennel.dll 2008-02-26 Plugins\Mate.dll 2007-12-24 Plugins\TCPIPAddress.dll

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI