Spyware / Malware / Virus Removal

Can't access Local Disc... Most files open in Notepad

8 min read

Looking for the outcome? Ask AI

mgpd802 Topic Starter

Post #1July 15, 2010, 12:21 AM UTC

Any help would be greatly appreciated!

McAfee doesn't pick up any viruses… Dell rep says there are several viruses and wants to charge $150 to fix two week old laptop…
Thanks, Matthew.

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 8:11:05 PM, on 7/14/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
c:\PROGRA~2\mcafee.com\agent\mcagent.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10d.exe
C:\Users\mgpd802\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2269050
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~2\mcafee\msk\mskapbho.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~2\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [StartCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [UpdReg] C:\Windows\UpdReg.EXE
O4 - HKLM\..\Run: [Desktop Disc Tool] "c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe"
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe
O4 - HKLM\..\RunOnce: [STToasterLauncher] C:\Program Files (x86)\Dell DataSafe Local Backup\toasterLauncher.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O8 - Extra context menu item: Send image to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O18 - Protocol: cozi - {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent\Dell Games\Dell Game Console\GameConsoleService.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~2\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files (x86)\Common Files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\PROGRA~2\COMMON~1\McAfee\McProxy\McProxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~2\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MPF\MPFSrv.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files (x86)\McAfee\MSK\MskSrver.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sound Blaster X-Fi MB Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 13595 bytes

NightWizard

Post #2July 16, 2010, 11:56 AM UTC last edited July 16, 2010, 12:02 PM UTC

Hi mgpd802,

My name is NightWizard and I will be your helper.

While I go through your log, I would very much appreciate it if you read the following.

I aim provide you with the best instructions possible to resolve your issue. However, I ask that you understand that malware is complex and the process usually takes a few attempts before successfully cleaning everything out. In severe cases cleaning may not be possible and a reformat may be our only option.
If you are unresponsive to this thread within three days, the thread will be locked due to inactivity. However, if you will be away, let us know and we will be sure to keep the thread open.
Please do not make any new threads about this issue here or any other malware removal forum; it wastes other helpers' time and it can be dangerous for your PC.
If you don't understand a set of instructions or you are having trouble performing some of the fix, don't panic! Let me know and I will be happy to help in any way I can.
Please remember that the absence of symptoms does not mean you are clean. I request that you stick to this log until the very end - I will inform you when your system is clean.
Please do not use any tools other than the ones I instruct you to use. Some of the tools available can be dangerous if used incorrectly.

Please be advised that I am still in training at this forum. My posts will be checked by experts before I post in this thread. This is to ensure you get the best possible help available. This may cause delay however I will do my best to limit the time gaps between posts.

Thanks for choosing WhatTheTech and I will be back with a fix shortly!

-NightWizard

NightWizard

Post #3July 16, 2010, 12:19 PM UTC

Hi mgpd802,

Please do the following scans and post the requested logs:

1. OTL Scan
Please download OTL from one of the following links

LINK 1
LINK 2
Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Under the Custom Scan box paste this in;

netsvcs
drivers32 /all
%SYSTEMDRIVE%\*.*
%systemroot%\system32\*.wt
%systemroot%\system32\*.ruy
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\system32\spool\prtprocs\w32x86\*.tmp
%systemroot%\system32\Spool\prtprocs\w32x86\*.dll
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\user32.dll /md5
%systemroot%\system32\ws2_32.dll /md5
%systemroot%\system32\ws2help.dll /md5
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them if you need to start a new topic.

2. GMER Scan
Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.

Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO, then use the following settings for a more complete scan.

[external image: Posted Image]
Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked
- IAT/EAT
- Drives/Partition other than Systemdrive (typically C:\)
- Show All (don't miss this one)
Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries

In your next reply please include:

The OTL logs.
The GMER log.

Cheers!

-NightWizard

mgpd802

Post #4July 16, 2010, 3:03 PM UTC

OTL logfile created on: 7/16/2010 10:43:10 AM - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\mgpd802\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

6.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 65.00% Memory free
12.00 Gb Paging File | 10.00 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.07 Gb Total Space | 401.18 Gb Free Space | 88.94% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MGPD802-PC
Current User Name: mgpd802
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/07/16 10:42:09 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\mgpd802\Desktop\OTL.exe
PRC - [2010/06/10 06:58:32 | 001,218,008 | —- | M] (McAfee, Inc.) – c:\Program Files (x86)\McAfee.com\Agent\mcagent.exe
PRC - [2010/06/10 06:58:32 | 000,865,832 | —- | M] (McAfee, Inc.) – C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe
PRC - [2010/04/24 01:10:34 | 000,209,768 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
PRC - [2010/04/24 01:10:28 | 000,483,688 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
PRC - [2010/03/31 12:42:56 | 000,786,432 | —- | M] () – C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
PRC - [2010/03/25 18:08:06 | 001,573,376 | —- | M] (SoftThinks - Dell) – C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
PRC - [2010/03/04 13:28:08 | 000,658,656 | —- | M] (SoftThinks) – C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
PRC - [2010/02/28 02:33:14 | 000,821,664 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
PRC - [2010/02/17 15:53:26 | 000,606,736 | —- | M] (McAfee, Inc.) – C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe
PRC - [2010/02/09 14:34:00 | 001,807,680 | —- | M] () – C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
PRC - [2009/12/29 17:35:38 | 000,140,520 | —- | M] (CyberLink Corp.) – C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009/11/02 20:24:58 | 000,257,440 | R— | M] (Adobe Systems, Inc.) – C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10d.exe
PRC - [2009/10/27 11:19:46 | 000,895,696 | —- | M] (McAfee, Inc.) – C:\Program Files (x86)\McAfee\MPF\MpfSrv.exe
PRC - [2009/10/15 04:10:28 | 000,498,160 | —- | M] () – C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe
PRC - [2009/10/02 13:02:56 | 000,026,640 | —- | M] (McAfee, Inc.) – C:\Program Files (x86)\McAfee\MSK\msksrver.exe
PRC - [2009/07/08 11:54:34 | 000,359,952 | —- | M] (McAfee, Inc.) – C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe
PRC - [2009/07/07 19:10:02 | 002,482,848 | —- | M] (McAfee, Inc.) – C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe
PRC - [2009/07/05 17:12:26 | 000,307,200 | —- | M] (Creative Technology Ltd) – C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
PRC - [2009/06/09 10:11:14 | 000,155,648 | —- | M] (Stardock Corporation) – C:\Program Files\Dell\DellDock\DockLogin.exe
PRC - [2009/06/04 20:03:32 | 000,186,904 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009/06/04 20:03:06 | 000,354,840 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2009/05/21 09:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
PRC - [2009/05/21 09:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
PRC - [2009/01/14 18:53:02 | 000,226,656 | —- | M] (Microsoft Corp.) – C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

========== Modules (SafeList) ==========

MOD - [2010/07/16 10:42:09 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\mgpd802\Desktop\OTL.exe
MOD - [2009/07/13 21:14:10 | 000,095,232 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\msscript.ocx
MOD - [2009/07/13 21:03:50 | 001,680,896 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/02/25 14:03:00 | 000,244,736 | —- | M] (IDT, Inc.) [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\stacsv64.exe – (STacSV)
SRV:64bit: - [2010/02/24 13:16:08 | 000,696,848 | —- | M] (McAfee, Inc.) [On_Demand | Stopped] – C:\Program Files\McAfee\VirusScan\mcods.exe – (McODS)
SRV:64bit: - [2010/02/17 16:45:16 | 000,155,456 | —- | M] (McAfee, Inc.) [Unknown | Running] – C:\Program Files\McAfee\VirusScan\Mcshield.exe – (McShield)
SRV:64bit: - [2009/07/16 21:06:22 | 000,033,280 | —- | M] () [Auto | Running] – C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE – (wltrysvc)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV:64bit: - [2009/07/01 19:54:02 | 000,864,032 | —- | M] (Broadcom Corporation.) [Auto | Running] – c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe – (btwdins)
SRV:64bit: - [2009/06/25 06:48:28 | 000,203,264 | —- | M] (AMD) [Auto | Running] – C:\Windows\SysNative\atiesrxx.exe – (AMD External Events Utility)
SRV:64bit: - [2009/06/09 10:11:14 | 000,155,648 | —- | M] (Stardock Corporation) [Auto | Running] – C:\Program Files\Dell\DellDock\DockLogin.exe – (DockLoginService)
SRV:64bit: - [2009/03/02 14:42:58 | 000,089,600 | —- | M] (Andrea Electronics Corporation) [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_7f58c91b65c73836\AESTSr64.exe – (AESTFilters)
SRV - [2010/06/30 02:10:45 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe – (Creative ALchemy AL6 Licensing Service)
SRV - [2010/06/30 02:09:47 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe – (Creative Audio Engine Licensing Service)
SRV - [2010/06/30 02:08:41 | 000,079,360 | —- | M] (Creative Labs) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe – (Sound Blaster X-Fi MB Licensing Service)
SRV - [2010/06/30 01:54:21 | 000,016,680 | —- | M] (Citrix Online, a division of Citrix Systems, Inc.) [On_Demand | Stopped] – C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe – (GoToAssist)
SRV - [2010/06/18 21:59:12 | 000,246,520 | —- | M] (WildTangent, Inc.) [On_Demand | Stopped] – C:\Program Files (x86)\WildTangent\Dell Games\Dell Game Console\GameConsoleService.exe – (GameConsoleService)
SRV - [2010/06/10 06:58:32 | 000,865,832 | —- | M] (McAfee, Inc.) [Auto | Running] – C:\Program Files (x86)\McAfee\MSC\mcmscsvc.exe – (mcmscsvc)
SRV - [2010/04/24 01:10:34 | 000,209,768 | —- | M] (Microsoft Corporation) [On_Demand | Running] – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe – (sftvsa)
SRV - [2010/04/24 01:10:28 | 000,483,688 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe – (sftlist)
SRV - [2010/03/04 13:28:08 | 000,658,656 | —- | M] (SoftThinks) [Auto | Running] – C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE – (SftService)
SRV - [2010/02/28 02:33:14 | 000,821,664 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE – (cvhsvc)
SRV - [2010/02/17 15:53:26 | 000,606,736 | —- | M] (McAfee, Inc.) [On_Demand | Running] – C:\Program Files (x86)\McAfee\VirusScan\mcsysmon.exe – (McSysmon)
SRV - [2009/10/27 11:19:46 | 000,895,696 | —- | M] (McAfee, Inc.) [Auto | Running] – C:\Program Files (x86)\McAfee\MPF\MpfSrv.exe – (MpfService)
SRV - [2009/10/02 13:02:56 | 000,026,640 | —- | M] (McAfee, Inc.) [Auto | Running] – C:\Program Files (x86)\McAfee\MSK\MskSrver.exe – (MSK80Service)
SRV - [2009/07/08 11:54:34 | 000,359,952 | —- | M] (McAfee, Inc.) [Auto | Running] – C:\Program Files (x86)\Common Files\McAfee\McProxy\McProxy.exe – (McProxy)
SRV - [2009/07/07 19:10:02 | 002,482,848 | —- | M] (McAfee, Inc.) [Auto | Running] – C:\Program Files (x86)\Common Files\McAfee\MNA\McNASvc.exe – (McNASvc)
SRV - [2009/07/05 17:12:26 | 000,307,200 | —- | M] (Creative Technology Ltd) [Auto | Running] – C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe – (CTAudSvcService)
SRV - [2009/06/04 20:03:06 | 000,354,840 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe – (IAANTMON) Intel®
SRV - [2009/05/21 09:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) [Auto | Running] – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe – (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter)
SRV - [2009/01/14 18:53:02 | 000,226,656 | —- | M] (Microsoft Corp.) [Auto | Running] – C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe – (SeaPort)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2010/04/24 01:10:32 | 000,022,376 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftvollh.sys – (Sftvol)
DRV:64bit: - [2010/04/24 01:10:28 | 000,269,672 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftplaylh.sys – (Sftplay)
DRV:64bit: - [2010/04/24 01:10:28 | 000,025,960 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftredirlh.sys – (Sftredir)
DRV:64bit: - [2010/04/24 01:10:20 | 000,721,768 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Sftfslh.sys – (Sftfs)
DRV:64bit: - [2010/04/15 17:40:10 | 000,301,688 | —- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Apfiltr.sys – (ApfiltrService)
DRV:64bit: - [2010/02/25 14:03:00 | 000,505,856 | —- | M] (IDT, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\stwrt64.sys – (STHDA)
DRV:64bit: - [2010/02/17 16:52:42 | 000,308,296 | —- | M] (McAfee, Inc.) [Kernel | System | Running] – C:\Windows\SysNative\drivers\mfehidk.sys – (mfehidk)
DRV:64bit: - [2010/02/17 16:52:42 | 000,102,472 | —- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\mfeavfk.sys – (mfeavfk)
DRV:64bit: - [2010/02/17 16:52:42 | 000,049,480 | —- | M] (McAfee, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\mfesmfk.sys – (mfesmfk)
DRV:64bit: - [2010/02/17 16:45:32 | 000,040,904 | —- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\mferkdk.sys – (mferkdk)
DRV:64bit: - [2009/08/04 20:28:36 | 000,021,160 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwrchid.sys – (btwrchid)
DRV:64bit: - [2009/08/04 20:28:32 | 000,132,648 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwavdt.sys – (btwavdt)
DRV:64bit: - [2009/08/04 20:28:32 | 000,098,344 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwaudio.sys – (btwaudio)
DRV:64bit: - [2009/08/04 20:28:32 | 000,035,104 | —- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwl2cap.sys – (btwl2cap)
DRV:64bit: - [2009/07/16 21:06:20 | 000,022,520 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\bcm42rly.sys – (BCM42RLY)
DRV:64bit: - [2009/07/16 21:06:18 | 002,769,400 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\BCMWL664.SYS – (BCM43XX)
DRV:64bit: - [2009/07/13 21:52:21 | 000,106,576 | —- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata)
DRV:64bit: - [2009/07/13 21:52:21 | 000,028,752 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata)
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | —- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | —- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:47:48 | 000,077,888 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | —- | M] (Promise Technology) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor)
DRV:64bit: - [2009/07/09 04:00:00 | 000,055,280 | —- | M] (Sonic Solutions) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\PxHlpa64.sys – (PxHlpa64)
DRV:64bit: - [2009/06/25 07:24:30 | 006,036,480 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\atikmdag.sys – (atikmdag)
DRV:64bit: - [2009/06/18 10:15:16 | 000,041,032 | —- | M] (McAfee, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\mfebopk.sys – (mfebopk)
DRV:64bit: - [2009/06/15 14:06:42 | 000,172,704 | —- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\CtClsFlt.sys – (CtClsFlt)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | —- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\wbem\ntfs.mof – (Ntfs)
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir)
DRV:64bit: - [2009/06/04 06:54:36 | 000,408,600 | —- | M] (Intel Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iaStor.sys – (iaStor)
DRV:64bit: - [2009/05/19 23:10:00 | 000,393,728 | —- | M] (Marvell) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\yk62x64.sys – (yukonw7)
DRV:64bit: - [2009/05/08 04:15:18 | 000,215,552 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\RtsUStor.sys – (RSUSBSTOR)
DRV:64bit: - [2009/04/09 14:23:02 | 000,176,144 | —- | M] (McAfee, Inc.) [Kernel | System | Running] – C:\Windows\SysNative\drivers\Mpfp.sys – (MPFP)
DRV:64bit: - [2006/11/01 12:51:00 | 000,151,656 | —- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] – C:\Windows\SysNative\drivers\WimFltr.sys – (WimFltr)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2269050
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\MyWebSearch\bar\1.bin File not found

O1 HOSTS File: ([2009/06/10 17:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Program Files (x86)\McAfee\MSK\mskapbho64.dll ()
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg64.dll (Google Inc.)
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Program Files (x86)\McAfee\MSK\mskapbho.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\Program Files (x86)\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files (x86)\DVDVideoSoftTB\tbDVDV.dll (Conduit Ltd.)
O4:64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE (Dell Inc.)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [RunDLLEntry] C:\Windows\system32\AmbRunE.DLL File not found
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [Desktop Disc Tool] c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files (x86)\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [StartCCC] c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [msnmsgr] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
O4 - HKCU..\Run: [swg] C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4:64bit: - HKLM..\RunOnce: [DSUpdateLauncher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe (Dell)
O4 - HKLM..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe (Softthinks)
O4 - HKLM..\RunOnce: [STToasterLauncher] C:\Program Files (x86)\Dell DataSafe Local Backup\ToasterLauncher.exe ()
O4 - Startup: C:\Users\mgpd802\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files (x86)\Dell\DellDock\DellDock.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Google Sidewiki… - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O8:64bit: - Extra context menu item: Send image to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll (Google Inc.)
O8 - Extra context menu item: Send image to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device… - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18:64bit: - Protocol\Handler\cozi {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\cozi {5356518D-FE9C-4E08-9C1F-1E872ECD367F} - c:\Program Files (x86)\Cozi Express\CoziProtocolHandler.dll (Cozi Group, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - Reg Error: Key error. - C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

Drivers32:64bit: midi - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: midimapper - midimap.dll (Microsoft Corporation)
Drivers32:64bit: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:64bit: MSVideo8 - VfWWDM32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.IYUV - iyuv_32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.UYVY - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YUY2 - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YVU9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:64bit: VIDC.YVYU - msyuv.dll (Microsoft Corporation)
Drivers32:64bit: wave - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:64bit: wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: midi - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - C:\Windows\SysWow64\midimap.dll (Microsoft Corporation)
Drivers32: mixer - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.iac2 - C:\Windows\SysWOW64\iac25_32.ax (Intel Corporation)
Drivers32: msacm.imaadpcm - C:\Windows\SysWow64\imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - C:\Windows\SysWow64\msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - C:\Windows\SysWow64\msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - C:\Windows\SysWow64\msgsm32.acm (Microsoft Corporation)
Drivers32: msacm.siren - C:\Windows\SysWow64\sirenacm.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: VIDC.IV41 - C:\Windows\SysWow64\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\Windows\SysWow64\ir50_32.dll (Intel Corporation)
Drivers32: vidc.iyuv - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - C:\Windows\SysWow64\msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - C:\Windows\SysWow64\msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yuy2 - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvu9 - C:\Windows\SysWow64\tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: wave - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - C:\Windows\SysWow64\msacm32.drv (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 90 Days ==========

[2010/07/16 10:42:00 | 000,574,976 | —- | C] (OldTimer Tools) – C:\Users\mgpd802\Desktop\OTL.exe
[2010/07/16 02:57:07 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\U3
[2010/07/16 02:39:52 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Microsoft Games
[2010/07/15 21:45:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\TripleA
[2010/07/15 03:00:51 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2010/07/14 20:07:51 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\mgpd802\Desktop\HiJackThis.exe
[2010/07/14 02:00:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Conduit
[2010/07/14 02:00:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\DVDVideoSoftTB
[2010/07/14 02:00:42 | 000,000,000 | —D | C] – C:\Users\mgpd802\Documents\DVDVideoSoft
[2010/07/14 02:00:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\DVDVideoSoft
[2010/07/14 02:00:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DVDVideoSoft
[2010/07/14 01:55:28 | 000,000,000 | —D | C] – C:\YouTubeDownload
[2010/07/14 01:55:27 | 000,000,000 | —D | C] – C:\ConverterOutput
[2010/07/14 01:55:25 | 000,000,000 | —D | C] – C:\Users\mgpd802\Documents\Cucusoft
[2010/07/14 01:55:19 | 000,060,273 | —- | C] (Open Source Software community project) – C:\Windows\SysWow64\pthreadGC2.dll
[2010/07/14 01:55:18 | 000,110,592 | —- | C] (Cucusoft Inc.) – C:\Windows\SysWow64\PropListCtrl.ocx
[2010/07/14 01:55:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Cucusoft
[2010/07/13 00:11:27 | 000,000,000 | —D | C] – C:\Users\mgpd802\My Backup Files
[2010/07/12 03:26:08 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Malwarebytes
[2010/07/12 03:26:02 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/07/12 03:26:01 | 000,024,664 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys
[2010/07/12 03:26:01 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2010/07/12 03:26:01 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2010/07/12 03:17:08 | 000,000,000 | —D | C] – C:\Users\mgpd802\Desktop\File association fix(7 & vista)
[2010/07/12 03:13:05 | 000,000,000 | —D | C] – C:\ProgramData\Citrix
[2010/07/12 03:12:10 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Deployment
[2010/07/11 04:23:17 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Wat
[2010/07/11 04:23:17 | 000,000,000 | —D | C] – C:\Windows\SysNative\Wat
[2010/07/11 01:43:37 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Google
[2010/07/11 01:43:37 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Google
[2010/07/11 01:43:17 | 000,000,000 | —D | C] – C:\Program Files\Google
[2010/07/11 01:43:13 | 000,000,000 | —D | C] – C:\ProgramData\Google
[2010/07/11 01:43:13 | 000,000,000 | —D | C] – C:\Program Files (x86)\Google
[2010/07/11 01:42:58 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Adobe
[2010/07/10 23:40:18 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Apps
[2010/07/09 23:09:40 | 000,000,000 | RH-D | C] – C:\MSOCache
[2010/07/09 10:52:06 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Diagnostics
[2010/07/09 10:36:05 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\ElevatedDiagnostics
[2010/07/09 00:00:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\EA Games
[2010/07/08 23:44:40 | 000,000,000 | —D | C] – C:\Westwood
[2010/07/08 23:44:40 | 000,000,000 | —D | C] – C:\Red_Alert_2
[2010/07/08 22:10:31 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\GPUMonitor
[2010/07/08 21:54:42 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\BuildAGadget Content
[2010/07/08 21:20:55 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Absolute_Software
[2010/07/08 20:29:53 | 000,000,000 | —D | C] – C:\ProgramData\VirtualizedApplications
[2010/07/08 19:08:17 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\skypePM
[2010/07/08 18:25:24 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Macrovision
[2010/07/08 18:10:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\GameSpy Arcade
[2010/07/08 18:09:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\The Creative Assembly
[2010/07/08 17:51:32 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\WildTangent
[2010/07/08 17:41:56 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\SoftGrid Client
[2010/07/08 17:41:56 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\SoftGrid Client
[2010/07/08 17:40:56 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2010/07/08 17:40:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Application Virtualization Client
[2010/07/08 17:40:56 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2010/07/08 17:40:40 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\TP
[2010/07/08 17:25:43 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Macromedia
[2010/07/08 17:25:43 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Adobe
[2010/07/08 17:19:47 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Reallusion
[2010/07/08 17:06:53 | 000,000,000 | —D | C] – C:\Users\mgpd802\Documents\Dell WebCam Central
[2010/07/08 17:06:52 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Creative
[2010/07/08 17:00:11 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\CyberLink
[2010/07/08 16:55:46 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Skype
[2010/07/08 16:55:08 | 000,000,000 | —D | C] – C:\Users\mgpd802\Tracing
[2010/07/08 16:51:56 | 000,000,000 | -HSD | C] – C:\System Recovery
[2010/07/08 16:51:22 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Dell
[2010/07/08 16:51:06 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\DataSafeOnline
[2010/07/08 16:51:04 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Stardock_Corporation
[2010/07/08 16:50:54 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Roxio
[2010/07/08 16:50:49 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Broadcom
[2010/07/08 16:50:49 | 000,000,000 | —D | C] – C:\Users\mgpd802\Documents\Bluetooth Exchange Folder
[2010/07/08 16:50:44 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\ATI
[2010/07/08 16:50:44 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\ATI
[2010/07/08 16:50:43 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\SupportSoft
[2010/07/08 16:50:10 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Searches
[2010/07/08 16:50:10 | 000,000,000 | -H-D | C] – C:\Users\mgpd802\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2010/07/08 16:50:01 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Identities
[2010/07/08 16:49:54 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Contacts
[2010/07/08 16:49:51 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\VirtualStore
[2010/07/08 16:46:13 | 000,000,000 | –SD | C] – C:\Users\mgpd802\AppData\Roaming\Microsoft
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Videos
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Saved Games
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Pictures
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Music
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Links
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Favorites
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Downloads
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\My Documents
[2010/07/08 16:46:13 | 000,000,000 | R–D | C] – C:\Users\mgpd802\Desktop
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\AppData\Local\Temporary Internet Files
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Templates
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Start Menu
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\SendTo
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Recent
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\PrintHood
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\NetHood
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Documents\My Videos
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Documents\My Pictures
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Documents\My Music
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\My Documents
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Local Settings
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\AppData\Local\History
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Cookies
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\Application Data
[2010/07/08 16:46:13 | 000,000,000 | -HSD | C] – C:\Users\mgpd802\AppData\Local\Application Data
[2010/07/08 16:46:13 | 000,000,000 | -H-D | C] – C:\Users\mgpd802\AppData
[2010/07/08 16:46:13 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Temp
[2010/07/08 16:46:13 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\SoftThinks
[2010/07/08 16:46:13 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Local\Microsoft
[2010/07/08 16:46:13 | 000,000,000 | —D | C] – C:\Users\mgpd802\AppData\Roaming\Media Center Programs
[2010/06/30 04:30:27 | 000,000,000 | —D | C] – C:\Program Files\DellTPad
[2010/06/30 04:17:55 | 000,000,000 | —D | C] – C:\Windows\SysNative\oem
[2010/06/30 04:17:53 | 000,000,000 | —D | C] – C:\Windows\Panther
[2010/06/30 04:17:53 | 000,000,000 | —D | C] – C:\Drivers
[2010/06/30 04:07:58 | 000,000,000 | —D | C] – C:\dell
[2010/06/30 03:43:46 | 000,000,000 | —D | C] – C:\Windows\SoftwareDistribution
[2010/06/30 03:43:00 | 000,000,000 | —D | C] – C:\Program Files\IDT
[2010/06/30 03:42:58 | 012,605,952 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\idtcpl64.cpl
[2010/06/30 03:42:58 | 003,345,408 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stlang64.dll
[2010/06/30 03:42:58 | 000,564,224 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\idt64mp1.exe
[2010/06/30 03:42:57 | 000,000,000 | —D | C] – C:\Windows\SysNative\SRSLabs
[2010/06/30 03:41:05 | 000,000,000 | —D | C] – C:\Windows\Prefetch
[2010/06/30 03:40:48 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2010/06/30 02:23:32 | 000,000,000 | —D | C] – C:\ProgramData\ATI
[2010/06/30 02:18:15 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell
[2010/06/30 02:18:11 | 000,041,032 | —- | C] (McAfee, Inc.) – C:\Windows\SysNative\drivers\mfebopk.sys
[2010/06/30 02:18:11 | 000,040,904 | —- | C] (McAfee, Inc.) – C:\Windows\SysNative\drivers\mferkdk.sys
[2010/06/30 02:18:09 | 000,176,144 | —- | C] (McAfee, Inc.) – C:\Windows\SysNative\drivers\Mpfp.sys
[2010/06/30 02:17:45 | 000,308,296 | —- | C] (McAfee, Inc.) – C:\Windows\SysNative\drivers\mfehidk.sys
[2010/06/30 02:17:45 | 000,102,472 | —- | C] (McAfee, Inc.) – C:\Windows\SysNative\drivers\mfeavfk.sys
[2010/06/30 02:17:45 | 000,049,480 | —- | C] (McAfee, Inc.) – C:\Windows\SysNative\drivers\mfesmfk.sys
[2010/06/30 02:17:45 | 000,000,000 | —D | C] – C:\ProgramData\McAfee
[2010/06/30 02:17:45 | 000,000,000 | —D | C] – C:\Program Files\Common Files\McAfee
[2010/06/30 02:17:44 | 000,000,000 | —D | C] – C:\Program Files\McAfee
[2010/06/30 02:17:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\McAfee
[2010/06/30 02:17:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\McAfee.com
[2010/06/30 02:17:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\McAfee
[2010/06/30 02:15:59 | 000,000,000 | -H-D | C] – C:\ProgramData\{D19C2D22-6043-47E7-B400-83A351841204}
[2010/06/30 02:15:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2010/06/30 02:13:49 | 000,000,000 | —D | C] – C:\ProgramData\Uninstall
[2010/06/30 02:13:45 | 000,000,000 | —D | C] – C:\ProgramData\Sonic
[2010/06/30 02:13:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Sonic Shared
[2010/06/30 02:13:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Roxio Shared
[2010/06/30 02:13:38 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\PX Storage Engine
[2010/06/30 02:13:37 | 000,000,000 | —D | C] – C:\ProgramData\Macrovision
[2010/06/30 02:13:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Roxio
[2010/06/30 02:10:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Creative
[2010/06/30 02:10:53 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Creative Installation Information
[2010/06/30 02:10:51 | 002,873,822 | —- | C] (Creative) – C:\Windows\SysWow64\Sens_oal.dll
[2010/06/30 02:10:51 | 001,910,272 | —- | C] (Creative) – C:\Windows\SysNative\Sens_oal.dll
[2010/06/30 02:10:51 | 000,466,456 | —- | C] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2010/06/30 02:10:51 | 000,444,952 | —- | C] (Creative Labs) – C:\Windows\SysWow64\wrap_oal.dll
[2010/06/30 02:10:51 | 000,122,904 | —- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysNative\OpenAL32.dll
[2010/06/30 02:10:51 | 000,109,080 | —- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysWow64\OpenAL32.dll
[2010/06/30 02:09:34 | 000,000,000 | —D | C] – C:\Program Files\Creative
[2010/06/30 02:08:51 | 000,000,000 | —D | C] – C:\ProgramData\Creative Labs
[2010/06/30 02:08:42 | 000,000,000 | —D | C] – C:\ProgramData\Creative
[2010/06/30 02:08:41 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Creative Labs Shared
[2010/06/30 02:06:38 | 000,000,000 | —D | C] – C:\Users\Public\Documents\Reallusion
[2010/06/30 02:06:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Reallusion
[2010/06/30 02:06:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Creative
[2010/06/30 02:05:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell Webcam
[2010/06/30 02:05:26 | 000,000,000 | —D | C] – C:\Program Files (x86)\Creative Live! Cam
[2010/06/30 02:05:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Skype
[2010/06/30 02:05:05 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Skype
[2010/06/30 02:05:04 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2010/06/30 02:04:58 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Silverlight
[2010/06/30 02:04:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Sync Framework
[2010/06/30 02:03:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft SQL Server Compact Edition
[2010/06/30 02:03:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft
[2010/06/30 02:02:56 | 000,000,000 | —D | C] – C:\Users\Public\Documents\microsoft
[2010/06/30 02:02:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows Live SkyDrive
[2010/06/30 02:02:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows Live
[2010/06/30 02:02:27 | 000,000,000 | —D | C] – C:\Windows\PCHEALTH
[2010/06/30 02:01:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Windows Live
[2010/06/30 02:01:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\CyberLink
[2010/06/30 02:01:12 | 000,000,000 | —D | C] – C:\ProgramData\SupportSoft
[2010/06/30 02:01:09 | 000,000,000 | —D | C] – C:\ProgramData\PCDr
[2010/06/30 02:00:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\supportsoft
[2010/06/30 02:00:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell Support Center
[2010/06/30 02:00:35 | 000,000,000 | —D | C] – C:\Program Files (x86)\Cozi Express
[2010/06/30 02:00:35 | 000,000,000 | —D | C] – C:\ProgramData\Cozi
[2010/06/30 01:59:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell DataSafe Local Backup
[2010/06/30 01:55:09 | 000,000,000 | —D | C] – C:\ProgramData\WildTangent
[2010/06/30 01:55:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\WildTangent
[2010/06/30 01:54:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Dell DataSafe Online
[2010/06/30 01:54:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\Absolute Software
[2010/06/30 01:54:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Citrix
[2010/06/30 01:53:50 | 000,000,000 | —D | C] – C:\ProgramData\Adobe
[2010/06/30 01:53:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe
[2010/06/30 01:53:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Adobe
[2010/06/30 01:53:02 | 000,000,000 | —D | C] – C:\Program Files\WIDCOMM
[2010/06/30 01:50:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\ATI Technologies
[2010/06/30 01:50:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InstallShield
[2010/06/30 01:50:27 | 000,000,000 | —D | C] – C:\Intel
[2010/06/30 01:50:22 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\InstallShield Installation Information
[2010/06/30 01:50:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\Intel
[2010/06/30 01:50:21 | 000,000,000 | —D | C] – C:\ProgramData\Dell
[2010/06/30 01:49:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\Cisco
[2010/06/30 01:49:11 | 000,000,000 | —D | C] – C:\Program Files\Dell
[2010/06/30 01:48:31 | 000,000,000 | —D | C] – C:\Program Files\Java
[2010/06/30 01:48:28 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/06/30 01:48:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/06/30 01:48:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\Java
[2010/06/30 01:48:13 | 000,000,000 | —D | C] – C:\Windows\SysWow64\Macromed
[2010/06/30 01:48:08 | 000,000,000 | —D | C] – C:\Program Files\Dell Inc
[2010/06/30 01:48:05 | 000,000,000 | -HSD | C] – C:\Windows\Installer
[2010/05/31 04:46:42 | 000,274,432 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\Oemdspif.dll
[2010/05/31 04:46:39 | 000,120,320 | —- | C] (AMD) – C:\Windows\SysNative\atitmm64.dll
[2010/05/31 04:46:38 | 000,421,376 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysNative\atipdl64.dll
[2010/05/31 04:46:38 | 000,356,352 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\atipdlxx.dll
[2010/05/31 04:46:30 | 000,012,288 | —- | C] (AMD) – C:\Windows\SysNative\atimuixx.dll
[2010/05/31 04:46:29 | 000,203,264 | —- | C] (AMD) – C:\Windows\SysNative\atiesrxx.exe
[2010/05/31 04:46:29 | 000,059,392 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysNative\atiedu64.dll
[2010/05/31 04:46:28 | 000,420,352 | —- | C] (AMD) – C:\Windows\SysNative\atieclxx.exe
[2010/05/31 04:46:25 | 000,043,520 | —- | C] (ATI Technologies, Inc.) – C:\Windows\SysWow64\ati2edxx.dll
[2010/05/31 04:40:19 | 000,393,728 | —- | C] (Marvell) – C:\Windows\SysNative\drivers\yk62x64.sys
[2010/05/31 04:39:55 | 000,505,856 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\drivers\stwrt64.sys
[2010/05/31 04:39:53 | 001,472,000 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stapo64.dll
[2010/05/31 04:39:53 | 000,644,608 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stapi64.dll
[2010/05/31 04:39:53 | 000,431,616 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\stcplx64.dll
[2010/05/31 04:39:53 | 000,209,920 | —- | C] (IDT, Inc.) – C:\Windows\SysNative\st646272.dll

========== Files - Modified Within 90 Days ==========

[2010/07/16 10:45:05 | 002,097,152 | -HS- | M] () – C:\Users\mgpd802\ntuser.dat
[2010/07/16 10:42:09 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\mgpd802\Desktop\OTL.exe
[2010/07/16 10:17:00 | 000,000,898 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/07/16 05:30:30 | 000,017,737 | —- | M] () – C:\Windows\SysNative\Config.MPF
[2010/07/16 03:17:00 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/07/16 03:15:37 | 000,714,754 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/07/16 03:15:37 | 000,615,804 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/07/16 03:15:37 | 000,103,888 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/07/16 02:57:18 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/07/16 01:53:18 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/07/15 21:49:41 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/07/15 21:49:41 | 000,014,240 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/07/15 21:43:28 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/07/15 21:41:44 | 534,003,711 | -HS- | M] () – C:\hiberfil.sys
[2010/07/15 21:01:39 | 004,818,074 | -H– | M] () – C:\Users\mgpd802\AppData\Local\IconCache.db
[2010/07/15 16:56:49 | 000,001,241 | —- | M] () – C:\Users\mgpd802\Desktop\DVDVideoSoft Free Studio.lnk
[2010/07/15 03:01:00 | 000,731,106 | —- | M] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/07/14 20:07:53 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\mgpd802\Desktop\HiJackThis.exe
[2010/07/14 01:04:10 | 000,007,680 | —- | M] () – C:\Users\mgpd802\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/12 03:26:05 | 000,001,011 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/07/12 03:12:20 | 000,061,224 | —- | M] () – C:\Users\mgpd802\GoToAssistDownloadHelper.exe
[2010/07/11 14:49:14 | 000,000,018 | —- | M] () – C:\Users\mgpd802\Desktop\comand prompt.bat
[2010/07/11 04:24:25 | 000,268,912 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/07/11 00:20:57 | 000,524,288 | -HS- | M] () – C:\Users\mgpd802\ntuser.dat{7847fa35-8c99-11df-9d31-a4badbb30727}.TMContainer00000000000000000002.regtrans-ms
[2010/07/11 00:20:57 | 000,524,288 | -HS- | M] () – C:\Users\mgpd802\ntuser.dat{7847fa35-8c99-11df-9d31-a4badbb30727}.TMContainer00000000000000000001.regtrans-ms
[2010/07/11 00:20:57 | 000,065,536 | -HS- | M] () – C:\Users\mgpd802\ntuser.dat{7847fa35-8c99-11df-9d31-a4badbb30727}.TM.blf
[2010/07/09 23:50:47 | 000,387,323 | —- | M] () – C:\Users\mgpd802\Documents\Fallout_3.docx
[2010/07/09 00:21:19 | 000,000,976 | —- | M] () – C:\Windows\eReg.dat
[2010/07/09 00:10:16 | 000,058,736 | —- | M] () – C:\Users\mgpd802\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/07/08 21:21:02 | 000,000,046 | —- | M] () – C:\Users\mgpd802\AppData\Roaming\FactoryInstaller.xml
[2010/07/08 19:08:17 | 000,000,048 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2010/07/08 18:13:54 | 000,524,288 | -HS- | M] () – C:\Users\mgpd802\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010/07/08 18:13:54 | 000,524,288 | -HS- | M] () – C:\Users\mgpd802\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010/07/08 18:13:54 | 000,065,536 | -HS- | M] () – C:\Users\mgpd802\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010/07/08 17:25:31 | 000,001,439 | —- | M] () – C:\Users\mgpd802\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/07/08 16:51:06 | 000,001,980 | —- | M] () – C:\Users\mgpd802\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2010/07/08 16:46:13 | 000,000,020 | -HS- | M] () – C:\Users\mgpd802\ntuser.ini
[2010/07/08 16:41:29 | 000,039,219 | —- | M] () – C:\Windows\SysWow64\license.rtf
[2010/07/08 16:41:29 | 000,039,219 | —- | M] () – C:\Windows\SysNative\license.rtf
[2010/06/30 04:31:49 | 000,004,066 | RH– | M] () – C:\dell.sdr
[2010/06/30 04:30:43 | 000,899,942 | —- | M] () – C:\Windows\SysNative\oem4.inf
[2010/06/30 04:19:18 | 000,004,066 | —- | M] () – C:\Windows\SysWow64\drivers\1028_Dell_INS_1545.mrk
[2010/06/30 04:19:18 | 000,004,066 | —- | M] () – C:\Windows\SysNative\drivers\1028_Dell_INS_1545.mrk
[2010/06/30 03:42:50 | 000,000,000 | —- | M] () – C:\Windows\ativpsrm.bin
[2010/06/30 03:42:44 | 000,000,000 | -H– | M] () – C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2010/06/30 02:21:18 | 000,801,792 | —- | M] () – C:\Windows\SysNative\chklogo6.wtl
[2010/06/30 02:10:53 | 000,000,159 | RH– | M] () – C:\Windows\ctfile.rfc
[2010/06/30 02:10:51 | 000,466,456 | —- | M] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2010/06/30 02:10:51 | 000,444,952 | —- | M] (Creative Labs) – C:\Windows\SysWow64\wrap_oal.dll
[2010/06/30 02:10:51 | 000,122,904 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysNative\OpenAL32.dll
[2010/06/30 02:10:51 | 000,109,080 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysWow64\OpenAL32.dll
[2010/06/30 02:06:59 | 000,000,075 | RHS- | M] () – C:\Windows\CT4CET.bin
[2010/06/30 01:53:27 | 000,000,834 | —- | M] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2010/04/29 15:39:38 | 000,038,224 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010/04/29 15:39:28 | 000,024,664 | —- | M] (Malwarebytes Corporation) – C:\Windows\SysNative\drivers\mbam.sys

========== Files Created - No Company Name ==========

[2010/07/16 02:57:18 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2010/07/15 00:03:11 | 000,001,241 | —- | C] () – C:\Users\mgpd802\Desktop\DVDVideoSoft Free Studio.lnk
[2010/07/14 01:55:19 | 000,094,650 | —- | C] () – C:\Windows\SysWow64\HKCU_GNU.reg
[2010/07/14 01:55:19 | 000,057,344 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/07/14 01:55:19 | 000,006,144 | —- | C] () – C:\Windows\SysWow64\ff_acm.acm
[2010/07/14 01:55:19 | 000,002,004 | —- | C] () – C:\Windows\SysWow64\HKLM_GNU.reg
[2010/07/14 01:55:19 | 000,000,547 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll.manifest
[2010/07/14 01:55:18 | 000,372,736 | —- | C] () – C:\Windows\SysWow64\xvid.ax
[2010/07/14 01:55:18 | 000,014,909 | —- | C] () – C:\Windows\SysWow64\A_reg.reg
[2010/07/12 03:26:05 | 000,001,011 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/07/12 03:12:19 | 000,061,224 | —- | C] () – C:\Users\mgpd802\GoToAssistDownloadHelper.exe
[2010/07/11 14:45:27 | 000,000,018 | —- | C] () – C:\Users\mgpd802\Desktop\comand prompt.bat
[2010/07/11 03:12:52 | 000,000,898 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/07/11 03:12:51 | 000,000,894 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/07/11 00:00:22 | 000,524,288 | -HS- | C] () – C:\Users\mgpd802\ntuser.dat{7847fa35-8c99-11df-9d31-a4badbb30727}.TMContainer00000000000000000002.regtrans-ms
[2010/07/11 00:00:22 | 000,524,288 | -HS- | C] () – C:\Users\mgpd802\ntuser.dat{7847fa35-8c99-11df-9d31-a4badbb30727}.TMContainer00000000000000000001.regtrans-ms
[2010/07/11 00:00:22 | 000,065,536 | -HS- | C] () – C:\Users\mgpd802\ntuser.dat{7847fa35-8c99-11df-9d31-a4badbb30727}.TM.blf
[2010/07/09 00:09:25 | 000,000,976 | —- | C] () – C:\Windows\eReg.dat
[2010/07/08 23:55:22 | 000,056,832 | —- | C] () – C:\Windows\SysWow64\iyvu9_32.dll
[2010/07/08 22:25:11 | 000,007,680 | —- | C] () – C:\Users\mgpd802\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/08 21:20:55 | 000,000,046 | —- | C] () – C:\Users\mgpd802\AppData\Roaming\FactoryInstaller.xml
[2010/07/08 19:08:17 | 000,000,048 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/07/08 17:44:02 | 000,387,323 | —- | C] () – C:\Users\mgpd802\Documents\Fallout_3.docx
[2010/07/08 17:41:02 | 000,731,106 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/07/08 17:25:31 | 000,001,439 | —- | C] () – C:\Users\mgpd802\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/07/08 16:51:06 | 000,001,980 | —- | C] () – C:\Users\mgpd802\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2010/07/08 16:46:52 | 000,017,737 | —- | C] () – C:\Windows\SysNative\Config.MPF
[2010/07/08 16:46:13 | 002,097,152 | -HS- | C] () – C:\Users\mgpd802\ntuser.dat
[2010/07/08 16:46:13 | 000,524,288 | -HS- | C] () – C:\Users\mgpd802\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2010/07/08 16:46:13 | 000,524,288 | -HS- | C] () – C:\Users\mgpd802\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2010/07/08 16:46:13 | 000,262,144 | -HS- | C] () – C:\Users\mgpd802\ntuser.dat.LOG1
[2010/07/08 16:46:13 | 000,065,536 | -HS- | C] () – C:\Users\mgpd802\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2010/07/08 16:46:13 | 000,000,290 | —- | C] () – C:\Users\mgpd802\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/07/08 16:46:13 | 000,000,272 | —- | C] () – C:\Users\mgpd802\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2010/07/08 16:46:13 | 000,000,020 | -HS- | C] () – C:\Users\mgpd802\ntuser.ini
[2010/07/08 16:46:13 | 000,000,000 | -HS- | C] () – C:\Users\mgpd802\ntuser.dat.LOG2
[2010/06/30 04:31:49 | 000,004,066 | RH– | C] () – C:\dell.sdr
[2010/06/30 04:19:18 | 000,004,066 | —- | C] () – C:\Windows\SysWow64\drivers\1028_Dell_INS_1545.mrk
[2010/06/30 04:19:18 | 000,004,066 | —- | C] () – C:\Windows\SysNative\drivers\1028_Dell_INS_1545.mrk
[2010/06/30 03:42:55 | 000,899,942 | —- | C] () – C:\Windows\SysNative\oem4.inf
[2010/06/30 03:42:50 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/06/30 03:42:44 | 000,000,000 | -H– | C] () – C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf
[2010/06/30 03:40:48 | 534,003,711 | -HS- | C] () – C:\hiberfil.sys
[2010/06/30 02:21:18 | 000,801,792 | —- | C] () – C:\Windows\SysNative\chklogo6.wtl
[2010/06/30 02:11:09 | 000,005,037 | —- | C] () – C:\Windows\SysNative\cfgfx.ini
[2010/06/30 02:11:09 | 000,002,265 | —- | C] () – C:\Windows\FF08_Render_Spk_Hp.ini
[2010/06/30 02:11:09 | 000,001,650 | —- | C] () – C:\Windows\FF08_Capture.ini
[2010/06/30 02:11:09 | 000,001,540 | —- | C] () – C:\Windows\FF08_Render.ini
[2010/06/30 02:10:53 | 000,191,488 | —- | C] () – C:\Windows\SysNative\APOMgr64.DLL
[2010/06/30 02:10:53 | 000,148,480 | —- | C] () – C:\Windows\SysWow64\APOMngr.DLL
[2010/06/30 02:10:53 | 000,089,088 | —- | C] () – C:\Windows\SysNative\CmdRtr64.DLL
[2010/06/30 02:10:53 | 000,073,728 | —- | C] () – C:\Windows\SysWow64\CmdRtr.DLL
[2010/06/30 02:10:53 | 000,000,159 | RH– | C] () – C:\Windows\ctfile.rfc
[2010/06/30 02:06:59 | 000,000,075 | RHS- | C] () – C:\Windows\CT4CET.bin
[2010/06/30 02:06:08 | 000,057,656 | —- | C] () – C:\Windows\SysNative\drivers\FilterPC.bmp
[2010/06/30 02:06:08 | 000,024,995 | —- | C] () – C:\Windows\SysNative\drivers\FilterPC.jpg
[2010/06/30 01:53:06 | 000,000,834 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
[2010/06/30 01:49:13 | 000,006,656 | —- | C] () – C:\Windows\SysNative\bcmwlrc.dll
[2010/06/30 01:49:13 | 000,000,459 | —- | C] () – C:\Windows\SysWow64\vcredist_x64.bat
[2010/06/30 01:49:12 | 000,058,368 | —- | C] () – C:\Windows\SysNative\bcmwlrmt.dll
[2010/06/30 01:49:12 | 000,000,457 | —- | C] () – C:\Windows\SysNative\vcredist_x64.bat
[2010/05/31 04:46:41 | 000,219,120 | —- | C] () – C:\Windows\SysWow64\atiumdva.cap
[2010/05/31 04:46:40 | 000,219,120 | —- | C] () – C:\Windows\SysNative\atiumd6a.cap
[2010/05/31 04:46:34 | 000,332,288 | —- | C] () – C:\Windows\SysNative\ATIODE.exe
[2010/05/31 04:46:34 | 000,051,200 | —- | C] () – C:\Windows\SysNative\ATIODCLI.exe
[2010/05/31 04:46:34 | 000,018,333 | —- | C] () – C:\Windows\atiogl.xml
[2010/05/31 04:46:29 | 000,197,654 | —- | C] () – C:\Windows\SysNative\atiicdxx.dat
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll

========== LOP Check ==========

[2010/07/11 15:05:41 | 000,000,000 | —D | M] – C:\Users\mgpd802\AppData\Roaming\SoftGrid Client
[2010/07/08 17:42:05 | 000,000,000 | —D | M] – C:\Users\mgpd802\AppData\Roaming\TP
[2010/07/08 17:51:32 | 000,000,000 | —D | M] – C:\Users\mgpd802\AppData\Roaming\WildTangent
[2010/07/15 21:42:26 | 000,011,682 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2010/06/30 04:31:49 | 000,004,066 | RH– | M] () – C:\dell.sdr
[2010/07/15 21:41:44 | 534,003,711 | -HS- | M] () – C:\hiberfil.sys
[2006/12/02 00:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2010/07/15 21:41:48 | 2143,662,079 | -HS- | M] () – C:\pagefile.sys

< %systemroot%\system32\*.wt >

< %systemroot%\system32\*.ruy >

< %systemroot%\Fonts\*.com >
[2009/07/14 01:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 01:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 01:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 01:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 16:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\system32\spool\prtprocs\w32x86\*.tmp >

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[2009/07/13 21:15:13 | 000,346,112 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\SysWOW64\dxtmsft.dll
[2009/07/13 21:15:13 | 000,215,552 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\SysWOW64\dxtrans.dll

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\System32\config\*.sav >

< %systemroot%\system32\user32.dll /md5 >
[2009/07/13 21:11:24 | 000,833,024 | —- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 – C:\Windows\SysWOW64\user32.dll

< %systemroot%\system32\ws2_32.dll /md5 >
[2009/07/13 21:16:20 | 000,206,336 | —- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D – C:\Windows\SysWOW64\ws2_32.dll

< %systemroot%\system32\ws2help.dll /md5 >
[2009/07/13 21:11:26 | 000,004,608 | —- | M] (Microsoft Corporation) MD5=808AABDF9337312195CAFF76D1804786 – C:\Windows\SysWOW64\ws2help.dll

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
< End of report >

mgpd802

Post #5July 16, 2010, 3:03 PM UTC

OTL Extras logfile created on: 7/16/2010 10:43:10 AM - Run 1
OTL by OldTimer - Version 3.2.9.0 Folder = C:\Users\mgpd802\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

6.00 Gb Total Physical Memory | 4.00 Gb Available Physical Memory | 65.00% Memory free
12.00 Gb Paging File | 10.00 Gb Available in Paging File | 82.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 451.07 Gb Total Space | 401.18 Gb Free Space | 88.94% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: MGPD802-PC
Current User Name: mgpd802
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{26A24AE4-039D-4CA4-87B4-2F86416020FF}" = Java™ 6 Update 20 (64-bit)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = WIDCOMM Bluetooth Software
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{C73A3942-84C8-4597-9F9B-EE227DCBA758}" = Dell Dock
"{E461C0B2-523B-2940-C5DF-D174284CE609}" = ccc-utility64
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"Dell Wireless WLAN Card Utility" = Dell Wireless WLAN Card Utility

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03CFDC67-5B03-EE5C-4176-F545B0D2F485}" = CCC Help Korean
"{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}" = Microsoft Visual C++ 2005 Redistributable
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0A2AC888-61DC-CD55-5969-8602A7E9716D}" = CCC Help Italian
"{0CF884B6-C6D8-EB7B-D2BF-2877C6F49EBC}" = CCC Help Swedish
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{13766F76-6C8C-4E57-A9F3-3212D1C6E0D1}" = Dell DataSafe Online
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{185CC275-907C-0D83-B0C2-7B065C5108D8}" = CCC Help Chinese Traditional
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 20
"{2DA5F129-11AC-4F11-8188-B2F07EAAC20A}" = Cozi
"{2ED967AD-FBB0-5355-F5F2-E7A03AAD4F71}" = Catalyst Control Center Localization All
"{30FA0F5C-B1A9-39EB-8148-3D574C0C8332}" = Catalyst Control Center Graphics Previews Common
"{35852FDE-7263-23EA-435F-44E4B61996D0}" = CCC Help Japanese
"{3A07247E-0645-8BCF-8419-FD857790108D}" = Skins
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3D5044A5-97B8-45C0-B956-BB2376569188}" = Windows Live Movie Maker
"{40F4FF7A-B214-4453-B973-080B09CED019}" = LoJack Factory Installer
"{42D68A86-DB1C-4256-B8C9-5D0D92919AF5}" = Banctec Service Agreement
"{445F6C1F-C48F-0CC9-A030-040D3EA42C93}" = Catalyst Control Center Graphics Full New
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{46E08E5F-02B4-E854-CD4F-ED3E4FEBE122}" = CCC Help French
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{5A841BCF-1C5B-E3DA-9475-892CA6576425}" = CCC Help Finnish
"{5B8741B6-4BEA-47D3-DB77-959C7FF35B39}" = Catalyst Control Center Graphics Full Existing
"{5FA16D15-FA5B-7F0F-7CBB-369E1E2937C9}" = CCC Help Spanish
"{61F27C5E-5274-0DB8-67CC-5253C6CF2B93}" = CCC Help Dutch
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{6625CE8F-6E89-561F-D828-1B8535DEEBB6}" = Catalyst Control Center Core Implementation
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX
"{69533745-1E2D-4C98-8B4A-B7643EF9E1A2}" = Catalyst Control Center - Branding
"{6D2CCC4B-007D-EEE7-3E69-578B178A7B91}" = Catalyst Control Center Graphics Previews Vista
"{71E3D92F-2C51-B4E9-F2B6-EAF89C33E580}" = CCC Help Portuguese
"{75CE8AF5-0A5E-4A42-BC67-F83591DA9A7D}" = Sound Blaster X-Fi MB
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F218D6-EAF4-402C-36B1-C3F0EC62598D}" = ccc-core-static
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86C527CC-4AF2-903C-7BFF-5975272CC645}" = Catalyst Control Center InstallProxy
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8DDFDDE9-C206-F32E-66AD-D17558D7677E}" = CCC Help German
"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{995F1E2E-F542-4310-8E1D-9926F5A279B3}" = Windows Live Toolbar
"{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack
"{A2A4AC67-DC60-A92B-DD50-65BEE8FA8D71}" = CCC Help Russian
"{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1.2
"{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}" = Roxio Burn
"{B9C5005C-56CA-38E4-A093-79F22ECA0427}" = CCC Help Norwegian
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
"{DC93F14E-D2C9-D6D1-31B6-D31AC2AD3BB0}" = Catalyst Control Center Graphics Light
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E6E0F53B-B7B8-E052-5C32-76C885536A3E}" = CCC Help Danish
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{F7FE3C6E-ECB8-0853-584F-BE19BA05B1B8}" = CCC Help Chinese Standard
"{FCC49808-C684-FEFA-3C02-46A04A7C9EBD}" = CCC Help English
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Cucusoft YouTube Mate (Downloader+Player+Converter)_is1" = Cucusoft YouTube Mate 7.17
"Dell Dock" = Dell Dock
"Dell Webcam Central" = Dell Webcam Central
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"Free YouTube to iPod Converter_is1" = Free YouTube to iPod Converter version 3.6
"GameSpy Arcade" = GameSpy Arcade
"GoToAssist" = GoToAssist 8.0.0.514
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MSC" = McAfee SecurityCenter
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010
"Red Alert 2" = Command & Conquer Red Alert 2
"TripleAVersion1_2_5_4" = TripleA Version 1_2_5_4
"Uninstall_is1" = Uninstall 1.0.0.1
"WildTangent dell Master Uninstall" = WildTangent Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"WOLAPI" = Westwood Shared Internet Components

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 7/11/2010 4:29:56 AM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 4:29:57 AM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 4:29:57 AM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 4:31:11 AM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 4:31:13 AM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 4:31:14 AM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 4:32:17 AM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 2:37:19 PM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 2:37:19 PM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

Error - 7/11/2010 2:37:34 PM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file. .

[ Broadcom Wireless LAN Events ]
Error - 7/8/2010 4:51:11 PM | Computer Name = mgpd802-PC | Source = WLAN-Tray | ID = 0
Description = 16:51:11, Thu, Jul 08, 10 Error - Unable to get current user admin
status

Error - 7/8/2010 4:52:04 PM | Computer Name = mgpd802-PC | Source = WLAN-Tray | ID = 0
Description = 16:52:03, Thu, Jul 08, 10 Error - Unable to get current user admin
status

Error - 7/8/2010 4:53:39 PM | Computer Name = mgpd802-PC | Source = WLAN-Tray | ID = 0
Description = 15:53:39, Thu, Jul 08, 10 Error - Unable to switch user context, authentication
information not set correctly

[ System Events ]
Error - 7/12/2010 1:58:10 AM | Computer Name = mgpd802-PC | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
response from the cvhsvc service.

Error - 7/12/2010 1:58:12 AM | Computer Name = mgpd802-PC | Source = DCOM | ID = 10010
Description =

Error - 7/12/2010 1:58:15 AM | Computer Name = mgpd802-PC | Source = Service Control Manager | ID = 7024
Description = The Superfetch service terminated with service-specific error %%0.

Error - 7/12/2010 1:58:15 AM | Computer Name = mgpd802-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

Error - 7/12/2010 2:51:35 PM | Computer Name = mgpd802-PC | Source = Service Control Manager | ID = 7000
Description = The McAfee Inc. mferkdk service failed to start due to the following
error: %%127

Error - 7/13/2010 7:28:16 PM | Computer Name = mgpd802-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 7:23:23 PM on ?7/?13/?2010 was unexpected.

Error - 7/13/2010 7:28:11 PM | Computer Name = mgpd802-PC | Source = Microsoft-Windows-Kernel-General | ID = 5
Description =

Error - 7/14/2010 1:47:18 AM | Computer Name = mgpd802-PC | Source = DCOM | ID = 10010
Description =

Error - 7/14/2010 4:36:32 PM | Computer Name = mgpd802-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

Error - 7/15/2010 3:08:39 AM | Computer Name = mgpd802-PC | Source = DCOM | ID = 10010
Description =

< End of report >

mgpd802

Post #6July 16, 2010, 3:09 PM UTC last edited July 16, 2010, 9:10 PM UTC

about the GMER scanner. it will not allow me to check off the boxes. the only ones i can check is services, registry, files, c:\, and ads so running a scan will come up blank

NightWizard

Post #7July 17, 2010, 5:08 AM UTC

Hi mgpd802,

Sorry for the slight delay.

Question:
Do you recognise the file named comand prompt.bat on your Desktop? Please let me know

Please run OTL.exe

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

:OTL
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\MyWebSearch\bar\1.bin File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

Then click the Run Fix button at the top
Let the program run unhindered, reboot when it is done
Then post a new OTL log ( dont check the boxes beside LOP Check or Purity this time )

In your next reply please include:

An answer to my question.
The OTL log.

mgpd802

Post #8July 17, 2010, 5:26 AM UTC

to answer your question yes my friend had me put it on there because he thought it would fix it but all it does is open the my library of files. didnt really do anything at all. and i have never used comand prompt either. sorry

All processes killed ========== OTL ========== Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed] deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: AppData User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: mgpd802 ->Temp folder emptied: 53800747 bytes ->Temporary Internet Files folder emptied: 118265208 bytes ->Java cache emptied: 0 bytes ->Flash cache emptied: 34692 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 9741315 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50400 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 173.00 mb OTL by OldTimer - Version 3.2.9.0 log created on 07172010_011150 Files\Folders moved on Reboot… C:\Users\mgpd802\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. File\Folder C:\Users\mgpd802\AppData\Local\Temp\~DF5A41A829844EE96A.TMP not found! File\Folder C:\Users\mgpd802\AppData\Local\Temp\~DF5A605BD752A264F9.TMP not found! File\Folder C:\Users\mgpd802\AppData\Local\Temp\~DF7197928FFA0ECC41.TMP not found! File\Folder C:\Users\mgpd802\AppData\Local\Temp\~DFEFA33F91C1AE36FB.TMP not found! C:\Users\mgpd802\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QR392JDE\index[7].htm moved successfully. C:\Users\mgpd802\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6E868X0D\iframe[1].htm moved successfully. C:\Users\mgpd802\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6E868X0D\like[1].htm moved successfully. C:\Users\mgpd802\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully. File\Folder C:\Windows\temp\mcafee_OwVzt4nsgJYV1zS not found! File\Folder C:\Windows\temp\mcmsc_jG5WqVB7cEmu7O9 not found! File\Folder C:\Windows\temp\mcmsc_NdUUoiAjmn26fns not found! File\Folder C:\Windows\temp\mcmsc_RHRdwczyzl5Adxv not found! File\Folder C:\Windows\temp\sqlite_nUf8LD93HECxBTj not found! File\Folder C:\Windows\temp\sqlite_rbLIAs1e4dDZdeV not found! File\Folder C:\Windows\temp\sqlite_Tm0op9uHySCMaii not found! File\Folder C:\Windows\temp\sqlite_uYwgXcj6xtkmsMY not found! Registry entries deleted on Reboot…

NightWizard

Post #9July 17, 2010, 9:32 AM UTC

Hi mgpd802,

Your logs do not indicate you are infected.

My teacher and I have discussed the issue and have several options which may resolve your issue:

Option 1
You may be able to send your PC back to the manufacturer under warranty for them to either fix the issue or give you a new PC (depending on your warranty if any).

Option 2
You could try a system restore to a previous date which was before when you noticed this issue.

Option 3
You could run a repair install of Windows 7

Option 4
You could do a complete reformat of your PC and start fresh.

Let me know what option you choose and if you need any help

Cheers

mgpd802

Post #10July 17, 2010, 6:17 PM UTC

really, huh, well i contacted dell,who is my manufacturer before i posted my problems here and the rep there said i had multiple viruses and offered to clean my system for 130 to 150 dollars. im not sure but maybe they are trying to scam me. also, im not familiar with the option 3, what would that do. i cannot access my local disk to reformat everything. i tryed your 2nd option when this prroblem started and got no good results, some files were restored and i still had the problems. also, a new problem has occured. i cannot access the camera on my laptop.

NightWizard

Post #11July 18, 2010, 1:20 AM UTC

Hi mgpd802,

You will have to do a repair install of your OS. To do this please view this tutorial here: http://www.sevenforums.com/tutorials/3413-…ir-install.html

I highly recommend you print that tutorial as you won't be able to access it during the repair!

Let me know if you don't understand any of the instructions or would like any further advice. Please also let me know if this fixes your issue or not.

mgpd802

Post #12July 18, 2010, 7:20 AM UTC

some more information has come up. .exe is completely gone.

i went through the menu showing all the association types and .exe is gone and .lnk is opening in notepad as well. maybe that will help..if not sorry

NightWizard

Post #13July 18, 2010, 7:39 AM UTC

Hi mgpd802,

Did you try repairing your OS following this tutorial? http://www.sevenforums.com/tutorials/3413-…ir-install.html

If so what step did you get up to which confronted you with the issue?

The repair install will most likely fix this issue.

mgpd802

Post #14July 18, 2010, 7:41 AM UTC

no i didnt, just thought it may help is all i will do that then and let you know the results. thank you

NightWizard

Post #15July 18, 2010, 7:42 AM UTC

My pleasure

Keep me informed, I would love to hear how it goes.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Can't access Local Disc... Most files open in Notepad

✨ Ask AI

Ask AI