Thanks in advance for your assistance satchfan.
I have removed all Java / JRE programs except Ver 6 update 20.
What exactly is IOBit and how do I get rid of it. It's not in my uninstall program list.
Ran OTL. See txt reports below.
Downloaded GMER and ran 4 times without success.
First time it froze while doing the scan and I could not even get task manager to show up on screen and had to manaually hold start button down to shut down computer. The second time I ran it, it got further through the process and a handful of listings started to appear in window while it was scanning, but then it froze and to restart as before. Third time and fourth time, the computer shut itself down in the middle of the scan and then restarted so I thought it best to give up on this scan until I heard from you.
You asked about symptoms of infection or change in performance. All I can think of is that our website has been hacked and a folder of malware left on site. Our website developer suggessted that our computer might be infected and someone has taken passowrds from our computer and used them to access our website. For some time now the computer seems to take a very very long time to shut down, up to 5 minutes. It sometimes flashes up with a warning saying something along the lines of programs are still running. ccc.exe comes up and another one too, but I cam't remember what. Computer still shuts down anyway. Also, for last few weeks, ethernet port on computer seems to be playing up. Sometimes it recognises it's plugged in, other times not. Can start up computer and have no internet and it's the ethernet cable light that's not on (have tried two different cables) and then 10 minutes or several hours later it will just start working without me having done anything. Have new wireless modem on order as ISP said it was a problem with the ethernet port on laptop.
OTL.txt
OTL logfile created on: 23/07/2010 10:37:17 AM - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\C. Ryan Acupuncture\Downloads
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 48.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 61.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 22.91 Gb Free Space | 30.75% Space Free | Partition Type: NTFS
Drive D: | 66.71 Gb Total Space | 64.82 Gb Free Space | 97.17% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: OFFICE
Current User Name: C. Ryan Acupuncture
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Users\C. Ryan Acupuncture\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe (IObit)
PRC - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
PRC - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
PRC - C:\Program Files\AVG\AVG8\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (CANON INC.)
PRC - D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
PRC - C:\Program Files\Canon\IJPLM\ijplmsvc.exe ()
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
PRC - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
PRC - C:\Program Files\Brownie\BrStsWnd.exe (brother)
PRC - C:\Program Files\BlueZinc\TM2\TM2SchJobsSvc.exe (Blue Zinc IT)
PRC - C:\Program Files\OpenOffice.org 2.4\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files\OpenOffice.org 2.4\program\soffice.exe (OpenOffice.org)
PRC - D:\microsoft\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)
PRC - C:\Program Files\Brownie\brpjp04a.exe (brother)
PRC - C:\Windows\ASScrPro.exe ()
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
PRC - C:\Program Files\P4G\BatteryLife.exe (ATK)
PRC - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()
PRC - C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)
PRC - C:\Program Files\PowerForPhone\PowerForPhone.exe ()
PRC - C:\Program Files\ATK Hotkey\HControl.exe (ATK0100)
PRC - C:\Program Files\ATK Hotkey\KBFiltr.exe ()
PRC - C:\Windows\System32\IfxPsdSv.exe (Infineon Technologies AG)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
PRC - C:\Program Files\Infineon\Security Platform Software\PSDrt.exe (Infineon Technologies AG)
PRC - C:\Windows\System32\IfxUAGUI.exe (Infineon Technologies AG)
PRC - C:\Program Files\Infineon\Security Platform Software\SpTNA.exe (Infineon Technologies AG)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\ATKOSD2\ATKOSD2.exe ()
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\Wireless Console 2\wcourier.exe ()
PRC - C:\Program Files\ATK Hotkey\ATKOSD.exe ()
PRC - C:\Windows\System32\ASUSTPE.exe (ASUS)
PRC - C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe (TOSHIBA CORPORATION.)
PRC - C:\Windows\System32\ACEngSvr.exe (ASUSTeK)
========== Modules (SafeList) ==========
MOD - C:\Users\C. Ryan Acupuncture\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
MOD - C:\Windows\System32\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6000.16386_none_5d07289e07e1d100\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (Apple Mobile Device) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (sec_service) – C:\Program Files\Eltima Software\SEC\sec_service.exe ()
SRV - (TomTomHOMEService) – C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
SRV - (avg8wd) – C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (IJPLMSVC) – C:\Program Files\Canon\IJPLM\ijplmsvc.exe ()
SRV - (SQLWriter) – C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)
SRV - (MSSQL$MSSMLBIZ) SQL Server (MSSMLBIZ) – C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)
SRV - (SQLBrowser) – C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation)
SRV - (MSSQLServerADHelper) – C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe (Microsoft Corporation)
SRV - (Microsoft Office Groove Audit Service) – D:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe (Microsoft Corporation)
SRV - (TM2SchJobsSvc) – C:\Program Files\BlueZinc\TM2\TM2SchJobsSvc.exe (Blue Zinc IT)
SRV - (BcmSqlStartupSvc) – D:\microsoft\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (spmgr) – C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe ()
SRV - (PersonalSecureDriveService) – C:\Windows\System32\IfxPsdSv.exe (Infineon Technologies AG)
SRV - (ASLDRService) – C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
SRV - (TOSHIBA Bluetooth Service) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
SRV - (MSSQL$BLUEZINC) SQL Server (BLUEZINC) – C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (NwlnkFwd) – C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) – C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) – C:\Windows\System32\DRIVERS\ipinip.sys File not found
DRV - (blbdrive) – C:\Windows\System32\drivers\blbdrive.sys File not found
DRV - (AvgLdx86) – C:\Windows\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) – C:\Windows\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgTdiX) – C:\Windows\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (evserial) Virtual Serial Ports Driver (Eltima Softwate) – C:\Windows\System32\drivers\evserial.sys (ELTIMA Software)
DRV - (VSBC) Virtual Serial Bus Enumerator (Eltima Software) – C:\Windows\System32\drivers\evsbc.sys (ELTIMA Software)
DRV - (Atc002) – C:\Windows\System32\drivers\l260x86.sys (Atheros Communications, Inc.)
DRV - (ghaio) – C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys ()
DRV - (athr) – C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (DCamUSBGene) – C:\Windows\System32\drivers\USBGENE.sys (Genesys Logic, Inc.)
DRV - (2WIREPCP) – C:\Windows\System32\drivers\2WirePCP.sys (2Wire, Inc.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (R300) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (kbfiltr) – C:\Windows\System32\drivers\kbfiltr.sys ( )
DRV - (PersonalSecureDrive) – C:\Windows\System32\drivers\psd.sys (Infineon Technologies AG)
DRV - (RTSTOR) – C:\Windows\System32\drivers\RTSTOR.sys (Realtek Semiconductor Corp.)
DRV - (MTsensor) – C:\Windows\System32\drivers\ATKACPI.sys (ATK0100)
DRV - (tosrfbd) – C:\Windows\System32\drivers\tosrfbd.sys (TOSHIBA CORPORATION)
DRV - (SynTP) – C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (smserial) – C:\Windows\System32\drivers\smserial.sys (Motorola Inc.)
DRV - (tosrfbnp) – C:\Windows\System32\drivers\tosrfbnp.sys (TOSHIBA Corporation)
DRV - (ql2300) – C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) – C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) – C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) – C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) – C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) – C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) – C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) – C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) – C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) – C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) – C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) – C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) – C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) – C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) – C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (TPM) – C:\Windows\System32\drivers\tpm.sys (Microsoft Corporation)
DRV - (SiSRaid4) – C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) – C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) – C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) – C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) – C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) – C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) – C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) – C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) – C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) – C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) – C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) – C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) – C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) – C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) – C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) – C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) – C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (viaide) – C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) – C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) – C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (MODEMCSA) – C:\Windows\System32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) – C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) – C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) – C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) – C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) – C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) – C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) – C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (RTL8169) – C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation)
DRV - (NETw3v32) Intel® – C:\Windows\System32\drivers\NETw3v32.sys (Intel® Corporation)
DRV - (E1G60) Intel® – C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (Tosrfusb) – C:\Windows\System32\drivers\tosrfusb.sys (TOSHIBA CORPORATION)
DRV - (ialm) – C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (tosporte) – C:\Windows\System32\drivers\tosporte.sys (TOSHIBA Corporation)
DRV - (Tosrfhid) – C:\Windows\System32\drivers\Tosrfhid.sys (TOSHIBA Corporation.)
DRV - (Tosrfcom) – C:\Windows\System32\drivers\tosrfcom.sys (TOSHIBA Corporation)
DRV - (tosrfnds) – C:\Windows\System32\drivers\tosrfnds.sys (TOSHIBA Corporation.)
DRV - (cnmpar21) – C:\BJPrinter\CNMWindows\Canon PIXMA iP4000 Installer\Inst2\cnmpar21.sys (CANON INC.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigpond.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Yahoo! Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.429
FF - prefs.js..extensions.enabledItems: avg@igeared:3.011.025.005
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - [removed]: false
FF - prefs.js..keyword.URL: "
http://au.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_au&p="
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009/12/22 08:41:14 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared [2010/01/03 13:01:27 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/06/28 21:43:34 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/06/28 21:43:34 | 000,000,000 | —D | M]
[2010/03/08 17:54:38 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Mozilla\Extensions
[2010/03/08 17:54:38 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Mozilla\Extensions\[removed]
[2010/05/24 07:38:02 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Mozilla\Firefox\Profiles\9lgk72ol.default\extensions
[2010/07/23 10:26:14 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010/05/24 07:31:58 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/04/12 17:29:19 | 000,411,368 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2008/06/30 22:02:00 | 000,663,072 | —- | M] (Microsoft Corporation) – C:\Program Files\Mozilla Firefox\plugins\npOGAPlugin.dll
[2010/01/19 12:07:02 | 000,001,538 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2010/01/19 12:07:02 | 000,000,947 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2010/01/19 12:07:02 | 000,000,769 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010/01/19 12:07:02 | 000,000,831 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml
O1 HOSTS File: ([2006/09/19 07:41:30 | 000,000,761 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe ()
O4 - HKLM..\Run: [ASUSTPE] C:\Windows\System32\ASUSTPE.exe (ASUS)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)
O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [BrStsWnd] C:\Program Files\Brownie\BrstsWnd.exe (brother)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [GrooveMonitor] D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [PowerForPhone] C:\Program Files\PowerForPhone\PowerForPhone.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe File not found
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKCU..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - Startup: C:\Users\C. Ryan Acupuncture\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O4 - Startup: C:\Users\C. Ryan Acupuncture\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/EN-AU/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} https://secure.gopetslive.com/dev/GoPetsWeb.cab (GoPetsWeb Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (avgrsstx.dll) - C:\Windows\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\C. Ryan Acupuncture\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Outlook\11U62K2F\DSCF0398.jpg
O24 - Desktop BackupWallPaper: C:\Users\C. Ryan Acupuncture\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Outlook\11U62K2F\DSCF0398.jpg
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/19 07:43:36 | 000,000,024 | —- | M] () - C:\AUTOEXEC.01 – [ NTFS ]
O32 - AutoRun File - [2008/04/10 08:05:28 | 000,000,045 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2008/04/10 08:34:12 | 000,000,045 | —- | M] () - C:\AUTOEXEC.EXM – [ NTFS ]
O33 - MountPoints2\{25aecb4b-2a34-11df-ad73-001e8c8d3da9}\Shell\AutoRun\command - "" = G:\InstallTomTomHOME.exe – File not found
O33 - MountPoints2\{7f69af4e-3d0c-11df-925d-001e8c8d3da9}\Shell - "" = AutoRun
O33 - MountPoints2\{7f69af4e-3d0c-11df-925d-001e8c8d3da9}\Shell\AutoRun\command - "" = H:\LaunchU3.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2010/07/21 14:32:33 | 000,000,000 | —D | C] – C:\Users\C. Ryan Acupuncture\Documents\Zenthai assignments
[2010/07/19 16:20:59 | 000,000,000 | —D | C] – C:\Users\C. Ryan Acupuncture\Documents\Foxtel
[2010/07/19 09:44:00 | 000,000,000 | —D | C] – C:\Program Files\etax2010
[2010/07/04 16:38:38 | 000,000,000 | —D | C] – C:\Users\C. Ryan Acupuncture\Documents\Any Video Converter
[2010/07/04 16:38:21 | 000,000,000 | —D | C] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\AnvSoft
[2010/07/04 16:38:17 | 000,000,000 | —D | C] – C:\Program Files\AnvSoft
[2010/07/04 13:58:55 | 000,000,000 | —D | C] – C:\Users\C. Ryan Acupuncture\Desktop\Steph
[2010/06/28 21:46:40 | 000,000,000 | —D | C] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Apple Computer
[2010/06/28 21:45:44 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\System32\GEARAspi.dll
[2010/06/28 21:45:44 | 000,000,000 | —D | C] – C:\Windows\System32\DRVSTORE
[2010/06/28 21:44:55 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/06/28 21:44:44 | 000,000,000 | —D | C] – C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/06/28 21:42:45 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/06/28 21:42:44 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2010/06/28 21:40:45 | 000,000,000 | —D | C] – C:\Program Files\Apple Software Update
[2010/06/28 21:35:32 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/06/28 21:35:00 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2007/01/24 20:08:39 | 000,005,632 | —- | C] ( ) – C:\Windows\System32\drivers\kbfiltr.sys
[6 C:\Users\C. Ryan Acupuncture\Documents\*.tmp files -> C:\Users\C. Ryan Acupuncture\Documents\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010/07/23 10:37:11 | 004,456,448 | -HS- | M] () – C:\Users\C. Ryan Acupuncture\ntuser.dat
[2010/07/23 10:32:05 | 000,032,607 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\email list.docx
[2010/07/23 10:30:00 | 000,000,886 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/07/23 09:54:15 | 000,003,200 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010/07/23 09:54:15 | 000,003,200 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010/07/23 08:53:29 | 000,865,896 | —- | M] () – C:\Users\C. Ryan Acupuncture\Desktop\Nutrition Care application.pdf
[2010/07/23 07:59:32 | 000,000,330 | —- | M] () – C:\Windows\Brownie.ini
[2010/07/23 07:59:07 | 000,045,056 | —- | M] () – C:\Windows\System32\acovcnt.exe
[2010/07/23 07:58:49 | 000,000,882 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/07/23 07:58:49 | 000,000,398 | —- | M] () – C:\Windows\tasks\AWC Startup.job
[2010/07/23 07:54:16 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/07/23 07:54:11 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/07/23 07:53:58 | 2012,471,296 | -HS- | M] () – C:\hiberfil.sys
[2010/07/22 18:49:37 | 000,000,012 | —- | M] () – C:\Windows\bthservsdp.dat
[2010/07/22 18:48:28 | 002,963,843 | -H– | M] () – C:\Users\C. Ryan Acupuncture\AppData\Local\IconCache.db
[2010/07/22 18:21:56 | 000,021,148 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\fix comp.docx
[2010/07/22 17:12:57 | 062,305,152 | —- | M] () – C:\Windows\System32\drivers\Avg\incavi.avm
[2010/07/21 09:44:15 | 000,722,032 | —- | M] () – C:\Users\C. Ryan Acupuncture\Desktop\IMG_NEW_0003.pdf
[2010/07/19 19:29:48 | 000,139,602 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\Jackcert.xps
[2010/07/19 16:38:00 | 000,198,845 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\IYP8XN.pdf
[2010/07/19 16:38:00 | 000,173,708 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\TCI77H.pdf
[2010/07/19 09:44:29 | 000,001,827 | —- | M] () – C:\Users\C. Ryan Acupuncture\Desktop\e-tax 2010.lnk
[2010/07/14 15:24:09 | 001,835,008 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\database.mdb
[2010/07/09 08:56:10 | 000,019,438 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\Rebecca Session 1.docx
[2010/07/08 18:04:45 | 000,206,336 | —- | M] () – C:\Users\C. Ryan Acupuncture\Desktop\Happy Birthday.oft
[2010/07/06 16:08:21 | 004,573,184 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\Zenthai Group photo.pub
[2010/07/06 15:00:40 | 000,127,915 | —- | M] () – C:\Users\C. Ryan Acupuncture\Documents\passport.pdf
[2010/07/05 22:03:27 | 000,000,412 | —- | M] () – C:\Windows\tasks\SmartDefrag.job
[2010/07/05 16:41:47 | 000,120,320 | —- | M] () – C:\Users\C. Ryan Acupuncture\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/02 09:56:22 | 000,550,756 | —- | M] () – C:\Users\C. Ryan Acupuncture\Desktop\IMG_NEW_0002.pdf
[2010/06/27 04:05:00 | 000,000,354 | —- | M] () – C:\Windows\tasks\Driver Fetch.job
[2010/06/25 09:06:58 | 000,852,320 | —- | M] () – C:\Windows\System32\PerfStringBackup.INI
[2010/06/25 09:06:58 | 000,719,662 | —- | M] () – C:\Windows\System32\perfh009.dat
[2010/06/25 09:06:58 | 000,144,414 | —- | M] () – C:\Windows\System32\perfc009.dat
[6 C:\Users\C. Ryan Acupuncture\Documents\*.tmp files -> C:\Users\C. Ryan Acupuncture\Documents\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010/07/23 08:53:27 | 000,865,896 | —- | C] () – C:\Users\C. Ryan Acupuncture\Desktop\Nutrition Care application.pdf
[2010/07/22 18:21:55 | 000,021,148 | —- | C] () – C:\Users\C. Ryan Acupuncture\Documents\fix comp.docx
[2010/07/21 09:44:13 | 000,722,032 | —- | C] () – C:\Users\C. Ryan Acupuncture\Desktop\IMG_NEW_0003.pdf
[2010/07/19 19:29:45 | 000,139,602 | —- | C] () – C:\Users\C. Ryan Acupuncture\Documents\Jackcert.xps
[2010/07/19 16:38:00 | 000,198,845 | —- | C] () – C:\Users\C. Ryan Acupuncture\Documents\IYP8XN.pdf
[2010/07/19 16:38:00 | 000,173,708 | —- | C] () – C:\Users\C. Ryan Acupuncture\Documents\TCI77H.pdf
[2010/07/19 09:44:29 | 000,001,827 | —- | C] () – C:\Users\C. Ryan Acupuncture\Desktop\e-tax 2010.lnk
[2010/07/09 08:56:08 | 000,019,438 | —- | C] () – C:\Users\C. Ryan Acupuncture\Documents\Rebecca Session 1.docx
[2010/07/08 18:04:44 | 000,206,336 | —- | C] () – C:\Users\C. Ryan Acupuncture\Desktop\Happy Birthday.oft
[2010/07/06 16:08:20 | 004,573,184 | —- | C] () – C:\Users\C. Ryan Acupuncture\Documents\Zenthai Group photo.pub
[2010/07/06 15:00:40 | 000,127,915 | —- | C] () – C:\Users\C. Ryan Acupuncture\Documents\passport.pdf
[2010/07/02 09:56:20 | 000,550,756 | —- | C] () – C:\Users\C. Ryan Acupuncture\Desktop\IMG_NEW_0002.pdf
[2010/01/15 14:53:42 | 000,000,145 | —- | C] () – C:\Windows\BRVIDEO.INI
[2010/01/15 14:53:42 | 000,000,000 | —- | C] () – C:\Windows\brmx2001.ini
[2010/01/15 14:53:08 | 000,000,114 | —- | C] () – C:\Windows\System32\brlmw03a.ini
[2010/01/15 14:53:06 | 000,009,853 | —- | C] () – C:\Windows\HL-2140.INI
[2010/01/15 14:51:18 | 000,000,330 | —- | C] () – C:\Windows\Brownie.ini
[2009/05/12 10:29:30 | 000,000,136 | —- | C] () – C:\Windows\ODBC.INI
[2008/12/31 17:04:42 | 000,691,560 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2008/09/13 20:53:26 | 000,007,680 | —- | C] () – C:\Windows\System32\CNMVS64.DLL
[2008/08/23 18:35:27 | 000,338,944 | —- | C] () – C:\Windows\System32\lffpx7.dll
[2008/08/23 18:35:27 | 000,118,784 | —- | C] () – C:\Windows\System32\lfkodak.dll
[2008/04/11 14:53:15 | 000,000,069 | —- | C] () – C:\Windows\NeroDigital.ini
[2008/04/10 08:31:57 | 000,000,034 | —- | C] () – C:\Windows\QTW.INI
[2008/04/10 08:05:27 | 000,000,094 | —- | C] () – C:\Windows\CL.ini
[2008/04/08 12:22:44 | 000,000,426 | —- | C] () – C:\Windows\BRWMARK.INI
[2007/12/25 19:58:35 | 000,012,288 | —- | C] () – C:\Windows\impborl.dll
[2007/06/22 05:47:42 | 000,000,010 | —- | C] () – C:\Windows\System32\ABLKSR.ini
[2007/02/02 17:01:29 | 000,159,744 | —- | C] () – C:\Windows\System32\atitmmxx.dll
[2006/12/06 07:05:06 | 000,114,688 | —- | C] () – C:\Windows\System32\TosBtAcc.dll
[2006/11/02 22:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 20:25:21 | 000,061,440 | —- | C] () – C:\Windows\System32\igfxTMM.dll
[2006/11/02 17:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/03/10 12:57:59 | 001,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2005/07/23 15:30:20 | 000,065,536 | —- | C] () – C:\Windows\System32\TosCommAPI.dll
========== LOP Check ==========
[2010/07/04 16:38:21 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\AnvSoft
[2009/10/28 18:49:32 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Avery
[2009/09/26 09:56:21 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Canon
[2009/02/23 09:49:04 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\eBookPro6
[2010/04/20 11:41:19 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\FileZilla
[2009/09/25 11:27:14 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\GetRightToGo
[2008/04/07 11:58:12 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Infineon
[2010/04/06 18:12:43 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\IObit
[2008/12/08 08:41:25 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\LimeWire
[2010/04/01 12:00:57 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Notepad++
[2010/03/08 17:54:32 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\TomTom
[2008/04/11 13:45:40 | 000,000,000 | —D | M] – C:\Users\C. Ryan Acupuncture\AppData\Roaming\Toshiba
[2010/07/23 07:58:49 | 000,000,398 | —- | M] () – C:\Windows\Tasks\AWC Startup.job
[2010/06/27 04:05:00 | 000,000,354 | —- | M] () – C:\Windows\Tasks\Driver Fetch.job
[2010/07/22 18:49:42 | 000,032,596 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2010/07/05 22:03:27 | 000,000,412 | —- | M] () – C:\Windows\Tasks\SmartDefrag.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2006/11/02 19:49:52 | 000,053,864 | —- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 – C:\Windows\System32\drivers\AGP440.sys
[2006/11/02 19:49:52 | 000,053,864 | —- | M] (Microsoft Corporation) MD5=EF23439CDD587F64C2C1B8825CEAD7D8 – C:\Windows\System32\DriverStore\FileRepository\machine.inf_920a2c1f\AGP440.sys
< MD5 for: ATAPI.SYS >
[2006/11/02 19:49:36 | 000,019,048 | —- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F – C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2008/04/07 13:46:26 | 000,021,560 | —- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 – C:\Windows\System32\drivers\atapi.sys
[2008/04/07 13:46:26 | 000,021,560 | —- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 – C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_7de13c21\atapi.sys
[2008/04/07 13:46:26 | 000,021,560 | —- | M] (Microsoft Corporation) MD5=B35CFCEF838382AB6490B321C87EDF17 – C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.16632_none_db337a442479c42c\atapi.sys
[2008/04/07 13:46:26 | 000,021,560 | —- | M] (Microsoft Corporation) MD5=E03E8C99D15D0381E02743C36AFC7C6F – C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6000.20757_none_dbac78a93da31a8b\atapi.sys
< MD5 for: CNGAUDIT.DLL >
[2006/11/02 19:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\System32\cngaudit.dll
[2006/11/02 19:46:03 | 000,011,776 | —- | M] (Microsoft Corporation) MD5=7F15B4953378C8B5161D65C26D5FED4D – C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.0.6000.16386_none_e62d292932a96ce6\cngaudit.dll
< MD5 for: IASTORV.SYS >
[2006/11/02 19:51:25 | 000,232,040 | —- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 – C:\Windows\System32\drivers\iaStorV.sys
[2006/11/02 19:51:25 | 000,232,040 | —- | M] (Intel Corporation) MD5=C957BF4B5D80B46C5017BF0101E6C906 – C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_37cdafa4\iaStorV.sys
< MD5 for: NETLOGON.DLL >
[2006/11/02 19:46:11 | 000,559,616 | —- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B – C:\Windows\System32\netlogon.dll
[2006/11/02 19:46:11 | 000,559,616 | —- | M] (Microsoft Corporation) MD5=889A2C9F2AACCD8F64EF50AC0B3D553B – C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.0.6000.16386_none_fb80f5473b0ed783\netlogon.dll
< MD5 for: NVRAID.SYS >
[2006/11/02 19:50:24 | 000,088,680 | —- | M] (NVIDIA Corporation) MD5=E69E946F80C1C31C53003BFBF50CBB7C – C:\Windows\System32\drivers\nvraid.sys
[2006/11/02 19:50:24 | 000,088,680 | —- | M] (NVIDIA Corporation) MD5=E69E946F80C1C31C53003BFBF50CBB7C – C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvraid.sys
< MD5 for: NVSTOR.SYS >
[2006/11/02 19:50:13 | 000,040,040 | —- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC – C:\Windows\System32\drivers\nvstor.sys
[2006/11/02 19:50:13 | 000,040,040 | —- | M] (NVIDIA Corporation) MD5=9E0BA19A28C498A6D323D065DB76DFFC – C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_733654ff\nvstor.sys
< MD5 for: SCECLI.DLL >
[2006/11/02 19:46:12 | 000,176,640 | —- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 – C:\Windows\System32\scecli.dll
[2006/11/02 19:46:12 | 000,176,640 | —- | M] (Microsoft Corporation) MD5=80E2839D05CA5970A86D7BE2A08BFF61 – C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.0.6000.16386_none_35d7205fdc305e3e\scecli.dll
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2006/11/02 19:47:18 | 000,228,968 | —- | M] (Microsoft Corporation)
Unable to obtain MD5 – C:\Windows\System32\rsaenh.dll
[2007/12/25 18:34:20 | 000,223,232 | —- | M] (Microsoft Corporation)
Unable to obtain MD5 – C:\Windows\System32\SLC.dll
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2006/11/02 20:34:05 | 000,008,192 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2006/11/02 20:34:05 | 000,020,480 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2006/11/02 20:34:05 | 000,008,192 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 20:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 20:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV
< %systemroot%\system32\drivers\*.sys /90 >
========== Alternate Data Streams ==========
@Alternate Data Stream - 154 bytes -> C:\ProgramData\TEMP:B00CB50D
@Alternate Data Stream - 105 bytes -> C:\ProgramData\TEMP:2E0A12A9
< End of report >
Extras.txt
OTL Extras logfile created on: 23/07/2010 10:37:17 AM - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\C. Ryan Acupuncture\Downloads
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 48.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 61.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 22.91 Gb Free Space | 30.75% Space Free | Partition Type: NTFS
Drive D: | 66.71 Gb Total Space | 64.82 Gb Free Space | 97.17% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: OFFICE
Current User Name: C. Ryan Acupuncture
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile – "D:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "D:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] – D:\PROGRA~1\MICROS~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{5479BB36-F02D-4F8A-B48B-5D8CF867F3D4}" = rport=138 | protocol=17 | dir=out | app=system |
"{580D91E3-853C-46D5-89C8-78F00293BF75}" = lport=6004 | protocol=17 | dir=in | app=d:\program files\microsoft office\office12\outlook.exe |
"{6F3C4899-8CC4-4AE7-BB0B-E66914F6F418}" = rport=445 | protocol=6 | dir=out | app=system |
"{77C35808-7ECA-46EB-AFDA-2B87DFBAEBA2}" = rport=137 | protocol=17 | dir=out | app=system |
"{92D81463-76EE-489F-B281-B838AE23A05D}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A7DA668A-9B58-4715-9CC9-77B228AD1C93}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{AA5C1DE0-1E1D-4658-88E0-A402A81EDB8B}" = lport=445 | protocol=6 | dir=in | app=system |
"{BEEE61DE-8FBA-4132-BEE0-18D6E8828DBD}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{CAB3505F-AB67-4144-8522-7002A4E1FAFD}" = lport=139 | protocol=6 | dir=in | app=system |
"{CAC09130-D69A-447D-9AE6-9AF65F57B433}" = lport=138 | protocol=17 | dir=in | app=system |
"{D91747FC-C2A4-4346-B40F-6169D1A53A30}" = lport=137 | protocol=17 | dir=in | app=system |
"{DC7752B6-8485-4876-8585-82279E540C31}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{FC3CF69C-8506-4A0E-84C5-303FA974A1A6}" = rport=139 | protocol=6 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01E96B45-CFA6-4675-8F8C-40B512AE0259}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{104093E9-7E37-4618-9013-9FC3DB10D4B7}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{3026090D-B7E9-4697-8A7B-C9B7EE8EF35A}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{3C758D3C-F2C4-477C-BAA2-F624CB2A0802}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{3EABF89F-96B2-4EA7-9698-2282BCEF82E3}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{4B0FE74F-639E-467A-8B2D-52A685A02771}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{4B4C2C08-1D6D-4F55-82A8-CA2F3D6B2F1F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{55754727-34B5-4C05-BA46-C2478FE4F302}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"{6F565152-6F56-426B-BE07-85EFF7A96CA5}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{82D44F81-4C57-4E7B-9EF6-84CB572698CC}" = protocol=17 | dir=in | app=d:\itunes\itunes.exe |
"{853996DD-1D9A-4AF6-99AF-A0F52804B9DE}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{8E8A14CA-2982-447C-B938-23B84A39DDAA}" = protocol=6 | dir=in | app=d:\itunes\itunes.exe |
"{A3689B7A-5B46-4D1B-9EC0-D6B2D87A9DD8}" = protocol=17 | dir=in | app=d:\program files\microsoft office\office12\onenote.exe |
"{A8E7E5FC-DA99-4DA2-BCED-AE3A789110E1}" = protocol=17 | dir=in | app=d:\program files\microsoft office\office12\groove.exe |
"{AB89D65D-9E33-486D-9205-745A1DCCF2A8}" = protocol=6 | dir=in | app=d:\program files\microsoft office\office12\onenote.exe |
"{B5927A3D-8C33-4CD3-A183-6071859E09EC}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{BC479E63-D62F-41FD-99A0-BDA7EB018401}" = protocol=6 | dir=in | app=d:\program files\microsoft office\office12\groove.exe |
"{C5C7769D-3B44-465B-9E1A-401BC1F35FC4}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"{E9487538-35FE-4E87-94EA-7E1FE7407F5A}" = dir=in | app=c:\program files\avg\avg8\avgnsx.exe |
"{EE756002-364B-4DE0-8ADE-361C7A31EACF}" = dir=in | app=c:\program files\avg\avg8\avgupd.exe |
"{FA5AECA9-DCA3-4C48-8456-4B81308F2A51}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"TCP Query User{04DA9CD1-FA85-438A-AEAD-1DB74E8EAF25}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe |
"TCP Query User{5C323401-80AD-44C0-AFF6-6EB7F4D43370}C:\program files\crossloop\crossloopconnect.exe" = protocol=6 | dir=in | app=c:\program files\crossloop\crossloopconnect.exe |
"TCP Query User{B218C35A-F554-4200-AB41-7D336916E2FF}C:\program files\eltima software\sec\sec.exe" = protocol=6 | dir=in | app=c:\program files\eltima software\sec\sec.exe |
"UDP Query User{9D7839AA-AF05-4498-AD36-53FA9D35B83D}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe |
"UDP Query User{B5CF29B5-8093-4505-A518-C839D2355DDA}C:\program files\crossloop\crossloopconnect.exe" = protocol=17 | dir=in | app=c:\program files\crossloop\crossloopconnect.exe |
"UDP Query User{F9F13B8B-FAD5-45EB-870A-8000EFDADBFC}C:\program files\eltima software\sec\sec.exe" = protocol=17 | dir=in | app=c:\program files\eltima software\sec\sec.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{020D8396-D6D9-4B53-A9A1-83C47E2E27AA}" = Windows Live Call
"{05D67915-50EC-56C9-7148-552F8D205383}" = CCC Help German
"{08C69626-1E29-7EE2-E122-D475D7BAAF0B}" = Catalyst Control Center Localization Hungarian
"{09E9F3B1-2965-3D8B-F624-2F44D99B53B0}" = Catalyst Control Center Graphics Light
"{0A8C7880-F199-4807-ABD4-6E695B71A3D7}" = e-tax 2009
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{0C2AF762-0565-4C91-9F55-B8B53BB82A38}" = Microsoft Office Accounting 2008 Equifax Addin
"{0CB9668D-F979-4F31-B8B8-67FE90F929F8}" = Bonjour
"{0E4E7AB0-6FFB-4C76-FD74-810DE985D518}" = Catalyst Control Center Localization Greek
"{10D3701B-1463-0C2F-748E-3E03FADEB711}" = Catalyst Control Center Localization Norwegian
"{117FBA8C-9325-4BCD-B19A-0BF21EA9A374}" = Catalyst Control Center Localization Spanish
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series" = Canon MP250 series MP Drivers
"{122321B4-A450-0052-CAD8-B419C0EAD392}" = CCC Help Spanish
"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media
"{1606E90F-5327-EE07-9137-C518BF3DFFCE}" = Catalyst Control Center Localization Swedish
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{196BC239-53AB-615F-9B0D-FD2D61D31A58}" = Catalyst Control Center Localization Czech
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = LifeFrame2
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 20
"{270940EA-C235-40D9-B2AE-2D450356DF8E}" = Microsoft Office Accounting 2008
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{29EE0D68-9498-44FD-B807-C3F6F050E12D}" = ECI Downloader
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{2C0D5586-B96C-404F-96D7-91BE2A304853}" = Uni-Stat
"{2D06A54D-6FA7-62F1-E824-E0109C069D8E}" = CCC Help Russian
"{2EBC713F-3022-A21B-6266-376ED7C43C07}" = CCC Help French
"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey
"{3969961F-4B9A-DEB9-BC69-F0348E527DEA}" = Catalyst Control Center Localization Chinese Standard
"{39EAC702-D866-AA54-97C6-13E8AAAC2219}" = CCC Help Hungarian
"{3CE73C5D-D8F0-D6D0-E5AB-39A798BF4571}" = Skins
"{3D9892BB-A751-4E48-ADC8-E4289956CE1D}" = QuickTime
"{3FB39BED-37C8-4E60-8E02-315B8C2B07E3}" = USB2.0 1.3M WebCam
"{4160DC5B-4C56-D0C3-C5FD-F5BDAD3C882B}" = ATI Catalyst Install Manager
"{46663439-F39E-BF21-673C-19A035F9C708}" = Catalyst Control Center Localization Thai
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C4A9592-2854-E201-F7A9-2AE77AB35E37}" = CCC Help Portuguese
"{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}" = Photo Story 3 for Windows
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{56B4002F-671C-49F4-984C-C760FE3806B5}" = Microsoft SQL Server VSS Writer
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57B15AD4-8C9D-4164-82BB-E33D8644E757}" = ASUS InstantFun
"{5A74F5DD-CD86-FE24-C8D3-9850F43FD42D}" = CCC Help Czech
"{5BD877FE-9E11-D996-DEDB-ABAF4A251C39}" = CCC Help Chinese Standard
"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2
"{5FA793A6-0071-42C1-9355-8F69A428C44F}" = Microsoft Office Accounting ADP Payroll Addin
"{6153EBDC-A52B-6B24-4A3C-5CC8F85BE0DF}" = Catalyst Control Center Graphics Full New
"{6173A4FC-D42D-69A6-52CA-A30496389760}" = ccc-core-static
"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe
"{661EA4BC-FF51-FE25-7E59-D8BA41170189}" = Catalyst Control Center Localization Chinese Traditional
"{67645155-2149-7ED9-003E-92BFB7EA262A}" = Catalyst Control Center Localization Portuguese
"{68AB9F5B-85BA-1A49-F5B9-103C172A90F6}" = Catalyst Control Center Localization Korean
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6DEF11C0-35FF-4160-A543-FDD336C4DAE5}" = Microsoft SQL Server 2005 Express Edition (BLUEZINC)
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{740323AF-4EFD-EB99-8632-6B5AA9D53411}" = Catalyst Control Center Localization Dutch
"{77077FFF-8831-470F-9627-E86F06A50CCD}" = Avery Wizard 3.1
"{7AB3A249-FB81-416B-917A-A2A10E74C503}" = iTunes
"{7D5F5F2C-B978-2AD9-B54D-BC9006C35333}" = CCC Help Japanese
"{7D6E6E66-8B3D-42C2-DE13-E3F0C6A178D9}" = CCC Help Korean
"{7DFBD5A5-F88B-ED78-E5FD-FB994138BB25}" = ccc-utility
"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2
"{85991ED2-010C-4930-96FA-52F43C2CE98A}" = Apple Mobile Device Support
"{893EFD7C-B705-892C-E6E0-49BFB6C621BC}" = Catalyst Control Center Localization Russian
"{8B8FC6A3-3467-5786-657E-6893DDA7F52D}" = CCC Help Swedish
"{8CFEBE9C-F29F-4C49-80E0-7106970F8734}" = Power4Gear eXtreme
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ULTIMATER_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ULTIMATER_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ULTIMATER_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ULTIMATER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ULTIMATER_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ULTIMATER_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90A40409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{91120000-002E-0000-0000-0000000FF1CE}" = Microsoft Office Ultimate 2007
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002E-0000-0000-0000000FF1CE}_ULTIMATER_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{937C6F96-CEA5-4B97-848D-1328BD8D59D4}" = ECI Client v5.0
"{9422C8EA-B0C6-4197-B8FC-DC797658CA00}" = Windows Live Sign-in Assistant
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A70075D-6071-4704-EAF6-6DEB51CB777B}" = Catalyst Control Center Localization Finnish
"{9B881BCE-EDBF-4188-BA54-C9E03669E9E4}_is1" = Easy Photo Recovery
"{9D513AEB-187D-C020-317A-5804F781CC95}" = CCC Help Chinese Traditional
"{9D88CAFF-7CB3-916A-0A1F-5E0DB4ECD073}" = Catalyst Control Center Localization Danish
"{9EE7095B-F74E-4DC9-FAF7-75C940A1C3E9}" = Catalyst Control Center Localization French
"{A315B77A-24C5-95D9-9325-61C98FBB7C53}" = Catalyst Control Center Localization German
"{A480B428-5A5E-8D8F-6D8E-2CCBFF6029FA}" = CCC Help Norwegian
"{A7AF2BC7-FCFB-03CB-DA36-5E9D44A53091}" = CCC Help Turkish
"{A8FD0C55-0D21-89F3-57E9-1E22235765B3}" = CCC Help Finnish
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.3
"{B148AB4B-C8FA-474B-B981-F2943C5B5BCD}" = OGA Notifier 1.7.0105.35.0
"{B202B201-5D15-4CA7-A978-047AB4A28960}" = PE-DESIGN Ver.6
"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support
"{B32C4059-6E7A-41EF-AD20-56DF1872B923}" = Business Contact Manager for Outlook 2007 SP2
"{B391EECE-DFEA-4FC5-9D40-47FA43E2DBE6}" = Microsoft Office Accounting 2008 PayPal Addin
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B5DCE5D7-6FDD-D5C2-C6B7-14E264E695C9}" = Catalyst Control Center Core Implementation
"{B5FE6702-0B5F-6866-7FD2-A7B28BCAB15B}" = Catalyst Control Center Localization Japanese
"{B89BD504-63FF-03DC-5B8B-CEBCEBF2B08D}" = CCC Help English
"{BC61F51E-8AF7-46B9-AF20-B33B5EE81033}" = Nero 7 Essentials
"{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}" = Microsoft SQL Server Native Client
"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology
"{C263E891-CA9F-7CE4-B31D-6A100D5D2F3C}" = CCC Help Polish
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C4693D41-87C5-A2E0-00AB-5E0A0A205E9E}" = CCC Help Italian
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE86A0E7-818D-43EC-A181-59BA9BD3EF2E}" = LightScribe [removed]
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D104C1CF-7C12-4D32-9850-DDC99060DE5B}" = Infineon TPM Professional Package
"{D2CBFB34-2510-4BB4-970A-E24BD8B52F92}" = TM2 Reporting Components
"{D9D754A1-EAC5-406C-A28B-C49B1E846711}" = Windows Live Essentials
"{DAFF381C-D0F7-4940-BA4D-50350F744D16}" = Brother HL-2140
"{DB891739-2EB3-45A8-9CBD-941C255CECD4}" = ASUS Touch Pad Extra
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DCC7315A-F551-0778-AFC1-C19D853E0AFA}" = Catalyst Control Center Localization Turkish
"{DCE907E3-4D72-4CD3-A08A-BEFC8C7A5869}" = Branding
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{DF6D07CB-BA1B-60D3-8D51-69A5775AC7D9}" = CCC Help Thai
"{E26DD81D-91CF-7348-65E2-5AC16E14612B}" = Catalyst Control Center Localization Polish
"{E33E9943-2679-C829-5E9E-4D981A1C264C}" = CCC Help Danish
"{E3DF6916-2472-43D9-8B3C-9F2F0AAB01B5}" = Microsoft Office Accounting 2008 Fixed Asset Manager
"{E7F0262E-84B8-9EBE-D6FD-E3865FCDB0EB}" = Catalyst Control Center Localization Italian
"{ED8C5498-6C39-92E6-B17F-414BF1722E42}" = Catalyst Control Center Graphics Previews Vista
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F173C327-FAA5-D463-2CBD-A4818C7EDC8C}" = Catalyst Control Center Graphics Full Existing
"{F49109F4-EA87-B982-8A66-CCD32C6FC8AF}" = CCC Help Greek
"{F5AB638D-91F6-6517-9872-BE6996E06AF6}" = CCC Help Dutch
"{F69E83CF-B440-43F8-89E6-6EA80712109B}" = Windows Live Communications Platform
"{F87A8E11-02A4-4875-A3A5-5961081B0E4E}" = OpenOffice.org 2.4
"{FB3BE405-6BF0-490A-84B3-00611385EA0D}" = Common-Use Signing Interface
"{FBE569CA-BFEB-4E57-A674-F94D938E1AEF}" = e-tax 2010
"{FC3D290D-79BE-44B7-ABF9-FDD110925930}" = PowerForPhone
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advanced SystemCare 3_is1" = Advanced SystemCare 3
"Any Video Converter_is1" = Any Video Converter 3.0.6
"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver
"ATI Uninstaller" = ATI Uninstaller
"Audacity_is1" = Audacity 1.2.6
"AVG8Uninstall" = AVG 8.5
"Business Contact Manager" = Business Contact Manager for Outlook 2007 SP2
"CANONBJ_Deinstall_CNMCP64.DLL" = Canon PIXMA iP4000
"CANONIJINBOXADDON100" = Canon Inkjet Printer Driver Add-On Module
"CANONIJPLM100" = Canon Inkjet Printer/Scanner/Fax Extended Survey Program
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"CardRecovery" = CardRecovery
"Common-Use Signing Interface" = Common-Use Signing Interface
"CrossLoop_is1" = CrossLoop 2.51
"E2D312050E630E0CB2650D738A53820EE8BB1A95" = Windows Driver Package - 2Wire (2WIREPCP) Net (03/22/2007 2.0)
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"e-tax 2008" = e-tax 2008
"FileZilla Client" = FileZilla Client [removed]
"Free WMA MP3 Converter" = Free WMA MP3 Converter
"LAME for Audacity_is1" = LAME v3.98.2 for Audacity
"LimeWire" = LimeWire 4.18.8
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Office Accounting 2008" = Microsoft Office Accounting 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox (3.5.10)" = Mozilla Firefox (3.5.10)
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"NetDent" = NetHealth
"Notepad++" = Notepad++
"Recover My Photos_is1" = Recover My Photos
"Serial to Ethernet Connector_is1" = Serial to Ethernet Connector 5.0 (Build 5.0.7.376)
"Smart Defrag_is1" = Smart Defrag
"SMSERIAL" = Motorola SM56 Speakerphone Modem
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TM2 2008" = TM2 2008
"TomTom HOME" = TomTom HOME 2.7.3.1894
"ULTIMATER" = Microsoft Office Ultimate 2007
"WinGimp-2.0_is1" = GIMP 2.4.7
"WinLiveSuite_Wave3" = Windows Live Essentials
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 4/11/2009 4:28:11 AM | Computer Name = Office | Source = WerSvc | ID = 5007
Description =
Error - 4/11/2009 4:40:46 AM | Computer Name = Office | Source = Application Hang | ID = 1002
Description = The program OUTLOOK.EXE version 12.0.6316.5000 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Problem Reports and Solutions control panel. Process
ID: 1244 Start Time: 01ca5d299d2038d0 Termination Time: 40
Error - 4/11/2009 6:18:20 AM | Computer Name = Office | Source = EventSystem | ID = 4621
Description =
Error - 4/11/2009 6:45:27 PM | Computer Name = Office | Source = WerSvc | ID = 5007
Description =
Error - 5/11/2009 1:03:52 AM | Computer Name = Office | Source = Microsoft Office 12 | ID = 2001
Description = Rejected Safe Mode action : Microsoft Office Publisher.
Error - 5/11/2009 6:38:09 PM | Computer Name = Office | Source = WerSvc | ID = 5007
Description =
Error - 5/11/2009 7:43:31 PM | Computer Name = Office | Source = Application Hang | ID = 1002
Description = The program OUTLOOK.EXE version 12.0.6316.5000 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Problem Reports and Solutions control panel. Process
ID: d64 Start Time: 01ca5e6eb0b50047 Termination Time: 10
Error - 5/11/2009 7:53:21 PM | Computer Name = Office | Source = VSS | ID = 8194
Description =
Error - 5/11/2009 10:04:04 PM | Computer Name = Office | Source = Application Error | ID = 1000
Description = Faulting application Explorer.EXE, version 6.0.6000.16771, time stamp
0x4907deda, faulting module SHELL32.dll, version 6.0.6000.16774, time stamp 0x4912e93f,
exception code 0xc0000005, fault offset 0x0029bb37, process id 0xbdc, application
start time 0x01ca5e68dc9dc4d3.
Error - 5/11/2009 10:05:19 PM | Computer Name = Office | Source = Application Error | ID = 1000
Description = Faulting application Explorer.EXE, version 6.0.6000.16771, time stamp
0x4907deda, faulting module SHELL32.dll, version 6.0.6000.16774, time stamp 0x4912e93f,
exception code 0xc0000005, fault offset 0x0029bb37, process id 0x1488, application
start time 0x01ca5e856f3bb257.
[ OSession Events ]
Error - 24/07/2009 2:33:34 AM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 27533
seconds with 6360 seconds of active time. This session ended with a crash.
Error - 13/08/2009 11:40:27 PM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 17679
seconds with 4920 seconds of active time. This session ended with a crash.
Error - 17/08/2009 6:00:01 AM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 6974
seconds with 480 seconds of active time. This session ended with a crash.
Error - 30/09/2009 12:36:33 AM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 22348
seconds with 1440 seconds of active time. This session ended with a crash.
Error - 9/03/2010 8:12:16 PM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 5436
seconds with 780 seconds of active time. This session ended with a crash.
Error - 10/03/2010 11:43:09 PM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 20212
seconds with 960 seconds of active time. This session ended with a crash.
Error - 18/03/2010 11:57:31 PM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 13, Application Name: Microsoft Office OneNote, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 9182
seconds with 240 seconds of active time. This session ended with a crash.
Error - 25/03/2010 9:47:06 PM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 12276
seconds with 1020 seconds of active time. This session ended with a crash.
Error - 29/03/2010 11:00:37 PM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 13907
seconds with 2580 seconds of active time. This session ended with a crash.
Error - 16/05/2010 10:29:53 PM | Computer Name = Office | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 15506
seconds with 6660 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 22/07/2010 5:53:55 PM | Computer Name = Office | Source = volmgr | ID = 262190
Description = Crash dump initialization failed!
Error - 22/07/2010 5:55:34 PM | Computer Name = Office | Source = Service Control Manager | ID = 7009
Description =
Error - 22/07/2010 5:56:52 PM | Computer Name = Office | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetBT_Tcpip_{E58C0B01-DC05-49E8-AB5E-E1BFAFB2A21D}
because another computer on the network has the same name. The server could not
start.
Error - 22/07/2010 5:56:52 PM | Computer Name = Office | Source = netbt | ID = 4321
Description = The name "OFFICE :20" could not be registered on the interface
with IP address 0.0.0.0. The computer with the IP address 192.168.0.2 did not allow
the name to be claimed by this computer.
Error - 22/07/2010 6:00:36 PM | Computer Name = Office | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetBT_Tcpip_{E58C0B01-DC05-49E8-AB5E-E1BFAFB2A21D}
because another computer on the network has the same name. The server could not
start.
Error - 22/07/2010 6:00:36 PM | Computer Name = Office | Source = netbt | ID = 4321
Description = The name "OFFICE :20" could not be registered on the interface
with IP address 0.0.0.0. The computer with the IP address 192.168.0.2 did not allow
the name to be claimed by this computer.
Error - 22/07/2010 6:06:46 PM | Computer Name = Office | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetBT_Tcpip_{E58C0B01-DC05-49E8-AB5E-E1BFAFB2A21D}
because another computer on the network has the same name. The server could not
start.
Error - 22/07/2010 6:06:46 PM | Computer Name = Office | Source = netbt | ID = 4321
Description = The name "OFFICE :20" could not be registered on the interface
with IP address 0.0.0.0. The computer with the IP address 192.168.0.2 did not allow
the name to be claimed by this computer.
Error - 22/07/2010 6:11:24 PM | Computer Name = Office | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetBT_Tcpip_{E58C0B01-DC05-49E8-AB5E-E1BFAFB2A21D}
because another computer on the network has the same name. The server could not
start.
Error - 22/07/2010 6:11:24 PM | Computer Name = Office | Source = netbt | ID = 4321
Description = The name "OFFICE :20" could not be registered on the interface
with IP address 0.0.0.0. The computer with the IP address 192.168.0.2 did not allow
the name to be claimed by this computer.
[ TM2 Scheduled Jobs Events ]
Error - 22/07/2010 2:00:00 AM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in DoFilesBackup: The process cannot access the file
'Reports.zip' because it is being used by another process.
Error - 22/07/2010 3:00:00 AM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in DoFilesBackup: The process cannot access the file
'Reports.zip' because it is being used by another process.
Error - 22/07/2010 4:00:00 AM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in ZipMerge: Invalid password
Error - 22/07/2010 4:00:00 AM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in DoFilesBackup: The process cannot access the file
'C:\Windows\TEMP\TM2Backup\Reports.zip' because it is being used by another process.
Error - 22/07/2010 5:55:16 PM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in ZipMerge: Invalid password
Error - 22/07/2010 5:55:16 PM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in DoFilesBackup: The process cannot access the file
'C:\Windows\TEMP\TM2Backup\Reports.zip' because it is being used by another process.
Error - 22/07/2010 6:00:00 PM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in DoFilesBackup: The process cannot access the file
'Reports.zip' because it is being used by another process.
Error - 22/07/2010 7:00:00 PM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in DoFilesBackup: The process cannot access the file
'Reports.zip' because it is being used by another process.
Error - 22/07/2010 8:00:24 PM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in ZipMerge: Invalid password
Error - 22/07/2010 8:00:24 PM | Computer Name = Office | Source = TM2SchJobs | ID = 0
Description = An error occurred in DoFilesBackup: The process cannot access the file
'C:\Windows\TEMP\TM2Backup\Reports.zip' because it is being used by another process.
< End of report >
