OTL logfile created on: 7/31/2010 2:58:11 AM - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Users\Nick\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
8.00 Gb Total Physical Memory | 6.00 Gb Available Physical Memory | 74.00% Memory free
16.00 Gb Paging File | 13.00 Gb Available in Paging File | 83.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.83 Gb Total Space | 562.92 Gb Free Space | 61.33% Space Free | Partition Type: NTFS
Drive D: | 13.68 Gb Total Space | 1.93 Gb Free Space | 14.11% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: OWNER-PC
Current User Name: Nick
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Users\Nick\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Google\Update\1.2.183.29\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Users\Nick\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files (x86)\Norton Security Suite\Engine\4.2.0.12\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Quick Macros 2\qmserv.exe ()
PRC - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
PRC - C:\Users\Nick\FAH\smpd.exe ()
========== Modules (SafeList) ==========
MOD - C:\Users\Nick\Desktop\OTL.exe (OldTimer Tools)
MOD - c:\Program Files (x86)\McAfee\SiteAdvisor\sahook.dll (McAfee, Inc.)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV:
64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:
64bit: - (FLEXnet Licensing Service 64) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
SRV:
64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (Apple Mobile Device) – C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (McAfee SiteAdvisor Service) – c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (clr_optimization_v4.0.30319_64) – C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ACDaemon) – C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (N360) – C:\Program Files (x86)\Norton Security Suite\Engine\4.2.0.12\ccSvcHst.exe (Symantec Corporation)
SRV - (McComponentHostService) – C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (quickmacros2) – C:\Program Files (x86)\Quick Macros 2\qmserv.exe ()
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (GameConsoleService) – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (IAANTMON) Intel® – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (Adobe Version Cue CS4) – C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe (Adobe Systems Incorporated)
SRV - (mpich2_smpd) – C:\Users\Nick\FAH\smpd.exe ()
========== Driver Services (SafeList) ==========
DRV:
64bit: - (SymEvent) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:
64bit: - (atikmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:
64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:
64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:
64bit: - (sptd) – C:\Windows\SysNative\drivers\sptd.sys ()
DRV:
64bit: - (AtiHdmiService) – C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:
64bit: - (SYMTDIv) – C:\Windows\SysNative\drivers\N360x64\0402000.00C\symtdiv.sys (Symantec Corporation)
DRV:
64bit: - (SymIRON) – C:\Windows\SysNative\drivers\N360x64\0402000.00C\ironx64.sys (Symantec Corporation)
DRV:
64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:
64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\0402000.00C\symefa64.sys (Symantec Corporation)
DRV:
64bit: - (SRTSP) – C:\Windows\SysNative\drivers\N360x64\0402000.00C\srtsp64.sys (Symantec Corporation)
DRV:
64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\N360x64\0402000.00C\srtspx64.sys (Symantec Corporation)
DRV:
64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:
64bit: - (athr) – C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:
64bit: - (ccHP) – C:\Windows\SysNative\drivers\N360x64\0402000.00C\cchpx64.sys (Symantec Corporation)
DRV:
64bit: - (mfeavfk) – C:\Windows\SysNative\drivers\mfeavfk.sys (McAfee, Inc.)
DRV:
64bit: - (mfesmfk) – C:\Windows\SysNative\drivers\mfesmfk.sys (McAfee, Inc.)
DRV:
64bit: - (mferkdk) – C:\Windows\SysNative\drivers\mferkdk.sys (McAfee, Inc.)
DRV:
64bit: - (mfehidk) – C:\Windows\SysNative\drivers\mfehidk.sys (McAfee, Inc.)
DRV:
64bit: - (SymDS) – C:\Windows\SysNative\drivers\N360x64\0402000.00C\symds64.sys (Symantec Corporation)
DRV:
64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:
64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:
64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:
64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:
64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:
64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:
64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:
64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:
64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:
64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:
64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:
64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:
64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:
64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:
64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:
64bit: - (PCDSRVC{F36B3A4C-F95654BD-06000000}_0) – c:\Program Files\PC-Doctor for Windows\pcdsrvc_x64.pkms (PC-Doctor, Inc.)
DRV:
64bit: - (RTL8169) – C:\Windows\SysNative\drivers\Rtlh64.sys (Realtek Corporation )
DRV:
64bit: - (ManyCam) – C:\Windows\SysNative\drivers\ManyCam_x64.sys (ManyCam LLC.)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100730.048\EX64.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100730.048\ENG64.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20100730.001\IDSviA64.sys (Symantec Corporation)
DRV - (BHDrvx64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20100709.001\BHDrvx64.sys (Symantec Corporation)
DRV - (adfs) – C:\Windows\SysWow64\drivers\adfs.sys (Adobe Systems, Inc.)
DRV - (qmphook) – C:\Program Files (x86)\Quick Macros 2\x64\qmphook.sys ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cndt
IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:
64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cndt
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nintendo.com/servlet/SelectCoun…=US&lang=en
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.nintendo.com/servlet/SelectCountry?country=US&lang=en"
FF - prefs.js..extensions.enabledItems: [removed]:0.2.1
FF - prefs.js..extensions.enabledItems: [removed]:3.7.8
FF - prefs.js..extensions.enabledItems: [removed]:3.5.2
FF - prefs.js..extensions.enabledItems: [removed]:1.2.1
FF - prefs.js..extensions.enabledItems: [removed]:1.5.3
FF - prefs.js..extensions.enabledItems: [removed]:4.1.5
FF - prefs.js..extensions.enabledItems: {AE93811A-5C9A-4d34-8462-F7B864FC4696}:3.64
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.1
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.10
FF - prefs.js..extensions.enabledItems: {ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}:1.3
FF - prefs.js..extensions.enabledItems: {000a9d1c-beef-4f90-9363-039d445309b8}:0.5.36.0
FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.2
FF - prefs.js..extensions.enabledItems: {ada4b710-8346-4b82-8199-5de2b400a6ae}:[removed]
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:3.5
FF - prefs.js..extensions.enabledItems: {07b2a769-ed19-4483-87ce-c643914c81bb}:3.0.0.91
FF - HKLM\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files (x86)\Google\Google Gears\Firefox\ [2010/04/03 18:24:02 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/04/13 18:41:37 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010/06/18 16:15:20 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010/06/14 22:11:28 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files (x86)\McAfee\SiteAdvisor [2010/07/09 09:32:42 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/07/27 22:32:40 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/07/24 18:03:04 | 000,000,000 | —D | M]
[2010/06/09 05:17:36 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Extensions
[2010/07/30 19:42:25 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions
[2010/06/09 05:19:25 | 000,000,000 | —D | M] (Vista-aero) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb}
[2010/06/09 05:19:33 | 000,000,000 | —D | M] (FoxyTunes) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374}
[2010/07/30 19:42:25 | 000,000,000 | —D | M] (ReminderFox) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
[2010/06/09 05:19:34 | 000,000,000 | —D | M] (No name found) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}
[2010/06/09 05:19:40 | 000,000,000 | —D | M] (Gamers Unite! Snag Bar) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{afe43e80-0abc-4df2-81a0-3fe44b74abe8}
[2010/07/27 20:08:06 | 000,000,000 | —D | M] (Easy Youtube Video Downloader) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}
[2010/06/09 05:19:40 | 000,000,000 | —D | M] (Web Developer) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}
[2010/07/10 01:50:16 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/07/13 22:58:37 | 000,000,000 | —D | M] (Download Statusbar) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010/06/18 03:32:17 | 000,000,000 | —D | M] (No name found) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2010/06/09 05:19:41 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/06/09 05:19:42 | 000,000,000 | —D | M] (FoxTab) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{ef4e370e-d9f0-4e00-b93e-a4f274cfdd5a}
[2010/06/09 05:19:07 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/06/09 05:19:07 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/07/03 09:15:42 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/06/09 05:19:21 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/06/09 05:19:21 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/06/09 05:19:21 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/06/12 00:28:21 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/06/09 05:19:24 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/07/01 19:59:27 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\[removed]
[2010/06/09 05:19:33 | 000,000,000 | —D | M] (No name found) – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\extensions\{07b2a769-ed19-4483-87ce-c643914c81bb}\chrome\mozapps\extensions
[2010/07/19 00:15:14 | 000,002,258 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\arwingpedia-en.xml
[2010/07/08 22:41:50 | 000,002,259 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\avatar-wiki-en.xml
[2010/06/03 07:44:57 | 000,034,230 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\cnncom.xml
[2010/04/10 10:27:09 | 000,002,395 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\encyclopedia-dramatica-en.xml
[2010/07/25 02:06:49 | 000,001,238 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\facebook.xml
[2010/07/27 10:50:51 | 000,002,279 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\howstuffworks.xml
[2010/04/30 19:38:28 | 000,002,377 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\kongregate.xml
[2010/03/30 20:05:09 | 000,001,620 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\mozilla-add-ons.xml
[2010/07/18 21:59:47 | 000,002,255 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\nintendo-en.xml
[2010/05/19 19:18:29 | 000,002,253 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\the-sims-wiki-en.xml
[2010/04/14 20:27:37 | 000,002,006 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\urban-dictionary.xml
[2010/03/30 20:39:55 | 000,002,057 | —- | M] () – C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\7a9g7ko9.default\searchplugins\youtube-video-search.xml
[2010/06/09 08:03:48 | 000,000,000 | —D | M] – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/06/11 17:43:14 | 000,002,024 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\McSiteAdvisor.xml
O1 HOSTS File: ([2010/04/16 17:41:51 | 000,000,791 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 activate.adobe.com
O2:
64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\/Adobe Contribute CS4/contributeieplugin.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Security Suite\Engine\4.2.0.12\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0552.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Google Gears Helper) - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3:
64bit: - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0552.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\/Adobe Contribute CS4/contributeieplugin.dll ()
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O4:
64bit: - HKLM..\Run: [HP Remote Software] C:\Program Files\Hewlett-Packard\HP Remote\HP REMOTE V1.0.5.exe ()
O4:
64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:
64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (Hewlett-Packard)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [CLMLServer for HP TouchSmart] c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
O4 - HKLM..\Run: [Microsoft Default Manager] c:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe (Microsoft Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TSMAgent] c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateLBPShortCut] c:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePDIRShortCut] c:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktopCleanupWizard = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:
64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:
64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:
64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:
64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra 'Tools' menuitem : &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10:
64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {140E4DF8-9E14-4A34-9577-C77561ED7883} http://content.systemrequirementslab.com.s…ri_4.1.71.0.cab (Reg Error: Key error.)
O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab (MSN Games - Installer)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:
64bit: - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:
64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:
64bit: - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
O18:
64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:
64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:
64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:
64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:
64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:
64bit: - HKLM\..comfile [open] – "%1" %*
O35:
64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:
64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:
64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
Drivers32:
64bit: aux - wdmaud.drv (Microsoft Corporation)
Drivers32:
64bit: aux1 - wdmaud.drv (Microsoft Corporation)
Drivers32:
64bit: midi - wdmaud.drv (Microsoft Corporation)
Drivers32:
64bit: midi1 - wdmaud.drv (Microsoft Corporation)
Drivers32:
64bit: midimapper - midimap.dll (Microsoft Corporation)
Drivers32:
64bit: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32:
64bit: mixer1 - wdmaud.drv (Microsoft Corporation)
Drivers32:
64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32:
64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:
64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32:
64bit: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32:
64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32:
64bit: MSVideo8 - VfWWDM32.dll (Microsoft Corporation)
Drivers32:
64bit: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32:
64bit: VIDC.IYUV - iyuv_32.dll (Microsoft Corporation)
Drivers32:
64bit: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32:
64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32:
64bit: VIDC.UYVY - msyuv.dll (Microsoft Corporation)
Drivers32:
64bit: VIDC.YUY2 - msyuv.dll (Microsoft Corporation)
Drivers32:
64bit: VIDC.YVU9 - tsbyuv.dll (Microsoft Corporation)
Drivers32:
64bit: VIDC.YVYU - msyuv.dll (Microsoft Corporation)
Drivers32:
64bit: wave - wdmaud.drv (Microsoft Corporation)
Drivers32:
64bit: wave1 - wdmaud.drv (Microsoft Corporation)
Drivers32:
64bit: wavemapper - msacm32.drv (Microsoft Corporation)
Drivers32: aux - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: aux1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midi1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - C:\Windows\SysWow64\midimap.dll (Microsoft Corporation)
Drivers32: mixer - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: mixer1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.imaadpcm - C:\Windows\SysWow64\imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - C:\Windows\SysWow64\msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - C:\Windows\SysWow64\msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - C:\Windows\SysWow64\msgsm32.acm (Microsoft Corporation)
Drivers32: msacm.siren - C:\Windows\SysWow64\sirenacm.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: vidc.ffds - C:\Program Files (x86)\Combined Community Codec Pack\Filters\FFDShow\ff_vfw.dll ()
Drivers32: vidc.i420 - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.iv50 - C:\Windows\SysWow64\ir50_32.dll (Intel Corporation)
Drivers32: vidc.iyuv - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - C:\Windows\SysWow64\msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - C:\Windows\SysWow64\msvidc32.dll (Microsoft Corporation)
Drivers32: vidc.uyvy - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.VP60 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\SysWOW64\vp6vfw.dll (On2.com)
Drivers32: vidc.yuy2 - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.)
Drivers32: vidc.yvu9 - C:\Windows\SysWow64\tsbyuv.dll (Microsoft Corporation)
Drivers32: vidc.yvyu - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation)
Drivers32: wave - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wave1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - C:\Windows\SysWow64\msacm32.drv (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2010/07/31 02:51:08 | 000,574,976 | —- | C] (OldTimer Tools) – C:\Users\Nick\Desktop\OTL.exe
[2010/07/28 17:07:09 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\My Chat Logs
[2010/07/28 17:06:38 | 000,000,000 | —D | C] – C:\ProgramData\Messenger Plus!
[2010/07/28 17:06:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\Messenger Plus! Live
[2010/07/28 17:04:37 | 004,853,656 | —- | C] (Yuna Software) – C:\Users\Nick\Documents\MsgPlusLive-485.exe
[2010/07/27 22:20:13 | 000,000,000 | —D | C] – C:\Facade
[2010/07/27 21:53:43 | 819,101,929 | —- | C] (Procedural Arts) – C:\Users\Nick\Documents\FacadeInstaller103p.exe
[2010/07/26 16:16:35 | 003,420,304 | —- | C] (Piriform Ltd) – C:\Users\Nick\Documents\ccsetup234.exe
[2010/07/23 18:14:33 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\Facebook Sent - hey_files
[2010/07/20 14:22:57 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\254864263_files
[2010/07/19 11:40:42 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\CamStudio
[2010/07/18 05:22:49 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\Fonts
[2010/07/18 02:08:29 | 009,398,920 | —- | C] (Mozilla) – C:\Users\Nick\Documents\Firefox Setup 4.0 Beta 1.exe
[2010/07/15 01:35:27 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\Torrents
[2010/07/15 01:02:12 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\iPod Test
[2010/07/14 23:50:23 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Local\WMTools Downloaded Files
[2010/07/14 23:25:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\Movie Maker 2.6
[2010/07/14 23:09:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Movie Maker
[2010/07/14 00:25:43 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\Misc
[2010/07/14 00:24:36 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\TeenHut
[2010/07/13 20:28:58 | 000,000,000 | —D | C] – C:\ProgramData\KingsIsle Entertainment
[2010/07/13 17:51:25 | 000,144,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\cdd.dll
[2010/07/13 03:06:06 | 000,000,000 | -H-D | C] – C:\Users\Nick\Documents\My Life
[2010/07/12 18:14:46 | 004,178,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_41.dll
[2010/07/10 01:51:20 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\Nestopia139bin
[2010/07/10 01:26:56 | 000,000,000 | —D | C] – C:\Program Files\Jnes 0.6
[2010/07/07 04:47:05 | 000,000,000 | —D | C] – C:\Users\Nick\Documents\chromecacheview
[2010/07/03 19:46:34 | 000,000,000 | —D | C] – C:\Users\Nick\FAH
[2010/07/02 09:10:50 | 000,000,000 | —D | C] – C:\Users\Nick\AppData\Roaming\GinDi
[2010/07/02 09:10:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Quick Macros 2
[2010/07/02 09:10:44 | 000,000,000 | —D | C] – C:\ProgramData\GinDi
========== Files - Modified Within 30 Days ==========
[2010/07/31 03:02:05 | 004,718,592 | -HS- | M] () – C:\Users\Nick\ntuser.dat
[2010/07/31 02:53:49 | 000,284,915 | —- | M] () – C:\Users\Nick\Desktop\gmer.zip
[2010/07/31 02:51:08 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Users\Nick\Desktop\OTL.exe
[2010/07/31 02:41:00 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-133263452-1906430011-745098151-1005UA.job
[2010/07/31 02:33:00 | 000,000,894 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/07/31 02:24:00 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-133263452-1906430011-745098151-1000UA.job
[2010/07/31 01:43:21 | 000,000,890 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/07/31 01:41:00 | 000,000,852 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-133263452-1906430011-745098151-1005Core.job
[2010/07/30 13:27:44 | 000,011,104 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/07/30 13:27:44 | 000,011,104 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/07/30 13:24:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-133263452-1906430011-745098151-1000Core.job
[2010/07/30 10:17:47 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2010/07/30 00:02:52 | 000,286,604 | —- | M] () – C:\Users\Nick\Documents\lolwut.png
[2010/07/29 19:32:51 | 000,726,316 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2010/07/29 19:32:51 | 000,623,940 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2010/07/29 19:32:51 | 000,106,316 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2010/07/29 17:19:07 | 004,785,196 | -H– | M] () – C:\Users\Nick\AppData\Local\IconCache.db
[2010/07/28 17:04:49 | 004,853,656 | —- | M] (Yuna Software) – C:\Users\Nick\Documents\MsgPlusLive-485.exe
[2010/07/28 14:03:03 | 000,000,334 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForOwner.job
[2010/07/28 03:21:00 | 000,002,971 | —- | M] () – C:\Users\Nick\Desktop\HiJackThis.lnk
[2010/07/28 03:20:35 | 001,402,880 | —- | M] () – C:\Users\Nick\Documents\HiJackThis.msi
[2010/07/28 01:40:50 | 000,372,216 | —- | M] () – C:\Users\Nick\Documents\The.X.Files.I.Want.To.Believe.2008.720p.BluRay.x264-SiNNERS.4610653.TPB.torrent
[2010/07/28 01:40:07 | 000,034,548 | —- | M] () – C:\Users\Nick\Documents\The_X_Files_1998_Ext_Cut_720p_BluRay_DTS_x264-DON_BOZX.5603437.TPB.torrent
[2010/07/27 10:42:00 | 000,002,396 | —- | M] () – C:\Users\Nick\Desktop\Google Chrome.lnk
[2010/07/26 21:13:35 | 000,507,015 | —- | M] () – C:\Users\Nick\Documents\102812-reported-post-mrs-butterworth_files.rar
[2010/07/26 16:17:30 | 000,001,009 | —- | M] () – C:\Users\Nick\Desktop\CCleaner.lnk
[2010/07/26 16:16:37 | 003,420,304 | —- | M] (Piriform Ltd) – C:\Users\Nick\Documents\ccsetup234.exe
[2010/07/26 11:50:31 | 001,966,134 | —- | M] () – C:\Users\Nick\Documents\FLuffeeTalks.bmp
[2010/07/25 08:53:40 | 000,000,006 | -H– | M] () – C:\Windows\tasks\SA.DAT
[2010/07/25 08:53:23 | 2146,873,343 | -HS- | M] () – C:\hiberfil.sys
[2010/07/24 23:48:02 | 000,000,398 | —- | M] () – C:\Windows\tasks\EasyShare Registration Task.job
[2010/07/24 04:00:41 | 000,057,627 | —- | M] () – C:\Users\Nick\Documents\Cirque.du.Freak.The.Vampires.Assistant.BRRIP.MP4.x264.720p-HR.5362703.TPB.torrent
[2010/07/24 03:59:01 | 000,023,568 | —- | M] () – C:\Users\Nick\Documents\Cirque_Du_Freak_The_Vampires_Assistant_2009_720p_BluRay_x264-HAi.5358058.TPB.torrent
[2010/07/24 00:05:22 | 000,004,627 | —- | M] () – C:\Users\Nick\Documents\logo.png
[2010/07/23 18:14:33 | 000,382,412 | —- | M] () – C:\Users\Nick\Documents\Facebook Sent - hey.htm
[2010/07/22 22:57:49 | 605,745,100 | —- | M] () – C:\Users\Nick\Documents\fksmqqqgrcjh.avi
[2010/07/20 14:22:58 | 000,099,560 | —- | M] () – C:\Users\Nick\Documents\254864263.htm
[2010/07/18 02:08:34 | 009,398,920 | —- | M] (Mozilla) – C:\Users\Nick\Documents\Firefox Setup 4.0 Beta 1.exe
[2010/07/14 23:17:47 | 000,007,680 | —- | M] () – C:\Users\Nick\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/13 09:05:28 | 000,007,286 | —- | M] () – C:\Users\Nick\Documents\METROID.nst
[2010/07/12 18:14:25 | 000,466,456 | —- | M] (Creative Labs) – C:\Windows\SysNative\wrap_oal.dll
[2010/07/12 18:14:25 | 000,444,952 | —- | M] (Creative Labs) – C:\Windows\SysWow64\wrap_oal.dll
[2010/07/12 18:14:25 | 000,122,904 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysNative\OpenAL32.dll
[2010/07/12 18:14:25 | 000,109,080 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\Windows\SysWow64\OpenAL32.dll
[2010/07/10 01:51:15 | 001,187,941 | —- | M] () – C:\Users\Nick\Documents\Nestopia139bin.zip
[2010/07/10 01:27:42 | 000,001,330 | —- | M] () – C:\Users\Nick\Desktop\Jnes.lnk
[2010/07/07 04:45:58 | 000,054,639 | —- | M] () – C:\Users\Nick\Documents\chromecacheview.zip
[2010/07/04 22:54:19 | 000,072,704 | R— | M] () – C:\Users\Public\Documents\ESBK.mbb
[2010/07/04 22:54:18 | 000,072,704 | R— | M] () – C:\Users\Public\Documents\ESBK.mb
[2010/07/03 11:46:50 | 000,000,859 | —- | M] () – C:\Users\Nick\Application Data\Microsoft\Internet Explorer\Quick Launch\Opera.lnk
[2010/07/03 11:46:50 | 000,000,835 | —- | M] () – C:\Users\Public\Desktop\Opera.lnk
[2010/07/03 09:16:27 | 000,002,016 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
========== Files Created - No Company Name ==========
[2010/07/31 02:53:48 | 000,284,915 | —- | C] () – C:\Users\Nick\Desktop\gmer.zip
[2010/07/30 00:02:50 | 000,286,604 | —- | C] () – C:\Users\Nick\Documents\lolwut.png
[2010/07/28 03:21:00 | 000,002,971 | —- | C] () – C:\Users\Nick\Desktop\HiJackThis.lnk
[2010/07/28 03:20:35 | 001,402,880 | —- | C] () – C:\Users\Nick\Documents\HiJackThis.msi
[2010/07/28 02:04:31 | 605,745,100 | —- | C] () – C:\Users\Nick\Documents\fksmqqqgrcjh.avi
[2010/07/28 01:40:50 | 000,372,216 | —- | C] () – C:\Users\Nick\Documents\The.X.Files.I.Want.To.Believe.2008.720p.BluRay.x264-SiNNERS.4610653.TPB.torrent
[2010/07/28 01:40:07 | 000,034,548 | —- | C] () – C:\Users\Nick\Documents\The_X_Files_1998_Ext_Cut_720p_BluRay_DTS_x264-DON_BOZX.5603437.TPB.torrent
[2010/07/26 21:13:18 | 000,507,015 | —- | C] () – C:\Users\Nick\Documents\102812-reported-post-mrs-butterworth_files.rar
[2010/07/26 11:50:31 | 001,966,134 | —- | C] () – C:\Users\Nick\Documents\FLuffeeTalks.bmp
[2010/07/24 04:00:41 | 000,057,627 | —- | C] () – C:\Users\Nick\Documents\Cirque.du.Freak.The.Vampires.Assistant.BRRIP.MP4.x264.720p-HR.5362703.TPB.torrent
[2010/07/24 03:59:01 | 000,023,568 | —- | C] () – C:\Users\Nick\Documents\Cirque_Du_Freak_The_Vampires_Assistant_2009_720p_BluRay_x264-HAi.5358058.TPB.torrent
[2010/07/24 00:05:22 | 000,004,627 | —- | C] () – C:\Users\Nick\Documents\logo.png
[2010/07/23 18:14:32 | 000,382,412 | —- | C] () – C:\Users\Nick\Documents\Facebook Sent - hey.htm
[2010/07/20 14:22:57 | 000,099,560 | —- | C] () – C:\Users\Nick\Documents\254864263.htm
[2010/07/13 09:05:28 | 000,007,286 | —- | C] () – C:\Users\Nick\Documents\METROID.nst
[2010/07/10 01:51:14 | 001,187,941 | —- | C] () – C:\Users\Nick\Documents\Nestopia139bin.zip
[2010/07/10 01:27:42 | 000,001,330 | —- | C] () – C:\Users\Nick\Desktop\Jnes.lnk
[2010/07/07 04:45:57 | 000,054,639 | —- | C] () – C:\Users\Nick\Documents\chromecacheview.zip
[2010/07/03 19:48:52 | 001,380,352 | —- | C] () – C:\Windows\SysWow64\mpich2shmp.dll
[2010/07/03 19:48:52 | 001,196,032 | —- | C] () – C:\Windows\SysWow64\mpich2.dll
[2010/07/03 19:48:52 | 001,175,552 | —- | C] () – C:\Windows\SysWow64\mpich2shm.dll
[2010/07/03 19:48:52 | 001,158,144 | —- | C] () – C:\Windows\SysWow64\mpiexec.exe
[2010/07/03 19:48:52 | 001,135,616 | —- | C] () – C:\Windows\SysWow64\smpd.exe
[2010/07/03 19:48:52 | 000,423,424 | —- | C] () – C:\Windows\SysWow64\[removed]
[2010/07/03 19:48:52 | 000,106,496 | —- | C] () – C:\Windows\SysWow64\foo.exe
[2010/07/03 19:48:52 | 000,102,400 | —- | C] () – C:\Windows\SysWow64\mpich2mpi.dll
[2010/07/03 19:48:52 | 000,081,920 | —- | C] () – C:\Windows\SysWow64\GkSui20.EXE
[2010/07/03 19:48:52 | 000,016,050 | —- | C] () – C:\Windows\SysWow64\readme.rtf
[2010/07/03 19:48:52 | 000,000,071 | —- | C] () – C:\Windows\SysWow64\install.bat
[2010/06/30 19:23:54 | 001,970,176 | —- | C] () – C:\Windows\SysWow64\d3dx9.dll
[2010/06/24 06:51:57 | 000,000,218 | —- | C] () – C:\Windows\iepreview.ini
[2010/03/31 19:54:29 | 000,023,552 | —- | C] () – C:\Windows\SysWow64\jesterss.dll
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/05/12 03:39:04 | 000,354,816 | —- | C] () – C:\Windows\SysWow64\pythoncom26.dll
[2009/05/12 03:39:04 | 000,108,032 | —- | C] () – C:\Windows\SysWow64\pywintypes26.dll
========== LOP Check ==========
[2010/03/30 19:25:18 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\acccore
[2010/05/19 23:00:18 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Astroburn Pro
[2010/06/06 07:40:11 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Audacity
[2010/05/12 20:09:19 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\DAEMON Tools Lite
[2010/05/22 20:17:15 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Facebook
[2010/07/19 06:19:34 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Folding@home-x86
[2010/07/02 09:10:50 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\GinDi
[2010/03/30 20:55:06 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\ManyCam
[2010/03/31 20:06:55 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Opera
[2010/03/30 19:19:52 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\PictureMover
[2010/04/03 23:53:17 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\Skinux
[2010/05/09 17:59:01 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\SystemRequirementsLab
[2010/07/28 01:41:39 | 000,000,000 | —D | M] – C:\Users\Nick\AppData\Roaming\uTorrent
[2010/07/24 23:48:02 | 000,000,398 | —- | M] () – C:\Windows\Tasks\EasyShare Registration Task.job
[2010/06/30 10:00:00 | 000,000,552 | —- | M] () – C:\Windows\Tasks\PCDRScheduledMaintenance.job
[2009/07/14 00:08:49 | 000,015,352 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2009/07/13 20:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2010/03/29 21:41:54 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2010/03/30 18:34:14 | 000,000,125 | —- | M] () – C:\FINIS_IT.TXT
[2010/07/25 08:53:23 | 2146,873,343 | -HS- | M] () – C:\hiberfil.sys
[2010/06/05 08:30:21 | 000,001,040 | -H– | M] () – C:\IPH.PH
[2010/06/21 23:30:31 | 000,013,743 | —- | M] () – C:\JavaRa.log
[2010/05/06 04:09:12 | 000,000,109 | —- | M] () – C:\mbam-error.txt
[2006/12/02 01:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2010/07/25 08:53:27 | 4294,156,287 | -HS- | M] () – C:\pagefile.sys
[2009/05/12 04:10:03 | 000,000,361 | —- | M] () – C:\updatedatfix.log
< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >
< %systemroot%\system32\*.wt >
< %systemroot%\system32\*.ruy >
< %systemroot%\Fonts\*.com >
[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2009/06/10 15:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\system32\spool\prtprocs\w32x86\*.tmp >
< %systemroot%\*. /mp /s >
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.scr >
[2009/07/10 12:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %systemroot%\system32\*.dll /lockedfiles >
< %systemroot%\Tasks\*.job /lockedfiles >
< %systemroot%\System32\config\*.sav >
< %systemroot%\system32\user32.dll /md5 >
[2009/07/13 20:11:24 | 000,833,024 | —- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 – C:\Windows\SysWOW64\user32.dll
< %systemroot%\system32\ws2_32.dll /md5 >
[2009/07/13 20:16:20 | 000,206,336 | —- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D – C:\Windows\SysWOW64\ws2_32.dll
< %systemroot%\system32\ws2help.dll /md5 >
[2009/07/13 20:11:26 | 000,004,608 | —- | M] (Microsoft Corporation) MD5=808AABDF9337312195CAFF76D1804786 – C:\Windows\SysWOW64\ws2help.dll
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
< End of report >