What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Laptop as bad as PC was before it died - please help keep it from dyin

14 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1 last edited
It took me 7 hours to get Ken's instructions to run DDS to work – I've been working on this all day (just trying to type this message has taken over 3 hours) – hope it gets through okay. So upon startup today I received this error message: "Windows – Virtual Memory Minimum "Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications may be denied. For more information see Help." – I clicked "OK". When I clicked on the first provided link of DDS (from Ken's 1st post in my old topic 'Computer progressively getting worse'), I got this message: "Internet Explorer cannot download dds.com from www.techsupportforum.com. The connection with the screen server was reset." – I clicked "OK". When I clicked on the second provided link of DDS (from Ken's 1st post in my old topic 'Computer progressively getting worse'), I got it to run, but no Notepad ever opened (I actually ran it twice & Notepad did not open both times). When I clicked on the third provided link (forospy) of DDS (from Ken's 1st post in my old topic 'Computer progressively getting worse'), 2 Notepads came up – one called "Attach - Notepad" and one called "DDS - Notepad" I saved them both to desktop and did not change the name – I have attached them herein. NOTES ON DDS SCAN: 1) No Optional_Scan was ever presented. 2) I am chagrin to admit I did not disconnect from the Internet, nor did I disconnect any AV (although I don't think I have any AV other than Spybot & AdAware (which doesn't work)). ADDITIONAL NOTES: 1. I was able to run a Spybot scan last night – the results showed there were 9 very bad things – one was called a "hijacker" with the name of "Pixie"-something – I clicked on "Fix it" and apparently they were taken care of (but I still don't feel good about it). 2. No matter how often I try, I am unable to get AdAware to run, 'tho I was able to get it to "update" last night. 3. I am unable to install any AV on this laptop - it just won't let me. 4. Is there anything I am NOT SUPPOSED TO BE DOING so that I don't contribute to the death of this computer too??? (e.g.: pay bills, read email), download documents for work, work on my word processors, open Internet Explorer, etc.) Granted, doing ANYTHING takes hours and hours and hours, but at least I can pay a bill or two from time to time, and read my email – please just let me know if I shouldn't be doing this stuff, and if not, JUST WHAT I SHOULD be doing to protect this computer. Thank you for your ongoing comittment to service. DDS (Ver_10-03-17.01) - NTFSx86 Run by [removed] at 15:13:24.51 on Sun 08/08/2010 Internet Explorer: 8.0.6001.18702 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.255.11 [GMT -7:00] ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\DOCUME~1\Test\LOCALS~1\Temp\A2FREE\a2service.exe C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe C:\WINDOWS\System32\Ati2evxx.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Compaq\Easy Access Button Support\StartEAK.exe C:\WINDOWS\System32\svchost.exe -k imgsvc C:\Program Files\Compaq\Easy Access Button Support\CPQEADM.EXE C:\COMPAQ\CPQINET\CPQInet.exe C:\Compaq\EAKDRV\EAUSBKBD.EXE C:\WINDOWS\wanmpsvc.exe C:\PROGRA~1\Compaq\EASYAC~1\BttnServ.exe C:\Program Files\Common Files\AOL\1132444223\ee\AOLSoftware.exe C:\Program Files\Common Files\AOL\ACS\AOLDial.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Microsoft IntelliPoint\point32.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\America Online 9.0\waol.exe C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Test\Desktop\dds.pif ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ uSearch Page = hxxp://www.google.com uWindow Title = Microsoft Internet Explorer provided by Compaq uSearch Bar = hxxp://www.google.com/ie mSearchAssistant = hxxp://www.google.com/ie mWinlogon: Userinit=c:\windows\system32\Userinit.exe BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: {4982D40A-C53B-4615-B15B-B5B5E98D167C} - No File TB: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [Microsoft Works Update Detection] c:\program files\microsoft works\WkDetect.exe uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe mRun: [CPQEASYACC] c:\program files\compaq\easy access button support\StartEAK.exe mRun: [ATIModeChange] Ati2mdxx.exe mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe mRun: [srmclean] c:\cpqs\scom\srmclean.exe mRun: [HostManager] c:\program files\common files\aol\1132444223\ee\AOLSoftware.exe mRun: [AOLDialer] c:\program files\common files\aol\acs\AOLDial.exe mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe" mRun: [IntelliPoint] "c:\program files\microsoft intellipoint\point32.exe" mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime mRun: [Ad-Watch] c:\program files\lavasoft\ad-aware\AAWTray.exe StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe IE: &AOL Toolbar search - c:\program files\aol toolbar\toolbar.dll/SEARCH.HTML IE: &eBay Search - c:\program files\ebay\ebay toolbar2\eBayTb.dll/RCSearch.html IE: E&xport to Microsoft Excel - c:\progra~1\mi1933~1\office11\EXCEL.EXE/3000 IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\mi1933~1\office11\REFIEBAR.DLL IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204 DPF: {33564D57-0000-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129608989016 DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129609126444 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_08-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab TCP: {3AF37F5C-3E26-4638-B0CE-7456EF7A7A39} = 66.174.92.14 69.78.96.14 Notify: WRNotifier - WRLogonNTF.dll Hosts: 127.0.0.1 www.spywareinfo.com ============= SERVICES / DRIVERS =============== =============== Created Last 30 ================ 2010-08-08 20:53:48 54 —-a-w- c:\windows\system32\rp_stats.dat 2010-08-08 20:53:48 39 —-a-w- c:\windows\system32\rp_rules.dat 2010-07-24 06:57:18 744448 ——w- c:\windows\system32\dllcache\helpsvc.exe 2010-07-24 06:55:07 743424 ——w- c:\windows\system32\dllcache\iedvtool.dll ==================== Find3M ==================== 2010-07-27 06:30:35 8462336 ——w- c:\windows\system32\dllcache\shell32.dll 2009-04-03 08:18:21 32768 –sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009040320090404\index.dat ============= FINISH: 15:16:46.74 ===============

Attachments:

Post #2 last edited
Hi,

Before we try to download and install any AV software lets see if we can get this system to run a bit better.

Let me ask you this, how old is this computer ?

If you have problems downloading these programs , download them on another computer and transfer them by CD or Thumb drive

Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't, manually reboot to ensure a complete clean




Please download Malwarebytes from Here or Here

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
Post the report please
Post #3
Hey Ken – thanks so much for always being there for me! So, this Compaq Presario 1700 laptop has a story you need to know: In 2000 it was purchased new for my aging mother – who took it home and promptly put it under the bed till 2006 and never looked at it or thought about it again. In 2006 she sent it in the mail to me stating that she'd never used it. When I turned it on, it was completely a mess – had a blue screen with a pink box and couldn't get to Windows or anything. I finally gave it to a private service guy to take a look at and when he brought it back he just said "it works now" and I didn't get a chance to ask questions; the guy went out of business and disappeared (yeah, kinda weird, but what're'ya gonna do). I have never learned what was wrong with it. Nevertheless, because I had a PC that I used and relied on for everything, I never plugged the laptop in unless the PC was having troubles, because the laptop was still so slow (even though it worked now). I know my mother did not make up that she never used it – I know she didn't. And I've never done anything substantial with it – BUT THE MEMORY IS ALMOST ALL USED UP!! When I look at the pie thing in "properties" it shows that there's very little left – I can't believe the memory can be all used up because there's almost nothing on this computer; in fact, when I try to download stuff (like Free Trend Micro AV), it says there's not enough memory to do so. And, I went out and bought a thing to put in it to give it more memory, and since I bought that chip-thing, I've done almost nothing on this laptop. TFC to complete – I know you want me to get it on a stick or disk, but I have no idea where to go to get that done – I have no friends here, and I don't have another computer because my other computer (as you know) died. I can't buy another computer until I can get work, but I can't get work without a computer – I've been out of a computer and, pretty much, work, for about a month now. I'll keep trying to get TFC to work after each reboot – that's really all I can do as far as the TFC goes. Is there an alternative thing to TFC that we could try instead? Or another memory chip I can buy? Having said all that, I had no problemo with MBAM – it revealed 4 seriously bad items that it quarantined. So here's your Malwarebytes report: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4412 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 8/9/2010 7:04:40 PM mbam-log-2010-08-09 (19-04-40).txt Scan type: Quick scan Objects scanned: 167419 Time elapsed: 1 hour(s), 52 minute(s), 58 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 4 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c} (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) So there's the answer to your question about the age of the laptop, and the corresponding story.

Attachments:

Post #4
I see that the segment in my last post about TFC had cut off the beginning sentence – that sentence should read: "I can't get TFC to run to completion – I know you want me to get it on a stick or disk . . . . "
Post #5
The entries that MBAM removed had to go but where not that drop dead serious.

You can give up on TFC and try this other one, it may be easier on your system

Please download ATF Cleaner by Atribune to your desktop.
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.
Your system may start up slower after running ATF Cleaner, this is expected but will be back to normal after the first or second boot up
Please note: If you use online banking or are registered online with any other organizations, ensure you have memorized password and other personal information as removing cookies will temporarily disable the auto-login facility.


BUT THE MEMORY IS ALMOST ALL USED UP <– I think you maybe talking hard disk space and not memory.That pie shows HD space, not memory usage


When a computer is just tucked away for so long, it can develop some problems, computers need to be run and updated for them to be efficient, this one appears to be 10 years old and never used.


Run that cleaner and then run this program and post the log, it will give me lots more info on your system

  • Download OTL to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Under the Standard Registry box change it to All.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
Post #6
no problems at all with ATF – thanks!

no prob w/OTL either – so I'm posting and then attaching both.




OTL logfile created on: 8/11/2010 12:25:50 AM - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Test\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

255.00 Mb Total Physical Memory | 43.00 Mb Available Physical Memory | 17.00% Memory free
1,010.00 Mb Paging File | 585.00 Mb Available in Paging File | 58.00% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 18.62 Gb Total Space | 6.64 Gb Free Space | 35.66% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 42.62 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: COMPUTERNAME
Current User Name: Test
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Test\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Verizon Wireless\VZAccess Manager\VZAccess Manager.exe (Smith Micro Software, Inc.)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\Test\Local Settings\Temp\a2free\a2service.exe (Emsi Software GmbH)
PRC - C:\Program Files\Common Files\AOL\1132444223\EE\aolsoftware.exe (America Online, Inc.)
PRC - C:\Program Files\Microsoft IntelliPoint\point32.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\AOL\ACS\AOLDial.exe (America Online)
PRC - C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe (America Online)
PRC - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe (America Online, Inc)
PRC - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe (America Online Inc)
PRC - C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)
PRC - C:\Compaq\CPQInet\CPQInet.exe (Compaq Computer Corporation)
PRC - C:\Program Files\COMPAQ\Easy Access Button Support\STARTEAK.exe (Compaq Computer Corporation)
PRC - C:\Program Files\COMPAQ\Easy Access Button Support\CPQEADM.exe (Compaq Computer Corporation)
PRC - C:\Program Files\COMPAQ\Easy Access Button Support\BttnServ.exe (Compaq Computer Corporation)
PRC - C:\Compaq\EAKDRV\EAUSBKBD.exe (Compaq)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Test\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\SYSTEM32\msscript.ocx (Microsoft Corporation)
MOD - C:\Program Files\Common Files\AOL\ACS\WLHook.dll (America Online)


========== Win32 Services (SafeList) ==========

SRV - (AppMgmt) – C:\WINDOWS\System32\appmgmts.dll File not found
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (a2free) – C:\Documents and Settings\Test\Local Settings\Temp\a2free\a2service.exe (Emsi Software GmbH)
SRV - (AOL ACS) – C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (America Online)
SRV - (AOL TopSpeedMonitor) – C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe (America Online, Inc)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\SYSTEM32\hpzipm12.exe (HP)
SRV - (WANMiniportService) WAN Miniport (ATW) – C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)


========== Driver Services (SafeList) ==========

DRV - (LUsbKbd) – C:\WINDOWS\System32\Drivers\LUsbKbd.Sys File not found
DRV - (LMouKE) – C:\WINDOWS\System32\DRIVERS\LMouKE.Sys File not found
DRV - (LHidUsbK) – C:\WINDOWS\System32\Drivers\LHidUsbK.Sys File not found
DRV - (LHidFlt2) – C:\WINDOWS\System32\DRIVERS\LHidFlt2.sys File not found
DRV - (Fdc) – C:\WINDOWS\System32\DRIVERS\fdc.sys File not found
DRV - (EACMOS) – C:\WINDOWS\System32\drivers\EACMOS.SYS File not found
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (NWUSBCDFIL) – C:\WINDOWS\SYSTEM32\DRIVERS\NwUsbCdFil.sys (Novatel Wireless Inc.)
DRV - (NWADI) – C:\WINDOWS\SYSTEM32\DRIVERS\NWADIenum.sys (Novatel Wireless Inc)
DRV - (NWUSBPort2) – C:\WINDOWS\SYSTEM32\DRIVERS\nwusbser2.sys (Novatel Wireless Inc.)
DRV - (NWUSBPort) – C:\WINDOWS\SYSTEM32\DRIVERS\nwusbser.sys (Novatel Wireless Inc.)
DRV - (NWUSBModem) – C:\WINDOWS\SYSTEM32\DRIVERS\nwusbmdm.sys (Novatel Wireless Inc.)
DRV - (SMSIVZAM5) – C:\Program Files\Verizon Wireless\VZAccess Manager\SMSIVZAM5.sys (Smith Micro Inc.)
DRV - (NuidFltr) – C:\WINDOWS\SYSTEM32\DRIVERS\nuidfltr.sys (Microsoft Corporation)
DRV - (LHidUsb) – C:\WINDOWS\SYSTEM32\DRIVERS\Lhidusb.sys (Logitech, Inc.)
DRV - (LCcFltr) – C:\WINDOWS\SYSTEM32\DRIVERS\LCCFLTR.SYS (Logitech, Inc.)
DRV - (wanatw) WAN Miniport (ATW) – C:\WINDOWS\SYSTEM32\DRIVERS\wanatw4.sys (America Online, Inc.)
DRV - (ati2mtag) – C:\WINDOWS\SYSTEM32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.)
DRV - (winachsf) – C:\WINDOWS\SYSTEM32\DRIVERS\HSF_CNXT.sys (Conexant Systems)
DRV - (V124) – C:\WINDOWS\SYSTEM32\DRIVERS\v124nt.sys (Conexant Systems)
DRV - (K56) – C:\WINDOWS\SYSTEM32\DRIVERS\k56nt.sys (Conexant)
DRV - (Fallback) – C:\WINDOWS\SYSTEM32\DRIVERS\fallback.sys (Conexant)
DRV - (SoftFax) – C:\WINDOWS\SYSTEM32\DRIVERS\faxnt.sys (Conexant)
DRV - (Fsks) – C:\WINDOWS\SYSTEM32\DRIVERS\fsksnt.sys (Conexant)
DRV - (basic2) – C:\WINDOWS\SYSTEM32\DRIVERS\basic2.sys (Conexant Systems)
DRV - (Rksample) – C:\WINDOWS\SYSTEM32\DRIVERS\rksample.sys (Conexant Systems)
DRV - (Tones) – C:\WINDOWS\SYSTEM32\DRIVERS\tonesnt.sys (Conexant)
DRV - (Cnxtdiag) – C:\WINDOWS\SYSTEM32\DRIVERS\cnxtdiag.sys (Conexant Systems)
DRV - (hsf_msft) – C:\WINDOWS\SYSTEM32\DRIVERS\hsf_msft.sys (Conexant)
DRV - (atimpab) – C:\WINDOWS\SYSTEM32\DRIVERS\ATIMPAB.SYS (ATI Technologies Inc.)
DRV - (ac97intc) Intel® 82801 Audio Driver Install Service (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\ac97intc.sys (Intel Corporation)
DRV - (allegro) ESS Allegro Audio Driver (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\ES198X.SYS (ESS Technology, Inc.)
DRV - (wandrv) – C:\WINDOWS\SYSTEM32\DRIVERS\wandrv.sys (America Online, Inc.)
DRV - (SynTP) – C:\WINDOWS\SYSTEM32\DRIVERS\SynTP.sys (Synaptics, Inc.)
DRV - (EAWDMFD) – C:\WINDOWS\system32\drivers\EAWDMFD.sys (Compaq Computer Corporation)


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\SYSTEM32\ieframe.dll (Microsoft Corporation)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2010/01/03 12:56:35 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Java\jre6\lib\deploy\jqs\ff [2010/01/02 15:36:26 | 000,000,000 | —D | M]


O1 HOSTS File: ([2010/08/07 23:40:04 | 000,415,879 | R— | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 14357 more lines…
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (&Address;) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\SYSTEM32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Links;) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O4 - HKLM..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe (America Online)
O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.)
O4 - HKLM..\Run: [CPQEASYACC] C:\Program Files\COMPAQ\Easy Access Button Support\STARTEAK.exe (Compaq Computer Corporation)
O4 - HKLM..\Run: [HostManager] C:\Program Files\Common Files\AOL\1132444223\EE\aolsoftware.exe (America Online, Inc.)
O4 - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\point32.exe (Microsoft Corporation)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Computer, Inc.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Computer, Inc.)
O4 - HKLM..\Run: [srmclean] C:\cpqs\scom\srmclean.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKCU..\Run: [AOL Fast Start] C:\Program Files\America Online 9.0\AOL.EXE (America Online, Inc.)
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\SYSTEM32\ctfmon.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe (Microsoft® Corporation)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O8 - Extra context menu item: E&xport; to Microsoft Excel - C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\SYSTEM32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\SYSTEM32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\SYSTEM32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\SYSTEM32\mswsock.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: ([]msn in My Computer)
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6…922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/…b?1129608989016 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1129609126444 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_08)
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_09)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_10)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\SYSTEM32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\SYSTEM32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\lid {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\SYSTEM32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\SYSTEM32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\SYSTEM32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\SYSTEM32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\SYSTEM32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\SYSTEM32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\SYSTEM32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\Userinit.exe) - C:\WINDOWS\SYSTEM32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\SYSTEM32\dimsntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\WRNotifier: DllName - WRLogonNTF.dll - File not found
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\SYSTEM32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\SYSTEM32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\SYSTEM32\webcheck.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\SYSTEM32\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\SYSTEM32\browseui.dll (Microsoft Corporation)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/08/21 00:39:48 | 000,000,074 | R— | M] () - E:\AUTORUN.INF – [ CDFS ]
O33 - MountPoints2\{3832df80-8a17-11df-9ceb-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{3832df80-8a17-11df-9ceb-00038a000015}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{3832df80-8a17-11df-9ceb-00038a000015}\Shell\AutoRun\command - "" = E:\VZAccess_Manager.exe – [2010/01/26 01:24:58 | 002,312,088 | R— | M] (Macrovision Corporation)
O33 - MountPoints2\{5101fdd0-3a5e-11dd-9cbd-00038a000015}\Shell\AutoRun\command - "" = E:\systematicPC.exe – File not found
O33 - MountPoints2\{5b0a2b82-8a1a-11df-9cec-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{5b0a2b82-8a1a-11df-9cec-00038a000015}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{5b0a2b82-8a1a-11df-9cec-00038a000015}\Shell\AutoRun\command - "" = E:\VZAccess_Manager.exe – [2010/01/26 01:24:58 | 002,312,088 | R— | M] (Macrovision Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010/08/11 00:21:01 | 000,574,976 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Test\Desktop\OTL.exe
[2010/08/11 00:04:26 | 000,050,688 | —- | C] (Atribune.org) – C:\Documents and Settings\Test\Desktop\ATF-Cleaner.exe
[2010/08/09 15:45:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Test\Application Data\Malwarebytes
[2010/08/09 15:40:55 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/08/09 15:40:38 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2010/08/09 15:38:39 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2010/08/09 15:38:34 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2010/08/08 17:03:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Test\Desktop\Financial Interests
[2010/08/08 17:01:02 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\hidserv.dll
[2010/07/23 23:57:18 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010/07/23 23:55:07 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/08/11 00:24:43 | 000,574,976 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Test\Desktop\OTL.exe
[2010/08/11 00:04:39 | 000,050,688 | —- | M] (Atribune.org) – C:\Documents and Settings\Test\Desktop\ATF-Cleaner.exe
[2010/08/09 23:03:04 | 000,001,089 | —- | M] () – C:\WINDOWS\WIN.INI
[2010/08/09 23:01:50 | 000,002,515 | —- | M] () – C:\Documents and Settings\Test\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Word 2003.lnk
[2010/08/09 16:15:54 | 000,001,170 | —- | M] () – C:\WINDOWS\System32\WPA.DBL
[2010/08/09 16:09:20 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/08/09 16:09:13 | 000,002,048 | –S- | M] () – C:\WINDOWS\BOOTSTAT.DAT
[2010/08/09 16:09:10 | 267,374,592 | -HS- | M] () – C:\hiberfil.sys
[2010/08/09 16:07:25 | 000,000,278 | -HS- | M] () – C:\Documents and Settings\Test\ntuser.ini
[2010/08/09 16:07:24 | 008,126,464 | -H– | M] () – C:\Documents and Settings\Test\NTUSER.DAT
[2010/08/09 15:41:19 | 000,000,696 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/08/09 15:25:28 | 000,000,482 | —- | M] () – C:\Documents and Settings\Test\Desktop\Shortcut to TFC.lnk
[2010/08/09 14:53:31 | 000,218,402 | —- | M] () – C:\Documents and Settings\Test\My Documents\TFC.exe
[2010/08/08 23:30:54 | 000,151,552 | —- | M] () – C:\Documents and Settings\Test\My Documents\HenryVit.doc
[2010/08/08 17:02:32 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2010/08/08 17:02:26 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2010/08/08 13:53:48 | 000,000,054 | —- | M] () – C:\WINDOWS\System32\rp_stats.dat
[2010/08/08 13:53:48 | 000,000,039 | —- | M] () – C:\WINDOWS\System32\rp_rules.dat
[2010/08/08 00:18:58 | 000,001,355 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/08/07 19:23:13 | 000,000,951 | —- | M] () – C:\Documents and Settings\Test\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/08/07 19:23:13 | 000,000,933 | —- | M] () – C:\Documents and Settings\Test\Desktop\Spybot.lnk
[2010/07/26 23:30:35 | 008,462,336 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shell32.dll
[2010/07/24 03:27:14 | 000,200,936 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/07/24 01:50:29 | 000,506,068 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2010/07/24 01:50:29 | 000,444,596 | —- | M] () – C:\WINDOWS\System32\PERFH009.DAT
[2010/07/24 01:50:29 | 000,072,306 | —- | M] () – C:\WINDOWS\System32\PERFC009.DAT
[2010/07/23 18:14:36 | 000,817,536 | —- | M] () – C:\Documents and Settings\Test\My Documents\C–Documents and Settings-Test-My Documents-C–MyFiles-Computer Issues.tif
[2010/07/23 18:14:14 | 000,083,314 | —- | M] () – C:\Documents and Settings\Test\My Documents\C–MyFiles-Computer Issues.tif
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/08/09 15:41:19 | 000,000,696 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/08/09 15:25:28 | 000,000,482 | —- | C] () – C:\Documents and Settings\Test\Desktop\Shortcut to TFC.lnk
[2010/08/09 14:47:41 | 000,218,402 | —- | C] () – C:\Documents and Settings\Test\My Documents\TFC.exe
[2010/08/08 22:11:19 | 000,151,552 | —- | C] () – C:\Documents and Settings\Test\My Documents\HenryVit.doc
[2010/08/08 17:02:32 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
[2010/08/08 17:02:26 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
[2010/08/08 13:53:48 | 000,000,054 | —- | C] () – C:\WINDOWS\System32\rp_stats.dat
[2010/08/08 13:53:48 | 000,000,039 | —- | C] () – C:\WINDOWS\System32\rp_rules.dat
[2010/08/07 19:23:13 | 000,000,951 | —- | C] () – C:\Documents and Settings\Test\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2010/08/07 19:23:13 | 000,000,933 | —- | C] () – C:\Documents and Settings\Test\Desktop\Spybot.lnk
[2010/07/23 18:14:34 | 000,817,536 | —- | C] () – C:\Documents and Settings\Test\My Documents\C–Documents and Settings-Test-My Documents-C–MyFiles-Computer Issues.tif
[2010/07/23 18:14:11 | 000,083,314 | —- | C] () – C:\Documents and Settings\Test\My Documents\C–MyFiles-Computer Issues.tif
[2006/08/24 21:13:39 | 000,071,749 | —- | C] () – C:\WINDOWS\hcextoutput.dll
[2006/08/24 21:13:39 | 000,000,823 | —- | C] () – C:\WINDOWS\tsc.ini
[2006/08/24 21:11:36 | 000,000,170 | —- | C] () – C:\WINDOWS\GetServer.ini
[2006/05/06 21:38:22 | 000,000,024 | —- | C] () – C:\WINDOWS\wininit.ini
[2006/03/09 22:54:47 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlSz.INI
[2006/01/29 15:36:08 | 000,000,790 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2006/01/03 19:57:39 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2005/11/19 13:45:44 | 000,000,099 | —- | C] () – C:\WINDOWS\upst.ini
[2005/11/17 13:40:31 | 000,000,051 | —- | C] () – C:\WINDOWS\iTouch.ini
[2005/10/19 16:50:45 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2005/10/17 19:39:43 | 000,000,029 | —- | C] () – C:\WINDOWS\atid.ini
[2005/10/17 19:19:58 | 000,000,006 | —- | C] () – C:\WINDOWS\msoffice.ini
[2003/01/07 15:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2002/01/11 09:24:30 | 000,000,047 | —- | C] () – C:\WINDOWS\winhlp32.ini
[2002/01/11 09:24:30 | 000,000,047 | —- | C] () – C:\WINDOWS\winhelp.ini
[2002/01/11 09:23:44 | 000,000,321 | —- | C] () – C:\WINDOWS\System32\cosmo.ini
[2002/01/11 09:23:37 | 000,069,632 | —- | C] () – C:\WINDOWS\System32\sx83p32.dll
[2002/01/11 09:23:03 | 000,017,552 | —- | C] () – C:\WINDOWS\System32\TTYTWIN.DRV
[2002/01/11 09:22:37 | 000,022,480 | —- | C] () – C:\WINDOWS\System32\PFMAPI16.DLL
[2002/01/11 09:22:37 | 000,020,992 | —- | C] () – C:\WINDOWS\System32\PFMAPI32.DLL
[2001/10/01 10:43:09 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2001/10/01 09:42:25 | 000,011,936 | —- | C] () – C:\WINDOWS\System32\Props16.dll
[2001/10/01 09:42:23 | 000,029,184 | —- | C] () – C:\WINDOWS\System32\wdmioctl.dll
[2001/10/01 09:42:20 | 000,028,672 | —- | C] () – C:\WINDOWS\System32\SynthCore11System.dll
[2001/09/19 14:36:48 | 000,000,336 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2001/09/05 00:11:16 | 000,032,336 | —- | C] () – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2001/09/05 00:11:04 | 000,020,960 | —- | C] () – C:\WINDOWS\System32\drivers\atinttxx.sys
[2001/09/05 00:10:58 | 000,011,760 | —- | C] () – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2001/09/05 00:10:52 | 000,011,280 | —- | C] () – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2001/09/05 00:10:46 | 000,032,848 | —- | C] () – C:\WINDOWS\System32\drivers\atinraxx.sys
[2001/09/05 00:10:22 | 000,060,464 | —- | C] () – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2001/09/05 00:09:04 | 000,065,008 | —- | C] () – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2001/09/05 00:08:12 | 000,032,064 | —- | C] () – C:\WINDOWS\System32\drivers\atintuxx.sys
[2001/08/25 12:20:30 | 000,000,859 | —- | C] () – C:\WINDOWS\ORUN32.INI
[2001/08/18 12:00:00 | 000,755,200 | —- | C] () – C:\WINDOWS\System32\ir50_32.dll
[2001/08/18 12:00:00 | 000,338,432 | —- | C] () – C:\WINDOWS\System32\ir41_qcx.dll
[2001/08/18 12:00:00 | 000,200,192 | —- | C] () – C:\WINDOWS\System32\ir50_qc.dll
[2001/08/18 12:00:00 | 000,183,808 | —- | C] () – C:\WINDOWS\System32\ir50_qcx.dll
[2001/08/18 12:00:00 | 000,120,320 | —- | C] () – C:\WINDOWS\System32\ir41_qc.dll
[2001/07/27 12:25:02 | 000,077,824 | —- | C] () – C:\WINDOWS\System32\SynTPCoI.dll
[1999/07/23 13:46:48 | 000,000,116 | —- | C] () – C:\WINDOWS\AuHCcup1.ini
[1999/07/23 10:53:20 | 000,129,536 | —- | C] () – C:\WINDOWS\AuHCcup1.dll

========== LOP Check ==========

[2009/04/03 09:24:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Avg7
[2005/10/18 23:20:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/07/07 15:55:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WEngineLite
[2009/04/02 23:36:43 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2008/06/15 19:08:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Test\Application Data\GlarySoft
[2005/11/19 09:46:27 | 000,000,000 | —D | M] – C:\Documents and Settings\Test\Application Data\Leadertech
[2006/03/11 23:14:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Test\Application Data\Musicmatch
[2005/10/17 22:52:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Test\Application Data\Prevx
[2006/05/06 21:03:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Test\Application Data\WholeSecurity
[2010/03/29 01:16:46 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2001/12/27 03:35:35 | 000,000,258 | —- | M] () – C:\WINDOWS\Tasks\Registration reminder 1.job
[2001/12/27 03:35:36 | 000,000,258 | —- | M] () – C:\WINDOWS\Tasks\Registration reminder 2.job

========== Purity Check ==========


< End of report >











OTL Extras logfile created on: 8/11/2010 12:25:50 AM - Run 1
OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and Settings\Test\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

255.00 Mb Total Physical Memory | 43.00 Mb Available Physical Memory | 17.00% Memory free
1,010.00 Mb Paging File | 585.00 Mb Available in Paging File | 58.00% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 18.62 Gb Total Space | 6.64 Gb Free Space | 35.66% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 42.62 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: COMPUTERNAME
Current User Name: Test
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.js [@ = jsfile] – C:\Corel\Suite8\Programs\CCWin\CSCAPE.EXE (Netscape Communications Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.hta [@ = htafile] – Reg Error: Key error. File not found
.html [@ = htmlfile] – Reg Error: Key error. File not found
.url [@ = InternetShortcut] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
jsfile [open] – C:\Corel\Suite8\Programs\CCWin\Cscape.exe (Netscape Communications Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5 – File not found
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"C:\Program Files\America Online 9.0\waol.exe" = C:\Program Files\America Online 9.0\waol.exe:*:Enabled:America Online 9.0 – (America Online, Inc.)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Application Loader – (America Online, Inc.)
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" = C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL – (America Online)
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" = C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL – (America Online)
"C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe" = C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe:*:Enabled:AOLTsMon – (America Online, Inc)
"C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe" = C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltpspd.exe:*:Enabled:AOLTopSpeed – (America Online Inc)
"C:\Program Files\Common Files\AOL\1132444223\EE\AOLServiceHost.exe" = C:\Program Files\Common Files\AOL\1132444223\EE\AOLServiceHost.exe:*:Enabled:AOL – (America Online, Inc.)
"C:\Program Files\Common Files\AOL\System Information\sinf.exe" = C:\Program Files\Common Files\AOL\System Information\sinf.exe:*:Enabled:AOL – (America Online Inc.)
"C:\Program Files\Common Files\AolCoach\en_en\player\AOLNySEV.exe" = C:\Program Files\Common Files\AolCoach\en_en\player\AOLNySEV.exe:*:Enabled:AOL – File not found
"C:\Program Files\Messenger\msmsgs.exe" = C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger – (Microsoft Corporation)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Computer, Inc.)
"C:\Program Files\MSN Messenger\msnmsgr.exe" = C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:MSN Messenger 7.5 – File not found
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03AAA1D8-D4CF-48BD-9C66-78B41D80DF06}" = Compaq Wallpaper
"{06FAFD58-1C21-4C90-A2FC-C9DC5A2A9D09}" = Verizon Wireless MiFi-2200 Firmware Updates
"{121634B0-2F4A-11D3-ADA3-00C04F52DD53}" = Windows Installer Clean Up
"{15EE79F4-4ED1-4267-9B0F-351009325D7D}" = HP Software Update
"{1E8CF57A-24E8-4A97-9564-A8F1956C447B}" = iTunes
"{1F7473D9-6C0B-4F5A-8FA4-AB8AD78CBE54}" = DocProc
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 17
"{29B50D30-EAFC-4cea-9F76-3A0E3729E9B0}" = SkinsHP1
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0150080}" = J2SE Runtime Environment 5.0 Update 8
"{3248F0A8-6813-11D6-A77B-00B0D0150090}" = J2SE Runtime Environment 5.0 Update 9
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3CF78481-FB7B-4B51-99A2-D5E0CD0B3AAF}" = HPSystemDiagnostics
"{3FF660F4-147B-48CB-B824-2B595759D9EF}" = VZAccess Manager
"{48242276-DB89-42e8-9678-BD4280D7B99A}" = Copy
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{723C033E-63EA-4227-BAB2-0AA8693C16EB}" = Director
"{745A92AF-53B4-41A7-91C3-9B026B1D5897}" = InstantShare
"{766273C1-A39B-47EB-ACE8-DEBDD8094BCC}" = overland
"{81DD5688-695A-4c1d-AE7D-368BF857725A}" = TrayApp
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{8EF1122E-E90C-4EE9-AB0C-7FDE2BA42C26}" = Musicmatch® Jukebox
"{91120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{929408E6-D265-4174-805F-81D1D914E2A4}" = QuickTime
"{93539D60-1817-11D1-9504-00805F26A89C}" = Easy Access Button Support
"{9B03C535-3AEA-4ef2-B326-0A01A2207034}" = CreativeProjects
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC2BA148-EE9C-4F1A-AFCE-F38C2C71D29B}" = Mobile Broadband Generic Drivers
"{AC76BA86-7AD7-1033-7B44-A70700000002}" = Adobe Reader 7.0.7
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BC339BFD-F550-471a-8D26-4D08126C62F7}" = SkinsHP2
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBE3E0AF-73BB-4c21-8B96-B09E003EDE7F}" = QuickProjects
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E8BFBD0A-8002-4dc9-869C-E495FA9DCE7A}" = PhotoGallery
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F8D0829C-9C6F-11D3-8080-00C04FA329AA}" = Microsoft Works 6.0
"{FBBF532A-47AC-457d-AC06-0D3163D8911E}" = WebReg
"{FF102450-55AA-4AE1-ACE4-E271E2470C83}" = hpmdtab
"Ad-Aware" = Ad-Aware
"AdobeESD" = Adobe Download Manager 2.0 (Remove Only)
"AOL Connectivity Services" = AOL Connectivity Services
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"ATI Display Driver" = ATI Display Driver
"Corel WordPerfect Suite 8" = Corel WordPerfect Suite 8
"HP Photo & Imaging" = HP Image Zone 3.5
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{1E8CF57A-24E8-4A97-9564-A8F1956C447B}" = iTunes
"InstallShield_{929408E6-D265-4174-805F-81D1D914E2A4}" = QuickTime
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mobile Broadband Generic Drivers" = Mobile Broadband Generic Drivers
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"RealPlayer 6.0" = RealPlayer
"Registry Repair_is1" = Glarysoft Registry Repair 2.7
"RSX2Uninst" = Intel RSX 3D
"ShockwaveFlash" = Macromedia Flash Player 8
"SoundMAX2" = SoundMAX2
"SynTPDeinstKey" = Synaptics TouchPad
"ViewpointMediaPlayer" = Viewpoint Media Player (Remove Only)
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 3

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 5/8/2006 1:05:20 AM | Computer Name = COMPUTERNAME | Source = EventSystem | ID = 4609
Description = The COM+ Event System detected a bad return code during its internal
processing. HRESULT was C0000005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.
Please contact Microsoft Product Support Services to report this erro

Error - 5/8/2006 12:55:35 PM | Computer Name = COMPUTERNAME | Source = EventSystem | ID = 4609
Description = The COM+ Event System detected a bad return code during its internal
processing. HRESULT was C0000005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.
Please contact Microsoft Product Support Services to report this erro

Error - 5/8/2006 1:17:16 PM | Computer Name = COMPUTERNAME | Source = EventSystem | ID = 4609
Description = The COM+ Event System detected a bad return code during its internal
processing. HRESULT was C0000005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.
Please contact Microsoft Product Support Services to report this erro

Error - 5/8/2006 4:39:12 PM | Computer Name = COMPUTERNAME | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This operation returned because the timeout period expired.

Error - 5/8/2006 4:39:13 PM | Computer Name = COMPUTERNAME | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: This operation returned because the timeout period expired.

Error - 5/8/2006 7:11:50 PM | Computer Name = COMPUTERNAME | Source = EventSystem | ID = 4609
Description = The COM+ Event System detected a bad return code during its internal
processing. HRESULT was C0000005 from line 44 of d:\qxp_slp\com\com1x\src\events\tier1\eventsystemobj.cpp.
Please contact Microsoft Product Support Services to report this erro

Error - 5/8/2006 8:20:57 PM | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000
Description = Faulting application uninstaller.exe, version 1.1.42.1, faulting module
uninstaller.exe, version 1.1.42.1, fault address 0x00002f94.

Error - 5/8/2006 8:21:11 PM | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1001
Description = Fault bucket 251828008.

Error - 5/8/2006 9:54:55 PM | Computer Name = COMPUTERNAME | Source = Application Hang | ID = 1002
Description = Hanging application WPWIN8.EXE, version 8.0.0.393, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 5/8/2006 9:55:13 PM | Computer Name = COMPUTERNAME | Source = Application Hang | ID = 1001
Description = Fault bucket 02592262.

[ System Events ]
Error - 7/7/2010 5:59:38 PM | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7011
Description = Timeout (30000 milliseconds) waiting for a transaction response from
the RasAuto service.

Error - 7/7/2010 6:00:08 PM | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7011
Description = Timeout (30000 milliseconds) waiting for a transaction response from
the wuauserv service.

Error - 7/7/2010 6:03:28 PM | Computer Name = COMPUTERNAME | Source = Windows Update Agent | ID = 16
Description = Unable to Connect: Windows is unable to connect to the automatic updates
service and therefore cannot download and install updates according to the set
schedule. Windows will continue to try to establish a connection.

Error - 7/23/2010 8:55:31 PM | Computer Name = COMPUTERNAME | Source = Windows Update Agent | ID = 16
Description = Unable to Connect: Windows is unable to connect to the automatic updates
service and therefore cannot download and install updates according to the set
schedule. Windows will continue to try to establish a connection.

Error - 8/8/2010 3:13:13 AM | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7011
Description = Timeout (30000 milliseconds) waiting for a transaction response from
the Dnscache service.

Error - 8/9/2010 7:06:27 PM | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7011
Description = Timeout (30000 milliseconds) waiting for a transaction response from
the Dnscache service.

Error - 8/10/2010 1:10:49 AM | Computer Name = COMPUTERNAME | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk0\D.

Error - 8/10/2010 7:16:08 PM | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7011
Description = Timeout (30000 milliseconds) waiting for a transaction response from
the Dnscache service.

Error - 8/11/2010 12:25:01 AM | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7011
Description = Timeout (30000 milliseconds) waiting for a transaction response from
the Dnscache service.

Error - 8/11/2010 12:49:40 AM | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7031
Description = The AOL TopSpeed Monitor service terminated unexpectedly. It has
done this 1 time(s). The following corrective action will be taken in 1000 milliseconds:
Restart the service.


< End of report >

Attachments:

Post #7
oh, and you're correct – I was mistaking "memory" for "hard drive" – I call the hard drive pie "the pink pie" – the pie seems all wrong to me – can you see it? do you do that "remote" tech stuff?
Post #8
Good Morning,

No we don't do any remote access. I am not looking at anything bad on your system but this is my take on it.

1.
All this system has is 256 MB of ram, that is the bare minimum for windows to run, start adding a program or two and the system will come to a crawl. Most of these systems about the time you bought this came with that amount as the manufacturers where trying to keep the price down to make a sale. Upgrading memory is a no brainer, it comes in a little circuit board and just snaps into a slot. It may be a bit hard to find memory for this computer considering the age, but you can try here.

http://www.crucial.com/

Download the Advisor, let it scan your system and it will tell you whats installed and whats available for upgrade. I am guessing this computer has 2 slots with one filled with 256, adding another 256 would bring you up to 512 MBs and make a small difference, my suggestion would be remove the one you have now and buy 2 512s bringing you up to 1024 and then you would see a big difference. The question is if this computer at this age will accept the larger amount, the advisor will tell you. If you cant do it there must be a local kid that can install it for you.



2.
The other thing comes along with computers purchased in this time period, you have a very small hard drive, its only 18GB but you do have about 1/3 rd of it free which is fine, but if you start installing programs its going to fill up fast. Installing a new HD would be a problem because you would have to reinstall the operating system along with all you programs and files and with the age of this computer it may be hard to find one compatible .



3.
If you dont use AOL, get rid of it all, its taking up a lot of hard disk space , you can remove it all via add remove programs. Read an artical a few years back in PCWorld mag, it listed the 10 best and 10 worst software programs , you guessed it , AOL came in first place as the worst software.



4.
The current version of Java right now is version 21, here are instructions for updating it, follow the instructions and uninstall all the old versions as these are taking up HD space also.

Download the latest version Here save it, do not install it yet.

Java SE Runtime Environment (JRE)JRE 6 Update 21 <–The wording is confusing but this is what you need

  • Go to your Add Remove Programs in the Control Panel and uninstall any previous versions of Java
  • Reboot your computer
  • Install the latest version
You can verify the installation Here




5.
As far as what else to remove, thats a job for the windows team, you can post and ask them, link them to this thread as the second part of OTL shows all your installed programs


Ken :)
Post #9
Dear Ken: I'm responding to your numbered responses:

1 & 2: Wow – scary – overwhelming (I know you think it's no brainer stuff, but it pretty much makes me want to light myself on fire and run into the freeway screaming!). I'm really overwhelmed, too, by the fact that you say they made these laptops with little hard drive capacity so they could keep them cheap – but the store clerk told me it was the second to the top of the line and I paid $2,700.00 for this laptop (the top of the line one was $3,200) – and that's not counting the $500+ extra warranty they conned me into buying on top of it (just before permanently going out of business) – AND IT'S GOT THE HARD DRIVE EQUIVALENT OF A PEA?! Unbelieveable what suckers we layperson consumers are….


I think I have come to face the reality of the situation, and that is I have to find a way to buy a new computer. What do you think of my getting an Apple computer (Mac) instead? HP has always caused me nothing but grief (since my first computer purchased in 1998 to all the rest of the HP nightmares I've dealt with since then), and I heard Macs can't get viruses and bad stuff doesn't happen to them.


However, I just bought the aforementioned HP printer less than a year ago – will my 2009 HP Officejet Pro L7680 All-in-One be compatible with a new Apple desktop? (Here is a link to the printer I have:
http://www.shopping.hp.com/webapp/shopping…g=en&cc=us)


Moreover, will my 2003 Samsung syncmaster 213t screen work with a Mac?


And, if you say a Mac's a good idea, will it be easy to learn? And how will I know WHICH Apple desktop to buy?





3. Pretty much my entire world is centered around AOL – I've been a slave to AOL since I first got it back in 1998, and I can't find a way to get away from it, because I can't get the stuff off the hard drive – the only way to get the stuff in the AOL file cabinets is through that dead PC I have. Trust me – there's nothing I'd like more than to be rid of AOL software forever, because I know how bad it is for the computer. I have the paid version, and the AOL file cabinet, which is on my dead PC, contains so much important stuff I can hardly think about it without hyperventilating (knowing I'm going to have to pay someone I don't know or trust, to try get it (not to mention have him put it on a new computer) makes me further hyperventilate).





4. I can't find a way to "save" the Java to my desktop (it only wants to run the install). Also, it appears as if I also should have JDK (along with the JRE) – you're absolutely correct – the language on that site is awfully confusing. Please advise.



THANKS AGAIN KEN – I WISH YOU LIVED HERE SO I COULD JUST BRING MY COMPUTER TROUBLES TO YOU AND PAY YOU TO DEAL WITH IT ALL, AS I FEEL YOU'RE NOT ONLY COMPETENT, BUT TRUSTWORTHY!
Post #10
Hi, My apologies, I didn't mean to imply that your computer was low end, actually for that time period it really was not that bad. Back in that day the hard drives where small and depending on the system not much memory was added, when you bought it you did buy the lowest amount you could get, there was most likely an option to upgrade it during the purchase that you may have missed. As far as a Mac, I am not a Mac person, know very little about them. I was in Nantucket a few months ago visiting a friend who had just bought the new IMac Pro laptop and I was amazed at the speed of this thing. I was able to copy all his photos and documents from his older HP laptop to my thumb drive and transfer it all over to the Mac, it went surprisingly well. I believe he paid around $1800 for it. A gal in my office just bought the one that has the computer and all built right into the screen, its all one unit. She went to the local mall that had an Apple Store and they actually had a class on how to use them. She appears real happy with it. You may want to think about finding an Apple store in your area and go ask them about the different models as I am really not familiar with them. If I was in your shoes , whether a Mac or a windows based computer , I would think about getting a new one, your going to sink cash into the old one and it may not be worth it. My company uses all Dells and has for many years and so far they have been pretty reliable. A problem here and there but its expected out of over 100 computers. You should be able to pick up a nice laptop with the new Windows 7 for a $1000 or so. Ken
Post #11
Hey Ken – thanks for the detailed response – I've been comparison shopping since we last spoke – gotta find the money next! So, what do you think about those big touchscreen computers? Are they just glorified laptops? I definitely don't want a laptop – I want either a tower to go with my big beautiful Samsung LCD screen, or something that won't hurt my carpal tunnel (like the touchscreens). And something that will play blueray movies. Speaking of movies, do you think I might've hurt my PC playing rented DVDs in it? Can you get a virus from a Redbox rental? And, finally, I want you to know that this laptop (the one referred to in the subject/topic heading of this thread) is running a whole lot better since your ATF clean – do you think we should try to find an AV program that runs in real time for it? And, how often should I run TFC? Please advise. THANKS!
Post #13
You can run ATF cleaner as often as you like, once a week is fine, it just cleans out all the junk that accumulates from day to day.

You can try installing one of these free programs, but just One AV and One Firewall is what you need, more is overkill and can cause problems

Free Anti Virus Programs




Free Firewalls



In lew of one of the AVs above, I have been having good luck with this one
http://www.microsoft.com/security_essentials/



This forum is for the removal of malware so as busy as I am with my students and live users this is as far as I can go, I would suggest you use one of our other forums for any questions you may have related to new computers. Not that I have not enjoyed helping you, you have been a pleasure.

Ken :)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI