SweetTech,
Thank you so much for your response and help.
OK, Here goes.
First, just a quick comment, when I ran the Rootkit Unhooker Scan, I let it run on all of my drives (that is mine and the drives from my wife's computer that I plugged into my system). Each drive gave an error message "Error Starting Helper Service" but I clicked through it.
Here is the Report:
RkU Version: 3.8.388.590, Type LE (SR2)
==============================================
OS Name: Windows XP
Version 5.1.2600 (Service Pack 2)
Number of processors #2
==============================================
>Drivers
==============================================
0xAA5A2000 C:\WINDOWS\system32\drivers\RtkHDAud.sys 2220032 bytes (Realtek Semiconductor Corp., Realtek® High Definition Audio Function Driver)
0x804D7000 C:\WINDOWS\system32\ntkrnlpa.exe 2142208 bytes (Microsoft Corporation, NT Kernel & System)
0x804D7000 PnpManager 2142208 bytes
0x804D7000 RAW 2142208 bytes
0x804D7000 WMIxWDM 2142208 bytes
0xBF800000 Win32k 1839104 bytes
0xBF800000 C:\WINDOWS\System32\win32k.sys 1839104 bytes (Microsoft Corporation, Multi-User Win32 Driver)
0xA7FB5000 C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100920.002\NAVEX15.SYS 1359872 bytes (Symantec Corporation, AV Engine)
0xF7F93000 C:\WINDOWS\system32\DRIVERS\AGRSM.sys 1269760 bytes (Agere Systems, SoftModem Device Driver)
0xBF064000 C:\WINDOWS\System32\ialmdd5.DLL 790528 bytes (Intel Corporation, DirectDraw® Driver for Intel® Graphics Technology)
0xF8124000 C:\WINDOWS\system32\DRIVERS\ialmnt5.sys 741376 bytes (Intel Corporation, Intel Graphics Miniport Driver)
0xAA036000 C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20100901.003\BHDrvx86.sys 704512 bytes (Symantec Corporation, BASH Driver)
0xF8269000 Ntfs.sys 577536 bytes (Microsoft Corporation, NT File System Driver)
0xAA0E2000 C:\WINDOWS\system32\drivers\N360\0402000.00C\ccHPx86.sys 520192 bytes (Symantec Corporation, Common Client Hash Provider Driver)
0xAA1DC000 C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 454656 bytes (Microsoft Corporation, Windows NT SMB Minirdr)
0xAA17E000 C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 385024 bytes (Symantec Corporation, Symantec Eraser Control Driver)
0xAA42E000 C:\WINDOWS\system32\DRIVERS\tcpip.sys 360448 bytes (Microsoft Corporation, TCP/IP Protocol Driver)
0xA9238000 C:\WINDOWS\System32\Drivers\N360\0402000.00C\SRTSP.SYS 356352 bytes (Symantec Corporation, Symantec AutoProtect)
0xAA3AF000 C:\WINDOWS\System32\Drivers\N360\0402000.00C\SYMTDI.SYS 356352 bytes (Symantec Corporation, Network Dispatch Driver)
0xF834C000 SYMDS.SYS 352256 bytes
0xAA314000 C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20100917.001\IDSxpx86.sys 348160 bytes (Symantec Corporation, IDS Core Driver)
0xA98C8000 C:\WINDOWS\system32\DRIVERS\srv.sys 339968 bytes (Microsoft Corporation, Server driver)
0xA8713000 C:\WINDOWS\System32\Drivers\HTTP.sys 266240 bytes (Microsoft Corporation, HTTP Protocol Stack)
0xAA2B8000 C:\WINDOWS\system32\DRIVERS\LV561AV.SYS 212992 bytes (Logitech Inc., Logitech Elch 2 Video Driver)
0xF7E38000 C:\WINDOWS\system32\DRIVERS\update.sys 212992 bytes (Microsoft Corporation, Update Driver)
0xF8444000 ACPI.sys 188416 bytes (Microsoft Corporation, ACPI Driver for NT)
0xA9AFB000 C:\WINDOWS\system32\DRIVERS\mrxdav.sys 184320 bytes (Microsoft Corporation, Windows NT WebDav Minirdr)
0xF823C000 NDIS.sys 184320 bytes (Microsoft Corporation, NDIS 5.1 wrapper driver)
0xF830D000 SYMEFA.SYS 184320 bytes
0xAA24B000 C:\WINDOWS\system32\DRIVERS\rdbss.sys 180224 bytes (Microsoft Corporation, Redirected Drive Buffering SubSystem Driver)
0xA7E0D000 C:\WINDOWS\system32\drivers\kmixer.sys 172032 bytes (Microsoft Corporation, Kernel Mode Audio Mixer)
0xAA2EC000 C:\WINDOWS\system32\DRIVERS\netbt.sys 163840 bytes (Microsoft Corporation, MBT Transport driver)
0xBF03E000 C:\WINDOWS\System32\ialmdev5.DLL 155648 bytes (Intel Corporation, Component GHAL Driver)
0xAA369000 C:\WINDOWS\system32\Drivers\SYMEVENT.SYS 151552 bytes (Symantec Corporation, Symantec Event Library)
0xF80EC000 C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 147456 bytes (Windows ® Server 2003 DDK provider, High Definition Audio Bus Driver v1.0)
0xA9F4B000 C:\WINDOWS\System32\Drivers\Fastfat.SYS 143360 bytes (Microsoft Corporation, Fast FAT File System Driver)
0xF83D9000 fasttx2k.sys 143360 bytes (Promise Technology, Inc., Promise FastTrak Series Driver for WindowsXP)
0xF7F5C000 C:\WINDOWS\system32\DRIVERS\ks.sys 143360 bytes (Microsoft Corporation, Kernel CSA Library)
0xF80C9000 C:\WINDOWS\system32\DRIVERS\USBPORT.SYS 143360 bytes (Microsoft Corporation, USB 1.1 & 2.0 Port Driver)
0xAA296000 C:\WINDOWS\System32\drivers\afd.sys 139264 bytes (Microsoft Corporation, Ancillary Function Driver for WinSock)
0xAA38E000 C:\WINDOWS\system32\DRIVERS\ipnat.sys 135168 bytes (Microsoft Corporation, IP Network Address Translator)
0xAA581000 C:\WINDOWS\system32\drivers\portcls.sys 135168 bytes (Microsoft Corporation, Port Class (Class Driver for Port/Miniport Devices))
0x806E2000 ACPI_HAL 134400 bytes
0x806E2000 C:\WINDOWS\system32\hal.dll 134400 bytes (Microsoft Corporation, Hardware Abstraction Layer DLL)
0xF83A2000 fltMgr.sys 126976 bytes (Microsoft Corporation, Microsoft Filesystem Filter Manager)
0xF8414000 ftdisk.sys 126976 bytes (Microsoft Corporation, FT Disk Driver)
0xAA277000 C:\WINDOWS\system32\drivers\N360\0402000.00C\Ironx86.SYS 126976 bytes (Symantec Corporation, Iron Driver)
0xBF020000 C:\WINDOWS\System32\ialmdnt5.dll 122880 bytes (Intel Corporation, Controller Hub for Intel Graphics Driver)
0xAA161000 C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 118784 bytes (Symantec Corporation, Symantec Eraser Utility Driver)
0xF8221000 Mup.sys 110592 bytes (Microsoft Corporation, Multiple UNC Provider driver)
0xF83FC000 atapi.sys 98304 bytes (Microsoft Corporation, IDE/ATAPI Port Driver)
0xA9F22000 C:\WINDOWS\System32\Drivers\dump_atapi.sys 98304 bytes
0xF83C1000 C:\WINDOWS\system32\DRIVERS\SCSIPORT.SYS 98304 bytes (Microsoft Corporation, SCSI Port Driver)
0xF82F6000 KSecDD.sys 94208 bytes (Microsoft Corporation, Kernel Security Support Provider Interface)
0xF7E7D000 C:\WINDOWS\system32\DRIVERS\ndiswan.sys 94208 bytes (Microsoft Corporation, MS PPP Framing Driver (Strong Encryption))
0xA9B9D000 C:\WINDOWS\system32\drivers\wdmaud.sys 86016 bytes (Microsoft Corporation, MMSYSTEM Wave/Midi API mapper)
0xA7FA1000 C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100920.002\NAVENG.SYS 81920 bytes (Symantec Corporation, AV Engine)
0xF7F7F000 C:\WINDOWS\system32\DRIVERS\parport.sys 81920 bytes (Microsoft Corporation, Parallel Port Driver)
0xF8110000 C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS 81920 bytes (Microsoft Corporation, Video Port Driver)
0xAA486000 C:\WINDOWS\system32\DRIVERS\ipsec.sys 77824 bytes (Microsoft Corporation, IPSec Driver)
0xBF000000 C:\WINDOWS\System32\drivers\dxg.sys 73728 bytes (Microsoft Corporation, DirectX Graphics Driver)
0xF833A000 sr.sys 73728 bytes (Microsoft Corporation, System Restore Filesystem Filter Driver)
0xF8433000 pci.sys 69632 bytes (Microsoft Corporation, NT Plug and Play PCI Enumerator)
0xF7E6C000 C:\WINDOWS\system32\DRIVERS\psched.sys 69632 bytes (Microsoft Corporation, MS QoS Packet Scheduler)
0xA9F3A000 C:\WINDOWS\System32\Drivers\Udfs.SYS 69632 bytes (Microsoft Corporation, UDF File System Driver)
0xA9BFA000 C:\WINDOWS\System32\Drivers\Cdfs.SYS 65536 bytes (Microsoft Corporation, CD-ROM File System Driver)
0xF8653000 C:\WINDOWS\system32\DRIVERS\nic1394.sys 65536 bytes (Microsoft Corporation, IEEE1394 Ndis Miniport and Call Manager)
0xF7F4C000 C:\WINDOWS\system32\DRIVERS\arp1394.sys 61440 bytes (Microsoft Corporation, IP/1394 Arp Client)
0xF87B3000 C:\WINDOWS\system32\drivers\drmk.sys 61440 bytes (Microsoft Corporation, Microsoft Kernel DRM Descrambler Filter)
0xF85C3000 Lbd.sys 61440 bytes (Lavasoft AB, Boot Driver)
0xF85F3000 ohci1394.sys 61440 bytes (Microsoft Corporation, 1394 OpenHCI Port Driver)
0xF86A3000 C:\WINDOWS\system32\DRIVERS\redbook.sys 61440 bytes (Microsoft Corporation, Redbook Audio Filter Driver)
0xA9CEA000 C:\WINDOWS\system32\drivers\sysaudio.sys 61440 bytes (Microsoft Corporation, System Audio WDM Filter)
0xF87C3000 C:\WINDOWS\system32\DRIVERS\usbhub.sys 61440 bytes (Microsoft Corporation, Default Hub Driver for USB)
0xBF012000 C:\WINDOWS\System32\ialmrnt5.dll 57344 bytes (Intel Corporation, Controller Hub for Intel Graphics Driver)
0xF8603000 C:\WINDOWS\system32\DRIVERS\1394BUS.SYS 53248 bytes (Microsoft Corporation, 1394 Bus Device Driver)
0xF8693000 C:\WINDOWS\system32\DRIVERS\cdrom.sys 53248 bytes (Microsoft Corporation, SCSI CD-ROM Driver)
0xF85B3000 C:\WINDOWS\system32\DRIVERS\CLASSPNP.SYS 53248 bytes (Microsoft Corporation, SCSI Class System Dll)
0xF7EBC000 C:\WINDOWS\system32\DRIVERS\HPZid412.sys 53248 bytes (HP, IEEE-1284.4-1999 Driver (Windows 2000))
0xF8683000 C:\WINDOWS\system32\DRIVERS\i8042prt.sys 53248 bytes (Microsoft Corporation, i8042 Port Driver)
0xF8723000 C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 53248 bytes (Microsoft Corporation, RAS L2TP mini-port/call-manager driver)
0xF8593000 VolSnap.sys 53248 bytes (Microsoft Corporation, Volume Shadow Copy Driver)
0xF8763000 C:\WINDOWS\System32\Drivers\pcouffin.sys 49152 bytes (VSO Software, low level access layer for CD/DVD/BD devices)
0xF8673000 C:\WINDOWS\system32\DRIVERS\R8139n51.SYS 49152 bytes (Realtek Semiconductor Corporation , Realtek RTL8139/810x Family NDIS 5.1 Drv)
0xF8743000 C:\WINDOWS\system32\DRIVERS\raspptp.sys 49152 bytes (Microsoft Corporation, Peer-to-Peer Tunneling Protocol)
0xF7F2C000 C:\WINDOWS\system32\DRIVERS\STREAM.SYS 49152 bytes (Microsoft Corporation, WDM CODEC Class Device Driver 2.0)
0xF86B3000 C:\WINDOWS\system32\DRIVERS\imapi.sys 45056 bytes (Microsoft Corporation, IMAPI Kernel Driver)
0xF7F3C000 C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys 45056 bytes (Logitech Inc., USB Statistic Driver)
0xF8583000 MountMgr.sys 45056 bytes (Microsoft Corporation, Mount Manager)
0xF8733000 C:\WINDOWS\system32\DRIVERS\raspppoe.sys 45056 bytes (Microsoft Corporation, RAS PPPoE mini-port/call-manager driver)
0xF8783000 C:\WINDOWS\System32\Drivers\NDProxy.SYS 40960 bytes (Microsoft Corporation, NDIS Proxy)
0xF85E3000 SISAGPX.sys 40960 bytes (Silicon Integrated Systems Corporation, SiS AGPv3.5 Filter)
0xF7EDC000 C:\WINDOWS\system32\drivers\N360\0402000.00C\SRTSPX.SYS 40960 bytes (Symantec Corporation, Symantec AutoProtect)
0xF8773000 C:\WINDOWS\system32\DRIVERS\termdd.sys 40960 bytes (Microsoft Corporation, Terminal Server Driver)
0xF85A3000 disk.sys 36864 bytes (Microsoft Corporation, PnP Disk Driver)
0xF7ECC000 C:\WINDOWS\System32\Drivers\Fips.SYS 36864 bytes (Microsoft Corporation, FIPS Crypto Driver)
0xF8663000 C:\WINDOWS\system32\DRIVERS\intelppm.sys 36864 bytes (Microsoft Corporation, Processor Device Driver)
0xF8573000 isapnp.sys 36864 bytes (Microsoft Corporation, PNP ISA Bus Driver)
0xF8753000 C:\WINDOWS\system32\DRIVERS\msgpc.sys 36864 bytes (Microsoft Corporation, MS General Packet Classifier)
0xF7F1C000 C:\WINDOWS\system32\DRIVERS\netbios.sys 36864 bytes (Microsoft Corporation, NetBIOS interface driver)
0xA7EA7000 C:\WINDOWS\System32\Drivers\Normandy.SYS 36864 bytes (RKU Driver)
0xF85D3000 PxHelp20.sys 36864 bytes (Sonic Solutions, Px Engine Device Driver for Windows 2000/XP)
0xF87E3000 C:\WINDOWS\system32\DRIVERS\wanarp.sys 36864 bytes (Microsoft Corporation, MS Remote Access and Routing ARP Driver)
0xF8893000 C:\WINDOWS\System32\Drivers\Modem.SYS 32768 bytes (Microsoft Corporation, Modem Device Driver)
0xF896B000 C:\WINDOWS\System32\Drivers\Npfs.SYS 32768 bytes (Microsoft Corporation, NPFS Driver)
0xF888B000 C:\WINDOWS\system32\DRIVERS\usbccgp.sys 32768 bytes (Microsoft Corporation, USB Common Class Generic Parent Driver)
0xF87F3000 C:\WINDOWS\system32\DRIVERS\PCIIDEX.SYS 28672 bytes (Microsoft Corporation, PCI IDE Bus Driver Extension)
0xF8873000 C:\WINDOWS\system32\DRIVERS\usbehci.sys 28672 bytes (Microsoft Corporation, EHCI eUSB Miniport Driver)
0xF88BB000 C:\WINDOWS\system32\DRIVERS\usbprint.sys 28672 bytes (Microsoft Corporation, USB Printer driver)
0xF887B000 C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 28672 bytes (Microsoft Corporation, USB Mass Storage Class Driver)
0xF8803000 viaagp1.sys 28672 bytes (VIA Technologies, Inc., VIA NT AGP Filter)
0xF88D3000 C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys 24576 bytes (GEAR Software Inc., CD DVD Filter)
0xF88CB000 C:\WINDOWS\system32\DRIVERS\HPZius12.sys 24576 bytes (HP, 1284.4<->Usb Datalink Driver (Windows 2000))
0xF88B3000 C:\WINDOWS\system32\drivers\iviaspi.sys 24576 bytes (InterVideo, Inc., InterVideo ASPI Shell)
0xF889B000 C:\WINDOWS\system32\DRIVERS\kbdclass.sys 24576 bytes (Microsoft Corporation, Keyboard Class Driver)
0xF88A3000 C:\WINDOWS\system32\DRIVERS\mouclass.sys 24576 bytes (Microsoft Corporation, Mouse Class Driver)
0xF894B000 C:\WINDOWS\System32\drivers\vga.sys 24576 bytes (Microsoft Corporation, VGA/Super VGA Video Driver)
0xF895B000 C:\WINDOWS\System32\Drivers\Msfs.SYS 20480 bytes (Microsoft Corporation, Mailslot driver)
0xF87FB000 PartMgr.sys 20480 bytes (Microsoft Corporation, Partition Manager)
0xF8903000 C:\WINDOWS\system32\DRIVERS\ptilink.sys 20480 bytes (Parallel Technologies, Inc., Parallel Technologies DirectParallel IO Library)
0xF8913000 C:\WINDOWS\system32\DRIVERS\raspti.sys 20480 bytes (Microsoft Corporation, PTI DirectParallel® mini-port/call-manager driver)
0xF88F3000 C:\WINDOWS\system32\DRIVERS\TDI.SYS 20480 bytes (Microsoft Corporation, TDI Wrapper)
0xF886B000 C:\WINDOWS\system32\DRIVERS\usbuhci.sys 20480 bytes (Microsoft Corporation, UHCI USB Miniport Driver)
0xF8963000 C:\WINDOWS\System32\watchdog.sys 20480 bytes (Microsoft Corporation, Watchdog Driver)
0xF8A5B000 C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 16384 bytes (HP, IEEE-1284.4-1999 Print Class Driver)
0xF8A5F000 C:\WINDOWS\system32\DRIVERS\mssmbios.sys 16384 bytes (Microsoft Corporation, System Management BIOS Driver)
0xA9E96000 C:\WINDOWS\system32\DRIVERS\ndisuio.sys 16384 bytes (Microsoft Corporation, NDIS User mode I/O Driver)
0xF8A27000 C:\WINDOWS\system32\DRIVERS\PS2.sys 16384 bytes (Hewlett-Packard Company, PS2 SYS)
0xF7EA0000 C:\WINDOWS\system32\DRIVERS\srvkp.sys 16384 bytes (Silicon Integrated Systems Corporation, SiS VGA Driver Manager)
0xF7EAC000 C:\WINDOWS\system32\DRIVERS\usbscan.sys 16384 bytes (Microsoft Corporation, USB Scanner Driver)
0xF8983000 C:\WINDOWS\system32\BOOTVID.dll 12288 bytes (Microsoft Corporation, VGA Boot Driver)
0xF7EB8000 C:\WINDOWS\System32\drivers\Dxapi.sys 12288 bytes (Microsoft Corporation, DirectX API Driver)
0xF8A47000 C:\WINDOWS\system32\DRIVERS\ndistapi.sys 12288 bytes (Microsoft Corporation, NDIS 3.0 connection wrapper driver)
0xF8A2F000 C:\WINDOWS\system32\drivers\pfc.sys 12288 bytes (Padus, Inc., Padus® ASPI Shell)
0xF8A0F000 C:\WINDOWS\system32\DRIVERS\rasacd.sys 12288 bytes (Microsoft Corporation, RAS Automatic Connection Driver)
0xF8AB9000 C:\WINDOWS\System32\Drivers\Beep.SYS 8192 bytes (Microsoft Corporation, BEEP Driver)
0xF8B0B000 C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS 8192 bytes
0xF8AB5000 C:\WINDOWS\System32\Drivers\Fs_Rec.SYS 8192 bytes (Microsoft Corporation, File System Recognizer Driver)
0xF8A77000 intelide.sys 8192 bytes (Microsoft Corporation, Intel PCI IDE Driver)
0xF8A73000 C:\WINDOWS\system32\KDCOM.DLL 8192 bytes (Microsoft Corporation, Kernel Debugger HW Extension DLL)
0xF8ABD000 C:\WINDOWS\System32\Drivers\mnmdd.SYS 8192 bytes (Microsoft Corporation, Frame buffer simulator)
0xF8AC1000 C:\WINDOWS\System32\DRIVERS\RDPCDD.sys 8192 bytes (Microsoft Corporation, RDP Miniport)
0xF8A8B000 C:\WINDOWS\system32\DRIVERS\serscan.sys 8192 bytes (Microsoft Corporation, Serial Imaging Device Driver)
0xF8AA5000 C:\WINDOWS\system32\DRIVERS\swenum.sys 8192 bytes (Microsoft Corporation, Plug and Play Software Device Enumerator)
0xF8AB1000 C:\WINDOWS\system32\DRIVERS\USBD.SYS 8192 bytes (Microsoft Corporation, Universal Serial Bus Driver)
0xF8A75000 C:\WINDOWS\system32\DRIVERS\WMILIB.SYS 8192 bytes (Microsoft Corporation, WMILIB WMI support library Dll)
0xF8BC8000 C:\WINDOWS\system32\DRIVERS\audstub.sys 4096 bytes (Microsoft Corporation, AudStub Driver)
0xF8BCC000 C:\WINDOWS\System32\drivers\dxgthk.sys 4096 bytes (Microsoft Corporation, DirectX Graphics Driver Thunk)
0xF8C12000 C:\WINDOWS\System32\Drivers\Null.SYS 4096 bytes (Microsoft Corporation, NULL Driver)
==============================================
>Stealth
==============================================
==============================================
>Files
==============================================
==============================================
>Hooks
==============================================
ntkrnlpa.exe+0x0002C880, Type: Inline - RelativeCall 0x80503880–>D8D21C0F [unknown_code_page]
ntkrnlpa.exe+0x0002CB38, Type: Inline - RelativeJump 0x80503B38–>FDC05081 [unknown_code_page]
ntkrnlpa.exe+0x0006DC5E, Type: Inline - RelativeJump 0x80544C5E–>80544C65 [ntkrnlpa.exe]
[1236]firefox.exe–>ntdll.dll–>LdrLoadDll, Type: Inline - RelativeJump 0x7C9161CA–>00000000 [unknown_code_page]
[3916]plugin-container.exe–>user32.dll–>TrackPopupMenu, Type: Inline - RelativeJump 0x77D94F16–>00000000 [xul.dll]
[4224]iexplore.exe–>ntdll.dll+0x000161C5, Type: Inline - RelativeJump 0x7C9161C5–>00000000 [unknown_code_page]
[4224]iexplore.exe–>ntdll.dll–>LdrLoadDll, Type: Inline - RelativeJump 0x7C9161CA–>00000000 [ntdll.dll]
[4224]iexplore.exe–>user32.dll–>DialogBoxIndirectParamA, Type: Inline - RelativeJump 0x77D86CED–>00000000 [ieframe.dll]
[4224]iexplore.exe–>user32.dll–>DialogBoxIndirectParamW, Type: Inline - RelativeJump 0x77D62598–>00000000 [ieframe.dll]
[4224]iexplore.exe–>user32.dll–>DialogBoxParamA, Type: Inline - RelativeJump 0x77D588E1–>00000000 [ieframe.dll]
[4224]iexplore.exe–>user32.dll–>DialogBoxParamW, Type: Inline - RelativeJump 0x77D56702–>00000000 [ieframe.dll]
[4224]iexplore.exe–>user32.dll–>MessageBoxExA, Type: Inline - RelativeJump 0x77D8057D–>00000000 [ieframe.dll]
[4224]iexplore.exe–>user32.dll–>MessageBoxExW, Type: Inline - RelativeJump 0x77D80559–>00000000 [ieframe.dll]
[4224]iexplore.exe–>user32.dll–>MessageBoxIndirectA, Type: Inline - RelativeJump 0x77D6AEF1–>00000000 [ieframe.dll]
[4224]iexplore.exe–>user32.dll–>MessageBoxIndirectW, Type: Inline - RelativeJump 0x77D960B7–>00000000 [ieframe.dll]
[5388]msimn.exe–>kernel32.dll–>FreeLibrary, Type: IAT modification 0x01001028–>00000000 [asoehook.dll]
[5388]msimn.exe–>kernel32.dll–>GetSystemTimeAsFileTime, Type: IAT modification 0x01001064–>00000000 [asoehook.dll]
[5388]msimn.exe–>kernel32.dll–>LoadLibraryA, Type: IAT modification 0x01001030–>00000000 [asoehook.dll]
MBR Report:
MBRCheck, version 1.2.3
© 2010, AD
Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 2 (build 2600)
Logical Drives Mask: 0x00007ffc
Kernel Drivers (total 144):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E2000 \WINDOWS\system32\hal.dll
0xF8A73000 \WINDOWS\system32\KDCOM.DLL
0xF8983000 \WINDOWS\system32\BOOTVID.dll
0xF8444000 ACPI.sys
0xF8A75000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xF8433000 pci.sys
0xF8573000 isapnp.sys
0xF8A77000 intelide.sys
0xF87F3000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xF8583000 MountMgr.sys
0xF8414000 ftdisk.sys
0xF87FB000 PartMgr.sys
0xF8593000 VolSnap.sys
0xF83FC000 atapi.sys
0xF83D9000 fasttx2k.sys
0xF83C1000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS
0xF85A3000 disk.sys
0xF85B3000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF83A2000 fltMgr.sys
0xF834C000 SYMDS.SYS
0xF833A000 sr.sys
0xF85C3000 Lbd.sys
0xF830D000 SYMEFA.SYS
0xF85D3000 PxHelp20.sys
0xF82F6000 KSecDD.sys
0xF8269000 Ntfs.sys
0xF823C000 NDIS.sys
0xF8803000 viaagp1.sys
0xF85E3000 SISAGPX.sys
0xF85F3000 ohci1394.sys
0xF8603000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
0xF8221000 Mup.sys
0xF8653000 \SystemRoot\system32\DRIVERS\nic1394.sys
0xF8663000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xF8124000 \SystemRoot\system32\DRIVERS\ialmnt5.sys
0xF8110000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xF80EC000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xF886B000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xF80C9000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF8873000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xF8673000 \SystemRoot\system32\DRIVERS\R8139n51.SYS
0xF7F93000 \SystemRoot\system32\DRIVERS\AGRSM.sys
0xF8893000 \SystemRoot\System32\Drivers\Modem.SYS
0xF7F7F000 \SystemRoot\system32\DRIVERS\parport.sys
0xF8683000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xF8A27000 \SystemRoot\system32\DRIVERS\PS2.sys
0xF889B000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xF88A3000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF8A2F000 \SystemRoot\system32\drivers\pfc.sys
0xF88B3000 \SystemRoot\system32\drivers\iviaspi.sys
0xF8693000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF86A3000 \SystemRoot\system32\DRIVERS\redbook.sys
0xF7F5C000 \SystemRoot\system32\DRIVERS\ks.sys
0xF88D3000 \SystemRoot\SYSTEM32\DRIVERS\GEARAspiWDM.sys
0xF86B3000 \SystemRoot\system32\DRIVERS\imapi.sys
0xF8A8B000 \SystemRoot\system32\DRIVERS\serscan.sys
0xF8BC8000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF8723000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xF8A47000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xF7E7D000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xF8733000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xF8743000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xF88F3000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xF7E6C000 \SystemRoot\system32\DRIVERS\psched.sys
0xF8753000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF8903000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF8913000 \SystemRoot\system32\DRIVERS\raspti.sys
0xF8763000 \SystemRoot\System32\Drivers\pcouffin.sys
0xF8773000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF8AA5000 \SystemRoot\system32\DRIVERS\swenum.sys
0xF7E38000 \SystemRoot\system32\DRIVERS\update.sys
0xF8A5F000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xF8783000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xAA5A2000 \SystemRoot\system32\drivers\RtkHDAud.sys
0xAA581000 \SystemRoot\system32\drivers\portcls.sys
0xF87B3000 \SystemRoot\system32\drivers\drmk.sys
0xF87C3000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF8AB1000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF8AB5000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF8C12000 \SystemRoot\System32\Drivers\Null.SYS
0xF8AB9000 \SystemRoot\System32\Drivers\Beep.SYS
0xF894B000 \SystemRoot\System32\drivers\vga.sys
0xF8ABD000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF8AC1000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF895B000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF896B000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF8A0F000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xAA486000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xAA42E000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xAA3AF000 \SystemRoot\System32\Drivers\N360\0402000.00C\SYMTDI.SYS
0xAA38E000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xF87E3000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xAA369000 \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
0xF7F4C000 \SystemRoot\system32\DRIVERS\arp1394.sys
0xAA314000 \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20100917.001\IDSxpx86.sys
0xF7F3C000 \SystemRoot\system32\DRIVERS\LVUSBSta.sys
0xAA2EC000 \SystemRoot\system32\DRIVERS\netbt.sys
0xAA2B8000 \SystemRoot\system32\DRIVERS\LV561AV.SYS
0xF7F2C000 \SystemRoot\system32\DRIVERS\STREAM.SYS
0xAA296000 \SystemRoot\System32\drivers\afd.sys
0xF7F1C000 \SystemRoot\system32\DRIVERS\netbios.sys
0xAA277000 \SystemRoot\system32\drivers\N360\0402000.00C\Ironx86.SYS
0xF887B000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xF7EAC000 \SystemRoot\system32\DRIVERS\usbscan.sys
0xF888B000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xF88BB000 \SystemRoot\system32\DRIVERS\usbprint.sys
0xF88CB000 \SystemRoot\system32\DRIVERS\HPZius12.sys
0xF7EDC000 \SystemRoot\system32\drivers\N360\0402000.00C\SRTSPX.SYS
0xF7EA0000 \SystemRoot\system32\DRIVERS\srvkp.sys
0xAA24B000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xAA1DC000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xF7ECC000 \SystemRoot\System32\Drivers\Fips.SYS
0xAA17E000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys
0xAA161000 \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
0xAA0E2000 \SystemRoot\system32\drivers\N360\0402000.00C\ccHPx86.sys
0xAA036000 \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20100901.003\BHDrvx86.sys
0xF7EBC000 \SystemRoot\system32\DRIVERS\HPZid412.sys
0xF8A5B000 \SystemRoot\system32\DRIVERS\HPZipr12.sys
0xA9F4B000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xA9F3A000 \SystemRoot\System32\Drivers\Udfs.SYS
0xA9F22000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF8B0B000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xF8963000 \SystemRoot\System32\watchdog.sys
0xF7EB8000 \SystemRoot\System32\drivers\Dxapi.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF8BCC000 \SystemRoot\System32\drivers\dxgthk.sys
0xBF020000 \SystemRoot\System32\ialmdnt5.dll
0xBF012000 \SystemRoot\System32\ialmrnt5.dll
0xBF03E000 \SystemRoot\System32\ialmdev5.DLL
0xBF064000 \SystemRoot\System32\ialmdd5.DLL
0xA9E96000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xA9B9D000 \SystemRoot\system32\drivers\wdmaud.sys
0xA9CEA000 \SystemRoot\system32\drivers\sysaudio.sys
0xA9AFB000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xA98C8000 \SystemRoot\system32\DRIVERS\srv.sys
0xA9BFA000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xA9238000 \SystemRoot\System32\Drivers\N360\0402000.00C\SRTSP.SYS
0xA8713000 \SystemRoot\System32\Drivers\HTTP.sys
0xA7FB5000 \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100920.002\NAVEX15.SYS
0xA7FA1000 \??\C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100920.002\NAVENG.SYS
0xA7E0D000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll
Processes (total 70):
0 System Idle Process
4 System
484 C:\WINDOWS\system32\smss.exe
560 csrss.exe
588 C:\WINDOWS\system32\winlogon.exe
632 C:\WINDOWS\system32\services.exe
644 C:\WINDOWS\system32\lsass.exe
800 C:\WINDOWS\system32\svchost.exe
904 svchost.exe
972 C:\WINDOWS\system32\svchost.exe
1044 svchost.exe
1148 svchost.exe
1348 C:\WINDOWS\system32\spoolsv.exe
1584 C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
1664 C:\WINDOWS\system32\svchost.exe
1688 C:\WINDOWS\system32\svchost.exe
1700 C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
1724 C:\Program Files\Java\jre6\bin\jqs.exe
1800 C:\Program Files\Common Files\LightScribe\LSSrvc.exe
1872 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
1900 C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccsvchst.exe
2008 C:\WINDOWS\system32\svchost.exe
2040 C:\WINDOWS\system32\svchost.exe
176 C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe
196 C:\WINDOWS\system32\svchost.exe
816 C:\WINDOWS\explorer.exe
2456 C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccsvchst.exe
2720 C:\WINDOWS\system\hpsysdrv.exe
2800 unsecapp.exe
2924 wmiprvse.exe
2932 C:\WINDOWS\system32\hkcmd.exe
3052 C:\WINDOWS\system32\hphmon06.exe
3116 C:\hp\KBD\kbd.exe
3176 C:\Program Files\iTunes\iTunesHelper.exe
3240 C:\WINDOWS\AGRSMMSG.exe
3248 C:\WINDOWS\SOUNDMAN.EXE
3312 C:\WINDOWS\ALCWZRD.EXE
3356 C:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe
3448 C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe
3484 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
3536 C:\WINDOWS\system32\LVCOMSX.EXE
3556 C:\Program Files\Logitech\Video\LogiTray.exe
3584 C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
3632 C:\Program Files\QuickTime\QTTask.exe
3664 C:\Program Files\Google\Google Talk\googletalk.exe
3712 C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
3724 C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
3752 C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe
3836 C:\Program Files\Java\jre6\bin\jusched.exe
3888 C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe
3904 C:\Program Files\Messenger\msmsgs.exe
224 C:\WINDOWS\system32\wuauclt.exe
396 C:\WINDOWS\system32\ctfmon.exe
2320 C:\Program Files\Logitech\Video\FxSvr2.exe
2408 C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
1656 C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
3636 C:\Program Files\iPod\bin\iPodService.exe
2304 C:\Program Files\Java\jre6\bin\jucheck.exe
1236 C:\Program Files\Mozilla Firefox\firefox.exe
2996 C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
768 C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
2796 C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
3696 C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
3916 C:\Program Files\Mozilla Firefox\plugin-container.exe
2960 G:\Program Files\Adobe\Adobe Premiere Elements 2.0\Adobe Premiere Elements.exe
5388 C:\Program Files\Outlook Express\msimn.exe
5460 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
5248 C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
4224 C:\Program Files\Internet Explorer\iexplore.exe
2752 C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe
\\.\C: –> \\.\PhysicalDrive1 at offset 0x00000001`5dc2c000 (NTFS)
\\.\D: –> \\.\PhysicalDrive1 at offset 0x00000000`00007e00 (FAT32)
\\.\G: –> \\.\PhysicalDrive2 at offset 0x00000001`84fb6000 (NTFS)
\\.\H: –> \\.\PhysicalDrive2 at offset 0x00000000`00007e00 (FAT32)
\\.\N: –> \\.\PhysicalDrive0 at offset 0x00000001`62d62000 (NTFS)
\\.\O: –> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (FAT32)
PhysicalDrive1 Model Number: ST3500630AS, Rev: 3.AAK
PhysicalDrive2 Model Number: WDCWD2500JD-22HBB0, Rev: 08.02D08
PhysicalDrive0 Model Number: ST340015A, Rev: 3.15
Size Device Name MBR Status
——————————————–
465 GB \\.\PhysicalDrive1 Unknown MBR code
SHA1: EC5B6F4B08268D5344F30BFF61C8B587F034795B
232 GB \\.\PhysicalDrive2 Windows XP MBR code detected
SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A
37 GB \\.\PhysicalDrive0 Unknown MBR code
SHA1: EC5B6F4B08268D5344F30BFF61C8B587F034795B
Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:
Done!
OTL logfile created on: 9/20/2010 8:20:09 PM - Run 1
OTL by OldTimer - Version 3.2.14.0 Folder = C:\Documents and Settings\HP_Owner\Desktop
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
503.00 Mb Total Physical Memory | 89.00 Mb Available Physical Memory | 18.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 35.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 460.29 Gb Total Space | 413.16 Gb Free Space | 89.76% Space Free | Partition Type: NTFS
Drive D: | 5.45 Gb Total Space | 0.37 Gb Free Space | 6.85% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 226.81 Gb Total Space | 147.34 Gb Free Space | 64.96% Space Free | Partition Type: NTFS
Drive H: | 6.07 Gb Total Space | 0.71 Gb Free Space | 11.65% Space Free | Partition Type: FAT32
I: Drive not present or media not loaded
Drive N: | 31.72 Gb Total Space | 14.69 Gb Free Space | 46.30% Space Free | Partition Type: NTFS
Drive O: | 5.53 Gb Total Space | 2.36 Gb Free Space | 42.62% Space Free | Partition Type: FAT32
Computer Name: OFFICE-HP
Current User Name: HP_Owner
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Minimal
Quick Scan
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\HP_Owner\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files\Java\jre6\bin\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (CANON INC.)
PRC - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
PRC - C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE (CANON INC.)
PRC - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
PRC - C:\Program Files\Google\Google Talk\googletalk.exe (Google)
PRC - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
PRC - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
PRC - C:\WINDOWS\system32\LVCOMSX.EXE (Logitech Inc.)
PRC - C:\Program Files\Logitech\Video\LogiTray.exe (Logitech Inc.)
PRC - C:\Program Files\Logitech\Video\FxSvr2.exe (Logitech Inc.)
PRC - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe (Hewlett-Packard Company)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.)
PRC - C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
PRC - C:\Program Files\ScanSoft\OmniPageSE2.0\opwareSE2.exe (ScanSoft, Inc.)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\HP_Owner\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\asoehook.dll (Symantec Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\efacli.dll (Symantec Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\bushell.dll (Symantec Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccl90u.dll (Symantec Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccgevt.dll (Symantec Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccipc.dll (Symantec Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccvrtrst.dll (Symantec Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccset.dll (Symantec Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\microsoft.vc90.crt\msvcr90.dll (Microsoft Corporation)
MOD - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\microsoft.vc90.crt\msvcp90.dll (Microsoft Corporation)
MOD - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\pdfshell.dll (Adobe Systems, Inc.)
MOD - C:\Program Files\Comcast\Desktop Doctor\bin\sprthook.dll (SupportSoft, Inc.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_cbb27474\ATL80.dll (Microsoft Corporation)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll (Microsoft Corporation)
MOD - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
MOD - C:\Program Files\Microsoft Office\Office12\GrooveUtil.dll (Microsoft Corporation)
MOD - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
MOD - C:\Program Files\Microsoft Office\Office12\GrooveNew.dll (Microsoft Corporation)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll (Microsoft Corporation)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\xpsp2res.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\msvcp60.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\rsaenh.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
MOD - C:\Program Files\ScanSoft\OmniPageSE2.0\OpHookSE2.dll (ScanSoft, Inc.)
========== Win32 Services (SafeList) ==========
SRV - (McSysmon) – C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe File not found
SRV - (McShield) – C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe File not found
SRV - (HidServ) – C:\WINDOWS\System32\hidserv.dll File not found
SRV - (B6E3FA7F) – File not found
SRV - (AppMgmt) – C:\WINDOWS\System32\appmgmts.dll File not found
SRV - (791FA825) – File not found
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (N360) – C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ccSvcHst.exe (Symantec Corporation)
SRV - (sprtsvc_ddoctorv2) SupportSoft Sprocket Service (ddoctorv2) – C:\Program Files\Comcast\Desktop Doctor\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (AdobeActiveFileMonitor6.0) – C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe ()
SRV - (IviRegMgr) – C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
========== Driver Services (SafeList) ==========
DRV - (PalmUSBD) – C:\WINDOWS\System32\drivers\PalmUSBD.sys File not found
DRV - (BHDrvx86) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20100901.003\BHDrvx86.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100920.002\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20100920.002\NAVENG.SYS (Symantec Corporation)
DRV - (IDSxpx86) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20100917.001\IDSXpx86.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\N360\0402000.00C\SYMTDI.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\WINDOWS\system32\drivers\N360\0402000.00C\Ironx86.SYS (Symantec Corporation)
DRV - (SymEFA) – C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMEFA.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\WINDOWS\System32\Drivers\N360\0402000.00C\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\WINDOWS\system32\drivers\N360\0402000.00C\SRTSPX.SYS (Symantec Corporation)
DRV - (SymEvent) – C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (ccHP) – C:\WINDOWS\system32\drivers\N360\0402000.00C\ccHPx86.sys (Symantec Corporation)
DRV - (SymDS) – C:\WINDOWS\system32\drivers\N360\0402000.00C\SYMDS.SYS (Symantec Corporation)
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (Pfc) – C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (PID_0928) Logitech QuickCam Express(PID_0928) – C:\WINDOWS\system32\drivers\LV561AV.SYS (Logitech Inc.)
DRV - (LVUSBSta) – C:\WINDOWS\system32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (SiS315) – C:\WINDOWS\system32\drivers\sisgrp.sys (Silicon Integrated Systems Corporation)
DRV - (SiSkp) – C:\WINDOWS\system32\drivers\srvkp.sys (Silicon Integrated Systems Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (AgereSoftModem) – C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems)
DRV - (HDAudBus) – C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows ® Server 2003 DDK provider)
DRV - (fasttx2k) – C:\WINDOWS\system32\DRIVERS\fasttx2k.sys (Promise Technology, Inc.)
DRV - (Iviaspi) – C:\WINDOWS\system32\drivers\iviaspi.sys (InterVideo, Inc.)
DRV - (SISAGP) – C:\WINDOWS\system32\DRIVERS\SISAGPX.sys (Silicon Integrated Systems Corporation)
DRV - (viaagp1) – C:\WINDOWS\system32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.)
DRV - (rtl8139) – C:\WINDOWS\system32\drivers\R8139n51.sys (Realtek Semiconductor Corporation )
DRV - (Ps2) – C:\WINDOWS\system32\drivers\PS2.sys (Hewlett-Packard Company)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.comcast.net/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf;=desktop
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "http://www.msn.com/"
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:[removed]
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - HKLM\software\mozilla\Firefox\extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010/06/02 16:44:10 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010/03/28 17:01:14 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\[removed]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/07/17 20:53:01 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/09/16 21:03:17 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/09/16 21:03:20 | 000,000,000 | —D | M]
[2008/10/20 21:53:25 | 000,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Extensions
[2010/09/19 12:00:21 | 000,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\xgnuprw4.default\extensions
[2009/12/04 21:14:02 | 000,000,000 | —D | M] (NoScript) – C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\xgnuprw4.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010/09/19 12:00:21 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\xgnuprw4.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2009/12/01 21:40:22 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\xgnuprw4.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2009/02/22 19:27:04 | 000,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\xgnuprw4.default\extensions\[removed]
[2010/09/19 12:00:21 | 000,000,000 | —D | M] – C:\Documents and Settings\HP_Owner\Application Data\Mozilla\Firefox\Profiles\xgnuprw4.default\extensions\staged-xpis
[2010/09/18 17:40:14 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
O1 HOSTS File: ([2009/11/30 19:04:01 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll (Google Inc.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\ShellBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (HP view) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll (Hewlett-Packard Company)
O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [ddoctorv2] C:\Program Files\Comcast\Desktop Doctor\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe (Google)
O4 - HKLM..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IJNetworkScanUtility] C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE (CANON INC.)
O4 - HKLM..\Run: [ISUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKLM..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe (Logitech Inc.)
O4 - HKLM..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE (Logitech Inc.)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [OpwareSE2] C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe (ScanSoft, Inc.)
O4 - HKLM..\Run: [PS2] C:\WINDOWS\system32\ps2.EXE (Hewlett-Packard Company)
O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\Recguard.exe ()
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UpdateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe (Sonic Solutions)
O4 - HKCU..\Run: [AIM] G:\Program Files\AIM\aim.exe -cnetwait.odl File not found
O4 - HKCU..\Run: [LogitechSoftwareUpdate] C:\Program Files\Logitech\Video\ManifestEngine.exe (Logitech Inc.)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\NPSWF32_FlashUtil.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\HP_Owner\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\HP_Owner\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Main present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add To HP Organize… - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin/module.main/favorites\ie_add_to.html ()
O8 - Extra context menu item: E&xport; to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Easy-WebPrint Add To Print List - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint High Speed Print - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Preview - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O8 - Extra context menu item: Easy-WebPrint Print - C:\Program Files\Canon\Easy-WebPrint\Resource.dll ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end; to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - G:\Program Files\AIM\aim.exe (America Online, Inc.)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/10/21 19:51:26 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2001/07/28 06:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT – [ FAT32 ]
O32 - AutoRun File - [2005/02/17 13:33:48 | 000,000,050 | —- | M] () - G:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2001/07/28 06:07:38 | 000,000,000 | -HS- | M] () - H:\AUTOEXEC.BAT – [ FAT32 ]
O32 - AutoRun File - [2004/05/12 21:46:51 | 000,000,000 | —- | M] () - N:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2001/07/28 05:07:38 | 000,000,000 | -HS- | M] () - O:\AUTOEXEC.BAT – [ FAT32 ]
O32 - AutoRun File - [2002/09/11 02:02:32 | 000,000,045 | -HS- | M] () - O:\Autorun.inf – [ FAT32 ]
O33 - MountPoints2\{c5469988-c369-11df-9ae5-806d6172696f}\Shell\AutoRun\command - "" = O:\Info.exe – [2002/09/10 20:54:58 | 000,040,960 | -HS- | M] (XSS)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.ac3acm - C:\WINDOWS\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\WINDOWS\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\WINDOWS\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: VIDC.ACDV - C:\WINDOWS\System32\ACDV.dll (ACD Systems)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\divx.dll (DivXNetworks, Inc.)
Drivers32: vidc.dvsd - C:\WINDOWS\System32\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.I420 - C:\WINDOWS\System32\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.LEAD - C:\WINDOWS\System32\LCodcCMP.dll (LEAD Technologies, Inc.)
Drivers32: vidc.mp42 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.mp43 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.mpg4 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation)
Drivers32: vidc.xvid - C:\WINDOWS\System32\xvidvfw.dll ()
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (54619700398653440)
========== Files/Folders - Created Within 90 Days ==========
[2010/09/20 20:12:33 | 000,576,000 | —- | C] (OldTimer Tools) – C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
[2010/09/16 19:54:53 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Owner\Application Data\Opera
[2010/09/13 10:59:50 | 000,000,000 | –SD | C] – C:\Documents and Settings\HP_Owner\My Documents\My PageManager
[2010/09/13 10:59:49 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\NewSoft
[2010/09/11 00:16:20 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\FLEXnet
[2010/09/10 22:14:25 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Macrovision Shared
[2010/09/08 23:02:50 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Adobe PDF
[2010/09/07 22:38:28 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Owner\My Documents\Adobe
[2010/09/03 16:25:23 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Local Settings\Application Data\SupportSoft
[2008/10/31 19:14:00 | 000,047,360 | —- | C] (VSO Software) – C:\Documents and Settings\HP_Owner\Application Data\pcouffin.sys
========== Files - Modified Within 90 Days ==========
[2010/09/20 20:12:40 | 000,576,000 | —- | M] (OldTimer Tools) – C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
[2010/09/20 20:04:07 | 000,080,384 | —- | M] () – C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe
[2010/09/20 20:02:37 | 000,037,718 | —- | M] () – C:\Documents and Settings\HP_Owner\Desktop\RU Report
[2010/09/20 19:56:02 | 000,000,890 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010/09/20 19:44:13 | 000,133,632 | —- | M] () – C:\Documents and Settings\HP_Owner\Desktop\RKUnhookerLE.EXE
[2010/09/20 17:18:33 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010/09/20 00:56:01 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010/09/19 12:49:42 | 000,002,683 | —- | M] () – C:\Documents and Settings\HP_Owner\Desktop\HiJackThis.lnk
[2010/09/19 12:02:13 | 000,000,036 | —- | M] () – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\housecall.guid.cache
[2010/09/18 17:16:16 | 000,000,185 | —- | M] () – C:\WINDOWS\System\hpsysdrv.DAT
[2010/09/18 17:15:28 | 000,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2010/09/18 17:15:19 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/09/18 17:15:14 | 527,814,656 | -HS- | M] () – C:\hiberfil.sys
[2010/09/16 21:27:37 | 000,000,778 | —- | M] () – C:\WINDOWS\win.ini
[2010/09/15 21:39:53 | 000,000,000 | —- | M] () – C:\Documents and Settings\HP_Owner\Application Data\AVSDVDPlayer.m3u
[2010/09/13 11:54:00 | 000,000,094 | —- | M] () – C:\WINDOWS\Prestopm.INI
[2010/09/13 11:53:41 | 002,942,590 | —- | M] () – C:\Documents and Settings\HP_Owner\Desktop\K_DeWitt_Homework2.pdf
[2010/09/13 11:52:42 | 000,000,100 | —- | M] () – C:\NsScanforTest.ini
[2010/09/13 09:58:40 | 000,078,448 | —- | M] () – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/09/10 22:28:12 | 000,295,664 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/09/10 22:26:47 | 004,718,592 | -H– | M] () – C:\Documents and Settings\HP_Owner\NTUSER.DAT
[2010/09/10 22:25:50 | 000,000,178 | -HS- | M] () – C:\Documents and Settings\HP_Owner\ntuser.ini
[2010/09/10 22:12:55 | 000,000,855 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Photoshop Elements 6.0.lnk
[2010/09/10 21:58:10 | 000,004,161 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2010/09/10 21:47:51 | 000,002,461 | —- | M] () – C:\Documents and Settings\All Users\Desktop\ACDSee for PENTAX.lnk
[2010/09/10 21:12:47 | 000,002,565 | —- | M] () – C:\Documents and Settings\All Users\Desktop\ACDSee 9 Photo Manager.lnk
[2010/09/08 23:03:19 | 000,000,999 | —- | M] () – C:\Documents and Settings\HP_Owner\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2010/09/08 23:01:06 | 000,001,707 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Premiere Elements 2.0.lnk
[2010/09/08 22:51:03 | 000,015,236 | —- | M] () – C:\WINDOWS\System32\PRE20_FCBlueprint.dat
[2010/09/06 22:24:23 | 000,014,336 | —- | M] () – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/06 18:08:46 | 000,000,074 | —- | M] () – C:\Documents and Settings\HP_Owner\default.pls
[2010/09/06 18:05:23 | 000,000,116 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2010/08/27 17:07:37 | 000,014,925 | —- | M] () – C:\Documents and Settings\HP_Owner\My Documents\Motor Vehicle Bill of Sale.docx
[2010/08/15 23:01:07 | 000,000,770 | —- | M] () – C:\Documents and Settings\HP_Owner\My Documents\untitled.flp
[2010/08/07 00:09:33 | 000,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/07/17 21:05:09 | 000,023,124 | —- | M] () – C:\WINDOWS\hpqins15.dat
[2010/07/17 20:54:39 | 000,000,124 | —- | M] () – C:\WINDOWS\wininit.ini
[2010/07/13 20:26:37 | 000,594,566 | —- | M] () – C:\Documents and Settings\HP_Owner\My Documents\Doug's Lookalike c.jpg
[2010/07/13 20:22:31 | 001,527,272 | —- | M] () – C:\Documents and Settings\HP_Owner\My Documents\Doug's Lookalike.JPG
========== Files Created - No Company Name ==========
[2010/09/20 20:04:04 | 000,080,384 | —- | C] () – C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe
[2010/09/20 20:02:37 | 000,037,718 | —- | C] () – C:\Documents and Settings\HP_Owner\Desktop\RU Report
[2010/09/20 19:44:12 | 000,133,632 | —- | C] () – C:\Documents and Settings\HP_Owner\Desktop\RKUnhookerLE.EXE
[2010/09/19 12:02:13 | 000,000,036 | —- | C] () – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\housecall.guid.cache
[2010/09/13 11:54:00 | 000,000,094 | —- | C] () – C:\WINDOWS\Prestopm.INI
[2010/09/13 11:53:41 | 002,942,590 | —- | C] () – C:\Documents and Settings\HP_Owner\Desktop\K_DeWitt_Homework2.pdf
[2010/09/13 10:59:49 | 000,000,100 | —- | C] () – C:\NsScanforTest.ini
[2010/09/10 22:12:54 | 000,000,855 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Adobe Photoshop Elements 6.0.lnk
[2010/09/08 23:03:19 | 000,000,999 | —- | C] () – C:\Documents and Settings\HP_Owner\Start Menu\Programs\Startup\Adobe Gamma.lnk
[2010/09/08 23:01:06 | 000,001,707 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Adobe Premiere Elements 2.0.lnk
[2010/09/08 22:51:03 | 000,015,236 | —- | C] () – C:\WINDOWS\System32\PRE20_FCBlueprint.dat
[2010/08/27 17:07:36 | 000,014,925 | —- | C] () – C:\Documents and Settings\HP_Owner\My Documents\Motor Vehicle Bill of Sale.docx
[2010/08/15 23:00:16 | 000,000,770 | —- | C] () – C:\Documents and Settings\HP_Owner\My Documents\untitled.flp
[2010/07/17 20:48:33 | 000,023,124 | —- | C] () – C:\WINDOWS\hpqins15.dat
[2010/07/13 20:26:36 | 000,594,566 | —- | C] () – C:\Documents and Settings\HP_Owner\My Documents\Doug's Lookalike c.jpg
[2010/07/13 20:21:41 | 001,527,272 | —- | C] () – C:\Documents and Settings\HP_Owner\My Documents\Doug's Lookalike.JPG
[2010/03/27 17:47:16 | 000,000,050 | —- | C] () – C:\WINDOWS\3D Text Factory.INI
[2009/03/22 05:55:57 | 000,000,124 | —- | C] () – C:\WINDOWS\wininit.ini
[2008/12/10 21:11:13 | 000,000,250 | —- | C] () – C:\Documents and Settings\HP_Owner\Application Data\wklnhst.dat
[2008/11/27 13:33:05 | 000,000,000 | —- | C] () – C:\Documents and Settings\HP_Owner\Application Data\AVSDVDPlayer.m3u
[2008/11/23 19:20:24 | 000,014,336 | —- | C] () – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/11/01 09:21:25 | 000,000,000 | —- | C] () – C:\WINDOWS\QuickInstall.INI
[2008/10/31 19:41:39 | 000,000,116 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2008/10/31 19:14:04 | 000,000,034 | —- | C] () – C:\Documents and Settings\HP_Owner\Application Data\pcouffin.log
[2008/10/31 19:14:00 | 000,007,887 | —- | C] () – C:\Documents and Settings\HP_Owner\Application Data\pcouffin.cat
[2008/10/31 19:14:00 | 000,001,144 | —- | C] () – C:\Documents and Settings\HP_Owner\Application Data\pcouffin.inf
[2008/10/24 20:35:38 | 000,000,000 | —- | C] () – C:\Documents and Settings\HP_Owner\Application Data\AVSMediaPlayer.m3u
[2008/10/24 20:30:48 | 000,524,288 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2008/10/24 20:30:48 | 000,139,264 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2008/10/22 21:59:20 | 000,009,255 | R— | C] () – C:\WINDOWS\System32\lvcoinst.ini
[2008/10/21 21:02:06 | 000,000,532 | —- | C] () – C:\WINDOWS\MAXLINK.INI
[2008/10/21 20:58:29 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\IPPCPUID.DLL
[2008/10/21 20:58:29 | 000,000,105 | —- | C] () – C:\WINDOWS\UMXADDIN.INI
[2008/10/21 20:58:19 | 000,011,776 | —- | C] () – C:\WINDOWS\System32\pmsbfn32.dll
[2008/10/21 20:57:39 | 000,000,074 | —- | C] () – C:\WINDOWS\PMINI.ini
[2008/10/21 19:44:36 | 000,000,000 | —- | C] () – C:\WINDOWS\OpPrintServer.INI
[2008/10/21 19:42:42 | 000,007,680 | —- | C] () – C:\WINDOWS\System32\CNMVS61.DLL
[2008/10/20 22:47:12 | 000,027,440 | —- | C] () – C:\WINDOWS\System32\drivers\secdrv.sys
[2008/10/20 21:07:19 | 000,000,131 | —- | C] () – C:\Documents and Settings\HP_Owner\Local Settings\Application Data\fusioncache.dat
[2008/10/20 21:05:17 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\IVIresizeW7.dll
[2008/10/20 21:05:17 | 000,200,704 | —- | C] () – C:\WINDOWS\System32\IVIresizeA6.dll
[2008/10/20 21:05:17 | 000,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeP6.dll
[2008/10/20 21:05:17 | 000,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeM6.dll
[2008/10/20 21:05:17 | 000,188,416 | —- | C] () – C:\WINDOWS\System32\IVIresizePX.dll
[2008/10/20 21:05:17 | 000,020,480 | —- | C] () – C:\WINDOWS\System32\IVIresize.dll
[2004/10/22 17:35:32 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2004/10/21 22:21:50 | 000,014,529 | —- | C] () – C:\WINDOWS\System32\CHODDI.SYS
[2004/10/21 22:21:42 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\hpreg.dll
[2004/10/21 21:55:29 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2004/10/21 21:05:48 | 000,003,632 | —- | C] () – C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2004/10/21 21:00:46 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/10/21 20:51:33 | 000,192,512 | —- | C] () – C:\WINDOWS\System32\RTCOMDLL.dll
[2004/10/21 20:51:33 | 000,156,160 | —- | C] () – C:\WINDOWS\System32\RTLCPAPI.dll
[2004/10/21 20:17:08 | 000,299,073 | —- | C] () – C:\WINDOWS\System32\PythonCOM22.dll
[2004/10/21 20:17:08 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\PyWinTypes22.dll
[2004/10/21 20:15:49 | 000,016,896 | —- | C] () – C:\WINDOWS\System32\bcbmm.dll
[2004/10/21 19:55:39 | 000,000,802 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/10/21 19:36:39 | 000,000,549 | —- | C] () – C:\WINDOWS\System32\oeminfo.ini
[2004/09/14 02:35:56 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2004/08/20 06:14:46 | 000,086,016 | —- | C] () – C:\WINDOWS\System32\PcdrKernelModeServices.dll
[2004/08/20 06:14:46 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\ProgressTrace.dll
[2003/04/11 02:04:00 | 000,028,672 | —- | C] () – C:\WINDOWS\System32\JAWTAccessBridge.dll
[2002/03/21 15:39:02 | 000,073,728 | —- | C] () – C:\WINDOWS\System32\UNACEV2.DLL
[2002/03/21 13:51:52 | 000,503,808 | R— | C] () – C:\WINDOWS\System32\lt_xtrans.dll
[2002/03/21 13:51:52 | 000,286,720 | R— | C] () – C:\WINDOWS\System32\MrSIDD.dll
[2002/03/21 13:51:52 | 000,163,840 | R— | C] () – C:\WINDOWS\System32\lt_common.dll
[2002/03/21 13:51:52 | 000,126,976 | R— | C] () – C:\WINDOWS\System32\lt_trans.dll
[2002/03/21 13:51:52 | 000,069,632 | R— | C] () – C:\WINDOWS\System32\lt_meta.dll
[2002/03/21 13:51:52 | 000,053,248 | R— | C] () – C:\WINDOWS\System32\lt_encrypt.dll
[2002/03/21 13:51:52 | 000,020,480 | R— | C] () – C:\WINDOWS\System32\lt_messagetext.dll
[1999/01/27 13:39:06 | 000,065,024 | —- | C] () – C:\WINDOWS\System32\indounin.dll
[1997/06/13 07:56:08 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\Iyvu9_32.dll
========== LOP Check ==========
[2008/10/23 19:11:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ACD Systems
[2009/08/23 11:47:18 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\CanonBJ
[2009/08/23 18:28:52 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\CanonIJEGV
[2008/11/01 09:12:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DataViz
[2008/11/01 09:11:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HotSync
[2008/10/21 21:02:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SSScanAppDataDir
[2008/10/21 21:02:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SSScanWizard
[2009/09/30 19:41:16 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SupportSoft
[2009/03/20 18:14:43 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{7972B2E5-3E09-4E5E-81B7-FE5819D6772F}
[2010/09/20 17:18:33 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2004/10/21 22:40:20 | 000,000,104 | —- | M] () – C:\.lnk
[2010/09/18 17:15:11 | 000,023,292 | —- | M] () – C:\aaw7boot.log
[2004/10/21 19:51:26 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2008/10/20 21:02:18 | 000,000,213 | RHS- | M] () – C:\BOOT.BAK
[2008/10/21 19:12:37 | 000,000,283 | RHS- | M] () – C:\boot.ini
[2004/08/04 05:00:00 | 000,260,272 | RHS- | M] () – C:\cmldr
[2004/10/21 19:51:26 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010/09/18 17:15:14 | 527,814,656 | -HS- | M] () – C:\hiberfil.sys
[2004/10/21 20:15:49 | 000,000,002 | -H– | M] () – C:\hpbi.log
[2008/11/01 11:03:02 | 004,150,124 | —- | M] () – C:\HuskyInstallerLog.txt
[2004/10/21 19:51:26 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2008/10/21 23:03:36 | 000,000,183 | —- | M] () – C:\LogiSetup.log
[2004/10/21 19:51:26 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2009/09/30 22:30:54 | 000,001,049 | —- | M] () – C:\net_save.dna
[2010/09/13 11:52:42 | 000,000,100 | —- | M] () – C:\NsScanforTest.ini
[2004/08/04 05:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2004/08/04 05:00:00 | 000,250,032 | RHS- | M] () – C:\ntldr
[2010/09/20 20:00:13 | 1367,207,936 | -HS- | M] () – C:\pagefile.sys
[2008/10/24 19:50:52 | 000,491,690 | —- | M] () – C:\vcredist_x86.log
< %systemroot%\Fonts\*.com >
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2004/10/21 19:50:51 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2004/06/15 01:00:00 | 000,017,920 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPD61.DLL
[2008/10/26 05:00:00 | 000,027,136 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPD9N.DLL
[2004/06/15 01:00:00 | 000,054,272 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPP61.DLL
[2008/10/26 05:00:00 | 000,069,632 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\CNMPP9N.DLL
[2009/04/16 14:08:20 | 000,312,832 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\hpfpp70v.dll
[2003/06/19 03:31:48 | 000,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2006/10/26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2004/10/21 12:41:46 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2004/10/21 12:41:46 | 000,634,880 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2004/10/21 12:41:45 | 000,868,352 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2004/10/21 19:51:36 | 000,000,294 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
[2004/10/21 20:15:18 | 000,010,326 | —- | M] () – C:\WINDOWS\system32\config\systemprofile\ml1.srt
[2004/10/21 20:15:18 | 000,010,250 | —- | M] () – C:\WINDOWS\system32\config\systemprofile\ml2.srt
[2004/10/21 20:15:19 | 000,009,220 | —- | M] () – C:\WINDOWS\system32\config\systemprofile\tempdiff.txt
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/10/20 21:07:53 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\HP_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/10/21 19:55:29 | 000,000,079 | —- | M] () – C:\Documents and Settings\HP_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2008/10/20 21:54:33 | 001,851,544 | —- | M] (Adobe Systems Incorporated) – C:\Documents and Settings\HP_Owner\Desktop\install_flash_player.exe
[2010/09/20 20:04:07 | 000,080,384 | —- | M] () – C:\Documents and Settings\HP_Owner\Desktop\MBRCheck.exe
[2010/09/20 20:12:40 | 000,576,000 | —- | M] (OldTimer Tools) – C:\Documents and Settings\HP_Owner\Desktop\OTL.exe
[2008/10/31 19:19:44 | 000,643,072 | —- | M] () – C:\Documents and Settings\HP_Owner\Desktop\RipIt4Me.exe
[2010/09/20 19:44:13 | 000,133,632 | —- | M] () – C:\Documents and Settings\HP_Owner\Desktop\RKUnhookerLE.EXE
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >
< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >
< %PROGRAMFILES%\Internet Explorer\*.tmp >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %USERPROFILE%\My Documents\*.exe >
[2006/10/27 17:34:32 | 000,463,152 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\HP_Owner\My Documents\setup.exe
< %USERPROFILE%\*.exe >
[2009/08/22 10:55:13 | 000,070,984 | —- | M] () – C:\Documents and Settings\HP_Owner\g2mdlhlpx.exe
< %systemroot%\ADDINS\*.* >
[2004/08/04 05:00:00 | 000,000,791 | —- | M] () – C:\WINDOWS\addins\fxsext.ecf
< %systemroot%\assembly\*.bak2 >
< %systemroot%\Config\*.* >
< %systemroot%\REPAIR\*.bak2 >
< %systemroot%\SECURITY\Database\*.sdb /x >
< %systemroot%\SYSTEM\*.bak2 >
< %systemroot%\Web\*.bak2 >
< %systemroot%\Driver Cache\*.* >
< %PROGRAMFILES%\Mozilla Firefox\0*.exe >
< %ProgramFiles%\Microsoft Common\*.* >
< %ProgramFiles%\TinyProxy. >
< %USERPROFILE%\Favorites\*.url /x >
[2008/10/20 21:07:52 | 000,000,122 | -HS- | M] () – C:\Documents and Settings\HP_Owner\Favorites\Desktop.ini
< %systemroot%\system32\*.bk >
< %systemroot%\*.te >
< %systemroot%\system32\system32\*.* >
< %ALLUSERSPROFILE%\*.dat /x >
< %systemroot%\system32\drivers\*.rmv >
< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >
< dir /b "%systemroot%\*.exe" | find /i " " /c >
< %PROGRAMFILES%\Microsoft\*.* >
< %systemroot%\System32\Wbem\proquota.exe >
< %PROGRAMFILES%\Mozilla Firefox\*.dat >
< %USERPROFILE%\Cookies\*.txt /x >
[2010/09/20 20:19:58 | 000,163,840 | —- | M] () – C:\Documents and Settings\HP_Owner\Cookies\index.dat
< %SystemRoot%\system32\fonts\*.* >
< %systemroot%\system32\winlog\*.* >
< %systemroot%\system32\Language\*.* >
< %systemroot%\system32\Settings\*.* >
< %systemroot%\system32\*.quo >
< %SYSTEMROOT%\AppPatch\*.exe >
< %SYSTEMROOT%\inf\*.exe >
[2006/11/01 19:31:34 | 000,315,904 | —- | M] (Microsoft Corporation) – C:\WINDOWS\inf\unregmp2.exe
< %SYSTEMROOT%\Installer\*.exe >
< %systemroot%\system32\config\*.bak2 >
< %systemroot%\system32\Computers\*.* >
< %SystemRoot%\system32\Sound\*.* >
< %SystemRoot%\system32\SpecialImg\*.* >
< %SystemRoot%\system32\code\*.* >
< %SystemRoot%\system32\draft\*.* >
< %SystemRoot%\system32\MSSSys\*.* >
< %ProgramFiles%\Javascript\*.* >
< %systemroot%\pchealth\helpctr\System\*.exe /s >
< %systemroot%\Web\*.exe >
< %systemroot%\system32\msn\*.* >
< %systemroot%\system32\*.tro >
< %AppData%\Microsoft\Installer\msupdates\*.* >
< %ProgramFiles%\Messenger\*.exe >
[2004/08/04 11:06:34 | 001,667,584 | —- | M] (Microsoft Corporation) – C:\Program Files\Messenger\msmsgs.exe
< %systemroot%\system32\systhem32\*.* >
< %systemroot%\system\*.exe >
[1998/05/07 19:04:38 | 000,052,736 | —- | M] (Hewlett-Packard Company) – C:\WINDOWS\system\hpsysdrv.exe
< %USERPROFILE%\Templates\*.tmp >
< %SYSTEMDRIVE%\explorexxx.exe\*.* >
< %Windir%\Installer\*.tmp >
< %systemroot%\System32\*.xco >
< %ProgramFiles%\system32\*.* >
< %systemroot%\System32\windos\*.* >
< %SystemRoot%\system32\sandbox\*.* >
< %SystemRoot%\system32\*.amo >
< %SystemRoot%\system32\Windows Live\*.* >
< %ProgramFiles%\logs\*.* >
< %ProgramFiles%\Bifrost\*.* >
< %SystemRoot%\system32\*.goo >
< %systemroot%\system32\IME\*.* >
< %systemroot%\BackUp\*.* >
< %systemroot%\system32\*.ico >
< %systemroot%\system\*.dat >
[2010/09/18 17:16:16 | 000,000,185 | —- | M] () – C:\WINDOWS\system\hpsysdrv.DAT
< %systemroot%\system\*.exe >
[1998/05/07 19:04:38 | 000,052,736 | —- | M] (Hewlett-Packard Company) – C:\WINDOWS\system\hpsysdrv.exe
< %AppData%\Macromedia\Common\*.* >
< %SYSTEMDRIVE%\dir\*.* /s >
< %systemroot%\system32\ras\*.exe >
< %SYSTEMDRIVE%\MFILES\*.* >
< %SYSTEMDRIVE%\mDNSRespon.exe\*.* >
< %systemroot%\system32\services\*.* >
< %systemroot%\Spooler\*.* >
< %ProgramFiles%\system32\*.* >
< %systemroot%\system32\Setup\*.dll /x >
< %systemroot%\system32\*.mine >
< %SYSTEMDRIVE%\cleansweep.exe\*.* >
< %systemroot%\system32\ras\*.dll >
< %systemroot%\system32\ras\*.drv >
< %systemroot%\*.iq >
< %systemroot%\system32\XP\*.* >
< %SYSTEMDRIVE%\Extracted\*.* >
< %systemroot%\system32\windows\*.* >
< %systemroot%\logs\*.* >
[2008/10/24 19:50:33 | 000,250,338 | —- | M] () – C:\WINDOWS\Logs\DirectX.log
< %SYSTEMDRIVE%\Win.Msi\*.* >
< %systemroot%\regedit\*.* >
< %systemroot%\system32\skype\*.* >
< %AppData%\Adobe\dlluplwin25\*.* >
< %UserProfile%\*.dat >
[2010/09/10 22:26:47 | 004,718,592 | -H– | M] () – C:\Documents and Settings\HP_Owner\NTUSER.DAT
< %UserProfile%\*.dll >
< %systemroot%\system32\*.sxo >
< %SYSTEMDRIVE%\Gazma\*.* /s >
< %systemroot%\system32\spynet\*.* >
< %systemroot%\system32\System\*.* >
< %appdata%\Microsoft\Windows\*.* >
< %systemroot%\system32\WinDir\*.* >
< %systemroot%\_\*.* >
< %systemroot%\system32\windows32\*.* >
< %ProgramFiles%\win\*.* >
< %AppData%\Microsoft\CD Burning\*.* >
< %systemroot%\*.cab >
< %systemroot%\K.Backup\*.* >
< %ProgramFiles%\Massenger\*.* >
< %systemroot%\System32\*.doc >
< %systemroot%\Office12\*.* >
< %systemroot%\System32\Rundl32.exe\*.* >
< %ProgramFiles%\yahoo.net\*.* >
< %systemroot%\system32\*.igo >
< %systemroot%\*.rew >
< %systemroot%\System32\spool\DRIVERS\W32X86\3\*.exe >
[2008/09/03 11:06:00 | 000,245,760 | —- | M] (Canon Inc.) – C:\WINDOWS\system32\spool\drivers\w32x86\3\CNCAABj.EXE
[2008/09/03 11:05:58 | 000,593,920 | —- | M] (Canon Inc.) – C:\WINDOWS\system32\spool\drivers\w32x86\3\CNCAPFj.EXE
[2004/06/15 01:00:00 | 000,080,896 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMPV61.EXE
[2004/06/15 01:00:00 | 000,008,704 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSD61.EXE
[2008/10/25 01:51:46 | 000,018,768 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSE9N.EXE
[2004/06/15 01:00:00 | 000,130,048 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSM61.EXE
[2004/06/15 01:00:00 | 000,006,656 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMSQ61.EXE
[2008/10/25 01:51:48 | 000,058,192 | —- | M] (CANON INC.) – C:\WINDOWS\system32\spool\drivers\w32x86\3\CNMVS9N.EXE
[2003/03/09 21:30:50 | 000,241,664 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzcfg07.exe
[2004/03/24 10:04:48 | 000,286,720 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzcfg10.exe
[2003/03/09 21:30:42 | 000,046,592 | —- | M] (Hewlett Packard) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzcin06.exe
[2003/03/09 21:30:50 | 000,843,776 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzeng07.exe
[2004/03/24 10:04:54 | 000,647,168 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzeng10.exe
[2003/03/09 21:30:50 | 000,319,488 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzpre07.exe
[2004/03/24 10:05:22 | 000,331,776 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzpre10.exe
[2003/03/09 21:30:50 | 000,372,736 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzstc07.exe
[2004/03/24 10:05:32 | 000,385,024 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzstc10.exe
[2003/03/09 21:30:52 | 000,172,032 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzstw07.exe
[2004/03/24 10:05:36 | 000,163,840 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpzstw10.exe
[2003/03/09 21:30:52 | 000,188,416 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztbu07.exe
[2004/03/24 10:05:42 | 000,172,032 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztbu10.exe
[2003/03/09 21:30:52 | 000,430,080 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztbx07.exe
[2004/04/09 22:51:56 | 007,331,840 | —- | M] (HP) – C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztbx10.exe
< %USERPROFILE%\.COMMgr\*.* >
< %USERPROFILE%\Desktop\*.bat >
< %PROGRAMFILES%\Common Files\Real\visualizations\*.* >
[2004/10/21 21:39:54 | 000,043,008 | —- | M] (RealNetworks, Inc.) – C:\Program Files\Common Files\Real\Visualizations\Annabelle.rpv
[2004/10/21 21:39:55 | 000,080,384 | —- | M] () – C:\Program Files\Common Files\Real\Visualizations\CosmicBelt.rpv
[2004/10/21 21:39:55 | 000,007,168 | —- | M] (RealNetworks, Inc.) – C:\Program Files\Common Files\Real\Visualizations\Fire.rpv
[2004/10/21 21:39:55 | 000,007,680 | —- | M] (RealNetworks, Inc.) – C:\Program Files\Common Files\Real\Visualizations\FreqBands.rpv
[2004/10/21 21:39:55 | 000,069,632 | —- | M] () – C:\Program Files\Common Files\Real\Visualizations\Nebula.rpv
< %PROGRAMFILES%\Internet Explorer\*.Jmp >
< %PROGRAMFILES%\Windows NT\system\*.dll >
< %systemroot%\system32\*.ext >
< %systemroot%\system32\Com\*.cfg >
< %systemroot%\system32\btz\*.* >
< %systemroot%\system32\EMP\*.* >
< %systemroot%\system32\expo\*.* >
< %systemroot%\system32\inet2\*.* >
< %systemroot%\system32\xrem\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
< End of report >
OTL Extras logfile created on: 9/20/2010 8:20:09 PM - Run 1
OTL by OldTimer - Version 3.2.14.0 Folder = C:\Documents and Settings\HP_Owner\Desktop
Windows XP Home Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
503.00 Mb Total Physical Memory | 89.00 Mb Available Physical Memory | 18.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 35.00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 460.29 Gb Total Space | 413.16 Gb Free Space | 89.76% Space Free | Partition Type: NTFS
Drive D: | 5.45 Gb Total Space | 0.37 Gb Free Space | 6.85% Space Free | Partition Type: FAT32
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 226.81 Gb Total Space | 147.34 Gb Free Space | 64.96% Space Free | Partition Type: NTFS
Drive H: | 6.07 Gb Total Space | 0.71 Gb Free Space | 11.65% Space Free | Partition Type: FAT32
I: Drive not present or media not loaded
Drive N: | 31.72 Gb Total Space | 14.69 Gb Free Space | 46.30% Space Free | Partition Type: NTFS
Drive O: | 5.53 Gb Total Space | 2.36 Gb Free Space | 42.62% Space Free | Partition Type: FAT32
Computer Name: OFFICE-HP
Current User Name: HP_Owner
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Minimal
Quick Scan
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDBrowse] – "C:\Program Files\ACD Systems\ACDSee\9.0\ACDSeeQV.exe" "%1" (ACD Systems Ltd.)
Directory [AddToPlaylistVLC] – C:\Program Files\VideoLAN\VLC\vlc.exe –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] – C:\PROGRA~1\MI1933~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] – C:\Program Files\VideoLAN\VLC\vlc.exe –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%ProgramFiles%\iTunes\iTunes.exe" = %ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes – (Apple Computer, Inc.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe – ()
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard Company)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Computer, Inc.)
"C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe" = C:\Program Files\Updates from HP\309731\Program\Updates from HP.exe:*:Enabled:BackWeb for Pavilion – (Hewlett-Packard)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook – (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove – (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote – (Microsoft Corporation)
"C:\Program Files\InterVideo\DVD8\WinDVD.exe" = C:\Program Files\InterVideo\DVD8\WinDVD.exe:*:Enabled:WinDVD – (InterVideo Inc.)
"C:\Program Files\Google\Google Talk\googletalk.exe" = C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk – (Google)
"G:\Program Files\AIM\aim.exe" = G:\Program Files\AIM\aim.exe:*:Enabled:AOL Instant Messenger – (America Online, Inc.)
"C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe" = C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe:*:Enabled:iviRegMgr – (InterVideo)
"C:\Program Files\McAfee\MSC\mcupdui.exe" = C:\Program Files\McAfee\MSC\mcupdui.exe:*:Enabled:mcupdui – File not found
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe – ()
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxs08.exe:*:Enabled:hpofxs08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard Company)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00FC6799-866E-44A1-A60C-DCF394CF56FD}" = iTunes
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{09DA4F91-2A09-4232-AB8C-6BC740096DE3}" = Sonic Update Manager
"{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA}" = PC-Doctor for Windows
"{0D182A5E-AEE0-42ca-BD1D-4EEB2FFA256D}" = HP Image Zone Plus 4.2.3
"{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}" = Microsoft Plus! Photo Story 2 LE
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX860_series" = Canon MX860 series MP Drivers
"{11C98E1A-EC91-4B38-B44C-C562292D8453}" = Adobe Premiere Elements 2.0
"{14589F05-C658-4594-9429-D437BA688686}" = IntelliMover Data Transfer Demo
"{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}" = Google Earth
"{2012D762-5DCA-455A-B5FE-EDF79BC93E18}" = HP Photosmart C4700 All-In-One Driver Software 13.0 Rel .6
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = InterVideo WinDVD 8
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"{267868CE-6DFF-40F7-9C58-C01119B7B117}" = Fax
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 17
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2BBC9458-07CA-4843-848B-5C8146E5EFA8}" = CreativeProjects
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{34A59AC3-6C5C-4A09-A7F5-369A37176C8A}" = AiOSoftware
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3AE681E0-4E8D-453F-950A-48534D3C0724}" = Copy
"{3AEF2F6C-F1D3-47CD-BF3B-A327F1FABE58}" = PSPrinters06
"{41254D7B-EADF-4078-AE4A-BD73B300EE86}" = Unload
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{444B6A7B-0E26-4416-A43F-D1C9AAE6075D}" = Canon CanoScan Toolbox 4.8
"{457791C5-D702-4143-A7B2-2744BE9573F2}" = HP Software Update
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4C04DF1B-6A39-4299-9DD1-1FA60000266E}" = HP Photosmart Cameras 4.0
"{50CD421F-CAFD-46C4-BEFD-E1C46FE63062}" = Manual CanoScan 8400F
"{561A9B4E-2E48-4149-B977-59C7AFF62B52}" = HPIZ423
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{597D73A8-5FDB-4bc1-9893-40B54459F1BC}" = ProductContext
"{5BE42A03-E7B8-42A9-B1BB-FC48B03D58B8}" = Presto! PageManager 6.11
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6B350CA4-0031-0002-3131-34999AD85AEC}" = InterVideo WinDVD Creator
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}" = Microsoft Plus! Digital Media Edition Installer
"{725249C3-B94C-4141-8799-0D3BA43D0812}" = CameraDrivers
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{79D5997E-BF79-48BB-8B41-9BE59C15C2D7}" = OmniPage SE 2.0
"{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Easy Internet Sign-up
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver
"{8DC42D05-680B-41B0-8878-6C14D24602DB}" = QuickTime
"{8EDBA74D-0686-4C99-BFDD-F894678E5102}" = Adobe Common File Installer
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{8FFC924C-ED06-44CB-8867-3CA778ECE903}" = Adobe Help Center 2.0
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer
"{922E8525-AC7E-4294-ACAA-43712D4423C0}" = Adobe Flash Player 10 ActiveX
"{9541FED0-327F-4DF0-8B96-EF57EF622F19}" = Sonic RecordNow!
"{981FB376-8418-4EA8-BBED-9DE5AA63E7D5}" = SkinsHP1
"{9CB2512B-3EC4-43DF-8002-46BDAB5EDD1B}" = QuickProjects
"{9EEBF8D5-8712-4D1D-88F4-4CDC2D270BC3}" = PrintScreen
"{A1062847-0846-427A-92A1-BB8251A91E91}" = HP PSC & OfficeJet 4.0
"{A1DCC235-DACC-4E1F-8D11-D630634B4AEF}" = PhotoGallery
"{A2500497-FD32-493e-B8E5-28D6728DBEF5}" = Readme
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A4EA3AB4-E78C-4286-96DF-26035507CE55}" = AiO_Scan
"{A55F4F9F-CCA8-4732-AA1F-0390A4A50947}" = C4700
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}" = Photosmart 320,370,7400,8100,8400 Series
"{AC76BA86-7AD7-1033-7B44-A92000000001}" = Adobe Reader 9.2
"{ADAED43C-BBD9-42C5-8B21-F4FBFA81E3C3}" = Palm
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{B2455727-ED8F-4643-8A6E-F4AB8DE3633D}" = Network
"{B2D41883-3BFC-4BA0-A2F6-5A2C9836C238}" = ACDSee 9 Photo Manager
"{B32C75F2-7495-4D01-9431-C11E97D66F8C}" = DocProc
"{B45D9FEE-1AF4-46F3-9A83-2545F81547F5}" = CreativeProjectsTemplates
"{B56D5B09-C4FB-4EA0-8EAD-7BC3E2715A2D}" = DocumentViewer
"{BCC992E5-5C81-4066-9B55-03DC10B24D21}" = InstantShare
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C3F058C0-A21C-452D-8D99-95B1A45F417D}" = InterVideo DiscLabel
"{C43048A9-742C-4DAD-90D2-E3B53C9DB825}" = Logitech QuickCam Software
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D0122362-6333-4DE4-93F6-A5A2F3CC101A}" = HP Organize
"{D2261C4B-4D9B-4149-8472-31B7A2FEAB91}" = ArcSoft PhotoStudio 5.5
"{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser
"{D87149B3-7A1D-4548-9CBF-032B791E5908}" = Desktop Doctor
"{D958FAC4-BAE0-4B1D-A42E-DE9BFDE7DDEE}" = Canon PhotoRecord
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E0879DDC-F053-4068-80C1-DBC358AC5917}" = LS_HSI
"{E36F3199-C282-47CA-BAC7-2B77D247E760}" = PS_AIO_06_C4700_SW_Min
"{EB807EB6-5179-48B7-98D4-7B4934A57A81}" = Documents To Go
"{EED5156C-4BA8-4105-A506-DB9D00F8B68D}" = ACDSee for PENTAX
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F419D20A-7719-4639-8E30-C073A040D878}" = HP Deskjet Preloaded Printer Drivers
"{F54AC413-D2C6-4A24-B324-370C223C6250}" = Adobe Photoshop Elements 6.0
"{FF26F7EA-BCEE-478C-9A1B-6B4F88717D73}" = CueTour
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop Elements 6" = Adobe Photoshop Elements 6.0
"Agere Systems Soft Modem" = Agere Systems PCI Soft Modem
"AVS DVD Player_is1" = AVS DVD Player version 2.4
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.2
"BackWeb-309731 Uninstaller" = Updates from HP
"Canon MX860 series User Registration" = Canon MX860 series User Registration
"Canon_IJ_Network_Scan_UTILITY" = Canon IJ Network Scan Utility
"Canon_IJ_Network_UTILITY" = Canon IJ Network Tool
"CANONBJ_Deinstall_CNMCP61.DLL" = Canon PIXMA iP3000
"ComcastHSI" = Comcast High-Speed Internet Install Wizard
"DVD Shrink_is1" = DVD Shrink 3.2
"DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5_is1" = DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.1.0.0
"Easy-PhotoPrint" = Canon Utilities Easy-PhotoPrint
"Easy-WebPrint" = Easy-WebPrint
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Google Updater" = Google Updater
"Help and Support Additions" = Help and Support Additions
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photo & Imaging" = HP Image Zone 4.2.3
"HP Print Projects" = HP Print Projects 1.0
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{00FC6799-866E-44A1-A60C-DCF394CF56FD}" = iTunes
"InstallShield_{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA}" = PC-Doctor for Windows
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = InterVideo WinDVD 8
"InstallShield_{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Easy Internet Sign-up
"Logitech Print Service" = Logitech Print Service
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10)
"MP Navigator EX 2.1" = Canon MP Navigator EX 2.1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSNINST" = MSN
"N360" = Norton Security Suite
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PremElem20" = Adobe Premiere Elements 2.0
"Python 2.2 combined Win32 extensions" = Python 2.2 combined Win32 extensions
"Python 2.2.1" = Python 2.2.1
"VLC media player" = VLC media player 0.9.2
"WILLPower" = WILLPower v6
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting 4.1.0.366
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 9/10/2010 9:24:45 PM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application ACDSee9.exe, version 9.0.55.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 9/10/2010 9:24:54 PM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application ACDSee9.exe, version 9.0.55.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2010 8:43:46 AM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2010 9:56:24 AM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2010 9:56:45 AM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/17/2010 7:19:37 AM | Computer Name = OFFICE-HP | Source = Application Error | ID = 1000
Description = Faulting application itunes.exe, version 4.6.0.15, faulting module
itunes.exe, version 4.6.0.15, fault address 0x002b9248.
Error - 9/17/2010 5:18:40 PM | Computer Name = OFFICE-HP | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
Error - 9/18/2010 5:07:24 PM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application msimn.exe, version 6.0.2900.2180, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/20/2010 5:18:34 PM | Computer Name = OFFICE-HP | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
Error - 9/20/2010 7:35:19 PM | Computer Name = OFFICE-HP | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.5730.13, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.
[ Application Events ]
Error - 9/10/2010 9:24:45 PM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application ACDSee9.exe, version 9.0.55.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 9/10/2010 9:24:54 PM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application ACDSee9.exe, version 9.0.55.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2010 8:43:46 AM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2010 9:56:24 AM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/11/2010 9:56:45 AM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 7.0.5730.13, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/17/2010 7:19:37 AM | Computer Name = OFFICE-HP | Source = Application Error | ID = 1000
Description = Faulting application itunes.exe, version 4.6.0.15, faulting module
itunes.exe, version 4.6.0.15, fault address 0x002b9248.
Error - 9/17/2010 5:18:40 PM | Computer Name = OFFICE-HP | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
Error - 9/18/2010 5:07:24 PM | Computer Name = OFFICE-HP | Source = Application Hang | ID = 1002
Description = Hanging application msimn.exe, version 6.0.2900.2180, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/20/2010 5:18:34 PM | Computer Name = OFFICE-HP | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
Error - 9/20/2010 7:35:19 PM | Computer Name = OFFICE-HP | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 7.0.5730.13, faulting module
ntdll.dll, version 5.1.2600.2180, fault address 0x00018fea.
[ System Events ]
Error - 9/20/2010 7:53:55 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7000
Description = The 791FA825 service failed to start due to the following error: %%1053
Error - 9/20/2010 7:57:52 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the B6E3FA7F service to connect.
Error - 9/20/2010 7:57:52 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7000
Description = The B6E3FA7F service failed to start due to the following error: %%1053
Error - 9/20/2010 7:58:23 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the B6E3FA7F service to connect.
Error - 9/20/2010 7:58:23 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7000
Description = The B6E3FA7F service failed to start due to the following error: %%1053
Error - 9/20/2010 7:58:55 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the B6E3FA7F service to connect.
Error - 9/20/2010 7:58:55 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7000
Description = The B6E3FA7F service failed to start due to the following error: %%1053
Error - 9/20/2010 7:58:56 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7000
Description = The B6E3FA7F service failed to start due to the following error: %%3
Error - 9/20/2010 7:58:58 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7000
Description = The B6E3FA7F service failed to start due to the following error: %%3
Error - 9/20/2010 7:58:59 PM | Computer Name = OFFICE-HP | Source = Service Control Manager | ID = 7000
Description = The B6E3FA7F service failed to start due to the following error: %%3
< End of report >
Good Luck.
Thanks much,
Joe K
