Usps Virus, security tool

My father opened this silly virus and now i cant do anything..

Otl
OTL logfile created on: 11/11/2010 9:42:39 PM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Administrator.BASEMENT\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 76.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Program Files
Drive C: | 147.14 Gb Total Space | 109.66 Gb Free Space | 74.52% Space Free | Partition Type: NTFS
Drive D: | 5.52 Gb Total Space | 2.58 Gb Free Space | 46.73% Space Free | Partition Type: NTFS
Drive E: | 415.07 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: BASEMENT | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Administrator.BASEMENT\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\WINDOWS.0\explorer.exe (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Administrator.BASEMENT\Desktop\OTL.exe (OldTimer Tools)


========== Win32 Services (SafeList) ==========

SRV - (AppMgmt) – C:\WINDOWS.0\System32\appmgmts.dll File not found
SRV - (aspimgr) – C:\WINDOWS.0\system32\aspimgr.exe (Microsoft Corporation)
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (HPSLPSVC) – C:\Program Files\Hewlett-Packard\Digital Imaging\bin\HPSLPSVC32.DLL (Hewlett-Packard Co.)
SRV - (McComponentHostService) – C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (hpqcxs08) – C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqcxs08.dll (Hewlett-Packard Co.)
SRV - (hpqddsvc) – C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqddsvc.dll (Hewlett-Packard Co.)
SRV - (SvrWsc) – C:\WINDOWS.0\System32\svrwsc.exe (PIQFKq53DD)
SRV - (AOL ACS) – C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (AOL LLC)
SRV - (SNDSrvc) – C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (Symantec Corporation)
SRV - (wuauserv) – C:\WINDOWS\system32\wuauserv.dll (Microsoft Corporation)
SRV - (WANMiniportService) WAN Miniport (ATW) – C:\WINDOWS.0\wanmpsvc.exe (America Online, Inc.)


========== Driver Services (SafeList) ==========

DRV - (catchme) – C:\DOCUME~1\Tom\LOCALS~1\Temp\catchme.sys File not found
DRV - (NPF) WinPcap Packet Driver (NPF) – C:\WINDOWS.0\system32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (MBAMSwissArmy) – C:\WINDOWS.0\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (Tcpip6) – C:\WINDOWS.0\system32\drivers\tcpip6.sys (Microsoft Corporation)
DRV - (Lbd) – C:\WINDOWS.0\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (NwlnkIpx) – C:\WINDOWS.0\system32\drivers\nwlnkipx.sys (Microsoft Corporation)
DRV - (nm) – C:\WINDOWS.0\system32\drivers\nmnt.sys (Microsoft Corporation)
DRV - (usbaudio) USB Audio Driver (WDM) – C:\WINDOWS.0\system32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (Cdralw2k) – C:\WINDOWS.0\System32\drivers\cdralw2k.sys (Sonic Solutions)
DRV - (Cdr4_xp) – C:\WINDOWS.0\System32\drivers\cdr4_xp.sys (Sonic Solutions)
DRV - (SymEvent) – C:\Program Files\Symantec\SYMEVENT.SYS (Symantec Corporation)
DRV - (cdudf_xp) – C:\WINDOWS.0\System32\drivers\Cdudf_xp.sys (Sonic Solutions)
DRV - (dvd_2K) – C:\WINDOWS.0\System32\drivers\dvd_2k.sys (Sonic Solutions)
DRV - (DVDVRRdr_xp) – C:\WINDOWS.0\System32\drivers\DVDVRRdr_xp.sys (Windows ® 2000 DDK provider)
DRV - (UDFReadr) – C:\WINDOWS.0\System32\drivers\Udfreadr.sys (Sonic Solutions)
DRV - (mmc_2K) – C:\WINDOWS.0\System32\drivers\mmc_2k.sys (Sonic Solutions)
DRV - (pwd_2k) – C:\WINDOWS.0\System32\drivers\Pwd_2k.sys (Sonic Solutions)
DRV - (SYMTDI) – C:\WINDOWS.0\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\WINDOWS.0\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (AFS2K) – C:\WINDOWS.0\System32\drivers\AFS2K.SYS (Oak Technology Inc.)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) – C:\WINDOWS.0\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ltmodem5) – C:\WINDOWS.0\system32\drivers\ltmdmnt.sys (LT)
DRV - (ALCXSENS) – C:\WINDOWS.0\system32\drivers\ALCXSENS.SYS (Sensaura)
DRV - (viasraid) – C:\WINDOWS.0\System32\DRIVERS\viasraid.sys (VIA Technologies inc,.ltd)
DRV - (psa805) Aurilium Sound Agent 2 (WDM) – C:\WINDOWS.0\system32\drivers\psa805.sys (QSound Labs, Inc.)
DRV - (viaagp1) – C:\WINDOWS.0\System32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.)
DRV - (QsndEnum) – C:\WINDOWS.0\system32\drivers\QsndEnum.sys (QSound Labs, Inc.)
DRV - (NwlnkNb) – C:\WINDOWS.0\system32\drivers\nwlnknb.sys (Microsoft Corporation)
DRV - (NwlnkSpx) – C:\WINDOWS.0\system32\drivers\nwlnkspx.sys (Microsoft Corporation)
DRV - (wanatw) WAN Miniport (ATW) – C:\WINDOWS.0\system32\drivers\wanatw4.sys (America Online, Inc.)
DRV - (ViaIde) – C:\WINDOWS.0\System32\DRIVERS\viaidexp.sys (VIA Technologies, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A8 D6 F8 0D 12 82 CB 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [removed]:1.0

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/10/09 11:22:50 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/05/18 11:07:29 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/10/18 13:20:07 | 000,000,000 | —D | M]

[2010/11/11 21:24:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator.BASEMENT\Application Data\Mozilla\Extensions
[2010/11/11 21:24:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator.BASEMENT\Application Data\Mozilla\Firefox\Profiles\y4fw1cy4.default\extensions
[2010/11/11 21:24:50 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Administrator.BASEMENT\Application Data\Mozilla\Firefox\Profiles\y4fw1cy4.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/11/11 21:24:49 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator.BASEMENT\Application Data\Mozilla\Firefox\Profiles\y4fw1cy4.default\extensions\staged-xpis
[2006/09/27 19:21:40 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions
[2010/05/18 11:06:13 | 000,000,000 | —D | M] – C:\Program Files\Mozilla Firefox\extensions\[removed]

O1 HOSTS File: ([2008/08/26 08:42:00 | 000,259,167 | R— | M]) - C:\WINDOWS.0\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 1001-search.info
O1 - Hosts: 127.0.0.1 www.1001-search.info
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.123topsearch.com
O1 - Hosts: 127.0.0.1 123topsearch.com
O1 - Hosts: 127.0.0.1 www.132.com
O1 - Hosts: 127.0.0.1 132.com
O1 - Hosts: 127.0.0.1 136136.net
O1 - Hosts: 127.0.0.1 www.136136.net
O1 - Hosts: 9024 more lines…
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\Hewlett-Packard\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O2 - BHO: (AOL Toolbar Launcher) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\Hewlett-Packard\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC)
O4 - HKLM..\Run: [HostManager] C:\Program Files\Common Files\AOL\1168712829\ee\AOLSoftware.exe (AOL Inc.)
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Startup\hp psc 1000 series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe (Hewlett-Packard Co.)
O4 - Startup: C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\Programs\Startup\hpoddt01.exe.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll (AOL LLC)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Hewlett-Packard\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS.0\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://www.apple.com/qtactivex/qtplugin.cab (QuickTime Object)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.1…toUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6…922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} http://www2.snapfish.com/SnapfishActivia.cab (Snapfish Activia)
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} http://lads.myspace.com/upload/MySpaceUploader1006.cab (MySpace Uploader Control)
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-24-0.cab (EPUImageControl Class)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.0…oUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} http://picture.vzw.com/activex/VerizonWire…loadControl.cab (Verizon Wireless Media Upload)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Java Plug-in 1.5.0_10)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} Reg Error: Value error. (Reg Error: Key error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} https://www.secure-session.com/include/XUpload.ocx (Persits Software XUpload)
O16 - DPF: {F7A05BAC-9778-410A-9CDE-BFBD4D5D2B7F} http://216.249.24.62/code/iPIX-ImageWell-ipix.cab (iPIX Media Send Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS.0\explorer.exe (Microsoft Corporation)
O24 - Desktop BackupWallPaper:
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2003/10/10 21:32:03 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2010/01/29 17:07:49 | 000,672,700 | R— | M] () - E:\Autorun.inf – [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS.0\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - C:\WINDOWS.0\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: wuauserv - C:\WINDOWS\system32\wuauserv.dll (Microsoft Corporation)

Drivers32: msacm.l3acm - C:\WINDOWS.0\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS.0\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS.0\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS.0\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS.0\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS.0\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS.0\System32\ir32_32.dll ()
Drivers32: VIDC.WMV3 - C:\WINDOWS.0\System32\wmv9vcm.dll (Microsoft Corporation)
Drivers32: vidc.yv12 - C:\WINDOWS.0\System32\DivX.dll (DivX, Inc.)
Unable to start service SrService!

========== Files/Folders - Created Within 30 Days ==========

[2010/11/11 21:41:15 | 000,575,488 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Administrator.BASEMENT\Desktop\OTL.exe
[2010/11/11 21:34:02 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator.BASEMENT\Application Data\Adobe
[2010/11/11 21:24:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator.BASEMENT\Local Settings\Application Data\Mozilla
[2010/11/11 21:24:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Administrator.BASEMENT\Application Data\Mozilla
[2010/11/11 21:23:53 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Administrator.BASEMENT\PrivacIE
[2010/11/11 08:12:58 | 000,064,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS.0\System32\aspimgr.exe
[2010/11/11 07:58:21 | 000,281,104 | —- | C] (CACE Technologies, Inc.) – C:\WINDOWS.0\System32\wpcap.dll
[2010/11/11 07:58:21 | 000,100,880 | —- | C] (CACE Technologies, Inc.) – C:\WINDOWS.0\System32\Packet.dll
[2010/11/11 07:58:21 | 000,050,704 | —- | C] (CACE Technologies, Inc.) – C:\WINDOWS.0\System32\drivers\npf.sys
[2010/11/10 08:25:50 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\McAfee
[2010/11/03 21:28:19 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS.0\Application Data\McAfee Security Scan
[2010/11/03 21:28:15 | 000,000,000 | —D | C] – C:\Program Files\McAfee Security Scan
[5 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010/11/11 21:41:16 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Administrator.BASEMENT\Desktop\OTL.exe
[2010/11/11 21:33:46 | 000,001,374 | —- | M] () – C:\WINDOWS.0\System32\wpa.dbl
[2010/11/11 21:33:16 | 000,002,048 | –S- | M] () – C:\WINDOWS.0\bootstat.dat
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\tasks\Ad-Aware Update (Weekly).job
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\tasks\Ad-Aware Update (Daily 4).job
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\tasks\Ad-Aware Update (Daily 3).job
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\tasks\Ad-Aware Update (Daily 2).job
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\tasks\Ad-Aware Update (Daily 1).job
[2010/11/11 16:48:09 | 000,071,767 | —- | M] () – C:\VETlog.dmp
[2010/11/11 16:48:01 | 000,000,899 | RHS- | M] () – C:\boot.ini
[2010/11/11 08:12:58 | 000,064,000 | —- | M] (Microsoft Corporation) – C:\WINDOWS.0\System32\aspimgr.exe
[2010/11/11 07:58:21 | 000,281,104 | —- | M] (CACE Technologies, Inc.) – C:\WINDOWS.0\System32\wpcap.dll
[2010/11/11 07:58:21 | 000,100,880 | —- | M] (CACE Technologies, Inc.) – C:\WINDOWS.0\System32\Packet.dll
[2010/11/11 07:58:21 | 000,050,704 | —- | M] (CACE Technologies, Inc.) – C:\WINDOWS.0\System32\drivers\npf.sys
[2010/10/22 21:18:35 | 000,490,736 | —- | M] () – C:\WINDOWS.0\System32\perfh009.dat
[2010/10/22 21:18:35 | 000,089,426 | —- | M] () – C:\WINDOWS.0\System32\perfc009.dat
[2010/10/22 08:31:56 | 000,004,625 | —- | M] () – C:\WINDOWS.0\imsins.BAK
[5 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/06/17 10:24:58 | 000,000,010 | —- | C] () – C:\WINDOWS.0\msoffice.ini
[2010/04/08 22:30:03 | 000,009,916 | -HS- | C] () – C:\Documents and Settings\All Users.WINDOWS.0\Application Data\6e6301sD6p
[2009/12/15 14:06:50 | 000,044,544 | —- | C] () – C:\WINDOWS.0\System32\GIF89.DLL
[2009/11/26 08:37:08 | 000,323,584 | —- | C] () – C:\WINDOWS.0\System32\FoxImager.dll
[2008/10/06 11:29:11 | 000,065,536 | —- | C] () – C:\WINDOWS.0\System32\HPPLVS.dll
[2008/03/13 02:01:49 | 000,003,413 | —- | C] () – C:\WINDOWS.0\System32\MRT.INI
[2007/12/11 14:43:44 | 000,012,288 | —- | C] () – C:\WINDOWS.0\System32\DivXWMPExtType.dll
[2007/10/15 09:53:34 | 000,000,529 | —- | C] () – C:\WINDOWS.0\wininit.ini
[2007/08/05 22:05:34 | 000,005,252 | —- | C] () – C:\WINDOWS.0\CDPlayer.ini
[2007/08/05 22:04:53 | 000,000,503 | —- | C] () – C:\WINDOWS.0\CDRip.INI
[2007/08/05 22:04:21 | 000,151,040 | —- | C] () – C:\WINDOWS.0\System32\wimadll.dll
[2007/07/26 11:01:50 | 000,114,688 | —- | C] () – C:\WINDOWS.0\System32\hppatusg01.dll
[2007/04/22 19:15:29 | 003,596,288 | —- | C] () – C:\WINDOWS.0\System32\qt-dx331.dll
[2007/02/15 22:53:03 | 000,000,147 | —- | C] () – C:\WINDOWS.0\bizpub32.INI
[2007/02/03 10:19:55 | 000,000,003 | —- | C] () – C:\Documents and Settings\All Users.WINDOWS.0\Application Data\DragToDiscUserNameF.txt
[2007/02/03 08:09:30 | 000,000,926 | —- | C] () – C:\WINDOWS.0\CDRipper.ini
[2007/01/13 13:25:07 | 000,000,030 | —- | C] () – C:\WINDOWS.0\atid.ini
[2006/11/16 13:25:12 | 000,000,754 | —- | C] () – C:\WINDOWS.0\WORDPAD.INI
[2006/10/16 00:08:20 | 000,001,759 | —- | C] () – C:\Documents and Settings\All Users.WINDOWS.0\Application Data\QTSBandwidthCache
[2006/10/12 01:23:14 | 000,002,473 | —- | C] () – C:\Documents and Settings\All Users.WINDOWS.0\Application Data\hpzinstall.log
[2006/10/11 23:34:50 | 000,000,061 | —- | C] () – C:\WINDOWS.0\smscfg.ini
[2006/10/11 23:27:54 | 000,363,520 | —- | C] () – C:\WINDOWS.0\System32\psisdecd.dll
[2006/10/11 16:20:03 | 000,004,249 | —- | C] () – C:\WINDOWS.0\ODBCINST.INI
[2004/09/17 16:37:42 | 000,069,632 | —- | C] () – C:\WINDOWS.0\System32\vuins32.dll
[2004/08/18 11:00:00 | 000,000,012 | —- | C] () – C:\WINDOWS.0\ws386.ini
[2004/02/09 18:18:18 | 000,155,648 | —- | C] () – C:\WINDOWS.0\System32\RTLCPAPI.dll
[2003/10/31 16:28:25 | 000,000,312 | —- | C] () – C:\WINDOWS.0\System32\OEMINFO.INI
[2003/03/08 23:31:04 | 000,561,152 | —- | C] () – C:\WINDOWS.0\System32\hpotscl.dll

========== LOP Check ==========

[2007/07/16 14:55:53 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator.BASEMENT\Application Data\Viewpoint
[2007/07/16 18:30:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS.0\Application Data\cake link byte time
[2007/01/22 00:36:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS.0\Application Data\Viewpoint
[2009/11/05 10:36:50 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users.WINDOWS.0\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\Tasks\Ad-Aware Update (Daily 1).job
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\Tasks\Ad-Aware Update (Daily 2).job
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\Tasks\Ad-Aware Update (Daily 3).job
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\Tasks\Ad-Aware Update (Daily 4).job
[2010/11/11 21:26:45 | 000,000,472 | —- | M] () – C:\WINDOWS.0\Tasks\Ad-Aware Update (Weekly).job
[2009/01/27 23:26:20 | 000,000,338 | —- | M] () – C:\WINDOWS.0\Tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1224905129.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/11/11 21:33:07 | 000,026,637 | —- | M] () – C:\aaw7boot.log
[2010/07/29 11:52:45 | 000,010,920 | —- | M] () – C:\aolconnfix.exe
[2010/07/29 11:52:45 | 000,001,039 | —- | M] () – C:\aolconnfix.txt
[2004/07/02 18:43:39 | 000,003,072 | —- | M] () – C:\ASSOCIAT.CDX
[2004/07/02 18:43:39 | 000,000,513 | —- | M] () – C:\ASSOCIAT.DBF
[2004/07/02 18:43:39 | 000,000,512 | —- | M] () – C:\ASSOCIAT.FPT
[2003/10/10 21:32:03 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2007/03/04 22:39:16 | 070,764,085 | —- | M] () – C:\bb1.wmv
[2004/03/02 21:52:31 | 000,000,196 | -HS- | M] () – C:\BOOT.BAK
[2010/11/11 16:48:01 | 000,000,899 | RHS- | M] () – C:\boot.ini
[2008/06/05 20:06:21 | 000,003,706 | —- | M] () – C:\clientlog.txt
[2002/08/29 14:00:00 | 000,245,920 | RHS- | M] () – C:\cmldr
[2007/08/05 22:06:20 | 000,000,000 | —- | M] () – C:\CoffeeCupDrive.txt
[2010/04/10 11:30:52 | 000,013,107 | —- | M] () – C:\ComboFix.txt
[2006/10/11 22:21:29 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2004/07/02 18:43:39 | 000,000,073 | —- | M] () – C:\CUSTLIST.DBF
[2007/07/16 14:44:42 | 000,000,212 | —- | M] () – C:\delete.bat
[2006/09/09 22:32:00 | 000,212,849 | —- | M] () – C:\hijackthis.zip
[2007/03/19 23:37:05 | 286,467,295 | —- | M] () – C:\How do.wmv
[2010/10/08 10:13:07 | 000,000,522 | —- | M] () – C:\hpfr3420.xml
[2010/10/08 10:13:07 | 000,074,655 | —- | M] () – C:\hpfr3425.log
[2004/07/02 18:43:40 | 000,045,568 | —- | M] () – C:\INVOTEMP.FRT
[2004/07/02 18:43:40 | 000,075,077 | —- | M] () – C:\INVOTEMP.FRX
[2004/07/02 18:43:39 | 000,010,752 | —- | M] () – C:\INVOWORK.CDX
[2004/07/02 18:43:45 | 000,001,304 | —- | M] () – C:\INVOWORK.DBF
[2004/07/02 18:43:39 | 000,000,576 | —- | M] () – C:\INVOWORK.FPT
[2004/11/13 20:09:36 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/11/11 08:40:10 | 000,000,109 | —- | M] () – C:\mbam-error.txt
[2004/11/13 20:09:36 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2007/07/16 14:33:57 | 000,000,255 | —- | M] () – C:\NoLopOLD.log
[2006/10/13 00:52:34 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/10/03 11:41:28 | 000,250,048 | RHS- | M] () – C:\ntldr
[2010/11/11 21:33:09 | 704,643,072 | -HS- | M] () – C:\pagefile.sys
[2010/04/09 17:43:57 | 000,000,365 | —- | M] () – C:\rkill.log
[2009/08/02 11:44:43 | 000,000,268 | -H– | M] () – C:\sqmdata00.sqm
[2009/08/17 08:16:15 | 000,000,232 | -H– | M] () – C:\sqmdata01.sqm
[2009/09/02 09:01:43 | 000,000,232 | -H– | M] () – C:\sqmdata02.sqm
[2008/06/07 08:45:11 | 000,000,232 | -H– | M] () – C:\sqmdata03.sqm
[2008/06/08 17:45:39 | 000,000,268 | -H– | M] () – C:\sqmdata04.sqm
[2008/06/23 07:54:52 | 000,000,268 | -H– | M] () – C:\sqmdata05.sqm
[2008/09/03 07:34:11 | 000,000,268 | -H– | M] () – C:\sqmdata06.sqm
[2008/10/18 09:16:19 | 000,000,268 | -H– | M] () – C:\sqmdata07.sqm
[2008/11/03 09:49:47 | 000,000,268 | -H– | M] () – C:\sqmdata08.sqm
[2008/11/04 07:08:52 | 000,000,268 | -H– | M] () – C:\sqmdata09.sqm
[2008/12/03 08:53:14 | 000,000,268 | -H– | M] () – C:\sqmdata10.sqm
[2008/12/17 09:11:40 | 000,000,232 | -H– | M] () – C:\sqmdata11.sqm
[2009/01/02 08:23:40 | 000,000,232 | -H– | M] () – C:\sqmdata12.sqm
[2009/03/17 07:04:13 | 000,000,232 | -H– | M] () – C:\sqmdata13.sqm
[2009/03/18 06:55:53 | 000,000,232 | -H– | M] () – C:\sqmdata14.sqm
[2009/04/02 07:18:04 | 000,000,232 | -H– | M] () – C:\sqmdata15.sqm
[2009/06/16 11:37:33 | 000,000,232 | -H– | M] () – C:\sqmdata16.sqm
[2009/06/17 07:01:08 | 000,000,268 | -H– | M] () – C:\sqmdata17.sqm
[2009/08/02 07:36:58 | 000,000,268 | -H– | M] () – C:\sqmdata18.sqm
[2009/08/02 11:12:22 | 000,000,268 | -H– | M] () – C:\sqmdata19.sqm
[2009/08/02 11:44:43 | 000,000,244 | -H– | M] () – C:\sqmnoopt00.sqm
[2009/08/17 08:16:15 | 000,000,244 | -H– | M] () – C:\sqmnoopt01.sqm
[2009/09/02 09:01:43 | 000,000,244 | -H– | M] () – C:\sqmnoopt02.sqm
[2008/06/07 08:45:11 | 000,000,244 | -H– | M] () – C:\sqmnoopt03.sqm
[2008/06/08 17:45:39 | 000,000,244 | -H– | M] () – C:\sqmnoopt04.sqm
[2008/06/23 07:54:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt05.sqm
[2008/09/03 07:34:11 | 000,000,244 | -H– | M] () – C:\sqmnoopt06.sqm
[2008/10/18 09:16:19 | 000,000,244 | -H– | M] () – C:\sqmnoopt07.sqm
[2008/11/03 09:49:46 | 000,000,244 | -H– | M] () – C:\sqmnoopt08.sqm
[2008/11/04 07:08:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt09.sqm
[2008/12/03 08:53:13 | 000,000,244 | -H– | M] () – C:\sqmnoopt10.sqm
[2008/12/17 09:11:40 | 000,000,244 | -H– | M] () – C:\sqmnoopt11.sqm
[2009/01/02 08:23:40 | 000,000,244 | -H– | M] () – C:\sqmnoopt12.sqm
[2009/03/17 07:04:12 | 000,000,244 | -H– | M] () – C:\sqmnoopt13.sqm
[2009/03/18 06:55:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt14.sqm
[2009/04/02 07:18:03 | 000,000,244 | -H– | M] () – C:\sqmnoopt15.sqm
[2009/06/16 11:37:32 | 000,000,244 | -H– | M] () – C:\sqmnoopt16.sqm
[2009/06/17 07:01:08 | 000,000,244 | -H– | M] () – C:\sqmnoopt17.sqm
[2009/08/02 07:36:58 | 000,000,244 | -H– | M] () – C:\sqmnoopt18.sqm
[2009/08/02 11:12:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt19.sqm
[2004/07/07 06:51:33 | 000,019,520 | —- | M] () – C:\STTEMP.FRT
[2004/07/07 06:51:33 | 000,033,752 | —- | M] () – C:\STTEMP.FRX
[2006/01/26 22:12:58 | 000,000,279 | -H– | M] () – C:\T4Metrics.log
[2007/03/04 23:29:03 | 000,000,002 | —- | M] () – C:\temphtm.HTM
[2004/07/02 14:47:00 | 000,001,089 | —- | M] () – C:\TMPSPEC.DBF
[2004/07/02 14:47:00 | 000,000,512 | —- | M] () – C:\TMPSPEC.FPT
[2010/11/11 16:48:09 | 000,071,767 | —- | M] () – C:\VETlog.dmp
[2010/11/11 16:48:09 | 057,416,122 | —- | M] () – C:\VETlog.txt

< %systemroot%\Fonts\*.com >
[2006/04/18 14:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS.0\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 13:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS.0\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS.0\Fonts\GlobalSerif.CompositeFont
[2006/06/29 13:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS.0\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/10/11 23:25:42 | 000,000,067 | -HS- | M] () – C:\WINDOWS.0\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 07:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS.0\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/09/10 14:12:46 | 000,229,888 | —- | M] (Hewlett-Packard ) – C:\WINDOWS.0\system32\spool\prtprocs\w32x86\HP1006S.DLL
[2009/04/16 13:08:20 | 000,312,832 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS.0\system32\spool\prtprocs\w32x86\hpfpp70v.dll
[2008/07/06 05:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS.0\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2006/10/11 16:18:06 | 000,094,208 | —- | M] () – C:\WINDOWS.0\system32\config\default.sav
[2006/10/11 16:18:06 | 000,606,208 | —- | M] () – C:\WINDOWS.0\system32\config\software.sav
[2006/10/11 16:18:06 | 000,425,984 | —- | M] () – C:\WINDOWS.0\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >
[2008/01/28 21:18:42 | 000,000,000 | —D | M] – C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\bak
[2010/04/10 11:22:23 | 000,000,000 | —D | M] – C:\Program Files\Adobe\Reader 8.0\Reader\bak
[2008/02/26 14:00:27 | 000,000,000 | —D | M] – C:\Program Files\Common Files\Adobe\Updater5\bak
[2008/01/28 21:18:44 | 000,000,000 | —D | M] – C:\Program Files\Java\jre1.6.0_02\bin\bak
[2008/01/28 21:18:42 | 000,000,000 | —D | M] – C:\Program Files\Microsoft IntelliPoint\bak
[2008/01/28 21:18:42 | 000,000,000 | —D | M] – C:\Program Files\Microsoft IntelliType Pro\bak
[2008/01/28 21:18:41 | 000,000,000 | —D | M] – C:\Program Files\MSN Messenger\bak
[2008/01/28 21:18:43 | 000,000,000 | —D | M] – C:\Program Files\QuickTime\bak
[2010/04/10 11:22:25 | 000,000,000 | —D | M] – C:\Program Files\Roxio\Easy Media Creator 7\Drag to Disc\bak
[2010/04/10 11:22:25 | 000,000,000 | —D | M] – C:\Program Files\Spybot - Search & Destroy\bak

< %systemroot%\system32\bak. /s >
[2008/01/28 21:18:41 | 000,000,000 | —D | M] – C:\WINDOWS.0\system32\bak

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/10/03 11:50:32 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS.0\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >

< %USERPROFILE%\Desktop\*.exe >
[2007/07/16 14:16:18 | 000,040,448 | —- | M] (PunkTools) – C:\Documents and Settings\Administrator.BASEMENT\Desktop\NoLop.exe
[2010/11/11 21:41:16 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Administrator.BASEMENT\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-06-26 14:11:34

< End of report >

OTL Extras logfile created on: 11/11/2010 9:42:39 PM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\Administrator.BASEMENT\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 76.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 91.00% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Program Files
Drive C: | 147.14 Gb Total Space | 109.66 Gb Free Space | 74.52% Space Free | Partition Type: NTFS
Drive D: | 5.52 Gb Total Space | 2.58 Gb Free Space | 46.73% Space Free | Partition Type: NTFS
Drive E: | 415.07 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: BASEMENT | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:*:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:*:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"12555:TCP" = 12555:TCP:*:Enabled:shareaza
"12555:UDP" = 12555:UDP:*:Enabled:Shareaza2
"6346:TCP" = 6346:TCP:*:Enabled:shareaza3
"6346:UDP" = 6346:UDP:*:Enabled:shareaza4
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
"12777:TCP" = 12777:TCP:*:Enabled:sha
"12777:UDP" = 12777:UDP:*:Enabled:sah2

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\MSN Messenger\msncall.exe" = C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) – File not found
"C:\Program Files\MSN Messenger\livecall.exe" = C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) – File not found
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe – ()
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgpc01.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe – (Hewlett-Packard)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\HP Software Update\hpwucli.exe" = C:\Program Files\Hewlett-Packard\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\Hewlett-Packard\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Java\jre1.5.0_10\bin\javaw.exe" = C:\Program Files\Java\jre1.5.0_10\bin\javaw.exe:*:Enabled:Java™ 2 Platform Standard Edition binary – (Sun Microsystems, Inc.)
"C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe" = C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:*:Enabled:AOL TopSpeed – (AOL LLC)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader – (AOL LLC)
"C:\Program Files\Common Files\AOL\1168712829\ee\aolsoftware.exe" = C:\Program Files\Common Files\AOL\1168712829\ee\aolsoftware.exe:*:Enabled:AOL Services – (AOL Inc.)
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" = C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL Connectivity Service Dialer – (AOL LLC)
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" = C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL Connectivity Service – (AOL LLC)
"C:\Program Files\AOL 9.0\waol.exe" = C:\Program Files\AOL 9.0\waol.exe:*:Enabled:AOL – File not found
"C:\Program Files\Common Files\AOL\System Information\sinf.exe" = C:\Program Files\Common Files\AOL\System Information\sinf.exe:*:Enabled:AOL System Information – (AOL LLC)
"C:\Program Files\Common Files\AolCoach\en_en\player\AOLNySEV.exe" = C:\Program Files\Common Files\AolCoach\en_en\player\AOLNySEV.exe:*:Enabled:AOL – (Gteko Ltd.)
"C:\Program Files\AOL 9.1\waol.exe" = C:\Program Files\AOL 9.1\waol.exe:*:Enabled:AOL – File not found
"C:\Program Files\AOL 9.1a\waol.exe" = C:\Program Files\AOL 9.1a\waol.exe:*:Enabled:AOL – File not found
"C:\Program Files\Common Files\AOL\1168712829\ee\AOLDesktop.exe" = C:\Program Files\Common Files\AOL\1168712829\ee\AOLDesktop.exe:*:Enabled:AOL Desktop – (AOL LLC)
"C:\Program Files\AOL 9.1b\waol.exe" = C:\Program Files\AOL 9.1b\waol.exe:*:Enabled:AOL – File not found
"C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe" = C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe:*:Enabled:Shareaza – (Discordia, LTD)
"C:\CreativesFiles\Shareaza.exe" = C:\CreativesFiles\Shareaza.exe:*:Enabled:Shareaza Ultimate File Sharing – (Shareaza Development Team)
"C:\WINDOWS.0\system32\dpvsetup.exe" = C:\WINDOWS.0\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test – (Microsoft Corporation)
"C:\Program Files\AOL 9.5\waol.exe" = C:\Program Files\AOL 9.5\waol.exe:*:Enabled:AOL – (AOL Inc.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe – ()
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgpc01.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe – (Hewlett-Packard)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\Hewlett-Packard\HP Software Update\hpwucli.exe" = C:\Program Files\Hewlett-Packard\HP Software Update\hpwucli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\Hewlett-Packard\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\Hewlett-Packard\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan
"{097CDB1E-07C9-40F1-9972-F0F9F3A287E4}" = Network
"{0C2AF762-0565-4C91-9F55-B8B53BB82A38}" = Microsoft Office Accounting 2008 Equifax Addin
"{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}" = RemoteCapture 2.7.5
"{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}" = DeviceDiscovery
"{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}" = HPProductAssistant
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java™ 6 Update 19
"{270940EA-C235-40D9-B2AE-2D450356DF8E}" = Microsoft Office Accounting 2008
"{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}" = Microsoft SQL Server 2005 Tools Express Edition
"{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{2FB9EA69-51D4-4913-9AD5-762C034DE811}" = Status
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3E515F48-0420-4365-A96B-CF6FB5B349DA}" = Aurilium Sound Agent 2
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}" = Adobe® Photoshop® Album Starter Edition 3.0
"{537DB9D6-1AB1-4CE9-8DE7-312256B49A98}" = PS_AIO_06_C4700_SW_Min
"{53C398FE-CD56-412E-B3C7-B27F4B8B07D1}" = Microsoft IntelliType Pro 5.3
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{56B4002F-671C-49F4-984C-C760FE3806B5}" = Microsoft SQL Server VSS Writer
"{5B39603F-2A77-40E6-950D-ED7B8307933D}" = Microsoft IntelliPoint 5.3
"{5DCF0E4B-F8EA-4229-A0BD-5CA6D4AFB749}" = SolutionCenter
"{5FA793A6-0071-42C1-9355-8F69A428C44F}" = Microsoft Office Accounting ADP Payroll Addin
"{60FFB3E0-6D5B-4D73-AE5B-07E58B83AF0C}" = 32 Bit HP CIO Components Installer
"{68550918-63B5-4762-85CB-3C160AA4B213}" = HP Photosmart C4700 All-in-One Driver Software 14.0 Rel. 6
"{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}" = HP Photo and Imaging 2.0 - All-in-One Drivers
"{7169B8E4-2632-46B1-AA5F-167CB5FE5029}" = Symantec Network Drivers Update
"{74DC0593-6BC6-4001-AD5F-D810AFB68D86}" = HP Update
"{764D06D8-D8DE-411E-A1C8-D9E9380F8A84}" = Microsoft Works 7.0
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{797EE0CA-8165-405C-B5CE-F11EC20F1BB0}" = Microsoft VC9 runtime libraries
"{7B02BF60-796D-4616-908B-B31A63CFDEFB}" = HPCarePackCore
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{8EE94FD8-5F52-4463-A340-185D16328158}" = WebReg
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90AF0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office PowerPoint Viewer 2003
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9867A917-5D17-40DE-83BA-BEA5293194B1}" = HP Photo and Imaging 2.0 - All-in-One
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}" = HPSSupply
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.1
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B376402D-58EA-45EA-BD50-DD924EB67A70}" = HP Memories Disc
"{B391EECE-DFEA-4FC5-9D40-47FA43E2DBE6}" = Microsoft Office Accounting 2008 PayPal Addin
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B5978DF3-8A04-4F22-AF67-8CCE52E04B13}" = C4700
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{BB3447F6-9553-4AA9-960E-0DB5310C5779}" = GPBaseService2
"{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}" = Microsoft SQL Server Native Client
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BF39E1F8-2AFB-451F-BD19-AB9616B3BF74}" = Roxio Easy Media Creator 7.5 Trial
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C900EF06-2E76-49C7-8DB0-41F629B21DC5}" = hp psc 1200 series
"{C9618743-1A5C-461E-91C4-E013A3D70F3C}" = Adobe® Photoshop® Album Starter Edition 3.0.1
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD31E63D-47FD-491C-8117-CF201D0AFAB5}" = TrayApp
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D050D7362D214723AD585B541FFB6C11}" = DivX Content Uploader
"{D360FA88-17C8-4F14-B67F-13AAF9607B12}" = MarketResearch
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E3DF6916-2472-43D9-8B3C-9F2F0AAB01B5}" = Microsoft Office Accounting 2008 Fixed Asset Manager
"{E517094C-06B6-419F-8FFD-EF4F57972130}" = QuickTransfer
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{ECA31632-C2AD-4774-A3CA-2813D47E4DD0}" = HPCarePackProducts
"{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}" = QuickTime
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{FA0FF682-CC70-4C57-93CD-E276F3E7537E}" = BufferChm
"Ad-Aware" = Ad-Aware
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"AOL Regclient" = AOL Registration
"AOL Toolbar" = AOL Toolbar 5.0
"AOL Toolbar 5.0" =
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"Artisan DVD/DivX Player_is1" = Artisan DVD/DivX Player
"AVS Audio CD Creator 3.8_is1" = AVS Audio CD Creator version 3.8
"Elasto Mania" = Elasto Mania
"ExpressBurn" = Express Burn
"Free Easy Burner_is1" = Free Easy Burner V 4.0
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 14.0
"HP LaserJet P1000 series" = HP LaserJet P1000 series
"HP Photo Creations" = HP Photo Creations
"HP PSC 1200 Series" = HP Photo and Imaging 2.0 - hp psc 1200 series
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"HP Solution Center & Imaging Support Tools" = HP Solution Center 14.0
"HPExtendedCapabilities" = HP Customer Participation Program 14.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{14220DB1-DD96-4BCD-B3D5-03A4EA6631C4}" = Canon Utilities RemoteCapture 2.7
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Office Accounting 2008" = Microsoft Office Accounting 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PROR" = Microsoft Office Professional 2007
"S3" = VIA/S3G Display Driver
"Shareaza_is1" = Shareaza 2.4.0.0
"Shop for HP Supplies" = Shop for HP Supplies
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.5.2.20
"ViewpointMediaPlayer" = Viewpoint Media Player
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter
"VTDisplay" = S3 S3Display
"VTGamma2" = S3 S3Gamma2
"VTInfo2" = S3 S3Info2
"VTOverlay" = S3 S3Overlay
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/20/2010 5:47:00 PM | Computer Name = BASEMENT | Source = Office Accounting 2008 | ID = 0
Description = A problem occurred when connecting to: "christmassupreme" on "BASEMENT\MSSMLBIZ".
Timeout
expired. The timeout period elapsed prior to completion of the operation or the
server is not responding.

Error - 10/27/2010 10:43:00 AM | Computer Name = BASEMENT | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 10/29/2010 4:42:43 AM | Computer Name = BASEMENT | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 11/3/2010 4:42:44 AM | Computer Name = BASEMENT | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 11/3/2010 10:25:39 PM | Computer Name = BASEMENT | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module flash10k.ocx, version 10.1.85.3, fault address 0x000cd60e.

Error - 11/4/2010 10:44:22 PM | Computer Name = BASEMENT | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 11/9/2010 8:41:05 AM | Computer Name = BASEMENT | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 11/10/2010 5:42:43 AM | Computer Name = BASEMENT | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 11/10/2010 10:06:00 AM | Computer Name = BASEMENT | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 11/11/2010 9:22:06 AM | Computer Name = BASEMENT | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 11/11/2010 10:27:20 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service winmgmt with
arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 11/11/2010 10:27:20 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service winmgmt with
arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 11/11/2010 10:33:46 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service winmgmt with
arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 11/11/2010 10:33:48 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service winmgmt with
arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 11/11/2010 10:33:48 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service winmgmt with
arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 11/11/2010 10:33:48 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service winmgmt with
arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 11/11/2010 10:33:48 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service winmgmt with
arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 11/11/2010 10:33:48 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service winmgmt with
arguments "" in order to run the server: {8BC3F05E-D86B-11D0-A075-00C04FB68820}

Error - 11/11/2010 10:33:58 PM | Computer Name = BASEMENT | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 11/11/2010 10:43:57 PM | Computer Name = BASEMENT | Source = SRService | ID = 104
Description = The System Restore initialization process failed.


< End of report >

this site wont let me upload my hjt log b/c its an old version. I tried to download and install the new one but it tells me its block by the administrator ??

Logfile of HijackThis
Scan saved at 9:55:00 PM, on 11/11/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\Explorer.exe
C:\Documents and Settings\Tom\My Documents\HJT\HJT\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: (no name) - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1168712829\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\AOL 9.5\AOL.EXE" -b
O4 - HKCU\..\RunOnce: [11509476] "C:\DOCUME~1\Tom\LOCALS~1\APPLIC~1\11509476.exe" 0 28
O4 - HKCU\..\RunOnce: [751047483] "C:\DOCUME~1\Tom\LOCALS~1\APPLIC~1\751047483.exe" 0 24
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: &AOL Toolbar Search - c:\program files\aol\aol toolbar 5.0\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.1…toUploader5.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www2.snapfish.com/SnapfishActivia.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB…l_v1-0-24-0.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.0…oUploader55.cab
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) - http://picture.vzw.com/activex/VerizonWire…loadControl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} -
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://www.secure-session.com/include/XUpload.ocx
O16 - DPF: {F7A05BAC-9778-410A-9CDE-BFBD4D5D2B7F} (iPIX Media Send Class) - http://216.249.24.62/code/iPIX-ImageWell-ipix.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS.0\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS.0\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: SQL Server (MSSMLBIZ) (MSSQL$MSSMLBIZ) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sMSSMLBIZ (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Windows Security Center Service (SvrWsc) - PIQFKq53DD - C:\WINDOWS.0\system32\svrwsc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS.0\wanmpsvc.exe