OTL logs below.
I deleted OTL from the desktop when it was finished, but there are now 8 new icons on the desktop that weren't there before it ran - 3 folders called dlls, htdocs, server. 2 notepad icons called pms_config, autorun. Database file Thumbs. JPEG file called Splash. Icon called Logo. Attrubutes of all are Hidden. What are these and should I delete them?
They weren't there before I ran OTL. The OTL icon itself has gone.
Thanks!
OTL logfile created on: 12/1/2010 4:38:02 PM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\UNO\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
511.00 Mb Total Physical Memory | 270.00 Mb Available Physical Memory | 53.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 66.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 32.67 Gb Total Space | 7.03 Gb Free Space | 21.52% Space Free | Partition Type: NTFS
Computer Name: IBM-0126C41D210 | User Name: UNO | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\UNO\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Trusteer\Rapport\bin\RapportService.exe (Trusteer Ltd.)
PRC - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
PRC - C:\Program Files\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE (IBM Corp.)
PRC - C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE (IBM Corp.)
PRC - C:\WINDOWS\system32\QCONSVC.EXE (IBM Corp.)
PRC - C:\WINDOWS\system32\S24EvMon.exe (Intel Corporation )
PRC - C:\WINDOWS\system32\RegSrvc.exe (Intel Corporation)
PRC - C:\Program Files\Common Files\Virtual Token\vtserver.exe (UPEK Inc.)
PRC - C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe ()
PRC - C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPONSCR.exe ()
PRC - C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
PRC - C:\WINDOWS\system32\TpShocks.exe (IBM Corp.)
PRC - C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe ()
PRC - C:\IBMTOOLS\utils\ibmprc.exe (IBM Corp.)
PRC - C:\WINDOWS\system32\ibmpmsvc.exe ()
PRC - C:\Program Files\ThinkPad\Utilities\EzEjMnAp.Exe (IBM Corp.)
PRC - C:\Program Files\Digital Line Detect\DLG.exe (BVRP Software)
PRC - C:\WINDOWS\system32\TpKmpSvc.exe ()
PRC - C:\Program Files\ThinkPad\PkgMgr\HOTKEY_1\TpScrex.exe (IBM Corporation)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\UNO\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Trusteer\Rapport\bin\rooksbas.dll (Trusteer Ltd.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\SynTPFcs.dll (Synaptics, Inc.)
========== Win32 Services (SafeList) ==========
SRV - (HidServ) – C:\WINDOWS\System32\hidserv.dll File not found
SRV - (AntiVirSchedulerService) – C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) – C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (RapportMgmtService) – C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
SRV - (PsaSrv) – C:\WINDOWS\System32\drivers\psasrv.exe ()
SRV - (QCONSVC) – C:\WINDOWS\system32\QCONSVC.EXE (IBM Corp.)
SRV - (S24EventMonitor) – C:\WINDOWS\system32\S24EvMon.exe (Intel Corporation )
SRV - (RegSrvc) – C:\WINDOWS\system32\RegSrvc.exe (Intel Corporation)
SRV - (vtserver) – C:\Program Files\Common Files\Virtual Token\vtserver.exe (UPEK Inc.)
SRV - (IBM Rapid Restore Ultra Service) – C:\Program Files\IBM\IBM Rapid Restore Ultra\rrpcsb.exe ()
SRV - (IBMPMSVC) – C:\WINDOWS\system32\ibmpmsvc.exe ()
SRV - (TpKmpSVC) – C:\WINDOWS\system32\TpKmpSvc.exe ()
========== Driver Services (SafeList) ==========
DRV - (avgntflt) – C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avipbb) – C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (RapportCerberus_19917) – C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\19917\RapportCerberus_19917.sys (Trusteer Ltd.)
DRV - (RapportPG) – C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys (Trusteer Ltd.)
DRV - (RapportKELL) – C:\WINDOWS\System32\Drivers\RapportKELL.sys (Trusteer Ltd.)
DRV - (psadd) – C:\WINDOWS\system32\drivers\psadd.sys (Windows ® 2000 DDK provider)
DRV - (AtmelTpm) – C:\WINDOWS\system32\drivers\AtmelTpm.sys (Atmel, Inc.)
DRV - (avgio) – C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (ssmdrv) – C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (NSCIRDA) – C:\WINDOWS\system32\drivers\nscirda.sys (National Semiconductor Corporation)
DRV - (amdagp) – C:\WINDOWS\System32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) – C:\WINDOWS\System32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (QCNDISIF) – C:\WINDOWS\system32\drivers\qcndisif.sys (IBM Corporation.)
DRV - (ANC) – C:\WINDOWS\system32\drivers\ANC.sys (IBM Corp.)
DRV - (IBMTPCHK) – C:\WINDOWS\system32\drivers\IBMBLDID.SYS ()
DRV - (TcUsb) – C:\WINDOWS\system32\drivers\tcusb.sys (UPEK Inc.)
DRV - (ibmfilter) – C:\WINDOWS\system32\drivers\ibmfilter.sys (IBM)
DRV - (tfsnudfa) – C:\WINDOWS\system32\dla\tfsnudfa.sys (Sonic Solutions)
DRV - (tfsnudf) – C:\WINDOWS\system32\dla\tfsnudf.sys (Sonic Solutions)
DRV - (tfsnifs) – C:\WINDOWS\system32\dla\tfsnifs.sys (Sonic Solutions)
DRV - (tfsncofs) – C:\WINDOWS\system32\dla\tfsncofs.sys (Sonic Solutions)
DRV - (tfsnboio) – C:\WINDOWS\system32\dla\tfsnboio.sys (Sonic Solutions)
DRV - (tfsnopio) – C:\WINDOWS\system32\dla\tfsnopio.sys (Sonic Solutions)
DRV - (tfsnpool) – C:\WINDOWS\system32\dla\tfsnpool.sys (Sonic Solutions)
DRV - (tfsndrct) – C:\WINDOWS\system32\dla\tfsndrct.sys (Sonic Solutions)
DRV - (tfsndres) – C:\WINDOWS\system32\dla\tfsndres.sys (Sonic Solutions)
DRV - (w22n51) Intel® – C:\WINDOWS\system32\drivers\w22n51.sys (Intel® Corporation)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (drvmcdb) – C:\WINDOWS\system32\drivers\drvmcdb.sys (Sonic Solutions)
DRV - (ltmodem5) – C:\WINDOWS\system32\drivers\ltmdmnt.sys (LT)
DRV - (TPPWR) – C:\WINDOWS\system32\drivers\TPPWR.SYS (IBM Corp.)
DRV - (Smapint) – C:\WINDOWS\system32\drivers\SMAPINT.SYS (Microsoft Corporation)
DRV - (TDSMAPI) – C:\WINDOWS\system32\drivers\TDSMAPI.SYS ()
DRV - (HSFHWICH) – C:\WINDOWS\system32\drivers\HSFHWICH.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) – C:\WINDOWS\system32\drivers\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (TSMAPIP) – C:\WINDOWS\system32\drivers\TSMAPIP.SYS ()
DRV - (sscdbhk5) – C:\WINDOWS\system32\drivers\sscdbhk5.sys (Sonic Solutions)
DRV - (ssrtln) – C:\WINDOWS\system32\drivers\ssrtln.sys (Sonic Solutions)
DRV - (drvnddm) – C:\WINDOWS\system32\drivers\drvnddm.sys (Sonic Solutions)
DRV - (Shockprf) – C:\WINDOWS\System32\drivers\shockprf.sys (IBM Corporation)
DRV - (SynTP) – C:\WINDOWS\system32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (TPHKDRV) – C:\WINDOWS\System32\drivers\TPHKDRV.sys (IBM Corporation)
DRV - (s24trans) – C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (ShockMgr) – C:\WINDOWS\System32\drivers\ShockMgr.sys (IBM Corporation)
DRV - (IBMPMDRV) – C:\WINDOWS\system32\drivers\ibmpmdrv.sys (IBM Corp.)
DRV - (S3SSavage) – C:\WINDOWS\system32\drivers\s3ssavm.sys (S3 Graphics, Inc.)
DRV - (Sparrow) – C:\WINDOWS\System32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sym_u3) – C:\WINDOWS\System32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) – C:\WINDOWS\System32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (symc8xx) – C:\WINDOWS\System32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (symc810) – C:\WINDOWS\System32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (ultra) – C:\WINDOWS\System32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (ql12160) – C:\WINDOWS\System32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) – C:\WINDOWS\System32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql1280) – C:\WINDOWS\System32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (dac2w2k) – C:\WINDOWS\System32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (mraid35x) – C:\WINDOWS\System32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (asc) – C:\WINDOWS\System32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550) – C:\WINDOWS\System32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (AliIde) – C:\WINDOWS\System32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (CmdIde) – C:\WINDOWS\System32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (TwoTrack) – C:\WINDOWS\system32\drivers\TwoTrack.sys (IBM Corporation)
DRV - (ac97intc) Intel® 82801 Audio Driver Install Service (WDM) – C:\WINDOWS\system32\drivers\ac97intc.sys (Intel Corporation)
DRV - (PMEM) – C:\WINDOWS\system32\drivers\PMEMNT.SYS (Microsoft Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.it/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
O1 HOSTS File: ([2001/08/18 10:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll (Sonic Solutions)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (CNavExtBho Class) - {BDF3E430-B101-42AD-A544-FADC6B084872} - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (Norton AntiVirus) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Reg Error: Value error. File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BMMGAG] C:\Program Files\ThinkPad\Utilities\PWRMONIT.DLL (IBM Corp.)
O4 - HKLM..\Run: [BMMLREF] C:\Program Files\ThinkPad\Utilities\BMMLREF.EXE ()
O4 - HKLM..\Run: [BMMMONWND] C:\Program Files\ThinkPad\Utilities\BATINFEX.DLL ()
O4 - HKLM..\Run: [ControlCenter] C:\Program Files\IBM fingerprint software\ctlcntr.exe (UPEK Inc.)
O4 - HKLM..\Run: [DriverReviver] C:\Program Files\Reviversoft\Driver Reviver\DriverReviver.exe File not found
O4 - HKLM..\Run: [EZEJMNAP] C:\Program Files\ThinkPad\Utilities\EzEjMnAp.Exe (IBM Corp.)
O4 - HKLM..\Run: [IBMPRC] C:\IBMTOOLS\utils\ibmprc.exe (IBM Corp.)
O4 - HKLM..\Run: [QCTRAY] C:\Program Files\ThinkPad\ConnectUtilities\QCTRAY.EXE (IBM Corp.)
O4 - HKLM..\Run: [QCWLICON] C:\Program Files\ThinkPad\ConnectUtilities\QCWLICON.EXE (IBM Corp.)
O4 - HKLM..\Run: [S3TRAY2] C:\WINDOWS\System32\S3Tray2.exe (S3 Graphics, Inc.)
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [TP4EX] C:\WINDOWS\System32\TP4EX.exe (IBM Corporation)
O4 - HKLM..\Run: [TPHOTKEY] C:\Program Files\ThinkPad\PkgMgr\HOTKEY\TPHKMGR.exe ()
O4 - HKLM..\Run: [TPKMAPHELPER] C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe (IBM Corp.)
O4 - HKLM..\Run: [TpShocks] C:\WINDOWS\System32\TpShocks.exe (IBM Corp.)
O4 - HKLM..\Run: [UC_Start] C:\Program Files\IBM\Updater\\ucstartup.exe ()
O4 - HKLM..\Run: [UpdateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe (Sonic Solutions)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe (BVRP Software)
O4 - Startup: C:\Documents and Settings\UNO\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
http://java.sun.com/products/plugin/1.4.1/…all-141-win.cab (Java Plug-in 1.4.1)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll ()
O20 - Winlogon\Notify\psfus: DllName - C:\Program Files\IBM fingerprint software\psfus.dll - C:\Program Files\IBM fingerprint software\psfus.dll (UPEK Inc.)
O20 - Winlogon\Notify\QConGina: DllName - QConGina.dll - C:\WINDOWS\System32\QConGina.dll (IBM Corp.)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/05/11 22:09:26 | 000,000,000 | -H– | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010/12/01 16:35:52 | 000,575,488 | —- | C] (OldTimer Tools) – C:\Documents and Settings\UNO\Desktop\OTL.exe
[2010/11/27 11:38:03 | 000,000,000 | -H-D | C] – C:\WINDOWS\PIF
[2010/11/26 16:53:09 | 000,000,000 | —D | C] – C:\Documents and Settings\UNO\Desktop\What The Tech
[2010/11/25 03:14:08 | 000,000,000 | —D | C] – C:\Documents and Settings\UNO\Application Data\Reviversoft
[2010/11/22 19:35:12 | 000,000,000 | RH-D | C] – C:\Documents and Settings\UNO\Recent
[2010/11/22 15:46:41 | 000,000,000 | —D | C] – C:\Documents and Settings\UNO\Desktop\andygrammer
[2010/11/17 02:00:34 | 000,000,000 | —D | C] – C:\Program Files\ReviverSoft
[2010/11/14 19:02:59 | 000,000,000 | —D | C] – C:\Documents and Settings\UNO\Application Data\Trusteer
[2010/11/14 19:02:44 | 000,000,000 | —D | C] – C:\Program Files\Trusteer
[2010/11/14 19:00:43 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Trusteer
[2010/11/14 18:16:05 | 000,000,000 | —D | C] – C:\Documents and Settings\UNO\Desktop\free
[2010/11/13 00:55:06 | 000,000,000 | —D | C] – C:\Program Files\Eusing Free Registry Cleaner
[2010/11/13 00:46:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\ReviverSoft
[2010/11/13 00:31:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\RegCure
[2010/11/12 16:33:21 | 000,000,000 | —D | C] – C:\Documents and Settings\UNO\Local Settings\Application Data\PackageAware
[2010/11/03 10:19:25 | 000,000,000 | —D | C] – C:\WINDOWS\Minidump
[2010/11/03 00:56:04 | 000,000,000 | -H-D | C] – C:\Documents and Settings\UNO\Desktop\server
[2010/11/03 00:54:12 | 000,000,000 | -H-D | C] – C:\Documents and Settings\UNO\Desktop\htdocs
[2010/11/03 00:54:12 | 000,000,000 | -H-D | C] – C:\Documents and Settings\UNO\Desktop\dlls
[2010/05/11 19:58:42 | 000,151,552 | —- | C] ( ) – C:\WINDOWS\System32\ATIDEMGR.dll
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010/12/01 16:34:46 | 000,575,488 | —- | M] (OldTimer Tools) – C:\Documents and Settings\UNO\Desktop\OTL.exe
[2010/12/01 16:19:53 | 000,000,370 | —- | M] () – C:\WINDOWS\tasks\RegistryReviver-UNO-Startup.job
[2010/12/01 16:19:25 | 000,002,278 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2010/12/01 16:18:38 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2010/12/01 16:18:34 | 535,810,048 | -HS- | M] () – C:\hiberfil.sys
[2010/12/01 16:00:00 | 000,000,970 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1092687679-1941306625-2137034268-1005UA.job
[2010/12/01 01:00:00 | 000,000,918 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1092687679-1941306625-2137034268-1005Core.job
[2010/11/26 12:48:52 | 000,056,653 | —- | M] () – C:\Documents and Settings\UNO\Desktop\pulire_trauma_di_nascita_28.11.2010.pdf
[2010/11/22 19:57:50 | 000,061,960 | —- | M] (Avira GmbH) – C:\WINDOWS\System32\drivers\avgntflt.sys
[2010/11/21 14:01:30 | 006,016,862 | —- | M] () – C:\Documents and Settings\UNO\Desktop\PB205005-b.jpg
[2010/11/21 13:49:12 | 001,683,072 | —- | M] () – C:\Documents and Settings\UNO\Desktop\DSC00095-b.jpg
[2010/11/21 13:46:04 | 004,142,756 | —- | M] () – C:\Documents and Settings\UNO\Desktop\PB205029-b.jpg
[2010/11/20 16:02:18 | 005,000,752 | —- | M] () – C:\Documents and Settings\UNO\Desktop\PB205016.JPG
[2010/11/17 02:00:46 | 000,001,849 | —- | M] () – C:\Documents and Settings\All Users\Desktop\RegistryReviver.lnk
[2010/11/16 15:08:02 | 000,002,265 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2010/11/15 02:13:17 | 000,000,050 | —- | M] () – C:\1494 UNO.BAL
[2010/11/11 14:21:12 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2010/11/06 14:36:42 | 000,000,707 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/11/04 22:03:22 | 000,002,257 | —- | M] () – C:\Documents and Settings\UNO\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2010/11/04 22:03:21 | 000,002,279 | —- | M] () – C:\Documents and Settings\UNO\Desktop\Google Chrome.lnk
[2010/11/03 10:22:07 | 000,380,918 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2010/11/03 10:22:07 | 000,053,166 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2010/11/03 00:52:05 | 000,229,040 | —- | M] () – C:\Documents and Settings\UNO\Desktop\BandoLineaCredito2010.pdf
[2010/11/03 00:38:23 | 000,121,609 | —- | M] () – C:\Documents and Settings\UNO\Desktop\Business Plan_Camera di Commercio.pdf
[2010/11/02 14:24:56 | 000,126,856 | —- | M] (Avira GmbH) – C:\WINDOWS\System32\drivers\avipbb.sys
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010/12/01 02:08:24 | 535,810,048 | -HS- | C] () – C:\hiberfil.sys
[2010/11/26 12:48:51 | 000,056,653 | —- | C] () – C:\Documents and Settings\UNO\Desktop\pulire_trauma_di_nascita_28.11.2010.pdf
[2010/11/22 18:32:47 | 006,016,862 | —- | C] () – C:\Documents and Settings\UNO\Desktop\PB205005-b.jpg
[2010/11/22 18:32:47 | 004,142,756 | —- | C] () – C:\Documents and Settings\UNO\Desktop\PB205029-b.jpg
[2010/11/22 18:32:47 | 001,683,072 | —- | C] () – C:\Documents and Settings\UNO\Desktop\DSC00095-b.jpg
[2010/11/22 18:32:46 | 005,000,752 | —- | C] () – C:\Documents and Settings\UNO\Desktop\PB205016.JPG
[2010/11/17 02:01:44 | 000,000,370 | —- | C] () – C:\WINDOWS\tasks\RegistryReviver-UNO-Startup.job
[2010/11/17 02:00:45 | 000,001,849 | —- | C] () – C:\Documents and Settings\All Users\Desktop\RegistryReviver.lnk
[2010/11/15 02:13:17 | 000,000,050 | —- | C] () – C:\1494 UNO.BAL
[2010/11/06 14:36:42 | 000,000,707 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/11/03 00:56:15 | 000,036,178 | -H– | C] () – C:\Documents and Settings\UNO\Desktop\splash.jpg
[2010/11/03 00:56:15 | 000,017,542 | -H– | C] () – C:\Documents and Settings\UNO\Desktop\logo.ico
[2010/11/03 00:56:15 | 000,006,006 | -H– | C] () – C:\Documents and Settings\UNO\Desktop\pms_config.ini
[2010/11/03 00:56:15 | 000,000,042 | -H– | C] () – C:\Documents and Settings\UNO\Desktop\autorun.inf
[2010/11/03 00:52:05 | 000,229,040 | —- | C] () – C:\Documents and Settings\UNO\Desktop\BandoLineaCredito2010.pdf
[2010/11/03 00:38:23 | 000,121,609 | —- | C] () – C:\Documents and Settings\UNO\Desktop\Business Plan_Camera di Commercio.pdf
[2010/05/11 21:50:06 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2010/05/11 21:48:18 | 000,028,672 | —- | C] () – C:\WINDOWS\System32\JAWTAccessBridge.dll
[2010/05/11 21:47:45 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\ProgressTrace.dll
[2010/05/11 21:47:44 | 000,086,016 | —- | C] () – C:\WINDOWS\System32\PcdrKernelModeServices.dll
[2010/05/11 21:47:05 | 000,002,432 | —- | C] () – C:\WINDOWS\System32\drivers\IBMBLDID.SYS
[2010/05/11 21:40:00 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\IVIresizeW7.dll
[2010/05/11 21:40:00 | 000,200,704 | —- | C] () – C:\WINDOWS\System32\IVIresizeA6.dll
[2010/05/11 21:40:00 | 000,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeP6.dll
[2010/05/11 21:40:00 | 000,192,512 | —- | C] () – C:\WINDOWS\System32\IVIresizeM6.dll
[2010/05/11 21:40:00 | 000,188,416 | —- | C] () – C:\WINDOWS\System32\IVIresizePX.dll
[2010/05/11 21:40:00 | 000,020,480 | —- | C] () – C:\WINDOWS\System32\IVIresize.dll
[2010/05/11 21:38:44 | 000,000,138 | —- | C] () – C:\WINDOWS\wininit.ini
[2010/05/11 21:30:36 | 000,061,440 | —- | C] () – C:\WINDOWS\System32\FPCALL.dll
[2010/05/11 21:30:14 | 000,007,168 | —- | C] () – C:\WINDOWS\System32\drivers\TSMAPIP.SYS
[2010/05/11 21:29:46 | 000,009,341 | —- | C] () – C:\WINDOWS\System32\drivers\TDSMAPI.SYS
[2010/05/11 20:11:08 | 000,002,481 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2010/05/11 19:58:42 | 000,086,016 | —- | C] () – C:\WINDOWS\System32\ati2evxx.dll
[2010/05/11 12:48:14 | 000,165,376 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2010/05/11 12:48:13 | 000,000,038 | —- | C] () – C:\WINDOWS\avisplitter.ini
[2010/05/11 12:48:12 | 000,881,664 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2010/05/11 12:48:12 | 000,205,824 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2010/05/11 12:48:10 | 000,085,504 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2004/11/09 01:12:56 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2004/10/02 10:12:56 | 000,045,124 | —- | C] () – C:\WINDOWS\System32\LsaWrApi.dll
[2004/10/02 10:05:18 | 000,057,344 | —- | C] () – C:\WINDOWS\System32\D8021Xps.dll
[2004/03/19 20:12:10 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\pwdmon.dll
[2004/03/19 20:12:10 | 000,019,692 | —- | C] () – C:\WINDOWS\ibmprc.ini
[2004/01/09 14:10:32 | 000,143,360 | —- | C] () – C:\WINDOWS\System32\AIBMRUNL.dll
[2003/10/16 14:57:06 | 000,147,456 | —- | C] () – C:\WINDOWS\System32\ssleay32.dll
[2003/10/16 14:57:04 | 000,651,264 | —- | C] () – C:\WINDOWS\System32\libeay32.dll
[2003/02/20 17:32:29 | 000,000,791 | —- | C] () – C:\WINDOWS\orun32.ini
[2003/02/20 17:03:32 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[1980/01/01 08:00:00 | 000,131,072 | —- | C] () – C:\WINDOWS\System32\e1000msg.dll
[1980/01/01 08:00:00 | 000,077,824 | —- | C] () – C:\WINDOWS\System32\SynTPCoI.dll
[1980/01/01 08:00:00 | 000,049,152 | —- | C] () – C:\WINDOWS\System32\tpinspm.dll
========== LOP Check ==========
[2010/05/11 21:39:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IBM
[2010/11/13 00:39:26 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RegCure
[2010/11/13 00:46:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ReviverSoft
[2010/11/14 19:00:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Trusteer
[2010/05/11 13:17:37 | 000,000,000 | —D | M] – C:\Documents and Settings\UNO\Application Data\Auslogics
[2010/05/29 12:01:11 | 000,000,000 | —D | M] – C:\Documents and Settings\UNO\Application Data\gtk-2.0
[2010/05/11 13:58:34 | 000,000,000 | —D | M] – C:\Documents and Settings\UNO\Application Data\IBM
[2010/05/11 20:58:12 | 000,000,000 | —D | M] – C:\Documents and Settings\UNO\Application Data\OpenOffice.org
[2010/11/25 03:14:08 | 000,000,000 | —D | M] – C:\Documents and Settings\UNO\Application Data\Reviversoft
[2010/11/14 19:02:59 | 000,000,000 | —D | M] – C:\Documents and Settings\UNO\Application Data\Trusteer
[2010/05/11 21:49:22 | 000,000,314 | —- | M] () – C:\WINDOWS\Tasks\BMMTask.job
[2010/12/01 16:19:53 | 000,000,370 | —- | M] () – C:\WINDOWS\Tasks\RegistryReviver-UNO-Startup.job
========== Purity Check ==========
< End of report >
********************************************************************************
*********************************************************************************
*********************************************************************************
**********************************************
OTL Extras logfile created on: 12/1/2010 4:38:02 PM - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Documents and Settings\UNO\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
511.00 Mb Total Physical Memory | 270.00 Mb Available Physical Memory | 53.00% Memory free
1.00 Gb Paging File | 1.00 Gb Available in Paging File | 66.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 32.67 Gb Total Space | 7.03 Gb Free Space | 21.52% Space Free | Partition Type: NTFS
Computer Name: IBM-0126C41D210 | User Name: UNO | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = htmlfile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\IBM\Updater\jre\bin\java.exe" = C:\Program Files\IBM\Updater\jre\bin\java.exe:*:Enabled:IBM Update Connector – (IBM)
"C:\Program Files\IBM\Updater\jre\bin\javaw.exe" = C:\Program Files\IBM\Updater\jre\bin\javaw.exe:*:Enabled:IBM Update Connector – (IBM)
"C:\Program Files\IBM\Updater\ucsmb.exe" = C:\Program Files\IBM\Updater\ucsmb.exe:*:Enabled:IBM Update Connector – (IBM Corporation, Inc.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\IBM\Updater\jre\bin\java.exe" = C:\Program Files\IBM\Updater\jre\bin\java.exe:*:Enabled:IBM Update Connector – (IBM)
"C:\Program Files\IBM\Updater\jre\bin\javaw.exe" = C:\Program Files\IBM\Updater\jre\bin\javaw.exe:*:Enabled:IBM Update Connector – (IBM)
"C:\Program Files\IBM\Updater\ucsmb.exe" = C:\Program Files\IBM\Updater\ucsmb.exe:*:Enabled:IBM Update Connector – (IBM Corporation, Inc.)
"C:\Documents and Settings\UNO\Local Settings\Temp\7zS132.tmp\SymNRT.exe" = C:\Documents and Settings\UNO\Local Settings\Temp\7zS132.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool – File not found
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{09DA4F91-2A09-4232-AB8C-6BC740096DE3}" = Sonic Update Manager
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{1007F41F-7D69-468E-8017-3849A5A973C2}" = IBM ThinkVantage Technologies Welcome Message
"{11783F13-C3A9-44A8-929B-21A476F65272}" = IBM Rescue and Recovery with Rapid Restore
"{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}" = IBM DLA
"{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}" = Rapport
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F7CCFA3-D926-4882-B2A5-A0217ED25597}" = PC-Doctor for Windows
"{2111B23F-7FDA-4A41-8309-E5A1663CA296}" = IBM ThinkPad Keyboard Customizer Utility
"{22B71A00-4DED-11D4-A5E5-0004AC564F43}" = IBM Access Connections
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java™ 6 Update 18
"{332DB63A-14F2-465D-9C7E-B0D04353323F}" = RegistryReviver
"{34BFBF2A-06B9-4B5E-BB33-E78B67450ED7}" = IBM fingerprint software 4.5.3
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}" = ATI HYDRAVISION
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{56373057-E823-4DDE-98C3-E89AEF7895B8}" = Intel® Sebring API
"{6C72E14A-C1F3-45E5-8810-83CE3C19ED63}" = IBM 32-bit Runtime Environment for Java 2, v1.4.1
"{6CE96A14-61E2-48CC-837E-22710A953ADE}" = IBM Themes
"{72806716-7088-41B2-8FA6-717A2A164DAB}" = IBM Active Protection System
"{7AD4D6E7-CF00-4299-A8BF-EED77E37770E}" = Atmel Tpm Install 2.1.1.01
"{82512BC9-BD5D-4C50-BE4D-B98E7DF78687}" = IBM ThinkPad UltraNav Wizard
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D815BF3-2399-459C-B121-49373FEFB9E8}" = IBM Update Connector
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD
"{9541FED0-327F-4DF0-8B96-EF57EF622F19}" = IBM RecordNow!
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{AC76BA86-7AD7-1033-7B44-000000000001}" = Adobe Reader 6.0
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D61B4347-26FD-40F5-92B7-5D020E574DFE}" = OpenOffice.org 3.2
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{EA664480-3844-11D5-8C25-444553540000}" = IBM TrackPoint Accessibility Features
"{EC6AF20D-4376-4070-BEE4-D3A0DFF7E140}" = Access IBM
"{F386C340-DF4B-4BBA-9503-420FB7EDB395}" = Wallpapers
"{F413B3A4-EE5D-457C-BAE5-6E58D9589ED5}" = Access IBM Message Center
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner
"CNXT_MODEM_PCI_VEN_8086&DEV_24C6&SUBSYS_05591014" = IBM Integrated 56K Modem
"EasyEject Utility" = IBM ThinkPad EasyEject Utility
"ie8" = Windows Internet Explorer 8
"InstallShield_{6C72E14A-C1F3-45E5-8810-83CE3C19ED63}" = IBM 32-bit Runtime Environment for Java 2, v1.4.1
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.9.0 (Full)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Picasa 3" = Picasa 3
"Power Features" = IBM ThinkPad Battery MaxiMiser and Power Management Features
"Power Management Driver" = IBM ThinkPad Power Management Driver
"Presentation Director" = IBM ThinkPad Presentation Director
"PROSet" = Intel® PRO Network Adapters and Drivers
"Rapport_msi" = Rapport
"RegistryReviver" = RegistryReviver
"SynTPDeinstKey" = IBM ThinkPad UltraNav Driver
"ThinkPad Configuration" = IBM ThinkPad Configuration
"ThinkPad FullScreen Magnifier" = ThinkPad FullScreen Magnifier
"ThinkPadSoftwareInstaller" = ThinkPad Software Installer
"VLC media player" = VLC media player 1.0.5
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.6.8
"WinRAR archiver" = WinRAR gestione archivi
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 10/20/2010 11:55:06 AM | Computer Name = IBM-0126C41D210 | Source = Google Update | ID = 20
Description =
Error - 10/20/2010 12:55:05 PM | Computer Name = IBM-0126C41D210 | Source = Google Update | ID = 20
Description =
Error - 10/20/2010 1:55:05 PM | Computer Name = IBM-0126C41D210 | Source = Google Update | ID = 20
Description =
Error - 10/20/2010 2:55:05 PM | Computer Name = IBM-0126C41D210 | Source = Google Update | ID = 20
Description =
Error - 10/20/2010 3:55:05 PM | Computer Name = IBM-0126C41D210 | Source = Google Update | ID = 20
Description =
Error - 10/20/2010 4:55:05 PM | Computer Name = IBM-0126C41D210 | Source = Google Update | ID = 20
Description =
Error - 10/20/2010 5:55:05 PM | Computer Name = IBM-0126C41D210 | Source = Google Update | ID = 20
Description =
Error - 10/22/2010 6:36:33 PM | Computer Name = IBM-0126C41D210 | Source = NTBackup | ID = 8019
Description = End Operation: Warnings or errors were encountered. Consult the backup
report for more details.
Error - 11/7/2010 5:01:57 PM | Computer Name = IBM-0126C41D210 | Source = .NET Runtime | ID = 1023
Description = Application: chrome.exe CoreCLR Version: 4.0.50917.0 Description: The
process was terminated due to an internal error in the .NET Runtime at IP 7928D256
(79150000) with exit code 8013150a.
Error - 11/7/2010 5:02:11 PM | Computer Name = IBM-0126C41D210 | Source = Application Error | ID = 1000
Description = Faulting application chrome.exe, version 0.0.0.0, faulting module
coreclr.dll, version 4.0.50917.0, fault address 0x0013d256.
[ System Events ]
Error - 11/30/2010 8:46:58 PM | Computer Name = IBM-0126C41D210 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service netman with
arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
Error - 11/30/2010 8:47:22 PM | Computer Name = IBM-0126C41D210 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service netman with
arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
Error - 11/30/2010 8:47:38 PM | Computer Name = IBM-0126C41D210 | Source = Service Control Manager | ID = 7001
Description = The DHCP Client service depends on the NetBT service which failed
to start because of the following error: %%31
Error - 11/30/2010 8:47:38 PM | Computer Name = IBM-0126C41D210 | Source = Service Control Manager | ID = 7001
Description = The DNS Client service depends on the TCP/IP Protocol Driver service
which failed to start because of the following error: %%31
Error - 11/30/2010 8:47:38 PM | Computer Name = IBM-0126C41D210 | Source = Service Control Manager | ID = 7001
Description = The TCP/IP NetBIOS Helper service depends on the AFD Networking Support
Environment service which failed to start because of the following error: %%31
Error - 11/30/2010 8:47:38 PM | Computer Name = IBM-0126C41D210 | Source = Service Control Manager | ID = 7001
Description = The IPSEC Services service depends on the IPSEC driver service which
failed to start because of the following error: %%31
Error - 11/30/2010 8:47:38 PM | Computer Name = IBM-0126C41D210 | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
AFD ANC avgio avipbb Fips IBMTPCHK intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss ShockMgr
Smapint
ssmdrv
Tcpip
TDSMAPI
TPHKDRV
TPPWR
TSMAPIP
Error - 11/30/2010 8:48:46 PM | Computer Name = IBM-0126C41D210 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 11/30/2010 8:50:23 PM | Computer Name = IBM-0126C41D210 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service netman with
arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
Error - 11/30/2010 8:50:26 PM | Computer Name = IBM-0126C41D210 | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
< End of report >
![[external image: Posted Image]](http://i582.photobucket.com/albums/ss269/Cat_Byte/GMER/gmer_screen2-1.gif){kind=link}