Spyware / Malware / Virus Removal

HiJack This Log - IE Toolbar Jumping

2 min read

Looking for the outcome? Ask AI

tozer9 Topic Starter

Post #1January 6, 2011, 4:32 PM UTC

My issue is that my IE Toolbar is jumping, and IE is generally unresponsive. I have to close IE using the Task Manager. Ran AVG Yesterday, and Super AntiSpyware. Neither found anything other than trace cookies which I quarantined and then rebooted. Help is appreciated.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:21:54 AM, on 06/01/2011
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18542)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe
C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe
C:\Program Files (x86)\AVG\AVG10\avgtray.exe
C:\Program Files (x86)\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files (x86)\Internet Explorer\ieuser.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cndt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mydesk.morganstanley.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssie.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\IPSBHO.DLL
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0552.0\msneshellx.dll
O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0552.0\msneshellx.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG10\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [UpdateLBPShortCut] "c:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdatePDIRShortCut] "c:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"
O4 - HKLM\..\Run: [UpdatePSTShortCut] "c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
O4 - HKLM\..\Run: [TSMAgent] "c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer for HP TouchSmart] "c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [DVDAgent] "c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Microsoft Default Manager] "c:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG10\avgtray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O16 - DPF: {B1647320-9EC8-4B0F-BF53-93D4A43FA614} (TerminalSvcsTCSX Control) - https://mydesk-pi01.morganstanley.com/prx/0…inalSvcsTCS.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files (x86)\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll
O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Easy Backup Button Service (HPBtnSrv) - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 10514 bytes

Conspire

Post #2January 8, 2011, 11:48 AM UTC

**In any case where you happen to be busy or unable to give us a reply, we would be more than grateful if you keep us informed in advance and we will be more than happy to wait. Failure to do so we will have your thread closed in THREE(3) days.

Hello there, tozer9

I'm Conspire, I'll be glad to help you with your computer problems.

Please observe these rules while we work:

Read the entire procedure
It is important to perform ALL actions in sequence.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Stick with me till you're given the all clear.
Remember, absence of symptoms does not mean the infection is all gone.
Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.

IMPORTANT NOTE : Please do not delete anything unless instructed to.

Conspire

Post #3January 8, 2011, 11:49 AM UTC

You mentioned that your IE toobar is jumping, I'm not sure if I understand your definition of jumping. Could you provide more details as to how it behaves? Perhaps you could try re-installing IE or alternatively try using either Google Chrome or Firefox and see if things will be different.

Chrome
Firefox

Also, I'm not seeing anything significant in your HJT log so lets get some diagnosis on this.

Hello there,

Download OTL to your Desktop

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Click on Minimal Output at the top
Download the following file scan.txt to your Desktop. Click here to download it. You may need to right click on it and select "Save"
Double click inside the Custom Scan box at the bottom
A window will appear saying "Click OK to load a custom scan from a file or Cancel to cancel"
Click the OK button and navigate to the file scan.txt which we just saved to your desktop
Select scan.txt and click Open. Writing will now appear under the Custom Scan box
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

===================================================

On your next reply please post :
OTL log

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

tozer9

Post #4January 8, 2011, 4:04 PM UTC

Hi Conspire,

Thanks for taking the time to help me with this issue. The IE application toolbar with the AVG and Norton toolbars are not still, the toolbars vibrates erratically and the application is not very responsive. I recently installed AVG and of course Norton is also installed and both have their toolbars enabled as Add-Ons, I will be taking care of removing Norton as I don't like that it comes installed on my machine. I can use Firefox without any issue at all, as that is what I'm using currently. Here are my scans from OTL:

OTL logfile created on: 08/01/2011 10:52:19 AM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Joel\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

9.00 Gb Total Physical Memory | 6.00 Gb Available Physical Memory | 72.00% Memory free
18.00 Gb Paging File | 16.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.44 Gb Total Space | 760.52 Gb Free Space | 82.90% Space Free | Partition Type: NTFS
Drive D: | 14.07 Gb Total Space | 1.99 Gb Free Space | 14.12% Space Free | Partition Type: NTFS
Drive K: | 931.51 Gb Total Space | 511.20 Gb Free Space | 54.88% Space Free | Partition Type: NTFS

Computer Name: ZEUS | User Name: Joel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Joel\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSMonitor.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
PRC - C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe ()

========== Modules (SafeList) ==========

MOD - C:\Users\Joel\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\msshsq.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\duser.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AVG Security Toolbar Service) – C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe ()
SRV - (AVGIDSAgent) – C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) – C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (Norton Internet Security) – C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\ccSvcHst.exe (Symantec Corporation)
SRV - (GameConsoleService) – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (IAANTMON) Intel® – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (HPBtnSrv) – C:\Program Files (x86)\Hewlett-Packard\HP Easy Backup\HPBtnSrv.exe ()
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV:64bit: - (SYMREDRV) – C:\Windows\SysNative\drivers\NISx64\1000000.07D\SYMREDRV.SYS File not found
DRV:64bit: - (SYMDNS) – C:\Windows\SysNative\drivers\NISx64\1000000.07D\SYMDNS.SYS File not found
DRV:64bit: - (NwlnkFwd) – C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys File not found
DRV:64bit: - (NwlnkFlt) – C:\Windows\SysNative\DRIVERS\nwlnkflt.sys File not found
DRV:64bit: - (IpInIp) – C:\Windows\SysNative\DRIVERS\ipinip.sys File not found
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\Drivers\SYMEVENT64x86.SYS ()
DRV:64bit: - (ccHP) – C:\Windows\SysNative\Drivers\NISx64\1008000.029\ccHPx64.sys ()
DRV:64bit: - (BHDrvx64) – C:\Windows\SysNative\drivers\NISx64\1008000.029\BHDrvx64.sys ()
DRV:64bit: - (Avgldx64) – C:\Windows\SysNative\DRIVERS\avgldx64.sys ()
DRV:64bit: - (Avgtdia) – C:\Windows\SysNative\DRIVERS\avgtdia.sys ()
DRV:64bit: - (AVGIDSEH) – C:\Windows\SysNative\DRIVERS\AVGIDSEH.Sys ()
DRV:64bit: - (Avgmfx64) – C:\Windows\SysNative\DRIVERS\avgmfx64.sys ()
DRV:64bit: - (Avgrkx64) – C:\Windows\SysNative\DRIVERS\avgrkx64.sys ()
DRV:64bit: - (AVGIDSFilter) – C:\Windows\SysNative\DRIVERS\AVGIDSFilter.Sys ()
DRV:64bit: - (AVGIDSDriver) – C:\Windows\SysNative\DRIVERS\AVGIDSDriver.Sys ()
DRV:64bit: - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\saskutil64.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\NISx64\1008000.029\SYMEFA64.SYS ()
DRV:64bit: - (SYMTDI) – C:\Windows\SysNative\Drivers\NISx64\1008000.029\SYMTDI.SYS ()
DRV:64bit: - (SYMFW) – C:\Windows\SysNative\Drivers\NISx64\1008000.029\SYMFW.SYS ()
DRV:64bit: - (SYMNDISV) – C:\Windows\SysNative\Drivers\NISx64\1008000.029\SYMNDISV.SYS ()
DRV:64bit: - (SymIM) – C:\Windows\SysNative\DRIVERS\SymIMv.sys ()
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\Drivers\NISx64\1008000.029\SRTSP64.SYS ()
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\NISx64\1008000.029\SRTSPX64.SYS ()
DRV:64bit: - (e1yexpress) Intel® – C:\Windows\SysNative\DRIVERS\e1y60x64.sys ()
DRV:64bit: - (PCDSRVC{F36B3A4C-F95654BD-06000000}_0) – c:\Program Files\PC-Doctor for Windows\pcdsrvc_x64.pkms (PC-Doctor, Inc.)
DRV:64bit: - (JRAID) – C:\Windows\SysNative\drivers\jraid.sys ()
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iastor.sys ()
DRV:64bit: - (athr) – C:\Windows\SysNative\DRIVERS\athrx.sys ()
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\DRIVERS\wdcsam64.sys ()
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\Wbem\ntfs.mof ()
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20110107.037\EX64.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20110107.037\ENG64.SYS (Symantec Corporation)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20110107.002\IDSviA64.sys (Symantec Corporation)
DRV - ({55662437-DA8C-40c0-AADA-2C816A897A49}) – c:\Program Files (x86)\Hewlett-Packard\Media\DVD\000.fcl (CyberLink Corp.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cndt
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cndt

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf=cndt
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.ca/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://mydesk.morganstanley.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1178
FF - prefs.js..extensions.enabledItems: avg@igeared:6.011.025.001

FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files (x86)\AVG\AVG10\Firefox\ [2011/01/05 18:36:52 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files (x86)\AVG\AVG10\Toolbar\Firefox\avg@igeared [2011/01/05 18:37:30 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn\ [2011/01/06 11:16:11 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/01/04 15:08:41 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/01/04 15:08:40 | 000,000,000 | —D | M]

[2011/01/04 15:08:51 | 000,000,000 | —D | M] (No name found) – C:\Users\Joel\AppData\Roaming\Mozilla\Extensions
[2011/01/06 19:24:47 | 000,000,000 | —D | M] (No name found) – C:\Users\Joel\AppData\Roaming\Mozilla\Firefox\Profiles\ss8w0e0o.default\extensions
[2011/01/05 19:05:48 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Joel\AppData\Roaming\Mozilla\Firefox\Profiles\ss8w0e0o.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/01/06 11:12:13 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/01/05 18:36:52 | 000,000,000 | —D | M] (AVG Safe Search) – C:\PROGRAM FILES (X86)\AVG\AVG10\FIREFOX
[2011/01/05 18:37:30 | 000,000,000 | —D | M] ("urn:mozilla:install-manifest" em:id="avg@igeared" em:name="AVG Security Toolbar" em:version="6.011.025.001" em:displayname="AVG Security Toolbar" em:iconURL="chrome://tavgp/skin/logo.ico" em:creator="AVG Technologies" em:description="AVG Security Toolbar" em:homepageURL="http://www.avg.com" >) – C:\PROGRAM FILES (X86)\AVG\AVG10\TOOLBAR\FIREFOX\AVG@IGEARED
[2011/01/06 11:16:11 | 000,000,000 | —D | M] (Norton Toolbar) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NORTON\COFFPLGN
[2011/01/06 11:12:13 | 000,000,000 | —D | M] (Norton IPS) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NORTON\IPSFFPLGN

O1 HOSTS File: ([2006/09/18 16:37:24 | 000,000,761 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG10\Toolbar\IEToolbar.dll ()
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0552.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0552.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG10\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\CoIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG10\Toolbar\IEToolbar.dll ()
O4:64bit: - HKLM..\Run: [HP Remote Software] C:\Program Files\Hewlett-Packard\HP Remote\HP REMOTE V1.0.5.exe ()
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe (Hewlett-Packard)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files (x86)\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CLMLServer for HP TouchSmart] c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [DVDAgent] c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpsysdrv] c:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe (Hewlett-Packard)
O4 - HKLM..\Run: [TSMAgent] c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateLBPShortCut] c:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] c:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePDIRShortCut] c:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] c:\Program Files (x86)\CyberLink\CyberLink DVD Suite Deluxe\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {B1647320-9EC8-4B0F-BF53-93D4A43FA614} https://mydesk-pi01.morganstanley.com/prx/0…inalSvcsTCS.cab (TerminalSvcsTCSX Control)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - Reg Error: Key error. File not found
O18 - Protocol\Handler\avgsecuritytoolbar {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files (x86)\AVG\AVG10\Toolbar\IEToolbar.dll ()
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files (x86)\Norton Internet Security\Engine\16.8.0.41\CoIEPlg.dll (Symantec Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\bwaterscene.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\bwaterscene.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/12/19 22:56:28 | 000,000,062 | —- | M] () - K:\Autorun.inf – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgchsva.exe /sync) - C:\Program Files (x86)\AVG\AVG10\avgchsva.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~2\AVG\AVG10\avgrsa.exe /sync /restart) - C:\Program Files (x86)\AVG\AVG10\avgrsa.exe (AVG Technologies CZ, s.r.o.)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm ()
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

SafeBootMin:64bit: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SafeBootMin:64bit: AppMgmt - Service
SafeBootMin:64bit: Base - Driver Group
SafeBootMin:64bit: Boot Bus Extender - Driver Group
SafeBootMin:64bit: Boot file system - Driver Group
SafeBootMin:64bit: File system - Driver Group
SafeBootMin:64bit: Filter - Driver Group
SafeBootMin:64bit: HelpSvc - Service
SafeBootMin:64bit: PCI Configuration - Driver Group
SafeBootMin:64bit: PNP Filter - Driver Group
SafeBootMin:64bit: Primary disk - Driver Group
SafeBootMin:64bit: sacsvr - Service
SafeBootMin:64bit: SCSI Class - Driver Group
SafeBootMin:64bit: SymEFA.sys - C:\Windows\SysNative\drivers\NISx64\1008000.029\SYMEFA64.SYS ()
SafeBootMin:64bit: System Bus Extender - Driver Group
SafeBootMin:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet:64bit: !SASCORE - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SafeBootNet:64bit: AppMgmt - Service
SafeBootNet:64bit: Base - Driver Group
SafeBootNet:64bit: Boot Bus Extender - Driver Group
SafeBootNet:64bit: Boot file system - Driver Group
SafeBootNet:64bit: File system - Driver Group
SafeBootNet:64bit: Filter - Driver Group
SafeBootNet:64bit: HelpSvc - Service
SafeBootNet:64bit: Messenger - Service
SafeBootNet:64bit: NDIS Wrapper - Driver Group
SafeBootNet:64bit: NetBIOSGroup - Driver Group
SafeBootNet:64bit: NetDDEGroup - Driver Group
SafeBootNet:64bit: Network - Driver Group
SafeBootNet:64bit: NetworkProvider - Driver Group
SafeBootNet:64bit: PCI Configuration - Driver Group
SafeBootNet:64bit: PNP Filter - Driver Group
SafeBootNet:64bit: PNP_TDI - Driver Group
SafeBootNet:64bit: Primary disk - Driver Group
SafeBootNet:64bit: rdsessmgr - Service
SafeBootNet:64bit: sacsvr - Service
SafeBootNet:64bit: SCSI Class - Driver Group
SafeBootNet:64bit: Streams Drivers - Driver Group
SafeBootNet:64bit: SymEFA.sys - C:\Windows\SysNative\drivers\NISx64\1008000.029\SYMEFA64.SYS ()
SafeBootNet:64bit: System Bus Extender - Driver Group
SafeBootNet:64bit: TDI - Driver Group
SafeBootNet:64bit: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet:64bit: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet:64bit: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet:64bit: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet:64bit: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet:64bit: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet:64bit: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet:64bit: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet:64bit: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet:64bit: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet:64bit: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet:64bit: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet:64bit: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet:64bit: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet:64bit: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet:64bit: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet:64bit: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet:64bit: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet:64bit: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet:64bit: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet:64bit: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet:64bit: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet:64bit: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX:64bit: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

========== Files/Folders - Created Within 30 Days ==========

[2011/01/06 13:57:09 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2011/01/06 13:56:36 | 000,000,000 | —D | C] – C:\Windows\LastGood
[2011/01/06 10:45:43 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2011/01/06 10:45:42 | 000,000,000 | —D | C] – C:\Program Files\7-Zip
[2011/01/06 10:44:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trend Micro
[2011/01/06 10:44:06 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2011/01/05 19:37:31 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\SUPERAntiSpyware.com
[2011/01/05 19:37:31 | 000,000,000 | —D | C] – C:\ProgramData\SUPERAntiSpyware.com
[2011/01/05 19:37:27 | 000,000,000 | —D | C] – C:\ProgramData\!SASCORE
[2011/01/05 19:37:26 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2011/01/05 19:37:24 | 000,000,000 | —D | C] – C:\Program Files\SUPERAntiSpyware
[2011/01/05 19:20:21 | 000,000,000 | —D | C] – C:\ProgramData\Symantec
[2011/01/05 19:05:54 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Local\AVG Security Toolbar
[2011/01/05 18:48:53 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\AVG10
[2011/01/05 18:37:35 | 000,000,000 | -H-D | C] – C:\ProgramData\Common Files
[2011/01/05 18:37:30 | 000,000,000 | —D | C] – C:\ProgramData\AVG Security Toolbar
[2011/01/05 18:37:23 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2011
[2011/01/05 18:37:22 | 000,000,000 | —D | C] – C:\Windows\SysWow64\drivers\AVG
[2011/01/05 18:36:48 | 000,000,000 | —D | C] – C:\ProgramData\AVG10
[2011/01/05 18:36:48 | 000,000,000 | —D | C] – C:\Windows\SysNative\drivers\AVG
[2011/01/05 18:31:17 | 000,000,000 | —D | C] – C:\Program Files (x86)\AVG
[2011/01/05 18:22:59 | 000,000,000 | —D | C] – C:\ProgramData\MFAData
[2011/01/05 18:18:10 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2011/01/05 09:46:28 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\Template
[2011/01/05 09:40:18 | 000,000,000 | —D | C] – C:\Users\Joel\Documents\Parking Ticket Trial
[2011/01/04 15:08:45 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\Mozilla
[2011/01/04 15:08:45 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Local\Mozilla
[2011/01/04 15:08:42 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[2011/01/04 15:08:39 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2011/01/02 21:17:06 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Symantec Shared
[2010/12/31 13:34:07 | 000,000,000 | R–D | C] – C:\Program Files (x86)\Norton Support
[2010/12/31 13:34:03 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Local\Symantec
[2010/12/31 13:33:45 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2010/12/31 13:33:45 | 000,000,000 | —D | C] – C:\Program Files\Symantec
[2010/12/31 11:19:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Hewlett-Packard
[2010/12/31 11:18:15 | 000,671,816 | —- | C] (HP) – C:\Windows\SysWow64\hpcdmc32.dll
[2010/12/31 11:18:15 | 000,233,472 | —- | C] (Hewlett Packard Corporation) – C:\Windows\SysWow64\hpzc35ha.dll
[2010/12/31 11:18:03 | 000,000,000 | -H-D | C] – C:\Config.Msi
[2010/12/31 11:17:43 | 000,000,000 | —D | C] – C:\ProgramData\HP
[2010/12/24 09:58:49 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\vlc
[2010/12/24 09:58:43 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2010/12/24 09:58:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\VideoLAN
[2010/12/20 03:01:03 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dfshim.dll
[2010/12/20 03:01:03 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHost.exe
[2010/12/20 03:01:03 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationHostProxy.dll
[2010/12/20 03:01:03 | 000,049,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netfxperf.dll
[2010/12/19 10:49:48 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netevent.dll
[2010/12/19 10:49:48 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sscore.dll
[2010/12/19 03:42:56 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msshsq.dll
[2010/12/19 03:22:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSXML 4.0
[2010/12/19 03:16:30 | 000,037,384 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\infocardcpl.cpl
[2010/12/19 03:16:29 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardres.dll
[2010/12/19 03:16:28 | 000,781,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationNative_v0300.dll
[2010/12/19 03:16:28 | 000,622,080 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\icardagt.exe
[2010/12/19 03:16:28 | 000,097,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\infocardapi.dll
[2010/12/19 03:16:25 | 000,105,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2010/12/19 03:12:28 | 000,158,720 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscorier.dll
[2010/12/19 03:12:26 | 000,083,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mscories.dll
[2010/12/19 03:10:50 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\nshhttp.dll
[2010/12/19 03:10:49 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\httpapi.dll
[2010/12/18 15:43:55 | 000,000,000 | —D | C] – C:\Users\Joel\Documents\Small Engine
[2010/12/18 15:28:26 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe
[2010/12/18 15:27:47 | 000,000,000 | —D | C] – C:\ProgramData\Adobe
[2010/12/18 15:27:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe AIR
[2010/12/18 15:27:46 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Local\Adobe
[2010/12/18 15:27:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Adobe
[2010/12/18 13:13:15 | 000,000,000 | —D | C] – C:\Program Files (x86)\uTorrent
[2010/12/18 13:12:05 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\uTorrent
[2010/12/18 03:12:37 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msvfw32.dll
[2010/12/18 03:12:37 | 000,091,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avifil32.dll
[2010/12/18 03:12:37 | 000,082,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mciavi32.dll
[2010/12/18 03:12:37 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\avicap32.dll
[2010/12/18 03:12:35 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40.dll
[2010/12/18 03:12:35 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mfc40u.dll
[2010/12/18 03:12:29 | 000,636,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\localspl.dll
[2010/12/18 03:12:17 | 000,604,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMSPDMOD.DLL
[2010/12/18 03:12:06 | 000,157,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\t2embed.dll
[2010/12/18 03:12:03 | 000,244,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rastls.dll
[2010/12/18 03:12:02 | 000,281,600 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\raschap.dll
[2010/12/18 03:11:59 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amxread.dll
[2010/12/18 03:11:59 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\apilogen.dll
[2010/12/18 03:11:57 | 000,036,352 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rtutils.dll
[2010/12/18 03:11:56 | 000,317,952 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MP4SDECD.DLL
[2010/12/18 03:11:54 | 000,081,920 | —- | C] (Radius Inc.) – C:\Windows\SysWow64\iccvid.dll
[2010/12/18 03:11:50 | 000,292,352 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\atmfd.dll
[2010/12/18 03:11:50 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fontsub.dll
[2010/12/18 03:11:50 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\SysWow64\atmlib.dll
[2010/12/18 03:11:50 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dciman32.dll
[2010/12/18 03:11:41 | 002,066,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2010/12/18 03:11:31 | 010,624,512 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmp.dll
[2010/12/18 03:11:29 | 008,147,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmploc.DLL
[2010/12/18 03:11:13 | 000,183,296 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sdohlp.dll
[2010/12/18 03:11:09 | 000,512,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2010/12/18 03:11:02 | 002,452,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dat
[2010/12/18 03:10:59 | 000,146,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\occache.dll
[2010/12/18 03:10:58 | 000,467,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2010/12/18 03:10:57 | 000,476,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2010/12/18 03:10:57 | 000,389,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2010/12/18 03:10:57 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieapfltr.dll
[2010/12/18 03:10:57 | 000,230,400 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieaksie.dll
[2010/12/18 03:10:57 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2010/12/18 03:10:57 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieUnatt.exe
[2010/12/18 03:10:56 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieencode.dll
[2010/12/18 03:10:50 | 002,868,224 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mf.dll
[2010/12/18 03:10:50 | 002,386,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WMVCORE.DLL
[2010/12/18 03:10:28 | 000,104,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\netiohlp.dll
[2010/12/18 03:10:27 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\NETSTAT.EXE
[2010/12/18 03:10:27 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ARP.EXE
[2010/12/18 03:10:27 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ROUTE.EXE
[2010/12/18 03:10:27 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\MRINFO.EXE
[2010/12/18 03:10:27 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\finger.exe
[2010/12/18 03:10:27 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\TCPSVCS.EXE
[2010/12/18 03:10:27 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\HOSTNAME.EXE
[2010/12/18 03:10:06 | 001,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\quartz.dll
[2010/12/18 03:10:03 | 000,562,176 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdtcprx.dll
[2010/12/18 03:10:03 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xolehlp.dll
[2010/12/18 03:09:54 | 000,062,464 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\Windows\SysWow64\l3codeca.acm
[2010/12/18 03:09:46 | 000,313,344 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpdxm.dll
[2010/12/18 03:09:45 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\spwmp.dll
[2010/12/18 03:09:45 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.ocx
[2010/12/18 03:09:45 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\dxmasf.dll
[2010/12/18 03:09:44 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msdxm.tlb
[2010/12/18 03:09:44 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\amcompat.tlb
[2010/12/18 03:09:39 | 000,866,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wmpmde.dll
[2010/12/18 03:09:38 | 000,302,592 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlansec.dll
[2010/12/18 03:09:38 | 000,293,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wlanmsm.dll
[2010/12/18 03:09:38 | 000,127,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\L2SecHC.dll
[2010/12/18 03:09:35 | 000,357,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskschd.dll
[2010/12/18 03:09:34 | 000,270,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\taskcomp.dll
[2010/12/17 18:02:31 | 000,171,520 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wintrust.dll
[2010/12/17 18:02:31 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\cabview.dll
[2010/12/17 17:58:28 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\Macromedia
[2010/12/17 17:58:28 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\Adobe
[2010/12/17 17:58:00 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapi.dll
[2010/12/17 17:58:00 | 000,087,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wudriver.dll
[2010/12/17 17:58:00 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wups.dll
[2010/12/17 17:57:54 | 000,171,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuwebv.dll
[2010/12/17 17:57:54 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wuapp.exe
[2010/12/17 15:02:47 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\Hewlett-Packard
[2010/12/17 15:02:22 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Local\Hewlett-Packard
[2010/12/17 15:02:13 | 000,000,000 | R–D | C] – C:\Users\Joel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2010/12/17 15:02:13 | 000,000,000 | R–D | C] – C:\Users\Joel\Searches
[2010/12/17 15:02:13 | 000,000,000 | R–D | C] – C:\Users\Joel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2010/12/17 15:02:06 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\Identities
[2010/12/17 15:02:05 | 000,000,000 | R–D | C] – C:\Users\Joel\Contacts
[2010/12/17 15:02:02 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Local\VirtualStore
[2010/12/17 15:02:00 | 000,000,000 | –SD | C] – C:\Users\Joel\AppData\Roaming\Microsoft
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Videos
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Saved Games
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Pictures
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Music
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Links
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Favorites
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Downloads
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Documents
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\Desktop
[2010/12/17 15:02:00 | 000,000,000 | R–D | C] – C:\Users\Joel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\AppData\Local\Temporary Internet Files
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Templates
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Start Menu
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\SendTo
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Recent
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\PrintHood
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\NetHood
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Documents\My Videos
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Documents\My Pictures
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Documents\My Music
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\My Documents
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Local Settings
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\AppData\Local\History
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Cookies
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\Application Data
[2010/12/17 15:02:00 | 000,000,000 | -HSD | C] – C:\Users\Joel\AppData\Local\Application Data
[2010/12/17 15:02:00 | 000,000,000 | -H-D | C] – C:\Users\Joel\AppData
[2010/12/17 15:02:00 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Local\Temp
[2010/12/17 15:02:00 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Local\Microsoft
[2010/12/17 15:02:00 | 000,000,000 | —D | C] – C:\Users\Joel\AppData\Roaming\Media Center Programs
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/01/08 10:42:13 | 000,035,560 | —- | M] () – C:\ProgramData\nvModes.001
[2011/01/08 10:37:02 | 002,279,668 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1008000.029\Cat.DB
[2011/01/08 10:25:35 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/01/08 09:15:00 | 000,003,216 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/01/08 09:15:00 | 000,003,216 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/01/08 08:03:49 | 103,759,862 | —- | M] () – C:\Windows\SysNative\drivers\AVG\incavi.avm
[2011/01/07 18:22:22 | 000,035,560 | —- | M] () – C:\ProgramData\nvModes.dat
[2011/01/07 09:24:40 | 000,088,576 | —- | M] () – C:\Users\Joel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/07 09:23:49 | 000,690,960 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/01/07 09:23:49 | 000,599,942 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/01/07 09:23:49 | 000,105,448 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/01/06 11:21:41 | 000,002,557 | —- | M] () – C:\Users\Joel\Desktop\HiJackThis.lnk
[2011/01/05 20:19:39 | 000,000,496 | —- | M] () – C:\Users\Joel\AppData\Roaming\wklnhst.dat
[2011/01/05 19:37:27 | 000,001,758 | —- | M] () – C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/01/05 18:37:24 | 000,000,862 | —- | M] () – C:\Users\Public\Desktop\AVG 2011.lnk
[2011/01/05 18:37:22 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\drivers\AVG\incavi.avm
[2011/01/05 18:37:22 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\drivers\AVG\iavichjw.avm
[2011/01/05 18:19:59 | 000,000,680 | —- | M] () – C:\Users\Joel\AppData\Local\d3d9caps.dat
[2011/01/05 18:19:54 | 000,002,281 | —- | M] () – C:\Users\Public\Desktop\Norton Internet Security.lnk
[2011/01/04 17:56:10 | 000,172,592 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2011/01/04 17:56:10 | 000,007,440 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2011/01/04 17:56:10 | 000,000,855 | —- | M] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2011/01/04 17:55:56 | 000,583,296 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1008000.029\cchpx64.sys
[2011/01/04 17:55:56 | 000,334,384 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1008000.029\BHDrvx64.sys
[2011/01/04 17:55:54 | 000,009,412 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1008000.029\symnetv.cat
[2011/01/04 17:55:54 | 000,007,362 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1008000.029\BHDrvx64.CAT
[2011/01/04 17:55:54 | 000,001,481 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1008000.029\SymNetV.inf
[2011/01/04 17:55:54 | 000,000,640 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1008000.029\BHDrvx64.inf
[2011/01/04 17:55:54 | 000,000,172 | —- | M] () – C:\Windows\SysNative\drivers\NISx64\1008000.029\isolate.ini
[2011/01/04 15:08:42 | 000,001,804 | —- | M] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/01/04 15:08:42 | 000,001,780 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/12/31 11:34:56 | 000,122,851 | —- | M] () – C:\Windows\hpoins14.dat
[2010/12/24 09:58:43 | 000,000,903 | —- | M] () – C:\Users\Public\Desktop\VLC media player.lnk
[2010/12/19 04:04:08 | 000,287,616 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2010/12/18 15:28:30 | 000,001,924 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader X.lnk
[2010/12/18 13:13:16 | 000,000,808 | —- | M] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/12/17 17:58:20 | 000,000,975 | —- | M] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/01/08 08:03:49 | 103,759,862 | —- | C] () – C:\Windows\SysNative\drivers\AVG\incavi.avm
[2011/01/06 10:44:06 | 000,002,557 | —- | C] () – C:\Users\Joel\Desktop\HiJackThis.lnk
[2011/01/05 19:37:27 | 000,001,758 | —- | C] () – C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/01/05 18:37:24 | 000,000,862 | —- | C] () – C:\Users\Public\Desktop\AVG 2011.lnk
[2011/01/05 18:37:22 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\drivers\AVG\incavi.avm
[2011/01/05 18:37:22 | 000,000,000 | —- | C] () – C:\Windows\SysWow64\drivers\AVG\iavichjw.avm
[2011/01/05 09:46:27 | 000,000,496 | —- | C] () – C:\Users\Joel\AppData\Roaming\wklnhst.dat
[2011/01/04 15:08:42 | 000,001,804 | —- | C] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/01/04 15:08:42 | 000,001,780 | —- | C] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/12/31 13:33:47 | 000,031,280 | R— | C] () – C:\Windows\SysNative\drivers\SymIMV.sys
[2010/12/31 13:33:45 | 000,172,592 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS
[2010/12/31 13:33:45 | 000,007,440 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT
[2010/12/31 13:33:45 | 000,000,855 | —- | C] () – C:\Windows\SysNative\drivers\SYMEVENT64x86.INF
[2010/12/31 11:18:17 | 000,134,144 | —- | C] () – C:\Windows\SysNative\hpzll5ha.dll
[2010/12/31 11:17:45 | 000,000,360 | —- | C] () – C:\ProgramData\hpzinstall.log
[2010/12/31 11:17:44 | 000,122,851 | —- | C] () – C:\Windows\hpoins14.dat
[2010/12/31 11:17:44 | 000,001,996 | —- | C] () – C:\Windows\hpomdl14.dat
[2010/12/31 11:17:42 | 000,355,416 | —- | C] () – C:\Windows\SysNative\hpzids40.dll
[2010/12/31 11:17:41 | 000,861,184 | —- | C] () – C:\Windows\SysNative\hpowiax3.dll
[2010/12/31 11:17:41 | 000,729,600 | —- | C] () – C:\Windows\SysNative\hpotscl3.dll
[2010/12/31 11:17:41 | 000,540,672 | —- | C] () – C:\Windows\SysNative\hppldcoi.dll
[2010/12/31 11:17:41 | 000,508,928 | —- | C] () – C:\Windows\SysNative\difxapi.dll
[2010/12/31 11:17:41 | 000,497,664 | —- | C] () – C:\Windows\SysNative\hpovst10.dll
[2010/12/31 11:17:41 | 000,308,709 | —- | C] () – C:\Windows\SysNative\autorun.inf
[2010/12/24 09:58:43 | 000,000,903 | —- | C] () – C:\Users\Public\Desktop\VLC media player.lnk
[2010/12/21 13:50:57 | 000,088,576 | —- | C] () – C:\Users\Joel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/20 03:01:03 | 001,942,856 | —- | C] () – C:\Windows\SysNative\dfshim.dll
[2010/12/20 03:01:03 | 000,444,752 | —- | C] () – C:\Windows\SysNative\mscoree.dll
[2010/12/20 03:01:03 | 000,320,352 | —- | C] () – C:\Windows\SysNative\PresentationHost.exe
[2010/12/20 03:01:03 | 000,109,912 | —- | C] () – C:\Windows\SysNative\PresentationHostProxy.dll
[2010/12/20 03:01:03 | 000,048,960 | —- | C] () – C:\Windows\SysNative\netfxperf.dll
[2010/12/19 11:12:44 | 000,000,680 | —- | C] () – C:\Users\Joel\AppData\Local\d3d9caps.dat
[2010/12/19 10:49:57 | 000,442,368 | —- | C] () – C:\Windows\SysNative\winhttp.dll
[2010/12/19 10:49:48 | 000,461,824 | —- | C] () – C:\Windows\SysNative\drivers\srv.sys
[2010/12/19 10:49:48 | 000,179,712 | —- | C] () – C:\Windows\SysNative\srvsvc.dll
[2010/12/19 10:49:48 | 000,175,104 | —- | C] () – C:\Windows\SysNative\drivers\srv2.sys
[2010/12/19 10:49:48 | 000,144,896 | —- | C] () – C:\Windows\SysNative\drivers\srvnet.sys
[2010/12/19 10:49:48 | 000,017,920 | —- | C] () – C:\Windows\SysNative\netevent.dll
[2010/12/19 10:49:48 | 000,012,288 | —- | C] () – C:\Windows\SysNative\sscore.dll
[2010/12/19 10:49:44 | 000,975,360 | —- | C] () – C:\Windows\SysNative\inetcomm.dll
[2010/12/19 03:42:56 | 000,316,416 | —- | C] () – C:\Windows\SysNative\msshsq.dll
[2010/12/19 03:16:30 | 000,049,160 | —- | C] () – C:\Windows\SysNative\infocardcpl.cpl
[2010/12/19 03:16:29 | 000,011,264 | —- | C] () – C:\Windows\SysNative\icardres.dll
[2010/12/19 03:16:28 | 001,383,936 | —- | C] () – C:\Windows\SysNative\icardagt.exe
[2010/12/19 03:16:28 | 001,168,928 | —- | C] () – C:\Windows\SysNative\PresentationNative_v0300.dll
[2010/12/19 03:16:28 | 000,167,432 | —- | C] () – C:\Windows\SysNative\infocardapi.dll
[2010/12/19 03:16:25 | 000,126,520 | —- | C] () – C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2010/12/19 03:12:28 | 000,158,208 | —- | C] () – C:\Windows\SysNative\mscorier.dll
[2010/12/19 03:12:26 | 000,076,288 | —- | C] () – C:\Windows\SysNative\mscories.dll
[2010/12/19 03:10:50 | 000,032,768 | —- | C] () – C:\Windows\SysNative\nshhttp.dll
[2010/12/19 03:10:49 | 000,610,304 | —- | C] () – C:\Windows\SysNative\drivers\http.sys
[2010/12/19 03:10:49 | 000,033,792 | —- | C] () – C:\Windows\SysNative\httpapi.dll
[2010/12/18 15:28:30 | 000,001,924 | —- | C] () – C:\Users\Public\Desktop\Adobe Reader X.lnk
[2010/12/18 13:13:16 | 000,000,808 | —- | C] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2010/12/18 03:12:44 | 001,420,176 | —- | C] () – C:\Windows\SysNative\drivers\tcpip.sys
[2010/12/18 03:12:42 | 001,923,584 | —- | C] () – C:\Windows\SysNative\ole32.dll
[2010/12/18 03:12:38 | 000,108,544 | —- | C] () – C:\Windows\SysNative\avifil32.dll
[2010/12/18 03:12:38 | 000,093,184 | —- | C] () – C:\Windows\SysNative\mciavi32.dll
[2010/12/18 03:12:38 | 000,076,800 | —- | C] () – C:\Windows\SysNative\avicap32.dll
[2010/12/18 03:12:38 | 000,054,272 | —- | C] () – C:\Windows\SysNative\iyuv_32.dll
[2010/12/18 03:12:38 | 000,038,400 | —- | C] () – C:\Windows\SysNative\msvidc32.dll
[2010/12/18 03:12:38 | 000,025,600 | —- | C] () – C:\Windows\SysNative\msyuv.dll
[2010/12/18 03:12:38 | 000,015,872 | —- | C] () – C:\Windows\SysNative\msrle32.dll
[2010/12/18 03:12:38 | 000,013,824 | —- | C] () – C:\Windows\SysNative\tsbyuv.dll
[2010/12/18 03:12:37 | 000,143,360 | —- | C] () – C:\Windows\SysNative\msvfw32.dll
[2010/12/18 03:12:29 | 000,791,552 | —- | C] () – C:\Windows\SysNative\localspl.dll
[2010/12/18 03:12:27 | 001,280,512 | —- | C] () – C:\Windows\SysNative\rpcrt4.dll
[2010/12/18 03:12:23 | 000,656,384 | —- | C] () – C:\Windows\SysNative\kerberos.dll
[2010/12/18 03:12:19 | 000,437,248 | —- | C] () – C:\Windows\SysNative\WSDApi.dll
[2010/12/18 03:12:17 | 000,818,688 | —- | C] () – C:\Windows\SysNative\WMSPDMOD.DLL
[2010/12/18 03:12:15 | 012,898,304 | —- | C] () – C:\Windows\SysNative\shell32.dll
[2010/12/18 03:12:13 | 000,084,480 | —- | C] () – C:\Windows\SysNative\asycfilt.dll
[2010/12/18 03:12:09 | 000,273,920 | —- | C] () – C:\Windows\SysNative\drivers\mrxsmb10.sys
[2010/12/18 03:12:09 | 000,135,168 | —- | C] () – C:\Windows\SysNative\drivers\mrxsmb.sys
[2010/12/18 03:12:09 | 000,105,472 | —- | C] () – C:\Windows\SysNative\drivers\mrxsmb20.sys
[2010/12/18 03:12:06 | 000,189,952 | —- | C] () – C:\Windows\SysNative\t2embed.dll
[2010/12/18 03:12:05 | 000,633,856 | —- | C] () – C:\Windows\SysNative\comctl32.dll
[2010/12/18 03:12:03 | 000,295,936 | —- | C] () – C:\Windows\SysNative\raschap.dll
[2010/12/18 03:12:03 | 000,280,576 | —- | C] () – C:\Windows\SysNative\rastls.dll
[2010/12/18 03:12:00 | 001,208,832 | —- | C] () – C:\Windows\SysNative\kernel32.dll
[2010/12/18 03:11:59 | 000,025,600 | —- | C] () – C:\Windows\SysNative\amxread.dll
[2010/12/18 03:11:59 | 000,015,872 | —- | C] () – C:\Windows\SysNative\apilogen.dll
[2010/12/18 03:11:57 | 000,050,688 | —- | C] () – C:\Windows\SysNative\rtutils.dll
[2010/12/18 03:11:56 | 000,295,424 | —- | C] () – C:\Windows\SysNative\MP4SDECD.DLL
[2010/12/18 03:11:55 | 000,267,776 | —- | C] () – C:\Windows\SysNative\spoolsv.exe
[2010/12/18 03:11:50 | 000,367,104 | —- | C] () – C:\Windows\SysNative\atmfd.dll
[2010/12/18 03:11:50 | 000,096,256 | —- | C] () – C:\Windows\SysNative\fontsub.dll
[2010/12/18 03:11:50 | 000,048,128 | —- | C] () – C:\Windows\SysNative\atmlib.dll
[2010/12/18 03:11:46 | 004,690,832 | —- | C] () – C:\Windows\SysNative\ntoskrnl.exe
[2010/12/18 03:11:44 | 001,794,560 | —- | C] () – C:\Windows\SysNative\msxml6.dll
[2010/12/18 03:11:42 | 002,423,296 | —- | C] () – C:\Windows\SysNative\mstscax.dll
[2010/12/18 03:11:33 | 013,425,152 | —- | C] () – C:\Windows\SysNative\wmp.dll
[2010/12/18 03:11:29 | 008,147,968 | —- | C] () – C:\Windows\SysNative\wmploc.DLL
[2010/12/18 03:11:15 | 001,030,656 | —- | C] () – C:\Windows\SysNative\printfilterpipelinesvc.exe
[2010/12/18 03:11:15 | 000,718,336 | —- | C] () – C:\Windows\SysNative\rpcss.dll
[2010/12/18 03:11:13 | 000,231,424 | —- | C] () – C:\Windows\SysNative\sdohlp.dll
[2010/12/18 03:11:13 | 000,163,840 | —- | C] () – C:\Windows\SysNative\iasrecst.dll
[2010/12/18 03:11:13 | 000,075,776 | —- | C] () – C:\Windows\SysNative\iasads.dll
[2010/12/18 03:11:13 | 000,061,440 | —- | C] () – C:\Windows\SysNative\iasdatastore.dll
[2010/12/18 03:11:13 | 000,036,352 | —- | C] () – C:\Windows\SysNative\printfilterpipelineprxy.dll
[2010/12/18 03:11:13 | 000,024,576 | —- | C] () – C:\Windows\SysNative\iashost.exe
[2010/12/18 03:11:10 | 000,087,552 | —- | C] () – C:\Windows\SysNative\consent.exe
[2010/12/18 03:11:09 | 000,753,152 | —- | C] () – C:\Windows\SysNative\jscript.dll
[2010/12/18 03:11:07 | 002,751,488 | —- | C] () – C:\Windows\SysNative\win32k.sys
[2010/12/18 03:11:02 | 002,452,872 | —- | C] () – C:\Windows\SysNative\ieapfltr.dat
[2010/12/18 03:11:01 | 005,693,440 | —- | C] () – C:\Windows\SysNative\mshtml.dll
[2010/12/18 03:11:00 | 007,015,424 | —- | C] () – C:\Windows\SysNative\ieframe.dll
[2010/12/18 03:10:59 | 001,426,944 | —- | C] () – C:\Windows\SysNative\urlmon.dll
[2010/12/18 03:10:59 | 001,129,984 | —- | C] () – C:\Windows\SysNative\mstime.dll
[2010/12/18 03:10:59 | 001,032,704 | —- | C] () – C:\Windows\SysNative\wininet.dll
[2010/12/18 03:10:59 | 000,208,896 | —- | C] () – C:\Windows\SysNative\occache.dll
[2010/12/18 03:10:58 | 000,758,784 | —- | C] () – C:\Windows\SysNative\mshtmled.dll
[2010/12/18 03:10:58 | 000,590,848 | —- | C] () – C:\Windows\SysNative\msfeeds.dll
[2010/12/18 03:10:58 | 000,422,400 | —- | C] () – C:\Windows\SysNative\ieapfltr.dll
[2010/12/18 03:10:57 | 000,480,256 | —- | C] () – C:\Windows\SysNative\iedkcs32.dll
[2010/12/18 03:10:57 | 000,375,296 | —- | C] () – C:\Windows\SysNative\iertutil.dll
[2010/12/18 03:10:57 | 000,267,776 | —- | C] () – C:\Windows\SysNative\ieaksie.dll
[2010/12/18 03:10:57 | 000,249,856 | —- | C] () – C:\Windows\SysNative\iepeers.dll
[2010/12/18 03:10:57 | 000,032,768 | —- | C] () – C:\Windows\SysNative\ieUnatt.exe
[2010/12/18 03:10:56 | 001,383,424 | —- | C] () – C:\Windows\SysNative\mshtml.tlb
[2010/12/18 03:10:56 | 000,485,376 | —- | C] () – C:\Windows\SysNative\html.iec
[2010/12/18 03:10:56 | 000,086,528 | —- | C] () – C:\Windows\SysNative\ieencode.dll
[2010/12/18 03:10:56 | 000,032,256 | —- | C] () – C:\Windows\SysNative\jsproxy.dll
[2010/12/18 03:10:53 | 000,603,648 | —- | C] () – C:\Windows\SysNative\vbscript.dll
[2010/12/18 03:10:51 | 002,900,480 | —- | C] () – C:\Windows\SysNative\WMVCORE.DLL
[2010/12/18 03:10:50 | 003,547,136 | —- | C] () – C:\Windows\SysNative\mf.dll
[2010/12/18 03:10:47 | 001,692,160 | —- | C] () – C:\Windows\SysNative\lsasrv.dll
[2010/12/18 03:10:47 | 000,515,656 | —- | C] () – C:\Windows\SysNative\drivers\ksecdd.sys
[2010/12/18 03:10:47 | 000,268,800 | —- | C] () – C:\Windows\SysNative\msv1_0.dll
[2010/12/18 03:10:47 | 000,205,312 | —- | C] () – C:\Windows\SysNative\wdigest.dll
[2010/12/18 03:10:46 | 000,094,720 | —- | C] () – C:\Windows\SysNative\secur32.dll
[2010/12/18 03:10:46 | 000,011,264 | —- | C] () – C:\Windows\SysNative\lsass.exe
[2010/12/18 03:10:44 | 000,088,576 | —- | C] () – C:\Windows\SysNative\atl.dll
[2010/12/18 03:10:28 | 000,141,312 | —- | C] () – C:\Windows\SysNative\netiohlp.dll
[2010/12/18 03:10:27 | 000,032,256 | —- | C] () – C:\Windows\SysNative\NETSTAT.EXE
[2010/12/18 03:10:27 | 000,023,040 | —- | C] () – C:\Windows\SysNative\ARP.EXE
[2010/12/18 03:10:27 | 000,021,504 | —- | C] () – C:\Windows\SysNative\ROUTE.EXE
[2010/12/18 03:10:27 | 000,012,800 | —- | C] () – C:\Windows\SysNative\MRINFO.EXE
[2010/12/18 03:10:27 | 000,011,264 | —- | C] () – C:\Windows\SysNative\finger.exe
[2010/12/18 03:10:27 | 000,010,752 | —- | C] () – C:\Windows\SysNative\TCPSVCS.EXE
[2010/12/18 03:10:27 | 000,010,240 | —- | C] () – C:\Windows\SysNative\HOSTNAME.EXE
[2010/12/18 03:10:07 | 001,875,456 | —- | C] () – C:\Windows\SysNative\msxml3.dll
[2010/12/18 03:10:06 | 001,570,816 | —- | C] () – C:\Windows\SysNative\quartz.dll
[2010/12/18 03:10:06 | 000,082,944 | —- | C] () – C:\Windows\SysNative\msasn1.dll
[2010/12/18 03:10:05 | 000,202,752 | —- | C] () – C:\Windows\SysNative\wkssvc.dll
[2010/12/18 03:10:03 | 000,730,112 | —- | C] () – C:\Windows\SysNative\msdtcprx.dll
[2010/12/18 03:10:03 | 000,048,640 | —- | C] () – C:\Windows\SysNative\xolehlp.dll
[2010/12/18 03:10:00 | 000,002,048 | —- | C] () – C:\Windows\SysNative\tzres.dll
[2010/12/18 03:09:54 | 000,622,080 | —- | C] () – C:\Windows\SysNative\usp10.dll
[2010/12/18 03:09:54 | 000,072,192 | —- | C] () – C:\Windows\SysNative\l3codeca.acm
[2010/12/18 03:09:46 | 000,368,128 | —- | C] () – C:\Windows\SysNative\wmpdxm.dll
[2010/12/18 03:09:45 | 000,009,216 | —- | C] () – C:\Windows\SysNative\spwmp.dll
[2010/12/18 03:09:45 | 000,005,120 | —- | C] () – C:\Windows\SysNative\msdxm.ocx
[2010/12/18 03:09:45 | 000,005,120 | —- | C] () – C:\Windows\SysNative\dxmasf.dll
[2010/12/18 03:09:44 | 000,043,520 | —- | C] () – C:\Windows\SysNative\msdxm.tlb
[2010/12/18 03:09:44 | 000,018,432 | —- | C] () – C:\Windows\SysNative\amcompat.tlb
[2010/12/18 03:09:39 | 001,090,048 | —- | C] () – C:\Windows\SysNative\wmpmde.dll
[2010/12/18 03:09:39 | 000,343,040 | —- | C] () – C:\Windows\SysNative\schannel.dll
[2010/12/18 03:09:38 | 002,608,803 | —- | C] () – C:\Windows\SysNative\wlan.tmf
[2010/12/18 03:09:38 | 000,615,936 | —- | C] () – C:\Windows\SysNative\wlansvc.dll
[2010/12/18 03:09:38 | 000,376,832 | —- | C] () – C:\Windows\SysNative\wlansec.dll
[2010/12/18 03:09:38 | 000,353,280 | —- | C] () – C:\Windows\SysNative\wlanmsm.dll
[2010/12/18 03:09:38 | 000,157,184 | —- | C] () – C:\Windows\SysNative\L2SecHC.dll
[2010/12/18 03:09:38 | 000,097,792 | —- | C] () – C:\Windows\SysNative\wlanhlp.dll
[2010/12/18 03:09:38 | 000,086,528 | —- | C] () – C:\Windows\SysNative\wlanapi.dll
[2010/12/18 03:09:35 | 000,854,528 | —- | C] () – C:\Windows\SysNative\schedsvc.dll
[2010/12/18 03:09:35 | 000,655,872 | —- | C] () – C:\Windows\SysNative\taskschd.dll
[2010/12/18 03:09:35 | 000,499,712 | —- | C] () – C:\Windows\SysNative\wmicmiplugin.dll
[2010/12/18 03:09:34 | 000,410,112 | —- | C] () – C:\Windows\SysNative\taskcomp.dll
[2010/12/18 03:09:34 | 000,267,776 | —- | C] () – C:\Windows\SysNative\taskeng.exe
[2010/12/18 03:01:47 | 000,270,720 | —- | C] () – C:\Windows\SysNative\MpSigStub.exe
[2010/12/17 18:02:31 | 000,218,112 | —- | C] () – C:\Windows\SysNative\wintrust.dll
[2010/12/17 18:02:31 | 000,104,960 | —- | C] () – C:\Windows\SysNative\cabview.dll
[2010/12/17 17:58:20 | 000,000,975 | —- | C] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/12/17 17:58:14 | 002,621,440 | —- | C] () – C:\Windows\SysNative\wucltux.dll
[2010/12/17 17:58:14 | 002,424,024 | —- | C] () – C:\Windows\SysNative\wuaueng.dll
[2010/12/17 17:58:14 | 000,057,560 | —- | C] () – C:\Windows\SysNative\wuauclt.exe
[2010/12/17 17:58:14 | 000,043,744 | —- | C] () – C:\Windows\SysNative\wups2.dll
[2010/12/17 17:58:00 | 000,700,640 | —- | C] () – C:\Windows\SysNative\wuapi.dll
[2010/12/17 17:58:00 | 000,098,816 | —- | C] () – C:\Windows\SysNative\wudriver.dll
[2010/12/17 17:58:00 | 000,038,112 | —- | C] () – C:\Windows\SysNative\wups.dll
[2010/12/17 17:57:54 | 000,185,416 | —- | C] () – C:\Windows\SysNative\wuwebv.dll
[2010/12/17 17:57:54 | 000,036,864 | —- | C] () – C:\Windows\SysNative\wuapp.exe
[2010/12/17 15:02:00 | 000,001,928 | —- | C] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\HP MediaSmart.lnk
[2010/12/17 15:02:00 | 000,000,258 | —- | C] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/12/17 15:02:00 | 000,000,240 | —- | C] () – C:\Users\Joel\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2008/01/20 21:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2008/01/20 21:49:49 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2002/01/31 05:46:58 | 000,035,560 | —- | C] () – C:\ProgramData\nvModes.001
[2002/01/31 05:21:00 | 000,035,560 | —- | C] () – C:\ProgramData\nvModes.dat
[2002/01/31 05:07:28 | 000,354,816 | —- | C] () – C:\Windows\SysWow64\pythoncom26.dll
[2002/01/31 05:07:28 | 000,108,032 | —- | C] () – C:\Windows\SysWow64\pywintypes26.dll

< End of report >

OTL Extras logfile created on: 08/01/2011 10:52:19 AM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Joel\Downloads
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

9.00 Gb Total Physical Memory | 6.00 Gb Available Physical Memory | 72.00% Memory free
18.00 Gb Paging File | 16.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 917.44 Gb Total Space | 760.52 Gb Free Space | 82.90% Space Free | Partition Type: NTFS
Drive D: | 14.07 Gb Total Space | 1.99 Gb Free Space | 14.12% Space Free | Partition Type: NTFS
Drive K: | 931.51 Gb Total Space | 511.20 Gb Free Space | 54.88% Space Free | Partition Type: NTFS

Computer Name: ZEUS | User Name: Joel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" ()
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l ()
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0A128D39-FC79-4CE7-9495-BD1CF7EDAEA3}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hpdvdsmart.exe |
"{1878A454-BF5E-4B40-B3D5-97E3C8C9CE44}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgemca.exe |
"{1E30D2CA-A51A-4BB8-9926-2A91AA8D37A9}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartphoto.exe |
"{21C96E96-ADBB-477E-9A9A-D91ED64DCF00}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgnsa.exe |
"{2845085D-27A6-4A35-A592-469CA8EA2605}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartmusic.exe |
"{37DBEBDA-E948-4266-8FFA-084639F78FA7}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgemca.exe |
"{52D45239-A4F1-4920-B75F-3A88306B5CE5}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\tsmagent.exe |
"{5E0A9D40-C1B4-421B-91A3-1CAF41FD4B47}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\hptouchsmartvideo.exe |
"{700BEE70-0BE1-4639-9752-C704D2004548}" = dir=in | app=c:\program files (x86)\hewlett-packard\touchsmart\media\kernel\clml\clmlsvc.exe |
"{71CF7C6C-B875-4936-BEA0-8636E49A45C2}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg10\avgmfapx.exe |
"{7BEA4426-A5A1-4BF7-A3AD-E0FA18EC7A9F}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartmusic.exe |
"{89F22F3A-6417-4371-A228-4F09F9F4FDAA}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{90D6AACF-3F8D-49BA-9693-CB3AFD05371A}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgnsa.exe |
"{B2BE6DAA-31BE-4D73-AA34-E81A9F37C78F}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{CFFA6ABD-3BFB-42A9-BE63-6BEA121D8273}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr.exe |
"{E1EAA683-A02B-4027-971C-48E4B6E94C0C}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\tsmagent.exe |
"{E6D214C9-47FB-4881-9A55-68159C88D7A7}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\kernel\clml\clmlsvc.exe |
"{E85937EB-AFBA-47C5-BA3B-6099F0B3DC2D}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartphoto.exe |
"{EB89A30E-A8CE-4E8E-B19B-50F79745DDB8}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg10\avgmfapx.exe |
"{EDC93EAD-3178-45D9-BFD1-358EC53D72AE}" = dir=in | app=c:\program files (x86)\hewlett-packard\media\dvd\hptouchsmartvideo.exe |
"TCP Query User{5C59E16F-7D03-42D8-8497-F344E1D44FB0}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |
"UDP Query User{5A36EA9E-40EC-4418-B6D3-DEDB1D331442}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{4FFA2088-8317-3B14-93CD-4C699DB37843}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"{544974E3-D015-401C-900C-E5D137BC930E}" = AVG 2011
"{5DDF6B75-2369-4D52-9867-10EFD8878185}" = AVG 2011
"{5F240DB8-0D74-4F13-86C3-929760392A8D}" = HP Remote Software
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{9F560BEB-021F-43AC-825F-AA60442D8DE4}" = 64 Bit HP CIO Components Installer
"{B2C61EBB-F47C-48ba-B375-27A40F8F48F7}" = HP Deskjet All-In-One Software 9.0
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2E8F543-D23A-4A38-AFFC-4BDEBFBA6FDA}" = HP MediaSmart SmartMenu
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"AVG" = AVG 2011
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"OfficeTrial" = Microsoft Office Home and Student 60 day trial
"PC-Doctor for Windows" = Hardware Diagnostic Tools

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0295F89F-F698-4101-9A7D-49F407EC2D82}" = HP Active Support Library
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{1CC069FA-1A86-402E-9787-3F04E652C67A}" = HP Support Information
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{47F36D92-E58E-456D-B73C-3382737E4C42}" = HP Update
"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{67431FA8-4B89-42DD-A68E-30D77F6C8D99}_is1" = HP Easy Backup
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73A43E42-3658-4DD9-8551-FACDA3632538}" = HP Advisor
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{784BEA84-FA66-4B19-BB80-7B545F248AC6}" = HP Total Care Setup
"{7F10292C-A190-4176-A665-A1ED3478DF86}" = LightScribe System Software
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{9CC89170-000B-457D-91F1-53691F85B223}" = Python 2.6.1
"{A0640EC2-B97E-4FC1-AD14-227C9E386BB4}" = HP Recovery Manager RSS
"{AC76BA86-7AD7-1033-7B44-AA0000000001}" = Adobe Reader X
"{AE469025-08BA-4B2A-915D-CC7765132419}" = Default Manager
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"{B4F35A00-24FD-4fb3-BF5E-413D5423434D}" = DJ_AIO_Software_min
"{B84739A3-F943-47E4-95D8-96381EF5AC48}" = HP Customer Experience Enhancements
"{B8AC1A89-FFD1-4F97-8051-E505A160F562}" = HP Odometer
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C79BF5BB-5671-41C0-A028-E9A2097D1AAD}" = Microsoft Live Search Toolbar
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DF802C05-4660-418c-970C-B988ADB1D316}" = Microsoft Live Search Toolbar
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{E9E34215-82EF-4909-BE2F-F581F0DC9062}" = DirectX for Managed Code Update (Summer 2004)
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"NIS" = Norton Internet Security
"pywin32-py2.6" = Python 2.6 pywin32-212
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.5
"WildTangent hp Master Uninstall" = HP Games

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/03/2003 11:02:56 AM | Computer Name = Zeus | Source = WinMgmt | ID = 10
Description =

Error - 10/03/2003 11:05:00 AM | Computer Name = Zeus | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 10/03/2003 11:05:00 AM | Computer Name = Zeus | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 10/03/2003 11:05:00 AM | Computer Name = Zeus | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 10/03/2003 11:05:00 AM | Computer Name = Zeus | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 17/12/2010 4:02:54 PM | Computer Name = Zeus | Source = HP Advisor | ID = 400
Description = Timestamp: 12/17/2010 15:02:54.468; Category: FATAL; Priority:(4); Win32
Thread Id: [3052]; Message: System.NullReferenceException: Object reference not
set to an instance of an object. at HPAdvisor.MainFrame.Business.SearchManager.GetTarget(String
type) at HPAdvisor.MainFrame.Business.SearchManager.Initialize(); EventId: 400;
Severity:
Critical; Machine: Zeus; Application Domain: HPAdvisor.exe; Process Id: 2852; Process
Name: C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe; Extended
Properties:

Error - 17/12/2010 7:31:23 PM | Computer Name = Zeus | Source = WinMgmt | ID = 10
Description =

Error - 19/12/2010 5:04:44 AM | Computer Name = Zeus | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 19/12/2010 5:06:34 AM | Computer Name = Zeus | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =

Error - 20/12/2010 4:18:04 AM | Computer Name = Zeus | Source = HTTP | ID = 15016
Description =

Error - 20/12/2010 4:18:53 AM | Computer Name = Zeus | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =

Error - 29/12/2010 10:32:35 AM | Computer Name = Zeus | Source = HTTP | ID = 15016
Description =

Error - 29/12/2010 10:33:44 AM | Computer Name = Zeus | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =

Error - 02/01/2011 9:58:14 PM | Computer Name = Zeus | Source = HTTP | ID = 15016
Description =

Error - 02/01/2011 9:59:08 PM | Computer Name = Zeus | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =

Error - 04/01/2011 9:38:52 AM | Computer Name = Zeus | Source = HTTP | ID = 15016
Description =

Error - 04/01/2011 9:40:10 AM | Computer Name = Zeus | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =

Error - 05/01/2011 7:19:39 PM | Computer Name = Zeus | Source = HTTP | ID = 15016
Description =

< End of report >

Conspire

Post #5January 9, 2011, 3:32 AM UTC

Hi, I'm not seeing anything bad in your log. Do you actually use these toolbars? If you don't, I would suggest you to remove both toolbars all together and see if IE still unresponsive. Otherwise, try removing Norton first.

Look at Symantec site and pick the version you have then download the removal tool and follow the instructions.
http://us.norton.com/support/kb/web_view.j…0080710133834EN

Conspire

Post #6January 12, 2011, 1:35 PM UTC

Still with me?

Conspire

Post #7January 14, 2011, 3:05 PM UTC

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

HiJack This Log - IE Toolbar Jumping

✨ Ask AI

Ask AI