This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

FINDSTUFF.COM

7 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hello, so while searching through google on mozilla firefox, some links I click are redirected to websites such as (findstuff.com). I have tried a malwarebytes search along with avast! search, neither were about to fix the problem. I downloaded Hijackthis and these are my results.

I also get the error "For some reason your system denied write access to the host files"

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:10:42 PM, on 1/9/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\windows\SysWOW64\NOTEPAD.EXE
C:\windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://samsung.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: 30a52f43 - {76951B07-BF9B-C9C6-2CAE-554C536CC250} - C:\ProgramData\api-ms-win-core-misc-l1-1-032.dll (file missing)
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: W2PBrowser Browser Helper - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jesse\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O4 - .DEFAULT User Startup: Best Buy pc app.lnk = C:\ProgramData\Best Buy pc app\ClickOnceSetup.exe (User 'Default user')
O4 - Global Startup: SRS Premium Sound.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Intel® PROSet/Wireless WiMAX Red Bend Device Management Service (DMAgent) - Red Bend Ltd. - C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Intel® Turbo Boost Technology Monitor (TurboBoost) - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Credential Manager (VaultSvc32) - Unknown owner - c:\windows\system32\htui32.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: Intel® PROSet/Wireless WiMAX Service (WiMAXAppSrv) - Intel® Corporation - C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 10860 bytes


HELP PLEASE!! THANK YOU
DDS Results DDS (Ver_10-12-12.02) - NTFS_AMD64 Run by [removed] at 22:28:37.15 on Sun 01/09/2011 Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_23 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3882.2629 [GMT -6:00] AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308} SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ============== Running Processes =============== C:\windows\system32\wininit.exe C:\windows\system32\lsm.exe C:\windows\system32\svchost.exe -k DcomLaunch C:\windows\system32\nvvsvc.exe C:\windows\system32\svchost.exe -k RPCSS C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\windows\system32\svchost.exe -k netsvcs C:\windows\system32\svchost.exe -k LocalService C:\windows\system32\svchost.exe -k NetworkService C:\windows\system32\nvvsvc.exe C:\Program Files\Alwil Software\Avast5\AvastSvc.exe C:\windows\system32\WLANExt.exe C:\windows\system32\conhost.exe C:\windows\System32\spoolsv.exe C:\windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files (x86)\Bonjour\mDNSResponder.exe C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\windows\system32\svchost.exe -k imgsvc C:\Program Files\Intel\TurboBoost\TurboBoost.exe C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe C:\windows\system32\taskhost.exe C:\windows\system32\Dwm.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\windows\Explorer.EXE C:\Program Files\Intel\WiFi\bin\EvtEng.exe C:\windows\system32\wbem\unsecapp.exe C:\windows\system32\wbem\wmiprvse.exe C:\windows\System32\rundll32.exe C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files\Elantech\ETDCtrl.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files\Elantech\ETDCtrlHelper.exe C:\Program Files\iPod\bin\iPodService.exe C:\windows\system32\SearchIndexer.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\windows\System32\svchost.exe -k LocalServicePeerNet C:\windows\system32\taskeng.exe C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe C:\windows\system32\igfxext.exe C:\windows\system32\igfxsrvc.exe C:\Program Files\Alwil Software\Avast5\avastUI.exe C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe C:\windows\system32\DllHost.exe C:\windows\system32\igfxtray.exe C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe C:\windows\system32\igfxpers.exe C:\windows\system32\wbem\unsecapp.exe C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe C:\windows\System32\svchost.exe -k secsvcs C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe C:\windows\system32\conhost.exe C:\Program Files (x86)\iTunes\iTunes.exe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe C:\windows\system32\conhost.exe C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Users\Jesse\Downloads\OTL.exe C:\windows\system32\wbem\wmiprvse.exe C:\windows\system32\vssvc.exe C:\windows\System32\svchost.exe -k swprv C:\windows\system32\SearchProtocolHost.exe C:\windows\system32\SearchFilterHost.exe C:\windows\system32\taskhost.exe C:\windows\system32\DllHost.exe C:\windows\system32\DllHost.exe C:\Users\Jesse\Downloads\dds(2).scr C:\windows\system32\conhost.exe ============== Pseudo HJT Report =============== uStart Page = hxxp://www.google.com/ uDefault_Page_URL = hxxp://samsung.msn.com mStart Page = hxxp://samsung.msn.com uInternet Settings,ProxyOverride = *.local mWinlogon: Userinit=userinit.exe, BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll BHO: 30a52f43: {76951b07-bf9b-c9c6-2cae-554c536cc250} - C:\ProgramData\api-ms-win-core-misc-l1-1-032.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll BHO: W2PBrowser Class: {aa609d72-8482-4076-8991-8cdae5b93bcb} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll TB: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun uRun: [Google Update] "C:\Users\Jesse\AppData\Local\Google\Update\GoogleUpdate.exe" /c mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices dRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\SRSPRE~1.LNK - C:\windows\Installer\{340BE65B-7621-4B0B-B0F9-DBCCD8D70887}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: E&xport to Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {328ECD19-C167-40eb-A0C7-16FE7634105E} - {94BB0C4C-B957-479A-85E4-42F53B89F681} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll AppInit_DLLs: C:\windows\SysWOW64\nvinit.dll BHO-X64: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO-X64: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL BHO-X64: URLRedirectionBHO - No File BHO-X64: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll mRun-x64: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s mRun-x64: [ETDCtrl] %ProgramFiles%\Elantech\ETDCtrl.exe mRun-x64: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" AppInit_DLLs-X64: C:\windows\system32\nvinitx.dll ================= FIREFOX =================== FF - ProfilePath - C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\3iscalmy.default\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\Users\Jesse\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: C:\Users\Jesse\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll FF - plugin: C:\Users\Jesse\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll FF - plugin: C:\windows\SysWOW64\Macromed\Flash\NPSWF32.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - C:\Program Files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Ext: XUL Cache: {41c156b0-5f6d-4a0f-b4a2-72cc769e7b98} - %profile%\extensions\{41c156b0-5f6d-4a0f-b4a2-72cc769e7b98} ============= SERVICES / DRIVERS =============== R0 nvpciflt;nvpciflt;C:\Windows\System32\drivers\nvpciflt.sys [2010-9-29 24680] R1 aswSP;aswSP;C:\Windows\System32\drivers\aswSP.sys [2010-12-25 271952] R1 SABI;SAMSUNG Kernel Driver For Windows 7;C:\Windows\System32\drivers\SABI.sys [2010-9-28 13824] R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\System32\drivers\vwififlt.sys [2009-7-13 59904] R2 aswFsBlk;aswFsBlk;C:\Windows\System32\drivers\aswFsBlk.sys [2010-12-25 20560] R2 aswMonFlt;aswMonFlt;C:\Windows\System32\drivers\aswMonFlt.sys [2010-12-25 62032] R2 avast! Antivirus;avast! Antivirus;C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-1-9 40384] R2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe [2010-6-7 408576] R2 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-6-1 2804568] R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-9-28 1620584] R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\System32\drivers\TurboB.sys [2010-5-21 13832] R2 TurboBoost;Intel® Turbo Boost Technology Monitor;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-5-21 134928] R2 UNS;Intel® Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-9-28 2320920] R2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe [2010-6-7 911872] R3 bpenum;bpenum;C:\Windows\System32\drivers\bpenum.sys [2010-5-16 71168] R3 bpmp;Intel® Centrino® WiMAX 6050 Series;C:\Windows\System32\drivers\bpmp.sys [2010-5-16 175104] R3 bpusb;bpusb;C:\Windows\System32\drivers\bpusb.sys [2010-5-16 81920] R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\System32\drivers\ETD.sys [2010-9-29 118664] R3 HECIx64;Intel® Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-9-29 56344] R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-9-29 158976] R3 IntcDAud;Intel® Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2010-9-29 289280] R3 NETw5s64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;C:\Windows\System32\drivers\NETw5s64.sys [2010-5-30 7689216] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\System32\drivers\vwifimp.sys [2009-7-13 17920] R3 wdkmd;Intel WiDi KMD;C:\Windows\System32\drivers\WDKMD.sys [2010-6-17 39832] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2010-8-30 394016] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 VaultSvc32;Credential Manager ;c:\windows\system32\htui32.exe –> c:\windows\system32\htui32.exe [?] S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2010-12-27 48488] S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-9-23 1493352] S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2010-3-4 340240] S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184] S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-6-10 187392] S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2010-9-28 51712] S3 WatAdminSvc;Windows Activation Technologies Service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-12-26 1255736] S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184] =============== Created Last 30 ================ 2011-01-10 03:59:22 388096 —-a-r- C:\Users\Jesse\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-01-10 03:59:22 ——– d—–w- C:\Program Files (x86)\Trend Micro 2011-01-10 02:03:04 ——– d—–w- C:\Users\Jesse\AppData\Roaming\Malwarebytes 2011-01-10 02:02:58 38224 —-a-w- C:\windows\SysWow64\drivers\mbamswissarmy.sys 2011-01-10 02:02:56 ——– d—–w- C:\PROGRA~3\Malwarebytes 2011-01-10 02:02:53 24152 —-a-w- C:\windows\System32\drivers\mbam.sys 2011-01-10 02:02:53 ——– d—–w- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2011-01-08 19:19:52 ——– d—–w- C:\Program Files (x86)\Microsoft Synchronization Services 2011-01-08 19:18:04 ——– d—–w- C:\Program Files (x86)\Microsoft Analysis Services 2011-01-08 19:17:47 ——– d—–w- C:\Users\Jesse\AppData\Local\Microsoft Help 2011-01-08 06:17:30 ——– d—–w- C:\Users\Jesse\AppData\Roaming\SynthMaker 2011-01-08 06:09:27 ——– d—–w- C:\Users\Jesse\AppData\Roaming\Acoustica 2011-01-08 06:09:26 57344 —-a-w- C:\windows\SysWow64\Wnaspint.dll 2011-01-08 06:08:36 ——– d—–w- C:\Program Files (x86)\Acoustica Shared Effects 2011-01-08 06:06:09 ——– d—–w- C:\Program Files (x86)\VST 2011-01-08 06:06:09 ——– d—–w- C:\PROGRA~3\Acoustica 2011-01-08 06:06:08 ——– d—–w- C:\Program Files (x86)\Acoustica Mixcraft 5 2011-01-08 06:05:54 348160 —-a-w- C:\windows\SysWow64\msvcr71.dll 2011-01-08 06:04:55 ——– d-sh–w- C:\PROGRA~3\SysWoW32 2011-01-08 06:04:40 203776 –sh–w- C:\PROGRA~3\unrar.exe 2011-01-08 06:04:36 ——– d-sh–w- C:\PROGRA~3\3746B2CCCE4FFD11121A4D9E65175630 2011-01-07 22:16:17 8199504 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\{AE30C68F-925B-4D0B-9751-1D3C06571859}\mpengine.dll 2011-01-05 03:23:39 ——– d—–w- C:\windows\Msagent 2011-01-02 08:15:09 ——– d—–w- C:\Users\Jesse\Adobe 2011-01-02 08:09:15 306688 —-a-w- C:\windows\IsUninst.exe 2010-12-28 23:38:03 ——– d—–w- C:\Users\Jesse\AppData\Local\Google 2010-12-28 17:21:09 ——– d—–w- C:\Users\Jesse\AppData\Local\Diagnostics 2010-12-28 08:14:21 8199504 —-a-w- C:\PROGRA~3\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll 2010-12-27 21:22:17 ——– d—–w- C:\Users\Jesse\AppData\Local\{C3A23E09-7B64-4094-98AB-F5BA6BD04064} 2010-12-27 20:04:07 ——– d—–w- C:\Users\Jesse\AppData\Local\{F3122692-191C-44C7-A197-4B89BAB3946A} 2010-12-27 20:03:54 ——– d—–w- C:\Users\Jesse\AppData\Roaming\Windows Live Writer 2010-12-27 20:03:54 ——– d—–w- C:\Users\Jesse\AppData\Local\Windows Live Writer 2010-12-27 19:46:44 ——– d—–w- C:\windows\en 2010-12-27 19:41:27 48488 —-a-w- C:\windows\System32\drivers\fssfltr.sys 2010-12-27 19:40:25 ——– d—–w- C:\Program Files (x86)\MSN Toolbar 2010-12-27 19:40:09 69464 —-a-w- C:\windows\SysWow64\XAPOFX1_3.dll 2010-12-27 19:40:09 515416 —-a-w- C:\windows\SysWow64\XAudio2_5.dll 2010-12-27 19:40:08 523088 —-a-w- C:\windows\System32\d3dx10_42.dll 2010-12-27 19:40:08 453456 —-a-w- C:\windows\SysWow64\d3dx10_42.dll 2010-12-27 19:39:46 4398360 —-a-w- C:\windows\System32\d3dx9_32.dll 2010-12-27 19:39:46 3426072 —-a-w- C:\windows\SysWow64\d3dx9_32.dll 2010-12-27 19:39:23 1164800 —-a-w- C:\windows\SysWow64\UIRibbonRes.dll 2010-12-27 19:39:23 1164800 —-a-w- C:\windows\System32\UIRibbonRes.dll 2010-12-27 19:39:22 3860992 —-a-w- C:\windows\System32\UIRibbon.dll 2010-12-27 19:39:22 2983424 —-a-w- C:\windows\SysWow64\UIRibbon.dll 2010-12-27 19:37:19 ——– d—–w- C:\Users\Jesse\AppData\Local\Windows Live 2010-12-27 19:35:47 ——– d—–w- C:\Program Files (x86)\MSXML 4.0 2010-12-27 12:45:18 ——– d—–w- C:\Users\Jesse\AppData\Local\Microsoft Games 2010-12-27 12:40:19 ——– d—–w- C:\Users\Jesse\AppData\Local\Adobe 2010-12-27 08:22:53 ——– d—–w- C:\NVIDIA 2010-12-27 04:19:04 ——– d—–w- C:\windows\SysWow64\Wat 2010-12-27 04:19:04 ——– d—–w- C:\windows\System32\Wat 2010-12-27 04:07:06 99176 —-a-w- C:\windows\SysWow64\PresentationHostProxy.dll 2010-12-27 04:07:06 49472 —-a-w- C:\windows\SysWow64\netfxperf.dll 2010-12-27 04:07:06 297808 —-a-w- C:\windows\SysWow64\mscoree.dll 2010-12-27 04:07:06 295264 —-a-w- C:\windows\SysWow64\PresentationHost.exe 2010-12-27 04:07:05 48960 —-a-w- C:\windows\System32\netfxperf.dll 2010-12-27 04:07:05 444752 —-a-w- C:\windows\System32\mscoree.dll 2010-12-27 04:07:05 320352 —-a-w- C:\windows\System32\PresentationHost.exe 2010-12-27 04:07:05 1942856 —-a-w- C:\windows\System32\dfshim.dll 2010-12-27 04:07:05 1130824 —-a-w- C:\windows\SysWow64\dfshim.dll 2010-12-27 04:07:05 109912 —-a-w- C:\windows\System32\PresentationHostProxy.dll 2010-12-27 04:01:15 243712 —-a-w- C:\windows\System32\drivers\ks.sys 2010-12-27 04:01:15 184832 —-a-w- C:\windows\System32\drivers\usbvideo.sys 2010-12-26 18:07:30 455680 —-a-w- C:\windows\System32\deploytk.dll 2010-12-26 12:05:58 483840 —-a-w- C:\windows\System32\StructuredQuery.dll 2010-12-26 06:24:25 ——– d—–w- C:\Users\Jesse\AppData\Roaming\FrostWire 2010-12-26 06:24:05 ——– d—–w- C:\Program Files (x86)\FrostWire 2010-12-26 06:23:50 472808 —-a-w- C:\windows\SysWow64\deployJava1.dll 2010-12-26 06:23:50 472808 —-a-w- C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll 2010-12-26 06:13:44 ——– d—–w- C:\Users\Jesse\AppData\Local\Apple 2010-12-26 06:13:28 ——– d—–w- C:\Program Files\Bonjour 2010-12-26 06:13:28 ——– d—–w- C:\Program Files (x86)\Bonjour 2010-12-26 04:47:05 ——– d—–w- C:\Users\Jesse\AppData\Local\Best Buy pc app 2010-12-26 04:33:12 62032 —-a-w- C:\windows\System32\drivers\aswMonFlt.sys 2010-12-26 04:33:05 38848 —-a-w- C:\windows\avastSS.scr 2010-12-26 04:33:04 ——– d—–w- C:\PROGRA~3\Alwil Software 2010-12-26 03:51:09 270720 ——w- C:\windows\System32\MpSigStub.exe 2010-12-26 03:47:37 ——– d—–w- C:\Users\Jesse\AppData\Local\SRS Labs 2010-12-26 03:47:35 ——– d—–w- C:\Users\Jesse\AppData\Roaming\Intel 2010-12-26 03:47:31 ——– d—–w- C:\Users\Jesse\AppData\Local\Apps 2010-12-26 03:47:30 ——– d—–w- C:\Users\Jesse\AppData\Local\Deployment 2010-12-26 03:47:29 ——– d—–w- C:\Users\Jesse\AppData\Local\Power2Go 2010-12-26 03:46:46 ——– d—–w- C:\Users\Jesse\AppData\Local\VirtualStore 2010-12-26 03:41:01 ——– d—–w- C:\Users\Jesse\CyberLink YouCam 2010-12-26 03:39:07 ——– d—–w- C:\Program Files\Elantech ==================== Find3M ==================== 2010-11-29 23:38:30 94208 —-a-w- C:\windows\SysWow64\QuickTimeVR.qtx 2010-11-29 23:38:30 69632 —-a-w- C:\windows\SysWow64\QuickTime.qts 2010-11-10 08:54:18 49016 —-a-w- C:\windows\SysWow64\sirenacm.dll 2010-11-10 08:28:46 301936 —-a-w- C:\windows\WLXPGSS.SCR 2010-11-04 06:35:53 1194496 —-a-w- C:\windows\System32\wininet.dll 2010-11-04 06:31:34 57856 —-a-w- C:\windows\System32\licmgr10.dll 2010-11-04 05:52:17 978944 —-a-w- C:\windows\SysWow64\wininet.dll 2010-11-04 05:48:36 44544 —-a-w- C:\windows\SysWow64\licmgr10.dll 2010-11-04 05:16:14 482816 —-a-w- C:\windows\System32\html.iec 2010-11-04 04:41:26 386048 —-a-w- C:\windows\SysWow64\html.iec 2010-11-04 04:35:37 1638912 —-a-w- C:\windows\System32\mshtml.tlb 2010-11-04 04:08:54 1638912 —-a-w- C:\windows\SysWow64\mshtml.tlb 2010-11-02 05:18:17 524288 —-a-w- C:\windows\System32\wmicmiplugin.dll 2010-11-02 05:17:38 473600 —-a-w- C:\windows\System32\taskcomp.dll 2010-11-02 05:17:38 1169408 —-a-w- C:\windows\System32\taskschd.dll 2010-11-02 05:16:53 1114624 —-a-w- C:\windows\System32\schedsvc.dll 2010-11-02 05:10:47 464384 —-a-w- C:\windows\System32\taskeng.exe 2010-11-02 05:10:32 285696 —-a-w- C:\windows\System32\schtasks.exe 2010-11-02 04:40:36 496128 —-a-w- C:\windows\SysWow64\taskschd.dll 2010-11-02 04:40:36 305152 —-a-w- C:\windows\SysWow64\taskcomp.dll 2010-11-02 04:34:44 192000 —-a-w- C:\windows\SysWow64\taskeng.exe 2010-11-02 04:34:33 179712 —-a-w- C:\windows\SysWow64\schtasks.exe 2010-10-27 05:06:22 2048 —-a-w- C:\windows\System32\tzres.dll 2010-10-27 04:32:36 2048 —-a-w- C:\windows\SysWow64\tzres.dll 2010-10-20 05:20:01 46080 —-a-w- C:\windows\System32\atmlib.dll 2010-10-20 04:54:18 34304 —-a-w- C:\windows\SysWow64\atmlib.dll 2010-10-20 03:09:15 3124224 —-a-w- C:\windows\System32\win32k.sys 2010-10-20 03:05:46 367104 —-a-w- C:\windows\System32\atmfd.dll 2010-10-20 02:58:41 294400 —-a-w- C:\windows\SysWow64\atmfd.dll 2010-10-16 05:23:13 112000 —-a-w- C:\windows\System32\consent.exe 2010-10-16 05:19:41 395776 —-a-w- C:\windows\System32\webio.dll 2010-10-16 04:36:10 314368 —-a-w- C:\windows\SysWow64\webio.dll ============= FINISH: 22:29:13.14 ===============
OTL Results

OTL logfile created on: 1/9/2011 10:27:04 PM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Jesse\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 70.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 76.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 233.00 Gb Total Space | 189.83 Gb Free Space | 81.47% Space Free | Partition Type: NTFS
Drive D: | 347.24 Gb Total Space | 346.71 Gb Free Space | 99.85% Space Free | Partition Type: NTFS
Drive E: | 3.47 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: JESSE-PC | User Name: Jesse | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Jesse\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\iTunes\iTunes.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe (Samsung Electronics)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe (SEC)
PRC - C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe (SAMSUNG Electronics)
PRC - C:\Program Files (x86)\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe (CyberLink Corp.)


========== Modules (SafeList) ==========

MOD - C:\Users\Jesse\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Alwil Software\Avast5\snxhk.dll (AVAST Software)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (VaultSvc32) – C:\windows\SysNative\htui32.exe File not found
SRV:64bit: - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV:64bit: - (wlcrasvc) – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (WiMAXAppSrv) – C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe (Intel® Corporation)
SRV:64bit: - (DMAgent) – C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe (Red Bend Ltd.)
SRV:64bit: - (TurboBoost) – C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel® Corporation)
SRV:64bit: - (EvtEng) – C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation)
SRV:64bit: - (MyWiFiDHCPDNS) – C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV:64bit: - (RegSrvc) – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (Apple Mobile Device) – C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (NOBU) – C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Symantec Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (UNS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (aswMonFlt) – C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (fssfltr) – C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (ETD) – C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (IntcDAud) Intel® – C:\Windows\SysNative\drivers\IntcDAud.sys (Intel® Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (nvpciflt) – C:\Windows\SysNative\drivers\nvpciflt.sys (NVIDIA Corporation)
DRV:64bit: - (wdkmd) – C:\Windows\SysNative\drivers\WDKMD.sys (Intel Corporation)
DRV:64bit: - (NETw5s64) Intel® – C:\Windows\SysNative\drivers\NETw5s64.sys (Intel Corporation)
DRV:64bit: - (TurboB) – C:\Windows\SysNative\drivers\TurboB.sys ()
DRV:64bit: - (bpmp) Intel® Centrino® – C:\Windows\SysNative\drivers\bpmp.sys (Intel Corporation)
DRV:64bit: - (bpusb) – C:\Windows\SysNative\drivers\bpusb.sys (Intel Corporation)
DRV:64bit: - (bpenum) – C:\Windows\SysNative\drivers\bpenum.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (Impcd) – C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (HECIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation )
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (SABI) – C:\Windows\SysNative\drivers\SABI.sys (SAMSUNG ELECTRONICS)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (rtport) – C:\Windows\SysWOW64\drivers\rtport.sys (Windows ® 2003 DDK 3790 provider)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://samsung.msn.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://samsung.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 8E 6D EC 0D B7 B3 71 4C AB 1D 7B 98 A5 36 83 EC [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {41c156b0-5f6d-4a0f-b4a2-72cc769e7b98}:1.0

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010/12/26 00:14:05 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010/12/26 11:28:04 | 000,000,000 | —D | M]

[2010/12/25 23:02:25 | 000,000,000 | —D | M] (No name found) – C:\Users\Jesse\AppData\Roaming\Mozilla\Extensions
[2011/01/09 16:32:33 | 000,000,000 | —D | M] (No name found) – C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\3iscalmy.default\extensions
[2011/01/08 00:04:23 | 000,000,000 | —D | M] (XUL Cache) – C:\Users\Jesse\AppData\Roaming\Mozilla\Firefox\Profiles\3iscalmy.default\extensions\{41c156b0-5f6d-4a0f-b4a2-72cc769e7b98}
[2010/12/26 01:11:37 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/12/26 00:23:51 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/12/26 01:11:37 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2010/11/12 18:53:06 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2009/06/10 15:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (30a52f43) - {76951B07-BF9B-C9C6-2CAE-554C536CC250} - C:\ProgramData\api-ms-win-core-misc-l1-1-032.dll File not found
O2 - BHO: (W2PBrowser Class) - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ipp - No CLSID value found
O18:64bit: - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\windows\SysWow64\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/01/09 22:21:06 | 000,000,000 | —D | C] – C:\Users\Jesse\Documents\tdsskiller
[2011/01/09 21:59:22 | 000,000,000 | —D | C] – C:\Program Files (x86)\Trend Micro
[2011/01/09 21:59:22 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2011/01/09 20:03:04 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Malwarebytes
[2011/01/09 20:02:58 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\windows\SysWow64\drivers\mbamswissarmy.sys
[2011/01/09 20:02:58 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/01/09 20:02:56 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/01/09 20:02:53 | 000,024,152 | —- | C] (Malwarebytes Corporation) – C:\windows\SysNative\drivers\mbam.sys
[2011/01/09 20:02:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/01/09 16:12:14 | 000,237,168 | —- | C] (AVAST Software) – C:\windows\SysNative\aswBoot.exe
[2011/01/08 13:20:17 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2011/01/08 13:19:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Synchronization Services
[2011/01/08 13:19:52 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\DESIGNER
[2011/01/08 13:18:14 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2011/01/08 13:18:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Analysis Services
[2011/01/08 13:17:47 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Microsoft Help
[2011/01/08 13:17:45 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft Office
[2011/01/08 13:17:45 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Help
[2011/01/08 13:17:37 | 000,000,000 | RH-D | C] – C:\MSOCache
[2011/01/08 00:35:14 | 000,000,000 | —D | C] – C:\Users\Jesse\Documents\My Recordings
[2011/01/08 00:17:30 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\SynthMaker
[2011/01/08 00:09:27 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acoustica Mixcraft 5
[2011/01/08 00:09:27 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Acoustica
[2011/01/08 00:09:26 | 000,057,344 | —- | C] (NexiTech, Inc.) – C:\windows\SysWow64\Wnaspint.dll
[2011/01/08 00:08:36 | 000,000,000 | —D | C] – C:\Program Files (x86)\Acoustica Shared Effects
[2011/01/08 00:06:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\VST
[2011/01/08 00:06:09 | 000,000,000 | —D | C] – C:\ProgramData\Acoustica
[2011/01/08 00:06:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Acoustica Mixcraft 5
[2011/01/08 00:05:54 | 000,348,160 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\msvcr71.dll
[2011/01/08 00:04:55 | 000,000,000 | -HSD | C] – C:\ProgramData\SysWoW32
[2011/01/08 00:04:36 | 000,000,000 | -HSD | C] – C:\ProgramData\3746B2CCCE4FFD11121A4D9E65175630
[2011/01/04 21:30:28 | 000,000,000 | —D | C] – C:\Users\Jesse\Documents\Microsoft Word Documents
[2011/01/04 21:23:39 | 000,000,000 | —D | C] – C:\windows\Msagent
[2011/01/04 21:22:19 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Microsoft Web Folders
[2011/01/03 01:41:03 | 000,000,000 | —D | C] – C:\Users\Jesse\Documents\CyberLink
[2011/01/02 02:27:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\Microsoft.NET
[2011/01/02 02:15:09 | 000,000,000 | —D | C] – C:\Users\Jesse\Adobe
[2011/01/02 02:09:15 | 000,306,688 | —- | C] (InstallShield Software Corporation) – C:\windows\IsUninst.exe
[2010/12/28 17:38:03 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Google
[2010/12/28 11:21:09 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Diagnostics
[2010/12/27 15:22:17 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\{C3A23E09-7B64-4094-98AB-F5BA6BD04064}
[2010/12/27 14:04:07 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\{F3122692-191C-44C7-A197-4B89BAB3946A}
[2010/12/27 14:03:54 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Windows Live Writer
[2010/12/27 14:03:54 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Windows Live Writer
[2010/12/27 13:46:44 | 000,000,000 | —D | C] – C:\windows\en
[2010/12/27 13:41:27 | 000,048,488 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\drivers\fssfltr.sys
[2010/12/27 13:40:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSN Toolbar
[2010/12/27 13:40:09 | 000,515,416 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\XAudio2_5.dll
[2010/12/27 13:40:09 | 000,069,464 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\XAPOFX1_3.dll
[2010/12/27 13:40:08 | 000,523,088 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3dx10_42.dll
[2010/12/27 13:40:08 | 000,453,456 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\d3dx10_42.dll
[2010/12/27 13:39:46 | 004,398,360 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\d3dx9_32.dll
[2010/12/27 13:39:46 | 003,426,072 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\d3dx9_32.dll
[2010/12/27 13:39:23 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\UIRibbonRes.dll
[2010/12/27 13:39:23 | 001,164,800 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\UIRibbonRes.dll
[2010/12/27 13:39:22 | 003,860,992 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\UIRibbon.dll
[2010/12/27 13:39:22 | 002,983,424 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\UIRibbon.dll
[2010/12/27 13:38:51 | 001,619,456 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\WMVDECOD.DLL
[2010/12/27 13:38:51 | 000,257,024 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mfreadwrite.dll
[2010/12/27 13:38:51 | 000,206,848 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mfps.dll
[2010/12/27 13:38:51 | 000,196,608 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mfreadwrite.dll
[2010/12/27 13:38:50 | 001,888,256 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\WMVDECOD.DLL
[2010/12/27 13:38:49 | 004,068,864 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mf.dll
[2010/12/27 13:38:49 | 003,181,568 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mf.dll
[2010/12/27 13:37:19 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Windows Live
[2010/12/27 13:35:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\MSXML 4.0
[2010/12/27 06:45:18 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Microsoft Games
[2010/12/27 06:40:19 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Adobe
[2010/12/27 02:22:53 | 000,000,000 | —D | C] – C:\NVIDIA
[2010/12/27 02:19:32 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\CyberLink
[2010/12/26 22:19:04 | 000,000,000 | —D | C] – C:\windows\SysWow64\Wat
[2010/12/26 22:19:04 | 000,000,000 | —D | C] – C:\windows\SysNative\Wat
[2010/12/26 22:07:06 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\PresentationHost.exe
[2010/12/26 22:07:06 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\PresentationHostProxy.dll
[2010/12/26 22:07:06 | 000,049,472 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\netfxperf.dll
[2010/12/26 22:07:05 | 001,942,856 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\dfshim.dll
[2010/12/26 22:07:05 | 001,130,824 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\dfshim.dll
[2010/12/26 22:07:05 | 000,320,352 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\PresentationHost.exe
[2010/12/26 22:07:05 | 000,109,912 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\PresentationHostProxy.dll
[2010/12/26 22:07:05 | 000,048,960 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\netfxperf.dll
[2010/12/26 12:07:30 | 000,455,680 | —- | C] (Sun Microsystems, Inc.) – C:\windows\SysNative\deploytk.dll
[2010/12/26 12:07:30 | 000,182,784 | —- | C] (Sun Microsystems, Inc.) – C:\windows\SysNative\javaws.exe
[2010/12/26 12:07:30 | 000,165,888 | —- | C] (Sun Microsystems, Inc.) – C:\windows\SysNative\javaw.exe
[2010/12/26 12:07:30 | 000,165,888 | —- | C] (Sun Microsystems, Inc.) – C:\windows\SysNative\java.exe
[2010/12/26 12:06:36 | 000,000,000 | —D | C] – C:\Program Files\Java
[2010/12/26 07:59:33 | 000,000,000 | —D | C] – C:\Users\Jesse\Documents\Youcam
[2010/12/26 06:06:03 | 000,148,992 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\t2embed.dll
[2010/12/26 06:06:03 | 000,109,056 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\t2embed.dll
[2010/12/26 06:06:02 | 002,085,376 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\ole32.dll
[2010/12/26 06:06:01 | 001,169,408 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\taskschd.dll
[2010/12/26 06:06:01 | 000,464,384 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\taskeng.exe
[2010/12/26 06:06:00 | 000,524,288 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\wmicmiplugin.dll
[2010/12/26 06:06:00 | 000,496,128 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\taskschd.dll
[2010/12/26 06:06:00 | 000,473,600 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\taskcomp.dll
[2010/12/26 06:06:00 | 000,305,152 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\taskcomp.dll
[2010/12/26 06:06:00 | 000,285,696 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\schtasks.exe
[2010/12/26 06:06:00 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\schtasks.exe
[2010/12/26 06:05:58 | 000,483,840 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\StructuredQuery.dll
[2010/12/26 06:05:58 | 000,367,104 | —- | C] (Adobe Systems Incorporated) – C:\windows\SysNative\atmfd.dll
[2010/12/26 06:05:58 | 000,294,400 | —- | C] (Adobe Systems Incorporated) – C:\windows\SysWow64\atmfd.dll
[2010/12/26 06:05:58 | 000,046,080 | —- | C] (Adobe Systems) – C:\windows\SysNative\atmlib.dll
[2010/12/26 06:05:58 | 000,034,304 | —- | C] (Adobe Systems) – C:\windows\SysWow64\atmlib.dll
[2010/12/26 06:05:50 | 000,961,024 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\CPFilters.dll
[2010/12/26 06:05:50 | 000,641,536 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\CPFilters.dll
[2010/12/26 06:05:50 | 000,552,960 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\msdri.dll
[2010/12/26 06:05:49 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\MSNP.ax
[2010/12/26 06:05:49 | 000,258,560 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mpg2splt.ax
[2010/12/26 06:05:49 | 000,204,288 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\MSNP.ax
[2010/12/26 06:05:49 | 000,199,680 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mpg2splt.ax
[2010/12/26 06:05:47 | 005,507,968 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\ntoskrnl.exe
[2010/12/26 06:05:46 | 003,955,080 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\ntkrnlpa.exe
[2010/12/26 06:05:46 | 003,899,784 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\ntoskrnl.exe
[2010/12/26 06:05:46 | 000,633,856 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\comctl32.dll
[2010/12/26 06:05:44 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\oleaut32.dll
[2010/12/26 06:05:44 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\rtutils.dll
[2010/12/26 06:05:44 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\rtutils.dll
[2010/12/26 06:05:40 | 000,395,776 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\webio.dll
[2010/12/26 06:05:40 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\webio.dll
[2010/12/26 06:05:40 | 000,082,944 | —- | C] (Radius Inc.) – C:\windows\SysWow64\iccvid.dll
[2010/12/26 06:05:25 | 001,024,512 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\wmpmde.dll
[2010/12/26 06:05:25 | 000,738,816 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\wmpmde.dll
[2010/12/26 06:05:18 | 000,027,008 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\drivers\Diskdump.sys
[2010/12/26 06:05:15 | 000,954,752 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mfc40.dll
[2010/12/26 06:05:15 | 000,954,288 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mfc40u.dll
[2010/12/26 06:05:14 | 014,627,840 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\wmp.dll
[2010/12/26 06:05:14 | 011,406,848 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\wmp.dll
[2010/12/26 06:05:13 | 012,625,408 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\wmploc.DLL
[2010/12/26 06:05:12 | 012,625,920 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\wmploc.DLL
[2010/12/26 06:05:12 | 000,112,000 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\consent.exe
[2010/12/26 06:05:12 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\sscore.dll
[2010/12/26 06:05:07 | 000,703,488 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\msfeeds.dll
[2010/12/26 06:05:07 | 000,599,040 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\msfeeds.dll
[2010/12/26 06:05:06 | 000,482,816 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\html.iec
[2010/12/26 06:05:06 | 000,386,048 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\html.iec
[2010/12/26 06:05:06 | 000,256,000 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\iepeers.dll
[2010/12/26 06:05:06 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\ieui.dll
[2010/12/26 06:05:06 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\iepeers.dll
[2010/12/26 06:05:06 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\ieui.dll
[2010/12/26 06:05:06 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\mshtmled.dll
[2010/12/26 06:05:06 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\mshtmled.dll
[2010/12/26 06:05:06 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\licmgr10.dll
[2010/12/26 06:05:06 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\licmgr10.dll
[2010/12/26 06:05:06 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\windows\SysWow64\msfeedssync.exe
[2010/12/26 06:05:06 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\windows\SysNative\msfeedssync.exe
[2010/12/26 01:11:36 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\windows\SysWow64\javaws.exe
[2010/12/26 01:11:36 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\windows\SysWow64\javaw.exe
[2010/12/26 01:11:36 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\windows\SysWow64\java.exe
[2010/12/26 00:25:02 | 000,000,000 | —D | C] – C:\Users\Jesse\Desktop\Frostwire Music
[2010/12/26 00:24:28 | 000,000,000 | —D | C] – C:\Users\Jesse\Documents\FrostWire
[2010/12/26 00:24:25 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\FrostWire
[2010/12/26 00:24:19 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FrostWire
[2010/12/26 00:24:05 | 000,000,000 | —D | C] – C:\ProgramData\Sun
[2010/12/26 00:24:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\FrostWire
[2010/12/26 00:24:04 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2010/12/26 00:23:50 | 000,472,808 | —- | C] (Sun Microsystems, Inc.) – C:\windows\SysWow64\deployJava1.dll
[2010/12/26 00:23:40 | 000,000,000 | —D | C] – C:\Program Files (x86)\Java
[2010/12/26 00:14:59 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Apple Computer
[2010/12/26 00:14:59 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Apple Computer
[2010/12/26 00:14:55 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2010/12/26 00:14:54 | 000,126,312 | —- | C] (GEAR Software Inc.) – C:\windows\SysNative\GEARAspi64.dll
[2010/12/26 00:14:54 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\windows\SysWow64\GEARAspi.dll
[2010/12/26 00:14:54 | 000,034,152 | —- | C] (GEAR Software Inc.) – C:\windows\SysNative\drivers\GEARAspiWDM.sys
[2010/12/26 00:14:38 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/12/26 00:14:37 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/12/26 00:14:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2010/12/26 00:14:37 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2010/12/26 00:14:00 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2010/12/26 00:13:53 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2010/12/26 00:13:53 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2010/12/26 00:13:44 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Apple
[2010/12/26 00:13:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2010/12/26 00:13:36 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2010/12/26 00:13:28 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/12/26 00:13:28 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2010/12/26 00:13:20 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2010/12/26 00:13:20 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2010/12/25 23:02:16 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Mozilla
[2010/12/25 23:02:13 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[2010/12/25 23:02:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Mozilla Firefox
[2010/12/25 22:47:16 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\InstallShield
[2010/12/25 22:47:05 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Best Buy pc app
[2010/12/25 22:33:12 | 000,271,952 | —- | C] (AVAST Software) – C:\windows\SysNative\drivers\aswSP.sys
[2010/12/25 22:33:12 | 000,062,032 | —- | C] (AVAST Software) – C:\windows\SysNative\drivers\aswMonFlt.sys
[2010/12/25 22:33:12 | 000,051,792 | —- | C] (AVAST Software) – C:\windows\SysNative\drivers\aswTdi.sys
[2010/12/25 22:33:12 | 000,029,264 | —- | C] (AVAST Software) – C:\windows\SysNative\drivers\aswRdr.sys
[2010/12/25 22:33:12 | 000,020,560 | —- | C] (AVAST Software) – C:\windows\SysNative\drivers\aswFsBlk.sys
[2010/12/25 22:33:12 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2010/12/25 22:33:05 | 000,188,216 | —- | C] (AVAST Software) – C:\windows\SysWow64\aswBoot.exe
[2010/12/25 22:33:05 | 000,038,848 | —- | C] (AVAST Software) – C:\windows\avastSS.scr
[2010/12/25 22:33:04 | 000,000,000 | —D | C] – C:\ProgramData\Alwil Software
[2010/12/25 22:33:04 | 000,000,000 | —D | C] – C:\Program Files\Alwil Software
[2010/12/25 21:52:38 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Macromedia
[2010/12/25 21:51:39 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Mozilla
[2010/12/25 21:51:02 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Adobe
[2010/12/25 21:47:37 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\SRS Labs
[2010/12/25 21:47:35 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Intel
[2010/12/25 21:47:31 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Apps
[2010/12/25 21:47:30 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Deployment
[2010/12/25 21:47:29 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Power2Go
[2010/12/25 21:46:58 | 000,000,000 | R–D | C] – C:\Users\Jesse\Searches
[2010/12/25 21:46:58 | 000,000,000 | R–D | C] – C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2010/12/25 21:46:58 | 000,000,000 | -H-D | C] – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\User Pinned
[2010/12/25 21:46:50 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Identities
[2010/12/25 21:46:49 | 000,000,000 | R–D | C] – C:\Users\Jesse\Contacts
[2010/12/25 21:46:46 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\VirtualStore
[2010/12/25 21:41:01 | 000,000,000 | —D | C] – C:\Users\Jesse\CyberLink YouCam
[2010/12/25 21:40:18 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Adobe AIR
[2010/12/25 21:39:07 | 000,000,000 | —D | C] – C:\Program Files\Elantech
[2010/12/25 21:38:55 | 000,000,000 | –SD | C] – C:\Users\Jesse\AppData\Roaming\Microsoft
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\Videos
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\Saved Games
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\Pictures
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\Music
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\Links
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\Favorites
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\Downloads
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\My Documents
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\Desktop
[2010/12/25 21:38:55 | 000,000,000 | R–D | C] – C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\AppData\Local\Temporary Internet Files
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Templates
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Start Menu
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\SendTo
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Recent
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\PrintHood
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\NetHood
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Documents\My Videos
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Documents\My Pictures
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Documents\My Music
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\My Documents
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Local Settings
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\AppData\Local\History
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Cookies
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\Application Data
[2010/12/25 21:38:55 | 000,000,000 | -HSD | C] – C:\Users\Jesse\AppData\Local\Application Data
[2010/12/25 21:38:55 | 000,000,000 | -H-D | C] – C:\Users\Jesse\AppData
[2010/12/25 21:38:55 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Temp
[2010/12/25 21:38:55 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Local\Microsoft
[2010/12/25 21:38:55 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Media Center Programs
[2010/12/25 21:38:55 | 000,000,000 | —D | C] – C:\Users\Jesse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
[2010/12/25 21:38:40 | 000,000,000 | -HSD | C] – C:\Recovery

========== Files - Modified Within 30 Days ==========

[2011/01/09 21:59:22 | 000,002,975 | —- | M] () – C:\Users\Jesse\Desktop\HiJackThis.lnk
[2011/01/09 21:52:53 | 000,067,584 | –S- | M] () – C:\windows\bootstat.dat
[2011/01/09 21:52:53 | 000,000,908 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3685146816-85811682-3049726123-1002UA.job
[2011/01/09 20:22:00 | 000,014,144 | -H– | M] () – C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/01/09 20:22:00 | 000,014,144 | -H– | M] () – C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/01/09 20:14:25 | 4070,662,144 | -HS- | M] () – C:\hiberfil.sys
[2011/01/09 18:48:38 | 000,000,856 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3685146816-85811682-3049726123-1002Core.job
[2011/01/09 17:23:26 | 000,726,316 | —- | M] () – C:\windows\SysNative\PerfStringBackup.INI
[2011/01/09 17:23:26 | 000,624,178 | —- | M] () – C:\windows\SysNative\perfh009.dat
[2011/01/09 17:23:26 | 000,106,522 | —- | M] () – C:\windows\SysNative\perfc009.dat
[2011/01/09 16:12:14 | 000,000,000 | —- | M] () – C:\windows\SysWow64\config.nt
[2011/01/09 15:54:02 | 000,349,944 | —- | M] () – C:\windows\SysNative\FNTCACHE.DAT
[2011/01/09 15:50:57 | 000,000,021 | —- | M] () – C:\ProgramData\10567811
[2011/01/09 15:48:36 | 000,001,185 | —- | M] () – C:\ProgramData\816579690
[2011/01/08 00:13:59 | 000,000,156 | -HS- | M] () – C:\ProgramData\277229382
[2011/01/08 00:09:27 | 000,001,008 | —- | M] () – C:\Users\Public\Desktop\Mixcraft 5.lnk
[2011/01/08 00:04:55 | 000,000,165 | —- | M] () – C:\ProgramData\sl1902624212
[2011/01/08 00:04:40 | 000,203,776 | -HS- | M] () – C:\ProgramData\unrar.exe
[2011/01/08 00:04:24 | 000,000,104 | —- | M] () – C:\windows\SysWow64\980969569
[2011/01/04 21:25:46 | 000,000,376 | —- | M] () – C:\windows\ODBC.INI
[2011/01/02 02:27:27 | 000,000,146 | —- | M] () – C:\Users\Jesse\Desktop\Mobility Center.lnk
[2010/12/31 14:06:36 | 000,038,848 | —- | M] (AVAST Software) – C:\windows\avastSS.scr
[2010/12/31 14:06:33 | 000,188,216 | —- | M] (AVAST Software) – C:\windows\SysWow64\aswBoot.exe
[2010/12/31 14:06:24 | 000,237,168 | —- | M] (AVAST Software) – C:\windows\SysNative\aswBoot.exe
[2010/12/31 14:00:42 | 000,271,952 | —- | M] (AVAST Software) – C:\windows\SysNative\drivers\aswSP.sys
[2010/12/31 13:59:28 | 000,051,792 | —- | M] (AVAST Software) – C:\windows\SysNative\drivers\aswTdi.sys
[2010/12/31 13:56:52 | 000,029,264 | —- | M] (AVAST Software) – C:\windows\SysNative\drivers\aswRdr.sys
[2010/12/31 13:56:41 | 000,062,032 | —- | M] (AVAST Software) – C:\windows\SysNative\drivers\aswMonFlt.sys
[2010/12/31 13:56:30 | 000,020,560 | —- | M] (AVAST Software) – C:\windows\SysNative\drivers\aswFsBlk.sys
[2010/12/26 12:13:10 | 000,001,365 | —- | M] () – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/12/26 12:07:23 | 000,182,784 | —- | M] (Sun Microsystems, Inc.) – C:\windows\SysNative\javaws.exe
[2010/12/26 12:07:23 | 000,165,888 | —- | M] (Sun Microsystems, Inc.) – C:\windows\SysNative\javaw.exe
[2010/12/26 12:07:23 | 000,165,888 | —- | M] (Sun Microsystems, Inc.) – C:\windows\SysNative\java.exe
[2010/12/26 12:07:22 | 000,455,680 | —- | M] (Sun Microsystems, Inc.) – C:\windows\SysNative\deploytk.dll
[2010/12/26 01:03:51 | 000,000,000 | -H– | M] () – C:\windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/12/26 00:24:19 | 000,001,227 | —- | M] () – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\FrostWire 4.21.3.lnk
[2010/12/26 00:24:19 | 000,001,203 | —- | M] () – C:\Users\Jesse\Desktop\FrostWire 4.21.3.lnk
[2010/12/26 00:14:55 | 000,001,783 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2010/12/26 00:14:00 | 000,001,845 | —- | M] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2010/12/25 23:02:13 | 000,001,963 | —- | M] () – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/12/25 23:02:13 | 000,001,939 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/12/25 21:39:47 | 000,001,669 | —- | M] () – C:\Users\Public\Desktop\MultimediaPOP.lnk
[2010/12/25 21:39:09 | 000,000,000 | —- | M] () – C:\windows\SysNative\drivers\144D_SAMSUNG_N_QX310_02MX.mrk
[2010/12/25 08:35:21 | 000,039,219 | —- | M] () – C:\windows\SysWow64\license.rtf
[2010/12/25 08:35:21 | 000,039,219 | —- | M] () – C:\windows\SysNative\license.rtf
[2010/12/20 18:09:00 | 000,038,224 | —- | M] (Malwarebytes Corporation) – C:\windows\SysWow64\drivers\mbamswissarmy.sys
[2010/12/20 18:08:40 | 000,024,152 | —- | M] (Malwarebytes Corporation) – C:\windows\SysNative\drivers\mbam.sys

========== Files Created - No Company Name ==========

[2011/01/09 21:59:22 | 000,002,975 | —- | C] () – C:\Users\Jesse\Desktop\HiJackThis.lnk
[2011/01/08 00:09:27 | 000,001,008 | —- | C] () – C:\Users\Public\Desktop\Mixcraft 5.lnk
[2011/01/08 00:05:29 | 000,000,021 | —- | C] () – C:\ProgramData\10567811
[2011/01/08 00:05:11 | 000,000,156 | -HS- | C] () – C:\ProgramData\277229382
[2011/01/08 00:05:10 | 000,001,185 | —- | C] () – C:\ProgramData\816579690
[2011/01/08 00:04:55 | 000,000,165 | —- | C] () – C:\ProgramData\sl1902624212
[2011/01/08 00:04:40 | 000,203,776 | -HS- | C] () – C:\ProgramData\unrar.exe
[2011/01/08 00:04:23 | 000,000,104 | —- | C] () – C:\windows\SysWow64\980969569
[2011/01/04 21:25:46 | 000,000,376 | —- | C] () – C:\windows\ODBC.INI
[2011/01/02 02:27:27 | 000,000,146 | —- | C] () – C:\Users\Jesse\Desktop\Mobility Center.lnk
[2010/12/28 17:38:04 | 000,000,908 | —- | C] () – C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3685146816-85811682-3049726123-1002UA.job
[2010/12/28 17:38:04 | 000,000,856 | —- | C] () – C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-3685146816-85811682-3049726123-1002Core.job
[2010/12/26 01:03:51 | 000,000,000 | -H– | C] () – C:\windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2010/12/26 00:24:19 | 000,001,227 | —- | C] () – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\FrostWire 4.21.3.lnk
[2010/12/26 00:24:19 | 000,001,203 | —- | C] () – C:\Users\Jesse\Desktop\FrostWire 4.21.3.lnk
[2010/12/26 00:14:55 | 000,001,783 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2010/12/26 00:14:00 | 000,001,845 | —- | C] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2010/12/25 23:02:13 | 000,001,963 | —- | C] () – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2010/12/25 23:02:13 | 000,001,939 | —- | C] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2010/12/25 22:33:12 | 000,000,000 | —- | C] () – C:\windows\SysWow64\config.nt
[2010/12/25 21:50:53 | 000,001,365 | —- | C] () – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2010/12/25 21:46:35 | 000,562,718 | —- | C] () – C:\windows\surbey.ico
[2010/12/25 21:45:19 | 000,000,148 | —- | C] () – C:\Users\Jesse\DiskScrP.txt
[2010/12/25 21:39:47 | 000,001,669 | —- | C] () – C:\Users\Public\Desktop\MultimediaPOP.lnk
[2010/12/25 21:39:09 | 000,000,000 | —- | C] () – C:\windows\SysNative\drivers\144D_SAMSUNG_N_QX310_02MX.mrk
[2010/12/25 21:38:55 | 000,000,290 | —- | C] () – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2010/12/25 21:38:55 | 000,000,272 | —- | C] () – C:\Users\Jesse\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2010/09/29 13:16:02 | 000,208,896 | —- | C] () – C:\windows\SysWow64\iglhsip32.dll
[2010/09/29 13:16:02 | 000,143,360 | —- | C] () – C:\windows\SysWow64\iglhcp32.dll
[2010/09/28 21:13:28 | 000,002,134 | —- | C] () – C:\windows\HotFixList.ini
[2010/09/28 21:11:33 | 000,000,109 | —- | C] () – C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
[2010/09/28 21:10:37 | 000,000,110 | —- | C] () – C:\ProgramData\{B7A0CE06-068E-11D6-97FD-0050BACBF861}.log
[2010/09/28 21:09:49 | 000,000,106 | —- | C] () – C:\ProgramData\{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}.log
[2010/09/28 21:07:41 | 000,000,110 | —- | C] () – C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
[2010/09/28 21:06:42 | 000,000,105 | —- | C] () – C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
[2010/09/28 21:06:20 | 000,000,107 | —- | C] () – C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
[2009/07/13 17:42:10 | 000,064,000 | —- | C] () – C:\windows\SysWow64\BWContextHandler.dll
[2009/07/13 15:03:59 | 000,364,544 | —- | C] () – C:\windows\SysWow64\msjetoledb40.dll
[1999/01/22 12:46:58 | 000,065,536 | —- | C] () – C:\windows\SysWow64\MSRTEDIT.DLL

========== LOP Check ==========

[2011/01/08 00:09:27 | 000,000,000 | —D | M] – C:\Users\Jesse\AppData\Roaming\Acoustica
[2011/01/08 00:27:15 | 000,000,000 | —D | M] – C:\Users\Jesse\AppData\Roaming\FrostWire
[2011/01/08 00:17:30 | 000,000,000 | —D | M] – C:\Users\Jesse\AppData\Roaming\SynthMaker
[2010/12/27 15:19:35 | 000,000,000 | —D | M] – C:\Users\Jesse\AppData\Roaming\Windows Live Writer
[2009/07/13 23:08:49 | 000,009,896 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011/01/09 20:14:25 | 4070,662,144 | -HS- | M] () – C:\hiberfil.sys
[2011/01/09 20:14:28 | 4070,662,144 | -HS- | M] () – C:\pagefile.sys
[2010/09/28 20:54:33 | 000,002,162 | —- | M] () – C:\RHDSetup.log
[2010/12/25 21:39:55 | 000,000,162 | —- | M] () – C:\setup.log
[2011/01/09 22:21:40 | 000,062,882 | —- | M] () – C:\TDSSKiller.2.4.12.0_09.01.2011_22.21.20_log.txt

< %systemroot%\Fonts\*.com >
[2009/07/13 23:32:31 | 000,026,040 | —- | M] () – C:\windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/13 23:32:31 | 000,026,489 | —- | M] () – C:\windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/13 23:32:31 | 000,029,779 | —- | M] () – C:\windows\Fonts\GlobalSerif.CompositeFont
[2009/07/13 23:32:31 | 000,043,318 | —- | M] () – C:\windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 14:49:50 | 000,000,065 | —- | M] () – C:\windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >
[2010/08/06 00:09:44 | 000,016,018 | —- | M] () – C:\Windows\Samsung.png

< %systemroot%\*.scr >
[2010/12/31 14:06:36 | 000,038,848 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2009/11/16 01:27:16 | 019,480,587 | —- | M] () – C:\Windows\Crystal Delight.scr
[2010/11/10 02:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 22:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/12/26 12:13:10 | 000,000,221 | -HS- | M] () – C:\Users\Jesse\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >



EXTRAS REPORT


OTL Extras logfile created on: 1/9/2011 10:27:04 PM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Users\Jesse\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 70.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 76.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 233.00 Gb Total Space | 189.83 Gb Free Space | 81.47% Space Free | Partition Type: NTFS
Drive D: | 347.24 Gb Total Space | 346.71 Gb Free Space | 99.85% Space Free | Partition Type: NTFS
Drive E: | 3.47 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: JESSE-PC | User Name: Jesse | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\System32\ieframe.DLL (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] – C:\Windows\System32\ieframe.DLL (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0C682623-8F66-46A8-B9B3-93FE1E66A001}" = iTunes
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{26A24AE4-039D-4CA4-87B4-2F86416018FF}" = Java™ 6 Update 18 (64-bit)
"{340BE65B-7621-4B0B-B0F9-DBCCD8D70887}" = SRS Premium Sound Control Panel
"{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}" = Intel® Turbo Boost Technology Monitor
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4F26C164-9373-4974-8F43-E0F2176AF937}" = Intel WiMAX Tutorial
"{64A3A4F4-B792-11D6-A78A-00B0D0160180}" = Java™ SE Development Kit 6 Update 18 (64-bit)
"{6548B189-BEA4-4041-80E0-AEB60548E046}" = Intel® PROSet/Wireless WiMAX Software
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{963BFE7E-C350-4346-B43C-B02358306A45}" = Apple Mobile Device Support
"{C298FF86-AB23-4B58-AC53-A23383C07B3A}" = Intel® Wireless Display
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{D16A2127-B927-4379-B153-3DEC091E4EEB}" = Intel® PROSet/Wireless WiFi Software
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FBBC4667-2521-4E78-B1BD-8706F774549B}" = Best Buy pc app
"Elantech" = ETDWare PS/2-X64 8.0.7.1_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"ProInst" = Intel PROSet Wireless

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{142D8CA7-2C6F-45A7-83E3-099AAFD99133}" = Samsung Update Plus
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution 5
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1DF9729D-2A51-4CA1-B4CE-2B432D7ABA7C}" = Samsung AnyWeb Print
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java™ 6 Update 23
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8
"{2DDC70C1-C77A-4D08-89D2-9AB648504533}" = Easy Content Share
"{318DBE01-1E6B-4243-84B0-210391FE789A}" = Samsung AnyWeb Print
"{331ECF61-69AF-4F57-AC35-AFED610231C3}" = MultimediaPOP
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3C79DC59-6099-323B-B27B-90B45542B270}" = Google Talk Plugin
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A331D24-A9E8-484F-835E-1BA7B139689C}" = EasyBatteryManager
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5F44BE9A-1464-4C70-A383-8837828C62B9}" = BatteryLifeExtender
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}" = Bing Bar Platform
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73D6C3C0-B209-4572-B2D2-ABFF0A30970D}" = Easy Network Manager
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}" = Fast Start
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{92D50865-FC60-4EA8-BA7A-5581B0D13EFB}" = ChargeableUSB
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C4582EED-A3FB-4358-8F3F-8C994460DF28}" = EasyFileShare
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{EF367AA4-070B-493C-9575-85BE59D789C9}" = Easy SpeedUp Manager
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Graphics Media Accelerator Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F687E657-F636-44DF-8125-9FEEA2C362F5}" = Samsung Support Center
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FFB768E4-E427-4553-BC36-A11F5E62A94D}" = Adobe Flash Player 10 ActiveX
"Acoustica Effects Pack" = Acoustica Effects Pack
"Acoustica Mixcraft 5" = Acoustica Mixcraft 5
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"avast5" = avast! Free Antivirus
"FrostWire" = FrostWire 4.21.3
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47}" = CyberLink PowerDVD 8
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = CyberLink PowerProducer
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Marvell Miniport Driver" = Marvell Miniport Driver
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"NVIDIA.Updatus" = NVIDIA Updatus
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"WinLiveSuite" = Windows Live Essentials

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1/2/2011 3:31:36 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 3994

Error - 1/2/2011 3:31:36 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3994

Error - 1/2/2011 3:31:37 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 1/2/2011 3:31:37 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 4992

Error - 1/2/2011 3:31:37 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 4992

Error - 1/2/2011 3:31:38 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 1/2/2011 3:31:38 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 6006

Error - 1/2/2011 3:31:38 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 6006

Error - 1/2/2011 3:31:39 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 1/2/2011 3:31:39 PM | Computer Name = Jesse-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 7082

[ System Events ]
Error - 12/27/2010 12:14:35 AM | Computer Name = Jesse-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x800f0902: Security Update for Windows 7 for x64-based Systems (KB979688).

Error - 12/27/2010 12:14:35 AM | Computer Name = Jesse-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x800f0902: Security Update for Windows 7 for x64-based Systems (KB2305420).

Error - 12/27/2010 12:14:35 AM | Computer Name = Jesse-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x800f0902: Security Update for Windows 7 for x64-based Systems (KB979687).

Error - 12/27/2010 12:14:35 AM | Computer Name = Jesse-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x800f0902: Update for Internet Explorer 8 Compatibility View List for
Windows 7 for x64-based Systems (KB2447568).

Error - 12/27/2010 12:14:35 AM | Computer Name = Jesse-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x800f0902: Security Update for Windows 7 for x64-based Systems (KB982132).

Error - 12/27/2010 12:14:35 AM | Computer Name = Jesse-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x800f0902: Security Update for Windows 7 for x64-based Systems (KB982214).

Error - 12/27/2010 7:04:21 AM | Computer Name = Jesse-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 5:03:14 AM on ?12/?27/?2010 was unexpected.

Error - 12/28/2010 1:13:30 PM | Computer Name = Jesse-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 11:12:13 AM on ?12/?28/?2010 was unexpected.

Error - 12/28/2010 1:21:58 PM | Computer Name = Jesse-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 11:20:14 AM on ?12/?28/?2010 was unexpected.

Error - 12/28/2010 3:13:13 PM | Computer Name = Jesse-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 11:25:13 AM on ?12/?28/?2010 was unexpected.


< End of report >
Posted Image


DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.


Vista and Windows 7 users:
1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")


Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.


It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.


Next:


Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
  • Ensure all Firefox windows are closed.
  • To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).
  • When prompted to run the scan, click Yes.
  • It doesn't take long to run, once it is finished move onto the next step

Next:

Note: if the Cure option is not there, please select 'Skip'.

Please read carefully and follow these steps.
  • Please download TDSSKiller.zip
    • Extract it to your desktop
    • Double click TDSSKiller.exe
    • Press Start Scan
      • Only if Malicious objects are found then ensure Cure is selected
      • Then click Continue > Reboot now
    • Copy and paste the log in your next reply
      • A copy of the log will be saved automatically to the root directory, root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
    please post the contents of that log TDSSKiller and GooredFix log.
Goored Fix Log GooredFix by jpshortstuff (03.07.10.1) Log created at 18:58 on 13/01/2011 (Jesse) Firefox version 3.6.13 (en-US) ========== GooredScan ========== (none) ========== GooredLog ========== C:\Program Files (x86)\Mozilla Firefox\extensions\ {972ce4c6-7e08-4474-a285-3208198ce6fd} [05:02 26/12/2010] {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [06:23 26/12/2010] {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [07:11 26/12/2010] C:\Users\Jesse\Application Data\Mozilla\Firefox\Profiles\3iscalmy.default\extensions\ (none) [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] (Key not found) ———- Old Logs ———- GooredFix[00.57.41_14-01-2011].txt -=E.O.F=- TDSS LOG 2011/01/13 19:00:31.0342 TDSS rootkit removing tool 2.4.13.0 Jan 12 2011 09:51:11 2011/01/13 19:00:31.0342 ================================================================================ 2011/01/13 19:00:31.0342 SystemInfo: 2011/01/13 19:00:31.0342 2011/01/13 19:00:31.0342 OS Version: 6.1.7600 ServicePack: 0.0 2011/01/13 19:00:31.0342 Product type: Workstation 2011/01/13 19:00:31.0342 ComputerName: JESSE-PC 2011/01/13 19:00:31.0342 UserName: Jesse 2011/01/13 19:00:31.0342 Windows directory: C:\windows 2011/01/13 19:00:31.0342 System windows directory: C:\windows 2011/01/13 19:00:31.0342 Running under WOW64 2011/01/13 19:00:31.0342 Processor architecture: Intel x64 2011/01/13 19:00:31.0342 Number of processors: 4 2011/01/13 19:00:31.0342 Page size: 0x1000 2011/01/13 19:00:31.0342 Boot type: Normal boot 2011/01/13 19:00:31.0342 ================================================================================ 2011/01/13 19:00:31.0342 Utility is running under WOW64 2011/01/13 19:00:31.0669 Initialize success 2011/01/13 19:00:41.0341 ================================================================================ 2011/01/13 19:00:41.0341 Scan started 2011/01/13 19:00:41.0341 Mode: Manual; 2011/01/13 19:00:41.0341 ================================================================================ 2011/01/13 19:00:41.0716 1394ohci (1b00662092f9f9568b995902f0cc40d5) C:\windows\system32\DRIVERS\1394ohci.sys 2011/01/13 19:00:41.0778 ACPI (6f11e88748cdefd2f76aa215f97ddfe5) C:\windows\system32\DRIVERS\ACPI.sys 2011/01/13 19:00:41.0809 AcpiPmi (63b05a0420ce4bf0e4af6dcc7cada254) C:\windows\system32\DRIVERS\acpipmi.sys 2011/01/13 19:00:41.0856 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\windows\system32\DRIVERS\adp94xx.sys 2011/01/13 19:00:41.0903 adpahci (597f78224ee9224ea1a13d6350ced962) C:\windows\system32\DRIVERS\adpahci.sys 2011/01/13 19:00:41.0965 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\windows\system32\DRIVERS\adpu320.sys 2011/01/13 19:00:42.0028 AFD (b9384e03479d2506bc924c16a3db87bc) C:\windows\system32\drivers\afd.sys 2011/01/13 19:00:42.0075 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\windows\system32\DRIVERS\agp440.sys 2011/01/13 19:00:42.0121 aliide (5812713a477a3ad7363c7438ca2ee038) C:\windows\system32\DRIVERS\aliide.sys 2011/01/13 19:00:42.0153 amdide (1ff8b4431c353ce385c875f194924c0c) C:\windows\system32\DRIVERS\amdide.sys 2011/01/13 19:00:42.0200 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\windows\system32\DRIVERS\amdk8.sys 2011/01/13 19:00:42.0215 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\windows\system32\DRIVERS\amdppm.sys 2011/01/13 19:00:42.0246 amdsata (7a4b413614c055935567cf88a9734d38) C:\windows\system32\DRIVERS\amdsata.sys 2011/01/13 19:00:42.0293 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\windows\system32\DRIVERS\amdsbs.sys 2011/01/13 19:00:42.0324 amdxata (b4ad0cacbab298671dd6f6ef7e20679d) C:\windows\system32\DRIVERS\amdxata.sys 2011/01/13 19:00:42.0387 AppID (42fd751b27fa0e9c69bb39f39e409594) C:\windows\system32\drivers\appid.sys 2011/01/13 19:00:42.0434 arc (c484f8ceb1717c540242531db7845c4e) C:\windows\system32\DRIVERS\arc.sys 2011/01/13 19:00:42.0465 arcsas (019af6924aefe7839f61c830227fe79c) C:\windows\system32\DRIVERS\arcsas.sys 2011/01/13 19:00:42.0527 aswFsBlk (e3888d64b79c001146054a440ea6f5db) C:\windows\system32\drivers\aswFsBlk.sys 2011/01/13 19:00:42.0590 aswMonFlt (5dfd212334919145c3feae39ff49651a) C:\windows\system32\drivers\aswMonFlt.sys 2011/01/13 19:00:42.0636 aswRdr (59a1fc838a2edf5c073007dc714ac609) C:\windows\system32\drivers\aswRdr.sys 2011/01/13 19:00:42.0683 aswSP (3425d882fe2a58d9a67b0c28a2636d62) C:\windows\system32\drivers\aswSP.sys 2011/01/13 19:00:42.0699 aswTdi (7a9d90130035a7079da7de435fcd8bc1) C:\windows\system32\drivers\aswTdi.sys 2011/01/13 19:00:42.0730 AsyncMac (769765ce2cc62867468cea93969b2242) C:\windows\system32\DRIVERS\asyncmac.sys 2011/01/13 19:00:42.0777 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\windows\system32\DRIVERS\atapi.sys 2011/01/13 19:00:42.0839 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\windows\system32\DRIVERS\bxvbda.sys 2011/01/13 19:00:42.0870 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\windows\system32\DRIVERS\b57nd60a.sys 2011/01/13 19:00:42.0902 Beep (16a47ce2decc9b099349a5f840654746) C:\windows\system32\drivers\Beep.sys 2011/01/13 19:00:42.0948 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\windows\system32\DRIVERS\blbdrive.sys 2011/01/13 19:00:42.0995 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\windows\system32\DRIVERS\bowser.sys 2011/01/13 19:00:43.0026 bpenum (f46dd257fad7d2d097ef32e72220a06c) C:\windows\system32\DRIVERS\bpenum.sys 2011/01/13 19:00:43.0058 bpmp (e82060aed0f28ed8909f2b07fa276185) C:\windows\system32\DRIVERS\bpmp.sys 2011/01/13 19:00:43.0089 bpusb (fc6313a5a45c1ae53d0491f0057d5a4d) C:\windows\system32\Drivers\bpusb.sys 2011/01/13 19:00:43.0104 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\windows\system32\DRIVERS\BrFiltLo.sys 2011/01/13 19:00:43.0136 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\windows\system32\DRIVERS\BrFiltUp.sys 2011/01/13 19:00:43.0182 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\windows\System32\Drivers\Brserid.sys 2011/01/13 19:00:43.0198 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\windows\System32\Drivers\BrSerWdm.sys 2011/01/13 19:00:43.0198 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\windows\System32\Drivers\BrUsbMdm.sys 2011/01/13 19:00:43.0214 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\windows\System32\Drivers\BrUsbSer.sys 2011/01/13 19:00:43.0229 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\windows\system32\DRIVERS\bthmodem.sys 2011/01/13 19:00:43.0276 cdfs (b8bd2bb284668c84865658c77574381a) C:\windows\system32\DRIVERS\cdfs.sys 2011/01/13 19:00:43.0307 cdrom (83d2d75e1efb81b3450c18131443f7db) C:\windows\system32\DRIVERS\cdrom.sys 2011/01/13 19:00:43.0338 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\windows\system32\DRIVERS\circlass.sys 2011/01/13 19:00:43.0370 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\windows\system32\CLFS.sys 2011/01/13 19:00:43.0432 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\windows\system32\DRIVERS\CmBatt.sys 2011/01/13 19:00:43.0463 cmdide (e19d3f095812725d88f9001985b94edd) C:\windows\system32\DRIVERS\cmdide.sys 2011/01/13 19:00:43.0479 CNG (f95fd4cb7da00ba2a63ce9f6b5c053e1) C:\windows\system32\Drivers\cng.sys 2011/01/13 19:00:43.0510 Compbatt (102de219c3f61415f964c88e9085ad14) C:\windows\system32\DRIVERS\compbatt.sys 2011/01/13 19:00:43.0541 CompositeBus (f26b3a86f6fa87ca360b879581ab4123) C:\windows\system32\DRIVERS\CompositeBus.sys 2011/01/13 19:00:43.0572 crcdisk (1c827878a998c18847245fe1f34ee597) C:\windows\system32\DRIVERS\crcdisk.sys 2011/01/13 19:00:43.0635 DfsC (3f1dc527070acb87e40afe46ef6da749) C:\windows\system32\Drivers\dfsc.sys 2011/01/13 19:00:43.0650 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\windows\system32\drivers\discache.sys 2011/01/13 19:00:43.0682 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\windows\system32\DRIVERS\disk.sys 2011/01/13 19:00:43.0744 drmkaud (9b19f34400d24df84c858a421c205754) C:\windows\system32\drivers\drmkaud.sys 2011/01/13 19:00:43.0791 DXGKrnl (ebce0b0924835f635f620d19f0529dce) C:\windows\System32\drivers\dxgkrnl.sys 2011/01/13 19:00:43.0884 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\windows\system32\DRIVERS\evbda.sys 2011/01/13 19:00:44.0072 elxstor (0e5da5369a0fcaea12456dd852545184) C:\windows\system32\DRIVERS\elxstor.sys 2011/01/13 19:00:44.0087 ErrDev (34a3c54752046e79a126e15c51db409b) C:\windows\system32\DRIVERS\errdev.sys 2011/01/13 19:00:44.0150 ETD (ace57d5012b00971cce04c61cfeefae6) C:\windows\system32\DRIVERS\ETD.sys 2011/01/13 19:00:44.0212 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\windows\system32\drivers\exfat.sys 2011/01/13 19:00:44.0228 fastfat (0adc83218b66a6db380c330836f3e36d) C:\windows\system32\drivers\fastfat.sys 2011/01/13 19:00:44.0274 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\windows\system32\DRIVERS\fdc.sys 2011/01/13 19:00:44.0321 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\windows\system32\drivers\fileinfo.sys 2011/01/13 19:00:44.0321 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\windows\system32\drivers\filetrace.sys 2011/01/13 19:00:44.0337 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\windows\system32\DRIVERS\flpydisk.sys 2011/01/13 19:00:44.0352 FltMgr (f7866af72abbaf84b1fa5aa195378c59) C:\windows\system32\drivers\fltmgr.sys 2011/01/13 19:00:44.0399 FsDepends (d43703496149971890703b4b1b723eac) C:\windows\system32\drivers\FsDepends.sys 2011/01/13 19:00:44.0430 fssfltr (6c06701bf1db05405804d7eb610991ce) C:\windows\system32\DRIVERS\fssfltr.sys 2011/01/13 19:00:44.0462 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\windows\system32\drivers\Fs_Rec.sys 2011/01/13 19:00:44.0508 fvevol (ae87ba80d0ec3b57126ed2cdc15b24ed) C:\windows\system32\DRIVERS\fvevol.sys 2011/01/13 19:00:44.0555 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\windows\system32\DRIVERS\gagp30kx.sys 2011/01/13 19:00:44.0571 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\windows\system32\DRIVERS\GEARAspiWDM.sys 2011/01/13 19:00:44.0618 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\windows\system32\drivers\hcw85cir.sys 2011/01/13 19:00:44.0649 HdAudAddService (6410f6f415b2a5a9037224c41da8bf12) C:\windows\system32\drivers\HdAudio.sys 2011/01/13 19:00:44.0680 HDAudBus (0a49913402747a0b67de940fb42cbdbb) C:\windows\system32\DRIVERS\HDAudBus.sys 2011/01/13 19:00:44.0727 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\windows\system32\DRIVERS\HECIx64.sys 2011/01/13 19:00:44.0758 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\windows\system32\DRIVERS\HidBatt.sys 2011/01/13 19:00:44.0774 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\windows\system32\DRIVERS\hidbth.sys 2011/01/13 19:00:44.0820 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\windows\system32\DRIVERS\hidir.sys 2011/01/13 19:00:44.0883 HidUsb (b3bf6b5b50006def50b66306d99fcf6f) C:\windows\system32\DRIVERS\hidusb.sys 2011/01/13 19:00:44.0914 HpSAMD (0886d440058f203eba0e1825e4355914) C:\windows\system32\DRIVERS\HpSAMD.sys 2011/01/13 19:00:44.0945 HTTP (cee049cac4efa7f4e1e4ad014414a5d4) C:\windows\system32\drivers\HTTP.sys 2011/01/13 19:00:44.0976 hwpolicy (f17766a19145f111856378df337a5d79) C:\windows\system32\drivers\hwpolicy.sys 2011/01/13 19:00:45.0008 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\windows\system32\DRIVERS\i8042prt.sys 2011/01/13 19:00:45.0054 iaStor (a5f72bb0d024e7e463344105be613ae4) C:\windows\system32\DRIVERS\iaStor.sys 2011/01/13 19:00:45.0101 iaStorV (d83efb6fd45df9d55e9a1afc63640d50) C:\windows\system32\DRIVERS\iaStorV.sys 2011/01/13 19:00:45.0304 igfx (677aa5991026a65ada128c4b59cf2bad) C:\windows\system32\DRIVERS\igdkmd64.sys 2011/01/13 19:00:45.0569 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\windows\system32\DRIVERS\iirsp.sys 2011/01/13 19:00:45.0632 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\windows\system32\DRIVERS\Impcd.sys 2011/01/13 19:00:45.0725 IntcAzAudAddService (bbda43f02a2c642a2df191fa8c0b0052) C:\windows\system32\drivers\RTKVHD64.sys 2011/01/13 19:00:45.0850 IntcDAud (c6c1f19205da83c801be7c25f4e2ee07) C:\windows\system32\DRIVERS\IntcDAud.sys 2011/01/13 19:00:45.0897 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\windows\system32\DRIVERS\intelide.sys 2011/01/13 19:00:45.0944 intelppm (ada036632c664caa754079041cf1f8c1) C:\windows\system32\DRIVERS\intelppm.sys 2011/01/13 19:00:45.0975 IpFilterDriver (722dd294df62483cecaae6e094b4d695) C:\windows\system32\DRIVERS\ipfltdrv.sys 2011/01/13 19:00:45.0990 IPMIDRV (e2b4a4494db7cb9b89b55ca268c337c5) C:\windows\system32\DRIVERS\IPMIDrv.sys 2011/01/13 19:00:46.0022 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\windows\system32\drivers\ipnat.sys 2011/01/13 19:00:46.0068 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\windows\system32\drivers\irenum.sys 2011/01/13 19:00:46.0100 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\windows\system32\DRIVERS\isapnp.sys 2011/01/13 19:00:46.0115 iScsiPrt (fa4d2557de56d45b0a346f93564be6e1) C:\windows\system32\DRIVERS\msiscsi.sys 2011/01/13 19:00:46.0146 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\windows\system32\DRIVERS\kbdclass.sys 2011/01/13 19:00:46.0193 kbdhid (6def98f8541e1b5dceb2c822a11f7323) C:\windows\system32\DRIVERS\kbdhid.sys 2011/01/13 19:00:46.0209 KSecDD (e8b6fcc9c83535c67f835d407620bd27) C:\windows\system32\Drivers\ksecdd.sys 2011/01/13 19:00:46.0240 KSecPkg (a8c63880ef6f4d3fec7b616b9c060215) C:\windows\system32\Drivers\ksecpkg.sys 2011/01/13 19:00:46.0256 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\windows\system32\drivers\ksthunk.sys 2011/01/13 19:00:46.0318 lltdio (1538831cf8ad2979a04c423779465827) C:\windows\system32\DRIVERS\lltdio.sys 2011/01/13 19:00:46.0365 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\windows\system32\DRIVERS\lsi_fc.sys 2011/01/13 19:00:46.0380 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\windows\system32\DRIVERS\lsi_sas.sys 2011/01/13 19:00:46.0412 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\windows\system32\DRIVERS\lsi_sas2.sys 2011/01/13 19:00:46.0443 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\windows\system32\DRIVERS\lsi_scsi.sys 2011/01/13 19:00:46.0458 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\windows\system32\drivers\luafv.sys 2011/01/13 19:00:46.0490 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\windows\system32\DRIVERS\megasas.sys 2011/01/13 19:00:46.0536 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\windows\system32\DRIVERS\MegaSR.sys 2011/01/13 19:00:46.0568 Modem (800ba92f7010378b09f9ed9270f07137) C:\windows\system32\drivers\modem.sys 2011/01/13 19:00:46.0599 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\windows\system32\DRIVERS\monitor.sys 2011/01/13 19:00:46.0614 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\windows\system32\DRIVERS\mouclass.sys 2011/01/13 19:00:46.0630 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\windows\system32\DRIVERS\mouhid.sys 2011/01/13 19:00:46.0661 mountmgr (791af66c4d0e7c90a3646066386fb571) C:\windows\system32\drivers\mountmgr.sys 2011/01/13 19:00:46.0677 mpio (609d1d87649ecc19796f4d76d4c15cea) C:\windows\system32\DRIVERS\mpio.sys 2011/01/13 19:00:46.0692 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\windows\system32\drivers\mpsdrv.sys 2011/01/13 19:00:46.0724 MRxDAV (30524261bb51d96d6fcbac20c810183c) C:\windows\system32\drivers\mrxdav.sys 2011/01/13 19:00:46.0755 mrxsmb (767a4c3bcf9410c286ced15a2db17108) C:\windows\system32\DRIVERS\mrxsmb.sys 2011/01/13 19:00:46.0786 mrxsmb10 (920ee0ff995fcfdeb08c41605a959e1c) C:\windows\system32\DRIVERS\mrxsmb10.sys 2011/01/13 19:00:46.0817 mrxsmb20 (740d7ea9d72c981510a5292cf6adc941) C:\windows\system32\DRIVERS\mrxsmb20.sys 2011/01/13 19:00:46.0833 msahci (5c37497276e3b3a5488b23a326a754b7) C:\windows\system32\DRIVERS\msahci.sys 2011/01/13 19:00:46.0848 msdsm (8d27b597229aed79430fb9db3bcbfbd0) C:\windows\system32\DRIVERS\msdsm.sys 2011/01/13 19:00:46.0880 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\windows\system32\drivers\Msfs.sys 2011/01/13 19:00:46.0926 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\windows\System32\drivers\mshidkmdf.sys 2011/01/13 19:00:46.0942 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\windows\system32\DRIVERS\msisadrv.sys 2011/01/13 19:00:46.0989 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\windows\system32\drivers\MSKSSRV.sys 2011/01/13 19:00:47.0020 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\windows\system32\drivers\MSPCLOCK.sys 2011/01/13 19:00:47.0036 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\windows\system32\drivers\MSPQM.sys 2011/01/13 19:00:47.0067 MsRPC (89cb141aa8616d8c6a4610fa26c60964) C:\windows\system32\drivers\MsRPC.sys 2011/01/13 19:00:47.0082 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\windows\system32\DRIVERS\mssmbios.sys 2011/01/13 19:00:47.0098 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\windows\system32\drivers\MSTEE.sys 2011/01/13 19:00:47.0129 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\windows\system32\DRIVERS\MTConfig.sys 2011/01/13 19:00:47.0145 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\windows\system32\Drivers\mup.sys 2011/01/13 19:00:47.0192 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\windows\system32\DRIVERS\nwifi.sys 2011/01/13 19:00:47.0223 NDIS (cad515dbd07d082bb317d9928ce8962c) C:\windows\system32\drivers\ndis.sys 2011/01/13 19:00:47.0254 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\windows\system32\DRIVERS\ndiscap.sys 2011/01/13 19:00:47.0301 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\windows\system32\DRIVERS\ndistapi.sys 2011/01/13 19:00:47.0332 Ndisuio (f105ba1e22bf1f2ee8f005d4305e4bec) C:\windows\system32\DRIVERS\ndisuio.sys 2011/01/13 19:00:47.0348 NdisWan (557dfab9ca1fcb036ac77564c010dad3) C:\windows\system32\DRIVERS\ndiswan.sys 2011/01/13 19:00:47.0363 NDProxy (659b74fb74b86228d6338d643cd3e3cf) C:\windows\system32\drivers\NDProxy.sys 2011/01/13 19:00:47.0394 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\windows\system32\DRIVERS\netbios.sys 2011/01/13 19:00:47.0426 NetBT (9162b273a44ab9dce5b44362731d062a) C:\windows\system32\DRIVERS\netbt.sys 2011/01/13 19:00:47.0597 NETw5s64 (18555f48844c2861d9dce8f2b7223ae5) C:\windows\system32\DRIVERS\NETw5s64.sys 2011/01/13 19:00:47.0816 nfrd960 (77889813be4d166cdab78ddba990da92) C:\windows\system32\DRIVERS\nfrd960.sys 2011/01/13 19:00:47.0862 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\windows\system32\drivers\Npfs.sys 2011/01/13 19:00:47.0878 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\windows\system32\drivers\nsiproxy.sys 2011/01/13 19:00:47.0940 Ntfs (356698a13c4630d5b31c37378d469196) C:\windows\system32\drivers\Ntfs.sys 2011/01/13 19:00:47.0972 Null (9899284589f75fa8724ff3d16aed75c1) C:\windows\system32\drivers\Null.sys 2011/01/13 19:00:48.0206 nvlddmkm (dbc4fe23aa4ef8f58e94daa59b079f52) C:\windows\system32\DRIVERS\nvlddmkm.sys 2011/01/13 19:00:48.0518 nvpciflt (de27d72bea190cafe571f0cc6d396465) C:\windows\system32\DRIVERS\nvpciflt.sys 2011/01/13 19:00:48.0580 nvraid (3e38712941e9bb4ddbee00affe3fed3d) C:\windows\system32\DRIVERS\nvraid.sys 2011/01/13 19:00:48.0596 nvstor (477dc4d6deb99be37084c9ac6d013da1) C:\windows\system32\DRIVERS\nvstor.sys 2011/01/13 19:00:48.0642 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\windows\system32\DRIVERS\nv_agp.sys 2011/01/13 19:00:48.0674 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\windows\system32\DRIVERS\ohci1394.sys 2011/01/13 19:00:48.0736 Parport (0086431c29c35be1dbc43f52cc273887) C:\windows\system32\DRIVERS\parport.sys 2011/01/13 19:00:48.0767 partmgr (7daa117143316c4a1537e074a5a9eaf0) C:\windows\system32\drivers\partmgr.sys 2011/01/13 19:00:48.0798 pci (f36f6504009f2fb0dfd1b17a116ad74b) C:\windows\system32\DRIVERS\pci.sys 2011/01/13 19:00:48.0830 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\windows\system32\DRIVERS\pciide.sys 2011/01/13 19:00:48.0845 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\windows\system32\DRIVERS\pcmcia.sys 2011/01/13 19:00:48.0876 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\windows\system32\drivers\pcw.sys 2011/01/13 19:00:48.0923 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\windows\system32\drivers\peauth.sys 2011/01/13 19:00:49.0001 PptpMiniport (27cc19e81ba5e3403c48302127bda717) C:\windows\system32\DRIVERS\raspptp.sys 2011/01/13 19:00:49.0032 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\windows\system32\DRIVERS\processr.sys 2011/01/13 19:00:49.0079 Psched (ee992183bd8eaefd9973f352e587a299) C:\windows\system32\DRIVERS\pacer.sys 2011/01/13 19:00:49.0126 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\windows\system32\DRIVERS\ql2300.sys 2011/01/13 19:00:49.0173 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\windows\system32\DRIVERS\ql40xx.sys 2011/01/13 19:00:49.0188 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\windows\system32\drivers\qwavedrv.sys 2011/01/13 19:00:49.0220 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\windows\system32\DRIVERS\rasacd.sys 2011/01/13 19:00:49.0266 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\windows\system32\DRIVERS\AgileVpn.sys 2011/01/13 19:00:49.0282 Rasl2tp (87a6e852a22991580d6d39adc4790463) C:\windows\system32\DRIVERS\rasl2tp.sys 2011/01/13 19:00:49.0313 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\windows\system32\DRIVERS\raspppoe.sys 2011/01/13 19:00:49.0313 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\windows\system32\DRIVERS\rassstp.sys 2011/01/13 19:00:49.0344 rdbss (3bac8142102c15d59a87757c1d41dce5) C:\windows\system32\DRIVERS\rdbss.sys 2011/01/13 19:00:49.0376 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\windows\system32\DRIVERS\rdpbus.sys 2011/01/13 19:00:49.0407 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\windows\system32\DRIVERS\RDPCDD.sys 2011/01/13 19:00:49.0422 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\windows\system32\drivers\rdpencdd.sys 2011/01/13 19:00:49.0438 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\windows\system32\drivers\rdprefmp.sys 2011/01/13 19:00:49.0469 RDPWD (8a3e6bea1c53ea6177fe2b6eba2c80d7) C:\windows\system32\drivers\RDPWD.sys 2011/01/13 19:00:49.0485 rdyboost (634b9a2181d98f15941236886164ec8b) C:\windows\system32\drivers\rdyboost.sys 2011/01/13 19:00:49.0547 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\windows\system32\DRIVERS\rspndr.sys 2011/01/13 19:00:49.0594 RTL8167 (baefee35d27a5440d35092ce10267bec) C:\windows\system32\DRIVERS\Rt64win7.sys 2011/01/13 19:00:49.0641 rtport (4ca0dba9e224473d664c25e411f5a3bd) C:\windows\SysWOW64\drivers\rtport.sys 2011/01/13 19:00:49.0703 SABI (62db6cc4b0818f1b5f3441241b098f12) C:\windows\system32\Drivers\SABI.sys 2011/01/13 19:00:49.0734 sbp2port (e3bbb89983daf5622c1d50cf49f28227) C:\windows\system32\DRIVERS\sbp2port.sys 2011/01/13 19:00:49.0766 scfilter (c94da20c7e3ba1dca269bc8460d98387) C:\windows\system32\DRIVERS\scfilter.sys 2011/01/13 19:00:49.0844 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\windows\system32\drivers\secdrv.sys 2011/01/13 19:00:49.0906 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\windows\system32\DRIVERS\serenum.sys 2011/01/13 19:00:49.0953 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\windows\system32\DRIVERS\serial.sys 2011/01/13 19:00:49.0968 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\windows\system32\DRIVERS\sermouse.sys 2011/01/13 19:00:50.0031 sffdisk (a554811bcd09279536440c964ae35bbf) C:\windows\system32\DRIVERS\sffdisk.sys 2011/01/13 19:00:50.0046 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\windows\system32\DRIVERS\sffp_mmc.sys 2011/01/13 19:00:50.0062 sffp_sd (178298f767fe638c9fedcbdef58bb5e4) C:\windows\system32\DRIVERS\sffp_sd.sys 2011/01/13 19:00:50.0078 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\windows\system32\DRIVERS\sfloppy.sys 2011/01/13 19:00:50.0124 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\windows\system32\DRIVERS\SiSRaid2.sys 2011/01/13 19:00:50.0140 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\windows\system32\DRIVERS\sisraid4.sys 2011/01/13 19:00:50.0171 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\windows\system32\DRIVERS\smb.sys 2011/01/13 19:00:50.0234 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\windows\system32\drivers\spldr.sys 2011/01/13 19:00:50.0280 srv (de6f5658da951c4bc8e498570b5b0d5f) C:\windows\system32\DRIVERS\srv.sys 2011/01/13 19:00:50.0312 srv2 (4d33d59c0b930c523d29f9bd40cda9d2) C:\windows\system32\DRIVERS\srv2.sys 2011/01/13 19:00:50.0343 srvnet (5a663fd67049267bc5c3f3279e631ffb) C:\windows\system32\DRIVERS\srvnet.sys 2011/01/13 19:00:50.0374 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\windows\system32\DRIVERS\stexstor.sys 2011/01/13 19:00:50.0405 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\windows\system32\DRIVERS\swenum.sys 2011/01/13 19:00:50.0499 Tcpip (90a2d722cf64d911879d6c4a4f802a4d) C:\windows\system32\drivers\tcpip.sys 2011/01/13 19:00:50.0546 TCPIP6 (90a2d722cf64d911879d6c4a4f802a4d) C:\windows\system32\DRIVERS\tcpip.sys 2011/01/13 19:00:50.0561 tcpipreg (76d078af6f587b162d50210f761eb9ed) C:\windows\system32\drivers\tcpipreg.sys 2011/01/13 19:00:50.0592 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\windows\system32\drivers\tdpipe.sys 2011/01/13 19:00:50.0624 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\windows\system32\drivers\tdtcp.sys 2011/01/13 19:00:50.0639 tdx (079125c4b17b01fcaeebce0bcb290c0f) C:\windows\system32\DRIVERS\tdx.sys 2011/01/13 19:00:50.0670 TermDD (c448651339196c0e869a355171875522) C:\windows\system32\DRIVERS\termdd.sys 2011/01/13 19:00:50.0717 tssecsrv (61b96c26131e37b24e93327a0bd1fb95) C:\windows\system32\DRIVERS\tssecsrv.sys 2011/01/13 19:00:50.0748 tunnel (3836171a2cdf3af8ef10856db9835a70) C:\windows\system32\DRIVERS\tunnel.sys 2011/01/13 19:00:50.0826 TurboB (f37d49111a12a97de4bb5d8ff444bd2c) C:\windows\system32\DRIVERS\TurboB.sys 2011/01/13 19:00:50.0858 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\windows\system32\DRIVERS\uagp35.sys 2011/01/13 19:00:50.0904 udfs (31ba4a33afab6a69ea092b18017f737f) C:\windows\system32\DRIVERS\udfs.sys 2011/01/13 19:00:50.0951 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\windows\system32\DRIVERS\uliagpkx.sys 2011/01/13 19:00:50.0982 umbus (eab6c35e62b1b0db0d1b48b671d3a117) C:\windows\system32\DRIVERS\umbus.sys 2011/01/13 19:00:50.0998 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\windows\system32\DRIVERS\umpass.sys 2011/01/13 19:00:51.0045 USBAAPL64 (f724b03c3dfaacf08d17d38bf3333583) C:\windows\system32\Drivers\usbaapl64.sys 2011/01/13 19:00:51.0092 usbccgp (b26afb54a534d634523c4fb66765b026) C:\windows\system32\DRIVERS\usbccgp.sys 2011/01/13 19:00:51.0123 usbcir (af0892a803fdda7492f595368e3b68e7) C:\windows\system32\DRIVERS\usbcir.sys 2011/01/13 19:00:51.0138 usbehci (cb490987a7f6928a04bb838e3bd8a936) C:\windows\system32\DRIVERS\usbehci.sys 2011/01/13 19:00:51.0170 usbhub (18124ef0a881a00ee222d02a3ee30270) C:\windows\system32\DRIVERS\usbhub.sys 2011/01/13 19:00:51.0201 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\windows\system32\DRIVERS\usbohci.sys 2011/01/13 19:00:51.0216 usbprint (73188f58fb384e75c4063d29413cee3d) C:\windows\system32\DRIVERS\usbprint.sys 2011/01/13 19:00:51.0232 USBSTOR (080d3820da6c046be82fc8b45a893e83) C:\windows\system32\DRIVERS\USBSTOR.SYS 2011/01/13 19:00:51.0263 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\windows\system32\DRIVERS\usbuhci.sys 2011/01/13 19:00:51.0310 usbvideo (7cb8c573c6e4a2714402cc0a36eab4fe) C:\windows\System32\Drivers\usbvideo.sys 2011/01/13 19:00:51.0357 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\windows\system32\DRIVERS\vdrvroot.sys 2011/01/13 19:00:51.0404 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\windows\system32\DRIVERS\vgapnp.sys 2011/01/13 19:00:51.0419 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\windows\System32\drivers\vga.sys 2011/01/13 19:00:51.0450 vhdmp (c82e748660f62a242b2dfac1442f22a4) C:\windows\system32\DRIVERS\vhdmp.sys 2011/01/13 19:00:51.0482 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\windows\system32\DRIVERS\viaide.sys 2011/01/13 19:00:51.0497 volmgr (2b1a3dae2b4e70dbba822b7a03fbd4a3) C:\windows\system32\DRIVERS\volmgr.sys 2011/01/13 19:00:51.0513 volmgrx (99b0cbb569ca79acaed8c91461d765fb) C:\windows\system32\drivers\volmgrx.sys 2011/01/13 19:00:51.0544 volsnap (58f82eed8ca24b461441f9c3e4f0bf5c) C:\windows\system32\DRIVERS\volsnap.sys 2011/01/13 19:00:51.0575 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\windows\system32\DRIVERS\vsmraid.sys 2011/01/13 19:00:51.0606 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\windows\system32\DRIVERS\vwifibus.sys 2011/01/13 19:00:51.0622 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\windows\system32\DRIVERS\vwififlt.sys 2011/01/13 19:00:51.0653 vwifimp (6a638fc4bfddc4d9b186c28c91bd1a01) C:\windows\system32\DRIVERS\vwifimp.sys 2011/01/13 19:00:51.0684 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\windows\system32\DRIVERS\wacompen.sys 2011/01/13 19:00:51.0700 WANARP (47ca49400643effd3f1c9a27e1d69324) C:\windows\system32\DRIVERS\wanarp.sys 2011/01/13 19:00:51.0716 Wanarpv6 (47ca49400643effd3f1c9a27e1d69324) C:\windows\system32\DRIVERS\wanarp.sys 2011/01/13 19:00:51.0762 Wd (72889e16ff12ba0f235467d6091b17dc) C:\windows\system32\DRIVERS\wd.sys 2011/01/13 19:00:51.0809 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\windows\system32\drivers\Wdf01000.sys 2011/01/13 19:00:51.0856 wdkmd (fe31110e39a0b11abae1ba43a2dc94f9) C:\windows\system32\DRIVERS\WDKMD.sys 2011/01/13 19:00:51.0903 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\windows\system32\DRIVERS\wfplwf.sys 2011/01/13 19:00:51.0950 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\windows\system32\drivers\wimmount.sys 2011/01/13 19:00:52.0028 WinUsb (817eaff5d38674edd7713b9dfb8e9791) C:\windows\system32\DRIVERS\WinUsb.sys 2011/01/13 19:00:52.0059 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\windows\system32\DRIVERS\wmiacpi.sys 2011/01/13 19:00:52.0106 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\windows\system32\drivers\ws2ifsl.sys 2011/01/13 19:00:52.0121 WudfPf (7cadc74271dd6461c452c271b30bd378) C:\windows\system32\drivers\WudfPf.sys 2011/01/13 19:00:52.0168 WUDFRd (3b197af0fff08aa66b6b2241ca538d64) C:\windows\system32\DRIVERS\WUDFRd.sys 2011/01/13 19:00:52.0215 yukonw7 (918cfcdbb6c297c53788b926954da907) C:\windows\system32\DRIVERS\yk62x64.sys 2011/01/13 19:00:52.0464 ================================================================================ 2011/01/13 19:00:52.0464 Scan finished 2011/01/13 19:00:52.0464 ================================================================================

I also get the error "For some reason your system denied write access to the host files"

That's normal with Vista and Windows 7


Are you still getting redirected?

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI