What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Computer will not start

18 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi, I think I may have multiple issues going on here. My computer will not start up at all it starts booting, shows the xp logo like it is going to startup the quickly flashes a blue screen of which it is hard to read the text. Previous to this I was having redirects in Chrome and the problem would disappear for awhile when I cleared my cookies. What started the problem was a power outage on the 1st, my computer had a windows update waiting to install that night, but the power went off and it never installed. I have run AVG, but it only runs in a command type environment (DOS?), I am currently running Ad-Aware which seems to be working fine. I ran HiJackThis and attaching it and the AVG log to this post. Any help would be great!! Let me know if there is anymore information that you need. JM 📎avgrep.txt 📎hijackthis_log.txt
Post #2 last edited
Hi martindz9, welcome to the forum.

To make cleaning this machine easier
  • Please do not uninstall/install any programs unless asked to
    It is more difficult when files/programs are appearing in/disappearing from the logs.
  • Please do not run any scans other than those requested
  • Please follow all instructions in the order posted
  • All logs/reports, etc.. must be posted in Notepad. Please ensure that word wrap is unchecked. In notepad click format, uncheck word wrap if it is checked.
  • Do not attach any logs/reports, etc.. unless specifically requested to do so.
  • If you have problems with or do not understand the instructions, Please ask before continuing.
  • Please stay with this thread until given the All Clear. A absence of symptoms does not mean a clean machine.

Your security programs such as AVG will not be active in Safe Mode. Please do not use this computer on the internet except for downloading tools and posting in this topic untill we can get it back to normal windows.

Do you have another computer we can use to make a CD which we may need? There are a couple of patched files we will need to replace.



Open hijackthis, do a system scan only and checkmark these lines, if present

F3 - REG:win.ini: load=C:\DOCUME~1\Josh\LOCALS~1\Temp\dwm.exe

Close ALL other windows/browsers and click Fix Checked. Answer Yes if prompted. Close HJT.




Download OTL to your desktop.
  • Double click on OTL.exe to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output
  • Check the boxes beside LOP Check and Purity Check.
  • In the window under Custom Scans/Fixes copy and paste the following


    netsvcs
    %SYSTEMDRIVE%\*.*
    %systemroot%\Fonts\*.com
    %systemroot%\Fonts\*.dll
    %systemroot%\Fonts\*.ini
    %systemroot%\Fonts\*.ini2
    %systemroot%\Fonts\*.exe
    %systemroot%\system32\spool\prtprocs\w32x86\*.*
    %systemroot%\REPAIR\*.bak1
    %systemroot%\REPAIR\*.ini
    %systemroot%\system32\*.jpg
    %systemroot%\*.jpg
    %systemroot%\*.png
    %systemroot%\*.scr
    %systemroot%\*._sy
    %APPDATA%\Adobe\Update\*.*
    %ALLUSERSPROFILE%\Favorites\*.*
    %APPDATA%\Microsoft\*.*
    %PROGRAMFILES%\*.*
    %APPDATA%\Update\*.*
    %systemroot%\*. /mp /s
    CREATERESTOREPOINT
    %systemroot%\System32\config\*.sav
    %PROGRAMFILES%\bak. /s
    %systemroot%\system32\bak. /s
    %ALLUSERSPROFILE%\Start Menu\*.lîk /x
    %systemroot%\system32\config\systemprofile\*.dat /x
    %systemroot%\*.config
    %systemroot%\system32\*.db
    %PROGRAMFILES%\Internet Explorer\*.dat
    %APPDATA%\Mikzosoft\Internet Explorer\Quick Launch\*.lnk /x
    %USERPROFILE%\Deskuop\*.exe
    %PROGRAMFILES%\Common Files\*.*
    %systemroot%\*.src
    %systemroot%\install\*.*
    %systemroot%\system32\DLL\*.*
    %systemroot%\system32\HelpFiles\*.*
    %systemroot%\system32\rundll\*.*
    %systemroot%\winn32\*.*
    %systemroot%\Java\*.*
    %systemroot%\system32\test\*.*
    %systemroot%\system32\Rundll32\*.*
    /md5start
    winlogon.*
    explorer.*
    /md5stop
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.

Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them all in.

Please post back with
  • both OTL logs
Thanks
Post #3
Okay,

Here is what came up in the scan.
I do have access to another computer and can get a disc burned if needed.
I also have my Operation system restore disc.

First File, OTL.txt;


OTL logfile created on: 1/10/2011 12:46:21 PM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Josh\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 82.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 93.16 Gb Total Space | 10.26 Gb Free Space | 11.02% Space Free | Partition Type: NTFS

Computer Name: DESIGN_CENTRAL | User Name: Josh | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/01/10 11:49:45 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Josh\Desktop\OTL.exe
PRC - [2008/04/13 16:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe


========== Modules (SafeList) ==========

MOD - [2011/01/10 11:49:45 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Josh\Desktop\OTL.exe
MOD - [2010/08/23 08:12:02 | 001,054,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] – C:\WINDOWS\System32\appmgmts.dll – (AppMgmt)
SRV - [2010/12/08 23:05:13 | 003,020,888 | —- | M] () [Auto | Stopped] – c:\Program Files\Common Files\Akamai\netsession_win_aeec0f0.dll – (Akamai)
SRV - [2010/11/23 13:34:14 | 006,128,208 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] – C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe – (AVGIDSAgent)
SRV - [2010/10/22 04:58:18 | 000,265,400 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Stopped] – C:\Program Files\AVG\AVG10\avgwdsvc.exe – (avgwd)
SRV - [2010/06/30 12:13:02 | 001,352,832 | —- | M] (Lavasoft) [Auto | Stopped] – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe – (Lavasoft Ad-Aware Service)
SRV - [2010/06/02 17:12:44 | 000,288,112 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe – (Adobe Version Cue CS4)
SRV - [2010/05/04 22:09:00 | 000,137,560 | —- | M] (WeFi) [On_Demand | Stopped] – C:\Program Files\WeFi\WefiEngSvc.exe – (WefiEngSvc)
SRV - [2009/09/25 23:32:18 | 000,189,736 | —- | M] (Seagate Technology LLC) [Auto | Stopped] – C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe – (FreeAgentGoNext Service)
SRV - [2009/06/09 10:15:52 | 000,655,624 | —- | M] (Acresso Software Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe – (FLEXnet Licensing Service)
SRV - [2008/06/05 23:41:12 | 001,322,648 | —- | M] (Autodesk, Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\Autodesk Shared\Service\AdskNetSrv.exe – (Autodesk Network Licensing Service)
SRV - [2008/03/10 00:04:52 | 000,065,536 | —- | M] () [Auto | Stopped] – C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe – (mi-raysat_3dsMax2009_32)
SRV - [2008/02/12 20:22:57 | 000,079,360 | —- | M] (Autodesk) [Auto | Stopped] – C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe – (Autodesk Licensing Service)
SRV - [2007/08/08 23:27:52 | 000,073,728 | —- | M] (HP) [Auto | Stopped] – C:\WINDOWS\system32\HPZipm12.exe – (Pml Driver HPZ12)
SRV - [2007/01/04 13:38:08 | 000,024,652 | —- | M] (Viewpoint Corporation) [Auto | Stopped] – C:\Program Files\Viewpoint\Common\ViewpointService.exe – (Viewpoint Manager Service)
SRV - [2005/05/10 03:19:24 | 000,024,576 | —- | M] (Oki Data Corporation) [On_Demand | Stopped] – C:\WINDOWS\system32\spool\drivers\w32x86\3\OPHCLDCS.EXE – (OKI OPHC DCS Loader)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\System32\DRIVERS\SNTNLUSB.SYS – (Sntnlusb)
DRV - File not found [Kernel | System | Stopped] – C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys – (SASKUTIL)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\System32\Drivers\Pcouffin.sys – (Pcouffin)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\System32\DRIVERS\KMW_USB.sys – (KMW_USB)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\WINDOWS\System32\DRIVERS\KMW_KBD.sys – (KMW_KBD)
DRV - File not found [Kernel | Boot | Stopped] – C:\WINDOWS\System32\drivers\giwbwxqs.sys – (hbnqrhkg)
DRV - File not found [Kernel | Auto | Stopped] – C:\WINDOWS\System32\drivers\DS1410D.SYS – (DS1410D)
DRV - [2010/12/08 04:12:38 | 000,251,728 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Stopped] – C:\WINDOWS\system32\drivers\avgldx86.sys – (Avgldx86)
DRV - [2010/11/12 13:19:38 | 000,299,984 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avgtdix.sys – (Avgtdix)
DRV - [2010/09/13 15:27:24 | 000,025,680 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys – (AVGIDSEH)
DRV - [2010/09/07 02:48:56 | 000,034,384 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Stopped] – C:\WINDOWS\system32\drivers\avgmfx86.sys – (Avgmfx86)
DRV - [2010/09/07 02:48:50 | 000,026,064 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] – C:\WINDOWS\system32\DRIVERS\avgrkx86.sys – (Avgrkx86)
DRV - [2010/08/19 20:42:38 | 000,030,288 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\AVGIDSFilter.sys – (AVGIDSFilter)
DRV - [2010/08/19 20:42:36 | 000,123,472 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\AVGIDSDriver.sys – (AVGIDSDriver)
DRV - [2010/08/19 20:42:34 | 000,026,192 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\AVGIDSShim.sys – (AVGIDSShim)
DRV - [2010/06/05 12:14:12 | 000,064,288 | —- | M] (Lavasoft AB) [File_System | Boot | Running] – C:\WINDOWS\system32\DRIVERS\Lbd.sys – (Lbd)
DRV - [2010/06/02 17:02:31 | 000,073,312 | —- | M] (Adobe Systems, Inc.) [Kernel | Auto | Stopped] – C:\WINDOWS\System32\drivers\adfs.sys – (adfs)
DRV - [2009/03/13 17:53:21 | 000,027,136 | —- | M] (NCH Swift Sound) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\nchssvad.sys – (NCHSSVAD)
DRV - [2008/09/26 18:06:24 | 000,129,824 | —- | M] (Paragon) [Kernel | System | Stopped] – C:\WINDOWS\system32\drivers\Uim_IM.sys – (Uim_IM)
DRV - [2008/09/26 18:06:24 | 000,040,496 | —- | M] (Paragon Software Group) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\hotcore3.sys – (hotcore3)
DRV - [2008/09/26 18:06:24 | 000,032,048 | —- | M] (Windows ® 2000 DDK provider) [Kernel | System | Stopped] – C:\WINDOWS\system32\drivers\UimBus.sys – (UimBus)
DRV - [2008/05/31 23:13:10 | 000,034,064 | —- | M] (CACE Technologies) [Kernel | Auto | Stopped] – C:\WINDOWS\system32\drivers\npf.sys – (npf)
DRV - [2008/04/13 10:56:06 | 000,088,320 | —- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] – C:\WINDOWS\system32\drivers\nwlnkipx.sys – (NwlnkIpx)
DRV - [2007/10/20 01:03:30 | 000,050,448 | —- | M] (InterVideo) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\iviVD.sys – (iviVD)
DRV - [2007/01/23 15:02:40 | 000,047,616 | —- | M] (Aladdin Knowledge Systems) [Kernel | Auto | Stopped] – C:\WINDOWS\system32\drivers\Haspnt.sys – (Haspnt)
DRV - [2006/07/25 21:51:58 | 001,681,408 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag)
DRV - [2005/09/28 15:00:22 | 000,376,320 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\BCMWL5.SYS – (BCM43XX)
DRV - [2005/07/28 08:18:40 | 000,685,056 | —- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto | Stopped] – C:\WINDOWS\system32\drivers\hardlock.sys – (Hardlock)
DRV - [2005/07/20 18:08:28 | 000,100,096 | —- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\aksusb.sys – (aksusb)
DRV - [2005/07/20 18:08:26 | 000,327,808 | —- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\akshasp.sys – (akshasp)
DRV - [2005/03/16 04:43:06 | 000,159,488 | —- | M] (Texas Instruments) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\tifm21.sys – (tifm21)
DRV - [2005/03/04 03:10:26 | 000,074,496 | —- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\Rtlnicxp.sys – (RTL8023xp)
DRV - [2005/02/02 03:58:58 | 000,191,456 | —- | M] (Synaptics, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\SynTP.sys – (SynTP)
DRV - [2004/12/15 07:18:34 | 000,207,232 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\HSFHWICH.sys – (HSFHWICH)
DRV - [2004/12/15 07:18:28 | 000,703,232 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\HSF_CNXT.sys – (winachsf)
DRV - [2004/12/15 07:18:26 | 001,038,208 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\HSF_DP.sys – (HSF_DP)
DRV - [2004/11/17 02:17:58 | 000,280,192 | —- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\camchal.sys – (CAMCHALA)
DRV - [2004/11/17 02:17:14 | 000,293,120 | —- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\camcaud.sys – (CAMCAUD)
DRV - [2004/09/10 07:00:00 | 000,084,064 | —- | M] (Rainbow Technologies, Inc.) [Kernel | Auto | Stopped] – C:\WINDOWS\System32\Drivers\SENTINEL.SYS – (Sentinel)
DRV - [2004/08/04 00:00:00 | 000,063,232 | —- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] – C:\WINDOWS\system32\drivers\nwlnknb.sys – (NwlnkNb)
DRV - [2004/08/04 00:00:00 | 000,055,936 | —- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] – C:\WINDOWS\system32\drivers\nwlnkspx.sys – (NwlnkSpx)
DRV - [2004/06/02 17:13:32 | 000,016,896 | —- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\btaudio.sys – (btaudio)
DRV - [2004/06/02 17:07:28 | 001,240,938 | —- | M] (WIDCOMM, Inc.) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\btkrnl.sys – (BTKRNL)
DRV - [2004/06/02 17:00:10 | 000,147,864 | —- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\btwdndis.sys – (BTWDNDIS)
DRV - [2004/06/02 16:59:58 | 000,030,235 | —- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\btport.sys – (BTDriver)
DRV - [2004/06/02 16:50:16 | 000,053,816 | —- | M] (WIDCOMM, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\btwusb.sys – (BTWUSB)
DRV - [2004/04/14 06:36:50 | 000,007,432 | —- | M] (Hewlett-Packard Company) [Kernel | System | Stopped] – C:\WINDOWS\system32\drivers\eabfiltr.sys – (eabfiltr)
DRV - [2003/06/06 10:46:16 | 000,005,220 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\EabUsb.sys – (eabusb)
DRV - [2002/07/17 07:53:02 | 000,016,877 | —- | M] (Adaptec) [Kernel | Auto | Stopped] – C:\WINDOWS\system32\drivers\ASPI32.SYS – (Aspi32)
DRV - [2001/08/17 11:10:28 | 000,035,913 | —- | M] (SMC) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\smcirda.sys – (SMCIRDA)
DRV - [2001/08/17 07:51:56 | 000,005,248 | —- | M] (Acer Laboratories Inc.) [Kernel | Boot | Running] – C:\WINDOWS\system32\DRIVERS\aliide.sys – (AliIde)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerm…tf8&oe;=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.myspace.com/
IE - HKCU\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
IE - HKCU\..\URLSearchHook: {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost;*.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:50370

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=&query;="
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.myspace.com/"
FF - prefs.js..extensions.enabledItems: {E9A1DEE0-C623-4439-8932-001E7D17607D}:2.1.0.5
FF - prefs.js..extensions.enabledItems: {000a9d1c-beef-4f90-9363-039d445309b8}:0.5.36.0
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: [removed]:7
FF - prefs.js..extensions.enabledItems: {ba14329e-9550-4989-b3f2-9732e92d17cc}:2.7.1.3
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.5
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1167
FF - prefs.js..keyword.URL: "http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type;=yahoo_avg_hs2-tb-web_us&p;="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 50370
FF - prefs.js..network.proxy.type: 1


FF - HKLM\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files\Google\Google Gears\Firefox\ [2010/03/04 17:22:02 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/07/25 23:02:36 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG10\Firefox\ [2010/12/27 09:05:40 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/10/23 20:03:38 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/12/10 10:47:33 | 000,000,000 | —D | M]

[2009/09/01 16:13:57 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Josh\Application Data\Mozilla\Extensions
[2010/12/26 20:42:10 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Josh\Application Data\Mozilla\Firefox\Profiles\1993sszr.default\extensions
[2009/09/03 01:32:33 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Josh\Application Data\Mozilla\Firefox\Profiles\1993sszr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/06/11 22:04:59 | 000,000,000 | —D | M] (Vuze Remote Toolbar) – C:\Documents and Settings\Josh\Application Data\Mozilla\Firefox\Profiles\1993sszr.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
[2009/09/01 16:14:26 | 000,000,000 | —D | M] ("AIM Toolbar") – C:\Documents and Settings\Josh\Application Data\Mozilla\Firefox\Profiles\1993sszr.default\extensions\{c2f863cd-0429-48c7-bb54-db756a951760}
[2009/05/26 13:12:05 | 000,000,000 | —D | M] ("Ask Toolbar for Firefox") – C:\Documents and Settings\Josh\Application Data\Mozilla\Firefox\Profiles\1993sszr.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2010/06/27 19:51:43 | 000,000,000 | —D | M] (20-20 3D Viewer) – C:\Documents and Settings\Josh\Application Data\Mozilla\Firefox\Profiles\1993sszr.default\extensions\[removed]
[2009/09/01 16:14:53 | 000,004,201 | —- | M] () – C:\Documents and Settings\Josh\Application Data\Mozilla\Firefox\Profiles\1993sszr.default\searchplugins\aim-search.xml
[2010/12/26 20:42:10 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/07/25 23:02:36 | 000,000,000 | —D | M] (RealPlayer Browser Record Plugin) – C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT
[2010/02/28 18:15:34 | 000,000,000 | —D | M] (Move Media Player) – C:\DOCUMENTS AND SETTINGS\JOSH\APPLICATION DATA\MOVE NETWORKS
[2010/12/27 09:05:40 | 000,000,000 | —D | M] (AVG Safe Search) – C:\PROGRAM FILES\AVG\AVG10\FIREFOX
[2010/03/04 17:22:02 | 000,000,000 | —D | M] (Google Gears) – C:\PROGRAM FILES\GOOGLE\GOOGLE GEARS\FIREFOX
[2009/03/17 12:31:39 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010/07/23 22:04:15 | 000,393,216 | —- | M] (Invenda Corporation) – C:\Program Files\Mozilla Firefox\plugins\NPcol400.dll
[2009/11/19 14:16:28 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
[2009/11/19 14:16:29 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll
[2007/04/16 09:07:12 | 000,180,293 | —- | M] () – C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
[2007/03/09 15:16:44 | 000,189,496 | —- | M] (Yahoo! Inc.) – C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll

O1 HOSTS File: ([2009/05/27 10:43:17 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll (Google Inc.)
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O2 - BHO: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O2 - BHO: (Google Gears Helper) - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (Vuze Remote Toolbar) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (AIM Toolbar) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (Vuze Remote Toolbar) - {BA14329E-9550-4989-B3F2-9732E92D17CC} - C:\Program Files\Vuze_Remote\tbVuz1.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CarboniteSetupLite] C:\Program Files\Carbonite\CarbonitePreinstaller.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\Cpqset.exe ()
O4 - HKLM..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe (Hewlett-Packard )
O4 - HKLM..\Run: [HydraVisionDesktopManager] C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe (Macrovision Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\LSBurnWatcher.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [svchost] C:\Documents and Settings\Josh\Application Data\Microsoft\svchost.exe File not found
O4 - HKLM..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [YCentral] c:\Program Files\Yahoo!\YCentral\YahooCentral.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [fsm] File not found
O4 - HKCU..\Run: [Software Informer] C:\Program Files\Software Informer\softinfo.exe (Informer Technologies, Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10b.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\BTTray.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (WIDCOMM, Inc.)
O4 - Startup: C:\Documents and Settings\Josh\Start Menu\Programs\Startup\Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe (Yahoo! Inc.)
F3 - HKCU WinNT: Load - (C:\DOCUME~1\Josh\LOCALS~1\Temp\dwm.exe) - C:\DOCUME~1\Josh\LOCALS~1\Temp\dwm.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: &AIM; Toolbar Search - C:\Documents and Settings\All Users\Application Data\AIM Toolbar\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Send To &Bluetooth; - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra 'Tools' menuitem : &Gears; Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O9 - Extra Button: AIM Toolbar - {0b83c99c-1efa-4259-858f-bcb33e007a5b} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/pub/shock…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=48835 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://fpdownload.macromedia.com/get/shock…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} http://h20270.www2.hp.com/ediags/gmn2/inst…ctDetection.cab (HpProductDetection Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1243924503171 (MUWebControl Class)
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} http://preciseportal.precisionimages.com/ImageUploader4.cab (Image Uploader Control)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {804F9BC5-0EAB-4150-8065-0DF485420670} http://www.knoll.com/FSL/KnFSLInstall/setup.exe (InstallShield Setup Player V11.5)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} http://offers.e-centives.com/cif/download/bin/actxcab.cab (CBSTIEPrint Class)
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} https://h17000.www1.hp.com/ewfrf-JAVA/Secur…loadManager.ocx (Get_ActiveX Control)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CBD8B1CB-2F5F-415F-93E8-A297B33DCBB2} http://entriq.vo.llnwd.net/o1/NBCUniversal…eck_1_0_0_5.cab (CentrinoCheck Control)
O16 - DPF: {CE7D2BF2-D173-4CE2-9DAF-15EA153B5B43} http://entriq.vo.llnwd.net/o1/NBCUniversal…0_15_Silent.cab (MediaControl Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/get/flash…ent/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://l.yimg.com/jh/games/web_games/popca…aploader_v6.cab (PopCapLoader Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} http://dlm.tools.akamai.com/dlmanager/vers…vex-2.2.1.6.cab (DownloadManager Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\widimg {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\BTXPPanel.dll (WIDCOMM, Inc.)
O18 - Protocol\Filter\x-sdch {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (C:\Documents and Settings\Josh\Application Data\Microsoft\Windows\shell.exe) - C:\Documents and Settings\Josh\Application Data\Microsoft\Windows\shell.exe File not found
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O22 - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences\FencesMenu.dll (Stardock)
O24 - Desktop WallPaper: C:\Documents and Settings\Josh\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Josh\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/12/26 15:19:42 | 000,000,000 | —D | M] - C:\autodesk – [ NTFS ]
O32 - AutoRun File - [2009/05/27 09:27:45 | 000,000,000 | RHSD | M] - C:\autorun.inf – [ NTFS ]
O33 - MountPoints2\{279d7b91-e597-11dd-8a2b-0016410157cc}\Shell\AutoRun\command - "" = G:\WDSetup.exe – File not found
O33 - MountPoints2\{c026d8ad-e1a9-11de-89a5-0016410157cc}\Shell\AutoRun\command - "" = F:\setupSNK.exe – File not found
O33 - MountPoints2\{efa46602-7d80-11df-88bc-0016410157cc}\Shell - "" = AutoRun
O33 - MountPoints2\{efa46602-7d80-11df-88bc-0016410157cc}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{efa46602-7d80-11df-88bc-0016410157cc}\Shell\AutoRun\command - "" = F:\LaunchU3.exe – File not found
O33 - MountPoints2\{efa46605-7d80-11df-88bc-0016410157cc}\Shell - "" = AutoRun
O33 - MountPoints2\{efa46605-7d80-11df-88bc-0016410157cc}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{efa46605-7d80-11df-88bc-0016410157cc}\Shell\AutoRun\command - "" = F:\LaunchU3.exe – File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync) - C:\Program Files\AVG\AVG10\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart) - C:\Program Files\AVG\AVG10\avgrsx.exe (AVG Technologies CZ, s.r.o.)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - C:\WINDOWS\System32\appmgmts.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Error starting restore point: The function was called in safe mode.
Error closing restore point: The sequence number is invalid.

========== Files/Folders - Created Within 30 Days ==========

[2011/01/10 11:49:48 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Josh\Desktop\OTL.exe
[2011/01/10 09:50:25 | 000,000,000 | —D | C] – C:\Documents and Settings\Josh\Desktop\Passwords
[2011/01/05 23:03:39 | 000,000,000 | —D | C] – C:\Documents and Settings\Josh\Desktop\PDFs
[2011/01/05 23:00:34 | 000,000,000 | —D | C] – C:\Documents and Settings\Josh\Desktop\Shortcuts
[2010/12/22 01:04:05 | 000,000,000 | —D | C] – C:\Documents and Settings\Josh\Desktop\CD Set 12-22-2010
[2010/12/20 11:23:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Josh\Desktop\Metriod
[2010/12/14 22:23:51 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2010/12/14 22:22:44 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2009/06/24 16:52:32 | 002,068,480 | —- | C] (Adobe Systems Incorporated) – C:\Documents and Settings\All Users\Application Data\Package and Preflight.apln
[2009/06/24 16:52:32 | 002,068,480 | —- | C] (Adobe Systems Incorporated) – C:\Documents and Settings\All Users\Application Data\adobetmp000215883
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/01/10 12:22:21 | 000,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/01/10 12:21:13 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/01/10 11:49:45 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Josh\Desktop\OTL.exe
[2011/01/10 11:45:06 | 000,006,292 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/10 11:41:28 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2011/01/05 13:24:58 | 000,082,432 | —- | M] () – C:\Documents and Settings\Josh\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/01 05:36:03 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/01/01 05:36:02 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/01/01 05:00:00 | 000,000,974 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3016158968-4015646977-231257814-1006UA.job
[2010/12/31 18:40:03 | 103,143,768 | —- | M] () – C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2010/12/31 06:00:01 | 000,000,922 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-3016158968-4015646977-231257814-1006Core.job
[2010/12/30 22:45:00 | 000,000,420 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{33225BFF-48E1-43EB-AFC6-84B1DDAA2F63}.job
[2010/12/29 16:14:03 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010/12/27 22:39:44 | 000,000,276 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-3016158968-4015646977-231257814-1006.job
[2010/12/27 22:39:35 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-3016158968-4015646977-231257814-1006.job
[2010/12/27 22:37:45 | 000,000,304 | —- | M] () – C:\WINDOWS\tasks\WefiStartup.job
[2010/12/27 22:20:45 | 008,405,015 | —- | M] () – C:\WINDOWS\TempFile
[2010/12/27 09:06:38 | 000,000,690 | —- | M] () – C:\Documents and Settings\All Users\Desktop\AVG 2011.lnk
[2010/12/20 14:03:48 | 000,970,194 | —- | M] () – C:\Documents and Settings\Josh\Desktop\Caramels 1.JPG
[2010/12/20 13:03:40 | 000,443,292 | —- | M] () – C:\Documents and Settings\Josh\Desktop\Image12202010130335.jpg
[2010/12/20 13:03:08 | 000,459,804 | —- | M] () – C:\Documents and Settings\Josh\Desktop\Image12202010130304.jpg
[2010/12/20 13:02:48 | 000,486,203 | —- | M] () – C:\Documents and Settings\Josh\Desktop\Image12202010130244.jpg
[2010/12/17 07:37:45 | 000,768,936 | —- | M] () – C:\Documents and Settings\Josh\Desktop\JJJ.tif
[2010/12/15 22:13:21 | 002,620,616 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010/12/15 22:09:05 | 000,001,393 | —- | M] () – C:\WINDOWS\imsins.BAK
[2010/12/14 14:01:52 | 000,002,277 | —- | M] () – C:\Documents and Settings\Josh\Desktop\Google Chrome.lnk
[2010/12/14 14:01:52 | 000,002,255 | —- | M] () – C:\Documents and Settings\Josh\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010/12/20 14:03:48 | 000,970,194 | —- | C] () – C:\Documents and Settings\Josh\Desktop\Caramels 1.JPG
[2010/12/20 14:01:34 | 000,443,292 | —- | C] () – C:\Documents and Settings\Josh\Desktop\Image12202010130335.jpg
[2010/12/20 14:01:33 | 000,459,804 | —- | C] () – C:\Documents and Settings\Josh\Desktop\Image12202010130304.jpg
[2010/12/20 14:01:32 | 000,486,203 | —- | C] () – C:\Documents and Settings\Josh\Desktop\Image12202010130244.jpg
[2010/12/17 07:37:12 | 000,768,936 | —- | C] () – C:\Documents and Settings\Josh\Desktop\JJJ.tif
[2010/06/25 15:09:21 | 000,535,712 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2009/12/22 11:15:51 | 000,000,040 | —- | C] () – C:\Documents and Settings\Josh\Application Data\cdr.ini
[2009/06/24 16:52:32 | 000,059,112 | —- | C] () – C:\Documents and Settings\All Users\Application Data\2359.rtp
[2009/06/24 16:52:16 | 000,078,933 | —- | C] () – C:\Documents and Settings\All Users\Application Data\adobetmp000115831
[2009/02/28 22:47:59 | 000,000,118 | —- | C] () – C:\WINDOWS\System32\MRT.INI
[2009/02/19 11:13:27 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\bisldaqo.dll
[2009/02/13 12:16:42 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\hfqogxro.dll
[2009/02/07 21:54:21 | 000,000,155 | —- | C] () – C:\WINDOWS\wininit.ini
[2009/01/21 19:44:29 | 000,000,069 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2008/10/16 12:29:14 | 000,000,531 | —- | C] () – C:\WINDOWS\MaxwellRender.ini
[2008/10/06 19:09:38 | 002,463,976 | —- | C] () – C:\WINDOWS\System32\NPSWF32.dll
[2008/06/03 18:31:33 | 000,004,593 | —- | C] () – C:\WINDOWS\xnview.ini
[2008/05/31 23:13:10 | 000,053,299 | —- | C] () – C:\WINDOWS\System32\pthreadVC.dll
[2008/03/24 22:51:01 | 001,210,935 | —- | C] () – C:\Program Files\.png
[2008/02/12 10:57:45 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\dtbtqkqr.dll
[2008/02/12 10:55:20 | 000,000,739 | —- | C] () – C:\WINDOWS\System32\mimmxdiw.dll
[2008/02/02 19:47:44 | 000,000,000 | —- | C] () – C:\Documents and Settings\Josh\Application Data\CopyToGo.dat
[2007/12/28 15:14:07 | 000,000,761 | —- | C] () – C:\WINDOWS\m3jp2k.ini
[2007/12/28 15:14:07 | 000,000,702 | —- | C] () – C:\WINDOWS\mmtvmj.ini
[2007/12/28 15:14:06 | 000,000,714 | —- | C] () – C:\WINDOWS\m3jpeg.ini
[2007/12/28 15:13:59 | 000,761,856 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2007/11/30 21:19:12 | 000,000,024 | —- | C] () – C:\Documents and Settings\Josh\Local Settings\Application Data\37562-11537-09847-00QV1-78241
[2007/11/16 13:56:33 | 000,000,069 | —- | C] () – C:\WINDOWS\ccolwiz.ini
[2007/09/15 23:20:05 | 000,000,221 | —- | C] () – C:\WINDOWS\HPPREC~1.INI
[2007/04/25 17:20:16 | 000,000,048 | —- | C] () – C:\WINDOWS\wpd99.drv
[2007/04/25 17:16:21 | 000,118,834 | —- | C] () – C:\WINDOWS\System32\pdfmona.dll
[2007/04/25 17:16:21 | 000,046,700 | —- | C] () – C:\WINDOWS\System32\pdfmon.dll
[2007/04/04 21:11:48 | 000,000,032 | —- | C] () – C:\WINDOWS\CD_Start.INI
[2007/03/01 19:14:18 | 000,000,095 | —- | C] () – C:\WINDOWS\OPHC.ini
[2007/01/23 15:02:40 | 000,000,383 | —- | C] () – C:\WINDOWS\System32\haspdos.sys
[2006/07/19 21:35:42 | 000,001,443 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2006/07/18 22:05:20 | 000,074,129 | —- | C] () – C:\Documents and Settings\Josh\Application Data\PatchUpdate_HP_CounterReport_Update_HPSU.log
[2006/07/18 22:05:20 | 000,000,227 | —- | C] () – C:\WINDOWS\HP_CounterReport_Update_HPSU.ini
[2006/07/18 22:04:58 | 000,002,034 | —- | C] () – C:\Documents and Settings\Josh\Application Data\HPSU_48BitScanUpdate.log
[2006/07/18 22:04:58 | 000,000,214 | —- | C] () – C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2006/07/18 21:58:43 | 000,005,561 | —- | C] () – C:\Documents and Settings\Josh\Application Data\GdiplusUpgrade_MSIApproach_Wrapper.log
[2006/07/18 21:58:43 | 000,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2006/07/18 21:56:49 | 000,063,704 | —- | C] () – C:\Documents and Settings\Josh\Application Data\Update_HP_RedboxHprblog_HPSU.log
[2006/07/18 21:56:49 | 000,000,221 | —- | C] () – C:\WINDOWS\HP_RedboxHprblog_HPSU.ini
[2006/06/06 09:10:04 | 000,001,755 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2006/05/29 10:19:20 | 000,000,186 | —- | C] () – C:\WINDOWS\DVDXRestrictionFree.ini
[2006/05/29 10:19:20 | 000,000,014 | —- | C] () – C:\WINDOWS\System32\SysEngine2.SYS
[2006/05/24 11:01:58 | 000,000,014 | —- | C] () – C:\WINDOWS\System32\systeminfo.dll
[2006/04/17 18:41:23 | 000,007,918 | —- | C] () – C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006/02/21 12:23:25 | 000,000,000 | —- | C] () – C:\WINDOWS\iPlayer.INI
[2006/02/10 11:08:05 | 000,000,000 | —- | C] () – C:\WINDOWS\muveeapp.INI
[2006/02/07 15:17:58 | 000,000,000 | —- | C] () – C:\WINDOWS\mtstack16.INI
[2006/02/07 12:22:04 | 000,000,754 | —- | C] () – C:\WINDOWS\WORDPAD.INI
[2006/02/06 00:45:30 | 000,025,754 | —- | C] () – C:\Documents and Settings\Josh\Application Data\wklnhst.dat
[2006/02/04 12:29:42 | 000,164,352 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2006/02/04 12:29:42 | 000,019,968 | —- | C] () – C:\WINDOWS\System32\cpuinf32.dll
[2006/02/04 11:59:57 | 000,000,127 | —- | C] () – C:\Documents and Settings\Josh\Local Settings\Application Data\fusioncache.dat
[2006/02/04 11:12:26 | 000,082,432 | —- | C] () – C:\Documents and Settings\Josh\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/01/25 08:24:04 | 000,077,824 | —- | C] () – C:\WINDOWS\System32\hpzids01.dll
[2005/11/25 16:30:18 | 000,107,008 | —- | C] () – C:\WINDOWS\System32\ff_realaac.dll
[2005/11/25 16:30:18 | 000,057,344 | —- | C] () – C:\WINDOWS\System32\ff_kerneldeint.dll
[2005/11/25 14:45:40 | 000,049,152 | —- | C] () – C:\WINDOWS\System32\TomsMoComp_ff.dll
[2005/11/25 14:45:38 | 001,115,648 | —- | C] () – C:\WINDOWS\System32\libavcodec.dll
[2005/11/25 14:45:38 | 000,164,352 | —- | C] () – C:\WINDOWS\System32\libmplayer.dll
[2005/11/25 14:45:38 | 000,043,520 | —- | C] () – C:\WINDOWS\System32\libmpeg2_ff.dll
[2005/11/25 14:45:36 | 000,196,608 | —- | C] () – C:\WINDOWS\System32\ff_x264.dll
[2005/11/25 14:45:36 | 000,107,008 | —- | C] () – C:\WINDOWS\System32\ff_theora.dll
[2005/11/25 14:45:36 | 000,049,664 | —- | C] () – C:\WINDOWS\System32\ff_tremor.dll
[2005/11/25 14:45:36 | 000,037,888 | —- | C] () – C:\WINDOWS\System32\ff_unrar.dll
[2005/11/25 14:45:36 | 000,023,552 | —- | C] () – C:\WINDOWS\System32\ff_wmv9.dll
[2005/11/25 14:45:34 | 000,186,880 | —- | C] () – C:\WINDOWS\System32\ff_libfaad2.dll
[2005/11/25 14:45:34 | 000,122,880 | —- | C] () – C:\WINDOWS\System32\ff_libdts.dll
[2005/11/25 14:45:34 | 000,115,200 | —- | C] () – C:\WINDOWS\System32\ff_samplerate.dll
[2005/11/25 14:45:34 | 000,086,528 | —- | C] () – C:\WINDOWS\System32\ff_libmad.dll
[2005/11/25 14:45:34 | 000,049,664 | —- | C] () – C:\WINDOWS\System32\ff_liba52.dll
[2005/10/15 15:45:54 | 000,421,888 | —- | C] () – C:\WINDOWS\System32\OpenQuicktimeLib.dll
[2005/10/15 15:45:44 | 000,129,024 | —- | C] () – C:\WINDOWS\System32\ff_mpeg2enc.dll
[2005/05/07 01:34:33 | 000,209,040 | —- | C] () – C:\WINDOWS\System32\IVIresizeW7.dll
[2005/05/07 01:34:33 | 000,204,944 | —- | C] () – C:\WINDOWS\System32\IVIresizeA6.dll
[2005/05/07 01:34:33 | 000,196,752 | —- | C] () – C:\WINDOWS\System32\IVIresizeP6.dll
[2005/05/07 01:34:33 | 000,196,752 | —- | C] () – C:\WINDOWS\System32\IVIresizeM6.dll
[2005/05/07 01:34:33 | 000,192,656 | —- | C] () – C:\WINDOWS\System32\IVIresizePX.dll
[2005/05/07 01:34:33 | 000,024,720 | —- | C] () – C:\WINDOWS\System32\IVIresize.dll
[2005/05/07 01:22:47 | 000,015,669 | —- | C] () – C:\WINDOWS\System32\oeminfo.ini
[2005/02/12 00:33:06 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2004/08/07 05:16:44 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2004/08/07 05:10:08 | 000,000,885 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/07 04:57:54 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2004/08/04 00:00:00 | 000,003,584 | —- | C] () – C:\WINDOWS\System32\ms.dll
[2004/06/02 17:28:30 | 000,086,016 | —- | C] () – C:\WINDOWS\System32\btprn2k.dll
[2004/01/13 10:46:34 | 000,172,032 | —- | C] () – C:\WINDOWS\System32\tifmicon.dll
[2003/02/10 01:13:10 | 000,000,416 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\systmsp2pb6
[2002/11/09 02:04:42 | 000,225,280 | —- | C] () – C:\WINDOWS\System32\qtmlClient.dll
[2002/03/16 16:00:00 | 000,007,420 | —- | C] () – C:\WINDOWS\UA000106.DLL
[2001/11/14 13:56:00 | 001,802,240 | —- | C] () – C:\WINDOWS\System32\lcppn21.dll
[2001/08/27 01:36:16 | 000,032,768 | —- | C] () – C:\WINDOWS\System32\HPNVRamStrings.dll
[2001/08/15 12:48:11 | 000,000,536 | -H– | C] () – C:\Documents and Settings\Josh\Application Data\winpmltspb6
[2001/07/06 14:30:00 | 000,003,399 | —- | C] () – C:\WINDOWS\System32\hptcpmon.ini
[1998/06/11 14:08:06 | 000,095,232 | —- | C] () – C:\WINDOWS\System32\Lfkodak.dll
[1998/06/11 14:08:04 | 000,306,688 | —- | C] () – C:\WINDOWS\System32\Lffpx7.dll

========== LOP Check ==========

[2007/01/26 09:43:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Abvent
[2008/12/03 08:28:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\acccore
[2010/05/12 08:44:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AIM
[2008/12/03 08:28:51 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AIM Toolbar
[2006/02/04 10:06:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alias
[2009/12/26 15:57:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Autodesk
[2010/11/02 09:28:20 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG10
[2010/10/30 22:01:37 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\avg9
[2008/01/03 13:03:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Azureus
[2010/11/02 09:27:26 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\Common Files
[2010/10/30 21:59:29 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MFAData
[2005/05/07 01:49:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2009/10/20 12:31:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2008/07/13 20:22:19 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2010/04/15 18:02:10 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Screentime
[2009/12/19 23:23:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Seagate
[2010/05/07 15:45:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2009/11/23 17:22:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2009/06/18 08:16:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2008/05/02 19:05:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WinZip
[2008/01/12 10:12:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Zabersoft
[2010/05/06 13:39:46 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
[2009/04/29 17:18:58 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/10/06 11:08:33 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{A87EB928-0C6C-4071-AEF1-59E32BAEDF1B}
[2007/01/26 09:43:52 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Abvent
[2008/02/08 12:05:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\acccore
[2006/02/04 10:06:07 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Alias
[2009/03/22 14:24:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Amazon
[2009/02/20 13:48:14 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Any Video Converter
[2009/12/26 15:50:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Autodesk
[2010/11/02 09:31:07 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\AVG10
[2011/01/01 05:45:45 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Azureus
[2007/05/25 12:38:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Chief Architect Full Version 11
[2008/03/14 11:19:55 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\COWON
[2010/10/26 11:53:18 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Digiarty
[2006/10/19 00:22:32 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\DWGEditor
[2010/07/23 22:04:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\E-centives
[2007/01/24 20:45:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Graphisoft
[2007/10/15 10:27:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Image Zone Express
[2009/11/10 15:23:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\interfaceFlor.45D5AF30A8931A45757578C849E007913FED925B.1
[2006/02/04 11:50:28 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\InterVideo
[2009/05/26 12:34:22 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\IObit
[2009/05/03 08:24:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\iWin
[2007/01/24 10:28:17 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Kensington
[2006/02/06 09:47:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Leadertech
[2009/05/25 22:21:23 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\MalwareRemovalBot
[2006/04/04 19:32:41 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\MayaWebBrowser
[2006/02/10 11:08:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\muvee Technologies
[2009/10/20 12:31:18 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\NCH Swift Sound
[2010/07/31 10:44:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Opera
[2007/10/15 10:27:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Printer Info Cache
[2009/02/28 21:22:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Sammsoft
[2010/12/27 22:43:41 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Software Informer
[2009/10/06 11:08:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Stardock
[2007/08/25 09:29:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Teleca
[2006/02/06 00:45:31 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Template
[2009/02/06 11:31:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Twain
[2009/10/20 16:10:18 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Ulead Systems
[2008/05/02 13:46:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Josh\Application Data\Viewpoint
[2011/01/10 11:41:28 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2010/12/30 22:45:00 | 000,000,420 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{33225BFF-48E1-43EB-AFC6-84B1DDAA2F63}.job
[2010/12/27 22:37:45 | 000,000,304 | —- | M] () – C:\WINDOWS\Tasks\WefiStartup.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011/01/10 12:20:57 | 000,032,836 | —- | M] () – C:\aaw7boot.log
[2010/05/12 05:37:48 | 000,083,486 | —- | M] () – C:\acadminidump.dmp
[2007/10/26 13:53:02 | 000,000,167 | —- | M] () – C:\bcmwl5.log
[2008/03/11 18:33:49 | 000,000,211 | —- | M] () – C:\Boot.bak
[2010/12/04 22:56:46 | 000,000,281 | RHS- | M] () – C:\boot.ini
[2004/08/03 22:00:00 | 000,260,272 | —- | M] () – C:\cmldr
[2009/05/27 10:54:28 | 000,027,859 | —- | M] () – C:\ComboFix.txt
[2004/04/02 14:28:58 | 000,018,518 | —- | M] () – C:\CrcCheck.exe
[2007/10/30 10:12:40 | 000,000,698 | —- | M] () – C:\deltaStartup.log
[2006/05/23 10:25:23 | 003,420,323 | —- | M] (Copyright © 2003-2006 DVD X Studios. ) – C:\DVDCopyToolsSetup.exe
[2007/05/19 08:25:42 | 000,000,000 | —- | M] () – C:\DVDPATH.TXT
[2007/08/14 10:09:25 | 000,000,000 | —- | M] () – C:\dxfimportlog.txt
[2004/04/02 14:28:48 | 000,000,395 | —- | M] () – C:\file_id.diz
[2010/01/29 17:57:46 | 166,612,480 | —- | M] () – C:\HDM2009Special_ea.msi
[2006/02/07 12:12:59 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/05/12 08:45:04 | 000,001,116 | -H– | M] () – C:\IPH.PH
[2010/06/05 16:28:53 | 000,000,241 | —- | M] () – C:\ISYSERROR.LOG
[2008/05/13 10:37:16 | 000,000,000 | —- | M] () – C:\Log.txt
[2008/03/07 16:33:12 | 000,000,477 | —- | M] () – C:\LOG3D.log
[2010/02/03 16:17:31 | 000,000,358 | —- | M] () – C:\LogEnbWinV.txt
[2010/02/03 16:17:31 | 000,000,029 | —- | M] () – C:\LogProsType.txt
[2010/12/29 08:35:46 | 000,104,715 | —- | M] () – C:\mombi.log
[2006/02/07 12:12:59 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/08/04 00:00:00 | 000,047,564 | RHS- | M] () – C:\ntdetect.com
[2008/05/28 08:50:46 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/01/10 12:20:59 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2004/04/02 14:28:58 | 000,000,067 | —- | M] () – C:\paradox.dll
[2001/10/05 21:58:02 | 000,216,576 | —- | M] () – C:\paradox.exe
[2004/04/02 14:28:44 | 001,604,472 | —- | M] () – C:\pdxzb20.008
[2004/04/01 20:31:30 | 000,005,739 | —- | M] () – C:\pH.nfo
[2007/02/27 22:34:47 | 000,000,015 | —- | M] () – C:\plugin.ini
[2007/08/19 20:34:36 | 000,000,104 | —- | M] () – C:\Shortcut to Internet Explorer.lnk
[2005/10/31 07:56:00 | 000,700,416 | —- | M] (LimeWire) – C:\StubInstaller.exe
[2007/11/14 11:20:58 | 002,686,232 | —- | M] (Microsoft Corporation) – C:\vcredist_x86.exe
[2006/06/06 20:15:56 | 000,000,009 | —- | M] () – C:\VO.log
[2007/09/10 23:11:57 | 000,000,656 | —- | M] () – C:\vraylog.txt
[2009/05/25 23:40:12 | 000,000,274 | —- | M] () – C:\VundoFix.txt
[2009/12/13 21:01:36 | 000,000,237 | —- | M] () – C:\WMDiag.log
[1 C:\*.tmp files -> C:\*.tmp -> ]

< %systemroot%\Fonts\*.com >
[2006/04/18 14:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 13:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 13:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/08/07 04:57:38 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 04:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2006/03/22 20:08:20 | 000,074,240 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp463.dll
[2005/06/20 23:32:04 | 000,030,802 | R— | M] (Oki Data Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\OPHCPP3.DLL
[2008/07/06 02:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2009/12/03 15:27:42 | 000,750,592 | —- | M] (7art-screensavers.com) – C:\WINDOWS\Freezelight Clock.scr
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >
[2008/03/10 23:15:24 | 000,001,626 | -H– | M] () – C:\Documents and Settings\Josh\Application Data\Microsoft\LastFlashConfig.WFC
[2010/11/02 09:22:10 | 000,005,239 | —- | M] () – C:\Documents and Settings\Josh\Application Data\Microsoft\stor.cfg

< %PROGRAMFILES%\*.* >
[2008/04/07 13:15:13 | 001,210,935 | —- | M] () – C:\Program Files\.png
[2009/09/09 02:31:49 | 000,004,608 | -HS- | M] () – C:\Program Files\Thumbs.db

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004/08/06 21:45:26 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2004/08/06 21:45:26 | 000,634,880 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2004/08/06 21:45:26 | 000,892,928 | —- | M] () – C:\WINDOWS\system32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lîk /x >
[2008/05/28 08:57:53 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
[2009/06/01 22:35:27 | 000,001,566 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Microsoft Update.lnk
[2005/05/07 01:24:11 | 000,001,122 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\MSN Encarta Plus.lnk
[2006/02/04 10:25:34 | 000,000,324 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\My Bluetooth Places.lnk
[2008/10/09 19:54:24 | 000,001,912 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Program Updates.lnk
[2008/05/28 08:57:53 | 000,001,563 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk
[2004/08/07 04:58:34 | 000,000,398 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Windows Catalog.lnk
[2010/11/02 12:48:27 | 000,001,507 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >
[2009/12/27 22:11:22 | 000,007,168 | -HS- | M] () – C:\WINDOWS\system32\Thumbs.db
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Mikzosoft\Internet Explorer\Quick Launch\*.lnk /x >

< %USERPROFILE%\Deskuop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >


< MD5 for: EXPLORER.DESIGNER.VB >
[2008/07/30 06:54:20 | 000,036,545 | —- | M] () MD5=0BFA552D19A4A7F9130A71DFBBCB1407 – C:\Documents and Settings\All Users\Application Data\Microsoft\VSTAHost\Architecture2010\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.designer.vb

< MD5 for: EXPLORER.EX_ >
[2004/08/04 05:00:00 | 000,359,533 | —- | M] () MD5=4F061B12F3D5457315A0314954E7EF46 – C:\I386\EXPLORER.EX_

< MD5 for: EXPLORER.EXE >
[2008/04/13 16:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 – C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2007/06/13 03:26:03 | 001,033,216 | —- | M] (Microsoft Corporation) MD5=7712DF0CDDE3A5AC89843E61CD5B3658 – C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007/06/13 02:23:07 | 001,033,216 | —- | M] (Microsoft Corporation) MD5=97BD6515465659FF8F3B7BE375B2EA87 – C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2004/08/04 00:00:00 | 001,032,192 | —- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 – C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2008/04/13 16:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) MD5=F54D30E8C799B962C380EA2961C74733 – C:\WINDOWS\explorer.exe

< MD5 for: EXPLORER.EXE-082F38A9.PF >
[2010/12/31 09:05:26 | 000,070,902 | —- | M] () MD5=DF64B91B118186AB35F2380CC2089E95 – C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf

< MD5 for: EXPLORER.HTM >
[2005/10/03 14:11:52 | 000,002,225 | —- | M] () MD5=27E8E84DB81847B335D3C78356EAEB78 – C:\Program Files\Alias\DirectConnect 2.0\docs\en_US\wwhelp\wwhimpl\java\html\explorer.htm
[2005/10/03 14:11:50 | 000,002,225 | —- | M] () MD5=27E8E84DB81847B335D3C78356EAEB78 – C:\Program Files\Alias\DirectConnect 2.0\docs\ja_JP\wwhelp\wwhimpl\java\html\explorer.htm

< MD5 for: EXPLORER.ICO >
[2007/06/08 14:56:30 | 000,085,182 | —- | M] () MD5=35683653F733C9D69952A702A43A8903 – C:\Icons\aqcua_win\The Icons\Explorer.ico

< MD5 for: EXPLORER.JPG >
[2006/01/19 23:58:34 | 000,135,923 | —- | M] () MD5=BFE5B2F982612906D8AA56BB9CDCF23A – C:\Documents and Settings\Josh\Application Data\U3\000018714310008C\79EB5C19-AB0E-4dd7-BE89-BF96301D35Z8\Exec\images\explorer.jpg
[2006/04/26 00:21:10 | 000,129,517 | —- | M] () MD5=D9E6E0A766C1E0FC1790705A7308FBF8 – C:\Documents and Settings\Josh\Application Data\U3\000018714310008C\79EB5C19-AB0E-4dd7-BE89-BF96301D35Z8\Exec\images\japanese\explorer.jpg

< MD5 for: EXPLORER.RESX >
[2008/07/30 06:54:20 | 000,040,049 | —- | M] () MD5=B16D2C77324DE7222CB0EA55C7B32784 – C:\Documents and Settings\All Users\Application Data\Microsoft\VSTAHost\Architecture2010\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.resx

< MD5 for: EXPLORER.SC_ >
[2004/08/04 05:00:00 | 000,000,181 | —- | M] () MD5=BC5B38879C56DFBC05C8B5C43AC4D739 – C:\I386\EXPLORER.SC_

< MD5 for: EXPLORER.SCF >
[2004/08/04 00:00:00 | 000,000,080 | —- | M] () MD5=A3975A7D2C98B30A2AE010754FFB9392 – C:\WINDOWS\explorer.scf

< MD5 for: EXPLORER.VB >
[2008/07/30 06:54:20 | 000,008,501 | —- | M] () MD5=55808E7AF87B5C18B97707BEF8EBDDEA – C:\Documents and Settings\All Users\Application Data\Microsoft\VSTAHost\Architecture2010\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vb

< MD5 for: EXPLORER.VSTEMPLATE >
[2008/07/30 06:54:20 | 000,006,491 | —- | M] () MD5=FB731348042E3356E2215A6747CE893C – C:\Documents and Settings\All Users\Application Data\Microsoft\VSTAHost\Architecture2010\9.0\ItemTemplatesCache\VisualBasic\Windows Forms\1033\Explorer.zip\explorer.vstemplate

< MD5 for: EXPLORER.ZIP >
[2008/07/30 06:54:22 | 000,024,306 | —- | M] () MD5=15FB707D04E269482E95D08430955719 – C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\ItemTemplates\VisualBasic\Windows Forms\1033\Explorer.zip

< MD5 for: WINLOGON.EX_ >
[2004/08/04 05:00:00 | 000,261,115 | —- | M] () MD5=F41C4F5745589D0BB8268C02B71594CA – C:\I386\WINLOGON.EX_

< MD5 for: WINLOGON.EXE >
[2004/08/04 00:00:00 | 000,502,272 | —- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE – C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008/04/13 16:12:39 | 000,507,904 | —- | M] (Microsoft Corporation) MD5=5FAC810673F3BC3E9965AD9468788120 – C:\WINDOWS\system32\winlogon.exe
[2008/04/13 16:12:39 | 000,507,904 | —- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E – C:\WINDOWS\ServicePackFiles\i386\winlogon.exe

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-12-16 06:09:22

========== Alternate Data Streams ==========

@Alternate Data Stream - 195 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:639F0420
@Alternate Data Stream - 144 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:16E029F0

< End of report >


Here is the second File, Extras.txt;

OTL Extras logfile created on: 1/10/2011 12:46:21 PM - Run 1
OTL by OldTimer - Version 3.2.20.1 Folder = C:\Documents and Settings\Josh\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 82.00% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 93.16 Gb Total Space | 10.26 Gb Free Space | 11.02% Space Free | Partition Type: NTFS

Computer Name: DESIGN_CENTRAL | User Name: Josh | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.txt [@ = Reg Error: Value error.] – Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"5353:TCP" = 5353:TCP:*:Disabled:Adobe CSI CS4
"3703:TCP" = 3703:TCP:*:Disabled:Adobe Version Cue CS4 Server
"3704:TCP" = 3704:TCP:*:Disabled:Adobe Version Cue CS4 Server
"51000:TCP" = 51000:TCP:*:Disabled:Adobe Version Cue CS4 Server
"51001:TCP" = 51001:TCP:*:Disabled:Adobe Version Cue CS4 Server
"1035:TCP" = 1035:TCP:*:Enabled:Akamai NetSession Interface
"5000:UDP" = 5000:UDP:*:Enabled:Akamai NetSession Interface

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Hp\HP Photosmart Pro B8300 series\Toolbox\HPWVTBX.exe" = C:\Program Files\Hp\HP Photosmart Pro B8300 series\Toolbox\HPWVTBX.exe:*:Enabled:Toolbox for HP Printing System for Windows – (Hewlett-Packard Company)
"C:\Program Files\Next Limit\Maxwell\mxcl.exe" = C:\Program Files\Next Limit\Maxwell\mxcl.exe:*:Enabled:mxcl – ()
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader – (AOL LLC)
"C:\Program Files\AIM6\aim6.exe" = C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM – File not found
"C:\Program Files\Google\Google SketchUp 6\SketchUp.exe" = C:\Program Files\Google\Google SketchUp 6\SketchUp.exe:*:Disabled:SketchUp Application – (Google, Inc.)
"C:\Program Files\Google\Google SketchUp 6\LayOut\LayOut.exe" = C:\Program Files\Google\Google SketchUp 6\LayOut\LayOut.exe:*:Disabled:LayOut – (Google, Inc.)
"C:\Program Files\Autodesk\Backburner\monitor.exe" = C:\Program Files\Autodesk\Backburner\monitor.exe:*:Enabled:backburner 2.3 monitor – (Autodesk, Inc.)
"C:\Program Files\Autodesk\Backburner\manager.exe" = C:\Program Files\Autodesk\Backburner\manager.exe:*:Enabled:backburner 2.3 manager – (Autodesk, Inc.)
"C:\Program Files\Autodesk\Backburner\server.exe" = C:\Program Files\Autodesk\Backburner\server.exe:*:Enabled:backburner 2.3 server – (Autodesk, Inc.)
"C:\Program Files\AVG\AVG8\avgemc.exe" = C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe – File not found
"C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe – File not found
"C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe – File not found
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox – (Mozilla Corporation)
"C:\Program Files\Revit Architecture 2009\Program\Revit.exe" = C:\Program Files\Revit Architecture 2009\Program\Revit.exe:*:Enabled:Revit Architecture 2009 – (Autodesk, Inc.)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)
"C:\Program Files\Autodesk\3ds Max 2009\3dsmax.exe" = C:\Program Files\Autodesk\3ds Max 2009\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2009 32-bit – (Autodesk, Inc.)
"C:\Documents and Settings\Josh\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" = C:\Documents and Settings\Josh\Local Settings\Application Data\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome – (Google Inc.)
"C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe" = C:\Program Files\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe:*:Disabled:Adobe Dreamweaver CS3 – File not found
"C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe" = C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe:*:Disabled:Adobe Illustrator CS3 – File not found
"C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe" = C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe:*:Disabled:Adobe InDesign CS3 – File not found
"C:\Program Files\Adobe\Acrobat 8.0\Designer 8.0\FormDesigner.exe" = C:\Program Files\Adobe\Acrobat 8.0\Designer 8.0\FormDesigner.exe:*:Disabled:Adobe LiveCycle Designer 8.0 – File not found
"C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe" = C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe:*:Disabled:Adobe Photoshop CS3 – File not found
"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Disabled:Adobe CSI CS4 – (Adobe Systems Incorporated)
"C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe" = C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe:*:Disabled:Adobe Version Cue CS4 Server – (Adobe Systems Incorporated)
"C:\WINDOWS\system32\mmc.exe" = C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console – (Microsoft Corporation)
"C:\Program Files\CTR Electronics\CSC Show Control 2.5\cscpro.exe" = C:\Program Files\CTR Electronics\CSC Show Control 2.5\cscpro.exe:*:Enabled:CSC Main Program File – (CTR Electronics 2009)
"C:\Program Files\VideoLAN\VLC\vlc.exe" = C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player – ()
"C:\Program Files\AIM\aim.exe" = C:\Program Files\AIM\aim.exe:*:Enabled:AIM – (AOL Inc.)
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser – (Opera Software)
"C:\Program Files\Azureus\Azureus.exe" = C:\Program Files\Azureus\Azureus.exe:*:Enabled:Azureus / Vuze – (Vuze Inc.)
"C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG Installer – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgdiagex.exe" = C:\Program Files\AVG\AVG10\avgdiagex.exe:*:Enabled:AVG Diagnostics 2011 – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgnsx.exe" = C:\Program Files\AVG\AVG10\avgnsx.exe:*:Enabled:Online Shield – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG10\avgemcx.exe" = C:\Program Files\AVG\AVG10\avgemcx.exe:*:Enabled:Personal E-mail Scanner – (AVG Technologies CZ, s.r.o.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}" = Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729
"{04E7A3BB-DB38-481C-A809-35FA60C78EDF}" = AVG 2011
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{0611BD4E-4FE4-4a62-B0C0-18A4CC463428}" = CP_Package_Variety1
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic Data Module
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0E73300E-52D9-4457-88C5-B8FD6A149697}" = Chief Architect 10.0 Tutorial Videos
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{12E75B98-8463-4C1F-8DDA-F6CF31566A55}" = Google SketchUp Pro 6
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{14866AAD-1F23-39AC-A62B-7091ED1ADE64}" = Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729
"{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}" = Adobe SGM CS4
"{15D91706-6ADF-44CF-9D7D-FF2D8ACD2C6F}" = LS_HSI
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1B7C06E1-4888-47A6-992A-0990B9683486}" = Adobe Version Cue CS4 Server
"{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A}" = CP_Package_Variety3
"{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}" = Adobe InDesign CS4
"{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}" = Adobe InDesign CS4 Icon Handler
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{21CF277E-80DD-4942-99B7-96F79C6E88E2}" = MPM
"{22DAFE84-E618-11D3-B2A7-080009FB4A19}" = HP PrecisionScan Pro 3.0
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java™ 6 Update 18
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{2A30052B-831C-41D3-8044-3C0388066350}" = Seagate Manager Installer
"{2BAF2B96-7560-48B4-87D4-10178DDBE217}" = Adobe InDesign CS4 Application Feature Set Files (Roman)
"{2FA41EBB-3F5A-35C3-85D6-51EC72A11FBD}" = Google Gears
"{303F7619-4E67-450F-985A-A2DF51B30AC8}" = Adobe Setup
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0150020}" = J2SE Runtime Environment 5.0 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{3254FD51-9910-48C4-AC9B-AF3691C1544C}" = TubeHunter Ultra
"{338F08AB-C262-42C7-B000-34DE1A475273}" = Ad-Aware Email Scanner for Outlook
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4BEF94-179B-43DC-8380-76EEC6DB5EF4}" = TubeHunter Ultra
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3D047C15-C859-45F7-81CE-F2681778069B}" = iPod for Windows 2006-01-10
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Backburner
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}" = ATI HYDRAVISION
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}" = HP Wireless Assistant 1.01 A2
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A52555C-032A-4083-BDD9-6A85ABFB39A8}" = Adobe SING CS4
"{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}" = Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729
"{534AA552-E1F1-4965-B2AA-FBDEB0730D60}" = muvee autoProducer 4.0 - SE
"{5421155F-B033-49DB-9B33-8F80F233D4D5}" = GdiplusUpgrade
"{547D4265-AF45-42E9-A62A-C58182AA35B9}" = Sentinel Protection Installer 7.0.0
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{55D9E026-DCB0-46FF-B60A-68B972228CF6}" = Autodesk Design Review 2010
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{572FBF5D-3BAA-42FF-A468-A54C2C0A17C3}" = Autodesk Revit Architecture 2010
"{5783F2D7-5001-0409-0002-0060B0CE6BBA}" = AutoCAD 2007 - English
"{59772D11-9D88-4020-838C-6F4864D0DE8A}" = Many Faces of Go 12
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}" = iTunes
"{612DC38A-B36A-4699-88EB-12C7394DE2FC}" = TIxx21
"{62B3ADDD-0509-A2FF-7269-C8A307088A3D}" = InterfaceFLOR Browser
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7884CC76-FAEE-43C2-BB7C-F54670452575}" = UGuide
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}" = 3dsmax ancillary install
"{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}" = Adobe InDesign CS4 Common Base Files
"{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Easy Internet Sign-up
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{818EA7B9-617A-4688-833D-256670950F5B}" = MSN SideGuide
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8D7BD6EE-C597-4375-B07F-A91FC78991C7}" = V-Ray for SketchUp 6
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90535871-81B9-4D99-8A13-A7EE97F2D7FE}" = Bluetooth by hp
"{90BC5F99-9172-43B1-805F-77BCC800CAB7}" = Opera 10.60
"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{95774351-6087-3A3B-8CA8-70BEE49D2BD5}" = Google Gears
"{98736A65-3C79-49EC-B7E9-A3C77774B0E6}" = Google SketchUp 6
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A346205-EA92-4406-B1AB-50379DA3F057}" = Autodesk DWF Viewer 7
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3A37DA6-70C0-497C-BCB1-148E9EC1D32E}" = Revit Architecture 2009
"{A770778F-9684-4B7E-9BF5-14448CD9A52D}" = Misc
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}" = HP Help and Support
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic Audio Module
"{AC76BA86-1033-F400-7760-000000000004}" = Adobe Acrobat 9 Pro - English, Français, Deutsch
"{AC76BA86-1033-F400-7760-000000000004}_941" = Adobe Acrobat 9.4.1 - CPSID_83708
"{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.5
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{AFA20D47-69C3-4030-8DF8-D37466E70F13}" = Apple Mobile Device Support
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic Copy Module
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B3276CB1-20B6-4AF9-AAEC-E72C83816495}" = IKEA Home Planner
"{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}" = Google SketchUp 6
"{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}" = Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B74D4E10-6884-0000-0000-000000000103}" = Adobe Bridge 1.0
"{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA}" = CP_Package_Variety2
"{B9F4561A-924D-4510-A85A-BB0960C338CB}" = Adobe Asset Services CS4
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BC7E2C06-D255-4300-AA12-33AB54D009AC}" = Adobe Creative Suite 4 Design Standard
"{BCE72AED-3332-4863-9567-C5DCB9052CA2}" = Netflix Movie Viewer
"{BE2DB46C-EA1A-434E-AABD-50EAF626EBEE}" = ASGvis Material Studio
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C12D609B-EB71-411B-82C3-9BE6D40435D7}" = Google SketchUp LayOut 6
"{C4124E95-5061-4776-8D5D-E3D931C778E1}" = Microsoft VC9 runtime libraries
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B}" = Acrobat.com
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEB326EC-8F40-47B2-BA22-BB092565D66F}" = Quick Launch Buttons 5.10 A2
"{D10EC365-8936-4B40-AE2E-FCDA61C326D3}" = Alias DirectConnect 2.0
"{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser
"{D6E4E5D6-7693-4BB4-95BA-21F38FAFEE90}" = Safari
"{D9432306-513A-4695-977E-FC6AD9C3ED98}" = IDX Renditioner Express Free
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{DBB61A16-A0E0-4EAB-9E59-D0F3B0299429}" = Maxwell Render
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB459C2F-41CA-4222-B9CA-F8EBA40B8DAB}" = Google SketchUp 6 Exporters
"{EE0D5DCD-2B97-4473-98DF-E93C0BD92F7A}" = Adobe Stock Photos 1.0
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F2981339-823E-4C62-9C6F-6733BAEE9EF5}" = Paragon Hard Disk Manager™ 2009 Special Edition
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4C68898-EBA5-46A9-82B3-2D30426086BF}" = AVG 2011
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"{F54FD0F6-5439-4412-A4FA-54E0D9D9BF8D}" = HP Photosmart Pro B8300 series Toolbox
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FDD8070F-E3B9-0409-822C-CCFE5E82C14D}" = Autodesk 3ds Max 2009 32-bit
"{FFFF6D5C-E2F1-4B40-BC89-8923312E89EB}}_is1" = ACE Mega CoDecS Pack
"7art Freezelight Clock Screensaver_is1" = 7art Freezelight Clock © 2010 by 7art-screensavers.com
"8461-7759-5462-8226" = Vuze
"Ad-Aware" = Ad-Aware
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"Adobe_1e3ba55b33b1e8227645fb9c82acca3" = Adobe Creative Suite 4 Design Standard
"AIM Toolbar" = AIM Toolbar
"AIM_7" = AIM 7
"Akamai" = Akamai NetSession Interface
"Alchemyst" = Alchemyst Screen Saver
"All ATI Software" = ATI - Software Uninstall Utility
"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.9
"Aplus DVD Ripper_is1" = Aplus DVD Ripper 8.79
"Ask Toolbar_is1" = Ask Toolbar
"ATI Display Driver" = ATI Display Driver
"Autodesk Design Review 2010" = Autodesk Design Review 2010
"Autodesk Revit Architecture 2010" = Autodesk Revit Architecture 2010
"Autodesk Revit Architecture 2010 SP2" = Autodesk Revit Architecture 2010 x86 Update 2
"Autodesk Student Community Download Tool_is1" = Autodesk Student Community Download Tool
"AVG" = AVG 2011
"AVI MPEG RM WMV Splitter_is1" = AVI/MPEG/RM/WMV Splitter 4.28
"Bejeweled Twist" = Bejeweled Twist (remove only)
"BFGC" = Big Fish Games Client
"BFG-Hidden Wonders of the Depths" = Hidden Wonders of the Depths
"Broadcom 802.11b Network Adapter" = Broadcom 802.11 Wireless LAN Adapter
"Carbonite Setup Lite" = Carbonite Online Backup Setup
"CINEMA 4D Release 10 Architecture Edition" = CINEMA 4D Release 10 Architecture Edition
"CNXT_MODEM_PCI_VEN_8086&DEV;_266D&SUBSYS;_3082103C" = Conexant Data Fax Modem with SmartCP
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Conexant PCI Audio" = Conexant AC-97 Audio
"Coupon Printer for Windows4.0" = Coupon Printer for Windows
"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows
"CSCSHOWCONTROL2_5_is1" = CSC Show Control v2.5.4.2
"Cubis Deluxe" = Cubis Deluxe
"DiscRipper_is1" = Nuclear Coffee - DiscRipper
"Disneynature - Oceans" = Disneynature - Oceans Screen Saver
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVDFab Decrypter_is1" = DVDFab Decrypter 3.0.5.0
"Entriq MediaSphere_is1" = Entriq MediaSphere [removed]
"EPSON Printer and Utilities" = EPSON Printer Software
"ERUNT_is1" = ERUNT 1.1j
"FBX Plugin 2006.08 for Max 9.0" = FBX Plugin 2006.08 for Max 9.0
"FBX Plugin 2009.0 for Max 2009" = FBX Plugin 2009.0 for Max 2009
"Fences" = Fences
"Ferrari 458 Italia" = Ferrari 458 Italia Screen Saver
"FLV Player" = FLV Player 2.0, build 23
"GOM Player" = GOM Player
"HaaliMkx" = Haali Media Splitter
"HijackThis" = HijackThis 2.0.2
"HotSpot! Audio Playback Pad" = HotSpot! Audio Playback Pad
"HP Photosmart Pro B8300 series" = HP Photosmart Pro B8300 series
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{2A30052B-831C-41D3-8044-3C0388066350}" = Seagate Manager Installer
"InstallShield_{3D047C15-C859-45F7-81CE-F2681778069B}" = iPod for Windows 2006-01-10
"InstallShield_{612DC38A-B36A-4699-88EB-12C7394DE2FC}" = Texas Instruments PCIxx21/x515 drivers.
"InstallShield_{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Easy Internet Sign-up
"interfaceFlor.45D5AF30A8931A45757578C849E007913FED925B.1" = InterfaceFLOR Browser
"Magic ISO Maker v5.4 (build 0239)" = Magic ISO Maker v5.4 (build 0239)
"Maxwell" = Maxwell
"MaxwellExport_is1" = MaxwellExport (Version 1.8b)
"MaxwellMax" = Maxwell Plugin for 3D Studio Max
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Money2005b" = Microsoft Money 2005
"Mozilla Firefox (3.6.11)" = Mozilla Firefox (3.6.11)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PeerGuardian_is1" = PeerGuardian 2.0
"Rainbow Sentinel Driver" = Sentinel System Driver
"RealPlayer 12.0" = RealPlayer
"SnowFox DVD Ripper_is1" = SnowFox DVD Ripper [removed]
"Software Informer_is1" = Software Informer 1.0 BETA
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"SoundTap" = SoundTap Streaming Audio Recorder
"Switch" = Switch Sound File Converter
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Text Specialist" = Text Specialist
"Tudor Speed" = Tudor Speed Screen Saver
"UnixUtils for Yahoo! Widgets" = Unix Utilities for Yahoo! Widgets
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VLC media player 1.1.5
"Vuze_Remote Toolbar" = Vuze Remote Toolbar
"WeFi" = WeFi [removed]
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"winpcap-nmap" = winpcap-nmap 4.02
"WinRAR archiver" = WinRAR archiver
"WinX DVD Ripper Platinum_is1" = WinX DVD Ripper Platinum 6.0.0
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yahoo! Central" = Yahoo! Central
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Toolbar" = Yahoo! Toolbar
"Yahoo! Widget Engine" = Yahoo! Widgets
"YInstHelper" = Yahoo! Install Manager

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"HuluDesktop" = HuluDesktop
"Move Media Player" = Move Media Player

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 12/14/2010 2:57:14 PM | Computer Name = DESIGN_CENTRAL | Source = EvntAgnt | ID = 3005
Description = Error positioning to end of log file – seek to end of log failed.
Handle
specified is 601240. Return code from ReadEventLog is 1500.

Error - 12/22/2010 5:21:20 AM | Computer Name = DESIGN_CENTRAL | Source = Application Error | ID = 1000
Description = Faulting application chrome.exe, version 0.0.0.0, faulting module
aduigp.dll, version 9.2.0.112, fault address 0x00009496.

Error - 12/22/2010 5:58:15 AM | Computer Name = DESIGN_CENTRAL | Source = Application Error | ID = 1000
Description = Faulting application chrome.exe, version 0.0.0.0, faulting module
aduigp.dll, version 9.2.0.112, fault address 0x00009496.

Error - 12/22/2010 6:07:38 AM | Computer Name = DESIGN_CENTRAL | Source = Application Error | ID = 1000
Description = Faulting application chrome.exe, version 0.0.0.0, faulting module
aduigp.dll, version 9.2.0.112, fault address 0x00009496.

Error - 12/23/2010 12:24:21 PM | Computer Name = DESIGN_CENTRAL | Source = Lavasoft Ad-Aware Service | ID = 0
Description =

Error - 12/31/2010 1:04:13 PM | Computer Name = DESIGN_CENTRAL | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.

Error - 1/6/2011 2:21:43 AM | Computer Name = DESIGN_CENTRAL | Source = EventSystem | ID = 4609
Description = The COM+ Event System detected a bad return code during its internal
processing. HRESULT was 8007043C from line 44 of d:\comxp_sp3\com\com1x\src\events\tier1\eventsystemobj.cpp.
Please contact Microsoft Product Support Services to report this erro

[ System Events ]
Error - 1/10/2011 1:46:44 PM | Computer Name = DESIGN_CENTRAL | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
Avgldx86 Avgmfx86 eabfiltr Fips intelppm SASKUTIL UimBus Uim_IM

Error - 1/10/2011 1:46:48 PM | Computer Name = DESIGN_CENTRAL | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 1/10/2011 1:50:40 PM | Computer Name = DESIGN_CENTRAL | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

Error - 1/10/2011 1:51:57 PM | Computer Name = DESIGN_CENTRAL | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

Error - 1/10/2011 2:02:17 PM | Computer Name = DESIGN_CENTRAL | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

Error - 1/10/2011 3:47:06 PM | Computer Name = DESIGN_CENTRAL | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service StiSvc with
arguments "" in order to run the server: {A1F4E726-8CF1-11D1-BF92-0060081ED811}

Error - 1/10/2011 4:10:10 PM | Computer Name = DESIGN_CENTRAL | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
Avgldx86 Avgmfx86 eabfiltr Fips intelppm SASKUTIL UimBus Uim_IM

Error - 1/10/2011 4:10:43 PM | Computer Name = DESIGN_CENTRAL | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 1/10/2011 4:22:33 PM | Computer Name = DESIGN_CENTRAL | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 1/10/2011 4:22:46 PM | Computer Name = DESIGN_CENTRAL | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
Avgldx86 Avgmfx86 eabfiltr Fips intelppm SASKUTIL UimBus Uim_IM


< End of report >
Post #4
Hi martindz9,

I also have my Operation system restore disc.

Is that retail XP disk or one that come with the computer to restore it to factory condition?
Post #6 last edited
Hi martindz9,

Ok we'll make a CD to use. We will be working in the Recovery Console and safe mode. You can print out these instructions for reference or if possible view them from another computer.

Please read the instuctions and ask any questions if they are not clear.

Burn recovery console cd
  • Download recovery_console_cd.zip file to your drive and extract it to its own folder (c:\recoverycd for example).
  • Download Home
  • Rename the floppy disk setup package to Bootdisk.exe.
  • Insert a blank cd into your burner.
  • Double-click the RecoveryCD.bat file and follow the prompts to burn a cd that will allow you to boot to the recovery console.

Once the CD is made use it to boot the computer.
  • Make sure the computer is set to boot from the CD (you may have that option with the F12 key or will need to set in in the bios. The key to press to enter the bios should appear during startup. It may say something like "Press X key to enter set up.)
  • Insert the CD in the computer
  • Reboot the computer

1. Click to select any options that are required to start the computer from the CD-ROM drive if you are prompted.
2. When the "Welcome to Setup" screen appears, press R to start the Recovery Console.
3. You should now see a list of installations and the prompt "Which Windows Installation would you like to log on to?"
Select the appropriate number for the Windows installation that you want to repair. If you only have one, press 1.
4. When you are prompted, type the Administrator password. If the administrator password is blank, just press ENTER.

You should now have a C:\windows> prompt (if it's anything else, STOP, let me know what you see)

type the following lines hitting enter after each one

ren explorer.exe explorer.old
cd system32
ren winlogon.exe winlogon.old
cd "C:\WINDOWS\ServicePackFiles\i386"
copy explorer.exe C:\Windows
copy winlogon.exe C:\Windows\System32

note:

In the first line there is a space after ren and one after .exe
After hitting enter you should get a new prompt

in the 2nd line there is a space after cd
After hitting enter the new prompt should be C:\Windows\System32

In the 3rd line there is a space after ren and one after .exe
After hitting enter you should get a new prompt

In the 4th line there is a space after cd
After hitting enter the new prompt should be C:\WINDOWS\ServicePackFiles\i386

In the 5th line there is a space after copy and one after .exe
After hitting enter you should get a new prompt with the message 1 file(s) copied

In the 6th line there is a space after copy and one after .exe
After hitting enter you should get a new prompt with the message 1 file(s) copied

If you had any problems or did not see the commands executed properly let me know right away. Do not continue.

If all went as it should have type exit and hit enter. Remove the CD and allow the computer to restart.

Important - When restarting boot to safe mode.

Run the OTL fix below. When OTL reboots your computer please boot to Normal Windows.



Next, Double click on OTL.exe
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
  • Do Not copy the word CODE
  • please note the fix starts with the :
:Services

:OTL
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:50370
FF - prefs.js..network.proxy.http_port: 50370
FF - prefs.js..network.proxy.type: 1
DRV - File not found [Kernel | Boot | Stopped] – C:\WINDOWS\System32\drivers\giwbwxqs.sys – (hbnqrhkg)
O4 - HKLM..\Run: [svchost] C:\Documents and Settings\Josh\Application Data\Microsoft\svchost.exe File not found
F3 - HKCU WinNT: Load - (C:\DOCUME~1\Josh\LOCALS~1\Temp\dwm.exe) - C:\DOCUME~1\Josh\LOCALS~1\Temp\dwm.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O20 - HKCU Winlogon: Shell - (C:\Documents and Settings\Josh\Application Data\Microsoft\Windows\shell.exe) - C:\Documents and Settings\Josh\Application Data\Microsoft\Windows\shell.exe File not found
[2008/02/12 10:57:45 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\dtbtqkqr.dll
[2008/02/12 10:55:20 | 000,000,739 | —- | C] () – C:\WINDOWS\System32\mimmxdiw.dll

:Reg

:Files

:Commands
[purity]
[emptytemp]
[createrestorepoint]
[Reboot]

Then click the Run Fix button at the top
  • Let the program run unhindered
  • Please save the resulting log to be posted in your next reply.
Please post the OTL fix log
Post #9
Okay, I finally got it to work, here is the log that showed up after the reboot into windows (normal). All processes killed ========== SERVICES/DRIVERS ========== ========== OTL ========== HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer| /E : value set successfully! Prefs.js: 50370 removed from network.proxy.http_port Prefs.js: 1 removed from network.proxy.type Service hbnqrhkg stopped successfully! Service hbnqrhkg deleted successfully! File C:\WINDOWS\System32\drivers\giwbwxqs.sys not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\svchost deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\Load:C:\DOCUME~1\Josh\LOCALS~1\Temp\dwm.exe deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Infodelivery\ deleted successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Documents and Settings\Josh\Application Data\Microsoft\Windows\shell.exe deleted successfully. C:\WINDOWS\system32\dtbtqkqr.dll moved successfully. C:\WINDOWS\system32\mimmxdiw.dll moved successfully. ========== REGISTRY ========== ========== FILES ========== ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 70726 bytes ->Apple Safari cache emptied: 14336 bytes User: All Users User: Application Data User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 32902 bytes ->Flash cache emptied: 41085 bytes User: Josh ->Temp folder emptied: 1325760928 bytes ->Temporary Internet Files folder emptied: 64000865 bytes ->Java cache emptied: 72782933 bytes ->FireFox cache emptied: 55652369 bytes ->Google Chrome cache emptied: 6954253 bytes ->Apple Safari cache emptied: 16353280 bytes ->Opera cache emptied: 10237857 bytes ->Flash cache emptied: 2627252 bytes User: LocalService ->Temp folder emptied: 66016 bytes ->Temporary Internet Files folder emptied: 1427970 bytes ->Flash cache emptied: 578 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 2522072 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 26873 bytes %systemroot%\System32 .tmp files removed: 2577 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 110723777 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 91457174 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 73314 bytes RecycleBin emptied: 4554423 bytes Total Files Cleaned = 1,684.00 mb Error starting restore point: The function was called in safe mode. Error closing restore point: The sequence number is invalid. OTL by OldTimer - Version 3.2.20.1 log created on 01122011_133158 Files\Folders moved on Reboot… Registry entries deleted on Reboot…
Post #10
Hi martindz9,

Good jod! Are you experiencing any symptoms new or old?


Download AVPTool from Here to your desktop

Run the programme you have just downloaded to your desktop (it will be randomly named )

First we will run a virus scan
On the first tab check all elements down to Computer and then select start scan
Once it has finished select report and post that.

[external image: Posted Image]

Do not close AVPTool or it will self uninstall, if it does uninstall - then just rerun the setup file on your desktop

Now an analysis scan
Select the Manual Disinfection tab
Press the Gather System Information button
Once done Open the last report saved folder then attach the zip file to your next post zip
The file is located at C:\Users\your name\Desktop\Virus Removal Tool\setup_9.0.0.722_05.01.2011_20-34\LOG\avptool_sysinfo.zip

[external image: Posted Image]

Please post back with both logs.

Thanks
Post #11
Okay here is the data from the first scan and the zip file from the the second scan. Windows update did a system reboot for an update before I could stop it, so I had do do the scan again. During the scan two warning popped up about Trojans, and I clicked to ignore it as I felt that was probably the safest thing to do. JM Autoscan: malfunction (events: 1, objects: 0, time: Unknown) 1/14/2011 10:20:40 AM Task started Autoscan: completed 1 minute ago (events: 6, objects: 658032, time: 04:17:29) 1/14/2011 11:44:27 AM Task started 1/14/2011 3:54:35 PM Detected: Trojan-Dropper.Win32.Agent.dubg C:\WINDOWS\system32\dll 1/14/2011 3:55:12 PM Untreated: Trojan-Dropper.Win32.Agent.dubg C:\WINDOWS\system32\dll Skipped by user 1/14/2011 3:56:36 PM Detected: Trojan.Win32.Patched.lk C:\WINDOWS\system32\winlogon.old 1/14/2011 3:56:50 PM Untreated: Trojan.Win32.Patched.lk C:\WINDOWS\system32\winlogon.old Skipped by user 1/14/2011 4:01:59 PM Task completed 📎avptool_sysinfo.zip
Post #12 last edited
Hi martindz9,

Something new may have crept in. First though:

Vuze
You have Vuze, a P2P/file sharing program installed on your computer. P2P applications like it are the largest source of malware we see. It's not the program itself that is the problem but what can be downloaded with it usually from an unknown source. You'll be doing yourself a favor by removing it.

References for the risk of these programs can be found in these links:
http://www.microsoft.com/windows/ie/commun…protection.mspx

http://www.internetworldstats.com/articles…cles/art053.htm

I would recommend that you uninstall Vuze, however that choice is up to you. If you choose to remove this program, you can do so via Control Panel >> Add or Remove Programs.

If you wish to keep it, please do not use it until your computer is cleaned.


Next
  • Double click on OTL.exe to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • UNCheck the boxes beside LOP Check and Purity Check.
  • In the window under Custom Scans/Fixes copy and paste the following

    CREATERESTOREPOINT
    /md5start
    winlogon.*
    explorer.*
    dll
    /md5stop
    C:\WINDOWS\system32\dll\*.* /s

  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open a notepad windows. OTL.Txt no Extras.Txt this time.

Please post back with
  • OTL.txt
Thanks
Post #14 last edited
martindz9,

Please do not attach the logs unless specifically requested. Please copy and paste them into your replies.


I need some information on some unidentified files. We will use Virustotal Please submit these files for analysis

To submit a file to virustotal, please click on this link

VirusTotal

copy and paste the following into the upload a file box (one at a time if more than one file is listed)

C:\WINDOWS\System32\bisldaqo.dll
C:\WINDOWS\System32\hfqogxro.dll
C:\Documents and Settings\All Users\Application Data\systmsp2pb6
C:\Documents and Settings\Josh\Application Data\winpmltspb6



scroll down a bit and click "send file", wait for the results and post them in your next reply.

If it's says the file has already been analysed, please click "Reanalyse"

Please note that sometimes the scans take a few minutes. Please ensure that the scan has completed and the results are complete before submitting the next sample. Also please make sure each result is clearly identified as to which sample they belong to.


Next, Double click on OTL.exe
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
  • Do Not copy the word CODE
  • please note the fix starts with the :
:Services

:Files
C:\WINDOWS\system32\winlogon.old
C:\WINDOWS\explorer.old
C:\WINDOWS\system32\dll

:Commands
[Reboot]

Then click the Run Fix button at the top
  • Let the program run unhindered
  • Please save the resulting log to be posted in your next reply.
Please post the OTL fix log .

Please post back with
  • VirusTotal results
  • OTL fix log
How is the computer running?

Thanks
Post #15
Here are the Virus Total Scans, OTL did not output a txt file like it normal did nor did it pop one up after reboot which it has done in the past? The computer seems to be running fine, a pop up for connecting a dialup connection, this happens only after startup and the box stops popping up after you close it a number of times. I have not run any programs as of yet so on that front I'm not sure. File name: bisldaqo.dll Submission date: 2011-01-15 20:45:55 (UTC) Current status: finished Result: 0/ 43 (0.0%) Antivirus Version Last update Result AhnLab-V3 2011.01.15.01 2011.01.15 - AntiVir 7.11.1.145 2011.01.15 - Antiy-AVL 2.0.3.7 2011.01.15 - Avast 4.8.1351.0 2011.01.15 - Avast5 5.0.677.0 2011.01.15 - AVG 10.0.0.1190 2011.01.15 - BitDefender 7.2 2011.01.15 - CAT-QuickHeal 11.00 2011.01.15 - ClamAV 0.96.4.0 2011.01.15 - Command 5.2.11.5 2011.01.15 - Comodo 7401 2011.01.15 - DrWeb 5.0.2.03300 2011.01.15 - Emsisoft 5.1.0.1 2011.01.15 - eSafe 7.0.17.0 2011.01.13 - eTrust-Vet 36.1.8100 2011.01.14 - F-Prot 4.6.2.117 2011.01.15 - F-Secure 9.0.16160.0 2011.01.15 - Fortinet 4.2.254.0 2011.01.15 - GData 21 2011.01.15 - Ikarus T3.1.1.97.0 2011.01.15 - Jiangmin 13.0.900 2011.01.15 - K7AntiVirus 9.75.3548 2011.01.14 - Kaspersky 7.0.0.125 2011.01.15 - McAfee 5.400.0.1158 2011.01.15 - McAfee-GW-Edition 2010.1C 2011.01.15 - Microsoft 1.6402 2011.01.15 - NOD32 5790 2011.01.15 - Norman 6.06.12 2011.01.15 - nProtect 2011-01-15.01 2011.01.15 - Panda 10.0.2.7 2011.01.15 - PCTools 7.0.3.5 2011.01.15 - Prevx 3.0 2011.01.15 - Rising 22.82.05.00 2011.01.15 - Sophos 4.61.0 2011.01.15 - SUPERAntiSpyware 4.40.0.1006 2011.01.15 - Symantec 20101.3.0.103 2011.01.15 - TheHacker 6.7.0.1.115 2011.01.14 - TrendMicro 9.120.0.1004 2011.01.15 - TrendMicro-HouseCall 9.120.0.1004 2011.01.15 - VBA32 3.12.14.2 2011.01.14 - VIPRE 8080 2011.01.15 - ViRobot 2011.1.15.4256 2011.01.15 - VirusBuster 13.6.148.0 2011.01.15 - MD5: 8e1d254ad75b4adea676a4aedd90535f SHA1: e84625c949cde36d5d6548718d032770a4e47757 SHA256: aa1830fb4d5ead0b57913f5ba51d3a792a1d5a816ecd0c74717dd590e37bb6f9 File size: 741 bytes Scan date: 2011-01-15 20:45:55 (UTC) File name: hfqogxro.dll Submission date: 2011-01-15 20:52:28 (UTC) Current status: finished Result: 0/ 43 (0.0%) Antivirus Version Last update Result AhnLab-V3 2011.01.15.01 2011.01.15 - AntiVir 7.11.1.145 2011.01.15 - Antiy-AVL 2.0.3.7 2011.01.15 - Avast 4.8.1351.0 2011.01.15 - Avast5 5.0.677.0 2011.01.15 - AVG 10.0.0.1190 2011.01.15 - BitDefender 7.2 2011.01.15 - CAT-QuickHeal 11.00 2011.01.15 - ClamAV 0.96.4.0 2011.01.15 - Command 5.2.11.5 2011.01.15 - Comodo 7401 2011.01.15 - DrWeb 5.0.2.03300 2011.01.15 - Emsisoft 5.1.0.1 2011.01.15 - eSafe 7.0.17.0 2011.01.13 - eTrust-Vet 36.1.8100 2011.01.14 - F-Prot 4.6.2.117 2011.01.15 - F-Secure 9.0.16160.0 2011.01.15 - Fortinet 4.2.254.0 2011.01.15 - GData 21 2011.01.15 - Ikarus T3.1.1.97.0 2011.01.15 - Jiangmin 13.0.900 2011.01.15 - K7AntiVirus 9.75.3548 2011.01.14 - Kaspersky 7.0.0.125 2011.01.15 - McAfee 5.400.0.1158 2011.01.15 - McAfee-GW-Edition 2010.1C 2011.01.15 - Microsoft 1.6402 2011.01.15 - NOD32 5790 2011.01.15 - Norman 6.06.12 2011.01.15 - nProtect 2011-01-15.01 2011.01.15 - Panda 10.0.2.7 2011.01.15 - PCTools 7.0.3.5 2011.01.15 - Prevx 3.0 2011.01.15 - Rising 22.82.05.00 2011.01.15 - Sophos 4.61.0 2011.01.15 - SUPERAntiSpyware 4.40.0.1006 2011.01.15 - Symantec 20101.3.0.103 2011.01.15 - TheHacker 6.7.0.1.115 2011.01.14 - TrendMicro 9.120.0.1004 2011.01.15 - TrendMicro-HouseCall 9.120.0.1004 2011.01.15 - VBA32 3.12.14.2 2011.01.14 - VIPRE 8080 2011.01.15 - ViRobot 2011.1.15.4256 2011.01.15 - VirusBuster 13.6.148.0 2011.01.15 - MD5: 8e1d254ad75b4adea676a4aedd90535f SHA1: e84625c949cde36d5d6548718d032770a4e47757 SHA256: aa1830fb4d5ead0b57913f5ba51d3a792a1d5a816ecd0c74717dd590e37bb6f9 File size: 741 bytes Scan date: 2011-01-15 20:52:28 (UTC) File name: systmsp2pb6 Submission date: 2011-01-15 20:55:21 (UTC) Current status: finished Result: 0/ 43 (0.0%) Antivirus Version Last update Result AhnLab-V3 2011.01.15.01 2011.01.15 - AntiVir 7.11.1.145 2011.01.15 - Antiy-AVL 2.0.3.7 2011.01.15 - Avast 4.8.1351.0 2011.01.15 - Avast5 5.0.677.0 2011.01.15 - AVG 10.0.0.1190 2011.01.15 - BitDefender 7.2 2011.01.15 - CAT-QuickHeal 11.00 2011.01.15 - ClamAV 0.96.4.0 2011.01.15 - Command 5.2.11.5 2011.01.15 - Comodo 7401 2011.01.15 - DrWeb 5.0.2.03300 2011.01.15 - Emsisoft 5.1.0.1 2011.01.15 - eSafe 7.0.17.0 2011.01.13 - eTrust-Vet 36.1.8100 2011.01.14 - F-Prot 4.6.2.117 2011.01.15 - F-Secure 9.0.16160.0 2011.01.15 - Fortinet 4.2.254.0 2011.01.15 - GData 21 2011.01.15 - Ikarus T3.1.1.97.0 2011.01.15 - Jiangmin 13.0.900 2011.01.15 - K7AntiVirus 9.75.3548 2011.01.14 - Kaspersky 7.0.0.125 2011.01.15 - McAfee 5.400.0.1158 2011.01.15 - McAfee-GW-Edition 2010.1C 2011.01.15 - Microsoft 1.6402 2011.01.15 - NOD32 5790 2011.01.15 - Norman 6.06.12 2011.01.15 - nProtect 2011-01-15.01 2011.01.15 - Panda 10.0.2.7 2011.01.15 - PCTools 7.0.3.5 2011.01.15 - Prevx 3.0 2011.01.15 - Rising 22.82.05.00 2011.01.15 - Sophos 4.61.0 2011.01.15 - SUPERAntiSpyware 4.40.0.1006 2011.01.15 - Symantec 20101.3.0.103 2011.01.15 - TheHacker 6.7.0.1.115 2011.01.14 - TrendMicro 9.120.0.1004 2011.01.15 - TrendMicro-HouseCall 9.120.0.1004 2011.01.15 - VBA32 3.12.14.2 2011.01.14 - VIPRE 8080 2011.01.15 - ViRobot 2011.1.15.4256 2011.01.15 - VirusBuster 13.6.148.0 2011.01.15 - MD5: 9ae5d20e0a216ebf5e3d4d1fa0dcd3c3 SHA1: 9cb2a43a55194b3061f808b9de8be7dfde21122c SHA256: 8a853de660d9bdcc33890f2c9e228c7fab42ca4e365672bc96d63c1fe3637c8a File size: 416 bytes Scan date: 2011-01-15 20:55:21 (UTC) File name: winpmltspb6 Submission date: 2011-01-15 20:57:30 (UTC) Current status: finished Result: 0/ 43 (0.0%) Antivirus Version Last update Result AhnLab-V3 2011.01.15.01 2011.01.15 - AntiVir 7.11.1.145 2011.01.15 - Antiy-AVL 2.0.3.7 2011.01.15 - Avast 4.8.1351.0 2011.01.15 - Avast5 5.0.677.0 2011.01.15 - AVG 10.0.0.1190 2011.01.15 - BitDefender 7.2 2011.01.15 - CAT-QuickHeal 11.00 2011.01.15 - ClamAV 0.96.4.0 2011.01.15 - Command 5.2.11.5 2011.01.15 - Comodo 7401 2011.01.15 - DrWeb 5.0.2.03300 2011.01.15 - Emsisoft 5.1.0.1 2011.01.15 - eSafe 7.0.17.0 2011.01.13 - eTrust-Vet 36.1.8100 2011.01.14 - F-Prot 4.6.2.117 2011.01.15 - F-Secure 9.0.16160.0 2011.01.15 - Fortinet 4.2.254.0 2011.01.15 - GData 21 2011.01.15 - Ikarus T3.1.1.97.0 2011.01.15 - Jiangmin 13.0.900 2011.01.15 - K7AntiVirus 9.75.3548 2011.01.14 - Kaspersky 7.0.0.125 2011.01.15 - McAfee 5.400.0.1158 2011.01.15 - McAfee-GW-Edition 2010.1C 2011.01.15 - Microsoft 1.6402 2011.01.15 - NOD32 5790 2011.01.15 - Norman 6.06.12 2011.01.15 - nProtect 2011-01-15.01 2011.01.15 - Panda 10.0.2.7 2011.01.15 - PCTools 7.0.3.5 2011.01.15 - Prevx 3.0 2011.01.15 - Rising 22.82.05.00 2011.01.15 - Sophos 4.61.0 2011.01.15 - SUPERAntiSpyware 4.40.0.1006 2011.01.15 - Symantec 20101.3.0.103 2011.01.15 - TheHacker 6.7.0.1.115 2011.01.14 - TrendMicro 9.120.0.1004 2011.01.15 - TrendMicro-HouseCall 9.120.0.1004 2011.01.15 - VBA32 3.12.14.2 2011.01.14 - VIPRE 8080 2011.01.15 - ViRobot 2011.1.15.4256 2011.01.15 - VirusBuster 13.6.148.0 2011.01.15 - MD5: d9f4dbc6379bf4efc4546d6f74dca286 SHA1: e2095c02470db6fc51e79a652bc45c735a2cd4ba SHA256: 5cd391e21b6c95e59972c2af164a95134edbf39a980059d85b2769d279a0888c File size: 536 bytes Scan date: 2011-01-15 20:57:30 (UTC)

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI