jeezjj
Topic Starter
We seem to be having a pretty major malware problem. Avira started detecting events this morning and there is a long list I can post here. We have at least one unwanted program that downloaded while we were at work- whitesmoke translator. IE has been blocked by the windows firewall and mozilla homepage has been redirected to www.flyingincognitosleep.com
I will post the avira info then follow your directions.
Any help would be greatly appreciated.
Exported events:
1/19/2011 8:03 PM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\18\1a3207d2-2f51718d'
contained a virus or unwanted program 'JAVA/Small.Z' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '47a93cdd.qua'.
1/19/2011 6:44 PM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\58\1554d1ba-6119eb31'
contained a virus or unwanted program 'JAVA/OpenConnect.AI' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '47aa2137.qua'.
1/19/2011 8:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ihnj\setup.exe.
Action performed: Allow access
1/19/2011 8:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ihnj\setup.exe.
Action performed: Deny access
1/19/2011 8:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ihnj\setup.exe.
Action performed: Deny access
1/19/2011 8:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ppju\setup.exe.
Action performed: Allow access
1/19/2011 8:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ppju\setup.exe.
Action performed: Deny access
1/19/2011 8:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ppju\setup.exe.
Action performed: Deny access
1/19/2011 8:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\nfpw\setup.exe.
Action performed: Allow access
1/19/2011 8:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\nfpw\setup.exe.
Action performed: Deny access
1/19/2011 8:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\nfpw\setup.exe.
Action performed: Deny access
1/19/2011 7:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ahrx\setup.exe.
Action performed: Allow access
1/19/2011 7:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ahrx\setup.exe.
Action performed: Deny access
1/19/2011 7:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ahrx\setup.exe.
Action performed: Deny access
1/19/2011 7:40 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\vkyq\setup.exe.
Action performed: Allow access
1/19/2011 7:40 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\vkyq\setup.exe.
Action performed: Deny access
1/19/2011 7:40 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\vkyq\setup.exe.
Action performed: Deny access
1/19/2011 7:30 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\pash\setup.exe.
Action performed: Allow access
1/19/2011 7:30 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\pash\setup.exe.
Action performed: Deny access
1/19/2011 7:30 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\pash\setup.exe.
Action performed: Deny access
1/19/2011 7:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\kgtr\setup.exe.
Action performed: Allow access
1/19/2011 7:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\kgtr\setup.exe.
Action performed: Deny access
1/19/2011 7:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\kgtr\setup.exe.
Action performed: Deny access
1/19/2011 7:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ggsn\setup.exe.
Action performed: Allow access
1/19/2011 7:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ggsn\setup.exe.
Action performed: Deny access
1/19/2011 7:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ggsn\setup.exe.
Action performed: Deny access
1/19/2011 7:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\batf\setup.exe.
Action performed: Allow access
1/19/2011 7:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\batf\setup.exe.
Action performed: Deny access
1/19/2011 7:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\batf\setup.exe.
Action performed: Deny access
1/19/2011 6:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\iyuq\setup.exe.
Action performed: Deny access
1/19/2011 6:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\iyuq\setup.exe.
Action performed: Deny access
1/19/2011 6:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\iyuq\setup.exe.
Action performed: Allow access
1/19/2011 6:48 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\0.9508023469067646.exe'
contained a virus or unwanted program 'TR/Vundo.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '574f531c.qua'.
1/19/2011 6:48 AM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\34\67113ae2-5ce8fd2d'
contained a virus or unwanted program 'TR/Vundo.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '4fd07c83.qua'.
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.9508023469067646.exe.
Action performed: Deny access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.9508023469067646.exe.
Action performed: Allow access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.9508023469067646.exe.
Action performed: Deny access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\jar_cache7313325374916226741.tmp.
Action performed: Allow access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\34\67113ae2-5ce8fd2d-temp.
Action performed: Allow access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\34\67113ae2-5ce8fd2d.
Action performed: Allow access
1/19/2011 6:35 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\21.862796099677823.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
An error has occurred and the file was not deleted. ErrorID: 26004.
The source file could not be found.
Attempting to perform action using the ARK library.
The file could not be copied to quarantine!
The file does not exist!
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\0.26533051345930936.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '0d660864.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\0.5336287408281505.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '5f3a528c.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\21.862796099677823.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '47a27d28.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\9\58413909-786b27d6'
contained a virus or unwanted program 'JAVA/Agent.AD.1' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '6b5347dc.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\10\4c562fca-430b006f'
contained a virus or unwanted program 'JAVA/OpenStream.AB.1' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '51cd58b4.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\50\170b44f2-5b95de1f'
contained a virus or unwanted program 'JAVA/CV-2010-0094.E' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '2edb6ae1.qua'.
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.26533051345930936.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\21.862796099677823.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\21.862796099677823.exe.
Action performed: Allow access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.26533051345930936.exe.
Action performed: Allow access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.26533051345930936.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.5336287408281505.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.5336287408281505.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\21.862796099677823.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.5336287408281505.exe.
Action performed: Allow access
OTL logfile created on: 1/19/2011 9:40:37 PM - Run 1
OTL by OldTimer - Version 3.2.20.2 Folder = C:\Documents and Settings\Jennifer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 77.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.77 Gb Total Space | 178.37 Gb Free Space | 76.63% Space Free | Partition Type: NTFS
Computer Name: JENS-OFFICE | User Name: Jennifer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/01/19 21:36:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
PRC - [2010/12/08 05:19:45 | 000,267,944 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/11/02 05:02:04 | 000,403,624 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2010/11/02 05:02:04 | 000,339,624 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
PRC - [2010/11/02 05:02:04 | 000,281,768 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/11/02 05:02:04 | 000,135,336 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010/10/27 19:17:52 | 000,207,424 | —- | M] (ArcSoft Inc.) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010/10/16 00:40:40 | 000,037,664 | —- | M] (Apple Inc.) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/08/25 10:27:44 | 000,309,824 | —- | M] (ArcSoft Inc.) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
PRC - [2010/03/24 05:04:16 | 000,076,968 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2010/03/18 10:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2010/01/22 08:56:24 | 000,112,592 | —- | M] (Threat Expert Ltd.) – C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
PRC - [2009/12/03 15:52:32 | 001,980,560 | R— | M] (Carbonite, Inc. (www.carbonite.com)) – C:\Program Files\Carbonite\Carbonite Backup\CarboniteService.exe
PRC - [2009/12/03 15:52:32 | 000,670,864 | R— | M] (Carbonite, Inc.) – C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe
PRC - [2009/02/23 07:05:34 | 000,111,856 | —- | M] (Yahoo! Inc) – C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
PRC - [2008/11/09 14:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/11/03 18:57:20 | 001,185,680 | —- | M] (American Express) – C:\Program Files\American Express Online Assistant\OnlineAssistant.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2008/02/19 11:16:56 | 008,253,440 | —- | M] (Netscape) – C:\Program Files\Netscape\Navigator 9\navigator.exe
PRC - [2007/05/25 09:38:46 | 000,112,176 | —- | M] (SingleClick Systems) – C:\Program Files\Dell Network Assistant\hnm_svc.exe
PRC - [2007/01/04 15:38:08 | 000,024,652 | —- | M] (Viewpoint Corporation) – C:\Program Files\Viewpoint\Common\ViewpointService.exe
PRC - [2006/09/11 03:40:32 | 000,218,032 | —- | M] (Macrovision Corporation) – C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
PRC - [2005/11/22 11:44:44 | 005,245,952 | —- | M] (Linksys) – C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
PRC - [2005/07/04 15:46:04 | 000,053,307 | —- | M] (GEMTEKS) – C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
========== Modules (SafeList) ==========
MOD - [2011/01/19 21:36:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
MOD - [2010/08/23 10:12:02 | 001,054,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Running] – – (WUSB54GCSVC)
SRV - File not found [Auto | Stopped] – – (RoxLiveShare9)
SRV - File not found [On_Demand | Stopped] – – (AppMgmt)
SRV - [2011/01/19 10:48:40 | 000,053,248 | —- | M] () [Auto | Stopped] – C:\WINDOWS\system32\6to4v32.dll – (6to4)
SRV - [2010/12/08 05:19:45 | 000,267,944 | —- | M] (Avira GmbH) [Auto | Running] – C:\Program Files\Avira\AntiVir Desktop\avguard.exe – (AntiVirService)
SRV - [2010/11/02 05:02:04 | 000,403,624 | —- | M] (Avira GmbH) [Auto | Running] – C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE – (AntiVirWebService)
SRV - [2010/11/02 05:02:04 | 000,339,624 | —- | M] (Avira GmbH) [Auto | Running] – C:\Program Files\Avira\AntiVir Desktop\avmailc.exe – (AntiVirMailService)
SRV - [2010/11/02 05:02:04 | 000,135,336 | —- | M] (Avira GmbH) [Auto | Running] – C:\Program Files\Avira\AntiVir Desktop\sched.exe – (AntiVirSchedulerService)
SRV - [2010/10/16 00:40:40 | 000,037,664 | —- | M] (Apple Inc.) [Auto | Running] – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe – (Apple Mobile Device)
SRV - [2010/03/18 10:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) [Auto | Running] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/03/15 10:50:36 | 001,142,224 | —- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\Spyware Doctor\pctsSvc.exe – (sdCoreService)
SRV - [2010/03/11 10:09:22 | 000,366,840 | —- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\Spyware Doctor\pctsAuxs.exe – (sdAuxService)
SRV - [2010/02/02 08:13:54 | 000,070,928 | —- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\Spyware Doctor\TFEngine\TFService.exe – (ThreatFire)
SRV - [2010/01/22 08:56:24 | 000,112,592 | —- | M] (Threat Expert Ltd.) [Auto | Running] – C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe – (Browser Defender Update Service)
SRV - [2009/12/03 15:52:32 | 001,980,560 | R— | M] (Carbonite, Inc. (www.carbonite.com)) [Auto | Running] – C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe – (CarboniteService)
SRV - [2008/12/07 15:09:38 | 000,085,096 | —- | M] (Autodesk) [On_Demand | Stopped] – C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe – (Autodesk Licensing Service)
SRV - [2008/11/09 14:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)
SRV - [2007/05/25 09:38:46 | 000,112,176 | —- | M] (SingleClick Systems) [Auto | Running] – C:\Program Files\Dell Network Assistant\hnm_svc.exe – (hnmsvc)
SRV - [2007/01/04 15:38:08 | 000,024,652 | —- | M] (Viewpoint Corporation) [Auto | Running] – C:\Program Files\Viewpoint\Common\ViewpointService.exe – (Viewpoint Manager Service)
========== Driver Services (SafeList) ==========
DRV - [2010/12/20 04:44:38 | 000,135,096 | —- | M] (Avira GmbH) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avipbb.sys – (avipbb)
DRV - [2010/11/22 05:42:16 | 000,061,960 | —- | M] (Avira GmbH) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\avgntflt.sys – (avgntflt)
DRV - [2010/05/10 12:41:30 | 000,067,656 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS – (SASKUTIL)
DRV - [2010/04/08 13:29:32 | 000,063,360 | —- | M] (PC Tools) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\pctplsg.sys – (pctplsg)
DRV - [2010/03/29 09:06:14 | 000,218,592 | —- | M] (PC Tools) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\PCTCore.sys – (PCTCore)
DRV - [2010/02/17 12:25:48 | 000,012,872 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys – (SASDIFSV)
DRV - [2010/02/05 09:17:56 | 000,233,136 | —- | M] (PC Tools) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\pctgntdi.sys – (pctgntdi)
DRV - [2010/02/02 08:13:54 | 000,059,664 | –S- | M] (PC Tools) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\TfSysMon.sys – (TfSysMon)
DRV - [2010/02/02 08:13:54 | 000,051,984 | –S- | M] (PC Tools) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\TfFsMon.sys – (TfFsMon)
DRV - [2010/02/02 08:13:54 | 000,033,552 | –S- | M] (PC Tools) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\TfNetMon.sys – (TfNetMon)
DRV - [2009/06/09 02:29:50 | 000,028,520 | —- | M] (Avira GmbH) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\ssmdrv.sys – (ssmdrv)
DRV - [2009/06/02 07:25:00 | 000,011,608 | —- | M] (Avira GmbH) [Kernel | System | Running] – C:\Program Files\Avira\AntiVir Desktop\avgio.sys – (avgio)
DRV - [2009/02/19 13:13:54 | 000,021,248 | —- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] – C:\Program Files\Common Files\Motive\MREMP50.sys – (MREMP50)
DRV - [2009/02/19 13:13:38 | 000,020,096 | —- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] – C:\Program Files\Common Files\Motive\MRESP50.sys – (MRESP50)
DRV - [2008/04/13 12:36:39 | 000,043,008 | —- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\amdagp.sys – (amdagp)
DRV - [2008/04/13 12:36:39 | 000,040,960 | —- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\sisagp.sys – (sisagp)
DRV - [2008/04/13 10:36:05 | 000,144,384 | —- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\hdaudbus.sys – (HDAudBus)
DRV - [2007/06/26 12:06:20 | 000,254,872 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\e1e5132.sys – (e1express) Intel®
DRV - [2007/06/13 18:41:44 | 004,403,712 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007/06/13 17:25:14 | 000,304,920 | —- | M] (Intel Corporation) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\iaStor.sys – (iaStor)
DRV - [2007/06/13 17:21:16 | 005,760,096 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\igxpmp32.sys – (ialm)
DRV - [2006/08/18 11:18:08 | 000,009,400 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLADResM.SYS – (DLADResM)
DRV - [2006/08/18 11:17:46 | 000,035,096 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLABMFSM.SYS – (DLABMFSM)
DRV - [2006/08/18 11:17:44 | 000,097,848 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAUDF_M.SYS – (DLAUDF_M)
DRV - [2006/08/18 11:17:44 | 000,094,648 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAUDFAM.SYS – (DLAUDFAM)
DRV - [2006/08/18 11:17:42 | 000,026,008 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAOPIOM.SYS – (DLAOPIOM)
DRV - [2006/08/18 11:17:40 | 000,032,472 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLABOIOM.SYS – (DLABOIOM)
DRV - [2006/08/18 11:17:38 | 000,104,472 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAIFS_M.SYS – (DLAIFS_M)
DRV - [2006/08/18 11:17:38 | 000,014,520 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAPoolM.SYS – (DLAPoolM)
DRV - [2006/08/11 09:05:58 | 000,051,768 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\DRVNDDM.SYS – (DRVNDDM)
DRV - [2006/08/11 08:35:18 | 000,012,920 | —- | M] (Roxio) [File_System | System | Running] – C:\WINDOWS\system32\drivers\DLACDBHM.SYS – (DLACDBHM)
DRV - [2006/08/11 08:35:16 | 000,028,184 | —- | M] (Roxio) [File_System | System | Running] – C:\WINDOWS\system32\drivers\DLARTL_M.SYS – (DLARTL_M)
DRV - [2006/07/21 09:21:26 | 000,099,176 | —- | M] (Sonic Solutions) [Kernel | Boot | Running] – C:\WINDOWS\System32\Drivers\DRVMCDB.SYS – (DRVMCDB)
DRV - [2005/11/03 19:39:02 | 000,245,504 | —- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\rt73.sys – (RT73)
DRV - [2004/08/03 20:29:56 | 001,897,408 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\nv4_mini.sys – (nv)
DRV - [2001/08/17 12:07:44 | 000,019,072 | —- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\sparrow.sys – (Sparrow)
DRV - [2001/08/17 12:07:42 | 000,030,688 | —- | M] (LSI Logic) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\sym_u3.sys – (sym_u3)
DRV - [2001/08/17 12:07:40 | 000,028,384 | —- | M] (LSI Logic) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\sym_hi.sys – (sym_hi)
DRV - [2001/08/17 12:07:36 | 000,032,640 | —- | M] (LSI Logic) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\symc8xx.sys – (symc8xx)
DRV - [2001/08/17 12:07:34 | 000,016,256 | —- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\symc810.sys – (symc810)
DRV - [2001/08/17 11:52:22 | 000,036,736 | —- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\ultra.sys – (ultra)
DRV - [2001/08/17 11:52:20 | 000,045,312 | —- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\ql12160.sys – (ql12160)
DRV - [2001/08/17 11:52:20 | 000,040,320 | —- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\ql1080.sys – (ql1080)
DRV - [2001/08/17 11:52:18 | 000,049,024 | —- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\ql1280.sys – (ql1280)
DRV - [2001/08/17 11:52:16 | 000,179,584 | —- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys – (dac2w2k)
DRV - [2001/08/17 11:52:12 | 000,017,280 | —- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\mraid35x.sys – (mraid35x)
DRV - [2001/08/17 11:52:00 | 000,026,496 | —- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\asc.sys – (asc)
DRV - [2001/08/17 11:51:58 | 000,014,848 | —- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\asc3550.sys – (asc3550)
DRV - [2001/08/17 11:51:56 | 000,005,248 | —- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\aliide.sys – (AliIde)
DRV - [2001/08/17 11:51:54 | 000,006,656 | —- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\cmdide.sys – (CmdIde)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client;=dell-usuk&channel;=us-smb&ibd;=3080510
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client;=dell-usuk&channel;=us-smb&ibd;=3080510
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client;=dell-usuk&channel;=us-smb&ibd;=3080510
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z007&form;=ZGAPHP
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client;=dell-usuk&channel;=us-smb&ibd;=3080510
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z007&form;=ZGAPHP
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/?fr=fp-yie8
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTe…-8&fr;=b1ie7
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://flyingincognitosleep.com/cgi-bin/h.pl
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = ;*.local
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=tb50fftrie7&query;="
FF - prefs.js..browser.search.selectedEngine: "AIM Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://flyingincognitosleep.com/cgi-bin/h.pl"
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {C73D32D1-835F-43B6-8151-8C5365059C66}:1.9.1
FF - prefs.js..extensions.enabledItems: {CE1701E9-00FA-4AB3-88AC-0E424249F7A4}:1.9.1
FF - prefs.js..extensions.enabledItems: {214F2009-B770-4270-9860-89CD8A50478F}:1.9.1
FF - prefs.js..extensions.enabledItems: {EA4C5146-8C4C-449A-9C25-4C435C87694A}:1.9.1
FF - prefs.js..extensions.enabledItems: {AF45588C-2174-415C-8493-40DAC4AB1C62}:1.9.1
FF - prefs.js..extensions.enabledItems: {5CDC00D3-983D-42BB-A673-966E5B0E2306}:1.9.1
FF - prefs.js..extensions.enabledItems: {87CA3053-8530-4233-A6C9-8D18285FB1E7}:1.9.1
FF - prefs.js..extensions.enabledItems: {C3F91810-FD9C-47BA-BF56-523B99848792}:1.9.1
FF - prefs.js..extensions.enabledItems: {86AE899F-3B6E-42D0-B054-301B77859398}:1.9.1
FF - prefs.js..extensions.enabledItems: {24AF10CD-D80F-4A93-B763-2B7CD1E15410}:1.9.1
FF - prefs.js..extensions.enabledItems: {EC6A3E63-0817-49DA-95A6-A23140F0FC7F}:1.9.1
FF - prefs.js..extensions.enabledItems: {538C6ACE-FB87-474C-A103-46FB5832D8BD}:1.9.1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.2.20100119091315
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=tb50fftrab&query;="
FF - user.js..browser.startup.homepage: "http://flyingincognitosleep.com/cgi-bin/h.pl"
FF - HKLM\software\mozilla\Firefox\Extensions\\{C73D32D1-835F-43B6-8151-8C5365059C66}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{C73D32D1-835F-43B6-8151-8C5365059C66} [2009/12/26 15:27:03 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{CE1701E9-00FA-4AB3-88AC-0E424249F7A4}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{CE1701E9-00FA-4AB3-88AC-0E424249F7A4} [2009/12/26 16:45:42 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{214F2009-B770-4270-9860-89CD8A50478F}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{214F2009-B770-4270-9860-89CD8A50478F} [2010/01/16 08:46:42 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{EA4C5146-8C4C-449A-9C25-4C435C87694A}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{EA4C5146-8C4C-449A-9C25-4C435C87694A}\ [2010/01/22 06:04:55 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{AF45588C-2174-415C-8493-40DAC4AB1C62}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{AF45588C-2174-415C-8493-40DAC4AB1C62} [2010/01/23 08:40:32 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{5CDC00D3-983D-42BB-A673-966E5B0E2306}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{5CDC00D3-983D-42BB-A673-966E5B0E2306}\ [2010/01/30 08:24:20 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{87CA3053-8530-4233-A6C9-8D18285FB1E7}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{87CA3053-8530-4233-A6C9-8D18285FB1E7}\ [2010/02/05 08:30:41 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{C3F91810-FD9C-47BA-BF56-523B99848792}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{C3F91810-FD9C-47BA-BF56-523B99848792}\ [2010/02/10 07:04:46 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{86AE899F-3B6E-42D0-B054-301B77859398}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{86AE899F-3B6E-42D0-B054-301B77859398} [2010/02/15 15:30:43 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{24AF10CD-D80F-4A93-B763-2B7CD1E15410}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{24AF10CD-D80F-4A93-B763-2B7CD1E15410}\ [2010/02/21 09:44:33 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{EC6A3E63-0817-49DA-95A6-A23140F0FC7F}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{EC6A3E63-0817-49DA-95A6-A23140F0FC7F} [2010/02/24 07:39:59 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{538C6ACE-FB87-474C-A103-46FB5832D8BD}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{538C6ACE-FB87-474C-A103-46FB5832D8BD}\ [2010/02/27 08:27:13 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/05/10 12:32:46 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/01/04 08:43:03 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/12/26 13:57:02 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Netscape Navigator 9.0.0.6\extensions\\Components: C:\Program Files\Netscape\Navigator 9\components [2010/12/26 13:57:02 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Netscape Navigator 9.0.0.6\extensions\\Plugins: C:\Program Files\Netscape\Navigator 9\plugins [2010/12/26 13:57:02 | 000,000,000 | —D | M]
[2008/06/17 18:02:04 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Extensions
[2011/01/19 07:30:41 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\extensions
[2009/09/02 07:29:21 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/02/19 13:56:28 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/07/22 18:57:34 | 000,000,000 | —D | M] (Power Twitter) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\extensions\{b2509cd4-17cd-45ed-8146-a82af038f493}
[2009/01/06 18:22:48 | 000,001,739 | —- | M] () – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\searchplugins\aim-search.xml
[2011/01/19 07:30:41 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2008/11/25 09:40:13 | 000,000,000 | —D | M] (American Express Online Assistant) – C:\Program Files\Mozilla Firefox\extensions\{6bae2634-6076-40a2-be93-600b67061f6c}
[2010/01/16 08:46:42 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{214F2009-B770-4270-9860-89CD8A50478F}
[2010/02/21 09:44:33 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{24AF10CD-D80F-4A93-B763-2B7CD1E15410}
[2010/02/27 08:27:13 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{538C6ACE-FB87-474C-A103-46FB5832D8BD}
[2010/01/30 08:24:20 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{5CDC00D3-983D-42BB-A673-966E5B0E2306}
[2010/02/15 15:30:43 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{86AE899F-3B6E-42D0-B054-301B77859398}
[2010/02/05 08:30:41 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{87CA3053-8530-4233-A6C9-8D18285FB1E7}
[2010/01/23 08:40:32 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{AF45588C-2174-415C-8493-40DAC4AB1C62}
[2010/02/10 07:04:46 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{C3F91810-FD9C-47BA-BF56-523B99848792}
[2009/12/26 15:27:03 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{C73D32D1-835F-43B6-8151-8C5365059C66}
[2009/12/26 16:45:42 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{CE1701E9-00FA-4AB3-88AC-0E424249F7A4}
[2010/01/22 06:04:55 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{EA4C5146-8C4C-449A-9C25-4C435C87694A}
[2010/02/24 07:39:59 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{EC6A3E63-0817-49DA-95A6-A23140F0FC7F}
[2008/12/12 23:43:17 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2007/04/16 11:07:12 | 000,180,293 | —- | M] () – C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
[2011/01/19 06:50:25 | 000,001,919 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\bing-zugo.xml
O1 HOSTS File: ([2009/07/30 10:38:01 | 000,000,022 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (WhiteSmoke Toolbar) - {52794457-af6c-4c50-9def-f2e24f4c8889} - C:\Program Files\whitesmoketoolbar\whitesmoketoolbarX.dll ()
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Online Assistant) - {F997ACBD-1292-4c74-B96B-83BA5665E260} - C:\Program Files\American Express Online Assistant\ietoolbar.dll (American Express)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKLM\..\Toolbar: (WhiteSmoke Toolbar) - {52794457-af6c-4c50-9def-f2e24f4c8889} - C:\Program Files\whitesmoketoolbar\whitesmoketoolbarX.dll ()
O3 - HKLM\..\Toolbar: (Online Assistant) - {D79C4ACF-F903-4854-95CA-CDE413AC7E18} - C:\Program Files\American Express Online Assistant\ietoolbar.dll (American Express)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\..\Toolbar\WebBrowser: (Online Assistant) - {D79C4ACF-F903-4854-95CA-CDE413AC7E18} - C:\Program Files\American Express Online Assistant\ietoolbar.dll (American Express)
O3 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Carbonite Backup] C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [ISUSPM Startup] c:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [{E3004CF3-65FE-B391-A4F3-F679A94B72C5}] C:\Documents and Settings\Jennifer\Application Data\Irba\rakib.exe ()
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [Aim6] File not found
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [ISUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe (Macrovision Corporation)
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\RunOnce: [Shockwave Updater] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Dell Network Assistant.lnk = C:\WINDOWS\Installer\{0240BDFB-2995-4A3F-8C96-18D41282B716}\Icon0240BDFB3.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launch Whitesmoke Translator.lnk = C:\Program Files\Whitesmoke Translator\WSTrayDictMode.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Online Assistant.lnk = C:\Program Files\American Express Online Assistant\OnlineAssistant.exe (American Express)
O4 - Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\efsoyb.exe ()
O4 - Startup: C:\Documents and Settings\Jennifer\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O15 - HKLM\..Trusted Domains: localhost ([]http in Local intranet)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} http://www.linkedin.com/cab/LinkedInContactFinderControl.cab (LinkedIn ContactFinderControl)
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} http://www.eset.eu/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} http://www.shockwave.com/content/chainz2/sis/mjolauncher.cab (MJLauncherCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com/activex/ractrl.cab?lmi=100 (Performance Viewer Activex Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (GTGina.dll) - C:\WINDOWS\System32\GTGina.dll (Gemtek)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Jennifer\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jennifer\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 11:04:08 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2\{54b6bb08-3dd1-11df-b8c2-001d0992444b}\Shell - "" = AutoRun
O33 - MountPoints2\{54b6bb08-3dd1-11df-b8c2-001d0992444b}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{54b6bb08-3dd1-11df-b8c2-001d0992444b}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a
O33 - MountPoints2\{d6bcafaa-626b-11de-b847-0016b654bb60}\Shell - "" = AutoRun
O33 - MountPoints2\{d6bcafaa-626b-11de-b847-0016b654bb60}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{d6bcafaa-626b-11de-b847-0016b654bb60}\Shell\AutoRun\command - "" = J:\StarterOfficeGuardian.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\…exe [@ = exefile] – Reg Error: Key error. File not found
NetSvcs: 6to4 - C:\WINDOWS\system32\6to4v32.dll ()
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (183790240530432)
========== Files/Folders - Created Within 30 Days ==========
[2011/01/19 21:36:42 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
[2011/01/19 20:14:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer\Application Data\whitesmoketoolbar
[2011/01/19 09:17:34 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Unity
[2011/01/19 07:40:49 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple Computer
[2011/01/19 07:40:49 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Apple Computer
[2011/01/19 06:51:25 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Mozilla
[2011/01/19 06:51:21 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\whitesmoketoolbar
[2011/01/19 06:51:02 | 000,000,000 | —D | C] – C:\Program Files\Whitesmoke Translator
[2011/01/19 06:51:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\WhiteSmoke Translator
[2011/01/19 06:50:59 | 000,000,000 | —D | C] – C:\Program Files\whitesmoketoolbar
[2011/01/19 06:50:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\%APPDATA%
[2011/01/19 06:47:57 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Adobe
[2011/01/18 23:10:05 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Application Data\Macromedia
[2011/01/18 22:52:43 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Sun
[2011/01/18 22:51:04 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2011/01/18 22:51:03 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Adobe
[2010/12/26 13:58:34 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2010/12/26 13:57:50 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/12/26 13:57:48 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/12/26 13:57:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/12/26 13:56:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\QuickTime
[2010/12/26 13:56:37 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/12/26 13:55:49 | 004,184,352 | —- | C] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/12/26 13:55:32 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/12/26 13:55:05 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/01/19 21:42:05 | 000,359,929 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\dds.scr
[2011/01/19 21:36:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
[2011/01/19 21:08:54 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/19 20:12:31 | 000,000,854 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Online Assistant.lnk
[2011/01/19 20:12:23 | 000,002,333 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Dell Network Assistant.lnk
[2011/01/19 20:11:45 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/01/19 20:11:44 | 3209,871,360 | -HS- | M] () – C:\hiberfil.sys
[2011/01/19 10:48:40 | 000,053,248 | —- | M] () – C:\WINDOWS\System32\6to4v32.dll
[2011/01/19 06:51:29 | 000,001,356 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Buy Whitesmoke Translator.lnk
[2011/01/19 06:51:28 | 000,001,725 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launch Whitesmoke Translator.lnk
[2011/01/19 06:51:02 | 000,001,453 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Launch WhiteSmoke Translator.lnk
[2011/01/18 10:31:01 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/01/16 19:05:16 | 000,026,624 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\Copy of playoffs 2010 week 2.xls
[2011/01/16 18:47:43 | 000,152,064 | —- | M] () – C:\Documents and Settings\Jennifer\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/15 16:08:10 | 001,215,575 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02857.JPG
[2011/01/15 16:08:02 | 001,253,441 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02856.JPG
[2011/01/15 16:06:58 | 001,302,227 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02855.JPG
[2011/01/15 16:06:46 | 001,305,501 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02854.JPG
[2011/01/15 16:06:24 | 000,385,706 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\MOV02853.MPG
[2011/01/15 16:06:24 | 000,004,820 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\MOV02853.THM
[2011/01/15 15:58:48 | 001,250,047 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02852.JPG
[2011/01/15 15:58:40 | 001,295,990 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02851.JPG
[2011/01/15 15:58:34 | 001,271,654 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02850.JPG
[2011/01/15 15:58:24 | 001,331,685 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02849.JPG
[2011/01/15 15:58:20 | 001,295,900 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02848.JPG
[2011/01/15 15:58:12 | 001,273,346 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02847.JPG
[2011/01/15 15:57:54 | 001,177,578 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02846.JPG
[2011/01/15 15:57:52 | 001,179,039 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02845.JPG
[2011/01/15 15:57:46 | 001,286,640 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02844.JPG
[2011/01/15 15:57:36 | 001,217,236 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02843.JPG
[2011/01/15 15:57:30 | 001,295,288 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02842.JPG
[2011/01/15 15:57:18 | 001,279,824 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02841.JPG
[2011/01/15 15:57:14 | 001,270,977 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02840.JPG
[2011/01/15 15:57:10 | 001,258,607 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02839.JPG
[2011/01/15 15:57:00 | 001,298,489 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02838.JPG
[2011/01/15 15:56:52 | 001,271,700 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02837.JPG
[2011/01/15 15:56:46 | 001,201,755 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02836.JPG
[2011/01/15 15:56:40 | 001,291,402 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02835.JPG
[2011/01/15 15:56:28 | 001,244,135 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02834.JPG
[2011/01/15 15:56:18 | 001,292,795 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02833.JPG
[2011/01/15 15:56:12 | 001,300,180 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02832.JPG
[2011/01/15 15:56:04 | 001,223,818 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02831.JPG
[2011/01/15 15:55:56 | 001,278,536 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02830.JPG
[2011/01/15 13:42:36 | 001,188,762 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02829.JPG
[2011/01/15 13:42:34 | 001,178,407 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02828.JPG
[2011/01/15 13:42:30 | 001,317,772 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02827.JPG
[2011/01/15 13:42:24 | 001,260,728 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02826.JPG
[2011/01/15 13:42:14 | 001,189,786 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02825.JPG
[2011/01/15 13:42:06 | 001,227,793 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02824.JPG
[2011/01/15 13:42:04 | 001,248,037 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02823.JPG
[2011/01/15 13:41:26 | 001,207,968 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02822.JPG
[2011/01/15 13:41:20 | 001,219,691 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02821.JPG
[2011/01/15 13:41:16 | 001,186,309 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02820.JPG
[2011/01/15 13:40:40 | 001,261,162 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02819.JPG
[2011/01/15 13:40:30 | 001,165,114 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02818.JPG
[2011/01/15 13:40:18 | 001,316,342 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02817.JPG
[2011/01/15 13:40:14 | 001,262,093 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02816.JPG
[2011/01/15 13:40:08 | 001,185,058 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02815.JPG
[2011/01/15 13:39:54 | 001,210,183 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02814.JPG
[2011/01/15 13:39:50 | 001,230,519 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02813.JPG
[2011/01/15 13:39:40 | 001,303,196 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02812.JPG
[2011/01/15 13:39:22 | 001,290,235 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02811.JPG
[2011/01/15 13:39:04 | 001,200,639 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02810.JPG
[2011/01/15 13:39:00 | 001,241,495 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02809.JPG
[2011/01/15 13:38:56 | 001,255,950 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02808.JPG
[2011/01/15 13:38:46 | 000,646,697 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\MOV02807.MPG
[2011/01/15 13:38:46 | 000,007,464 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\MOV02807.THM
[2011/01/15 13:05:38 | 001,232,889 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02806.JPG
[2011/01/15 13:05:26 | 001,265,191 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02805.JPG
[2011/01/15 13:05:18 | 001,232,785 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02804.JPG
[2011/01/15 13:04:00 | 001,301,496 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02803.JPG
[2011/01/15 13:03:58 | 001,267,995 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02802.JPG
[2011/01/15 13:03:52 | 001,326,501 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02801.JPG
[2011/01/10 07:47:57 | 000,024,576 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\Copy of playoffs.xls
[2011/01/04 08:30:59 | 000,037,376 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\Jaymes christmas List.doc
[2010/12/26 13:58:34 | 000,001,542 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/12/26 13:56:55 | 000,001,604 | —- | M] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/12/25 08:39:13 | 000,000,043 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\watch pic.gif
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/01/19 21:42:16 | 000,359,929 | —- | C] () – C:\Documents and Settings\Jennifer\Desktop\dds.scr
[2011/01/19 10:48:40 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\6to4v32.dll
[2011/01/19 06:51:29 | 000,001,356 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Buy Whitesmoke Translator.lnk
[2011/01/19 06:51:28 | 000,001,725 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launch Whitesmoke Translator.lnk
[2011/01/19 06:51:02 | 000,001,453 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Launch WhiteSmoke Translator.lnk
[2011/01/18 22:51:22 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/16 19:04:46 | 000,026,624 | —- | C] () – C:\Documents and Settings\Jennifer\Desktop\Copy of playoffs 2010 week 2.xls
[2011/01/15 17:14:26 | 001,331,685 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02849.JPG
[2011/01/15 17:14:26 | 001,305,501 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02854.JPG
[2011/01/15 17:14:26 | 001,302,227 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02855.JPG
[2011/01/15 17:14:26 | 001,295,990 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02851.JPG
[2011/01/15 17:14:26 | 001,271,654 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02850.JPG
[2011/01/15 17:14:26 | 001,253,441 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02856.JPG
[2011/01/15 17:14:26 | 001,250,047 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02852.JPG
[2011/01/15 17:14:26 | 001,215,575 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02857.JPG
[2011/01/15 17:14:26 | 000,646,697 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\MOV02807.MPG
[2011/01/15 17:14:26 | 000,385,706 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\MOV02853.MPG
[2011/01/15 17:14:26 | 000,007,464 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\MOV02807.THM
[2011/01/15 17:14:26 | 000,004,820 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\MOV02853.THM
[2011/01/15 17:14:25 | 001,300,180 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02832.JPG
[2011/01/15 17:14:25 | 001,298,489 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02838.JPG
[2011/01/15 17:14:25 | 001,295,900 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02848.JPG
[2011/01/15 17:14:25 | 001,295,288 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02842.JPG
[2011/01/15 17:14:25 | 001,292,795 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02833.JPG
[2011/01/15 17:14:25 | 001,291,402 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02835.JPG
[2011/01/15 17:14:25 | 001,286,640 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02844.JPG
[2011/01/15 17:14:25 | 001,279,824 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02841.JPG
[2011/01/15 17:14:25 | 001,278,536 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02830.JPG
[2011/01/15 17:14:25 | 001,273,346 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02847.JPG
[2011/01/15 17:14:25 | 001,271,700 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02837.JPG
[2011/01/15 17:14:25 | 001,270,977 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02840.JPG
[2011/01/15 17:14:25 | 001,258,607 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02839.JPG
[2011/01/15 17:14:25 | 001,244,135 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02834.JPG
[2011/01/15 17:14:25 | 001,223,818 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02831.JPG
[2011/01/15 17:14:25 | 001,217,236 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02843.JPG
[2011/01/15 17:14:25 | 001,201,755 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02836.JPG
[2011/01/15 17:14:25 | 001,188,762 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02829.JPG
[2011/01/15 17:14:25 | 001,179,039 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02845.JPG
[2011/01/15 17:14:25 | 001,178,407 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02828.JPG
[2011/01/15 17:14:25 | 001,177,578 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02846.JPG
[2011/01/15 17:14:24 | 001,317,772 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02827.JPG
[2011/01/15 17:14:24 | 001,260,728 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02826.JPG
[2011/01/15 17:14:24 | 001,248,037 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02823.JPG
[2011/01/15 17:14:24 | 001,227,793 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02824.JPG
[2011/01/15 17:14:24 | 001,207,968 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02822.JPG
[2011/01/15 17:14:24 | 001,189,786 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02825.JPG
[2011/01/15 17:14:23 | 001,316,342 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02817.JPG
[2011/01/15 17:14:23 | 001,261,162 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02819.JPG
[2011/01/15 17:14:23 | 001,219,691 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02821.JPG
[2011/01/15 17:14:23 | 001,186,309 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02820.JPG
[2011/01/15 17:14:23 | 001,165,114 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02818.JPG
[2011/01/15 17:14:22 | 001,303,196 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02812.JPG
[2011/01/15 17:14:22 | 001,290,235 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02811.JPG
[2011/01/15 17:14:22 | 001,262,093 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02816.JPG
[2011/01/15 17:14:22 | 001,230,519 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02813.JPG
[2011/01/15 17:14:22 | 001,210,183 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02814.JPG
[2011/01/15 17:14:22 | 001,185,058 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02815.JPG
[2011/01/15 17:14:21 | 001,265,191 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02805.JPG
[2011/01/15 17:14:21 | 001,255,950 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02808.JPG
[2011/01/15 17:14:21 | 001,241,495 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02809.JPG
[2011/01/15 17:14:21 | 001,232,889 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02806.JPG
[2011/01/15 17:14:21 | 001,232,785 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02804.JPG
[2011/01/15 17:14:21 | 001,200,639 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02810.JPG
[2011/01/15 17:14:20 | 001,326,501 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02801.JPG
[2011/01/15 17:14:20 | 001,301,496 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02803.JPG
[2011/01/15 17:14:20 | 001,267,995 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02802.JPG
[2011/01/10 07:47:57 | 000,024,576 | —- | C] () – C:\Documents and Settings\Jennifer\Desktop\Copy of playoffs.xls
[2010/12/26 13:58:34 | 000,001,542 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/12/26 13:56:55 | 000,001,604 | —- | C] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/12/25 08:39:12 | 000,000,043 | —- | C] () – C:\Documents and Settings\Jennifer\Desktop\watch pic.gif
[2010/03/01 22:38:12 | 000,767,952 | —- | C] () – C:\WINDOWS\BDTSupport.dll.old
[2010/03/01 22:38:12 | 000,763,832 | —- | C] () – C:\WINDOWS\BDTSupport.dll
[2010/03/01 22:25:09 | 000,016,924 | -HS- | C] () – C:\Documents and Settings\Jennifer\Local Settings\Application Data\GyBl5ci
[2009/04/19 12:32:35 | 000,000,022 | —- | C] () – C:\WINDOWS\iexplore.ini
[2009/02/24 08:21:40 | 000,000,131 | —- | C] () – C:\Documents and Settings\Jennifer\Local Settings\Application Data\fusioncache.dat
[2009/01/17 18:43:38 | 000,002,582 | —- | C] () – C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2008/05/26 08:01:29 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2008/05/20 17:59:21 | 000,152,064 | —- | C] () – C:\Documents and Settings\Jennifer\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/05/14 21:23:43 | 000,094,208 | —- | C] () – C:\WINDOWS\System32\GTW32N50.dll
[2008/05/14 21:23:29 | 000,001,361 | —- | C] () – C:\WINDOWS\System32\WLAN.INI
[2008/05/09 19:28:11 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2008/05/09 19:25:28 | 000,000,859 | —- | C] () – C:\WINDOWS\{0240BDFB-2995-4A3F-8C96-18D41282B716}_WiseFW.ini
[2008/05/09 19:23:58 | 000,056,056 | —- | C] () – C:\WINDOWS\System32\DLAAPI_W.DLL
[2008/05/09 19:23:58 | 000,000,118 | —- | C] () – C:\WINDOWS\wininit.ini
[2008/05/09 19:04:57 | 000,876,544 | —- | C] () – C:\WINDOWS\System32\TEACico2.dll
[2008/05/09 19:04:42 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\igfxCoIn_v4820.dll
[2008/05/09 19:03:39 | 000,001,124 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2007/08/06 13:17:40 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\OnlineScannerLang.dll
[2007/08/06 12:07:30 | 000,008,784 | —- | C] () – C:\WINDOWS\System32\ractrlkeyhook.dll
[2007/08/02 18:11:28 | 000,253,952 | —- | C] () – C:\WINDOWS\System32\OnlineScannerDLLA.dll
[2007/08/02 18:11:14 | 000,241,664 | —- | C] () – C:\WINDOWS\System32\OnlineScannerDLLW.dll
[2007/07/27 15:49:02 | 000,225,355 | —- | C] () – C:\WINDOWS\System32\lnod32apiW.dll
[2007/07/27 15:49:02 | 000,196,683 | —- | C] () – C:\WINDOWS\System32\lnod32apiA.dll
[2006/11/07 02:25:58 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2006/09/16 21:36:50 | 000,520,192 | —- | C] () – C:\WINDOWS\System32\CddbPlaylist2Roxio.dll
[2006/09/16 21:36:50 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2005/12/05 20:25:22 | 000,139,264 | —- | C] () – C:\WINDOWS\System32\lnod32umc.dll
[2005/12/05 13:37:10 | 000,106,496 | —- | C] () – C:\WINDOWS\System32\lnod32upd.dll
[2004/08/10 11:12:05 | 000,000,780 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/10 11:01:18 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/08/10 10:57:52 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2003/01/07 14:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
========== LOP Check ==========
[2009/01/06 18:22:11 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\acccore
[2008/11/25 09:41:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\American Express Online Assistant
[2010/04/01 15:42:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Autodesk
[2010/04/28 12:02:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Carbonite
[2009/08/02 17:39:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Merscom
[2009/04/19 12:32:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MumboJumbo
[2008/08/01 21:01:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NetZero
[2008/11/11 23:45:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2008/05/09 19:25:29 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SingleClick Systems
[2008/05/09 19:26:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SupportSoft
[2011/01/19 21:29:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2009/06/27 05:44:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/12/26 13:58:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/08/07 09:05:43 | 000,000,000 | -HSD | M] – C:\Documents and Settings\Jennifer\Application Data\.#
[2009/01/06 18:27:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\acccore
[2009/06/10 20:31:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Amazon
[2010/04/01 15:42:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Autodesk
[2009/01/11 19:11:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\AutoSync for Yahoo
[2010/05/01 14:32:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Facebook
[2009/07/08 09:30:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Irba
[2009/07/13 08:57:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\iWin
[2008/05/16 07:26:19 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Netscape
[2009/01/28 10:35:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Opera
[2009/02/16 22:16:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\TeamViewer
[2009/01/02 13:48:23 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Unity
[2011/01/19 20:14:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\whitesmoketoolbar
[2011/01/19 14:56:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Wovo
[2011/01/19 06:51:26 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Application Data\whitesmoketoolbar
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2004/08/10 11:04:08 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2008/09/19 21:19:25 | 000,000,211 | —- | M] () – C:\Boot.bak
[2009/12/26 17:00:00 | 000,000,281 | RHS- | M] () – C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | —- | M] () – C:\cmldr
[2004/08/10 11:04:08 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2008/05/09 19:05:48 | 000,007,072 | RH– | M] () – C:\dell.sdr
[2011/01/19 20:11:44 | 3209,871,360 | -HS- | M] () – C:\hiberfil.sys
[2008/05/14 20:25:57 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2004/08/10 11:04:08 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2009/06/27 05:45:14 | 000,000,740 | -H– | M] () – C:\IPH.PH
[2008/12/12 23:40:38 | 000,010,118 | —- | M] () – C:\JavaRa.log
[2011/01/19 20:51:52 | 000,000,109 | —- | M] () – C:\mbam-error.txt
[2004/08/10 11:04:08 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/08/04 03:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2010/11/16 23:21:51 | 000,250,048 | —- | M] () – C:\ntldr
[2011/01/19 20:11:43 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2010/02/15 15:46:51 | 000,000,390 | —- | M] () – C:\rkill.log
[2009/02/18 14:22:59 | 000,000,594 | —- | M] () – C:\updatedatfix.log
[2008/05/14 21:47:51 | 000,000,146 | —- | M] () – C:\YServer.txt
< %systemroot%\Fonts\*.com >
[2006/04/18 14:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 13:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 13:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2004/08/10 11:03:42 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 06:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/03/28 13:57:34 | 000,274,944 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp5ha.dll
[2008/10/28 12:49:30 | 000,321,536 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp696.dll
[2003/06/18 16:31:48 | 000,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 04:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2004/08/10 10:56:48 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2004/08/10 10:56:46 | 000,634,880 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2004/08/10 10:56:46 | 000,872,448 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/11/16 23:25:07 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/05/14 20:07:05 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Jennifer\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/08/10 11:08:38 | 000,000,079 | —- | M] () – C:\Documents and Settings\Jennifer\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2010/03/01 22:43:48 | 034,596,344 | —- | M] (PC Tools ) – C:\Documents and Settings\Jennifer\Desktop\7.0.0.538f-sdasetup.exe
[2008/12/12 23:38:04 | 035,124,856 | —- | M] ( ) – C:\Documents and Settings\Jennifer\Desktop\AdbeRdr90_en_US.exe
[2009/06/21 06:58:28 | 000,606,168 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\AmazonMP3Installer(2).exe
[2009/06/10 20:30:18 | 000,606,168 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\AmazonMP3Installer.exe
[2008/05/16 19:43:25 | 022,311,160 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\antivir_workstation_winu_en_h.exe
[2009/01/11 19:04:57 | 018,062,232 | —- | M] (Nokia ) – C:\Documents and Settings\Jennifer\Desktop\autosync_1049.exe
[2009/07/22 18:24:19 | 008,117,208 | —- | M] (Mozilla) – C:\Documents and Settings\Jennifer\Desktop\Firefox Setup 3.5.1.exe
[2009/12/18 10:25:09 | 008,086,544 | —- | M] (Mozilla) – C:\Documents and Settings\Jennifer\Desktop\Firefox Setup 3.5.6.exe
[2010/09/06 09:36:17 | 008,573,648 | —- | M] (Mozilla) – C:\Documents and Settings\Jennifer\Desktop\Firefox Setup 3.6.8.exe
[2008/08/01 22:49:32 | 000,208,384 | —- | M] (Paul McLain and Fred de Vries) – C:\Documents and Settings\Jennifer\Desktop\JavaRa.exe
[2008/11/25 09:39:15 | 003,091,808 | —- | M] (American Express) – C:\Documents and Settings\Jennifer\Desktop\online_assistant.exe
[2011/01/19 21:36:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
[2008/12/09 12:29:05 | 000,305,705 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\RSIT.exe
[2010/03/01 22:34:21 | 034,870,008 | —- | M] (PC Tools ) – C:\Documents and Settings\Jennifer\Desktop\sdasetup_aff.exe
[2009/06/19 18:36:38 | 001,490,672 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\TeamViewerQS(2).exe
[2009/06/19 16:54:48 | 001,490,672 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\TeamViewerQS.exe
[2009/06/19 18:37:27 | 002,042,328 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\TeamViewer_Setup.exe
[2009/01/02 13:41:45 | 003,292,936 | —- | M] (Unity Technologies ApS) – C:\Documents and Settings\Jennifer\Desktop\UnityWebPlayer.exe
[2009/06/26 10:16:36 | 000,897,920 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\Jennifer\Desktop\WGAPluginInstall.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-01-12 09:02:14
========== Alternate Data Streams ==========
@Alternate Data Stream - 292 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7715B65F
@Alternate Data Stream - 200 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6D6C4572
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:62E2D794
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F38450C8
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B211CA64
< End of report >
OTL Extras logfile created on: 1/19/2011 9:40:37 PM - Run 1
OTL by OldTimer - Version 3.2.20.2 Folder = C:\Documents and Settings\Jennifer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 77.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.77 Gb Total Space | 178.37 Gb Free Space | 76.63% Space Free | Partition Type: NTFS
Computer Name: JENS-OFFICE | User Name: Jennifer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = NavigatorHTML] – C:\Program Files\Netscape\Navigator 9\navigator.exe (Netscape)
[HKEY_USERS\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Classes\]
.exe [@ = exefile] – Reg Error: Key error. File not found
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
http [open] – C:\PROGRA~1\NETSCAPE\NAVIGA~1\NAVIGA~1.EXE -requestPending -osint -url "%1" (Netscape)
https [open] – C:\PROGRA~1\NETSCAPE\NAVIGA~1\NAVIGA~1.EXE -requestPending -osint -url "%1" (Netscape)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"10421:UDP" = 10421:UDP:*:Enabled:SingleClick Discovery Protocol
"10426:UDP" = 10426:UDP:*:Enabled:SingleClick ICC
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe" = C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe:*:Enabled:CyberLink PowerDVD DX – (CyberLink Corp.)
"C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" = C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe:*:Enabled:CyberLink PowerDVD DX Resident Program – (CyberLink Corp.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe" = C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe:*:Enabled:CyberLink PowerDVD DX – (CyberLink Corp.)
"C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" = C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe:*:Enabled:CyberLink PowerDVD DX Resident Program – (CyberLink Corp.)
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger – (Yahoo! Inc.)
"C:\Program Files\Yahoo!\Messenger\YServer.exe" = C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server
"C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" = C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe:*:Enabled:AppleMobileDeviceService
"C:\Program Files\Dell Network Assistant\ezi_hnm2.exe" = C:\Program Files\Dell Network Assistant\ezi_hnm2.exe:*:Enabled:Dell Network Assistant – (SingleClick Systems)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader – (AOL LLC)
"C:\Program Files\AIM6\aim6.exe" = C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM – (AOL LLC)
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe" = C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application – (TeamViewer GmbH)
"C:\Documents and Settings\Jennifer\Desktop\tbzip\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\tbzip\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\tbzip\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\tbzip\TicketBuyEvent.exe:*:Enabled:
"J:\tbzip\TicketBuy.exe" = J:\tbzip\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuy4444\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuy4444\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuy4444\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuy4444\TicketBuyEvent.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TICKET BUY\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\TICKET BUY\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TICKET BUY\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\TICKET BUY\TicketBuyEvent.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\Old ticketbuy\TicketBuy4444\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\Old ticketbuy\TicketBuy4444\TicketBuy.exe:*:Enabled: – ( )
"C:\Documents and Settings\Jennifer\temp\TeamViewer\Version4\TeamViewer.exe" = C:\Documents and Settings\Jennifer\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application
"C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TicketBuyEvent.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TBuy 9-15\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TBuy 9-15\TicketBuyEvent.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TBuy 9-15\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TBuy 9-15\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\Extra new ticketbuy\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\Extra new ticketbuy\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\Extra new ticketbuy\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\Extra new ticketbuy\TicketBuyEvent.exe:*:Enabled:
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)
"C:\Documents and Settings\Jennifer\Desktop\may 26 ticketbuy\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\may 26 ticketbuy\TicketBuy.exe:*:Enabled: – ( )
"C:\Documents and Settings\Jennifer\Desktop\may 26 ticketbuy\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\may 26 ticketbuy\TicketBuyEvent.exe:*:Enabled: – ( )
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{001E7FB6-BB6B-4ED0-BEDC-B5404ED96D4E}" = DocProc
"{0240BDFB-2995-4A3F-8C96-18D41282B716}" = Dell Network Assistant
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{03A7C57A-B2C8-409b-92E5-524A0DFD0DD3}" = Status
"{087A66B8-1F0F-4a8d-A649-0CFE276AA7C0}" = WebReg
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{1ADB7BF5-F8EB-4F76-98FD-65A7FFBEAECE}" = Whitesmoke Translator
"{1E0AD97C-678A-48C6-A7C3-CCC87F2DA9D8}" = PS_BSIZE_04_B8500_Software_Min
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 14
"{2A329FB6-389D-4396-A974-29656D6864AE}" = MarketResearch
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{2C0CD17D-0B06-4700-83FA-7344B868B0A2}" = Opera 9.63
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}" = Roxio Drag-to-Disc
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Sonic Activation Module
"{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup
"{47ECCB1F-2811-49C0-B6A7-26778639ABA0}" = 32 Bit HP CIO Components Installer
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4A7AE408-7846-4D13-81F7-D4447A994DBA}" = Calendar
"{4D304678-738E-42a0-931A-2B022F49DEB8}" = TrayApp
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5783F2D7-5001-0409-0002-0060B0CE6BBA}" = AutoCAD 2007 - English
"{5783F2D7-7001-0409-0002-0060B0CE6BBA}" = AutoCAD 2009 - English
"{5905F42D-3F5F-4916-ADA6-94A3646AEE76}" = Dell Driver Reset Tool
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67790AD5-777F-4652-9556-AED6ADC03D55}" = B8500
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6EED4269-588D-45b8-A80C-26A9CA62EE4E}" = HPSSupply
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{71310D9B-7555-44FE-914C-A1B55CB7BC5D}" = Scrapbook
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{777CA40C-0206-4EF6-A0FC-618BF06BF8D0}" = Intel® PRO Network Connections [removed]
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}" = Roxio Creator BDAV Plugin
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{98B672F2-857C-4CC9-A25D-6B218077F4F6}" = Yahoo! Autosync
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C09DFEC-1F55-4E6D-BDEF-0D2F6CA06D21}" = addcustompaper
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC13BA3A-336B-45a4-B3FE-2D3058A7B533}" = Toolbox
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.0
"{ACA85783-8EEA-4f0a-B2A3-A8173F30209F}" = C4200_doccd
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B09BCBF6-87EE-4403-A336-3A9510856535}" = HP Photosmart All-In-One Software 9.0
"{B0D83FCD-9D42-43ED-8315-250326AADA02}" = ArcSoft Print Creations - Scrapbook
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{B7F98125-4955-41E3-8A71-4CE11CE9C198}" = KODAK Gallery Upload Software
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BFDE4176-5DFE-4db9-AA00-8F30CB001BDA}" = c4200_Help
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C39E671D-0528-4c5e-A034-8470C5BC393A}" = C4200
"{C4124E95-5061-4776-8D5D-E3D931C778E1}" = Microsoft VC9 runtime libraries
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C867F57B-39C1-4341-A164-F569839BCCBF}" = Cards
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator DE
"{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}" = Safari
"{CA9ED5E4-1548-485B-A293-417840060158}" = ArcSoft Print Creations - Photo Calendar
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D8B7A682-20DA-4797-8415-B1FB14D4D32B}" = PS_AIO_Software
"{E28750A2-45F2-4b63-99F7-9F81A94B1E2D}" = PS_AIO_Software_min
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center
"{E3C9FB9B-5D79-469e-8E81-9A5ACE0BB517}" = HP Photosmart B8500 Driver Software 12.0 Rel .4
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F04F9557-81A9-4293-BC49-2C216FA325A7}" = ArcSoft Print Creations - Greeting Card
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{F769B78E-FF0E-4db5-95E2-9F4C8D6352FE}" = DeviceDiscovery
"{F855C3AE-992D-4B84-A09D-07103CDCDAC2}" = Compact Wireless-G USB Adapter
"{FD011F34-749C-47E0-BA48-6009412C4789}" = ArcSoft Print Creations
"{FD7F242B-9AA0-40c3-941E-3A9821D19C09}" = PS_AIO_ProductContext
"{FE57DE70-95DE-4B64-9266-84DA811053DB}" = HP Update
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"AIM_6" = AIM 6
"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.10
"ATT-R9" = AT&T; U-verse Setup
"AutoCAD 2009 - English" = AutoCAD 2009 - English
"Autodesk DWF Viewer" = Autodesk DWF Viewer
"Avira AntiVir Desktop" = Avira AntiVir Premium
"AXP" = Online Assistant
"Browser Defender_is1" = Browser Defender 2.0.6.15
"Carbonite Backup" = Carbonite
"Create A Mall" = Create A Mall
"Defender of the Crown: Heroes Live Forever" = Defender of the Crown: Heroes Live Forever
"EsetOnlineScanner" = ESET Online Scanner
"HDMI" = Intel® Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 12.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 12.0
"HPOCR" = HP OCR Software 9.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Jigsaw Puzzle Player" = Jigsaw Puzzle Player
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Netscape Navigator ([removed])" = Netscape Navigator ([removed])
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PDF Splitter and Merger 4.0" = PDF Splitter and Merger 4.0
"Risk®" = Risk®
"SearchAssist" = SearchAssist
"Shop for HP Supplies" = Shop for HP Supplies
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"Spyware Doctor" = Spyware Doctor 7.0
"TeamViewer 4" = TeamViewer 4
"UnityWebPlayer" = Unity Web Player
"ViewpointMediaPlayer" = Viewpoint Media Player
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Extras" = Yahoo! Browser Services
"Yahoo! Mail" = Yahoo! Internet Mail
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Search Defender" = Yahoo! Search Protection
"Yahoo! Software Update" = Yahoo! Software Update
"YInstHelper" = Yahoo! Install Manager
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Facebook Plug-In" = Facebook Plug-In
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus 2.9.2
========== Last 10 Event Log Errors ==========
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
< End of report >
I will post the avira info then follow your directions.
Any help would be greatly appreciated.
Exported events:
1/19/2011 8:03 PM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\18\1a3207d2-2f51718d'
contained a virus or unwanted program 'JAVA/Small.Z' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '47a93cdd.qua'.
1/19/2011 6:44 PM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\58\1554d1ba-6119eb31'
contained a virus or unwanted program 'JAVA/OpenConnect.AI' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '47aa2137.qua'.
1/19/2011 8:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ihnj\setup.exe.
Action performed: Allow access
1/19/2011 8:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ihnj\setup.exe.
Action performed: Deny access
1/19/2011 8:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ihnj\setup.exe.
Action performed: Deny access
1/19/2011 8:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ppju\setup.exe.
Action performed: Allow access
1/19/2011 8:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ppju\setup.exe.
Action performed: Deny access
1/19/2011 8:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ppju\setup.exe.
Action performed: Deny access
1/19/2011 8:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\nfpw\setup.exe.
Action performed: Allow access
1/19/2011 8:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\nfpw\setup.exe.
Action performed: Deny access
1/19/2011 8:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\nfpw\setup.exe.
Action performed: Deny access
1/19/2011 7:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ahrx\setup.exe.
Action performed: Allow access
1/19/2011 7:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ahrx\setup.exe.
Action performed: Deny access
1/19/2011 7:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ahrx\setup.exe.
Action performed: Deny access
1/19/2011 7:40 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\vkyq\setup.exe.
Action performed: Allow access
1/19/2011 7:40 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\vkyq\setup.exe.
Action performed: Deny access
1/19/2011 7:40 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\vkyq\setup.exe.
Action performed: Deny access
1/19/2011 7:30 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\pash\setup.exe.
Action performed: Allow access
1/19/2011 7:30 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\pash\setup.exe.
Action performed: Deny access
1/19/2011 7:30 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\pash\setup.exe.
Action performed: Deny access
1/19/2011 7:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\kgtr\setup.exe.
Action performed: Allow access
1/19/2011 7:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\kgtr\setup.exe.
Action performed: Deny access
1/19/2011 7:20 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\kgtr\setup.exe.
Action performed: Deny access
1/19/2011 7:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ggsn\setup.exe.
Action performed: Allow access
1/19/2011 7:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ggsn\setup.exe.
Action performed: Deny access
1/19/2011 7:10 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\ggsn\setup.exe.
Action performed: Deny access
1/19/2011 7:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\batf\setup.exe.
Action performed: Allow access
1/19/2011 7:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\batf\setup.exe.
Action performed: Deny access
1/19/2011 7:00 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\batf\setup.exe.
Action performed: Deny access
1/19/2011 6:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\iyuq\setup.exe.
Action performed: Deny access
1/19/2011 6:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\iyuq\setup.exe.
Action performed: Deny access
1/19/2011 6:50 AM [Guard] Malware found
Virus or unwanted program 'TR/Dldr.Harnig.S.14 [trojan]'
detected in file 'C:\WINDOWS\temp\iyuq\setup.exe.
Action performed: Allow access
1/19/2011 6:48 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\0.9508023469067646.exe'
contained a virus or unwanted program 'TR/Vundo.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '574f531c.qua'.
1/19/2011 6:48 AM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\34\67113ae2-5ce8fd2d'
contained a virus or unwanted program 'TR/Vundo.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '4fd07c83.qua'.
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.9508023469067646.exe.
Action performed: Deny access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.9508023469067646.exe.
Action performed: Allow access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.9508023469067646.exe.
Action performed: Deny access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\jar_cache7313325374916226741.tmp.
Action performed: Allow access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\34\67113ae2-5ce8fd2d-temp.
Action performed: Allow access
1/19/2011 6:47 AM [Guard] Malware found
Virus or unwanted program 'TR/Vundo.Gen [trojan]'
detected in file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\34\67113ae2-5ce8fd2d.
Action performed: Allow access
1/19/2011 6:35 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\21.862796099677823.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
An error has occurred and the file was not deleted. ErrorID: 26004.
The source file could not be found.
Attempting to perform action using the ARK library.
The file could not be copied to quarantine!
The file does not exist!
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\0.26533051345930936.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '0d660864.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\0.5336287408281505.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '5f3a528c.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\WINDOWS\temp\21.862796099677823.exe'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
The file was moved to the quarantine directory under the name '47a27d28.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\9\58413909-786b27d6'
contained a virus or unwanted program 'JAVA/Agent.AD.1' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '6b5347dc.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\10\4c562fca-430b006f'
contained a virus or unwanted program 'JAVA/OpenStream.AB.1' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '51cd58b4.qua'.
1/19/2011 6:31 AM [Scanner] Malware found
The file 'C:\Documents and Settings\NetworkService\Application
Data\Sun\Java\Deployment\cache\6.0\50\170b44f2-5b95de1f'
contained a virus or unwanted program 'JAVA/CV-2010-0094.E' [virus]
Action(s) taken:
The file was moved to the quarantine directory under the name '2edb6ae1.qua'.
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.26533051345930936.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\21.862796099677823.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\21.862796099677823.exe.
Action performed: Allow access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.26533051345930936.exe.
Action performed: Allow access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.26533051345930936.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.5336287408281505.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.5336287408281505.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\21.862796099677823.exe.
Action performed: Deny access
1/18/2011 10:52 PM [Guard] Malware found
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\WINDOWS\temp\0.5336287408281505.exe.
Action performed: Allow access
OTL logfile created on: 1/19/2011 9:40:37 PM - Run 1
OTL by OldTimer - Version 3.2.20.2 Folder = C:\Documents and Settings\Jennifer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 77.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.77 Gb Total Space | 178.37 Gb Free Space | 76.63% Space Free | Partition Type: NTFS
Computer Name: JENS-OFFICE | User Name: Jennifer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/01/19 21:36:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
PRC - [2010/12/08 05:19:45 | 000,267,944 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/11/02 05:02:04 | 000,403,624 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2010/11/02 05:02:04 | 000,339,624 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
PRC - [2010/11/02 05:02:04 | 000,281,768 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/11/02 05:02:04 | 000,135,336 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010/10/27 19:17:52 | 000,207,424 | —- | M] (ArcSoft Inc.) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2010/10/16 00:40:40 | 000,037,664 | —- | M] (Apple Inc.) – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010/08/25 10:27:44 | 000,309,824 | —- | M] (ArcSoft Inc.) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
PRC - [2010/03/24 05:04:16 | 000,076,968 | —- | M] (Avira GmbH) – C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2010/03/18 10:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2010/01/22 08:56:24 | 000,112,592 | —- | M] (Threat Expert Ltd.) – C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
PRC - [2009/12/03 15:52:32 | 001,980,560 | R— | M] (Carbonite, Inc. (www.carbonite.com)) – C:\Program Files\Carbonite\Carbonite Backup\CarboniteService.exe
PRC - [2009/12/03 15:52:32 | 000,670,864 | R— | M] (Carbonite, Inc.) – C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe
PRC - [2009/02/23 07:05:34 | 000,111,856 | —- | M] (Yahoo! Inc) – C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
PRC - [2008/11/09 14:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/11/03 18:57:20 | 001,185,680 | —- | M] (American Express) – C:\Program Files\American Express Online Assistant\OnlineAssistant.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2008/02/19 11:16:56 | 008,253,440 | —- | M] (Netscape) – C:\Program Files\Netscape\Navigator 9\navigator.exe
PRC - [2007/05/25 09:38:46 | 000,112,176 | —- | M] (SingleClick Systems) – C:\Program Files\Dell Network Assistant\hnm_svc.exe
PRC - [2007/01/04 15:38:08 | 000,024,652 | —- | M] (Viewpoint Corporation) – C:\Program Files\Viewpoint\Common\ViewpointService.exe
PRC - [2006/09/11 03:40:32 | 000,218,032 | —- | M] (Macrovision Corporation) – C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
PRC - [2005/11/22 11:44:44 | 005,245,952 | —- | M] (Linksys) – C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
PRC - [2005/07/04 15:46:04 | 000,053,307 | —- | M] (GEMTEKS) – C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
========== Modules (SafeList) ==========
MOD - [2011/01/19 21:36:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
MOD - [2010/08/23 10:12:02 | 001,054,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Running] – – (WUSB54GCSVC)
SRV - File not found [Auto | Stopped] – – (RoxLiveShare9)
SRV - File not found [On_Demand | Stopped] – – (AppMgmt)
SRV - [2011/01/19 10:48:40 | 000,053,248 | —- | M] () [Auto | Stopped] – C:\WINDOWS\system32\6to4v32.dll – (6to4)
SRV - [2010/12/08 05:19:45 | 000,267,944 | —- | M] (Avira GmbH) [Auto | Running] – C:\Program Files\Avira\AntiVir Desktop\avguard.exe – (AntiVirService)
SRV - [2010/11/02 05:02:04 | 000,403,624 | —- | M] (Avira GmbH) [Auto | Running] – C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE – (AntiVirWebService)
SRV - [2010/11/02 05:02:04 | 000,339,624 | —- | M] (Avira GmbH) [Auto | Running] – C:\Program Files\Avira\AntiVir Desktop\avmailc.exe – (AntiVirMailService)
SRV - [2010/11/02 05:02:04 | 000,135,336 | —- | M] (Avira GmbH) [Auto | Running] – C:\Program Files\Avira\AntiVir Desktop\sched.exe – (AntiVirSchedulerService)
SRV - [2010/10/16 00:40:40 | 000,037,664 | —- | M] (Apple Inc.) [Auto | Running] – C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe – (Apple Mobile Device)
SRV - [2010/03/18 10:19:26 | 000,113,152 | —- | M] (ArcSoft Inc.) [Auto | Running] – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe – (ACDaemon)
SRV - [2010/03/15 10:50:36 | 001,142,224 | —- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\Spyware Doctor\pctsSvc.exe – (sdCoreService)
SRV - [2010/03/11 10:09:22 | 000,366,840 | —- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\Spyware Doctor\pctsAuxs.exe – (sdAuxService)
SRV - [2010/02/02 08:13:54 | 000,070,928 | —- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\Spyware Doctor\TFEngine\TFService.exe – (ThreatFire)
SRV - [2010/01/22 08:56:24 | 000,112,592 | —- | M] (Threat Expert Ltd.) [Auto | Running] – C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe – (Browser Defender Update Service)
SRV - [2009/12/03 15:52:32 | 001,980,560 | R— | M] (Carbonite, Inc. (www.carbonite.com)) [Auto | Running] – C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe – (CarboniteService)
SRV - [2008/12/07 15:09:38 | 000,085,096 | —- | M] (Autodesk) [On_Demand | Stopped] – C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe – (Autodesk Licensing Service)
SRV - [2008/11/09 14:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)
SRV - [2007/05/25 09:38:46 | 000,112,176 | —- | M] (SingleClick Systems) [Auto | Running] – C:\Program Files\Dell Network Assistant\hnm_svc.exe – (hnmsvc)
SRV - [2007/01/04 15:38:08 | 000,024,652 | —- | M] (Viewpoint Corporation) [Auto | Running] – C:\Program Files\Viewpoint\Common\ViewpointService.exe – (Viewpoint Manager Service)
========== Driver Services (SafeList) ==========
DRV - [2010/12/20 04:44:38 | 000,135,096 | —- | M] (Avira GmbH) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\avipbb.sys – (avipbb)
DRV - [2010/11/22 05:42:16 | 000,061,960 | —- | M] (Avira GmbH) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\avgntflt.sys – (avgntflt)
DRV - [2010/05/10 12:41:30 | 000,067,656 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS – (SASKUTIL)
DRV - [2010/04/08 13:29:32 | 000,063,360 | —- | M] (PC Tools) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\pctplsg.sys – (pctplsg)
DRV - [2010/03/29 09:06:14 | 000,218,592 | —- | M] (PC Tools) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\PCTCore.sys – (PCTCore)
DRV - [2010/02/17 12:25:48 | 000,012,872 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys – (SASDIFSV)
DRV - [2010/02/05 09:17:56 | 000,233,136 | —- | M] (PC Tools) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\pctgntdi.sys – (pctgntdi)
DRV - [2010/02/02 08:13:54 | 000,059,664 | –S- | M] (PC Tools) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\TfSysMon.sys – (TfSysMon)
DRV - [2010/02/02 08:13:54 | 000,051,984 | –S- | M] (PC Tools) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\TfFsMon.sys – (TfFsMon)
DRV - [2010/02/02 08:13:54 | 000,033,552 | –S- | M] (PC Tools) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\TfNetMon.sys – (TfNetMon)
DRV - [2009/06/09 02:29:50 | 000,028,520 | —- | M] (Avira GmbH) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\ssmdrv.sys – (ssmdrv)
DRV - [2009/06/02 07:25:00 | 000,011,608 | —- | M] (Avira GmbH) [Kernel | System | Running] – C:\Program Files\Avira\AntiVir Desktop\avgio.sys – (avgio)
DRV - [2009/02/19 13:13:54 | 000,021,248 | —- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] – C:\Program Files\Common Files\Motive\MREMP50.sys – (MREMP50)
DRV - [2009/02/19 13:13:38 | 000,020,096 | —- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] – C:\Program Files\Common Files\Motive\MRESP50.sys – (MRESP50)
DRV - [2008/04/13 12:36:39 | 000,043,008 | —- | M] (Advanced Micro Devices, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\amdagp.sys – (amdagp)
DRV - [2008/04/13 12:36:39 | 000,040,960 | —- | M] (Silicon Integrated Systems Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\sisagp.sys – (sisagp)
DRV - [2008/04/13 10:36:05 | 000,144,384 | —- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\hdaudbus.sys – (HDAudBus)
DRV - [2007/06/26 12:06:20 | 000,254,872 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\e1e5132.sys – (e1express) Intel®
DRV - [2007/06/13 18:41:44 | 004,403,712 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007/06/13 17:25:14 | 000,304,920 | —- | M] (Intel Corporation) [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\iaStor.sys – (iaStor)
DRV - [2007/06/13 17:21:16 | 005,760,096 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\igxpmp32.sys – (ialm)
DRV - [2006/08/18 11:18:08 | 000,009,400 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLADResM.SYS – (DLADResM)
DRV - [2006/08/18 11:17:46 | 000,035,096 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLABMFSM.SYS – (DLABMFSM)
DRV - [2006/08/18 11:17:44 | 000,097,848 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAUDF_M.SYS – (DLAUDF_M)
DRV - [2006/08/18 11:17:44 | 000,094,648 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAUDFAM.SYS – (DLAUDFAM)
DRV - [2006/08/18 11:17:42 | 000,026,008 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAOPIOM.SYS – (DLAOPIOM)
DRV - [2006/08/18 11:17:40 | 000,032,472 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLABOIOM.SYS – (DLABOIOM)
DRV - [2006/08/18 11:17:38 | 000,104,472 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAIFS_M.SYS – (DLAIFS_M)
DRV - [2006/08/18 11:17:38 | 000,014,520 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\DLA\DLAPoolM.SYS – (DLAPoolM)
DRV - [2006/08/11 09:05:58 | 000,051,768 | —- | M] (Roxio) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\DRVNDDM.SYS – (DRVNDDM)
DRV - [2006/08/11 08:35:18 | 000,012,920 | —- | M] (Roxio) [File_System | System | Running] – C:\WINDOWS\system32\drivers\DLACDBHM.SYS – (DLACDBHM)
DRV - [2006/08/11 08:35:16 | 000,028,184 | —- | M] (Roxio) [File_System | System | Running] – C:\WINDOWS\system32\drivers\DLARTL_M.SYS – (DLARTL_M)
DRV - [2006/07/21 09:21:26 | 000,099,176 | —- | M] (Sonic Solutions) [Kernel | Boot | Running] – C:\WINDOWS\System32\Drivers\DRVMCDB.SYS – (DRVMCDB)
DRV - [2005/11/03 19:39:02 | 000,245,504 | —- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\rt73.sys – (RT73)
DRV - [2004/08/03 20:29:56 | 001,897,408 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\nv4_mini.sys – (nv)
DRV - [2001/08/17 12:07:44 | 000,019,072 | —- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\sparrow.sys – (Sparrow)
DRV - [2001/08/17 12:07:42 | 000,030,688 | —- | M] (LSI Logic) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\sym_u3.sys – (sym_u3)
DRV - [2001/08/17 12:07:40 | 000,028,384 | —- | M] (LSI Logic) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\sym_hi.sys – (sym_hi)
DRV - [2001/08/17 12:07:36 | 000,032,640 | —- | M] (LSI Logic) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\symc8xx.sys – (symc8xx)
DRV - [2001/08/17 12:07:34 | 000,016,256 | —- | M] (Symbios Logic Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\symc810.sys – (symc810)
DRV - [2001/08/17 11:52:22 | 000,036,736 | —- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\ultra.sys – (ultra)
DRV - [2001/08/17 11:52:20 | 000,045,312 | —- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\ql12160.sys – (ql12160)
DRV - [2001/08/17 11:52:20 | 000,040,320 | —- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\ql1080.sys – (ql1080)
DRV - [2001/08/17 11:52:18 | 000,049,024 | —- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\ql1280.sys – (ql1280)
DRV - [2001/08/17 11:52:16 | 000,179,584 | —- | M] (Mylex Corporation) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\dac2w2k.sys – (dac2w2k)
DRV - [2001/08/17 11:52:12 | 000,017,280 | —- | M] (American Megatrends Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\mraid35x.sys – (mraid35x)
DRV - [2001/08/17 11:52:00 | 000,026,496 | —- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\asc.sys – (asc)
DRV - [2001/08/17 11:51:58 | 000,014,848 | —- | M] (Advanced System Products, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\asc3550.sys – (asc3550)
DRV - [2001/08/17 11:51:56 | 000,005,248 | —- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\aliide.sys – (AliIde)
DRV - [2001/08/17 11:51:54 | 000,006,656 | —- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] – C:\WINDOWS\system32\DRIVERS\cmdide.sys – (CmdIde)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client;=dell-usuk&channel;=us-smb&ibd;=3080510
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client;=dell-usuk&channel;=us-smb&ibd;=3080510
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client;=dell-usuk&channel;=us-smb&ibd;=3080510
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z007&form;=ZGAPHP
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = partnerpage.google.com/smallbiz.dell.com/en_us?hl=en&client;=dell-usuk&channel;=us-smb&ibd;=3080510
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=Z007&form;=ZGAPHP
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/?fr=fp-yie8
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTe…-8&fr;=b1ie7
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://flyingincognitosleep.com/cgi-bin/h.pl
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = ;*.local
IE - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaulturl: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=tb50fftrie7&query;="
FF - prefs.js..browser.search.selectedEngine: "AIM Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://flyingincognitosleep.com/cgi-bin/h.pl"
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {C73D32D1-835F-43B6-8151-8C5365059C66}:1.9.1
FF - prefs.js..extensions.enabledItems: {CE1701E9-00FA-4AB3-88AC-0E424249F7A4}:1.9.1
FF - prefs.js..extensions.enabledItems: {214F2009-B770-4270-9860-89CD8A50478F}:1.9.1
FF - prefs.js..extensions.enabledItems: {EA4C5146-8C4C-449A-9C25-4C435C87694A}:1.9.1
FF - prefs.js..extensions.enabledItems: {AF45588C-2174-415C-8493-40DAC4AB1C62}:1.9.1
FF - prefs.js..extensions.enabledItems: {5CDC00D3-983D-42BB-A673-966E5B0E2306}:1.9.1
FF - prefs.js..extensions.enabledItems: {87CA3053-8530-4233-A6C9-8D18285FB1E7}:1.9.1
FF - prefs.js..extensions.enabledItems: {C3F91810-FD9C-47BA-BF56-523B99848792}:1.9.1
FF - prefs.js..extensions.enabledItems: {86AE899F-3B6E-42D0-B054-301B77859398}:1.9.1
FF - prefs.js..extensions.enabledItems: {24AF10CD-D80F-4A93-B763-2B7CD1E15410}:1.9.1
FF - prefs.js..extensions.enabledItems: {EC6A3E63-0817-49DA-95A6-A23140F0FC7F}:1.9.1
FF - prefs.js..extensions.enabledItems: {538C6ACE-FB87-474C-A103-46FB5832D8BD}:1.9.1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.2.20100119091315
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType;=tb50fftrab&query;="
FF - user.js..browser.startup.homepage: "http://flyingincognitosleep.com/cgi-bin/h.pl"
FF - HKLM\software\mozilla\Firefox\Extensions\\{C73D32D1-835F-43B6-8151-8C5365059C66}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{C73D32D1-835F-43B6-8151-8C5365059C66} [2009/12/26 15:27:03 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{CE1701E9-00FA-4AB3-88AC-0E424249F7A4}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{CE1701E9-00FA-4AB3-88AC-0E424249F7A4} [2009/12/26 16:45:42 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{214F2009-B770-4270-9860-89CD8A50478F}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{214F2009-B770-4270-9860-89CD8A50478F} [2010/01/16 08:46:42 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{EA4C5146-8C4C-449A-9C25-4C435C87694A}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{EA4C5146-8C4C-449A-9C25-4C435C87694A}\ [2010/01/22 06:04:55 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{AF45588C-2174-415C-8493-40DAC4AB1C62}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{AF45588C-2174-415C-8493-40DAC4AB1C62} [2010/01/23 08:40:32 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{5CDC00D3-983D-42BB-A673-966E5B0E2306}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{5CDC00D3-983D-42BB-A673-966E5B0E2306}\ [2010/01/30 08:24:20 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{87CA3053-8530-4233-A6C9-8D18285FB1E7}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{87CA3053-8530-4233-A6C9-8D18285FB1E7}\ [2010/02/05 08:30:41 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{C3F91810-FD9C-47BA-BF56-523B99848792}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{C3F91810-FD9C-47BA-BF56-523B99848792}\ [2010/02/10 07:04:46 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{86AE899F-3B6E-42D0-B054-301B77859398}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{86AE899F-3B6E-42D0-B054-301B77859398} [2010/02/15 15:30:43 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{24AF10CD-D80F-4A93-B763-2B7CD1E15410}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{24AF10CD-D80F-4A93-B763-2B7CD1E15410}\ [2010/02/21 09:44:33 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{EC6A3E63-0817-49DA-95A6-A23140F0FC7F}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{EC6A3E63-0817-49DA-95A6-A23140F0FC7F} [2010/02/24 07:39:59 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{538C6ACE-FB87-474C-A103-46FB5832D8BD}: C:\Documents and Settings\Jennifer\Local Settings\Application Data\{538C6ACE-FB87-474C-A103-46FB5832D8BD}\ [2010/02/27 08:27:13 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/05/10 12:32:46 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/01/04 08:43:03 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/12/26 13:57:02 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Netscape Navigator 9.0.0.6\extensions\\Components: C:\Program Files\Netscape\Navigator 9\components [2010/12/26 13:57:02 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Netscape Navigator 9.0.0.6\extensions\\Plugins: C:\Program Files\Netscape\Navigator 9\plugins [2010/12/26 13:57:02 | 000,000,000 | —D | M]
[2008/06/17 18:02:04 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Extensions
[2011/01/19 07:30:41 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\extensions
[2009/09/02 07:29:21 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/02/19 13:56:28 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2009/07/22 18:57:34 | 000,000,000 | —D | M] (Power Twitter) – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\extensions\{b2509cd4-17cd-45ed-8146-a82af038f493}
[2009/01/06 18:22:48 | 000,001,739 | —- | M] () – C:\Documents and Settings\Jennifer\Application Data\Mozilla\Firefox\Profiles\mngtyueh.default\searchplugins\aim-search.xml
[2011/01/19 07:30:41 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2008/11/25 09:40:13 | 000,000,000 | —D | M] (American Express Online Assistant) – C:\Program Files\Mozilla Firefox\extensions\{6bae2634-6076-40a2-be93-600b67061f6c}
[2010/01/16 08:46:42 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{214F2009-B770-4270-9860-89CD8A50478F}
[2010/02/21 09:44:33 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{24AF10CD-D80F-4A93-B763-2B7CD1E15410}
[2010/02/27 08:27:13 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{538C6ACE-FB87-474C-A103-46FB5832D8BD}
[2010/01/30 08:24:20 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{5CDC00D3-983D-42BB-A673-966E5B0E2306}
[2010/02/15 15:30:43 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{86AE899F-3B6E-42D0-B054-301B77859398}
[2010/02/05 08:30:41 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{87CA3053-8530-4233-A6C9-8D18285FB1E7}
[2010/01/23 08:40:32 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{AF45588C-2174-415C-8493-40DAC4AB1C62}
[2010/02/10 07:04:46 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{C3F91810-FD9C-47BA-BF56-523B99848792}
[2009/12/26 15:27:03 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{C73D32D1-835F-43B6-8151-8C5365059C66}
[2009/12/26 16:45:42 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{CE1701E9-00FA-4AB3-88AC-0E424249F7A4}
[2010/01/22 06:04:55 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{EA4C5146-8C4C-449A-9C25-4C435C87694A}
[2010/02/24 07:39:59 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\JENNIFER\LOCAL SETTINGS\APPLICATION DATA\{EC6A3E63-0817-49DA-95A6-A23140F0FC7F}
[2008/12/12 23:43:17 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2007/04/16 11:07:12 | 000,180,293 | —- | M] () – C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
[2011/01/19 06:50:25 | 000,001,919 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\bing-zugo.xml
O1 HOSTS File: ([2009/07/30 10:38:01 | 000,000,022 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (WhiteSmoke Toolbar) - {52794457-af6c-4c50-9def-f2e24f4c8889} - C:\Program Files\whitesmoketoolbar\whitesmoketoolbarX.dll ()
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Online Assistant) - {F997ACBD-1292-4c74-B96B-83BA5665E260} - C:\Program Files\American Express Online Assistant\ietoolbar.dll (American Express)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKLM\..\Toolbar: (WhiteSmoke Toolbar) - {52794457-af6c-4c50-9def-f2e24f4c8889} - C:\Program Files\whitesmoketoolbar\whitesmoketoolbarX.dll ()
O3 - HKLM\..\Toolbar: (Online Assistant) - {D79C4ACF-F903-4854-95CA-CDE413AC7E18} - C:\Program Files\American Express Online Assistant\ietoolbar.dll (American Express)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\..\Toolbar\WebBrowser: (Online Assistant) - {D79C4ACF-F903-4854-95CA-CDE413AC7E18} - C:\Program Files\American Express Online Assistant\ietoolbar.dll (American Express)
O3 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Carbonite Backup] C:\Program Files\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [ISUSPM Startup] c:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKLM..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [{E3004CF3-65FE-B391-A4F3-F679A94B72C5}] C:\Documents and Settings\Jennifer\Application Data\Irba\rakib.exe ()
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [Aim6] File not found
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [ISUSPM] C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe (Macrovision Corporation)
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006..\RunOnce: [Shockwave Updater] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Dell Network Assistant.lnk = C:\WINDOWS\Installer\{0240BDFB-2995-4A3F-8C96-18D41282B716}\Icon0240BDFB3.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launch Whitesmoke Translator.lnk = C:\Program Files\Whitesmoke Translator\WSTrayDictMode.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Online Assistant.lnk = C:\Program Files\American Express Online Assistant\OnlineAssistant.exe (American Express)
O4 - Startup: C:\Documents and Settings\Default User\Start Menu\Programs\Startup\efsoyb.exe ()
O4 - Startup: C:\Documents and Settings\Jennifer\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLegacyLogonScripts = 0
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideLogoffScripts = 0
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: HideStartupScripts = 0
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunLogonScriptSync = 1
O7 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: RunStartupScriptSync = 0
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O9 - Extra Button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O15 - HKLM\..Trusted Domains: localhost ([]http in Local intranet)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} http://www.linkedin.com/cab/LinkedInContactFinderControl.cab (LinkedIn ContactFinderControl)
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} http://www.eset.eu/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} http://www.shockwave.com/content/chainz2/sis/mjolauncher.cab (MJLauncherCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} https://secure.logmein.com/activex/ractrl.cab?lmi=100 (Performance Viewer Activex Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (GTGina.dll) - C:\WINDOWS\System32\GTGina.dll (Gemtek)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Jennifer\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jennifer\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 11:04:08 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2\{54b6bb08-3dd1-11df-b8c2-001d0992444b}\Shell - "" = AutoRun
O33 - MountPoints2\{54b6bb08-3dd1-11df-b8c2-001d0992444b}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{54b6bb08-3dd1-11df-b8c2-001d0992444b}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a
O33 - MountPoints2\{d6bcafaa-626b-11de-b847-0016b654bb60}\Shell - "" = AutoRun
O33 - MountPoints2\{d6bcafaa-626b-11de-b847-0016b654bb60}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{d6bcafaa-626b-11de-b847-0016b654bb60}\Shell\AutoRun\command - "" = J:\StarterOfficeGuardian.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKU\S-1-5-21-2975155819-1990629535-245175267-1006\…exe [@ = exefile] – Reg Error: Key error. File not found
NetSvcs: 6to4 - C:\WINDOWS\system32\6to4v32.dll ()
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (183790240530432)
========== Files/Folders - Created Within 30 Days ==========
[2011/01/19 21:36:42 | 000,602,112 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
[2011/01/19 20:14:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer\Application Data\whitesmoketoolbar
[2011/01/19 09:17:34 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Unity
[2011/01/19 07:40:49 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Apple Computer
[2011/01/19 07:40:49 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Apple Computer
[2011/01/19 06:51:25 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Mozilla
[2011/01/19 06:51:21 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\whitesmoketoolbar
[2011/01/19 06:51:02 | 000,000,000 | —D | C] – C:\Program Files\Whitesmoke Translator
[2011/01/19 06:51:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\WhiteSmoke Translator
[2011/01/19 06:50:59 | 000,000,000 | —D | C] – C:\Program Files\whitesmoketoolbar
[2011/01/19 06:50:46 | 000,000,000 | —D | C] – C:\WINDOWS\System32\%APPDATA%
[2011/01/19 06:47:57 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\Adobe
[2011/01/18 23:10:05 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Application Data\Macromedia
[2011/01/18 22:52:43 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Sun
[2011/01/18 22:51:04 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Macromedia
[2011/01/18 22:51:03 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Adobe
[2010/12/26 13:58:34 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2010/12/26 13:57:50 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2010/12/26 13:57:48 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2010/12/26 13:57:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/12/26 13:56:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\QuickTime
[2010/12/26 13:56:37 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2010/12/26 13:55:49 | 004,184,352 | —- | C] (Apple, Inc.) – C:\WINDOWS\System32\usbaaplrc.dll
[2010/12/26 13:55:32 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2010/12/26 13:55:05 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/01/19 21:42:05 | 000,359,929 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\dds.scr
[2011/01/19 21:36:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
[2011/01/19 21:08:54 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/19 20:12:31 | 000,000,854 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Online Assistant.lnk
[2011/01/19 20:12:23 | 000,002,333 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Dell Network Assistant.lnk
[2011/01/19 20:11:45 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/01/19 20:11:44 | 3209,871,360 | -HS- | M] () – C:\hiberfil.sys
[2011/01/19 10:48:40 | 000,053,248 | —- | M] () – C:\WINDOWS\System32\6to4v32.dll
[2011/01/19 06:51:29 | 000,001,356 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Buy Whitesmoke Translator.lnk
[2011/01/19 06:51:28 | 000,001,725 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launch Whitesmoke Translator.lnk
[2011/01/19 06:51:02 | 000,001,453 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Launch WhiteSmoke Translator.lnk
[2011/01/18 10:31:01 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/01/16 19:05:16 | 000,026,624 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\Copy of playoffs 2010 week 2.xls
[2011/01/16 18:47:43 | 000,152,064 | —- | M] () – C:\Documents and Settings\Jennifer\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/15 16:08:10 | 001,215,575 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02857.JPG
[2011/01/15 16:08:02 | 001,253,441 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02856.JPG
[2011/01/15 16:06:58 | 001,302,227 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02855.JPG
[2011/01/15 16:06:46 | 001,305,501 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02854.JPG
[2011/01/15 16:06:24 | 000,385,706 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\MOV02853.MPG
[2011/01/15 16:06:24 | 000,004,820 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\MOV02853.THM
[2011/01/15 15:58:48 | 001,250,047 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02852.JPG
[2011/01/15 15:58:40 | 001,295,990 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02851.JPG
[2011/01/15 15:58:34 | 001,271,654 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02850.JPG
[2011/01/15 15:58:24 | 001,331,685 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02849.JPG
[2011/01/15 15:58:20 | 001,295,900 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02848.JPG
[2011/01/15 15:58:12 | 001,273,346 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02847.JPG
[2011/01/15 15:57:54 | 001,177,578 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02846.JPG
[2011/01/15 15:57:52 | 001,179,039 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02845.JPG
[2011/01/15 15:57:46 | 001,286,640 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02844.JPG
[2011/01/15 15:57:36 | 001,217,236 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02843.JPG
[2011/01/15 15:57:30 | 001,295,288 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02842.JPG
[2011/01/15 15:57:18 | 001,279,824 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02841.JPG
[2011/01/15 15:57:14 | 001,270,977 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02840.JPG
[2011/01/15 15:57:10 | 001,258,607 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02839.JPG
[2011/01/15 15:57:00 | 001,298,489 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02838.JPG
[2011/01/15 15:56:52 | 001,271,700 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02837.JPG
[2011/01/15 15:56:46 | 001,201,755 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02836.JPG
[2011/01/15 15:56:40 | 001,291,402 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02835.JPG
[2011/01/15 15:56:28 | 001,244,135 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02834.JPG
[2011/01/15 15:56:18 | 001,292,795 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02833.JPG
[2011/01/15 15:56:12 | 001,300,180 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02832.JPG
[2011/01/15 15:56:04 | 001,223,818 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02831.JPG
[2011/01/15 15:55:56 | 001,278,536 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02830.JPG
[2011/01/15 13:42:36 | 001,188,762 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02829.JPG
[2011/01/15 13:42:34 | 001,178,407 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02828.JPG
[2011/01/15 13:42:30 | 001,317,772 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02827.JPG
[2011/01/15 13:42:24 | 001,260,728 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02826.JPG
[2011/01/15 13:42:14 | 001,189,786 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02825.JPG
[2011/01/15 13:42:06 | 001,227,793 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02824.JPG
[2011/01/15 13:42:04 | 001,248,037 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02823.JPG
[2011/01/15 13:41:26 | 001,207,968 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02822.JPG
[2011/01/15 13:41:20 | 001,219,691 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02821.JPG
[2011/01/15 13:41:16 | 001,186,309 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02820.JPG
[2011/01/15 13:40:40 | 001,261,162 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02819.JPG
[2011/01/15 13:40:30 | 001,165,114 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02818.JPG
[2011/01/15 13:40:18 | 001,316,342 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02817.JPG
[2011/01/15 13:40:14 | 001,262,093 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02816.JPG
[2011/01/15 13:40:08 | 001,185,058 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02815.JPG
[2011/01/15 13:39:54 | 001,210,183 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02814.JPG
[2011/01/15 13:39:50 | 001,230,519 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02813.JPG
[2011/01/15 13:39:40 | 001,303,196 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02812.JPG
[2011/01/15 13:39:22 | 001,290,235 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02811.JPG
[2011/01/15 13:39:04 | 001,200,639 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02810.JPG
[2011/01/15 13:39:00 | 001,241,495 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02809.JPG
[2011/01/15 13:38:56 | 001,255,950 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02808.JPG
[2011/01/15 13:38:46 | 000,646,697 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\MOV02807.MPG
[2011/01/15 13:38:46 | 000,007,464 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\MOV02807.THM
[2011/01/15 13:05:38 | 001,232,889 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02806.JPG
[2011/01/15 13:05:26 | 001,265,191 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02805.JPG
[2011/01/15 13:05:18 | 001,232,785 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02804.JPG
[2011/01/15 13:04:00 | 001,301,496 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02803.JPG
[2011/01/15 13:03:58 | 001,267,995 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02802.JPG
[2011/01/15 13:03:52 | 001,326,501 | —- | M] () – C:\Documents and Settings\Jennifer\My Documents\DSC02801.JPG
[2011/01/10 07:47:57 | 000,024,576 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\Copy of playoffs.xls
[2011/01/04 08:30:59 | 000,037,376 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\Jaymes christmas List.doc
[2010/12/26 13:58:34 | 000,001,542 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/12/26 13:56:55 | 000,001,604 | —- | M] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/12/25 08:39:13 | 000,000,043 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\watch pic.gif
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/01/19 21:42:16 | 000,359,929 | —- | C] () – C:\Documents and Settings\Jennifer\Desktop\dds.scr
[2011/01/19 10:48:40 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\6to4v32.dll
[2011/01/19 06:51:29 | 000,001,356 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Buy Whitesmoke Translator.lnk
[2011/01/19 06:51:28 | 000,001,725 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Launch Whitesmoke Translator.lnk
[2011/01/19 06:51:02 | 000,001,453 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Launch WhiteSmoke Translator.lnk
[2011/01/18 22:51:22 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/16 19:04:46 | 000,026,624 | —- | C] () – C:\Documents and Settings\Jennifer\Desktop\Copy of playoffs 2010 week 2.xls
[2011/01/15 17:14:26 | 001,331,685 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02849.JPG
[2011/01/15 17:14:26 | 001,305,501 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02854.JPG
[2011/01/15 17:14:26 | 001,302,227 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02855.JPG
[2011/01/15 17:14:26 | 001,295,990 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02851.JPG
[2011/01/15 17:14:26 | 001,271,654 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02850.JPG
[2011/01/15 17:14:26 | 001,253,441 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02856.JPG
[2011/01/15 17:14:26 | 001,250,047 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02852.JPG
[2011/01/15 17:14:26 | 001,215,575 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02857.JPG
[2011/01/15 17:14:26 | 000,646,697 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\MOV02807.MPG
[2011/01/15 17:14:26 | 000,385,706 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\MOV02853.MPG
[2011/01/15 17:14:26 | 000,007,464 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\MOV02807.THM
[2011/01/15 17:14:26 | 000,004,820 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\MOV02853.THM
[2011/01/15 17:14:25 | 001,300,180 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02832.JPG
[2011/01/15 17:14:25 | 001,298,489 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02838.JPG
[2011/01/15 17:14:25 | 001,295,900 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02848.JPG
[2011/01/15 17:14:25 | 001,295,288 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02842.JPG
[2011/01/15 17:14:25 | 001,292,795 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02833.JPG
[2011/01/15 17:14:25 | 001,291,402 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02835.JPG
[2011/01/15 17:14:25 | 001,286,640 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02844.JPG
[2011/01/15 17:14:25 | 001,279,824 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02841.JPG
[2011/01/15 17:14:25 | 001,278,536 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02830.JPG
[2011/01/15 17:14:25 | 001,273,346 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02847.JPG
[2011/01/15 17:14:25 | 001,271,700 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02837.JPG
[2011/01/15 17:14:25 | 001,270,977 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02840.JPG
[2011/01/15 17:14:25 | 001,258,607 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02839.JPG
[2011/01/15 17:14:25 | 001,244,135 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02834.JPG
[2011/01/15 17:14:25 | 001,223,818 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02831.JPG
[2011/01/15 17:14:25 | 001,217,236 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02843.JPG
[2011/01/15 17:14:25 | 001,201,755 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02836.JPG
[2011/01/15 17:14:25 | 001,188,762 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02829.JPG
[2011/01/15 17:14:25 | 001,179,039 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02845.JPG
[2011/01/15 17:14:25 | 001,178,407 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02828.JPG
[2011/01/15 17:14:25 | 001,177,578 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02846.JPG
[2011/01/15 17:14:24 | 001,317,772 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02827.JPG
[2011/01/15 17:14:24 | 001,260,728 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02826.JPG
[2011/01/15 17:14:24 | 001,248,037 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02823.JPG
[2011/01/15 17:14:24 | 001,227,793 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02824.JPG
[2011/01/15 17:14:24 | 001,207,968 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02822.JPG
[2011/01/15 17:14:24 | 001,189,786 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02825.JPG
[2011/01/15 17:14:23 | 001,316,342 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02817.JPG
[2011/01/15 17:14:23 | 001,261,162 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02819.JPG
[2011/01/15 17:14:23 | 001,219,691 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02821.JPG
[2011/01/15 17:14:23 | 001,186,309 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02820.JPG
[2011/01/15 17:14:23 | 001,165,114 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02818.JPG
[2011/01/15 17:14:22 | 001,303,196 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02812.JPG
[2011/01/15 17:14:22 | 001,290,235 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02811.JPG
[2011/01/15 17:14:22 | 001,262,093 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02816.JPG
[2011/01/15 17:14:22 | 001,230,519 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02813.JPG
[2011/01/15 17:14:22 | 001,210,183 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02814.JPG
[2011/01/15 17:14:22 | 001,185,058 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02815.JPG
[2011/01/15 17:14:21 | 001,265,191 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02805.JPG
[2011/01/15 17:14:21 | 001,255,950 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02808.JPG
[2011/01/15 17:14:21 | 001,241,495 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02809.JPG
[2011/01/15 17:14:21 | 001,232,889 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02806.JPG
[2011/01/15 17:14:21 | 001,232,785 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02804.JPG
[2011/01/15 17:14:21 | 001,200,639 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02810.JPG
[2011/01/15 17:14:20 | 001,326,501 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02801.JPG
[2011/01/15 17:14:20 | 001,301,496 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02803.JPG
[2011/01/15 17:14:20 | 001,267,995 | —- | C] () – C:\Documents and Settings\Jennifer\My Documents\DSC02802.JPG
[2011/01/10 07:47:57 | 000,024,576 | —- | C] () – C:\Documents and Settings\Jennifer\Desktop\Copy of playoffs.xls
[2010/12/26 13:58:34 | 000,001,542 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2010/12/26 13:56:55 | 000,001,604 | —- | C] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2010/12/25 08:39:12 | 000,000,043 | —- | C] () – C:\Documents and Settings\Jennifer\Desktop\watch pic.gif
[2010/03/01 22:38:12 | 000,767,952 | —- | C] () – C:\WINDOWS\BDTSupport.dll.old
[2010/03/01 22:38:12 | 000,763,832 | —- | C] () – C:\WINDOWS\BDTSupport.dll
[2010/03/01 22:25:09 | 000,016,924 | -HS- | C] () – C:\Documents and Settings\Jennifer\Local Settings\Application Data\GyBl5ci
[2009/04/19 12:32:35 | 000,000,022 | —- | C] () – C:\WINDOWS\iexplore.ini
[2009/02/24 08:21:40 | 000,000,131 | —- | C] () – C:\Documents and Settings\Jennifer\Local Settings\Application Data\fusioncache.dat
[2009/01/17 18:43:38 | 000,002,582 | —- | C] () – C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2008/05/26 08:01:29 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2008/05/20 17:59:21 | 000,152,064 | —- | C] () – C:\Documents and Settings\Jennifer\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/05/14 21:23:43 | 000,094,208 | —- | C] () – C:\WINDOWS\System32\GTW32N50.dll
[2008/05/14 21:23:29 | 000,001,361 | —- | C] () – C:\WINDOWS\System32\WLAN.INI
[2008/05/09 19:28:11 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2008/05/09 19:25:28 | 000,000,859 | —- | C] () – C:\WINDOWS\{0240BDFB-2995-4A3F-8C96-18D41282B716}_WiseFW.ini
[2008/05/09 19:23:58 | 000,056,056 | —- | C] () – C:\WINDOWS\System32\DLAAPI_W.DLL
[2008/05/09 19:23:58 | 000,000,118 | —- | C] () – C:\WINDOWS\wininit.ini
[2008/05/09 19:04:57 | 000,876,544 | —- | C] () – C:\WINDOWS\System32\TEACico2.dll
[2008/05/09 19:04:42 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\igfxCoIn_v4820.dll
[2008/05/09 19:03:39 | 000,001,124 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2007/08/06 13:17:40 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\OnlineScannerLang.dll
[2007/08/06 12:07:30 | 000,008,784 | —- | C] () – C:\WINDOWS\System32\ractrlkeyhook.dll
[2007/08/02 18:11:28 | 000,253,952 | —- | C] () – C:\WINDOWS\System32\OnlineScannerDLLA.dll
[2007/08/02 18:11:14 | 000,241,664 | —- | C] () – C:\WINDOWS\System32\OnlineScannerDLLW.dll
[2007/07/27 15:49:02 | 000,225,355 | —- | C] () – C:\WINDOWS\System32\lnod32apiW.dll
[2007/07/27 15:49:02 | 000,196,683 | —- | C] () – C:\WINDOWS\System32\lnod32apiA.dll
[2006/11/07 02:25:58 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2006/09/16 21:36:50 | 000,520,192 | —- | C] () – C:\WINDOWS\System32\CddbPlaylist2Roxio.dll
[2006/09/16 21:36:50 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2005/12/05 20:25:22 | 000,139,264 | —- | C] () – C:\WINDOWS\System32\lnod32umc.dll
[2005/12/05 13:37:10 | 000,106,496 | —- | C] () – C:\WINDOWS\System32\lnod32upd.dll
[2004/08/10 11:12:05 | 000,000,780 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/10 11:01:18 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/08/10 10:57:52 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2003/01/07 14:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
========== LOP Check ==========
[2009/01/06 18:22:11 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\acccore
[2008/11/25 09:41:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\American Express Online Assistant
[2010/04/01 15:42:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Autodesk
[2010/04/28 12:02:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Carbonite
[2009/08/02 17:39:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Merscom
[2009/04/19 12:32:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MumboJumbo
[2008/08/01 21:01:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NetZero
[2008/11/11 23:45:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2008/05/09 19:25:29 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SingleClick Systems
[2008/05/09 19:26:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SupportSoft
[2011/01/19 21:29:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2009/06/27 05:44:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/12/26 13:58:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/08/07 09:05:43 | 000,000,000 | -HSD | M] – C:\Documents and Settings\Jennifer\Application Data\.#
[2009/01/06 18:27:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\acccore
[2009/06/10 20:31:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Amazon
[2010/04/01 15:42:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Autodesk
[2009/01/11 19:11:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\AutoSync for Yahoo
[2010/05/01 14:32:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Facebook
[2009/07/08 09:30:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Irba
[2009/07/13 08:57:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\iWin
[2008/05/16 07:26:19 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Netscape
[2009/01/28 10:35:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Opera
[2009/02/16 22:16:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\TeamViewer
[2009/01/02 13:48:23 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Unity
[2011/01/19 20:14:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\whitesmoketoolbar
[2011/01/19 14:56:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer\Application Data\Wovo
[2011/01/19 06:51:26 | 000,000,000 | —D | M] – C:\Documents and Settings\NetworkService\Application Data\whitesmoketoolbar
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2004/08/10 11:04:08 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2008/09/19 21:19:25 | 000,000,211 | —- | M] () – C:\Boot.bak
[2009/12/26 17:00:00 | 000,000,281 | RHS- | M] () – C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | —- | M] () – C:\cmldr
[2004/08/10 11:04:08 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2008/05/09 19:05:48 | 000,007,072 | RH– | M] () – C:\dell.sdr
[2011/01/19 20:11:44 | 3209,871,360 | -HS- | M] () – C:\hiberfil.sys
[2008/05/14 20:25:57 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2004/08/10 11:04:08 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2009/06/27 05:45:14 | 000,000,740 | -H– | M] () – C:\IPH.PH
[2008/12/12 23:40:38 | 000,010,118 | —- | M] () – C:\JavaRa.log
[2011/01/19 20:51:52 | 000,000,109 | —- | M] () – C:\mbam-error.txt
[2004/08/10 11:04:08 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/08/04 03:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2010/11/16 23:21:51 | 000,250,048 | —- | M] () – C:\ntldr
[2011/01/19 20:11:43 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2010/02/15 15:46:51 | 000,000,390 | —- | M] () – C:\rkill.log
[2009/02/18 14:22:59 | 000,000,594 | —- | M] () – C:\updatedatfix.log
[2008/05/14 21:47:51 | 000,000,146 | —- | M] () – C:\YServer.txt
< %systemroot%\Fonts\*.com >
[2006/04/18 14:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 13:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 13:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2004/08/10 11:03:42 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 06:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/03/28 13:57:34 | 000,274,944 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp5ha.dll
[2008/10/28 12:49:30 | 000,321,536 | —- | M] (Hewlett-Packard Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\hpzpp696.dll
[2003/06/18 16:31:48 | 000,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 04:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2004/08/10 10:56:48 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2004/08/10 10:56:46 | 000,634,880 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2004/08/10 10:56:46 | 000,872,448 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/11/16 23:25:07 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/05/14 20:07:05 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Jennifer\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/08/10 11:08:38 | 000,000,079 | —- | M] () – C:\Documents and Settings\Jennifer\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2010/03/01 22:43:48 | 034,596,344 | —- | M] (PC Tools ) – C:\Documents and Settings\Jennifer\Desktop\7.0.0.538f-sdasetup.exe
[2008/12/12 23:38:04 | 035,124,856 | —- | M] ( ) – C:\Documents and Settings\Jennifer\Desktop\AdbeRdr90_en_US.exe
[2009/06/21 06:58:28 | 000,606,168 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\AmazonMP3Installer(2).exe
[2009/06/10 20:30:18 | 000,606,168 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\AmazonMP3Installer.exe
[2008/05/16 19:43:25 | 022,311,160 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\antivir_workstation_winu_en_h.exe
[2009/01/11 19:04:57 | 018,062,232 | —- | M] (Nokia ) – C:\Documents and Settings\Jennifer\Desktop\autosync_1049.exe
[2009/07/22 18:24:19 | 008,117,208 | —- | M] (Mozilla) – C:\Documents and Settings\Jennifer\Desktop\Firefox Setup 3.5.1.exe
[2009/12/18 10:25:09 | 008,086,544 | —- | M] (Mozilla) – C:\Documents and Settings\Jennifer\Desktop\Firefox Setup 3.5.6.exe
[2010/09/06 09:36:17 | 008,573,648 | —- | M] (Mozilla) – C:\Documents and Settings\Jennifer\Desktop\Firefox Setup 3.6.8.exe
[2008/08/01 22:49:32 | 000,208,384 | —- | M] (Paul McLain and Fred de Vries) – C:\Documents and Settings\Jennifer\Desktop\JavaRa.exe
[2008/11/25 09:39:15 | 003,091,808 | —- | M] (American Express) – C:\Documents and Settings\Jennifer\Desktop\online_assistant.exe
[2011/01/19 21:36:36 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer\Desktop\OTL.exe
[2008/12/09 12:29:05 | 000,305,705 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\RSIT.exe
[2010/03/01 22:34:21 | 034,870,008 | —- | M] (PC Tools ) – C:\Documents and Settings\Jennifer\Desktop\sdasetup_aff.exe
[2009/06/19 18:36:38 | 001,490,672 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\TeamViewerQS(2).exe
[2009/06/19 16:54:48 | 001,490,672 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\TeamViewerQS.exe
[2009/06/19 18:37:27 | 002,042,328 | —- | M] () – C:\Documents and Settings\Jennifer\Desktop\TeamViewer_Setup.exe
[2009/01/02 13:41:45 | 003,292,936 | —- | M] (Unity Technologies ApS) – C:\Documents and Settings\Jennifer\Desktop\UnityWebPlayer.exe
[2009/06/26 10:16:36 | 000,897,920 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\Jennifer\Desktop\WGAPluginInstall.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-01-12 09:02:14
========== Alternate Data Streams ==========
@Alternate Data Stream - 292 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:7715B65F
@Alternate Data Stream - 200 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 162 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6D6C4572
@Alternate Data Stream - 119 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:62E2D794
@Alternate Data Stream - 110 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:F38450C8
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:B211CA64
< End of report >
OTL Extras logfile created on: 1/19/2011 9:40:37 PM - Run 1
OTL by OldTimer - Version 3.2.20.2 Folder = C:\Documents and Settings\Jennifer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 77.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.77 Gb Total Space | 178.37 Gb Free Space | 76.63% Space Free | Partition Type: NTFS
Computer Name: JENS-OFFICE | User Name: Jennifer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = NavigatorHTML] – C:\Program Files\Netscape\Navigator 9\navigator.exe (Netscape)
[HKEY_USERS\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Classes\]
.exe [@ = exefile] – Reg Error: Key error. File not found
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
http [open] – C:\PROGRA~1\NETSCAPE\NAVIGA~1\NAVIGA~1.EXE -requestPending -osint -url "%1" (Netscape)
https [open] – C:\PROGRA~1\NETSCAPE\NAVIGA~1\NAVIGA~1.EXE -requestPending -osint -url "%1" (Netscape)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"10421:UDP" = 10421:UDP:*:Enabled:SingleClick Discovery Protocol
"10426:UDP" = 10426:UDP:*:Enabled:SingleClick ICC
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe" = C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe:*:Enabled:CyberLink PowerDVD DX – (CyberLink Corp.)
"C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" = C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe:*:Enabled:CyberLink PowerDVD DX Resident Program – (CyberLink Corp.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe" = C:\Program Files\CyberLink\PowerDVD DX\PowerDVD.exe:*:Enabled:CyberLink PowerDVD DX – (CyberLink Corp.)
"C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe" = C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe:*:Enabled:CyberLink PowerDVD DX Resident Program – (CyberLink Corp.)
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger – (Yahoo! Inc.)
"C:\Program Files\Yahoo!\Messenger\YServer.exe" = C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server
"C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe" = C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe:*:Enabled:AppleMobileDeviceService
"C:\Program Files\Dell Network Assistant\ezi_hnm2.exe" = C:\Program Files\Dell Network Assistant\ezi_hnm2.exe:*:Enabled:Dell Network Assistant – (SingleClick Systems)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader – (AOL LLC)
"C:\Program Files\AIM6\aim6.exe" = C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM – (AOL LLC)
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe" = C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application – (TeamViewer GmbH)
"C:\Documents and Settings\Jennifer\Desktop\tbzip\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\tbzip\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\tbzip\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\tbzip\TicketBuyEvent.exe:*:Enabled:
"J:\tbzip\TicketBuy.exe" = J:\tbzip\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuy4444\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuy4444\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuy4444\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuy4444\TicketBuyEvent.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TICKET BUY\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\TICKET BUY\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TICKET BUY\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\TICKET BUY\TicketBuyEvent.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\Old ticketbuy\TicketBuy4444\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\Old ticketbuy\TicketBuy4444\TicketBuy.exe:*:Enabled: – ( )
"C:\Documents and Settings\Jennifer\temp\TeamViewer\Version4\TeamViewer.exe" = C:\Documents and Settings\Jennifer\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application
"C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TicketBuyEvent.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TBuy 9-15\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TBuy 9-15\TicketBuyEvent.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TBuy 9-15\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\TicketBuynew619\TicketBuy\TBuy 9-15\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\Extra new ticketbuy\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\Extra new ticketbuy\TicketBuy.exe:*:Enabled:
"C:\Documents and Settings\Jennifer\Desktop\Extra new ticketbuy\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\Extra new ticketbuy\TicketBuyEvent.exe:*:Enabled:
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe – (Hewlett-Packard Development Co. L.P.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\Smart Web Printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe – (Hewlett-Packard Co.)
"C:\Documents and Settings\Jennifer\Desktop\may 26 ticketbuy\TicketBuy.exe" = C:\Documents and Settings\Jennifer\Desktop\may 26 ticketbuy\TicketBuy.exe:*:Enabled: – ( )
"C:\Documents and Settings\Jennifer\Desktop\may 26 ticketbuy\TicketBuyEvent.exe" = C:\Documents and Settings\Jennifer\Desktop\may 26 ticketbuy\TicketBuyEvent.exe:*:Enabled: – ( )
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{001E7FB6-BB6B-4ED0-BEDC-B5404ED96D4E}" = DocProc
"{0240BDFB-2995-4A3F-8C96-18D41282B716}" = Dell Network Assistant
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{03A7C57A-B2C8-409b-92E5-524A0DFD0DD3}" = Status
"{087A66B8-1F0F-4a8d-A649-0CFE276AA7C0}" = WebReg
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{1ADB7BF5-F8EB-4F76-98FD-65A7FFBEAECE}" = Whitesmoke Translator
"{1E0AD97C-678A-48C6-A7C3-CCC87F2DA9D8}" = PS_BSIZE_04_B8500_Software_Min
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java™ 6 Update 14
"{2A329FB6-389D-4396-A974-29656D6864AE}" = MarketResearch
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{2C0CD17D-0B06-4700-83FA-7344B868B0A2}" = Opera 9.63
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}" = Roxio Drag-to-Disc
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Sonic Activation Module
"{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup
"{47ECCB1F-2811-49C0-B6A7-26778639ABA0}" = 32 Bit HP CIO Components Installer
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4A7AE408-7846-4D13-81F7-D4447A994DBA}" = Calendar
"{4D304678-738E-42a0-931A-2B022F49DEB8}" = TrayApp
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5783F2D7-5001-0409-0002-0060B0CE6BBA}" = AutoCAD 2007 - English
"{5783F2D7-7001-0409-0002-0060B0CE6BBA}" = AutoCAD 2009 - English
"{5905F42D-3F5F-4916-ADA6-94A3646AEE76}" = Dell Driver Reset Tool
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67790AD5-777F-4652-9556-AED6ADC03D55}" = B8500
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6EED4269-588D-45b8-A80C-26A9CA62EE4E}" = HPSSupply
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{71310D9B-7555-44FE-914C-A1B55CB7BC5D}" = Scrapbook
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{777CA40C-0206-4EF6-A0FC-618BF06BF8D0}" = Intel® PRO Network Connections [removed]
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}" = Roxio Creator BDAV Plugin
"{881F5DE8-9367-4B81-A325-E91BBC6472F9}" = iTunes
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{98B672F2-857C-4CC9-A25D-6B218077F4F6}" = Yahoo! Autosync
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C09DFEC-1F55-4E6D-BDEF-0D2F6CA06D21}" = addcustompaper
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC13BA3A-336B-45a4-B3FE-2D3058A7B533}" = Toolbox
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.0
"{ACA85783-8EEA-4f0a-B2A3-A8173F30209F}" = C4200_doccd
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B09BCBF6-87EE-4403-A336-3A9510856535}" = HP Photosmart All-In-One Software 9.0
"{B0D83FCD-9D42-43ED-8315-250326AADA02}" = ArcSoft Print Creations - Scrapbook
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{B7F98125-4955-41E3-8A71-4CE11CE9C198}" = KODAK Gallery Upload Software
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BFDE4176-5DFE-4db9-AA00-8F30CB001BDA}" = c4200_Help
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C39E671D-0528-4c5e-A034-8470C5BC393A}" = C4200
"{C4124E95-5061-4776-8D5D-E3D931C778E1}" = Microsoft VC9 runtime libraries
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C867F57B-39C1-4341-A164-F569839BCCBF}" = Cards
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator DE
"{C9D96682-5A4D-45FA-BA3E-DDCB2B0CB868}" = Safari
"{CA9ED5E4-1548-485B-A293-417840060158}" = ArcSoft Print Creations - Photo Calendar
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D8B7A682-20DA-4797-8415-B1FB14D4D32B}" = PS_AIO_Software
"{E28750A2-45F2-4b63-99F7-9F81A94B1E2D}" = PS_AIO_Software_min
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center
"{E3C9FB9B-5D79-469e-8E81-9A5ACE0BB517}" = HP Photosmart B8500 Driver Software 12.0 Rel .4
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F04F9557-81A9-4293-BC49-2C216FA325A7}" = ArcSoft Print Creations - Greeting Card
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{F769B78E-FF0E-4db5-95E2-9F4C8D6352FE}" = DeviceDiscovery
"{F855C3AE-992D-4B84-A09D-07103CDCDAC2}" = Compact Wireless-G USB Adapter
"{FD011F34-749C-47E0-BA48-6009412C4789}" = ArcSoft Print Creations
"{FD7F242B-9AA0-40c3-941E-3A9821D19C09}" = PS_AIO_ProductContext
"{FE57DE70-95DE-4B64-9266-84DA811053DB}" = HP Update
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"AIM_6" = AIM 6
"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.10
"ATT-R9" = AT&T; U-verse Setup
"AutoCAD 2009 - English" = AutoCAD 2009 - English
"Autodesk DWF Viewer" = Autodesk DWF Viewer
"Avira AntiVir Desktop" = Avira AntiVir Premium
"AXP" = Online Assistant
"Browser Defender_is1" = Browser Defender 2.0.6.15
"Carbonite Backup" = Carbonite
"Create A Mall" = Create A Mall
"Defender of the Crown: Heroes Live Forever" = Defender of the Crown: Heroes Live Forever
"EsetOnlineScanner" = ESET Online Scanner
"HDMI" = Intel® Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"HP Imaging Device Functions" = HP Imaging Device Functions 12.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 12.0
"HPOCR" = HP OCR Software 9.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Jigsaw Puzzle Player" = Jigsaw Puzzle Player
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Netscape Navigator ([removed])" = Netscape Navigator ([removed])
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PDF Splitter and Merger 4.0" = PDF Splitter and Merger 4.0
"Risk®" = Risk®
"SearchAssist" = SearchAssist
"Shop for HP Supplies" = Shop for HP Supplies
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"Spyware Doctor" = Spyware Doctor 7.0
"TeamViewer 4" = TeamViewer 4
"UnityWebPlayer" = Unity Web Player
"ViewpointMediaPlayer" = Viewpoint Media Player
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Extras" = Yahoo! Browser Services
"Yahoo! Mail" = Yahoo! Internet Mail
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Search Defender" = Yahoo! Search Protection
"Yahoo! Software Update" = Yahoo! Software Update
"YInstHelper" = Yahoo! Install Manager
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-2975155819-1990629535-245175267-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Facebook Plug-In" = Facebook Plug-In
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus 2.9.2
========== Last 10 Event Log Errors ==========
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
< End of report >
