boffo123
Topic Starter
Hello:
PC with operating system Win XP Browser IE 8. I am having many unusual thing happen. Browesrs being hijacked. Windows explorer having problems and must close - debugging window pops up. I must log in every time I go on internet. Runtime errors pops up much. SAS finds Rogue.agent/GEN - Nullo[dll] removes it then it is back over and over again.
Hope you can help!!!!
OTL logfile created on: 2/1/2011 11:26:42 AM - Run 3
OTL by OldTimer - Version 3.2.20.6 Folder = C:\otl scanner antivirus
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 80.00% Memory free
9.00 Gb Paging File | 9.00 Gb Available in Paging File | 93.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 270.99 Gb Total Space | 148.57 Gb Free Space | 54.82% Space Free | Partition Type: NTFS
Drive D: | 8.45 Gb Total Space | 0.46 Gb Free Space | 5.44% Space Free | Partition Type: FAT32
Drive K: | 931.51 Gb Total Space | 175.57 Gb Free Space | 18.85% Space Free | Partition Type: NTFS
Computer Name: YOUR-4DACD0EA75 | User Name: HP_Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\otl scanner antivirus\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
PRC - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\MPF\MpfSrv.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\arservice.exe (Microsoft)
========== Modules (SafeList) ==========
MOD - C:\otl scanner antivirus\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (Automatic LiveUpdate Scheduler) – File not found
SRV - (mcmscsvc) – C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SRV - (McAfee SiteAdvisor Service) – C:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
SRV - (MpfService) – C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
SRV - (McODS) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (McShield) – C:\Program Files\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.)
SRV - (McSysmon) – C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
SRV - (McProxy) – c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
SRV - (McNASvc) – c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
SRV - (FreeAgentGoNext Service) – C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
SRV - (ARSVC) – C:\WINDOWS\arservice.exe (Microsoft)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (ATMsrvc) – C:\WINDOWS\system32\ATMsrvc.exe (Adobe Systems Incorporated)
========== Driver Services (SafeList) ==========
DRV - (MPFP) – C:\WINDOWS\system32\drivers\Mpfp.sys (McAfee, Inc.)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (mfehidk) – C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfeavfk) – C:\WINDOWS\system32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfesmfk) – C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (mfebopk) – C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mferkdk) – C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (IrBus) – C:\WINDOWS\system32\drivers\irbus.sys (Microsoft Corporation)
DRV - (ElbyCDIO) – C:\WINDOWS\system32\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV - (ElbyDelay) – C:\WINDOWS\system32\drivers\ElbyDelay.sys (Elaborate Bytes AG)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (Ps2) – C:\WINDOWS\system32\drivers\PS2.sys (Hewlett-Packard Company)
DRV - (AgereSoftModem) – C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems)
DRV - (RTL8023xp) – C:\WINDOWS\system32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation )
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (hcwPP2) – C:\WINDOWS\system32\drivers\hcwPP2.sys (Hauppauge Computer Works, Inc.)
DRV - (P17) – C:\WINDOWS\system32\drivers\P17.sys (Creative Technology Ltd.)
DRV - (ftsata2) – C:\WINDOWS\system32\DRIVERS\ftsata2.sys (Promise Technology, Inc.)
DRV - (iaStor) – C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (AmdK8) – C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (ossrv) – C:\WINDOWS\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV - (ctsfm2k) – C:\WINDOWS\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV - (rtl8139) Realtek RTL8139(A/B/C) – C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (cdrbsdrv) – C:\WINDOWS\System32\drivers\CDRBSDRV.SYS (B.H.A Corporation)
DRV - (bb-run) – C:\WINDOWS\system32\DRIVERS\bb-run.sys (Promise Technology, Inc.)
DRV - (pfc) – C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTe…-8&fr;=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.tvguide.com/listings/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C8 35 61 07 1B D5 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1
FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2011/01/21 21:16:53 | 000,000,000 | —D | M]
O1 HOSTS File: ([2007/11/26 13:19:42 | 000,000,022 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (SpywareGuardDLBLOCK.CBrowserHelper) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll ()
O2 - BHO: (UberButton Class) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll (Yahoo!)
O2 - BHO: (YahooTaggedBM Class) - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\common\YIeTagBm.dll (Yahoo! Inc.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (hpWebHelper Class) - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll (TODO: )
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll (Google Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (SidebarAutoLaunch Class) - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - {33973600-925A-11D9-A1F6-9234C84D2622} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [McENUI] C:\Program Files\McAfee\MHN\McENUI.exe (McAfee, Inc.)
O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\P17.dll ()
O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\Recguard.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.)
O9 - Extra Button: SBC Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll (Yahoo!)
O9 - Extra Button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()
O9 - Extra 'Tools' menuitem : Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} http://us.dl1.yimg.com/download.yahoo.com/…nst_current.cab (Installation Support)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2…78f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupd…b?1195591567296 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} https://ediagnostics.lexmark.com/serval.cab (Lexmark eDiagnostics Class)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/02/22 09:15:54 | 000,000,100 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2001/07/27 15:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT – [ FAT32 ]
O33 - MountPoints2\{6d8288d5-8d2e-11df-8955-00161757475a}\Shell - "" = AutoRun
O33 - MountPoints2\{6d8288d5-8d2e-11df-8955-00161757475a}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{6d8288d5-8d2e-11df-8955-00161757475a}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
========== Files/Folders - Created Within 30 Days ==========
[2011/02/01 09:50:53 | 000,000,000 | —D | C] – C:\otl scanner antivirus
[2011/01/31 23:22:13 | 000,602,624 | —- | C] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTL.exe
[2011/01/31 18:02:02 | 000,000,000 | —D | C] – C:\Combofix newest
[2011/01/31 10:00:56 | 000,000,000 | —D | C] – C:\DDS newest
[2011/01/31 09:59:15 | 000,000,000 | —D | C] – C:\gmer new
[2011/01/30 20:06:29 | 000,000,000 | —D | C] – C:\Anti-virus Hijackthis log analized pic
[2011/01/30 16:33:25 | 000,000,000 | —D | C] – C:\HiJackThis newest
[2011/01/29 22:23:40 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/01/29 22:23:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/01/29 22:23:35 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2011/01/29 22:23:35 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/01/29 22:15:06 | 103,702,624 | —- | C] (Symantec Corporation) – C:\Documents and Settings\HP_Administrator\Desktop\NAV_18.1.0.37 norton anti virus_SYMTB_CNET FTT_177_5410.exe
[2011/01/29 21:46:59 | 007,734,240 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2011/01/28 21:41:01 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/01/28 21:41:01 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/01/28 21:41:01 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/01/27 15:13:36 | 000,000,000 | —D | C] – C:\K-lite codec pack 6.6.2
[2011/01/27 15:07:18 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Data
[2011/01/27 15:01:48 | 000,197,632 | —- | C] (Microsoft) – C:\Program Files\Common Files\OnlineFilesManager.dll
[2011/01/26 14:06:10 | 000,000,000 | —D | C] – C:\RAW Workflow from Capture to Archives A Complete Digital Photographer's Guide to Raw Imaging extracted
[2011/01/25 14:05:02 | 000,000,000 | —D | C] – C:\7 zip software
[2011/01/25 13:37:02 | 000,000,000 | —D | C] – C:\Rar archive
[2011/01/21 22:19:16 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2011/01/21 22:19:12 | 000,000,000 | —D | C] – C:\Program Files\MSBuild
[2011/01/21 22:19:03 | 000,000,000 | —D | C] – C:\Program Files\Reference Assemblies
[2011/01/21 22:18:28 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2011/01/21 22:18:28 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2011/01/21 22:18:28 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2011/01/21 22:18:28 | 000,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2011/01/21 22:18:28 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2011/01/21 22:18:28 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2011/01/21 21:55:11 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2011/01/21 21:29:23 | 000,974,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2011/01/21 21:29:23 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2011/01/21 21:26:18 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2011/01/21 21:26:18 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2011/01/21 21:24:21 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2011/01/21 21:24:02 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2011/01/21 21:23:49 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2011/01/21 21:23:36 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2011/01/21 21:23:19 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2011/01/21 21:16:24 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2011/01/21 21:10:54 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2011/01/21 21:10:20 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2011/01/20 15:03:31 | 000,000,000 | —D | C] – C:\ASPI Programs dvdfab out of date
[2011/01/19 14:21:10 | 000,376,832 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomsplitter.dll
[2011/01/19 14:21:10 | 000,339,968 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomqtde.dll
[2011/01/19 14:21:10 | 000,143,360 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomqtenc.dll
[2011/01/19 14:21:10 | 000,135,168 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomrmencoder.dll
[2011/01/19 14:21:10 | 000,081,920 | —- | C] (Viscom Software) – C:\WINDOWS\System32\viscomwave.dll
[2011/01/19 14:21:09 | 001,470,464 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscommpgenc.dll
[2011/01/19 14:21:09 | 000,888,832 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomflvdec.dll
[2011/01/19 14:21:09 | 000,110,592 | —- | C] (Viscom Software) – C:\WINDOWS\System32\viscomaudioencoder.dll
[2011/01/19 14:21:09 | 000,098,304 | —- | C] (Viscom Software) – C:\WINDOWS\System32\viscomaudiodata.dll
[2011/01/19 14:21:09 | 000,086,016 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomframe.dll
[2011/01/19 14:21:08 | 001,893,896 | —- | C] (Cheetah Websites Inc) – C:\WINDOWS\System32\CheetahDvdMaker.exe
[2011/01/19 14:21:08 | 000,045,056 | —- | C] ( ) – C:\WINDOWS\System32\Interop.VIDEOEDITLib.dll
[2011/01/19 14:21:08 | 000,020,480 | —- | C] (Engage) – C:\WINDOWS\System32\ShadowPanel.dll
[2011/01/19 14:21:07 | 000,090,112 | —- | C] ( ) – C:\WINDOWS\System32\Interop.RocketDivision.StarBurnX.dll
[2011/01/19 14:21:07 | 000,036,864 | —- | C] (Graphing) – C:\WINDOWS\System32\Graphing.V3.dll
[2011/01/19 14:21:07 | 000,009,728 | —- | C] ( ) – C:\WINDOWS\System32\Interop.dvdauthorLib.dll
[2011/01/19 14:06:01 | 000,000,000 | —D | C] – C:\Temp
[2011/01/19 14:02:03 | 002,078,952 | —- | C] (Rocket Division Software) – C:\WINDOWS\System32\starburnx.dll
[2011/01/19 14:02:03 | 000,335,872 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\dvdauthor.ocx
[2011/01/19 14:02:03 | 000,266,240 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\VideoEdit.ocx
[2011/01/19 14:02:03 | 000,233,472 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomdvdimg.dll
[2011/01/19 14:02:01 | 000,000,000 | —D | C] – C:\Program Files\Cheetah Burner
[2011/01/19 14:02:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Cheetah Burner
[2011/01/19 10:32:09 | 000,000,000 | —D | C] – C:\Pic Camera 9
[2011/01/18 18:46:09 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\DVDFab 5
[2011/01/18 14:43:23 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Nero
[2011/01/18 14:23:09 | 000,000,000 | —D | C] – C:\Program Files\Nero
[2011/01/18 14:22:43 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Nero
[2011/01/18 14:22:12 | 000,000,000 | —D | C] – C:\Program Files\Ask.com
[2011/01/16 00:32:52 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\DVDFab
[2011/01/16 00:32:43 | 000,000,000 | —D | C] – C:\Program Files\DVDFab 5
[2011/01/15 19:44:52 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Elaborate Bytes
[2011/01/15 19:44:51 | 000,000,000 | —D | C] – C:\Program Files\Elaborate Bytes
[2011/01/13 22:47:00 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\1Click DVD Copy
[2011/01/13 22:39:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\1click dvd copy
[2011/01/13 22:38:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\1Click DVD Copy 5
[2011/01/13 22:38:54 | 000,000,000 | —D | C] – C:\Program Files\LG Software Innovations
[2011/01/13 21:07:45 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\ConvertXtoDVD
[2011/01/13 20:59:20 | 000,047,360 | —- | C] (VSO Software) – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.sys
[2011/01/13 20:59:20 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Vso
[2011/01/13 20:59:20 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\PcSetup
[2011/01/13 20:59:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\VSO
[2011/01/13 20:59:14 | 001,645,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\gdiplus.dll
[2011/01/13 20:59:14 | 001,184,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wvc1dmod.dll
[2011/01/13 20:59:14 | 000,626,688 | —- | C] (On2.com) – C:\WINDOWS\System32\vp7vfw.dll
[2011/01/13 20:59:14 | 000,217,127 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\drv43260.dll
[2011/01/13 20:59:14 | 000,208,935 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\drv33260.dll
[2011/01/13 20:59:14 | 000,176,165 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\drv23260.dll
[2011/01/13 20:59:14 | 000,065,602 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\cook3260.dll
[2011/01/13 20:59:13 | 000,000,000 | —D | C] – C:\Program Files\VSO
[2011/01/13 20:55:17 | 000,000,000 | —D | C] – C:\Convert x to DVD 3.0
[2011/01/13 11:21:36 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\.dvdcss
[2011/01/12 22:46:17 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\dvdcss
[2011/01/12 19:47:55 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\Any DVD Converter Professional
[2011/01/12 19:47:23 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\AnvSoft
[2011/01/12 19:47:20 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\AnvSoft
[2011/01/12 19:47:17 | 000,000,000 | —D | C] – C:\Program Files\AnvSoft
[2011/01/12 09:23:06 | 000,000,000 | —D | C] – C:\Adobe Lightroom 3 book
[2011/01/10 18:07:02 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\WinRAR
[2011/01/10 18:07:02 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR
[2011/01/10 18:07:01 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Start Menu\Programs\WinRAR
[2011/01/10 18:05:50 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2002/04/10 03:41:06 | 000,065,536 | R— | C] ( ) – C:\WINDOWS\System32\A3d.dll
[79 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[16 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/01 11:26:29 | 000,041,464 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\wklnhst.dat
[2011/02/01 11:26:29 | 000,040,448 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\what the tech2.wps
[2011/02/01 10:08:08 | 000,018,071 | —- | M] () – C:\WINDOWS\System32\Config.MPF
[2011/02/01 10:03:05 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/01 10:01:00 | 000,000,256 | —- | M] () – C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/02/01 09:59:50 | 000,026,624 | —- | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/02/01 09:49:22 | 011,558,400 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info newest 1-30-11 info.wps
[2011/02/01 09:49:05 | 000,014,848 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\virus post question.wps
[2011/02/01 09:47:29 | 000,251,392 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\what the tech.wps
[2011/02/01 09:33:12 | 004,263,406 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ComboFix newest .exe
[2011/02/01 09:23:02 | 000,024,983 | —- | M] () – C:\WINDOWS\System32\1523250041.dll
[2011/02/01 09:17:49 | 000,000,686 | —- | M] () – C:\WINDOWS\lexstat.ini
[2011/02/01 08:54:56 | 000,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/02/01 08:54:24 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/01 08:54:20 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/02/01 08:54:11 | 3152,596,992 | -HS- | M] () – C:\hiberfil.sys
[2011/01/31 23:29:33 | 001,168,896 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\eset Online Scanner and otl .wps
[2011/01/31 23:22:26 | 000,602,624 | —- | M] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTL.exe
[2011/01/31 23:17:04 | 000,010,240 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\eset Online Scanner .wps
[2011/01/31 23:16:12 | 000,008,704 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\eset.wps
[2011/01/31 22:54:21 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/31 18:03:00 | 000,000,116 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/01/31 17:58:31 | 004,160,066 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ComboFix new .exe
[2011/01/31 09:57:05 | 000,288,107 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\gmer.zip
[2011/01/31 09:56:07 | 000,624,128 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\dds.scr
[2011/01/30 22:04:49 | 000,117,248 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\Manual steps to restore the registry in Windows XP.wps
[2011/01/30 20:12:27 | 005,736,448 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\analyse this analizer.wps
[2011/01/30 16:31:18 | 000,002,469 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\HiJackThis.lnk
[2011/01/30 16:29:34 | 000,126,377 | —- | M] () – C:\Documents and Settings\HP_Administrator\AdobeFnt10.lst
[2011/01/30 15:00:17 | 000,000,020 | -H– | M] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2011/01/30 01:02:06 | 000,391,998 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\malewarebites virus report.000000001.jpg
[2011/01/30 01:01:00 | 000,358,338 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\malewarebites virus report.000000000.jpg
[2011/01/29 22:23:40 | 000,000,796 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/01/29 22:18:17 | 000,010,240 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\Trojan-Agent-Gen-Nullo.wps
[2011/01/29 22:15:49 | 103,702,624 | —- | M] (Symantec Corporation) – C:\Documents and Settings\HP_Administrator\Desktop\NAV_18.1.0.37 norton anti virus_SYMTB_CNET FTT_177_5410.exe
[2011/01/29 21:46:59 | 007,734,240 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2011/01/28 21:39:56 | 000,009,728 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\e-mail web address boffo123.wps
[2011/01/28 21:39:36 | 000,020,480 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info.wps
[2011/01/28 21:39:29 | 000,005,632 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\hijackthis.wps
[2011/01/28 21:36:36 | 000,010,240 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info newest info.wps
[2011/01/27 15:01:48 | 000,197,632 | —- | M] (Microsoft) – C:\Program Files\Common Files\OnlineFilesManager.dll
[2011/01/27 14:06:20 | 000,024,064 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\win 95 media player stop.wps
[2011/01/26 09:54:06 | 002,879,850 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\P1010492-tree-bank-d–the-p.gif
[2011/01/25 14:02:57 | 001,110,476 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\7z920.exe
[2011/01/25 13:48:08 | 001,539,584 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\ISO file open with RAR.wps
[2011/01/25 13:47:57 | 023,906,240 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\7zip-us-setup.exe
[2011/01/25 13:31:37 | 001,446,036 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\wrar40b5 beta.exe
[2011/01/24 14:00:16 | 000,000,668 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\vso_ts_preview.xml
[2011/01/24 12:39:33 | 000,000,112 | —- | M] () – C:\Documents and Settings\HP_Administrator\default.pls
[2011/01/22 19:42:21 | 000,001,515 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\Paint.lnk
[2011/01/21 22:27:41 | 000,206,680 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/01/21 22:22:08 | 000,442,796 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/01/21 22:22:08 | 000,071,936 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/01/21 22:04:36 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/01/21 17:17:50 | 000,022,528 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\runtime error.wps
[2011/01/21 17:09:45 | 000,006,144 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\lg dvd-vcr combo rc89t spec.wps
[2011/01/19 14:21:19 | 000,001,513 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Cheetah DVD Maker.lnk
[2011/01/19 14:02:01 | 000,001,575 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Cheetah DVD Burner.lnk
[2011/01/18 18:46:09 | 000,000,648 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 5.lnk
[2011/01/18 18:46:09 | 000,000,630 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\DVDFab 5.lnk
[2011/01/18 18:12:27 | 000,006,144 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\Good nero 9 software serial.wps
[2011/01/18 14:17:31 | 000,005,632 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\Good nero software serial.wps
[2011/01/17 17:36:38 | 000,000,085 | -HS- | M] () – C:\Documents and Settings\All Users\Application Data\.zreglib
[2011/01/15 19:44:58 | 000,000,864 | —- | M] () – C:\Documents and Settings\All Users\Desktop\CloneDVD2.lnk
[2011/01/15 07:39:46 | 000,000,362 | —- | M] () – C:\WINDOWS\tasks\McDefragTask.job
[2011/01/13 22:39:00 | 000,001,014 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\1CLICK DVD COPY 5.lnk
[2011/01/13 22:39:00 | 000,000,996 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\1CLICK DVD COPY 5.lnk
[2011/01/13 20:59:20 | 000,087,608 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\inst.exe
[2011/01/13 20:59:20 | 000,047,360 | —- | M] (VSO Software) – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.sys
[2011/01/13 20:59:20 | 000,007,887 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.cat
[2011/01/13 20:59:20 | 000,001,144 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.inf
[2011/01/13 20:59:18 | 000,000,857 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\ConvertXtoDvd.lnk
[2011/01/13 20:59:18 | 000,000,839 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ConvertXtoDvd 3.lnk
[2011/01/12 21:42:23 | 1768,128,512 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\cic-fafe9a_mpeg2video 1.mpg
[2011/01/12 19:47:25 | 000,000,846 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\Any DVD Converter Professional.lnk
[2011/01/11 23:13:29 | 000,001,846 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Lightroom 3.2.lnk
[79 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[16 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
========== Files Created - No Company Name ==========
[2099/01/01 12:00:00 | 000,001,323 | —- | C] () – C:\WINDOWS\System32\sqlsodbc.chmxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
[2099/01/01 12:00:00 | 000,001,323 | —- | C] () – C:\WINDOWS\System32\sqlsodbc.chmxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
[2099/01/01 12:00:00 | 000,001,323 | —- | C] () – C:\WINDOWS\System32\sqlsodbc.chmxxxxxxxxxxxxxxxxxxxxxxxxxxx
[2011/02/01 10:10:35 | 000,040,448 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\what the tech2.wps
[2011/02/01 09:44:01 | 000,251,392 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\what the tech.wps
[2011/02/01 09:33:11 | 004,263,406 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ComboFix newest .exe
[2011/02/01 09:28:09 | 000,014,848 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\virus post question.wps
[2011/02/01 09:23:02 | 000,024,983 | —- | C] () – C:\WINDOWS\System32\1523250041.dll
[2011/01/31 23:23:28 | 001,168,896 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\eset Online Scanner and otl .wps
[2011/01/31 23:17:04 | 000,010,240 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\eset Online Scanner .wps
[2011/01/31 23:16:11 | 000,008,704 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\eset.wps
[2011/01/31 17:58:31 | 004,160,066 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ComboFix new .exe
[2011/01/31 09:58:14 | 011,558,400 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info newest 1-30-11 info.wps
[2011/01/31 09:57:04 | 000,288,107 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\gmer.zip
[2011/01/30 22:00:30 | 000,117,248 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\Manual steps to restore the registry in Windows XP.wps
[2011/01/30 19:15:33 | 005,736,448 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\analyse this analizer.wps
[2011/01/30 01:02:06 | 000,391,998 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\malewarebites virus report.000000001.jpg
[2011/01/30 01:01:00 | 000,358,338 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\malewarebites virus report.000000000.jpg
[2011/01/29 22:23:40 | 000,000,796 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/01/29 21:49:49 | 000,010,240 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\Trojan-Agent-Gen-Nullo.wps
[2011/01/28 21:36:36 | 000,010,240 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info newest info.wps
[2011/01/28 19:13:41 | 000,009,728 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\e-mail web address boffo123.wps
[2011/01/27 11:05:56 | 000,024,064 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\win 95 media player stop.wps
[2011/01/26 09:54:06 | 002,879,850 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\P1010492-tree-bank-d–the-p.gif
[2011/01/25 14:02:45 | 001,110,476 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\7z920.exe
[2011/01/25 13:47:54 | 023,906,240 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\7zip-us-setup.exe
[2011/01/25 13:31:25 | 001,446,036 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\wrar40b5 beta.exe
[2011/01/25 13:29:39 | 001,539,584 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\ISO file open with RAR.wps
[2011/01/21 17:07:13 | 000,022,528 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\runtime error.wps
[2011/01/21 10:57:17 | 000,006,144 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\lg dvd-vcr combo rc89t spec.wps
[2011/01/19 14:21:18 | 000,001,513 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Cheetah DVD Maker.lnk
[2011/01/19 14:21:10 | 000,159,744 | —- | C] () – C:\WINDOWS\System32\viscomtran.dll
[2011/01/19 14:21:10 | 000,054,612 | —- | C] () – C:\WINDOWS\System32\starburnx.tlb
[2011/01/19 14:21:09 | 006,963,712 | —- | C] () – C:\WINDOWS\System32\videotrans.dll
[2011/01/19 14:21:09 | 000,452,608 | —- | C] () – C:\WINDOWS\System32\videoformat.dll
[2011/01/19 14:21:09 | 000,262,144 | —- | C] () – C:\WINDOWS\System32\lame_enc.dll
[2011/01/19 14:21:09 | 000,172,032 | —- | C] () – C:\WINDOWS\System32\viscomgifenc.dll
[2011/01/19 14:21:09 | 000,154,624 | —- | C] () – C:\WINDOWS\System32\imgscaler.dll
[2011/01/19 14:21:09 | 000,028,160 | —- | C] () – C:\WINDOWS\System32\img_utils.dll
[2011/01/19 14:21:08 | 000,161,862 | —- | C] () – C:\WINDOWS\System32\DVD-R.ico
[2011/01/19 14:21:08 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\AxInterop.VIDEOEDITLib.dll
[2011/01/19 14:21:08 | 000,029,022 | —- | C] () – C:\WINDOWS\System32\FilmStripGreen.bmp
[2011/01/19 14:21:08 | 000,008,704 | —- | C] () – C:\WINDOWS\System32\AxInterop.dvdauthorLib.dll
[2011/01/19 14:21:07 | 000,161,862 | —- | C] () – C:\WINDOWS\System32\CheetahDVDMaker.ico
[2011/01/19 14:21:07 | 000,000,692 | —- | C] () – C:\WINDOWS\System32\CheetahDvdMaker.xml
[2011/01/19 14:02:03 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\videocore.dll
[2011/01/19 14:02:01 | 000,001,575 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Cheetah DVD Burner.lnk
[2011/01/18 18:46:09 | 000,000,648 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 5.lnk
[2011/01/18 18:46:09 | 000,000,630 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\DVDFab 5.lnk
[2011/01/18 14:41:39 | 000,006,144 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\Good nero 9 software serial.wps
[2011/01/18 14:22:16 | 000,000,256 | —- | C] () – C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/01/18 14:17:30 | 000,005,632 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\Good nero software serial.wps
[2011/01/15 19:49:34 | 000,000,085 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\.zreglib
[2011/01/15 19:44:58 | 000,000,864 | —- | C] () – C:\Documents and Settings\All Users\Desktop\CloneDVD2.lnk
[2011/01/13 22:39:00 | 000,001,014 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\1CLICK DVD COPY 5.lnk
[2011/01/13 22:39:00 | 000,000,996 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\1CLICK DVD COPY 5.lnk
[2011/01/13 21:00:03 | 000,000,668 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\vso_ts_preview.xml
[2011/01/13 20:59:28 | 000,000,034 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.log
[2011/01/13 20:59:20 | 000,087,608 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\inst.exe
[2011/01/13 20:59:20 | 000,007,887 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.cat
[2011/01/13 20:59:20 | 000,001,144 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.inf
[2011/01/13 20:59:18 | 000,000,857 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\ConvertXtoDvd.lnk
[2011/01/13 20:59:18 | 000,000,839 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ConvertXtoDvd 3.lnk
[2011/01/12 20:38:54 | 1768,128,512 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\cic-fafe9a_mpeg2video 1.mpg
[2011/01/12 19:47:25 | 000,000,846 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\Any DVD Converter Professional.lnk
[2011/01/11 23:13:29 | 000,001,846 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Lightroom 3.2.lnk
[2011/01/11 23:13:28 | 000,001,840 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Photoshop Lightroom 3.2.lnk
[2010/05/24 13:33:00 | 004,670,829 | —- | C] () – C:\WINDOWS\System32\libavcodec.dll
[2010/05/24 13:33:00 | 001,529,856 | —- | C] () – C:\WINDOWS\System32\ff_samplerate.dll
[2010/05/24 13:33:00 | 001,447,921 | —- | C] () – C:\WINDOWS\System32\ffmpegmt.dll
[2010/05/24 13:33:00 | 000,877,385 | —- | C] () – C:\WINDOWS\System32\ff_x264.dll
[2010/05/24 13:33:00 | 000,810,113 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2010/05/24 13:33:00 | 000,336,384 | —- | C] () – C:\WINDOWS\System32\ff_libfaad2.dll
[2010/05/24 13:33:00 | 000,324,096 | —- | C] () – C:\WINDOWS\System32\TomsMoComp_ff.dll
[2010/05/24 13:33:00 | 000,248,320 | —- | C] () – C:\WINDOWS\System32\ff_kernelDeint.dll
[2010/05/24 13:33:00 | 000,216,576 | —- | C] () – C:\WINDOWS\System32\ff_libdts.dll
[2010/05/24 13:33:00 | 000,151,552 | —- | C] () – C:\WINDOWS\System32\ff_libmad.dll
[2010/05/24 13:33:00 | 000,145,408 | —- | C] () – C:\WINDOWS\System32\libmpeg2_ff.dll
[2010/05/24 13:33:00 | 000,139,944 | —- | C] () – C:\WINDOWS\System32\libmplayer.dll
[2010/05/24 13:33:00 | 000,121,856 | —- | C] () – C:\WINDOWS\System32\ff_liba52.dll
[2010/05/24 13:33:00 | 000,116,736 | —- | C] () – C:\WINDOWS\System32\ff_tremor.dll
[2010/05/24 13:33:00 | 000,108,032 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2010/05/24 13:33:00 | 000,100,864 | —- | C] () – C:\WINDOWS\System32\ff_wmv9.dll
[2010/05/24 13:33:00 | 000,097,792 | —- | C] () – C:\WINDOWS\System32\ff_unrar.dll
[2010/05/19 14:59:20 | 000,150,528 | —- | C] () – C:\WINDOWS\System32\mkx.dll
[2010/05/19 14:59:10 | 000,109,568 | —- | C] () – C:\WINDOWS\System32\avi.dll
[2010/05/19 14:59:02 | 000,141,824 | —- | C] () – C:\WINDOWS\System32\mp4.dll
[2010/05/19 14:58:52 | 000,123,392 | —- | C] () – C:\WINDOWS\System32\ogm.dll
[2010/05/19 14:58:18 | 000,154,112 | —- | C] () – C:\WINDOWS\System32\ts.dll
[2010/05/19 14:58:08 | 000,249,856 | —- | C] () – C:\WINDOWS\System32\dxr.dll
[2010/05/19 14:57:42 | 000,097,792 | —- | C] () – C:\WINDOWS\System32\avs.dll
[2010/05/19 14:57:26 | 000,093,184 | —- | C] () – C:\WINDOWS\System32\avss.dll
[2010/05/19 14:55:40 | 000,080,384 | —- | C] () – C:\WINDOWS\System32\mkzlib.dll
[2010/05/19 14:55:36 | 000,024,576 | —- | C] () – C:\WINDOWS\System32\mkunicode.dll
[2010/01/01 16:20:51 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Desktop Pictures
[2010/01/01 16:20:51 | 000,000,268 | RH– | C] () – C:\Documents and Settings\HP_Administrator\Application Data\Dance
[2010/01/01 16:20:51 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/01/01 16:20:51 | 000,000,012 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Digital Light
[2009/06/07 10:24:04 | 000,180,224 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2009/01/10 16:15:44 | 000,159,744 | —- | C] () – C:\WINDOWS\System32\mmfinfo.dll
[2008/11/06 09:37:32 | 003,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2007/11/30 14:42:33 | 000,270,848 | —- | C] () – C:\WINDOWS\System32\PhotomatixLib.dll
[2007/11/30 14:42:33 | 000,229,376 | —- | C] () – C:\WINDOWS\System32\PhotomatixLib2.dll
[2007/11/30 14:42:33 | 000,216,064 | —- | C] () – C:\WINDOWS\System32\pmjp.dll
[2007/11/30 14:42:33 | 000,114,688 | —- | C] () – C:\WINDOWS\System32\PhotomatixLib3.dll
[2007/11/23 14:03:52 | 000,782,336 | —- | C] () – C:\WINDOWS\System32\IlmImf.dll
[2007/11/23 14:03:52 | 000,446,464 | —- | C] () – C:\WINDOWS\System32\Photomatix_jpg.dll
[2007/11/23 14:03:52 | 000,353,280 | —- | C] () – C:\WINDOWS\System32\pmtf2.dll
[2007/11/23 14:03:52 | 000,278,528 | —- | C] () – C:\WINDOWS\System32\Photomatix25Lib.dll
[2007/11/23 14:03:52 | 000,274,432 | —- | C] () – C:\WINDOWS\System32\Photomatix25Lib2.dll
[2007/11/23 14:03:52 | 000,205,824 | —- | C] () – C:\WINDOWS\System32\pmtf1.dll
[2007/11/23 14:03:52 | 000,204,288 | —- | C] () – C:\WINDOWS\System32\pmtf3.dll
[2007/11/23 14:03:52 | 000,095,525 | —- | C] () – C:\WINDOWS\System32\Photomatix25Lib3.dll
[2007/11/23 14:03:52 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\pmexr.dll
[2007/11/23 14:03:52 | 000,011,776 | —- | C] () – C:\WINDOWS\System32\pmbm.dll
[2007/11/16 14:42:42 | 000,678,469 | -HS- | C] () – C:\WINDOWS\System32\mtpgcmyp.ini
[2007/10/13 03:30:20 | 000,000,137 | —- | C] () – C:\WINDOWS\System32\Registration.ini
[2006/09/18 19:50:36 | 000,041,464 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\wklnhst.dat
[2006/08/30 19:26:41 | 000,002,560 | —- | C] () – C:\WINDOWS\EyeCand3.INI
[2006/08/30 14:45:50 | 000,210,944 | —- | C] () – C:\WINDOWS\System32\MSVCRT10.DLL
[2006/08/28 12:13:16 | 000,005,627 | R— | C] () – C:\WINDOWS\System32\Ludap17.ini
[2006/08/28 12:13:16 | 000,000,039 | R— | C] () – C:\WINDOWS\System32\ctzapxx.ini
[2006/08/28 12:01:00 | 000,000,347 | —- | C] () – C:\WINDOWS\CTWave32.INI
[2006/08/28 12:00:39 | 000,000,029 | —- | C] () – C:\WINDOWS\sfbm.INI
[2006/08/17 11:52:56 | 000,032,768 | —- | C] () – C:\WINDOWS\System32\LXBRPMON.DLL
[2006/08/17 11:52:56 | 000,020,480 | —- | C] () – C:\WINDOWS\System32\LXBRPMUI.DLL
[2006/08/17 11:51:57 | 000,000,686 | —- | C] () – C:\WINDOWS\lexstat.ini
[2006/08/09 11:23:55 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\YCRWin32.dll
[2006/07/18 21:46:42 | 000,000,116 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/07/05 14:30:42 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\Gif89.dll
[2006/07/03 22:55:29 | 000,026,624 | —- | C] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/07/01 14:50:38 | 000,000,139 | —- | C] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\fusioncache.dat
[2006/02/22 09:45:40 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2006/02/22 09:23:34 | 000,028,848 | —- | C] () – C:\WINDOWS\System32\drivers\USBkey.sys
[2006/02/22 09:19:05 | 000,014,316 | —- | C] () – C:\WINDOWS\System32\CHODDI.SYS
[2006/02/22 09:18:59 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\hpreg.dll
[2006/02/22 09:16:23 | 000,000,031 | —- | C] () – C:\WINDOWS\Quicken.ini
[2006/02/22 09:13:37 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/02/22 09:02:45 | 000,000,108 | —- | C] () – C:\WINDOWS\WININIT.INI
[2006/02/22 09:01:23 | 000,000,698 | —- | C] () – C:\WINDOWS\NSSetDefaultBrowser.ini
[2006/02/22 08:46:26 | 000,001,702 | —- | C] () – C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006/02/22 08:45:22 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2006/02/22 08:42:46 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\hcwXDS.dll
[2006/02/22 08:39:38 | 000,000,791 | —- | C] () – C:\WINDOWS\orun32.ini
[2006/02/22 08:19:15 | 000,016,896 | —- | C] () – C:\WINDOWS\System32\bcbmm.dll
[2005/12/09 08:03:52 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2005/08/30 15:01:42 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2005/08/05 16:01:54 | 000,235,008 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2005/08/02 18:19:16 | 000,050,176 | —- | C] () – C:\WINDOWS\armcex.dll
[2005/05/02 21:38:42 | 000,064,512 | R— | C] () – C:\WINDOWS\System32\P17.dll
[2004/07/26 01:51:38 | 000,000,560 | —- | C] () – C:\WINDOWS\System32\oeminfo.ini
[2004/01/13 17:06:46 | 000,077,824 | —- | C] () – C:\WINDOWS\System32\LXBMLCNP.DLL
[2003/10/01 20:48:18 | 000,053,248 | R— | C] () – C:\WINDOWS\System32\P17CPI.dll
[2003/06/13 05:53:38 | 000,000,187 | —- | C] () – C:\WINDOWS\System32\lxbmcoin.ini
[2003/01/07 17:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2002/11/13 09:40:22 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\lxbmvs.dll
[2001/07/06 17:30:00 | 000,003,399 | —- | C] () – C:\WINDOWS\System32\hptcpmon.ini
========== LOP Check ==========
[2011/01/15 18:01:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\1click dvd copy
[2006/08/26 18:39:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\4200Series
[2006/12/20 20:38:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\CA
[2006/02/22 09:00:20 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Digital Interactive Systems Corporation
[2010/01/01 16:20:51 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EnterNHelp
[2006/09/06 17:53:59 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2010/01/01 16:21:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nikon
[2009/01/21 13:07:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Seagate
[2011/01/25 09:04:59 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2010/01/01 16:20:51 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ultima_T15
[2011/01/15 07:39:46 | 000,000,362 | —- | M] () – C:\WINDOWS\Tasks\McDefragTask.job
[2009/05/18 21:44:43 | 000,000,354 | —- | M] () – C:\WINDOWS\Tasks\McQcTask.job
[2011/02/01 10:01:00 | 000,000,256 | —- | M] () – C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
========== Purity Check ==========
========== Custom Scans ==========
< >
< *.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
========== Alternate Data Streams ==========
@Alternate Data Stream - 170 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FB1B13D8
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2615E8F1
< End of report >
OTL Extras logfile created on: 2/1/2011 9:52:47 AM - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\otl scanner antivirus
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 78.00% Memory free
9.00 Gb Paging File | 9.00 Gb Available in Paging File | 94.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 270.99 Gb Total Space | 146.81 Gb Free Space | 54.18% Space Free | Partition Type: NTFS
Drive D: | 8.45 Gb Total Space | 0.46 Gb Free Space | 5.44% Space Free | Partition Type: FAT32
Drive F: | 4.35 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive K: | 931.51 Gb Total Space | 175.57 Gb Free Space | 18.85% Space Free | Partition Type: NTFS
Computer Name: YOUR-4DACD0EA75 | User Name: HP_Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = YBrowser.HTML] – C:\Program Files\Yahoo!\browser\ybrowser.exe (Yahoo!, Inc.)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
http [open] – Reg Error: Key error.
https [open] – C:\PROGRA~1\Yahoo!\browser\ybrowser.exe %1 (Yahoo!, Inc.)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"ANTIVIRUSDISABLENOTIFY" = 0
"FIREWALLDISABLENOTIFY" = 0
"UPDATESDISABLENOTIFY" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe" = C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:*:Enabled:McAfee Network Agent – (McAfee, Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data
"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{172975EB-9465-4861-95B5-C7BB6D3DE62A}" = DocumentViewer
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1B1DDAD2-C704-49F8-8FC2-18DAAD9A87C5}" = Sound Blaster Audigy
"{1CB34CE9-0E6B-493F-BB66-3425E5DF76E5}" = CP_CalendarTemplates1
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus
"{23012310-3E05-46A5-88A9-C6CBCABCAC79}" = Customer Experience Enhancement
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{23B35809-5E4A-4F14-8332-1CDEDDFAC089}" = CP_Package_Variety2
"{24BEBF2E-73F3-4599-840B-EDC612CCDD0D}" = Destinations
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java™ 6 Update 23
"{2A548002-9042-4083-A270-B67473DE1073}" = SkinsHP1
"{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}" = HP Deskjet Printer Preload
"{2E0C1913-886B-4C5C-8DAF-D1E649CE5FCC}" = Creative MediaSource
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp
"{30E52203-4A65-410D-B1E4-873DEBDC9EF4}" = Cheetah .Net 2.0 Installer
"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{33D6CC28-9F75-4d1b-A11D-98895B3A3729}" = HP Photosmart 330,380,420,470,7800,8000,8200 Series
"{34F3FCF1-817B-4D61-B6AF-19D9486AFEA0}" = Unload
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35DD9A1D-B340-4F41-A8B0-6EEBFB119280}" = muvee autoProducer unPlugged 1.2
"{36D620AD-EEBA-4973-BA86-0C9AE6396620}" = OptionalContentQFolder
"{3BA95526-6AE0-4B87-A62D-17187EF565FC}" = HP Boot Optimizer
"{3E386744-10FA-44b2-98C9-DF7A270DECB3}" = HP PSC & OfficeJet 5.3.A
"{3FE0CFAB-584A-4AA5-B8CD-C32284CFA308}" = RandMap
"{4041C245-7099-4C96-9738-5EBC23827B3C}" = BufferChm
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 1.0
"{494D17B5-3369-4905-8C4B-80C972C5E0FF}" = CP_Panorama1Config
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A5C4996-5332-4ACE-A17B-0A468479FE45}" = Cheetah DVD Maker
"{4DA4012B-39AF-48c2-B23B-A4D570D233A6}" = cp_LightScribeConfig
"{522D1D79-9C0A-4361-91F8-2AFF8EC6C2E1}" = CP_Package_Variety1
"{531BC138-F1F7-496B-879C-F039ECEF438D}" = Adobe Photoshop Lightroom 2
"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder
"{54E3707F-808E-4fd4-95C9-15D1AB077E5D}" = NewCopy
"{54F0998F-73C8-4b51-8286-FE903C231BED}" = cp_PosterPrintConfig
"{567C23E1-7580-4185-B8C2-30805677297C}" = NewCopy_CDA
"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg
"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler
"{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724}" = DocProc
"{71883667-71F2-48A1-AB72-28D518D8AC4A}" = Seagate Manager Installer
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{755EC5E3-FD51-46bd-A57F-7A2D56FBF061}" = PSTAPlugin
"{766633B3-1AFA-44B6-A3FC-1DE991CD9C52}" = CP_Package_Basic1
"{769A295C-DCF4-41d6-AFBA-7D9394B23AFE}" = PSPrinters08
"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.0.0.1
"{7850A6D2-CBEA-4728-9877-F1BEDEA9F619}" = AiOSoftware
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{79F8E1D4-36C1-439C-95FA-F695050B5B07}" = Sonic_PrimoSDK
"{7C03270C-4FAB-4F5C-B10D-52FEDA190790}" = DocumentViewerQFolder
"{80AE27BA-B0ED-4288-A8B9-D8194BCF4115}" = cp_UpdateProjectsConfig
"{869C3062-4745-4949-B6C9-98AF24D89030}" = PhotoGallery
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{91120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F}" = Readme
"{9D4ABB0C-F60B-44A6-956C-A4A63D5495C9}" = CueTour
"{A01FC76F-CC09-4658-9E37-5C2F635EE708}" = Microsoft Office 2003 Edition 60 Days Trial Welcome Tour
"{A195B13E-A5E3-4BAF-A995-7F70F445CD06}" = ScannerCopy
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3455242-DAE0-4523-8242-FD82706ABF4B}" = CameraDrivers
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio
"{ABB2901A-3D0A-4F21-8324-2F13C3EFE163}" = LightScribe [removed]
"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0
"{B11E71BA-498C-42D4-9F1A-9D7A89D9DA61}" = CP_AtenaShokunin1Config
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy
"{B276997E-4367-4b1b-A39C-4CAE7464337A}" = AiO_Scan_CDA
"{B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5}" = PanoStandAlone
"{B57F2FF0-5A25-4332-B503-4592B370C02F}" = CP_Package_Variety3
"{B60E7826-F117-4d26-8165-D2DC5A494AB0}" = Fax_CDA
"{B64E3AFC-59EF-4f18-BF11-E751462450D3}" = AiOSoftwareNPI
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{BBD3BF67-5B89-4CBB-BA58-5818ED5F3290}" = cp_OnlineProjectsConfig
"{BD01E97F-2A6A-495E-BE38-22C7B80F3CD7}" = Cheetah DVD Burner
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C439D065-5B64-4563-A6B9-1AA202633E13}" = Lexmark Fax Solutions
"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan
"{C83A12B9-B31B-461A-BBD4-CE9B988094F1}" = HP Photosmart Cameras 5.0
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = Fax
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center
"{D518592A-0F1E-40ca-BECB-3D3F026C6B0D}" = CameraDrivers
"{DAAD5187-62C5-4AD6-A526-803C18C4944D}" = HP Web Helper
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{E073D315-3C54-44BF-A1B2-B5583AEA618C}" = muvee autoProducer 4.5
"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant
"{E9757890-7EC5-46C8-99AB-B00F07B6525C}" = Nikon Transfer
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter
"{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}" = HP Software Update
"{EDD235BB-9FB4-4604-85ED-1B14A256F4E0}" = Adobe Photoshop Lightroom 3.2
"{EFB21DE7-8C19-4A88-BB28-A766E16493BC}" = Adobe Photoshop CS
"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status
"{F51D9393-BB14-4566-99BF-D6ED63AEFCD7}" = Natural Color
"{F80239D8-7811-4D5E-B033-0D0BBFE32920}" = HP DigitalMedia Archive
"{FC8D25A7-FF1B-41BB-BB3B-9A06C0A60AE0}" = InstantShareDevices
"12133444-BF36-4d4e-B7FB-A3424C645DE4" = GemMaster Mystic
"1Click DVD Copy 5_is1" = 1Click DVD Copy [removed]
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Type Manager 4.1" = Adobe Type Manager 4.1
"Agere Systems Soft Modem" = Agere Systems PCI-SV92PP Soft Modem
"Any DVD Converter Professional_is1" = Any DVD Converter Professional 4.0.6
"Apophysis 2.0" = Apophysis 2.0
"ATI Display Driver" = ATI Display Driver
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"AwayMode160" = Microsoft Away Mode
"B3EE3001-DC24-4cd1-8743-5692C716659F" = Otto
"BroadJump Client Foundation" = BroadJump Client Foundation
"CloneDVD2" = CloneDVD2
"DISCover" = DISCover
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5_is1" = DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.7.6
"ERUNT_is1" = ERUNT 1.1j
"EyeCandy5Textures" = Alien Skin Eye Candy 5 Textures
"FLV Player" = FLV Player 2.0 (build 25)
"GML Undistorter_is1" = GML Undistorter 1.05
"Groone's KwikPik" = Groone's KwikPik
"HijackThis" = HijackThis 2.0.2
"HP Document Viewer" = HP Document Viewer 5.3
"HP Imaging Device Functions" = HP Imaging Device Functions 6.0
"HP Photo & Imaging" = HP Photosmart Premier Software 6.0
"HP Photosmart for Media Center PC" = HP Photosmart for Media Center PC
"HP Rhapsody" = HP Rhapsody
"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3
"HPOOVClient-9972322 Uninstaller" = Updates from HP (remove only)
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InfraRecorder" = InfraRecorder
"InstallShield_{23012310-3E05-46A5-88A9-C6CBCABCAC79}" = Customer Experience Enhancement
"InstallShield_{71883667-71F2-48A1-AB72-28D518D8AC4A}" = Seagate Manager Installer
"InstallShield_{C439D065-5B64-4563-A6B9-1AA202633E13}" = Lexmark 4200 Series Fax Solutions
"IntelliMover Data Transfer Demo" = Remove IntelliMover Demo
"KPT effects" = KPT® effects™
"Lexmark 4200 Series" = Lexmark 4200 Series
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Media Player - Codec Pack" = Media Player Codec Pack 3.9.6
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Money2006b" = Microsoft Money 2006
"MPlayer" = MPlayer (remove only)
"MSC" = McAfee SecurityCenter
"Nero - Burning Rom!UninstallKey" = Nero OEM
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PC-Doctor 5 for Windows" = PC-Doctor 5 for Windows
"Photomatix Basic_is1" = Photomatix Basic version 1.2.1
"Photomatix Pro_is1" = Photomatix Pro version 2.5.4
"PhotomatixPro3_is1" = Photomatix Pro version 3.0.2
"PS2" = PS2
"QuickTime" = QuickTime
"RealPlayer 6.0" = RealPlayer
"SBC.MCCInstall" = SBC Self Support Tool
"simple2_is1" = Tone Mapping Plug-In 1.2
"SpywareGuard_is1" = SpywareGuard v2.2
"ST6UNST #1" = Camel's MPEGJoin
"SysInfo" = Creative System Information
"WildTangent CDA" = WildTangent Web Driver
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.00 beta 2 (32-bit)
"WMFDist11" = Windows Media Format 11 runtime
"Yahoo! Applications" = AT&T; Yahoo! Applications
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 1/29/2011 10:55:23 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Hang | ID = 1002
Description = Hanging application photoshop.exe, version 9.0.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 1/29/2011 10:55:26 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Hang | ID = 1002
Description = Hanging application photoshop.exe, version 9.0.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 1/30/2011 2:33:50 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.
Error - 1/30/2011 7:10:42 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.
Error - 1/31/2011 10:15:27 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.
Error - 2/1/2011 1:19:45 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 2/1/2011 1:19:49 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Hang | ID = 1001
Description = Fault bucket 1180947459.
Error - 2/1/2011 1:25:52 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.
Error - 2/1/2011 1:26:20 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
dbghelp.dll, version 5.1.2600.5512, fault address 0x0001295d.
Error - 2/1/2011 1:26:24 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1001
Description = Fault bucket 223121472.
[ System Events ]
Error - 1/31/2011 11:37:00 AM | Computer Name = YOUR-4DACD0EA75 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.
Error - 1/31/2011 11:37:27 AM | Computer Name = YOUR-4DACD0EA75 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.64 for the Network Card with network
address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error - 1/31/2011 7:27:14 PM | Computer Name = YOUR-4DACD0EA75 | Source = Service Control Manager | ID = 7000
Description = The Automatic LiveUpdate Scheduler service failed to start due to
the following error: %%3
Error - 1/31/2011 7:40:28 PM | Computer Name = YOUR-4DACD0EA75 | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom1, has a bad block.
Error - 1/31/2011 7:43:56 PM | Computer Name = YOUR-4DACD0EA75 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.64 for the Network Card with network
address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error - 1/31/2011 8:33:26 PM | Computer Name = YOUR-4DACD0EA75 | Source = Service Control Manager | ID = 7000
Description = The Automatic LiveUpdate Scheduler service failed to start due to
the following error: %%3
Error - 2/1/2011 12:36:12 AM | Computer Name = YOUR-4DACD0EA75 | Source = Service Control Manager | ID = 7000
Description = The Automatic LiveUpdate Scheduler service failed to start due to
the following error: %%3
Error - 2/1/2011 12:43:29 AM | Computer Name = YOUR-4DACD0EA75 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.64 for the Network Card with network
address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error - 2/1/2011 10:54:31 AM | Computer Name = YOUR-4DACD0EA75 | Source = Service Control Manager | ID = 7000
Description = The Automatic LiveUpdate Scheduler service failed to start due to
the following error: %%3
Error - 2/1/2011 11:22:21 AM | Computer Name = YOUR-4DACD0EA75 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.64 for the Network Card with network
address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
< End of report >
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:53:06 AM, on 2/1/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\arservice.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
c:\Program Files\Microsoft Works\WksWP.exe
c:\Program Files\Microsoft Works\WkDStore.exe
c:\Program Files\Microsoft Works\wkgdcach.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tvguide.com/listings/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.gapethatass.net/entry1.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\common\YIeTagBm.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: (no name) - {33973600-925A-11D9-A1F6-9234C84D2622} - (no file)
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: SBC Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - http://us.dl1.yimg.com/download.yahoo.com/…nst_current.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1195591567296
O16 - DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} (Lexmark eDiagnostics Class) - https://ediagnostics.lexmark.com/serval.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
–
End of file - 9976 bytes
DDS (Ver_10-12-12.02) - NTFSx86
Run by [removed] at 11:54:12.67 on Tue 02/01/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3006.2351 [GMT -6:00]
AV: McAfee VirusScan *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: Norton Internet Worm Protection *Disabled*
FW: McAfee Personal Firewall *Enabled*
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
c:\Program Files\Microsoft Works\WksWP.exe
c:\Program Files\Microsoft Works\WkDStore.exe
c:\Program Files\Microsoft Works\wkgdcach.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\DDS newest\dds.scr
============== Pseudo HJT Report ===============
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei;=utf-8&fr;=b1ie7
uStart Page = hxxp://www.tvguide.com/listings/
uInternet Connection Wizard,ShellNext = hxxp://www.gapethatass.net/entry1.html
uInternet Settings,ProxyOverride = 127.0.0.1
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: SpywareGuardDLBLOCK.CBrowserHelper: {4a368e80-174f-4872-96b5-0b27ddd11db2} - c:\program files\spywareguard\dlprotect.dll
BHO: UberButton Class: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dll
BHO: YahooTaggedBM Class: {65d886a2-7ca7-479b-bb95-14d1efb7946a} - c:\program files\yahoo!\common\YIeTagBm.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: hpWebHelper Class: {aaae832a-5fff-4661-9c8f-369692d1dcb9} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\WebHelper.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5825.1100\swg.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SidebarAutoLaunch Class: {f2aa9440-6328-4933-b7c9-a6ccdf9cbf6d} - c:\program files\yahoo!\browser\YSidebarIEBHO.dll
TB: {33973600-925A-11D9-A1F6-9234C84D2622} - No File
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
mRun: [P17Helper] Rundll32 P17.dll,P17Helper
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide
mRun: [Google Quick Search Box] "c:\program files\google\quick search box\GoogleQuickSearchBox.exe" /autorun
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office11\REFIEBAR.DLL
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - hxxp://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1195591567296
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} - hxxps://ediagnostics.lexmark.com/serval.cab
DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SpywareGuard.Handler: {81559c35-8464-49f7-bb0e-07a383bef910} - c:\program files\spywareguard\spywareguard.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
============= SERVICES / DRIVERS ===============
R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-3-25 214664]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-2-17 66632]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2009-5-18 93320]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2009-5-18 359952]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2009-5-18 144704]
R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2009-5-18 606736]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2009-5-18 79816]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-5-18 35272]
R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-5-18 40552]
R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-2-17 12872]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-5 135664]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-5-18 34248]
S4 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2008-10-28 156968]
=============== Created Last 30 ================
2011-02-01 15:50:53 ——– d—–w- C:\otl scanner antivirus
2011-02-01 15:23:02 24983 —-a-w- c:\windows\system32\1523250041.dll
2011-02-01 00:02:02 ——– d—–w- C:\Combofix newest
2011-01-31 16:00:56 ——– d—–w- C:\DDS newest
2011-01-31 15:59:15 ——– d—–w- C:\gmer new
2011-01-31 02:06:29 ——– d—–w- C:\Anti-virus Hijackthis log analized pic
2011-01-30 22:33:25 ——– d—–w- C:\HiJackThis newest
2011-01-30 04:23:40 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-30 04:23:35 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-01-30 04:23:35 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-01-27 21:13:36 ——– d—–w- C:\K-lite codec pack 6.6.2
2011-01-27 21:07:18 ——– d—–w- c:\program files\common files\Data
2011-01-27 21:01:48 197632 —-a-w- c:\program files\common files\OnlineFilesManager.dll
2011-01-26 20:06:10 ——– d—–w- C:\RAW Workflow from Capture to Archives A Complete Digital Photographer's Guide to Raw Imaging extracted
2011-01-25 20:05:02 ——– d—–w- C:\7 zip software
2011-01-25 19:37:02 ——– d—–w- C:\Rar archive
2011-01-22 04:19:16 ——– d—–w- c:\windows\system32\XPSViewer
2011-01-22 04:18:50 89088 —-a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-01-22 04:18:28 89088 ——w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2011-01-22 04:18:28 597504 ——w- c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2011-01-22 04:18:28 597504 ——w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2011-01-22 04:18:28 575488 ——w- c:\windows\system32\xpsshhdr.dll
2011-01-22 04:18:28 575488 ——w- c:\windows\system32\dllcache\xpsshhdr.dll
2011-01-22 04:18:28 1676288 ——w- c:\windows\system32\xpssvcs.dll
2011-01-22 04:18:28 1676288 ——w- c:\windows\system32\dllcache\xpssvcs.dll
2011-01-22 04:18:28 117760 ——w- c:\windows\system32\prntvpt.dll
2011-01-22 03:55:11 ——– d—–w- c:\windows\ie8updates
2011-01-22 03:29:23 974848 ——w- c:\windows\system32\dllcache\mfc42.dll
2011-01-22 03:29:23 953856 ——w- c:\windows\system32\dllcache\mfc40u.dll
2011-01-22 03:26:18 81920 ——w- c:\windows\system32\dllcache\fontsub.dll
2011-01-22 03:26:18 119808 ——w- c:\windows\system32\dllcache\t2embed.dll
2011-01-22 03:24:21 617472 ——w- c:\windows\system32\dllcache\comctl32.dll
2011-01-22 03:24:02 40960 ——w- c:\windows\system32\dllcache\ndproxy.sys
2011-01-22 03:23:49 744448 ——w- c:\windows\system32\dllcache\helpsvc.exe
2011-01-22 03:23:36 471552 ——w- c:\windows\system32\dllcache\aclayers.dll
2011-01-22 03:23:21 247808 ——w- c:\windows\system32\dllcache\ieproxy.dll
2011-01-22 03:23:21 12800 ——w- c:\windows\system32\dllcache\xpshims.dll
2011-01-22 03:23:19 743424 ——w- c:\windows\system32\dllcache\iedvtool.dll
2011-01-22 03:20:59 153088 ——w- c:\windows\system32\dllcache\triedit.dll
2011-01-22 03:16:24 3558912 ——w- c:\windows\system32\dllcache\moviemk.exe
2011-01-22 03:10:54 45568 ——w- c:\windows\system32\dllcache\wab.exe
2011-01-22 03:10:20 590848 ——w- c:\windows\system32\dllcache\rpcrt4.dll
2011-01-20 21:03:31 ——– d—–w- C:\ASPI Programs dvdfab out of date
2011-01-19 20:06:01 ——– d—–w- C:\Temp
2011-01-19 20:02:03 335872 —-a-w- c:\windows\system32\dvdauthor.ocx
2011-01-19 20:02:03 266240 —-a-w- c:\windows\system32\VideoEdit.ocx
2011-01-19 20:02:03 233472 —-a-w- c:\windows\system32\viscomdvdimg.dll
2011-01-19 20:02:03 2078952 —-a-w- c:\windows\system32\starburnx.dll
2011-01-19 20:02:03 19456 —-a-w- c:\windows\system32\videocore.dll
2011-01-19 20:02:01 ——– d—–w- c:\program files\Cheetah Burner
2011-01-19 16:32:09 ——– d—–w- C:\Pic Camera 9
2011-01-19 00:21:06 ——– d—–w- c:\windows\system32\wbem\repository\FS
2011-01-19 00:21:06 ——– d—–w- c:\windows\system32\wbem\Repository
2011-01-18 20:23:09 ——– d—–w- c:\program files\Nero
2011-01-18 20:22:43 ——– d—–w- c:\docume~1\alluse~1\applic~1\Nero
2011-01-18 20:22:12 ——– d—–w- c:\program files\Ask.com
2011-01-16 06:32:43 ——– d—–w- c:\program files\DVDFab 5
2011-01-16 01:47:16 48 –sh–w- c:\windows\SEFC0C0D5.tmp
2011-01-16 01:44:51 ——– d—–w- c:\program files\Elaborate Bytes
2011-01-14 04:47:00 ——– d—–w- c:\docume~1\hp_adm~1\locals~1\applic~1\1Click DVD Copy
2011-01-14 04:39:26 ——– d—–w- c:\docume~1\alluse~1\applic~1\1click dvd copy
2011-01-14 04:38:54 ——– d—–w- c:\program files\LG Software Innovations
2011-01-14 02:59:20 87608 —-a-w- c:\docume~1\hp_adm~1\applic~1\inst.exe
2011-01-14 02:59:20 47360 —-a-w- c:\windows\system32\drivers\pcouffin.sys
2011-01-14 02:59:20 47360 —-a-w- c:\docume~1\hp_adm~1\applic~1\pcouffin.sys
2011-01-14 02:59:14 65602 —-a-w- c:\windows\system32\cook3260.dll
2011-01-14 02:59:14 626688 —-a-w- c:\windows\system32\vp7vfw.dll
2011-01-14 02:59:14 217127 —-a-w- c:\windows\system32\drv43260.dll
2011-01-14 02:59:14 208935 —-a-w- c:\windows\system32\drv33260.dll
2011-01-14 02:59:14 176165 —-a-w- c:\windows\system32\drv23260.dll
2011-01-14 02:59:14 1645320 —-a-w- c:\windows\gdiplus.dll
2011-01-14 02:59:14 1184984 —-a-w- c:\windows\system32\wvc1dmod.dll
2011-01-14 02:59:13 ——– d—–w- c:\program files\VSO
2011-01-14 02:55:17 ——– d—–w- C:\Convert x to DVD 3.0
2011-01-13 17:21:36 ——– d—–w- c:\documents and settings\hp_administrator\.dvdcss
2011-01-13 01:47:20 ——– d—–w- c:\docume~1\hp_adm~1\applic~1\AnvSoft
2011-01-13 01:47:17 ——– d—–w- c:\program files\AnvSoft
2011-01-12 15:23:06 ——– d—–w- C:\Adobe Lightroom 3 book
==================== Find3M ====================
2010-11-18 18:12:44 81920 —-a-w- c:\windows\system32\isign32.dll
2010-11-13 00:53:06 472808 —-a-w- c:\windows\system32\deployJava1.dll
2010-11-12 22:34:10 73728 —-a-w- c:\windows\system32\javacpl.cpl
2010-11-09 14:52:35 249856 —-a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:26:58 916480 —-a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26:58 43520 —-a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26:58 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
============= FINISH: 11:55:18.04 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-12-12.02)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 7/1/2006 3:49:36 PM
System Uptime: 2/1/2011 9:31:12 AM (2 hours ago)
Motherboard: MSI | | AMETHYST-M
Processor: AMD Athlon™ 64 X2 Dual Core Processor 4200+ | Socket 939 | 2188/200mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 271 GiB total, 148.564 GiB free.
D: is FIXED (FAT32) - 8 GiB total, 0.459 GiB free.
E: is CDROM ()
F: is CDROM ()
H: is Removable
I: is Removable
J: is Removable
K: is FIXED (NTFS) - 932 GiB total, 175.574 GiB free.
L: is Removable
==== Disabled Device Manager Items =============
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\F6FAEF10DC00
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\F6FAEF10DC00
Service: NIC1394
==== System Restore Points ===================
RP748: 11/4/2010 10:23:33 AM - System Checkpoint
RP749: 11/8/2010 7:38:47 PM - System Checkpoint
RP750: 11/10/2010 12:30:48 PM - System Checkpoint
RP751: 11/25/2010 9:25:04 AM - System Checkpoint
RP752: 11/29/2010 12:26:58 PM - System Checkpoint
RP753: 11/30/2010 7:25:26 PM - System Checkpoint
RP754: 12/1/2010 8:07:48 PM - before instal media codec pak
RP755: 12/3/2010 10:50:11 PM - Installed Adobe Photoshop Lightroom 2.
RP756: 12/7/2010 1:46:39 PM - System Checkpoint
RP757: 12/11/2010 9:44:56 AM - System Checkpoint
RP758: 12/18/2010 8:49:16 PM - System Checkpoint
RP759: 12/28/2010 6:41:44 PM - System Checkpoint
RP760: 12/29/2010 8:13:08 PM - System Checkpoint
RP761: 1/10/2011 10:25:37 AM - System Checkpoint
RP762: 1/10/2011 6:03:48 PM - before install RAR program
RP763: 1/11/2011 11:11:07 PM - before install Lightroom 3
RP764: 1/11/2011 11:12:41 PM - Installed Adobe Photoshop Lightroom 3.2.
RP765: 1/12/2011 7:44:15 PM - Before install DVD burn programs - any dvd convert
RP766: 1/13/2011 8:36:45 PM - before install nero 9
RP767: 1/13/2011 10:38:53 PM - Installed 1CLICK DVD COPY
RP768: 1/15/2011 7:44:51 PM - Install CloneDVD2
RP769: 1/16/2011 12:28:22 AM - Before install dvd fab install
RP770: 1/18/2011 2:21:47 PM - Installed DirectX
RP771: 1/18/2011 2:22:33 PM - Installed Nero 9 4.4.9.0
RP772: 1/18/2011 5:07:17 PM - Removed Nero Application 4.4.9.0
RP773: 1/18/2011 6:19:25 PM - Restore Operation
RP774: 1/19/2011 1:54:38 PM - before install cheetah dvd burn
RP775: 1/19/2011 2:20:25 PM - Before install Cheetah DVD Maker
RP776: 1/19/2011 2:21:28 PM - Installed Cheetah .Net 2.0 Installer
RP777: 1/21/2011 11:15:42 AM - System Checkpoint
RP778: 1/21/2011 9:51:56 PM - Software Distribution Service 3.0
RP779: 1/21/2011 10:13:38 PM - Software Distribution Service 3.0
RP780: 1/21/2011 10:28:30 PM - Printer Driver Microsoft XPS Document Writer Installed
RP781: 1/24/2011 9:30:38 AM - System Checkpoint
RP782: 1/25/2011 5:30:44 PM - System Checkpoint
RP783: 1/27/2011 3:01:33 PM - before install K-lite codec pack 6.6.2
RP784: 1/28/2011 9:40:30 PM - Installed Java™ 6 Update 23
RP785: 1/29/2011 10:22:37 PM - Before install malware bites
RP786: 1/30/2011 4:35:03 PM - Before install hijackthis newist
RP787: 1/31/2011 10:05:15 AM - before gmer scan and install
RP788: 2/1/2011 10:16:01 AM - OTL Restore Point
==== Installed Programs ======================
1Click DVD Copy 5.8.9.2
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Help Center 1.0
Adobe Photoshop CS
Adobe Photoshop CS2
Adobe Photoshop Lightroom 2
Adobe Photoshop Lightroom 3.2
Adobe Reader 7.0
Adobe Stock Photos 1.0
Adobe Type Manager 4.1
Agere Systems PCI-SV92PP Soft Modem
AiO_Scan
AiO_Scan_CDA
AiOSoftware
AiOSoftwareNPI
Alien Skin Eye Candy 5 Textures
Any DVD Converter Professional 4.0.6
Apophysis 2.0
AT&T; Yahoo! Applications
ATI Control Panel
ATI Display Driver
AVS Update Manager 1.0
AVS Video Converter 6
AVS4YOU Software Navigator 1.3
BroadJump Client Foundation
BufferChm
Camel's MPEGJoin
CameraDrivers
Cheetah .Net 2.0 Installer
Cheetah DVD Burner
Cheetah DVD Maker
CloneDVD2
ConvertXtoDVD 3.0.0.1
CP_AtenaShokunin1Config
CP_CalendarTemplates1
cp_LightScribeConfig
cp_OnlineProjectsConfig
CP_Package_Basic1
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
CP_Panorama1Config
cp_PosterPrintConfig
cp_UpdateProjectsConfig
Creative MediaSource
Creative System Information
CueTour
Customer Experience Enhancement
Destinations
DISCover
DocProc
DocumentViewer
DocumentViewerQFolder
DVD Decrypter (Remove Only)
DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.7.6
ERUNT 1.1j
Fax
Fax_CDA
FLV Player 2.0 (build 25)
FullDPAppQFolder
GemMaster Mystic
GML Undistorter 1.05
Google Toolbar for Internet Explorer
Google Update Helper
Groone's KwikPik
High Definition Audio Driver Package - KB888111
HiJackThis
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 10 (KB910393)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
HP Boot Optimizer
HP Deskjet Printer Preload
HP DigitalMedia Archive
HP Document Viewer 5.3
HP DVD Play 1.0
HP Imaging Device Functions 6.0
HP Multimedia Keyboard Software
HP Photosmart 330,380,420,470,7800,8000,8200 Series
HP Photosmart Cameras 5.0
HP Photosmart for Media Center PC
HP Photosmart Premier Software 6.0
HP PSC & OfficeJet 5.3.A
HP PSC & OfficeJet 5.3.B
HP Rhapsody
HP Software Update
HP Solution Center & Imaging Support Tools 5.3
HP Web Helper
HPProductAssistant
HpSdpAppCoreApp
InfraRecorder
InstantShareDevices
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 5
Java Auto Updater
Java™ 6 Update 2
Java™ 6 Update 23
Java™ 6 Update 3
Java™ 6 Update 5
Java™ SE Runtime Environment 6 Update 1
KPT® effects™
Lexmark 4200 Series
Lexmark 4200 Series Fax Solutions
Lexmark Fax Solutions
LightScribe 1.4.62.1
Malwarebytes' Anti-Malware
McAfee SecurityCenter
Media Player Codec Pack 3.9.6
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Away Mode
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2006
Microsoft National Language Support Downlevel APIs
Microsoft Office 2003 Edition 60 Days Trial Welcome Tour
Microsoft Office Standard Edition 2003
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
MPlayer (remove only)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB954459)
muvee autoProducer 4.5
muvee autoProducer unPlugged 1.2
Natural Color
Nero OEM
Nero Suite
NewCopy
NewCopy_CDA
Nikon Message Center
Nikon Transfer
OptionalContentQFolder
Otto
PanoStandAlone
PC-Doctor 5 for Windows
PhotoGallery
Photomatix Basic version 1.2.1
Photomatix Pro version 2.5.4
Photomatix Pro version 3.0.2
PS2
PSPrinters08
PSTAPlugin
QuickTime
RandMap
Readme
RealPlayer
Remove IntelliMover Demo
SBC Self Support Tool
Scan
ScannerCopy
Seagate Manager Installer
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
SkinsHP1
SolutionCenter
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sonic_PrimoSDK
Sound Blaster Audigy
SpywareGuard v2.2
Status
SUPERAntiSpyware Free Edition
Tone Mapping Plug-In 1.2
TrayApp
Unload
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951978)
Update for Windows XP (KB953356)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
Updates from HP (remove only)
WebFldrs XP
WebReg
WildTangent Web Driver
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Media Center Edition 2005 KB919803
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3
WinRAR 4.00 beta 2 (32-bit)
==== Event Viewer Messages From Past Week ========
1/30/2011 10:17:18 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
1/30/2011 1:18:17 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: iaStor IntelIde ViaIde
1/29/2011 4:22:28 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service ntmssvc with arguments "-Service" in order to run the server: {D61A27C6-8F53-11D0-BFA0-00A024151983}
1/29/2011 10:24:04 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
1/27/2011 3:05:19 PM, error: Service Control Manager [7000] - The Automatic LiveUpdate Scheduler service failed to start due to the following error: The system cannot find the path specified.
1/27/2011 2:53:16 PM, error: Dhcp [1002] - The IP address lease 192.168.1.64 for the Network Card with network address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
1/27/2011 2:53:04 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
==== End Of File ===========================
PC with operating system Win XP Browser IE 8. I am having many unusual thing happen. Browesrs being hijacked. Windows explorer having problems and must close - debugging window pops up. I must log in every time I go on internet. Runtime errors pops up much. SAS finds Rogue.agent/GEN - Nullo[dll] removes it then it is back over and over again.
Hope you can help!!!!
OTL logfile created on: 2/1/2011 11:26:42 AM - Run 3
OTL by OldTimer - Version 3.2.20.6 Folder = C:\otl scanner antivirus
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 80.00% Memory free
9.00 Gb Paging File | 9.00 Gb Available in Paging File | 93.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 270.99 Gb Total Space | 148.57 Gb Free Space | 54.82% Space Free | Partition Type: NTFS
Drive D: | 8.45 Gb Total Space | 0.46 Gb Free Space | 5.44% Space Free | Partition Type: FAT32
Drive K: | 931.51 Gb Total Space | 175.57 Gb Free Space | 18.85% Space Free | Partition Type: NTFS
Computer Name: YOUR-4DACD0EA75 | User Name: HP_Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\otl scanner antivirus\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
PRC - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\MPF\MpfSrv.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
PRC - c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\arservice.exe (Microsoft)
========== Modules (SafeList) ==========
MOD - C:\otl scanner antivirus\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (Automatic LiveUpdate Scheduler) – File not found
SRV - (mcmscsvc) – C:\Program Files\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SRV - (McAfee SiteAdvisor Service) – C:\Program Files\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
SRV - (MpfService) – C:\Program Files\McAfee\MPF\MPFSrv.exe (McAfee, Inc.)
SRV - (McODS) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (McShield) – C:\Program Files\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.)
SRV - (McSysmon) – C:\Program Files\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
SRV - (McProxy) – c:\Program Files\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
SRV - (McNASvc) – c:\Program Files\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
SRV - (FreeAgentGoNext Service) – C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe (Seagate Technology LLC)
SRV - (ARSVC) – C:\WINDOWS\arservice.exe (Microsoft)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)
SRV - (ATMsrvc) – C:\WINDOWS\system32\ATMsrvc.exe (Adobe Systems Incorporated)
========== Driver Services (SafeList) ==========
DRV - (MPFP) – C:\WINDOWS\system32\drivers\Mpfp.sys (McAfee, Inc.)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (mfehidk) – C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfeavfk) – C:\WINDOWS\system32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfesmfk) – C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (mfebopk) – C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mferkdk) – C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (IrBus) – C:\WINDOWS\system32\drivers\irbus.sys (Microsoft Corporation)
DRV - (ElbyCDIO) – C:\WINDOWS\system32\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV - (ElbyDelay) – C:\WINDOWS\system32\drivers\ElbyDelay.sys (Elaborate Bytes AG)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (Ps2) – C:\WINDOWS\system32\drivers\PS2.sys (Hewlett-Packard Company)
DRV - (AgereSoftModem) – C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems)
DRV - (RTL8023xp) – C:\WINDOWS\system32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation )
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) – C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (hcwPP2) – C:\WINDOWS\system32\drivers\hcwPP2.sys (Hauppauge Computer Works, Inc.)
DRV - (P17) – C:\WINDOWS\system32\drivers\P17.sys (Creative Technology Ltd.)
DRV - (ftsata2) – C:\WINDOWS\system32\DRIVERS\ftsata2.sys (Promise Technology, Inc.)
DRV - (iaStor) – C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (AmdK8) – C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (ossrv) – C:\WINDOWS\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV - (ctsfm2k) – C:\WINDOWS\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV - (rtl8139) Realtek RTL8139(A/B/C) – C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (cdrbsdrv) – C:\WINDOWS\System32\drivers\CDRBSDRV.SYS (B.H.A Corporation)
DRV - (bb-run) – C:\WINDOWS\system32\DRIVERS\bb-run.sys (Promise Technology, Inc.)
DRV - (pfc) – C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTe…-8&fr;=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.tvguide.com/listings/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C8 35 61 07 1B D5 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1
FF - HKLM\software\mozilla\Firefox\Extensions\\{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:\Program Files\McAfee\SiteAdvisor [2011/01/21 21:16:53 | 000,000,000 | —D | M]
O1 HOSTS File: ([2007/11/26 13:19:42 | 000,000,022 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (SpywareGuardDLBLOCK.CBrowserHelper) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll ()
O2 - BHO: (UberButton Class) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll (Yahoo!)
O2 - BHO: (YahooTaggedBM Class) - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\common\YIeTagBm.dll (Yahoo! Inc.)
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (hpWebHelper Class) - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll (TODO: )
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll (Google Inc.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (SidebarAutoLaunch Class) - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - {33973600-925A-11D9-A1F6-9234C84D2622} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [McENUI] C:\Program Files\McAfee\MHN\McENUI.exe (McAfee, Inc.)
O4 - HKLM..\Run: [P17Helper] C:\WINDOWS\System32\P17.dll ()
O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\Recguard.exe ()
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoControlPanel = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallVisualStyle = C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: InstallTheme = C:\WINDOWS\Resources\Themes\Royale.theme ()
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.)
O9 - Extra Button: SBC Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll (Yahoo!)
O9 - Extra Button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()
O9 - Extra 'Tools' menuitem : Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} http://us.dl1.yimg.com/download.yahoo.com/…nst_current.cab (Installation Support)
O16 - DPF: {31435657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/e/2…78f/wvc1dmo.cab (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupd…b?1195591567296 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} https://ediagnostics.lexmark.com/serval.cab (Lexmark eDiagnostics Class)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/02/22 09:15:54 | 000,000,100 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2001/07/27 15:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT – [ FAT32 ]
O33 - MountPoints2\{6d8288d5-8d2e-11df-8955-00161757475a}\Shell - "" = AutoRun
O33 - MountPoints2\{6d8288d5-8d2e-11df-8955-00161757475a}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{6d8288d5-8d2e-11df-8955-00161757475a}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
========== Files/Folders - Created Within 30 Days ==========
[2011/02/01 09:50:53 | 000,000,000 | —D | C] – C:\otl scanner antivirus
[2011/01/31 23:22:13 | 000,602,624 | —- | C] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTL.exe
[2011/01/31 18:02:02 | 000,000,000 | —D | C] – C:\Combofix newest
[2011/01/31 10:00:56 | 000,000,000 | —D | C] – C:\DDS newest
[2011/01/31 09:59:15 | 000,000,000 | —D | C] – C:\gmer new
[2011/01/30 20:06:29 | 000,000,000 | —D | C] – C:\Anti-virus Hijackthis log analized pic
[2011/01/30 16:33:25 | 000,000,000 | —D | C] – C:\HiJackThis newest
[2011/01/29 22:23:40 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/01/29 22:23:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/01/29 22:23:35 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2011/01/29 22:23:35 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/01/29 22:15:06 | 103,702,624 | —- | C] (Symantec Corporation) – C:\Documents and Settings\HP_Administrator\Desktop\NAV_18.1.0.37 norton anti virus_SYMTB_CNET FTT_177_5410.exe
[2011/01/29 21:46:59 | 007,734,240 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2011/01/28 21:41:01 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/01/28 21:41:01 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/01/28 21:41:01 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/01/27 15:13:36 | 000,000,000 | —D | C] – C:\K-lite codec pack 6.6.2
[2011/01/27 15:07:18 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Data
[2011/01/27 15:01:48 | 000,197,632 | —- | C] (Microsoft) – C:\Program Files\Common Files\OnlineFilesManager.dll
[2011/01/26 14:06:10 | 000,000,000 | —D | C] – C:\RAW Workflow from Capture to Archives A Complete Digital Photographer's Guide to Raw Imaging extracted
[2011/01/25 14:05:02 | 000,000,000 | —D | C] – C:\7 zip software
[2011/01/25 13:37:02 | 000,000,000 | —D | C] – C:\Rar archive
[2011/01/21 22:19:16 | 000,000,000 | —D | C] – C:\WINDOWS\System32\XPSViewer
[2011/01/21 22:19:12 | 000,000,000 | —D | C] – C:\Program Files\MSBuild
[2011/01/21 22:19:03 | 000,000,000 | —D | C] – C:\Program Files\Reference Assemblies
[2011/01/21 22:18:28 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpssvcs.dll
[2011/01/21 22:18:28 | 001,676,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2011/01/21 22:18:28 | 000,597,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\printfilterpipelinesvc.exe
[2011/01/21 22:18:28 | 000,575,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2011/01/21 22:18:28 | 000,117,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\prntvpt.dll
[2011/01/21 22:18:28 | 000,089,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\filterpipelineprintproc.dll
[2011/01/21 21:55:11 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2011/01/21 21:29:23 | 000,974,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2011/01/21 21:29:23 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2011/01/21 21:26:18 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2011/01/21 21:26:18 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2011/01/21 21:24:21 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2011/01/21 21:24:02 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2011/01/21 21:23:49 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2011/01/21 21:23:36 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2011/01/21 21:23:19 | 000,743,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2011/01/21 21:16:24 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2011/01/21 21:10:54 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2011/01/21 21:10:20 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2011/01/20 15:03:31 | 000,000,000 | —D | C] – C:\ASPI Programs dvdfab out of date
[2011/01/19 14:21:10 | 000,376,832 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomsplitter.dll
[2011/01/19 14:21:10 | 000,339,968 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomqtde.dll
[2011/01/19 14:21:10 | 000,143,360 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomqtenc.dll
[2011/01/19 14:21:10 | 000,135,168 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomrmencoder.dll
[2011/01/19 14:21:10 | 000,081,920 | —- | C] (Viscom Software) – C:\WINDOWS\System32\viscomwave.dll
[2011/01/19 14:21:09 | 001,470,464 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscommpgenc.dll
[2011/01/19 14:21:09 | 000,888,832 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomflvdec.dll
[2011/01/19 14:21:09 | 000,110,592 | —- | C] (Viscom Software) – C:\WINDOWS\System32\viscomaudioencoder.dll
[2011/01/19 14:21:09 | 000,098,304 | —- | C] (Viscom Software) – C:\WINDOWS\System32\viscomaudiodata.dll
[2011/01/19 14:21:09 | 000,086,016 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomframe.dll
[2011/01/19 14:21:08 | 001,893,896 | —- | C] (Cheetah Websites Inc) – C:\WINDOWS\System32\CheetahDvdMaker.exe
[2011/01/19 14:21:08 | 000,045,056 | —- | C] ( ) – C:\WINDOWS\System32\Interop.VIDEOEDITLib.dll
[2011/01/19 14:21:08 | 000,020,480 | —- | C] (Engage) – C:\WINDOWS\System32\ShadowPanel.dll
[2011/01/19 14:21:07 | 000,090,112 | —- | C] ( ) – C:\WINDOWS\System32\Interop.RocketDivision.StarBurnX.dll
[2011/01/19 14:21:07 | 000,036,864 | —- | C] (Graphing) – C:\WINDOWS\System32\Graphing.V3.dll
[2011/01/19 14:21:07 | 000,009,728 | —- | C] ( ) – C:\WINDOWS\System32\Interop.dvdauthorLib.dll
[2011/01/19 14:06:01 | 000,000,000 | —D | C] – C:\Temp
[2011/01/19 14:02:03 | 002,078,952 | —- | C] (Rocket Division Software) – C:\WINDOWS\System32\starburnx.dll
[2011/01/19 14:02:03 | 000,335,872 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\dvdauthor.ocx
[2011/01/19 14:02:03 | 000,266,240 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\VideoEdit.ocx
[2011/01/19 14:02:03 | 000,233,472 | —- | C] (Viscom Software www.viscomsoft.com) – C:\WINDOWS\System32\viscomdvdimg.dll
[2011/01/19 14:02:01 | 000,000,000 | —D | C] – C:\Program Files\Cheetah Burner
[2011/01/19 14:02:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Cheetah Burner
[2011/01/19 10:32:09 | 000,000,000 | —D | C] – C:\Pic Camera 9
[2011/01/18 18:46:09 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\DVDFab 5
[2011/01/18 14:43:23 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Nero
[2011/01/18 14:23:09 | 000,000,000 | —D | C] – C:\Program Files\Nero
[2011/01/18 14:22:43 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Nero
[2011/01/18 14:22:12 | 000,000,000 | —D | C] – C:\Program Files\Ask.com
[2011/01/16 00:32:52 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\DVDFab
[2011/01/16 00:32:43 | 000,000,000 | —D | C] – C:\Program Files\DVDFab 5
[2011/01/15 19:44:52 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Elaborate Bytes
[2011/01/15 19:44:51 | 000,000,000 | —D | C] – C:\Program Files\Elaborate Bytes
[2011/01/13 22:47:00 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\1Click DVD Copy
[2011/01/13 22:39:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\1click dvd copy
[2011/01/13 22:38:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\1Click DVD Copy 5
[2011/01/13 22:38:54 | 000,000,000 | —D | C] – C:\Program Files\LG Software Innovations
[2011/01/13 21:07:45 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\ConvertXtoDVD
[2011/01/13 20:59:20 | 000,047,360 | —- | C] (VSO Software) – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.sys
[2011/01/13 20:59:20 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\Vso
[2011/01/13 20:59:20 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\PcSetup
[2011/01/13 20:59:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\VSO
[2011/01/13 20:59:14 | 001,645,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\gdiplus.dll
[2011/01/13 20:59:14 | 001,184,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wvc1dmod.dll
[2011/01/13 20:59:14 | 000,626,688 | —- | C] (On2.com) – C:\WINDOWS\System32\vp7vfw.dll
[2011/01/13 20:59:14 | 000,217,127 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\drv43260.dll
[2011/01/13 20:59:14 | 000,208,935 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\drv33260.dll
[2011/01/13 20:59:14 | 000,176,165 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\drv23260.dll
[2011/01/13 20:59:14 | 000,065,602 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\cook3260.dll
[2011/01/13 20:59:13 | 000,000,000 | —D | C] – C:\Program Files\VSO
[2011/01/13 20:55:17 | 000,000,000 | —D | C] – C:\Convert x to DVD 3.0
[2011/01/13 11:21:36 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\.dvdcss
[2011/01/12 22:46:17 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\dvdcss
[2011/01/12 19:47:55 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\My Documents\Any DVD Converter Professional
[2011/01/12 19:47:23 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\AnvSoft
[2011/01/12 19:47:20 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\AnvSoft
[2011/01/12 19:47:17 | 000,000,000 | —D | C] – C:\Program Files\AnvSoft
[2011/01/12 09:23:06 | 000,000,000 | —D | C] – C:\Adobe Lightroom 3 book
[2011/01/10 18:07:02 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Application Data\WinRAR
[2011/01/10 18:07:02 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\WinRAR
[2011/01/10 18:07:01 | 000,000,000 | —D | C] – C:\Documents and Settings\HP_Administrator\Start Menu\Programs\WinRAR
[2011/01/10 18:05:50 | 000,000,000 | —D | C] – C:\Program Files\WinRAR
[2002/04/10 03:41:06 | 000,065,536 | R— | C] ( ) – C:\WINDOWS\System32\A3d.dll
[79 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[16 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/01 11:26:29 | 000,041,464 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\wklnhst.dat
[2011/02/01 11:26:29 | 000,040,448 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\what the tech2.wps
[2011/02/01 10:08:08 | 000,018,071 | —- | M] () – C:\WINDOWS\System32\Config.MPF
[2011/02/01 10:03:05 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/01 10:01:00 | 000,000,256 | —- | M] () – C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/02/01 09:59:50 | 000,026,624 | —- | M] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/02/01 09:49:22 | 011,558,400 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info newest 1-30-11 info.wps
[2011/02/01 09:49:05 | 000,014,848 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\virus post question.wps
[2011/02/01 09:47:29 | 000,251,392 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\what the tech.wps
[2011/02/01 09:33:12 | 004,263,406 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ComboFix newest .exe
[2011/02/01 09:23:02 | 000,024,983 | —- | M] () – C:\WINDOWS\System32\1523250041.dll
[2011/02/01 09:17:49 | 000,000,686 | —- | M] () – C:\WINDOWS\lexstat.ini
[2011/02/01 08:54:56 | 000,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/02/01 08:54:24 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/01 08:54:20 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/02/01 08:54:11 | 3152,596,992 | -HS- | M] () – C:\hiberfil.sys
[2011/01/31 23:29:33 | 001,168,896 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\eset Online Scanner and otl .wps
[2011/01/31 23:22:26 | 000,602,624 | —- | M] (OldTimer Tools) – C:\Documents and Settings\HP_Administrator\Desktop\OTL.exe
[2011/01/31 23:17:04 | 000,010,240 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\eset Online Scanner .wps
[2011/01/31 23:16:12 | 000,008,704 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\eset.wps
[2011/01/31 22:54:21 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/31 18:03:00 | 000,000,116 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/01/31 17:58:31 | 004,160,066 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ComboFix new .exe
[2011/01/31 09:57:05 | 000,288,107 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\gmer.zip
[2011/01/31 09:56:07 | 000,624,128 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\dds.scr
[2011/01/30 22:04:49 | 000,117,248 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\Manual steps to restore the registry in Windows XP.wps
[2011/01/30 20:12:27 | 005,736,448 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\analyse this analizer.wps
[2011/01/30 16:31:18 | 000,002,469 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\HiJackThis.lnk
[2011/01/30 16:29:34 | 000,126,377 | —- | M] () – C:\Documents and Settings\HP_Administrator\AdobeFnt10.lst
[2011/01/30 15:00:17 | 000,000,020 | -H– | M] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2011/01/30 01:02:06 | 000,391,998 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\malewarebites virus report.000000001.jpg
[2011/01/30 01:01:00 | 000,358,338 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\malewarebites virus report.000000000.jpg
[2011/01/29 22:23:40 | 000,000,796 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/01/29 22:18:17 | 000,010,240 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\Trojan-Agent-Gen-Nullo.wps
[2011/01/29 22:15:49 | 103,702,624 | —- | M] (Symantec Corporation) – C:\Documents and Settings\HP_Administrator\Desktop\NAV_18.1.0.37 norton anti virus_SYMTB_CNET FTT_177_5410.exe
[2011/01/29 21:46:59 | 007,734,240 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\HP_Administrator\Desktop\mbam-setup.exe
[2011/01/28 21:39:56 | 000,009,728 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\e-mail web address boffo123.wps
[2011/01/28 21:39:36 | 000,020,480 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info.wps
[2011/01/28 21:39:29 | 000,005,632 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\hijackthis.wps
[2011/01/28 21:36:36 | 000,010,240 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info newest info.wps
[2011/01/27 15:01:48 | 000,197,632 | —- | M] (Microsoft) – C:\Program Files\Common Files\OnlineFilesManager.dll
[2011/01/27 14:06:20 | 000,024,064 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\win 95 media player stop.wps
[2011/01/26 09:54:06 | 002,879,850 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\P1010492-tree-bank-d–the-p.gif
[2011/01/25 14:02:57 | 001,110,476 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\7z920.exe
[2011/01/25 13:48:08 | 001,539,584 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\ISO file open with RAR.wps
[2011/01/25 13:47:57 | 023,906,240 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\7zip-us-setup.exe
[2011/01/25 13:31:37 | 001,446,036 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\wrar40b5 beta.exe
[2011/01/24 14:00:16 | 000,000,668 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\vso_ts_preview.xml
[2011/01/24 12:39:33 | 000,000,112 | —- | M] () – C:\Documents and Settings\HP_Administrator\default.pls
[2011/01/22 19:42:21 | 000,001,515 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\Paint.lnk
[2011/01/21 22:27:41 | 000,206,680 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/01/21 22:22:08 | 000,442,796 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/01/21 22:22:08 | 000,071,936 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/01/21 22:04:36 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/01/21 17:17:50 | 000,022,528 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\runtime error.wps
[2011/01/21 17:09:45 | 000,006,144 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\lg dvd-vcr combo rc89t spec.wps
[2011/01/19 14:21:19 | 000,001,513 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Cheetah DVD Maker.lnk
[2011/01/19 14:02:01 | 000,001,575 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Cheetah DVD Burner.lnk
[2011/01/18 18:46:09 | 000,000,648 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 5.lnk
[2011/01/18 18:46:09 | 000,000,630 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\DVDFab 5.lnk
[2011/01/18 18:12:27 | 000,006,144 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\Good nero 9 software serial.wps
[2011/01/18 14:17:31 | 000,005,632 | —- | M] () – C:\Documents and Settings\HP_Administrator\My Documents\Good nero software serial.wps
[2011/01/17 17:36:38 | 000,000,085 | -HS- | M] () – C:\Documents and Settings\All Users\Application Data\.zreglib
[2011/01/15 19:44:58 | 000,000,864 | —- | M] () – C:\Documents and Settings\All Users\Desktop\CloneDVD2.lnk
[2011/01/15 07:39:46 | 000,000,362 | —- | M] () – C:\WINDOWS\tasks\McDefragTask.job
[2011/01/13 22:39:00 | 000,001,014 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\1CLICK DVD COPY 5.lnk
[2011/01/13 22:39:00 | 000,000,996 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\1CLICK DVD COPY 5.lnk
[2011/01/13 20:59:20 | 000,087,608 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\inst.exe
[2011/01/13 20:59:20 | 000,047,360 | —- | M] (VSO Software) – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.sys
[2011/01/13 20:59:20 | 000,007,887 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.cat
[2011/01/13 20:59:20 | 000,001,144 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.inf
[2011/01/13 20:59:18 | 000,000,857 | —- | M] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\ConvertXtoDvd.lnk
[2011/01/13 20:59:18 | 000,000,839 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\ConvertXtoDvd 3.lnk
[2011/01/12 21:42:23 | 1768,128,512 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\cic-fafe9a_mpeg2video 1.mpg
[2011/01/12 19:47:25 | 000,000,846 | —- | M] () – C:\Documents and Settings\HP_Administrator\Desktop\Any DVD Converter Professional.lnk
[2011/01/11 23:13:29 | 000,001,846 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Lightroom 3.2.lnk
[79 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[16 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
========== Files Created - No Company Name ==========
[2099/01/01 12:00:00 | 000,001,323 | —- | C] () – C:\WINDOWS\System32\sqlsodbc.chmxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
[2099/01/01 12:00:00 | 000,001,323 | —- | C] () – C:\WINDOWS\System32\sqlsodbc.chmxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
[2099/01/01 12:00:00 | 000,001,323 | —- | C] () – C:\WINDOWS\System32\sqlsodbc.chmxxxxxxxxxxxxxxxxxxxxxxxxxxx
[2011/02/01 10:10:35 | 000,040,448 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\what the tech2.wps
[2011/02/01 09:44:01 | 000,251,392 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\what the tech.wps
[2011/02/01 09:33:11 | 004,263,406 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ComboFix newest .exe
[2011/02/01 09:28:09 | 000,014,848 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\virus post question.wps
[2011/02/01 09:23:02 | 000,024,983 | —- | C] () – C:\WINDOWS\System32\1523250041.dll
[2011/01/31 23:23:28 | 001,168,896 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\eset Online Scanner and otl .wps
[2011/01/31 23:17:04 | 000,010,240 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\eset Online Scanner .wps
[2011/01/31 23:16:11 | 000,008,704 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\eset.wps
[2011/01/31 17:58:31 | 004,160,066 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ComboFix new .exe
[2011/01/31 09:58:14 | 011,558,400 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info newest 1-30-11 info.wps
[2011/01/31 09:57:04 | 000,288,107 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\gmer.zip
[2011/01/30 22:00:30 | 000,117,248 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\Manual steps to restore the registry in Windows XP.wps
[2011/01/30 19:15:33 | 005,736,448 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\analyse this analizer.wps
[2011/01/30 01:02:06 | 000,391,998 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\malewarebites virus report.000000001.jpg
[2011/01/30 01:01:00 | 000,358,338 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\malewarebites virus report.000000000.jpg
[2011/01/29 22:23:40 | 000,000,796 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/01/29 21:49:49 | 000,010,240 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\Trojan-Agent-Gen-Nullo.wps
[2011/01/28 21:36:36 | 000,010,240 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\tech guy info newest info.wps
[2011/01/28 19:13:41 | 000,009,728 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\e-mail web address boffo123.wps
[2011/01/27 11:05:56 | 000,024,064 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\win 95 media player stop.wps
[2011/01/26 09:54:06 | 002,879,850 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\P1010492-tree-bank-d–the-p.gif
[2011/01/25 14:02:45 | 001,110,476 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\7z920.exe
[2011/01/25 13:47:54 | 023,906,240 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\7zip-us-setup.exe
[2011/01/25 13:31:25 | 001,446,036 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\wrar40b5 beta.exe
[2011/01/25 13:29:39 | 001,539,584 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\ISO file open with RAR.wps
[2011/01/21 17:07:13 | 000,022,528 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\runtime error.wps
[2011/01/21 10:57:17 | 000,006,144 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\lg dvd-vcr combo rc89t spec.wps
[2011/01/19 14:21:18 | 000,001,513 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Cheetah DVD Maker.lnk
[2011/01/19 14:21:10 | 000,159,744 | —- | C] () – C:\WINDOWS\System32\viscomtran.dll
[2011/01/19 14:21:10 | 000,054,612 | —- | C] () – C:\WINDOWS\System32\starburnx.tlb
[2011/01/19 14:21:09 | 006,963,712 | —- | C] () – C:\WINDOWS\System32\videotrans.dll
[2011/01/19 14:21:09 | 000,452,608 | —- | C] () – C:\WINDOWS\System32\videoformat.dll
[2011/01/19 14:21:09 | 000,262,144 | —- | C] () – C:\WINDOWS\System32\lame_enc.dll
[2011/01/19 14:21:09 | 000,172,032 | —- | C] () – C:\WINDOWS\System32\viscomgifenc.dll
[2011/01/19 14:21:09 | 000,154,624 | —- | C] () – C:\WINDOWS\System32\imgscaler.dll
[2011/01/19 14:21:09 | 000,028,160 | —- | C] () – C:\WINDOWS\System32\img_utils.dll
[2011/01/19 14:21:08 | 000,161,862 | —- | C] () – C:\WINDOWS\System32\DVD-R.ico
[2011/01/19 14:21:08 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\AxInterop.VIDEOEDITLib.dll
[2011/01/19 14:21:08 | 000,029,022 | —- | C] () – C:\WINDOWS\System32\FilmStripGreen.bmp
[2011/01/19 14:21:08 | 000,008,704 | —- | C] () – C:\WINDOWS\System32\AxInterop.dvdauthorLib.dll
[2011/01/19 14:21:07 | 000,161,862 | —- | C] () – C:\WINDOWS\System32\CheetahDVDMaker.ico
[2011/01/19 14:21:07 | 000,000,692 | —- | C] () – C:\WINDOWS\System32\CheetahDvdMaker.xml
[2011/01/19 14:02:03 | 000,019,456 | —- | C] () – C:\WINDOWS\System32\videocore.dll
[2011/01/19 14:02:01 | 000,001,575 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Cheetah DVD Burner.lnk
[2011/01/18 18:46:09 | 000,000,648 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\DVDFab 5.lnk
[2011/01/18 18:46:09 | 000,000,630 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\DVDFab 5.lnk
[2011/01/18 14:41:39 | 000,006,144 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\Good nero 9 software serial.wps
[2011/01/18 14:22:16 | 000,000,256 | —- | C] () – C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/01/18 14:17:30 | 000,005,632 | —- | C] () – C:\Documents and Settings\HP_Administrator\My Documents\Good nero software serial.wps
[2011/01/15 19:49:34 | 000,000,085 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\.zreglib
[2011/01/15 19:44:58 | 000,000,864 | —- | C] () – C:\Documents and Settings\All Users\Desktop\CloneDVD2.lnk
[2011/01/13 22:39:00 | 000,001,014 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\1CLICK DVD COPY 5.lnk
[2011/01/13 22:39:00 | 000,000,996 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\1CLICK DVD COPY 5.lnk
[2011/01/13 21:00:03 | 000,000,668 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\vso_ts_preview.xml
[2011/01/13 20:59:28 | 000,000,034 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.log
[2011/01/13 20:59:20 | 000,087,608 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\inst.exe
[2011/01/13 20:59:20 | 000,007,887 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.cat
[2011/01/13 20:59:20 | 000,001,144 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\pcouffin.inf
[2011/01/13 20:59:18 | 000,000,857 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\ConvertXtoDvd.lnk
[2011/01/13 20:59:18 | 000,000,839 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\ConvertXtoDvd 3.lnk
[2011/01/12 20:38:54 | 1768,128,512 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\cic-fafe9a_mpeg2video 1.mpg
[2011/01/12 19:47:25 | 000,000,846 | —- | C] () – C:\Documents and Settings\HP_Administrator\Desktop\Any DVD Converter Professional.lnk
[2011/01/11 23:13:29 | 000,001,846 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Lightroom 3.2.lnk
[2011/01/11 23:13:28 | 000,001,840 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Adobe Photoshop Lightroom 3.2.lnk
[2010/05/24 13:33:00 | 004,670,829 | —- | C] () – C:\WINDOWS\System32\libavcodec.dll
[2010/05/24 13:33:00 | 001,529,856 | —- | C] () – C:\WINDOWS\System32\ff_samplerate.dll
[2010/05/24 13:33:00 | 001,447,921 | —- | C] () – C:\WINDOWS\System32\ffmpegmt.dll
[2010/05/24 13:33:00 | 000,877,385 | —- | C] () – C:\WINDOWS\System32\ff_x264.dll
[2010/05/24 13:33:00 | 000,810,113 | —- | C] () – C:\WINDOWS\System32\xvidcore.dll
[2010/05/24 13:33:00 | 000,336,384 | —- | C] () – C:\WINDOWS\System32\ff_libfaad2.dll
[2010/05/24 13:33:00 | 000,324,096 | —- | C] () – C:\WINDOWS\System32\TomsMoComp_ff.dll
[2010/05/24 13:33:00 | 000,248,320 | —- | C] () – C:\WINDOWS\System32\ff_kernelDeint.dll
[2010/05/24 13:33:00 | 000,216,576 | —- | C] () – C:\WINDOWS\System32\ff_libdts.dll
[2010/05/24 13:33:00 | 000,151,552 | —- | C] () – C:\WINDOWS\System32\ff_libmad.dll
[2010/05/24 13:33:00 | 000,145,408 | —- | C] () – C:\WINDOWS\System32\libmpeg2_ff.dll
[2010/05/24 13:33:00 | 000,139,944 | —- | C] () – C:\WINDOWS\System32\libmplayer.dll
[2010/05/24 13:33:00 | 000,121,856 | —- | C] () – C:\WINDOWS\System32\ff_liba52.dll
[2010/05/24 13:33:00 | 000,116,736 | —- | C] () – C:\WINDOWS\System32\ff_tremor.dll
[2010/05/24 13:33:00 | 000,108,032 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2010/05/24 13:33:00 | 000,100,864 | —- | C] () – C:\WINDOWS\System32\ff_wmv9.dll
[2010/05/24 13:33:00 | 000,097,792 | —- | C] () – C:\WINDOWS\System32\ff_unrar.dll
[2010/05/19 14:59:20 | 000,150,528 | —- | C] () – C:\WINDOWS\System32\mkx.dll
[2010/05/19 14:59:10 | 000,109,568 | —- | C] () – C:\WINDOWS\System32\avi.dll
[2010/05/19 14:59:02 | 000,141,824 | —- | C] () – C:\WINDOWS\System32\mp4.dll
[2010/05/19 14:58:52 | 000,123,392 | —- | C] () – C:\WINDOWS\System32\ogm.dll
[2010/05/19 14:58:18 | 000,154,112 | —- | C] () – C:\WINDOWS\System32\ts.dll
[2010/05/19 14:58:08 | 000,249,856 | —- | C] () – C:\WINDOWS\System32\dxr.dll
[2010/05/19 14:57:42 | 000,097,792 | —- | C] () – C:\WINDOWS\System32\avs.dll
[2010/05/19 14:57:26 | 000,093,184 | —- | C] () – C:\WINDOWS\System32\avss.dll
[2010/05/19 14:55:40 | 000,080,384 | —- | C] () – C:\WINDOWS\System32\mkzlib.dll
[2010/05/19 14:55:36 | 000,024,576 | —- | C] () – C:\WINDOWS\System32\mkunicode.dll
[2010/01/01 16:20:51 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Desktop Pictures
[2010/01/01 16:20:51 | 000,000,268 | RH– | C] () – C:\Documents and Settings\HP_Administrator\Application Data\Dance
[2010/01/01 16:20:51 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/01/01 16:20:51 | 000,000,012 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Digital Light
[2009/06/07 10:24:04 | 000,180,224 | —- | C] () – C:\WINDOWS\System32\xvidvfw.dll
[2009/01/10 16:15:44 | 000,159,744 | —- | C] () – C:\WINDOWS\System32\mmfinfo.dll
[2008/11/06 09:37:32 | 003,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2007/11/30 14:42:33 | 000,270,848 | —- | C] () – C:\WINDOWS\System32\PhotomatixLib.dll
[2007/11/30 14:42:33 | 000,229,376 | —- | C] () – C:\WINDOWS\System32\PhotomatixLib2.dll
[2007/11/30 14:42:33 | 000,216,064 | —- | C] () – C:\WINDOWS\System32\pmjp.dll
[2007/11/30 14:42:33 | 000,114,688 | —- | C] () – C:\WINDOWS\System32\PhotomatixLib3.dll
[2007/11/23 14:03:52 | 000,782,336 | —- | C] () – C:\WINDOWS\System32\IlmImf.dll
[2007/11/23 14:03:52 | 000,446,464 | —- | C] () – C:\WINDOWS\System32\Photomatix_jpg.dll
[2007/11/23 14:03:52 | 000,353,280 | —- | C] () – C:\WINDOWS\System32\pmtf2.dll
[2007/11/23 14:03:52 | 000,278,528 | —- | C] () – C:\WINDOWS\System32\Photomatix25Lib.dll
[2007/11/23 14:03:52 | 000,274,432 | —- | C] () – C:\WINDOWS\System32\Photomatix25Lib2.dll
[2007/11/23 14:03:52 | 000,205,824 | —- | C] () – C:\WINDOWS\System32\pmtf1.dll
[2007/11/23 14:03:52 | 000,204,288 | —- | C] () – C:\WINDOWS\System32\pmtf3.dll
[2007/11/23 14:03:52 | 000,095,525 | —- | C] () – C:\WINDOWS\System32\Photomatix25Lib3.dll
[2007/11/23 14:03:52 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\pmexr.dll
[2007/11/23 14:03:52 | 000,011,776 | —- | C] () – C:\WINDOWS\System32\pmbm.dll
[2007/11/16 14:42:42 | 000,678,469 | -HS- | C] () – C:\WINDOWS\System32\mtpgcmyp.ini
[2007/10/13 03:30:20 | 000,000,137 | —- | C] () – C:\WINDOWS\System32\Registration.ini
[2006/09/18 19:50:36 | 000,041,464 | —- | C] () – C:\Documents and Settings\HP_Administrator\Application Data\wklnhst.dat
[2006/08/30 19:26:41 | 000,002,560 | —- | C] () – C:\WINDOWS\EyeCand3.INI
[2006/08/30 14:45:50 | 000,210,944 | —- | C] () – C:\WINDOWS\System32\MSVCRT10.DLL
[2006/08/28 12:13:16 | 000,005,627 | R— | C] () – C:\WINDOWS\System32\Ludap17.ini
[2006/08/28 12:13:16 | 000,000,039 | R— | C] () – C:\WINDOWS\System32\ctzapxx.ini
[2006/08/28 12:01:00 | 000,000,347 | —- | C] () – C:\WINDOWS\CTWave32.INI
[2006/08/28 12:00:39 | 000,000,029 | —- | C] () – C:\WINDOWS\sfbm.INI
[2006/08/17 11:52:56 | 000,032,768 | —- | C] () – C:\WINDOWS\System32\LXBRPMON.DLL
[2006/08/17 11:52:56 | 000,020,480 | —- | C] () – C:\WINDOWS\System32\LXBRPMUI.DLL
[2006/08/17 11:51:57 | 000,000,686 | —- | C] () – C:\WINDOWS\lexstat.ini
[2006/08/09 11:23:55 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\YCRWin32.dll
[2006/07/18 21:46:42 | 000,000,116 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2006/07/05 14:30:42 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\Gif89.dll
[2006/07/03 22:55:29 | 000,026,624 | —- | C] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006/07/01 14:50:38 | 000,000,139 | —- | C] () – C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\fusioncache.dat
[2006/02/22 09:45:40 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2006/02/22 09:23:34 | 000,028,848 | —- | C] () – C:\WINDOWS\System32\drivers\USBkey.sys
[2006/02/22 09:19:05 | 000,014,316 | —- | C] () – C:\WINDOWS\System32\CHODDI.SYS
[2006/02/22 09:18:59 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\hpreg.dll
[2006/02/22 09:16:23 | 000,000,031 | —- | C] () – C:\WINDOWS\Quicken.ini
[2006/02/22 09:13:37 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/02/22 09:02:45 | 000,000,108 | —- | C] () – C:\WINDOWS\WININIT.INI
[2006/02/22 09:01:23 | 000,000,698 | —- | C] () – C:\WINDOWS\NSSetDefaultBrowser.ini
[2006/02/22 08:46:26 | 000,001,702 | —- | C] () – C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2006/02/22 08:45:22 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2006/02/22 08:42:46 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\hcwXDS.dll
[2006/02/22 08:39:38 | 000,000,791 | —- | C] () – C:\WINDOWS\orun32.ini
[2006/02/22 08:19:15 | 000,016,896 | —- | C] () – C:\WINDOWS\System32\bcbmm.dll
[2005/12/09 08:03:52 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2005/08/30 15:01:42 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2005/08/05 16:01:54 | 000,235,008 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2005/08/02 18:19:16 | 000,050,176 | —- | C] () – C:\WINDOWS\armcex.dll
[2005/05/02 21:38:42 | 000,064,512 | R— | C] () – C:\WINDOWS\System32\P17.dll
[2004/07/26 01:51:38 | 000,000,560 | —- | C] () – C:\WINDOWS\System32\oeminfo.ini
[2004/01/13 17:06:46 | 000,077,824 | —- | C] () – C:\WINDOWS\System32\LXBMLCNP.DLL
[2003/10/01 20:48:18 | 000,053,248 | R— | C] () – C:\WINDOWS\System32\P17CPI.dll
[2003/06/13 05:53:38 | 000,000,187 | —- | C] () – C:\WINDOWS\System32\lxbmcoin.ini
[2003/01/07 17:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2002/11/13 09:40:22 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\lxbmvs.dll
[2001/07/06 17:30:00 | 000,003,399 | —- | C] () – C:\WINDOWS\System32\hptcpmon.ini
========== LOP Check ==========
[2011/01/15 18:01:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\1click dvd copy
[2006/08/26 18:39:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\4200Series
[2006/12/20 20:38:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\CA
[2006/02/22 09:00:20 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Digital Interactive Systems Corporation
[2010/01/01 16:20:51 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EnterNHelp
[2006/09/06 17:53:59 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\muvee Technologies
[2010/01/01 16:21:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nikon
[2009/01/21 13:07:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Seagate
[2011/01/25 09:04:59 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2010/01/01 16:20:51 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ultima_T15
[2011/01/15 07:39:46 | 000,000,362 | —- | M] () – C:\WINDOWS\Tasks\McDefragTask.job
[2009/05/18 21:44:43 | 000,000,354 | —- | M] () – C:\WINDOWS\Tasks\McQcTask.job
[2011/02/01 10:01:00 | 000,000,256 | —- | M] () – C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
========== Purity Check ==========
========== Custom Scans ==========
< >
< *.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
========== Alternate Data Streams ==========
@Alternate Data Stream - 170 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FB1B13D8
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2615E8F1
< End of report >
OTL Extras logfile created on: 2/1/2011 9:52:47 AM - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\otl scanner antivirus
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 78.00% Memory free
9.00 Gb Paging File | 9.00 Gb Available in Paging File | 94.00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 270.99 Gb Total Space | 146.81 Gb Free Space | 54.18% Space Free | Partition Type: NTFS
Drive D: | 8.45 Gb Total Space | 0.46 Gb Free Space | 5.44% Space Free | Partition Type: FAT32
Drive F: | 4.35 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive K: | 931.51 Gb Total Space | 175.57 Gb Free Space | 18.85% Space Free | Partition Type: NTFS
Computer Name: YOUR-4DACD0EA75 | User Name: HP_Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = YBrowser.HTML] – C:\Program Files\Yahoo!\browser\ybrowser.exe (Yahoo!, Inc.)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
http [open] – Reg Error: Key error.
https [open] – C:\PROGRA~1\Yahoo!\browser\ybrowser.exe %1 (Yahoo!, Inc.)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"ANTIVIRUSDISABLENOTIFY" = 0
"FIREWALLDISABLENOTIFY" = 0
"UPDATESDISABLENOTIFY" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe" = C:\Program Files\Common Files\McAfee\MNA\McNASvc.exe:*:Enabled:McAfee Network Agent – (McAfee, Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data
"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{172975EB-9465-4861-95B5-C7BB6D3DE62A}" = DocumentViewer
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1B1DDAD2-C704-49F8-8FC2-18DAAD9A87C5}" = Sound Blaster Audigy
"{1CB34CE9-0E6B-493F-BB66-3425E5DF76E5}" = CP_CalendarTemplates1
"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus
"{23012310-3E05-46A5-88A9-C6CBCABCAC79}" = Customer Experience Enhancement
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{23B35809-5E4A-4F14-8332-1CDEDDFAC089}" = CP_Package_Variety2
"{24BEBF2E-73F3-4599-840B-EDC612CCDD0D}" = Destinations
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java™ 6 Update 23
"{2A548002-9042-4083-A270-B67473DE1073}" = SkinsHP1
"{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}" = HP Deskjet Printer Preload
"{2E0C1913-886B-4C5C-8DAF-D1E649CE5FCC}" = Creative MediaSource
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager
"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp
"{30E52203-4A65-410D-B1E4-873DEBDC9EF4}" = Cheetah .Net 2.0 Installer
"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java™ 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{33D6CC28-9F75-4d1b-A11D-98895B3A3729}" = HP Photosmart 330,380,420,470,7800,8000,8200 Series
"{34F3FCF1-817B-4D61-B6AF-19D9486AFEA0}" = Unload
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35DD9A1D-B340-4F41-A8B0-6EEBFB119280}" = muvee autoProducer unPlugged 1.2
"{36D620AD-EEBA-4973-BA86-0C9AE6396620}" = OptionalContentQFolder
"{3BA95526-6AE0-4B87-A62D-17187EF565FC}" = HP Boot Optimizer
"{3E386744-10FA-44b2-98C9-DF7A270DECB3}" = HP PSC & OfficeJet 5.3.A
"{3FE0CFAB-584A-4AA5-B8CD-C32284CFA308}" = RandMap
"{4041C245-7099-4C96-9738-5EBC23827B3C}" = BufferChm
"{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}" = Microsoft Works
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 1.0
"{494D17B5-3369-4905-8C4B-80C972C5E0FF}" = CP_Panorama1Config
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A5C4996-5332-4ACE-A17B-0A468479FE45}" = Cheetah DVD Maker
"{4DA4012B-39AF-48c2-B23B-A4D570D233A6}" = cp_LightScribeConfig
"{522D1D79-9C0A-4361-91F8-2AFF8EC6C2E1}" = CP_Package_Variety1
"{531BC138-F1F7-496B-879C-F039ECEF438D}" = Adobe Photoshop Lightroom 2
"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder
"{54E3707F-808E-4fd4-95C9-15D1AB077E5D}" = NewCopy
"{54F0998F-73C8-4b51-8286-FE903C231BED}" = cp_PosterPrintConfig
"{567C23E1-7580-4185-B8C2-30805677297C}" = NewCopy_CDA
"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg
"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler
"{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724}" = DocProc
"{71883667-71F2-48A1-AB72-28D518D8AC4A}" = Seagate Manager Installer
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{755EC5E3-FD51-46bd-A57F-7A2D56FBF061}" = PSTAPlugin
"{766633B3-1AFA-44B6-A3FC-1DE991CD9C52}" = CP_Package_Basic1
"{769A295C-DCF4-41d6-AFBA-7D9394B23AFE}" = PSPrinters08
"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.0.0.1
"{7850A6D2-CBEA-4728-9877-F1BEDEA9F619}" = AiOSoftware
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{79F8E1D4-36C1-439C-95FA-F695050B5B07}" = Sonic_PrimoSDK
"{7C03270C-4FAB-4F5C-B10D-52FEDA190790}" = DocumentViewerQFolder
"{80AE27BA-B0ED-4288-A8B9-D8194BCF4115}" = cp_UpdateProjectsConfig
"{869C3062-4745-4949-B6C9-98AF24D89030}" = PhotoGallery
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{91120409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Standard Edition 2003
"{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F}" = Readme
"{9D4ABB0C-F60B-44A6-956C-A4A63D5495C9}" = CueTour
"{A01FC76F-CC09-4658-9E37-5C2F635EE708}" = Microsoft Office 2003 Edition 60 Days Trial Welcome Tour
"{A195B13E-A5E3-4BAF-A995-7F70F445CD06}" = ScannerCopy
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3455242-DAE0-4523-8242-FD82706ABF4B}" = CameraDrivers
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio
"{ABB2901A-3D0A-4F21-8324-2F13C3EFE163}" = LightScribe [removed]
"{AC76BA86-7AD7-1033-7B44-A70000000000}" = Adobe Reader 7.0
"{B11E71BA-498C-42D4-9F1A-9D7A89D9DA61}" = CP_AtenaShokunin1Config
"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy
"{B276997E-4367-4b1b-A39C-4CAE7464337A}" = AiO_Scan_CDA
"{B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5}" = PanoStandAlone
"{B57F2FF0-5A25-4332-B503-4592B370C02F}" = CP_Package_Variety3
"{B60E7826-F117-4d26-8165-D2DC5A494AB0}" = Fax_CDA
"{B64E3AFC-59EF-4f18-BF11-E751462450D3}" = AiOSoftwareNPI
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{BBD3BF67-5B89-4CBB-BA58-5818ED5F3290}" = cp_OnlineProjectsConfig
"{BD01E97F-2A6A-495E-BE38-22C7B80F3CD7}" = Cheetah DVD Burner
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C439D065-5B64-4563-A6B9-1AA202633E13}" = Lexmark Fax Solutions
"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan
"{C83A12B9-B31B-461A-BBD4-CE9B988094F1}" = HP Photosmart Cameras 5.0
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = Fax
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center
"{D518592A-0F1E-40ca-BECB-3D3F026C6B0D}" = CameraDrivers
"{DAAD5187-62C5-4AD6-A526-803C18C4944D}" = HP Web Helper
"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp
"{E073D315-3C54-44BF-A1B2-B5583AEA618C}" = muvee autoProducer 4.5
"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant
"{E9757890-7EC5-46C8-99AB-B00F07B6525C}" = Nikon Transfer
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter
"{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}" = HP Software Update
"{EDD235BB-9FB4-4604-85ED-1B14A256F4E0}" = Adobe Photoshop Lightroom 3.2
"{EFB21DE7-8C19-4A88-BB28-A766E16493BC}" = Adobe Photoshop CS
"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status
"{F51D9393-BB14-4566-99BF-D6ED63AEFCD7}" = Natural Color
"{F80239D8-7811-4D5E-B033-0D0BBFE32920}" = HP DigitalMedia Archive
"{FC8D25A7-FF1B-41BB-BB3B-9A06C0A60AE0}" = InstantShareDevices
"12133444-BF36-4d4e-B7FB-A3424C645DE4" = GemMaster Mystic
"1Click DVD Copy 5_is1" = 1Click DVD Copy [removed]
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Type Manager 4.1" = Adobe Type Manager 4.1
"Agere Systems Soft Modem" = Agere Systems PCI-SV92PP Soft Modem
"Any DVD Converter Professional_is1" = Any DVD Converter Professional 4.0.6
"Apophysis 2.0" = Apophysis 2.0
"ATI Display Driver" = ATI Display Driver
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"AwayMode160" = Microsoft Away Mode
"B3EE3001-DC24-4cd1-8743-5692C716659F" = Otto
"BroadJump Client Foundation" = BroadJump Client Foundation
"CloneDVD2" = CloneDVD2
"DISCover" = DISCover
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5_is1" = DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.7.6
"ERUNT_is1" = ERUNT 1.1j
"EyeCandy5Textures" = Alien Skin Eye Candy 5 Textures
"FLV Player" = FLV Player 2.0 (build 25)
"GML Undistorter_is1" = GML Undistorter 1.05
"Groone's KwikPik" = Groone's KwikPik
"HijackThis" = HijackThis 2.0.2
"HP Document Viewer" = HP Document Viewer 5.3
"HP Imaging Device Functions" = HP Imaging Device Functions 6.0
"HP Photo & Imaging" = HP Photosmart Premier Software 6.0
"HP Photosmart for Media Center PC" = HP Photosmart for Media Center PC
"HP Rhapsody" = HP Rhapsody
"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3
"HPOOVClient-9972322 Uninstaller" = Updates from HP (remove only)
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InfraRecorder" = InfraRecorder
"InstallShield_{23012310-3E05-46A5-88A9-C6CBCABCAC79}" = Customer Experience Enhancement
"InstallShield_{71883667-71F2-48A1-AB72-28D518D8AC4A}" = Seagate Manager Installer
"InstallShield_{C439D065-5B64-4563-A6B9-1AA202633E13}" = Lexmark 4200 Series Fax Solutions
"IntelliMover Data Transfer Demo" = Remove IntelliMover Demo
"KPT effects" = KPT® effects™
"Lexmark 4200 Series" = Lexmark 4200 Series
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Media Player - Codec Pack" = Media Player Codec Pack 3.9.6
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Money2006b" = Microsoft Money 2006
"MPlayer" = MPlayer (remove only)
"MSC" = McAfee SecurityCenter
"Nero - Burning Rom!UninstallKey" = Nero OEM
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PC-Doctor 5 for Windows" = PC-Doctor 5 for Windows
"Photomatix Basic_is1" = Photomatix Basic version 1.2.1
"Photomatix Pro_is1" = Photomatix Pro version 2.5.4
"PhotomatixPro3_is1" = Photomatix Pro version 3.0.2
"PS2" = PS2
"QuickTime" = QuickTime
"RealPlayer 6.0" = RealPlayer
"SBC.MCCInstall" = SBC Self Support Tool
"simple2_is1" = Tone Mapping Plug-In 1.2
"SpywareGuard_is1" = SpywareGuard v2.2
"ST6UNST #1" = Camel's MPEGJoin
"SysInfo" = Creative System Information
"WildTangent CDA" = WildTangent Web Driver
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.00 beta 2 (32-bit)
"WMFDist11" = Windows Media Format 11 runtime
"Yahoo! Applications" = AT&T; Yahoo! Applications
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 1/29/2011 10:55:23 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Hang | ID = 1002
Description = Hanging application photoshop.exe, version 9.0.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 1/29/2011 10:55:26 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Hang | ID = 1002
Description = Hanging application photoshop.exe, version 9.0.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 1/30/2011 2:33:50 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.
Error - 1/30/2011 7:10:42 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.
Error - 1/31/2011 10:15:27 PM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.
Error - 2/1/2011 1:19:45 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 2/1/2011 1:19:49 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Hang | ID = 1001
Description = Fault bucket 1180947459.
Error - 2/1/2011 1:25:52 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module , version 0.0.0.0, fault address 0x00000000.
Error - 2/1/2011 1:26:20 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1000
Description = Faulting application drwtsn32.exe, version 5.1.2600.0, faulting module
dbghelp.dll, version 5.1.2600.5512, fault address 0x0001295d.
Error - 2/1/2011 1:26:24 AM | Computer Name = YOUR-4DACD0EA75 | Source = Application Error | ID = 1001
Description = Fault bucket 223121472.
[ System Events ]
Error - 1/31/2011 11:37:00 AM | Computer Name = YOUR-4DACD0EA75 | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.
Error - 1/31/2011 11:37:27 AM | Computer Name = YOUR-4DACD0EA75 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.64 for the Network Card with network
address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error - 1/31/2011 7:27:14 PM | Computer Name = YOUR-4DACD0EA75 | Source = Service Control Manager | ID = 7000
Description = The Automatic LiveUpdate Scheduler service failed to start due to
the following error: %%3
Error - 1/31/2011 7:40:28 PM | Computer Name = YOUR-4DACD0EA75 | Source = Cdrom | ID = 262151
Description = The device, \Device\CdRom1, has a bad block.
Error - 1/31/2011 7:43:56 PM | Computer Name = YOUR-4DACD0EA75 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.64 for the Network Card with network
address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error - 1/31/2011 8:33:26 PM | Computer Name = YOUR-4DACD0EA75 | Source = Service Control Manager | ID = 7000
Description = The Automatic LiveUpdate Scheduler service failed to start due to
the following error: %%3
Error - 2/1/2011 12:36:12 AM | Computer Name = YOUR-4DACD0EA75 | Source = Service Control Manager | ID = 7000
Description = The Automatic LiveUpdate Scheduler service failed to start due to
the following error: %%3
Error - 2/1/2011 12:43:29 AM | Computer Name = YOUR-4DACD0EA75 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.64 for the Network Card with network
address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
Error - 2/1/2011 10:54:31 AM | Computer Name = YOUR-4DACD0EA75 | Source = Service Control Manager | ID = 7000
Description = The Automatic LiveUpdate Scheduler service failed to start due to
the following error: %%3
Error - 2/1/2011 11:22:21 AM | Computer Name = YOUR-4DACD0EA75 | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.64 for the Network Card with network
address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server
sent a DHCPNACK message).
< End of report >
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:53:06 AM, on 2/1/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\arservice.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
c:\Program Files\Microsoft Works\WksWP.exe
c:\Program Files\Microsoft Works\WkDStore.exe
c:\Program Files\Microsoft Works\wkgdcach.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tvguide.com/listings/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.gapethatass.net/entry1.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: UberButton Class - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
O2 - BHO: YahooTaggedBM Class - {65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\common\YIeTagBm.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: (no name) - {33973600-925A-11D9-A1F6-9234C84D2622} - (no file)
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: SBC Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - http://us.dl1.yimg.com/download.yahoo.com/…nst_current.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd…b?1195591567296
O16 - DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} (Lexmark eDiagnostics Class) - https://ediagnostics.lexmark.com/serval.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
–
End of file - 9976 bytes
DDS (Ver_10-12-12.02) - NTFSx86
Run by [removed] at 11:54:12.67 on Tue 02/01/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3006.2351 [GMT -6:00]
AV: McAfee VirusScan *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: Norton Internet Worm Protection *Disabled*
FW: McAfee Personal Firewall *Enabled*
============== Running Processes ===============
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
svchost.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\McAfee\MPF\MPFSrv.exe
svchost.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
c:\Program Files\Microsoft Works\WksWP.exe
c:\Program Files\Microsoft Works\WkDStore.exe
c:\Program Files\Microsoft Works\wkgdcach.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\DDS newest\dds.scr
============== Pseudo HJT Report ===============
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei;=utf-8&fr;=b1ie7
uStart Page = hxxp://www.tvguide.com/listings/
uInternet Connection Wizard,ShellNext = hxxp://www.gapethatass.net/entry1.html
uInternet Settings,ProxyOverride = 127.0.0.1
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: SpywareGuardDLBLOCK.CBrowserHelper: {4a368e80-174f-4872-96b5-0b27ddd11db2} - c:\program files\spywareguard\dlprotect.dll
BHO: UberButton Class: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\program files\yahoo!\common\yiesrvc.dll
BHO: YahooTaggedBM Class: {65d886a2-7ca7-479b-bb95-14d1efb7946a} - c:\program files\yahoo!\common\YIeTagBm.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: hpWebHelper Class: {aaae832a-5fff-4661-9c8f-369692d1dcb9} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\plugin\WebHelper.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5825.1100\swg.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SidebarAutoLaunch Class: {f2aa9440-6328-4933-b7c9-a6ccdf9cbf6d} - c:\program files\yahoo!\browser\YSidebarIEBHO.dll
TB: {33973600-925A-11D9-A1F6-9234C84D2622} - No File
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [Recguard] c:\windows\sminst\RECGUARD.EXE
mRun: [P17Helper] Rundll32 P17.dll,P17Helper
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [McENUI] c:\progra~1\mcafee\mhn\McENUI.exe /hide
mRun: [Google Quick Search Box] "c:\program files\google\quick search box\GoogleQuickSearchBox.exe" /autorun
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\docume~1\hp_adm~1\startm~1\programs\startup\erunta~1.lnk - c:\program files\erunt\AUTOBACK.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
IE: Google Sidewiki… - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
IE: {E2D4D26B-0180-43a4-B05F-462D6D54C789} - c:\windows\pchealth\helpctr\vendors\cn=hewlett-packard,l=cupertino,s=ca,c=us\iebutton\support.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\program files\yahoo!\common\yiesrvc.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office11\REFIEBAR.DLL
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - hxxp://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/e/2/f/e2fcec4b-6c8b-48b7-adab-ab9c403a978f/wvc1dmo.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1195591567296
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {C52439A0-2693-4E40-B141-9F9AD5257241} - hxxps://ediagnostics.lexmark.com/serval.cab
DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SpywareGuard.Handler: {81559c35-8464-49f7-bb0e-07a383bef910} - c:\program files\spywareguard\spywareguard.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
============= SERVICES / DRIVERS ===============
R1 mfehidk;McAfee Inc. mfehidk;c:\windows\system32\drivers\mfehidk.sys [2009-3-25 214664]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2010-2-17 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2010-2-17 66632]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\mcafee\siteadvisor\McSACore.exe [2009-5-18 93320]
R2 McProxy;McAfee Proxy Service;c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe [2009-5-18 359952]
R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]
R2 McShield;McAfee Real-time Scanner;c:\progra~1\mcafee\viruss~1\mcshield.exe [2009-5-18 144704]
R3 McSysmon;McAfee SystemGuards;c:\progra~1\mcafee\viruss~1\mcsysmon.exe [2009-5-18 606736]
R3 mfeavfk;McAfee Inc. mfeavfk;c:\windows\system32\drivers\mfeavfk.sys [2009-5-18 79816]
R3 mfebopk;McAfee Inc. mfebopk;c:\windows\system32\drivers\mfebopk.sys [2009-5-18 35272]
R3 mfesmfk;McAfee Inc. mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2009-5-18 40552]
R3 SASENUM;SASENUM;c:\program files\superantispyware\SASENUM.SYS [2010-2-17 12872]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-2-5 135664]
S3 mferkdk;McAfee Inc. mferkdk;c:\windows\system32\drivers\mferkdk.sys [2009-5-18 34248]
S4 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2008-10-28 156968]
=============== Created Last 30 ================
2011-02-01 15:50:53 ——– d—–w- C:\otl scanner antivirus
2011-02-01 15:23:02 24983 —-a-w- c:\windows\system32\1523250041.dll
2011-02-01 00:02:02 ——– d—–w- C:\Combofix newest
2011-01-31 16:00:56 ——– d—–w- C:\DDS newest
2011-01-31 15:59:15 ——– d—–w- C:\gmer new
2011-01-31 02:06:29 ——– d—–w- C:\Anti-virus Hijackthis log analized pic
2011-01-30 22:33:25 ——– d—–w- C:\HiJackThis newest
2011-01-30 04:23:40 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-30 04:23:35 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-01-30 04:23:35 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2011-01-27 21:13:36 ——– d—–w- C:\K-lite codec pack 6.6.2
2011-01-27 21:07:18 ——– d—–w- c:\program files\common files\Data
2011-01-27 21:01:48 197632 —-a-w- c:\program files\common files\OnlineFilesManager.dll
2011-01-26 20:06:10 ——– d—–w- C:\RAW Workflow from Capture to Archives A Complete Digital Photographer's Guide to Raw Imaging extracted
2011-01-25 20:05:02 ——– d—–w- C:\7 zip software
2011-01-25 19:37:02 ——– d—–w- C:\Rar archive
2011-01-22 04:19:16 ——– d—–w- c:\windows\system32\XPSViewer
2011-01-22 04:18:50 89088 —-a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-01-22 04:18:28 89088 ——w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2011-01-22 04:18:28 597504 ——w- c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2011-01-22 04:18:28 597504 ——w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2011-01-22 04:18:28 575488 ——w- c:\windows\system32\xpsshhdr.dll
2011-01-22 04:18:28 575488 ——w- c:\windows\system32\dllcache\xpsshhdr.dll
2011-01-22 04:18:28 1676288 ——w- c:\windows\system32\xpssvcs.dll
2011-01-22 04:18:28 1676288 ——w- c:\windows\system32\dllcache\xpssvcs.dll
2011-01-22 04:18:28 117760 ——w- c:\windows\system32\prntvpt.dll
2011-01-22 03:55:11 ——– d—–w- c:\windows\ie8updates
2011-01-22 03:29:23 974848 ——w- c:\windows\system32\dllcache\mfc42.dll
2011-01-22 03:29:23 953856 ——w- c:\windows\system32\dllcache\mfc40u.dll
2011-01-22 03:26:18 81920 ——w- c:\windows\system32\dllcache\fontsub.dll
2011-01-22 03:26:18 119808 ——w- c:\windows\system32\dllcache\t2embed.dll
2011-01-22 03:24:21 617472 ——w- c:\windows\system32\dllcache\comctl32.dll
2011-01-22 03:24:02 40960 ——w- c:\windows\system32\dllcache\ndproxy.sys
2011-01-22 03:23:49 744448 ——w- c:\windows\system32\dllcache\helpsvc.exe
2011-01-22 03:23:36 471552 ——w- c:\windows\system32\dllcache\aclayers.dll
2011-01-22 03:23:21 247808 ——w- c:\windows\system32\dllcache\ieproxy.dll
2011-01-22 03:23:21 12800 ——w- c:\windows\system32\dllcache\xpshims.dll
2011-01-22 03:23:19 743424 ——w- c:\windows\system32\dllcache\iedvtool.dll
2011-01-22 03:20:59 153088 ——w- c:\windows\system32\dllcache\triedit.dll
2011-01-22 03:16:24 3558912 ——w- c:\windows\system32\dllcache\moviemk.exe
2011-01-22 03:10:54 45568 ——w- c:\windows\system32\dllcache\wab.exe
2011-01-22 03:10:20 590848 ——w- c:\windows\system32\dllcache\rpcrt4.dll
2011-01-20 21:03:31 ——– d—–w- C:\ASPI Programs dvdfab out of date
2011-01-19 20:06:01 ——– d—–w- C:\Temp
2011-01-19 20:02:03 335872 —-a-w- c:\windows\system32\dvdauthor.ocx
2011-01-19 20:02:03 266240 —-a-w- c:\windows\system32\VideoEdit.ocx
2011-01-19 20:02:03 233472 —-a-w- c:\windows\system32\viscomdvdimg.dll
2011-01-19 20:02:03 2078952 —-a-w- c:\windows\system32\starburnx.dll
2011-01-19 20:02:03 19456 —-a-w- c:\windows\system32\videocore.dll
2011-01-19 20:02:01 ——– d—–w- c:\program files\Cheetah Burner
2011-01-19 16:32:09 ——– d—–w- C:\Pic Camera 9
2011-01-19 00:21:06 ——– d—–w- c:\windows\system32\wbem\repository\FS
2011-01-19 00:21:06 ——– d—–w- c:\windows\system32\wbem\Repository
2011-01-18 20:23:09 ——– d—–w- c:\program files\Nero
2011-01-18 20:22:43 ——– d—–w- c:\docume~1\alluse~1\applic~1\Nero
2011-01-18 20:22:12 ——– d—–w- c:\program files\Ask.com
2011-01-16 06:32:43 ——– d—–w- c:\program files\DVDFab 5
2011-01-16 01:47:16 48 –sh–w- c:\windows\SEFC0C0D5.tmp
2011-01-16 01:44:51 ——– d—–w- c:\program files\Elaborate Bytes
2011-01-14 04:47:00 ——– d—–w- c:\docume~1\hp_adm~1\locals~1\applic~1\1Click DVD Copy
2011-01-14 04:39:26 ——– d—–w- c:\docume~1\alluse~1\applic~1\1click dvd copy
2011-01-14 04:38:54 ——– d—–w- c:\program files\LG Software Innovations
2011-01-14 02:59:20 87608 —-a-w- c:\docume~1\hp_adm~1\applic~1\inst.exe
2011-01-14 02:59:20 47360 —-a-w- c:\windows\system32\drivers\pcouffin.sys
2011-01-14 02:59:20 47360 —-a-w- c:\docume~1\hp_adm~1\applic~1\pcouffin.sys
2011-01-14 02:59:14 65602 —-a-w- c:\windows\system32\cook3260.dll
2011-01-14 02:59:14 626688 —-a-w- c:\windows\system32\vp7vfw.dll
2011-01-14 02:59:14 217127 —-a-w- c:\windows\system32\drv43260.dll
2011-01-14 02:59:14 208935 —-a-w- c:\windows\system32\drv33260.dll
2011-01-14 02:59:14 176165 —-a-w- c:\windows\system32\drv23260.dll
2011-01-14 02:59:14 1645320 —-a-w- c:\windows\gdiplus.dll
2011-01-14 02:59:14 1184984 —-a-w- c:\windows\system32\wvc1dmod.dll
2011-01-14 02:59:13 ——– d—–w- c:\program files\VSO
2011-01-14 02:55:17 ——– d—–w- C:\Convert x to DVD 3.0
2011-01-13 17:21:36 ——– d—–w- c:\documents and settings\hp_administrator\.dvdcss
2011-01-13 01:47:20 ——– d—–w- c:\docume~1\hp_adm~1\applic~1\AnvSoft
2011-01-13 01:47:17 ——– d—–w- c:\program files\AnvSoft
2011-01-12 15:23:06 ——– d—–w- C:\Adobe Lightroom 3 book
==================== Find3M ====================
2010-11-18 18:12:44 81920 —-a-w- c:\windows\system32\isign32.dll
2010-11-13 00:53:06 472808 —-a-w- c:\windows\system32\deployJava1.dll
2010-11-12 22:34:10 73728 —-a-w- c:\windows\system32\javacpl.cpl
2010-11-09 14:52:35 249856 —-a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:26:58 916480 —-a-w- c:\windows\system32\wininet.dll
2010-11-06 00:26:58 43520 —-a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:26:58 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
============= FINISH: 11:55:18.04 ===============
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
DDS (Ver_10-12-12.02)
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 7/1/2006 3:49:36 PM
System Uptime: 2/1/2011 9:31:12 AM (2 hours ago)
Motherboard: MSI | | AMETHYST-M
Processor: AMD Athlon™ 64 X2 Dual Core Processor 4200+ | Socket 939 | 2188/200mhz
==== Disk Partitions =========================
C: is FIXED (NTFS) - 271 GiB total, 148.564 GiB free.
D: is FIXED (FAT32) - 8 GiB total, 0.459 GiB free.
E: is CDROM ()
F: is CDROM ()
H: is Removable
I: is Removable
J: is Removable
K: is FIXED (NTFS) - 932 GiB total, 175.574 GiB free.
L: is Removable
==== Disabled Device Manager Items =============
Class GUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
Description: 1394 Net Adapter
Device ID: V1394\NIC1394\F6FAEF10DC00
Manufacturer: Microsoft
Name: 1394 Net Adapter
PNP Device ID: V1394\NIC1394\F6FAEF10DC00
Service: NIC1394
==== System Restore Points ===================
RP748: 11/4/2010 10:23:33 AM - System Checkpoint
RP749: 11/8/2010 7:38:47 PM - System Checkpoint
RP750: 11/10/2010 12:30:48 PM - System Checkpoint
RP751: 11/25/2010 9:25:04 AM - System Checkpoint
RP752: 11/29/2010 12:26:58 PM - System Checkpoint
RP753: 11/30/2010 7:25:26 PM - System Checkpoint
RP754: 12/1/2010 8:07:48 PM - before instal media codec pak
RP755: 12/3/2010 10:50:11 PM - Installed Adobe Photoshop Lightroom 2.
RP756: 12/7/2010 1:46:39 PM - System Checkpoint
RP757: 12/11/2010 9:44:56 AM - System Checkpoint
RP758: 12/18/2010 8:49:16 PM - System Checkpoint
RP759: 12/28/2010 6:41:44 PM - System Checkpoint
RP760: 12/29/2010 8:13:08 PM - System Checkpoint
RP761: 1/10/2011 10:25:37 AM - System Checkpoint
RP762: 1/10/2011 6:03:48 PM - before install RAR program
RP763: 1/11/2011 11:11:07 PM - before install Lightroom 3
RP764: 1/11/2011 11:12:41 PM - Installed Adobe Photoshop Lightroom 3.2.
RP765: 1/12/2011 7:44:15 PM - Before install DVD burn programs - any dvd convert
RP766: 1/13/2011 8:36:45 PM - before install nero 9
RP767: 1/13/2011 10:38:53 PM - Installed 1CLICK DVD COPY
RP768: 1/15/2011 7:44:51 PM - Install CloneDVD2
RP769: 1/16/2011 12:28:22 AM - Before install dvd fab install
RP770: 1/18/2011 2:21:47 PM - Installed DirectX
RP771: 1/18/2011 2:22:33 PM - Installed Nero 9 4.4.9.0
RP772: 1/18/2011 5:07:17 PM - Removed Nero Application 4.4.9.0
RP773: 1/18/2011 6:19:25 PM - Restore Operation
RP774: 1/19/2011 1:54:38 PM - before install cheetah dvd burn
RP775: 1/19/2011 2:20:25 PM - Before install Cheetah DVD Maker
RP776: 1/19/2011 2:21:28 PM - Installed Cheetah .Net 2.0 Installer
RP777: 1/21/2011 11:15:42 AM - System Checkpoint
RP778: 1/21/2011 9:51:56 PM - Software Distribution Service 3.0
RP779: 1/21/2011 10:13:38 PM - Software Distribution Service 3.0
RP780: 1/21/2011 10:28:30 PM - Printer Driver Microsoft XPS Document Writer Installed
RP781: 1/24/2011 9:30:38 AM - System Checkpoint
RP782: 1/25/2011 5:30:44 PM - System Checkpoint
RP783: 1/27/2011 3:01:33 PM - before install K-lite codec pack 6.6.2
RP784: 1/28/2011 9:40:30 PM - Installed Java™ 6 Update 23
RP785: 1/29/2011 10:22:37 PM - Before install malware bites
RP786: 1/30/2011 4:35:03 PM - Before install hijackthis newist
RP787: 1/31/2011 10:05:15 AM - before gmer scan and install
RP788: 2/1/2011 10:16:01 AM - OTL Restore Point
==== Installed Programs ======================
1Click DVD Copy 5.8.9.2
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Help Center 1.0
Adobe Photoshop CS
Adobe Photoshop CS2
Adobe Photoshop Lightroom 2
Adobe Photoshop Lightroom 3.2
Adobe Reader 7.0
Adobe Stock Photos 1.0
Adobe Type Manager 4.1
Agere Systems PCI-SV92PP Soft Modem
AiO_Scan
AiO_Scan_CDA
AiOSoftware
AiOSoftwareNPI
Alien Skin Eye Candy 5 Textures
Any DVD Converter Professional 4.0.6
Apophysis 2.0
AT&T; Yahoo! Applications
ATI Control Panel
ATI Display Driver
AVS Update Manager 1.0
AVS Video Converter 6
AVS4YOU Software Navigator 1.3
BroadJump Client Foundation
BufferChm
Camel's MPEGJoin
CameraDrivers
Cheetah .Net 2.0 Installer
Cheetah DVD Burner
Cheetah DVD Maker
CloneDVD2
ConvertXtoDVD 3.0.0.1
CP_AtenaShokunin1Config
CP_CalendarTemplates1
cp_LightScribeConfig
cp_OnlineProjectsConfig
CP_Package_Basic1
CP_Package_Variety1
CP_Package_Variety2
CP_Package_Variety3
CP_Panorama1Config
cp_PosterPrintConfig
cp_UpdateProjectsConfig
Creative MediaSource
Creative System Information
CueTour
Customer Experience Enhancement
Destinations
DISCover
DocProc
DocumentViewer
DocumentViewerQFolder
DVD Decrypter (Remove Only)
DVDFab (Platinum/Gold/HD Decrypter) (Option: Mobile) 5.0.7.6
ERUNT 1.1j
Fax
Fax_CDA
FLV Player 2.0 (build 25)
FullDPAppQFolder
GemMaster Mystic
GML Undistorter 1.05
Google Toolbar for Internet Explorer
Google Update Helper
Groone's KwikPik
High Definition Audio Driver Package - KB888111
HiJackThis
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 10 (KB910393)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
HP Boot Optimizer
HP Deskjet Printer Preload
HP DigitalMedia Archive
HP Document Viewer 5.3
HP DVD Play 1.0
HP Imaging Device Functions 6.0
HP Multimedia Keyboard Software
HP Photosmart 330,380,420,470,7800,8000,8200 Series
HP Photosmart Cameras 5.0
HP Photosmart for Media Center PC
HP Photosmart Premier Software 6.0
HP PSC & OfficeJet 5.3.A
HP PSC & OfficeJet 5.3.B
HP Rhapsody
HP Software Update
HP Solution Center & Imaging Support Tools 5.3
HP Web Helper
HPProductAssistant
HpSdpAppCoreApp
InfraRecorder
InstantShareDevices
J2SE Runtime Environment 5.0 Update 10
J2SE Runtime Environment 5.0 Update 11
J2SE Runtime Environment 5.0 Update 5
Java Auto Updater
Java™ 6 Update 2
Java™ 6 Update 23
Java™ 6 Update 3
Java™ 6 Update 5
Java™ SE Runtime Environment 6 Update 1
KPT® effects™
Lexmark 4200 Series
Lexmark 4200 Series Fax Solutions
Lexmark Fax Solutions
LightScribe 1.4.62.1
Malwarebytes' Anti-Malware
McAfee SecurityCenter
Media Player Codec Pack 3.9.6
Microsoft .NET Framework 1.0 Hotfix (KB953295)
Microsoft .NET Framework 1.0 Hotfix (KB979904)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Away Mode
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2006
Microsoft National Language Support Downlevel APIs
Microsoft Office 2003 Edition 60 Days Trial Welcome Tour
Microsoft Office Standard Edition 2003
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
MPlayer (remove only)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB954459)
muvee autoProducer 4.5
muvee autoProducer unPlugged 1.2
Natural Color
Nero OEM
Nero Suite
NewCopy
NewCopy_CDA
Nikon Message Center
Nikon Transfer
OptionalContentQFolder
Otto
PanoStandAlone
PC-Doctor 5 for Windows
PhotoGallery
Photomatix Basic version 1.2.1
Photomatix Pro version 2.5.4
Photomatix Pro version 3.0.2
PS2
PSPrinters08
PSTAPlugin
QuickTime
RandMap
Readme
RealPlayer
Remove IntelliMover Demo
SBC Self Support Tool
Scan
ScannerCopy
Seagate Manager Installer
Security Update for Step By Step Interactive Training (KB898458)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB928090)
Security Update for Windows Internet Explorer 7 (KB929969)
Security Update for Windows Internet Explorer 7 (KB931768)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
SkinsHP1
SolutionCenter
Sonic Express Labeler
Sonic MyDVD Plus
Sonic RecordNow Audio
Sonic RecordNow Copy
Sonic RecordNow Data
Sonic Update Manager
Sonic_PrimoSDK
Sound Blaster Audigy
SpywareGuard v2.2
Status
SUPERAntiSpyware Free Edition
Tone Mapping Plug-In 1.2
TrayApp
Unload
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951978)
Update for Windows XP (KB953356)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update Rollup 2 for Windows XP Media Center Edition 2005
Updates from HP (remove only)
WebFldrs XP
WebReg
WildTangent Web Driver
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows XP Media Center Edition 2005 KB919803
Windows XP Media Center Edition 2005 KB973768
Windows XP Service Pack 3
WinRAR 4.00 beta 2 (32-bit)
==== Event Viewer Messages From Past Week ========
1/30/2011 10:17:18 AM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
1/30/2011 1:18:17 AM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: iaStor IntelIde ViaIde
1/29/2011 4:22:28 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service ntmssvc with arguments "-Service" in order to run the server: {D61A27C6-8F53-11D0-BFA0-00A024151983}
1/29/2011 10:24:04 PM, error: Dhcp [1002] - The IP address lease [removed] for the Network Card with network address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
1/27/2011 3:05:19 PM, error: Service Control Manager [7000] - The Automatic LiveUpdate Scheduler service failed to start due to the following error: The system cannot find the path specified.
1/27/2011 2:53:16 PM, error: Dhcp [1002] - The IP address lease 192.168.1.64 for the Network Card with network address 00161757475A has been denied by the DHCP server 192.168.0.1 (The DHCP Server sent a DHCPNACK message).
1/27/2011 2:53:04 PM, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
==== End Of File ===========================
