Hello;
Here are the gmer and otl logs. When I tried saving the gmer log to this post I got a windows not responding msg. The error signature was
szAppname : iexplore.exe szAppVer : 8.0.6001.18702 sz ModName : hungapp szModVer : 0.0.0.0 offset : 00000000
The error report contents were
C:\DOCUME~1\Annie\Locals~1\Temp\WER5467.dir00\iexplore.exe.mdmp
C:\DOCUME~1\Annie\Locals~1\Temp\WER5467.dir00\appcompat.txt
I am going to try to get the logs in here again. I will do the otl logs first.
OTL logfile created on: 2/28/2011 12:54:53 PM - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Annie\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
639.00 Mb Total Physical Memory | 212.00 Mb Available Physical Memory | 33.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): C:\pagefile.sys 960 1920 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.87 Gb Total Space | 17.66 Gb Free Space | 31.60% Space Free | Partition Type: NTFS
Computer Name: ANNIE-7B392A84C | User Name: Annie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Annie\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft Limited)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Limited)
PRC - C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe (LeapFrog Enterprises, Inc.)
PRC - C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe (LeapFrog Enterprises, Inc.)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Fisher-Price\FP3 Player\sspnotifier.exe (Fisher-Price, Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe (ATI Technologies Inc.)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Annie\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Limited)
SRV - (LeapFrog Connect Device Service) – C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe (LeapFrog Enterprises, Inc.)
SRV - (avast! Web Scanner) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Mail Scanner) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
========== Driver Services (SafeList) ==========
DRV - (Lavasoft Kernexplorer) – C:\Program Files\Lavasoft\Ad-Aware\kernexplorer.sys ()
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (aswTdi) – C:\WINDOWS\System32\drivers\aswTdi.sys (ALWIL Software)
DRV - (aswSP) – C:\WINDOWS\System32\drivers\aswSP.sys (ALWIL Software)
DRV - (aswRdr) – C:\WINDOWS\System32\drivers\aswRdr.sys (ALWIL Software)
DRV - (aswMon2) – C:\WINDOWS\System32\drivers\aswmon2.sys (ALWIL Software)
DRV - (aswFsBlk) – C:\WINDOWS\System32\drivers\aswFsBlk.sys (ALWIL Software)
DRV - (Aavmker4) – C:\WINDOWS\System32\drivers\aavmker4.sys (ALWIL Software)
DRV - (fssfltr) – C:\WINDOWS\system32\drivers\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (gameenum) – C:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (FlyUsb) – C:\WINDOWS\system32\drivers\FlyUsb.sys (LeapFrog)
DRV - (WinUSB) – C:\WINDOWS\system32\drivers\winusb.sys (Microsoft Corporation)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (Afc) – C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (AN983) – C:\WINDOWS\system32\drivers\an983.sys (ADMtek Incorporated.)
DRV - (VIAudio) VIA AC'97 Audio Controller (WDM) – C:\WINDOWS\system32\drivers\viaudio.sys (VIA Technologies, Inc.)
DRV - (ms_mpu401) – C:\WINDOWS\system32\drivers\msmpu401.sys (Microsoft Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C0 F0 07 25 22 B4 CA 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[2009/11/08 19:29:27 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Annie\Application Data\Mozilla\Extensions
[2009/11/08 19:29:27 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Annie\Application Data\Mozilla\Extensions\[removed]
O1 HOSTS File: ([2007/07/27 05:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O2 - BHO: (Big Fish Games Toolbar) - {C7C9FC25-88B0-4682-9C9F-2608E9117647} - C:\Program Files\BfgBar\bfg.dll ()
O3 - HKLM\..\Toolbar: (&Google;) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Big Fish Games Toolbar) - {C7C9FC25-88B0-4682-9C9F-2608E9117647} - C:\Program Files\BfgBar\bfg.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Google;) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Program Files\Google\GoogleToolbar1.dll (Google Inc.)
O4 - HKLM..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft Limited)
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\cli.exe (ATI Technologies Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Monitor] C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe (LeapFrog Enterprises, Inc.)
O4 - HKLM..\Run: [SSP Notifier] C:\Program Files\Fisher-Price\FP3 Player\sspnotifier.exe (Fisher-Price, Inc.)
O4 - HKLM..\Run: [UserFaultCheck] File not found
O4 - HKCU..\Run: [SUPERAntiSpyware] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\control panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase8942.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://www.update.microsoft.com/microsoftu…b?1225828672620 (MUWebControl Class)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.0…oUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD}
http://www.superadblocker.com/activex/sabspx.cab (SABScanProcesses Class)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}
https://idla.webex.com/client/T27LB/support/ieatgpc.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/11/04 11:05:22 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2\{b8dbd775-aad5-11dd-a5b9-00121750a3a0}\Shell - "" = AutoRun
O33 - MountPoints2\{b8dbd775-aad5-11dd-a5b9-00121750a3a0}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{b8dbd775-aad5-11dd-a5b9-00121750a3a0}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…exe [@ = exefile] – Reg Error: Key error. File not found
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)
========== Files/Folders - Created Within 30 Days ==========
[2011/02/28 12:52:51 | 000,581,120 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Annie\Desktop\OTL.exe
[2011/02/20 19:55:33 | 000,000,000 | —D | C] – C:\Documents and Settings\Annie\Application Data\Vast Studios
[2011/02/19 16:39:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Annie\Application Data\ChaYoWo Games
[2011/02/19 16:10:05 | 000,000,000 | —D | C] – C:\Documents and Settings\Annie\Application Data\iMaxGen
[2011/02/19 13:55:44 | 000,000,000 | —D | C] – C:\Program Files\Lost Chronicles - Salem
[2011/02/19 13:55:44 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Lost Chronicles - Salem
[2011/02/19 09:06:42 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/02/19 09:06:42 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/02/19 09:06:42 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/02/12 10:06:59 | 000,000,000 | —D | C] – C:\d408a579993e2943902d7dbffc
[2011/02/01 13:23:54 | 000,000,000 | —D | C] – C:\Program Files\Death at Fairing Point - A Dana Knightstone Novel
[2011/02/01 13:23:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Death at Fairing Point - A Dana Knightstone Novel
[2011/02/01 10:18:39 | 000,000,000 | —D | C] – C:\Documents and Settings\Annie\Application Data\HdO Adventure
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/28 12:52:57 | 000,581,120 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Annie\Desktop\OTL.exe
[2011/02/28 12:50:29 | 000,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2011/02/28 12:47:30 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/02/28 12:46:55 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/02/28 12:46:52 | 670,621,696 | -HS- | M] () – C:\hiberfil.sys
[2011/02/28 11:01:22 | 000,296,448 | —- | M] () – C:\Documents and Settings\Annie\Desktop\71r3c1m6 gmer.exe
[2011/02/28 09:13:10 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{AEB68CEF-67EE-4441-B472-5989A54E4937}.job
[2011/02/27 03:35:00 | 000,000,354 | —- | M] () – C:\WINDOWS\tasks\Driver Fetch.job
[2011/02/19 12:02:27 | 000,001,417 | —- | M] () – C:\Documents and Settings\Annie\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Manager.lnk
[2011/02/19 10:37:15 | 000,479,730 | —- | M] () – C:\Documents and Settings\Annie\Desktop\Feb. 2011 wages Eric.jpg
[2011/02/13 13:01:02 | 000,004,608 | —- | M] () – C:\Documents and Settings\Annie\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/02/12 12:04:50 | 000,149,200 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/02/12 12:01:06 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/02/02 21:40:39 | 000,157,472 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011/02/02 21:40:38 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011/02/02 21:40:36 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011/02/02 21:40:23 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011/02/02 19:19:39 | 000,073,728 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/28 11:01:21 | 000,296,448 | —- | C] () – C:\Documents and Settings\Annie\Desktop\71r3c1m6 gmer.exe
[2011/02/19 12:02:51 | 000,001,584 | —- | C] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Game Manager.lnk
[2011/02/19 12:02:51 | 000,001,184 | —- | C] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\More Great Games.lnk
[2011/02/19 10:37:14 | 000,479,730 | —- | C] () – C:\Documents and Settings\Annie\Desktop\Feb. 2011 wages Eric.jpg
[2010/07/17 22:56:27 | 000,000,178 | —- | C] () – C:\WINDOWS\wininit.ini
[2010/03/06 17:19:56 | 000,520,192 | —- | C] () – C:\WINDOWS\System32\ati2sgag.exe
[2009/12/03 21:13:31 | 000,210,944 | —- | C] () – C:\WINDOWS\System32\MSVCRT10.DLL
[2009/11/27 00:11:59 | 000,000,054 | —- | C] () – C:\WINDOWS\System32\rp_stats.dat
[2009/11/27 00:11:59 | 000,000,039 | —- | C] () – C:\WINDOWS\System32\rp_rules.dat
[2009/11/26 15:06:56 | 000,004,608 | —- | C] () – C:\Documents and Settings\Annie\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/20 18:40:52 | 000,001,584 | —- | C] () – C:\WINDOWS\tefview.ini
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,230,768 | —- | C] () – C:\WINDOWS\System32\OGAEXEC.exe
[2009/02/20 16:53:17 | 000,000,082 | —- | C] () – C:\Documents and Settings\Annie\Application Data\Ad Annihilator.aap
[2009/02/05 15:02:18 | 000,015,880 | —- | C] () – C:\WINDOWS\System32\lsdelete.exe
[2009/01/16 07:50:59 | 000,004,096 | —- | C] () – C:\WINDOWS\d3dx.dat
[2008/12/28 19:10:00 | 000,000,128 | —- | C] () – C:\Documents and Settings\Annie\Local Settings\Application Data\fusioncache.dat
[2008/11/09 12:18:54 | 000,000,097 | —- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2008/11/09 12:18:53 | 000,073,220 | —- | C] () – C:\WINDOWS\System32\EPPICPrinterDB.dat
[2008/11/09 12:18:53 | 000,031,053 | —- | C] () – C:\WINDOWS\System32\EPPICPattern131.dat
[2008/11/09 12:18:53 | 000,029,114 | —- | C] () – C:\WINDOWS\System32\EPPICPattern1.dat
[2008/11/09 12:18:53 | 000,027,417 | —- | C] () – C:\WINDOWS\System32\EPPICPattern121.dat
[2008/11/09 12:18:53 | 000,021,021 | —- | C] () – C:\WINDOWS\System32\EPPICPattern3.dat
[2008/11/09 12:18:53 | 000,015,670 | —- | C] () – C:\WINDOWS\System32\EPPICPattern5.dat
[2008/11/09 12:18:53 | 000,013,280 | —- | C] () – C:\WINDOWS\System32\EPPICPattern2.dat
[2008/11/09 12:18:53 | 000,010,673 | —- | C] () – C:\WINDOWS\System32\EPPICPattern4.dat
[2008/11/09 12:18:53 | 000,004,943 | —- | C] () – C:\WINDOWS\System32\EPPICPattern6.dat
[2008/11/09 12:18:53 | 000,001,140 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2008/11/09 12:18:53 | 000,001,140 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2008/11/09 12:18:53 | 000,001,137 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2008/11/09 12:18:53 | 000,001,130 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2008/11/09 12:18:53 | 000,001,130 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2008/11/09 12:18:53 | 000,001,104 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2008/11/09 12:16:35 | 000,000,044 | —- | C] () – C:\WINDOWS\EPSCX9000F.ini
[2008/11/04 12:28:00 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2008/11/04 12:17:02 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2008/11/04 05:07:41 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2008/11/04 05:04:35 | 000,149,200 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2007/07/27 05:00:00 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2007/07/27 05:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2007/07/27 05:00:00 | 000,441,786 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2007/07/27 05:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2007/07/27 05:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2007/07/27 05:00:00 | 000,071,612 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2007/07/27 05:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2007/07/27 05:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2007/07/27 05:00:00 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2007/07/27 05:00:00 | 000,004,461 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2007/07/27 05:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2007/07/27 05:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2006/04/28 13:05:14 | 000,127,614 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
========== LOP Check ==========
[2009/01/03 20:46:15 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\AdventureChronicles1
[2008/12/08 20:20:26 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Alawar Stargaze
[2010/07/27 16:02:49 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Alwil Software
[2009/08/30 21:15:30 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Astar Games
[2010/07/27 15:38:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\avg9
[2009/11/26 23:41:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Awem
[2009/10/16 22:08:41 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Becky Brogan
[2011/02/19 12:02:39 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Big Fish Games
[2009/11/13 23:15:18 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\blg
[2010/02/11 20:43:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Casual Box
[2010/11/16 10:02:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Column of the Maya
[2008/11/09 12:31:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\EPSON
[2010/01/08 14:09:18 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Flood Light Games
[2009/06/24 18:52:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\GAMESHASTRA
[2010/01/27 19:13:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Green Clover Games
[2009/01/11 15:35:37 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\HiddenSecretsNightmare
[2009/02/25 21:03:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\HoverBee Studios
[2009/09/26 20:31:58 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\JollyBear
[2010/12/26 17:03:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Leapfrog
[2009/09/24 22:32:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Merscom
[2010/08/10 16:45:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\MumboJumbo
[2008/12/22 00:11:58 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\NeptunesAdve
[2009/02/05 23:05:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Nick Chase A Detective Story
[2010/01/26 17:54:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PlayFirst
[2009/01/04 19:24:36 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PlayPond
[2010/06/12 16:54:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Playrix Entertainment
[2009/03/05 21:59:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Playtonium Games
[2009/08/21 18:28:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PoBros
[2009/08/25 14:29:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Princess Isabella
[2009/09/19 16:35:18 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Sandlot Games
[2010/02/27 15:25:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\SITEguard
[2009/01/06 22:20:36 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\SpecialBit
[2010/02/27 16:39:40 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\STOPzilla!
[2009/08/20 22:25:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\SulusGames
[2011/02/28 10:47:18 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP
[2009/12/30 21:31:53 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\The Mirror Mysteries
[2010/10/31 19:32:22 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\The Revills Games
[2010/07/31 15:03:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Top Evidence
[2009/06/24 13:19:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\UClick
[2010/07/10 21:50:41 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\{65893B95-F47B-4483-B883-86BA181E9B54}
[2010/01/26 16:51:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\{BC9FCCF7-E686-494B-8C9B-55C9A39A7CA9}
[2010/03/05 18:04:19 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\.SunRay Games
[2010/07/31 14:51:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\A Gypsy's Tale - The Tower of Secrets
[2009/02/26 20:08:14 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Abra Academy2
[2009/03/05 17:00:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Ad Annihilator.files
[2009/07/25 22:07:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Aisle 5 Games, Inc
[2009/03/29 21:46:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Anabel
[2011/02/20 19:36:22 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Artogon
[2009/10/20 22:42:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Awem
[2010/03/18 21:17:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\BfgBar
[2010/12/06 14:52:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Big Fish Games
[2009/11/13 23:15:18 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\blg
[2010/03/06 16:33:32 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Blitware
[2009/12/28 19:27:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\BloodTies
[2010/08/11 20:47:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Boolat Games
[2011/02/28 10:20:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Boomzap
[2009/03/01 23:53:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\BrandX Games
[2009/10/24 22:42:35 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\casanova
[2009/01/01 14:22:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Cat's Eye Games
[2011/02/19 16:39:31 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\ChaYoWo Games
[2010/11/16 10:02:07 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Column of the Maya
[2009/02/12 22:37:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Coyotes Tale
[2010/03/16 23:03:17 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\DarkParablesBriarRose_BFG
[2009/11/06 23:37:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Dekovir
[2010/01/16 16:12:41 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Dragon Altar Games
[2009/11/20 20:08:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\EleFun Games
[2009/11/11 22:16:29 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\ElementalsTheMagicKey
[2010/09/20 08:45:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Enki Games
[2009/06/28 22:29:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Enlightenus
[2009/06/26 14:20:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\EPSON
[2010/02/19 21:24:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\ERS G-Studio
[2009/01/08 17:20:09 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Fabulous Finds
[2011/02/19 19:11:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Faerie Solitaire
[2008/12/28 19:09:43 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Fisher-Price
[2010/01/08 14:09:18 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Flood Light Games
[2009/02/26 00:29:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Friday's games
[2009/07/25 18:23:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Games
[2009/06/24 18:52:38 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\GAMESHASTRA
[2010/01/27 19:13:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Green Clover Games
[2009/11/08 20:15:07 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\GTM_Bodie
[2010/01/08 13:08:24 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Harmonic Flow
[2011/02/01 10:18:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\HdO Adventure
[2009/04/27 14:57:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\HiT-MM
[2009/01/18 21:25:13 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Home Sweet Home Christmas
[2010/02/05 19:08:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\HorizonWimba
[2011/02/19 19:11:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\iMaxGen
[2009/01/04 20:25:11 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\IOMediaSupport6SZZ001s
[2009/06/09 21:59:38 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\IronCode
[2009/12/27 23:22:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\JoyBits
[2010/03/16 19:04:09 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\KeePass
[2009/11/07 15:41:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Lazy Turtle Games
[2008/11/09 12:27:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Leadertech
[2010/01/21 21:40:31 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\LimeWire
[2009/04/03 22:55:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Lost in the City
[2009/08/28 13:33:32 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\MA
[2009/10/08 19:24:29 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Magic Academy
[2009/10/17 00:11:51 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Magic Academy 2
[2010/07/20 17:15:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Mariaglorum
[2009/08/25 20:15:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Meridian93
[2009/09/24 22:32:28 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Merscom
[2010/01/04 22:29:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Orneon
[2009/07/31 18:21:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Peace Craft
[2009/10/16 23:10:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Ph03nixNewMedia
[2010/01/26 17:54:17 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\PlayFirst
[2010/03/06 18:19:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Playrix Entertainment
[2009/08/21 18:28:17 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\PoBros
[2008/12/11 11:24:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Pogo Games
[2009/06/24 22:37:37 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Private Moon Studios
[2010/07/27 17:20:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\QB9
[2009/01/30 01:14:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\RobinsonCrusoe
[2009/03/02 01:30:54 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\SerpentOfIsis
[2010/07/20 16:55:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Silverback Productions
[2009/04/20 09:31:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Skunk Studios
[2009/10/28 19:43:46 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Smith Micro
[2009/01/04 20:25:11 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Spinapse
[2009/08/20 22:25:02 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\SulusGames
[2009/02/05 12:16:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\SuperAdBlocker.com
[2009/01/04 20:25:38 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Suspects and Clues Players
[2009/01/04 20:25:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Suspects and Clues Prefs
[2009/10/25 22:49:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\TikisLab
[2010/07/31 15:03:27 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Top Evidence
[2010/02/20 19:27:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\TripleHippo
[2009/05/10 20:28:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Twintale Entertainment
[2009/06/24 13:19:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\UClick
[2009/11/17 22:28:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\URSE Games
[2009/07/23 08:31:34 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\V-Games
[2011/02/20 19:55:33 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Vast Studios
[2010/07/27 21:27:25 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\VendelGAMES
[2009/02/05 21:58:36 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\ViquaSoft
[2010/07/20 16:12:00 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Vogat Interactive
[2010/02/22 17:50:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\Windows Search
[2010/03/16 18:53:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\WinPatrol
[2009/01/16 07:51:27 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\World-LooM
[2010/01/05 19:54:17 | 000,000,000 | —D | M] – C:\Documents and Settings\Annie\Application Data\YoudaGames
[2011/02/28 12:50:29 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2011/02/27 03:35:00 | 000,000,354 | —- | M] () – C:\WINDOWS\Tasks\Driver Fetch.job
[2011/02/28 09:13:10 | 000,000,422 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{AEB68CEF-67EE-4441-B472-5989A54E4937}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/02/28 12:46:50 | 000,207,392 | —- | M] () – C:\aaw7boot.log
[2008/11/04 11:05:22 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2008/11/04 12:11:53 | 000,000,211 | —- | M] () – C:\Boot.bak
[2009/03/30 19:37:49 | 000,000,281 | RHS- | M] () – C:\boot.ini
[2004/08/03 22:00:00 | 000,260,272 | —- | M] () – C:\cmldr
[2008/11/04 11:05:22 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 07:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 07:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 07:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 07:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2011/02/28 12:46:52 | 670,621,696 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 07:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 07:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 07:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 07:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 07:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 07:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 07:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 07:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 07:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 07:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 07:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2008/11/04 11:05:22 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/03/07 14:50:58 | 000,008,284 | —- | M] () – C:\JavaRa.log
[2011/02/20 18:08:46 | 000,000,109 | —- | M] () – C:\mbam-error.txt
[2008/11/04 11:05:22 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2007/07/27 05:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/11/04 13:53:29 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/02/28 12:46:50 | 1006,632,960 | -HS- | M] () – C:\pagefile.sys
[2006/08/01 00:02:05 | 000,000,620 | —- | M] () – C:\SETUP.VBS
[2009/04/01 21:52:53 | 000,001,100 | —- | M] () – C:\TCleaner.txt
[2007/11/07 07:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 07:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 07:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI
[2006/03/13 22:26:22 | 000,000,043 | —- | M] () – C:\WAP.BAT
< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2008/11/04 12:21:55 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 05:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2002/05/06 05:40:19 | 000,081,408 | —- | M] (Lexmark International) – C:\WINDOWS\system32\spool\prtprocs\w32x86\LXAIPP5C.DLL
[2006/10/26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
[2008/07/06 03:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2010/06/28 13:57:33 | 000,038,848 | —- | M] (ALWIL Software) – C:\WINDOWS\avastSS.scr
[2009/07/10 12:15:46 | 000,306,544 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2010/03/06 17:51:15 | 000,055,125 | —- | M] () – C:\Program Files\log.txt
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2008/11/04 05:03:42 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2008/11/04 05:03:42 | 000,659,456 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2008/11/04 05:03:42 | 000,892,928 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lîk /x >
[2008/11/04 13:58:22 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\desktop.ini
[2008/11/04 12:57:56 | 000,001,566 | —- | M] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Microsoft Update.lnk
[2008/11/04 13:58:22 | 000,001,563 | —- | M] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Set Program Access and Defaults.lnk
[2008/11/04 12:22:38 | 000,000,398 | —- | M] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Windows Catalog.lnk
[2008/11/04 12:22:38 | 000,001,507 | —- | M] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Windows Update.lnk
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Mikzosoft\Internet Explorer\Quick Launch\*.lnk /x >
< %USERPROFILE%\Deskuop\*.exe >
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-02-12 19:01:19
< MD5 for: EXPLORER.EXE >
[2008/04/13 17:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 – C:\WINDOWS\explorer.exe
[2008/04/13 17:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 – C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2007/07/27 05:00:00 | 001,032,192 | —- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 – C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: EXPLORER.EXE-082F38A9.PF >
[2011/02/28 10:51:48 | 000,065,118 | —- | M] () MD5=CC28AF7B4021362E0F336D0FE0E0F12F – C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
< MD5 for: EXPLORER.HTM >
[2005/01/20 14:42:18 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\cs\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:25:42 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\da\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\de\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/20 14:42:18 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\el\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\es\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:26:08 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\fi\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\fr\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2003/09/15 11:06:02 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/20 14:42:18 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\hu\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\it\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\ja\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:26:42 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\ko\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\nl\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:26:58 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\no\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/20 14:42:18 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\pl\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\pt-BR\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/20 14:42:18 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\ru\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:27:14 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\sv\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:27:20 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\th\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/20 14:42:18 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\tr\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\zh-CHS\Help\wwhelp\wwhimpl\java\html\explorer.htm
[2005/01/19 15:44:52 | 000,002,057 | —- | M] () MD5=0768146E197314BF50A1E3E5E89892F1 – C:\Program Files\ATI Technologies\ATI.ACE\zh-CHT\Help\wwhelp\wwhimpl\java\html\explorer.htm
< MD5 for: EXPLORER.SCF >
[2007/07/27 05:00:00 | 000,000,080 | —- | M] () MD5=A3975A7D2C98B30A2AE010754FFB9392 – C:\WINDOWS\explorer.scf
< MD5 for: IEXPLORE.CHM >
[2009/02/21 00:21:24 | 000,529,818 | —- | M] () MD5=1435F4731719DF5F57D17DC38196245D – C:\WINDOWS\Help\iexplore.chm
[2007/07/27 05:00:00 | 000,204,810 | —- | M] () MD5=60858526AAD1CC55F5F0055B8E3B66FE – C:\WINDOWS\ie7\iexplore.chm
[2006/09/01 08:43:50 | 000,503,758 | —- | M] () MD5=652E46500C149D1DC948BF9CEA8C4933 – C:\WINDOWS\ie8\iexplore.chm
< MD5 for: IEXPLORE.CHW >
[2009/01/22 21:12:36 | 000,157,092 | —- | M] () MD5=52EA094859E79622DAA310DA9D34C086 – C:\WINDOWS\Help\iexplore.chw
< MD5 for: IEXPLORE.EXE >
[2008/12/18 22:25:25 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=030D78FE84A086ED376EFCBD2D72C522 – C:\WINDOWS\ie7updates\KB963027-IE7\iexplore.exe
[2008/10/14 23:34:58 | 000,633,632 | —- | M] (Microsoft Corporation) MD5=056C927CF7207857E8B34F7A8FFD9B9E – C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
[2009/04/24 22:27:50 | 000,636,088 | —- | M] (Microsoft Corporation) MD5=092A7F2B49A19ECCE5369D3CB2276148 – C:\WINDOWS\ie8\iexplore.exe
[2008/12/18 22:25:30 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=15E8A89499741D5CF59A9CF6463A4339 – C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe
[2008/08/22 22:56:15 | 000,635,848 | —- | M] (Microsoft Corporation) MD5=1F03216084447F990AE797317D0A6E70 – C:\WINDOWS\ie7updates\KB958215-IE7\iexplore.exe
[2008/04/13 17:12:22 | 000,093,184 | —- | M] (Microsoft Corporation) MD5=55794B97A7FAABD2910873C85274F409 – C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
[2008/10/15 00:06:26 | 000,633,632 | —- | M] (Microsoft Corporation) MD5=9D3DB9ADFABD2F0BC778EC03250A3ABB – C:\WINDOWS\ie7updates\KB961260-IE7\iexplore.exe
[2009/02/27 21:54:41 | 000,636,072 | —- | M] (Microsoft Corporation) MD5=A251068640DDB69FD7805B57D89D7FF7 – C:\WINDOWS\ie7updates\KB969897-IE7\iexplore.exe
[2009/03/08 13:09:26 | 000,638,816 | —- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E – C:\Program Files\Internet Explorer\iexplore.exe
[2009/03/08 13:09:26 | 000,638,816 | —- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E – C:\WINDOWS\system32\dllcache\iexplore.exe
[2009/02/27 21:54:44 | 000,636,088 | —- | M] (Microsoft Corporation) MD5=BCD8E48709BE4A79606F0B6E8E9A6162 – C:\WINDOWS\$hf_mig$\KB963027-IE7\SP3QFE\iexplore.exe
[2009/04/24 22:27:39 | 000,636,088 | —- | M] (Microsoft Corporation) MD5=C0503FD8D163652735C1EE900672A75C – C:\WINDOWS\$hf_mig$\KB969897-IE7\SP3QFE\iexplore.exe
[2007/08/13 18:43:56 | 000,622,080 | —- | M] (Microsoft Corporation) MD5=DE49B348A18369B4626FBA1D49B07FB4 – C:\WINDOWS\ie7updates\KB956390-IE7\iexplore.exe
[2004/08/03 17:56:52 | 000,093,184 | —- | M] (Microsoft Corporation) MD5=E7484514C0464642BE7B4DC2689354C8 – C:\WINDOWS\ie7\iexplore.exe
[2008/08/22 22:56:16 | 000,635,848 | —- | M] (Microsoft Corporation) MD5=E8305C30D35E85D6657ED3E9934CB302 – C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
< MD5 for: IEXPLORE.EXE.EXP.LOG >
[2010/04/30 20:43:53 | 000,012,610 | —- | M] () MD5=FC7A184492E15B95CE64C9719FF62A67 – C:\Program Files\Internet Explorer\iexplore.exe.exp.log
< MD5 for: IEXPLORE.EXE.MUI >
[2009/03/08 13:21:44 | 000,012,288 | —- | M] (Microsoft Corporation) MD5=943030B55FDB56FB8B8FCC086071E119 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2009/03/08 13:21:44 | 000,012,288 | —- | M] (Microsoft Corporation) MD5=943030B55FDB56FB8B8FCC086071E119 – C:\Program Files\Internet Explorer\iexplore.exe.mui
[2007/08/13 18:43:36 | 000,573,440 | —- | M] (Microsoft Corporation) MD5=B58D8A1C7EE0E922EC7D2616DA136FC3 – C:\WINDOWS\ie8\iexplore.exe.mui
< MD5 for: IEXPLORE.EXE-27122324.PF >
[2011/02/28 12:49:58 | 000,096,090 | —- | M] () MD5=B90D75AFFDFB9403A20B9E6FD3B17D9C – C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf
< MD5 for: IEXPLORE.HLP >
[2007/07/27 05:00:00 | 000,180,335 | —- | M] () MD5=3F19AF1B745140DAFAC6F78F561A3C62 – C:\WINDOWS\Help\iexplore.hlp
< MD5 for: WINLOGON.EXE >
[2007/07/27 05:00:00 | 000,506,880 | —- | M] (Microsoft Corporation) MD5=051A52001D625F316CE81A539BD25192 – C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008/04/13 17:12:39 | 000,507,904 | —- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E – C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008/04/13 17:12:39 | 000,507,904 | —- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E – C:\WINDOWS\system32\winlogon.exe
< >
========== Alternate Data Streams ==========
@Alternate Data Stream - 95 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:5C321E34
@Alternate Data Stream - 243 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:C0A9B815
@Alternate Data Stream - 238 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:75CC0165
@Alternate Data Stream - 238 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:217A2324
@Alternate Data Stream - 234 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:488F7244
@Alternate Data Stream - 233 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:38FF076E
@Alternate Data Stream - 231 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:B1786630
@Alternate Data Stream - 228 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:5080697C
@Alternate Data Stream - 225 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:67CF910D
@Alternate Data Stream - 224 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:8E5EA40F
@Alternate Data Stream - 221 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:206470A5
@Alternate Data Stream - 220 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:61AF2B29
@Alternate Data Stream - 216 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:A5584049
@Alternate Data Stream - 216 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:370E4EFB
@Alternate Data Stream - 215 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:A05F750A
@Alternate Data Stream - 210 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:57B2B96C
@Alternate Data Stream - 204 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:A00BCDEF
@Alternate Data Stream - 203 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:3D36932D
@Alternate Data Stream - 200 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:D507B5A8
@Alternate Data Stream - 199 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:B1381B34
@Alternate Data Stream - 199 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:6F1F66C0
@Alternate Data Stream - 198 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:66AA0486
@Alternate Data Stream - 148 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:F3D65F99
@Alternate Data Stream - 147 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:FAB64002
@Alternate Data Stream - 146 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:379E7698
@Alternate Data Stream - 140 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:65AB2A58
@Alternate Data Stream - 140 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:07D9FF25
@Alternate Data Stream - 135 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:2AE74FF9
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:C9B27A06
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:1C201DEB
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:0E22C5DB
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:13EF4AF6
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:512E1728
@Alternate Data Stream - 124 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:6F0B6A5A
@Alternate Data Stream - 123 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:A6D89509
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:67310058
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:C76CFF82
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:0A74923C
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:BF6C81B2
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:E83EE313
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:7757A6D4
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:8BE7A048
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:041C0562
< End of report >
OTL Extras logfile created on: 2/28/2011 12:54:53 PM - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Annie\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
639.00 Mb Total Physical Memory | 212.00 Mb Available Physical Memory | 33.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): C:\pagefile.sys 960 1920 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 55.87 Gb Total Space | 17.66 Gb Free Space | 31.60% Space Free | Partition Type: NTFS
Computer Name: ANNIE-7B392A84C | User Name: Annie | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.exe [@ = exefile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\LeapFrog\LeapFrog Connect\LeapFrogConnect.exe" = C:\Program Files\LeapFrog\LeapFrog Connect\LeapFrogConnect.exe:*:Enabled:LeapFrog Connect – (LeapFrog Enterprises, Inc.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Blubster\Blubster.exe" = C:\Program Files\Blubster\Blubster.exe:*:Enabled:Blubster
"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent
"C:\Program Files\LimeWire\LimeWire.exe" = C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger
"C:\Program Files\LeapFrog\LeapFrog Connect\LeapFrogConnect.exe" = C:\Program Files\LeapFrog\LeapFrog Connect\LeapFrogConnect.exe:*:Enabled:LeapFrog Connect – (LeapFrog Enterprises, Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{0D6D96F4-0CAF-4522-B05F-70A88EDECDFD}" = ArcSoft Print Creations
"{139E303E-1050-497F-98B1-9AE87B15C463}" = Windows Live Family Safety
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{1CA2E5E4-F4FE-44B4-95E9-77523FB95838}" = EPSON Stylus CX9400Fax Series Scanner Driver Update
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Javaâ„¢ 6 Update 24
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{44170B31-F47A-4FF9-9D77-382D1FE2A728}" = FP3 Player
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{48AFBB60-8CF5-4605-BB04-704DD8702B80}" = VZAccess Manager for RIM
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{995F1E2E-F542-4310-8E1D-9926F5A279B3}" = Windows Live Toolbar
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.2
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C6359569-E03E-4CDC-98E8-CDD080C6EEB5}" = LeapFrog Connect
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D03E7B00-CA85-4684-9321-1888873C34BD}" = ArcSoft PhotoImpression 6
"{D454287E-4755-4477-9CAF-3F5B918AA2D1}" = ID EDS Provider Electronic Solutions
"{D6C75F0B-3BC1-4FC9-B8C5-3F7E8ED059CA}" = Windows Live Photo Gallery
"{DBEA1034-5882-4A88-8033-81C4EF0CFA29}" = Google Toolbar for Internet Explorer
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E51FFEFB-68E2-4516-B293-35DC83B9767E}" = LeapFrog Tag Plugin
"{EA9FAF16-0E5C-42C4-9742-9AF8D5F6D69B}" = ATI Catalyst Control Center
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{FA237125-51FF-408C-8BB8-30C2B3DFFF9C}" = Windows Resource Kit Tools
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"781745E87AFF80C0C1388CFF79D19ECAB2E9BB47" = Windows Driver Package - LeapFrog (FlyUsb) USB (11/05/2008 1.1.1.0)
"8F14F2ECEDE68D26EA515B48DC25B39103C4FE8D" = Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net (09/10/2009 02.03.05.012)
"ActiveTouchMeetingClient" = WebEx
"Ad-Aware" = Ad-Aware
"Adobe Acrobat 4.0" = Adobe Acrobat 4.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"avast5" = avast! Free Antivirus
"BFG-4 Elements" = 4 Elements
"BFG-A Gypsy's Tale - The Tower of Secrets" = A Gypsy's Tale: The Tower of Secrets
"BFG-Adventure Chronicles - The Search for Lost Treasure" = Adventure Chronicles: The Search for Lost Treasure
"BFG-Adventures of Robinson Crusoe" = Adventures of Robinson Crusoe
"BFG-Agatha Christie - Dead Man's Folly" = Agatha Christie: Dead Man's Folly
"BFG-Age Of Oracles - Taras Journey" = Age Of Oracles: Tara`s Journey
"BFG-AGON - The London Scene" = AGON - The London Scene
"BFG-Alabama Smith - Escape from Pompeii" = Alabama Smith: Escape from Pompeii
"BFG-Ancient Spirits - Columbus' Legacy" = Ancient Spirits: Columbus' Legacy
"BFG-Anka" = Anka
"BFG-Annabel" = Annabel
"BFG-Autumn's Treasures - The Jade Coin" = Autumn's Treasures: The Jade Coin
"BFG-Awakening - Moonfell Wood" = Awakening: Moonfell Wood
"BFG-Awakening - The Dreamless Castle" = Awakening: The Dreamless Castle
"BFG-Azada" = Azada â„¢
"BFG-Azada - Ancient Magic" = Azada : Ancient Magic
"BfgBar" = Big Fish Games Toolbar 2.0
"BFG-Blood Ties" = Blood Ties
"BFG-Bob the Builder - Can Do Zoo" = Bob the Builder - Can Do Zoo
"BFGC" = Big Fish Games: Game Manager
"BFG-Cake Shop 2" = Cake Shop 2
"BFG-Cassandra's Journey - The Legacy of Nostradamus" = Cassandra's Journey: The Legacy of Nostradamus
"BFG-Cassandra's Journey 2 - The Fifth Sun of Nostradamus" = Cassandra's Journey 2: The Fifth Sun of Nostradamus
"BFG-Cate West - The Velvet Keys" = Cate West - The Velvet Keys
"BFG-Chocolatier 2 - Secret Ingredients" = Chocolatier 2: Secret Ingredients
"BFG-Column of the Maya" = Column of the Maya
"BFG-Coyote's Tale - Fire and Water" = Coyote`s Tale: Fire and Water
"BFG-Cradle of Persia" = Cradle of Persia
"BFG-Curse of the Pharaoh - Napoleons Secret" = Curse of the Pharaoh: Napoleon's Secret â„¢
"BFG-Curse of the Pharaoh - The Quest for Nefertiti" = Curse of the Pharaoh: The Quest for Nefertiti
"BFG-Dark Parables - Curse of Briar Rose Collector's Edition" = Dark Parables: Curse of Briar Rose Collector's Edition
"BFG-Death at Fairing Point - A Dana Knightstone Novel" = Death at Fairing Point: A Dana Knightstone Novel
"BFG-Department 42 - The Mystery of the Nine" = Department 42: The Mystery of the Nine
"BFG-Diego`s Dinosaur Adventure" = Diego`s Dinosaur Adventure
"BFG-Diego`s Safari Adventure" = Diego`s Safari Adventure
"BFG-Doors of the Mind - Inner Mysteries" = Doors of the Mind: Inner Mysteries
"BFG-Dr. Lynch - Grave Secrets" = Dr. Lynch: Grave Secrets
"BFG-Drawn - The Painted Tower" = Drawn: The Painted Tower â„¢
"BFG-Dream Chronicles" = Dream Chronicles
"BFG-Dream Chronicles - The Chosen Child" = Dream Chronicles: The Chosen Child
"BFG-Dream Chronicles 2 - The Eternal Maze" = Dream Chronicles â„¢ 2: The Eternal Maze
"BFG-Echoes of the Past - Royal House of Stone" = Echoes of the Past: Royal House of Stone
"BFG-Enlightenus" = Enlightenus
"BFG-Escape Rosecliff Island" = Escape Rosecliff Island
"BFG-Fabulous Finds" = Fabulous Finds
"BFG-Fix-it-up - Kates Adventure" = Fix-it-up: Kate`s Adventure
"BFG-Flux Family Secrets - The Ripple Effect" = Flux Family Secrets: The Ripple Effect
"BFG-Green Moon" = Green Moon
"BFG-Grimm's Hatchery" = Grimm's Hatchery
"BFG-Herods Lost Tomb" = National Geographic â„¢ presents: Herod's Lost Tomb
"BFG-Hidden Expedition - Amazon" = Hidden Expedition: Amazon â„¢
"BFG-Hidden in Time - Mirror Mirror" = Hidden in Time: Mirror Mirror
"BFG-Hidden Mysteries - Buckingham Palace" = Hidden Mysteries: Buckingham Palace â„¢
"BFG-Hidden Mysteries - Civil War" = Hidden Mysteries: Civil War
"BFG-Hidden Secrets - The Nightmare" = Hidden Secrets: The Nightmare
"BFG-Hide and Secret" = Hide and Secret
"BFG-Keys to Manhattan" = Keys to Manhattan
"BFG-Kuros" = Kuros
"BFG-Laura Jones and the Gates of Good and Evil" = Laura Jones and the Gates of Good and Evil
"BFG-Laura Jones and the Secret Legacy of Nikola Tesla" = Laura Jones and the Secret Legacy of Nikola Tesla
"BFG-Liong - The Lost Amulets" = Liong: The Lost Amulets
"BFG-Lost Chronicles - Salem" = Lost Chronicles: Salem
"BFG-Lost City of Z - Special Edition" = Lost City of Z: Special Edition
"BFG-Lost in the City" = Lost in the City
"BFG-Lost Realms - Legacy of the Sun Princess" = Lost Realms: Legacy of the Sun Princess
"BFG-Lost Realms - The Curse of Babylon" = Lost Realms: The Curse of Babylon
"BFG-Love Chronicles - The Spell" = Love Chronicles: The Spell
"BFG-Love Story - Letters from the Past" = Love Story: Letters from the Past
"BFG-Magic Academy" = Magic Academy
"BFG-Magic Encyclopedia" = Magic Encyclopedia
"BFG-Magic Encyclopedia - Moon Light" = Magic Encyclopedia: Moon Light
"BFG-Magic Farm - Ultimate Flower" = Magic Farm: Ultimate Flower
"BFG-Mahjong Towers Eternity" = Mahjong Towers Eternity
"BFG-Margrave Manor 2 - Lost Ship" = Margrave Manor 2: Lost Ship
"BFG-Megaplex Madness - Now Playing" = Megaplex Madness: Now Playing â„¢
"BFG-Mr. Biscuits - The Case of the Ocean Pearl" = Mr. Biscuits: The Case of the Ocean Pearl
"BFG-My Kingdom for the Princess" = My Kingdom for the Princess
"BFG-My Kingdom for the Princess II" = My Kingdom for the Princess II
"BFG-Mystery Age - The Imperial Staff" = Mystery Age: The Imperial Staff
"BFG-Mystery Case Files - 13th Skull Collector's Edition" = Mystery Case Files ®: 13th Skull ™ Collector's Edition
"BFG-Mystery Case Files - Dire Grove" = Mystery Case Files®: Dire Grove™
"BFG-Mystery Case Files - Huntsville - Detective Training" = Mystery Case Files: Huntsville - Detective Training
"BFG-Mystery Case Files - Return to Ravenhearst" = Mystery Case Files: Return to Ravenhearst â„¢
"BFG-Mystery Cruise" = Mystery Cruise
"BFG-Mystery of Unicorn Castle" = Mystery of Unicorn Castle
"BFG-Mystery Stories - Berlin Nights" = Mystery Stories: Berlin Nights
"BFG-Mystic Gateways - The Celestial Quest" = Mystic Gateways: The Celestial Quest
"BFG-Mystic Inn" = Mystic Inn
"BFG-Natalie Brooks - Secrets of Treasure House" = Natalie Brooks: Secrets of Treasure House
"BFG-Natalie Brooks - The Treasures of the Lost Kingdom" = Natalie Brooks: The Treasures of the Lost Kingdom
"BFG-Neptunes Secret" = Neptune's Secret
"BFG-Pahelika - Secret Legends" = Pahelika: Secret Legends
"BFG-Princess Isabella - A Witch's Curse" = Princess Isabella: A Witch's Curse
"BFG-Rangy Lil's Wild West Adventure" = Rangy Lil's Wild West Adventure
"BFG-Reincarnations - Uncover the Past" = Reincarnations: Uncover the Past
"BFG-Rhianna Ford - The Da Vinci Letter" = Rhianna Ford & The Da Vinci Letter
"BFG-Safecracker" = Safecracker
"BFG-Samantha Swift and the Golden Touch" = Samantha Swift and the Golden Touch
"BFG-Samantha Swift and the Hidden Roses of Athena" = Samantha Swift and the Hidden Roses of Athena
"BFG-Secret Diaries - Florence Ashford" = Secret Diaries: Florence Ashford
"BFG-Spa Mania" = Spa Mania
"BFG-Syberia" = Syberia
"BFG-Syberia II" = Syberia II
"BFG-The Hardy Boys - The Perfect Crime" = The Hardy Boys - The Perfect Crime
"BFG-The Legend of Crystal Valley" = The Legend of Crystal Valley
"BFG-The Mirror Mysteries" = The Mirror Mysteries
"BFG-The Mystery of the Crystal Portal" = The Mystery of the Crystal Portal
"BFG-The Return of Monte Cristo" = The Return of Monte Cristo
"BFG-The Serpent of Isis" = The Serpent of Isis â„¢
"BFG-The Spirit of Wandering - The Legend" = The Spirit of Wandering: The Legend
"BFG-The Stone of Destiny" = The Stone of Destiny
"BFG-The Treasures of Mystery Island" = The Treasures of Mystery Island
"BFG-Treasure Seekers - The Enchanted Canvases" = Treasure Seekers: The Enchanted Canvases
"BFG-Treasure Seekers - Visions of Gold" = Treasure Seekers: Visions of Gold â„¢
"BFG-Twisted - A Haunted Carol" = Twisted: A Haunted Carol
"BFG-Undiscovered World - The Incan Sun" = Undiscovered World: The Incan Sun
"BFG-Veronica Rivers - Portals to the Unknown" = Veronica Rivers: Portals to the Unknown
"BFG-Veronica Rivers - The Order Of Conspiracy" = Veronica Rivers: The Order Of Conspiracy
"BFG-Victorian Mysteries - Woman in White" = Victorian Mysteries: Woman in White
"BFG-Youda Legend - The Curse of the Amsterdam Diamond" = Youda Legend: The Curse of the Amsterdam Diamond
"BFG-Youda Legend - The Golden Bird of Paradise" = Youda Legend: The Golden Bird of Paradise
"Borders Desktop" = Borders Desktop
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"EPSON Printer and Utilities" = EPSON Printer Software
"EPSON Scanner" = EPSON Scan
"Free 3GP Video Converter_is1" = Free 3GP Video Converter version 3.2
"HijackThis" = HijackThis 2.0.2
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{44170B31-F47A-4FF9-9D77-382D1FE2A728}" = FP3 Player
"Kazoo Player" = Kazoo Player
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MusicManager" = Music Manager
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Silent Package Run-Time Sample" = EPSON CX9400 User's Guide
"SpywareBlaster_is1" = SpywareBlaster 4.4
"TagPlugin" = Use the entry named LeapFrog Connect to uninstall (LeapFrog Tag Plugin)
"TEFView_is1" = TEFView 2.65
"Uninstall_is1" = Uninstall 1.0.0.1
"UPCShell" = LeapFrog Connect
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"winusb0100" = Microsoft WinUsb 1.0
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 3/20/2010 1:41:31 AM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/20/2010 1:41:31 AM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/20/2010 1:41:32 AM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/20/2010 1:41:35 AM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/20/2010 1:41:35 AM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/20/2010 1:41:35 AM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/21/2010 10:21:10 PM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/22/2010 7:08:54 PM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/22/2010 8:11:49 PM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 3/22/2010 8:11:49 PM | Computer Name = ANNIE-7B392A84C | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
[ System Events ]
Error - 2/28/2011 3:42:08 PM | Computer Name = ANNIE-7B392A84C | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference
error message: Insufficient system resources exist to complete the requested service.
.
Error - 2/28/2011 3:42:08 PM | Computer Name = ANNIE-7B392A84C | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:\WINDOWS\system32\CRYPTUI.dll.
Reference
error message: The operation completed successfully. .
Error - 2/28/2011 3:42:08 PM | Computer Name = ANNIE-7B392A84C | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference
error message: Insufficient system resources exist to complete the requested service.
.
Error - 2/28/2011 3:42:08 PM | Computer Name = ANNIE-7B392A84C | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:\WINDOWS\system32\CRYPTUI.dll.
Reference
error message: The operation completed successfully. .
Error - 2/28/2011 3:42:08 PM | Computer Name = ANNIE-7B392A84C | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls.
Reference
error message: Insufficient system resources exist to complete the requested service.
.
Error - 2/28/2011 3:42:08 PM | Computer Name = ANNIE-7B392A84C | Source = SideBySide | ID = 16842811
Description = Generate Activation Context failed for C:\WINDOWS\system32\CRYPTUI.dll.
Reference
error message: The operation completed successfully. .
Error - 2/28/2011 3:42:57 PM | Computer Name = ANNIE-7B392A84C | Source = sr | ID = 1
Description = The System Restore filter encountered the unexpected error '0xC000009A'
while processing the file 'change.log' on the volume 'HarddiskVolume1'. It has
stopped monitoring the volume.
Error - 2/28/2011 3:47:19 PM | Computer Name = ANNIE-7B392A84C | Source = Print | ID = 23
Description = Printer Lexmark Z23-Z33 failed to initialize because a suitable Lexmark
Z23-Z33 driver could not be found.
Error - 2/28/2011 3:47:24 PM | Computer Name = ANNIE-7B392A84C | Source = Service Control Manager | ID = 7000
Description = The Zune Bus Enumerator Driver service failed to start due to the
following error: %%2
Error - 2/28/2011 3:47:27 PM | Computer Name = ANNIE-7B392A84C | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SABKUTIL
< End of report >