Spyware / Malware / Virus Removal

Suspected VIRUS, Memory delay - sluggish performance

14 min read

Looking for the outcome? Ask AI

radiant Topic Starter

Post #1March 12, 2011, 2:44 PM UTC

PLEASE HELP
Very slow performance….must have virus infection….delay on all commands

HAVE:
dELL LAPTOP Inspiron 1750
OS Vista 64 bit
SP1
2gb mem
2ghz procesor

As instructed by Forum God in admin team - hijack this log is below.

thnx
Rachelle

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:37:47, on 12/03/2011
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18565)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmgr.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files (x86)\Free Ride Games\GPlayer.exe
C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Internet Explorer\ieuser.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe
C:\Windows\SysWow64\Macromed\Flash\FlashUtil10d.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IUK9QL1I\index[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files (x86)\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
R3 - URLSearchHook: NetAssistantBHO Class - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files (x86)\Freeze.com\NetAssistant\NetAssistant.dll
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files (x86)\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
O2 - BHO: PriceGong - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.1.0\PriceGongIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: IE BHO Utility - {5AB7104A-B71F-49AD-9154-F7F8806AE848} - C:\Program Files (x86)\Surf Canyon\surfcanyon.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O2 - BHO: NetAssistantBHO - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files (x86)\Freeze.com\NetAssistant\NetAssistant.dll
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [Dell Webcam Central] "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Exetender] "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup
O4 - HKCU\..\Run: [RegistryBooster] "C:\Program Files (x86)\Uniblue\RegistryBooster\launcher.exe" delay 20000
O4 - HKCU\..\Run: [PC Speed Maximizer] C:\Program Files (x86)\PC Speed Maximizer\SPMStarter.exe
O4 - HKCU\..\Run: [SPMTray] C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe
O4 - HKCU\..\Run: [Startw3i] C:\Program Files (x86)\PC Speed Maximizer\Startw3i.exe
O4 - HKUS\S-1-5-18\..\Run: [Exetender] "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Exetender] "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll C:\Windows\SysWOW64\cssdll32.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Rapport Management Service (RapportMgmtService) - Trusteer Ltd. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - Unknown owner - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

–
End of file - 13680 bytes

radiant

Post #2March 13, 2011, 9:33 PM UTC

Sorry, didnt realise it was on twice as it didnt seem to log at first attempt… what should i do now? R

Conspire

Post #3March 14, 2011, 4:05 AM UTC last edited March 14, 2011, 4:06 AM UTC

**In any case where you happen to be busy or unable to give us a reply, we would be grateful if you keep us informed in advance and we will be more than happy to wait. Failure to do so we will have your thread closed in THREE(3) days.

Hello there, Rachelle

I'm Conspire, I'll be glad to help you with your computer problems.

Please observe these rules while we work:

Read the entire procedure
It is important to perform ALL actions in sequence.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Stick with me till you're given the all clear.
Remember, absence of symptoms does not mean the infection is all gone.
Don't attempt to clean your computer with any tools other than the ones I ask you to use during the cleanup process.

IMPORTANT NOTE : Please do not delete anything unless instructed to.

Conspire

Post #4March 14, 2011, 4:07 AM UTC last edited March 14, 2011, 4:13 AM UTC

Hello there,

Download OTL to your Desktop

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
Click on Minimal Output at the top
Download the following file scan.txt to your Desktop. Click here to download it. You may need to right click on it and select "Save"
Double click inside the Custom Scan box at the bottom
A window will appear saying "Click OK to load a custom scan from a file or Cancel to cancel"
Click the OK button and navigate to the file scan.txt which we just saved to your desktop
Select scan.txt and click Open. Writing will now appear under the Custom Scan box
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won't take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic

===================================================

Download Security Check by screen317 from here or here.

Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

===================================================

On your next reply please post :
OTL log
Checkup log

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

radiant

Post #5March 14, 2011, 9:31 AM UTC

Hi Conspire
Thankyou for taking on my case…..
Please find below as requested 4 logs for:-

OTL, EXTRAS, SCAN, SECURITY CHECK

HAD TO RESTART LAPTOP TWICE AS IT KEPT FREEZING AFTER DELAYS.
Thanks
Rachelle.

netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%PROGRAMFILES%\Internet Explorer\*.dat
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

OTL Extras logfile created on: 14/03/2011 08:32:16 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\rachelle\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 35.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 42.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218.20 Gb Total Space | 149.22 Gb Free Space | 68.39% Space Free | Partition Type: NTFS
Drive E: | 14.65 Gb Total Space | 6.98 Gb Free Space | 47.62% Space Free | Partition Type: NTFS
Unable to calculate disk information.

Computer Name: RACHELLE-PC | User Name: rachelle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" ()
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l File not found
InternetShortcut [print] – rundll32.exe C:\Windows\system32\mshtml.dll,PrintHTML "%1" ()
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – "C:\Program Files (x86)\File Type Assistant\tsassist.exe" "%1" (Trusted Software ApS)
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2710586296-3566957266-2947148700-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{B3C119B9-40BF-4808-B7A9-1B01277D9F0D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{DD9088E9-D187-4FAE-9677-5806FC1FC1F5}" = lport=2869 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{227454FC-2C10-44E5-BDCD-1C3BE3C9DE0B}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe |
"{2BB8753F-4A92-4081-8717-4AD4886BD3D9}" = protocol=17 | dir=in | app=c:\users\rachelle\appdata\roaming\dropbox\bin\dropbox.exe |
"{2D4EB796-CF33-44E6-9759-A3872482E6B0}" = protocol=6 | dir=in | app=c:\windows\syswow64\lxbkcoms.exe |
"{44AD78DB-0BA6-487C-9761-75E38746F798}" = dir=in | app=c:\program files (x86)\windows live\sync\windowslivesync.exe |
"{4DA82A45-3265-4BB6-9C36-59EFABFD6D6A}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\x64\3\lxbkpswx.exe |
"{535FB29D-4528-41F8-B9ED-0D7F39EBBFE9}" = dir=in | app=c:\program files (x86)\finaltorrent\ftcheckforupdates.exe |
"{76BC05F5-FA63-4D5D-BB94-87E4A9FD4426}" = dir=in | app=c:\program files (x86)\finaltorrent\finaltorrent.exe |
"{B94A469E-EF7E-434F-9868-184D764F5E12}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{C4932AAE-D6AB-46E1-967C-B1DC58A6C609}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\x64\3\lxbkpswx.exe |
"{D2299F06-BF66-4F56-8214-AFC45AD4A5BC}" = protocol=6 | dir=in | app=c:\users\rachelle\appdata\roaming\dropbox\bin\dropbox.exe |
"{DC9363B6-95E4-4EEE-86E6-7A6204EC4B10}" = protocol=17 | dir=in | app=c:\windows\system32\lxbkcoms.exe |
"{E8DCAD5E-50A1-4BBB-A279-D6F615E92058}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{E951E5E2-E372-480E-BAE7-D6BC183C8029}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{EFBF8A48-E8E3-4818-83DC-CB2D89148082}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\powerdvd.exe |
"{F9B6756B-877D-46FF-967A-EF888D9AF412}" = protocol=6 | dir=in | app=c:\windows\system32\lxbkcoms.exe |
"{FB95F86C-FD8B-4B84-99F4-8180F1CB94B4}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{FC9A0CF6-C5F4-43EA-8D16-798586F8F156}" = protocol=17 | dir=in | app=c:\windows\syswow64\lxbkcoms.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{26A24AE4-039D-4CA4-87B4-2F86416013FF}" = Java™ 6 Update 13 (64-bit)
"{77B8B4A5-EE79-4907-A318-2DA86325B8D7}" = iTunes
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E464702F-5433-46EC-8F65-159276C0A54F}" = WIDCOMM Bluetooth Software 6.2.0.6600
"{E4F5E48E-7155-4CF9-88CD-7F377EC9AC54}" = Bonjour
"{E5C95CA5-4565-4B9D-97ED-05088D775614}" = Apple Mobile Device Support
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Broadcom 802.11 Application" = Dell Wireless WLAN Card Utility
"COMODO Firewall Pro" = COMODO Firewall Pro
"COMODO SafeSurf" = COMODO SafeSurf
"Creative OA013" = Integrated Webcam Driver (1.00.04.0310)
"HDMI" = Intel® Graphics Media Accelerator Driver
"Lexmark X1100 Series" = Lexmark X1100 Series
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"SynTPDeinstKey" = Dell Touchpad

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{095B1DCF-5E8B-47EC-9B18-481918A731DB}" = Microsoft Default Manager
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}" = Uniblue RegistryBooster
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1BD07DF4-FB06-41BA-B896-B2DA59000C96}" = Windows Live Toolbar
"{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}" = Rapport
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java™ 6 Update 13
"{2B7BDADB-EC8C-4C54-B5DD-CE45A016D3A7}" = Free Ride Games Player
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX
"{6BA13EFC-E8D0-4D37-AF04-42796CF0E8F5}" = BlackBerry Device Software Updater
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack
"{AC76BA86-7AD7-1033-7B44-A92000000001}" = Adobe Reader 9.2
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C792A75A-2A1F-4991-9B85-291745478A79}" = NetAssistant
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"AskSBar Uninstall" = Ask Toolbar
"avast" = avast! Free Antivirus
"CameraWindowDC" = Canon Utilities CameraWindow DC
"CameraWindowDC8" = Canon Utilities CameraWindow DC 8
"CameraWindowDVC6" = Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX
"CameraWindowLauncher" = Canon Utilities CameraWindow
"Canon G.726 WMP-Decoder" = Canon G.726 WMP-Decoder
"CANON iMAGE GATEWAY Task" = CANON iMAGE GATEWAY Task for ZoomBrowser EX
"Canon Internet Library for ZoomBrowser EX" = Canon Internet Library for ZoomBrowser EX
"Canon MOV Decoder" = Canon MOV Decoder
"Canon MOV Encoder" = Canon MOV Encoder
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Dell Webcam Central" = Dell Webcam Central
"FinalTorrent_is1" = FinalTorrent 2011
"MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX
"MyCamera" = Canon Utilities MyCamera
"MyCameraDC" = Canon Utilities MyCamera DC
"PC Speed Maximizer_is1" = PC Speed Maximizer v2.2
"PriceGong" = PriceGong 2.1.0
"Rapport_msi" = Rapport
"RAW Image Task" = Canon RAW Image Task for ZoomBrowser EX
"RealPlayer 12.0" = RealPlayer
"RemoteCaptureDC" = Canon Utilities RemoteCapture DC
"RemoteCaptureTask" = Canon Utilities RemoteCapture Task for ZoomBrowser EX
"Surf Canyon" = Surf Canyon Search Engine Assistant
"Trusted Software Assistant_is1" = File Type Assistant
"Uniblue RegistryBooster" = Uniblue RegistryBooster
"VLC media player" = VLC media player 1.0.1
"WinLiveSuite_Wave3" = Windows Live Essentials
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Software Update" = Yahoo! Software Update
"ZoomBrowser EX" = Canon Utilities ZoomBrowser EX
"ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"NetAssistant" = Freeze.com NetAssistant

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 09/02/2011 04:59:56 | Computer Name = rachelle-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 09/02/2011 14:16:27 | Computer Name = rachelle-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 09/02/2011 14:53:11 | Computer Name = rachelle-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 09/02/2011 14:53:21 | Computer Name = rachelle-PC | Source = WinMgmt | ID = 10
Description =

Error - 09/02/2011 15:34:28 | Computer Name = rachelle-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.42_none_d6c3e7af9bae13a2\MFC80.DLL".
Dependent
Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 09/02/2011 17:11:24 | Computer Name = rachelle-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 09/02/2011 17:12:21 | Computer Name = rachelle-PC | Source = WinMgmt | ID = 10
Description =

Error - 09/02/2011 19:13:43 | Computer Name = rachelle-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 09/02/2011 19:13:58 | Computer Name = rachelle-PC | Source = WinMgmt | ID = 10
Description =

Error - 09/02/2011 23:39:58 | Computer Name = rachelle-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

[ Media Center Events ]
Error - 11/09/2010 17:26:29 | Computer Name = rachelle-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package MCESpotlight.

[ System Events ]
Error - 13/11/2009 09:23:23 | Computer Name = rachelle-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =

Error - 13/11/2009 09:23:23 | Computer Name = rachelle-PC | Source = Microsoft-Windows-Servicing | ID = 4375
Description =

Error - 13/11/2009 09:23:23 | Computer Name = rachelle-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =

Error - 13/11/2009 09:23:23 | Computer Name = rachelle-PC | Source = Microsoft-Windows-Servicing | ID = 4375
Description =

Error - 13/11/2009 09:23:23 | Computer Name = rachelle-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =

Error - 13/11/2009 09:23:23 | Computer Name = rachelle-PC | Source = Microsoft-Windows-Servicing | ID = 4385
Description =

Error - 13/11/2009 13:18:02 | Computer Name = rachelle-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

Error - 13/11/2009 16:51:37 | Computer Name = rachelle-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

Error - 13/11/2009 16:57:00 | Computer Name = rachelle-PC | Source = HTTP | ID = 15016
Description =

Error - 13/11/2009 23:00:15 | Computer Name = rachelle-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
will not be used. The driver has been unloaded.

< End of report >

OTL logfile created on: 14/03/2011 08:32:16 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\rachelle\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 35.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 42.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218.20 Gb Total Space | 149.22 Gb Free Space | 68.39% Space Free | Partition Type: NTFS
Drive E: | 14.65 Gb Total Space | 6.98 Gb Free Space | 47.62% Space Free | Partition Type: NTFS
Unable to calculate disk information.

Computer Name: RACHELLE-PC | User Name: rachelle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
PRC - [2011/02/23 15:04:20 | 003,451,496 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011/02/23 15:04:19 | 000,042,184 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2011/01/21 14:19:38 | 000,053,104 | —- | M] (Uniblue Systems Limited) – C:\Program Files (x86)\Uniblue\RegistryBooster\registrybooster.exe
PRC - [2011/01/21 14:19:38 | 000,025,984 | —- | M] (Uniblue Systems Limited) – C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe
PRC - [2011/01/05 19:02:48 | 000,821,048 | —- | M] (Trusteer Ltd.) – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
PRC - [2011/01/05 19:02:46 | 001,509,176 | —- | M] (Trusteer Ltd.) – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
PRC - [2010/11/23 11:10:52 | 000,205,584 | —- | M] (Avanquest Software) – C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe
PRC - [2010/08/28 13:56:44 | 000,202,256 | —- | M] (RealNetworks, Inc.) – C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
PRC - [2010/07/18 11:54:40 | 001,774,080 | —- | M] (Exent Technologies Ltd.) – C:\Program Files (x86)\Free Ride Games\GPlayer.exe
PRC - [2009/11/23 08:43:26 | 002,001,648 | —- | M] (SUPERAntiSpyware.com) – C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2009/10/28 03:31:14 | 000,257,440 | R— | M] (Adobe Systems, Inc.) – C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10d.exe
PRC - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
PRC - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
PRC - [2009/02/05 02:26:38 | 000,128,232 | —- | M] (CyberLink Corp.) – C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009/01/09 18:49:08 | 000,405,639 | —- | M] (Creative Technology Ltd) – C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2008/11/18 00:55:58 | 000,014,376 | —- | M] (Broadcom Corporation.) – C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
PRC - [2008/11/09 20:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/05/07 22:41:14 | 000,354,840 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/05/07 22:41:12 | 000,178,712 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008/02/28 11:57:54 | 000,074,408 | —- | M] (Lexmark International, Inc.) – C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmgr.exe
PRC - [2008/02/28 11:57:36 | 000,058,024 | —- | M] (Lexmark International, Inc.) – C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmon.exe

========== Modules (SafeList) ==========

MOD - [2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
MOD - [2011/02/23 15:04:17 | 000,197,208 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\snxhk.dll
MOD - [2010/08/31 15:39:57 | 001,684,480 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll
MOD - [2009/11/27 15:38:11 | 000,249,592 | —- | M] (COMODO) – C:\Windows\SysWOW64\cssdll32.dll
MOD - [2009/11/27 15:36:42 | 000,143,104 | —- | M] () – C:\Windows\SysWOW64\guard32.dll
MOD - [2008/01/21 02:50:31 | 000,140,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\winsta.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/02/23 15:04:19 | 000,042,184 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\AVAST Software\Avast\AvastSvc.exe – (avast! Antivirus)
SRV:64bit: - [2009/11/27 15:36:41 | 000,690,944 | —- | M] () [Auto | Running] – C:\Program Files\Comodo\Firewall\cmdagent.exe – (cmdAgent)
SRV:64bit: - [2009/05/12 13:20:28 | 000,382,464 | —- | M] () [Auto | Running] – C:\Windows\SysNative\ykx64mpcoinst.dll – (yksvc)
SRV:64bit: - [2009/05/11 19:21:42 | 000,268,288 | —- | M] () [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe – (STacSV)
SRV:64bit: - [2009/05/11 19:21:08 | 000,089,600 | —- | M] () [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe – (AESTFilters)
SRV:64bit: - [2008/12/21 18:35:16 | 000,032,768 | —- | M] () [Auto | Running] – C:\Windows\SysNative\WLTRYSVC.EXE – (wltrysvc)
SRV:64bit: - [2008/02/19 09:12:32 | 000,565,928 | —- | M] () [Auto | Running] – C:\Windows\SysNative\lxbkcoms.exe – (lxbk_device)
SRV:64bit: - [2008/01/21 02:47:32 | 000,383,544 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2011/01/05 19:02:48 | 000,821,048 | —- | M] (Trusteer Ltd.) [Auto | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe – (RapportMgmtService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) [Auto | Running] – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe – (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter)
SRV - [2008/11/09 20:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)
SRV - [2008/07/27 18:03:13 | 000,069,632 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)
SRV - [2008/05/07 22:41:14 | 000,354,840 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe – (IAANTMON) Intel®
SRV - [2008/02/19 09:12:18 | 000,537,256 | —- | M] ( ) [Auto | Running] – C:\Windows\SysWow64\lxbkcoms.exe – (lxbk_device)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/02/23 14:55:05 | 000,064,344 | —- | M] () [File_System | Auto | Running] – C:\Windows\SysNative\drivers\aswMonFlt.sys – (aswMonFlt)
DRV:64bit: - [2011/01/05 19:03:26 | 000,062,448 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\Drivers\RapportKE64.sys – (RapportKE64)
DRV:64bit: - [2010/12/14 18:51:20 | 000,051,712 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\Drivers\usbaapl64.sys – (USBAAPL64)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys – (GEARAspiWDM)
DRV:64bit: - [2009/05/12 16:13:06 | 010,275,296 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\igdkmd64.sys – (igfx)
DRV:64bit: - [2009/05/12 13:20:28 | 000,406,016 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\yk60x64.sys – (yukonx64)
DRV:64bit: - [2009/05/11 19:22:00 | 000,477,696 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\stwrt64.sys – (STHDA)
DRV:64bit: - [2009/05/08 00:39:36 | 000,266,800 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\SynTP.sys – (SynTP)
DRV:64bit: - [2009/05/08 00:28:02 | 000,069,120 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\RTSTOR64.SYS – (RTSTOR)
DRV:64bit: - [2009/03/31 18:12:38 | 000,395,288 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iastor.sys – (iaStor)
DRV:64bit: - [2009/03/09 17:00:00 | 000,311,456 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\OA013Vid.sys – (OA013Vid)
DRV:64bit: - [2009/03/06 07:33:58 | 000,159,840 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\OA013Ufd.sys – (OA013Ufd)
DRV:64bit: - [2008/12/31 02:00:22 | 000,172,032 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\CtClsFlt.sys – (CtClsFlt)
DRV:64bit: - [2008/12/23 17:16:42 | 000,021,160 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\btwrchid.sys – (btwrchid)
DRV:64bit: - [2008/12/23 17:16:38 | 000,036,392 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\btwl2cap.sys – (btwl2cap)
DRV:64bit: - [2008/12/23 17:16:36 | 000,133,672 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwavdt.sys – (btwavdt)
DRV:64bit: - [2008/12/23 17:16:36 | 000,095,784 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwaudio.sys – (btwaudio)
DRV:64bit: - [2008/12/21 18:34:48 | 000,022,520 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\BCM42RLY.sys – (BCM42RLY)
DRV:64bit: - [2008/12/16 16:56:52 | 001,526,776 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\bcmwl664.sys – (BCM43XX)
DRV:64bit: - [2008/05/20 18:33:36 | 000,028,416 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\Drivers\RimUsb_AMD64.sys – (RimUsb)
DRV:64bit: - [2008/01/21 02:47:28 | 000,046,080 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\wpdusb.sys – (WpdUsb)
DRV:64bit: - [2008/01/21 02:46:55 | 000,317,952 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\e1e6032e.sys – (e1express) Intel®
DRV:64bit: - [2008/01/21 02:46:52 | 000,013,824 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\Dot4Scan.sys – (Dot4Scan)
DRV:64bit: - [2007/11/14 08:00:00 | 000,053,488 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\Drivers\PxHlpa64.sys – (PxHlpa64)
DRV:64bit: - [2006/11/02 07:48:50 | 002,488,320 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\atikmdag.sys – (R300)
DRV:64bit: - [2006/09/18 21:36:24 | 000,000,308 | —- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\Wbem\ntfs.mof – (Ntfs)
DRV - [2011/01/05 19:03:28 | 000,050,672 | —- | M] (Trusteer Ltd.) [Kernel | System | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys – (RapportEI64)
DRV - [2011/01/05 19:03:26 | 000,058,864 | —- | M] (Trusteer Ltd.) [Kernel | System | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys – (RapportPG64)
DRV - [2010/03/10 21:02:46 | 000,055,328 | —- | M] (Exent Technologies Ltd.) [Kernel | Auto | Running] – C:\Program Files (x86)\Free Ride Games\X5XSEx.sys – (X5XSEx)
DRV - [2009/11/23 08:43:30 | 000,009,968 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\sasdifsv.sys – (SASDIFSV)
DRV - [2009/11/23 08:43:30 | 000,007,408 | R— | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS – (SASENUM)
DRV - [2009/11/23 08:43:28 | 000,074,480 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS – (SASKUTIL)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files (x86)\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com)
IE - HKCU\..\URLSearchHook: {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files (x86)\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/08/28 13:57:46 | 000,000,000 | —D | M]

O1 HOSTS File: ([2006/09/18 21:37:24 | 000,000,761 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Ask Search Assistant BHO) - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files (x86)\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com)
O2 - BHO: (PriceGongBHO Class) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.1.0\PriceGongIE.dll (PriceGong)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Surf Canyon Search Engine Assistant) - {5AB7104A-B71F-49AD-9154-F7F8806AE848} - C:\Program Files (x86)\Surf Canyon\surfcanyon.dll (Surf Canyon Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (NetAssistantBHO Class) - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files (x86)\Freeze.com\NetAssistant\NetAssistant.dll (W3i, LLC)
O2 - BHO: (Ask Toolbar BHO) - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com)
O4:64bit: - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Windows\SysNative\WLTRAY.exe ()
O4:64bit: - HKLM..\Run: [COMODO Firewall Pro] C:\Program Files\Comodo\Firewall\cfp.exe ()
O4:64bit: - HKLM..\Run: [COMODO SafeSurf] C:\Program Files\Comodo\SafeSurf\cssurf.exe (COMODO)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe ()
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe ()
O4:64bit: - HKLM..\Run: [lxbkbmgr.exe] C:\Program Files (x86)\Lexmark X1100 Series\lxbkbmgr.exe (Lexmark International, Inc.)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe ()
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Exetender] C:\Program Files (x86)\Free Ride Games\GPlayer.exe (Exent Technologies Ltd.)
O4 - HKCU..\Run: [PC Speed Maximizer] C:\Program Files (x86)\PC Speed Maximizer\SPMStarter.exe ()
O4 - HKCU..\Run: [RegistryBooster] C:\Program Files (x86)\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited)
O4 - HKCU..\Run: [SPMTray] C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe (Avanquest Software)
O4 - HKCU..\Run: [Startw3i] C:\Program Files (x86)\PC Speed Maximizer\Startw3i.exe (Avanquest Software)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [WMPNSCFG] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\guard64.dll) - C:\Windows\SysNative\guard64.dll ()
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\cssdll64.dll) - C:\Windows\SysNative\cssdll64.dll ()
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\guard32.dll) - C:\Windows\SysWOW64\guard32.dll ()
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\cssdll32.dll) - C:\Windows\SysWOW64\cssdll32.dll (COMODO)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll ()
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img27.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img27.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files (x86)\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/03/14 08:28:21 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
[2011/03/13 23:22:54 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalTorrent
[2011/03/13 21:57:29 | 000,000,000 | —D | C] – C:\Users\rachelle\Documents\My Downloads
[2011/03/12 14:38:27 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\rachelle\Desktop\HiJackThis.exe
[2011/03/12 02:25:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011/03/12 02:24:18 | 000,040,648 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2011/03/12 02:24:17 | 000,190,016 | —- | C] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/03/12 02:23:44 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2011/03/12 02:23:44 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2011/03/12 02:01:27 | 000,000,000 | —D | C] – C:\Users\rachelle\Desktop\Rachelle
[2011/03/12 01:42:04 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\RegistryKeys
[2011/03/12 01:42:04 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\PC Speed Maximizer
[2011/03/12 01:37:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar
[2011/03/12 01:37:31 | 000,000,000 | —D | C] – C:\ProgramData\GamesBar
[2011/03/12 01:37:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\GamesBar
[2011/03/12 01:36:59 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
[2011/03/12 01:36:47 | 000,000,000 | —D | C] – C:\Program Files (x86)\Registry Helper
[2011/03/12 01:36:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Oberon Media
[2011/03/12 01:36:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\Surf Canyon
[2011/03/12 01:36:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\PC Speed Maximizer
[2011/03/12 01:36:07 | 000,000,000 | —D | C] – C:\Program Files (x86)\Oberon Media
[2011/03/12 01:31:52 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Uniblue
[2011/03/12 01:31:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\File Type Assistant
[2011/03/12 01:31:05 | 000,000,000 | -H-D | C] – C:\ProgramData\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4}
[2011/03/12 01:30:55 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2011/03/12 01:30:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Uniblue
[2011/03/12 01:30:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\FinalTorrent
[2011/03/12 01:30:25 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Local\PackageAware
[2011/03/12 01:30:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\Free Offers from Freeze.com
[2011/03/12 01:29:25 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Local\Yahoo
[2011/03/12 01:28:49 | 000,000,000 | —D | C] – C:\ProgramData\Free Ride Games
[2011/03/12 01:28:35 | 000,053,314 | —- | C] (Exent Technologies Ltd.) – C:\Windows\ExentInfo.exe
[2011/03/12 01:28:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Free Ride Games
[2011/03/12 01:28:29 | 000,000,000 | —D | C] – C:\Remote Programs
[2011/03/12 01:27:05 | 000,000,000 | —D | C] – C:\Program Files (x86)\Freeze.com
[2011/03/12 01:27:01 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo!
[2011/03/12 01:26:40 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo! Companion
[2011/03/12 01:26:13 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Yahoo!
[2011/03/12 01:26:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\PriceGong
[2011/03/12 01:26:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Yahoo!
[2011/03/12 01:22:01 | 000,000,000 | —D | C] – C:\Users\rachelle\Desktop\ron sexsmith
[2011/03/09 16:24:51 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/03/09 16:24:51 | 000,677,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/03/09 16:24:47 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/03/09 16:24:47 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/03/09 16:24:47 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2011/03/09 16:24:46 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbeio.dll
[2011/02/25 03:06:12 | 000,000,000 | —D | C] – C:\Windows\SysWow64\WindowsPowerShell
[2011/02/25 03:06:02 | 000,000,000 | —D | C] – C:\Windows\SysNative\WindowsPowerShell
[2011/02/25 03:01:47 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrsmgr.dll
[2011/02/25 03:01:30 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsmplpxy.dll
[2011/02/25 03:01:30 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrssrv.dll
[2011/02/25 03:01:13 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pwrshplugin.dll
[2011/02/25 03:01:03 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wevtfwd.dll
[2011/02/25 03:01:03 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wecutil.exe
[2011/02/25 03:01:03 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wecapi.dll
[2011/02/25 03:01:03 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmRes.dll
[2011/02/25 03:01:03 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsmprovhost.exe
[2011/02/25 03:01:02 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrs.exe
[2011/02/25 03:01:02 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrshost.exe
[2011/02/25 03:00:45 | 000,252,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSManMigrationPlugin.dll
[2011/02/25 03:00:45 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSManHTTPConfig.exe
[2011/02/25 03:00:45 | 000,241,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrscmd.dll
[2011/02/25 03:00:45 | 000,214,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmWmiPl.dll
[2011/02/25 03:00:45 | 000,145,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmAuto.dll
[2011/02/16 18:14:31 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Apple Computer
[2011/02/16 18:14:31 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Local\Apple Computer
[2011/02/16 18:13:39 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/02/16 18:13:35 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2011/02/16 18:13:34 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2011/02/16 18:12:52 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2011/02/16 18:10:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/02/16 18:09:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2011/02/16 18:09:50 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2011/02/16 18:08:43 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Local\Apple
[2011/02/16 18:08:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2011/02/16 18:05:00 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2011/02/16 18:02:43 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2011/02/16 18:02:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2011/02/16 18:02:16 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2011/02/16 18:02:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2009/12/02 12:03:17 | 000,413,696 | —- | C] ( ) – C:\Windows\SysWow64\lxbkinpa.dll
[2009/12/02 12:03:17 | 000,397,312 | —- | C] ( ) – C:\Windows\SysWow64\lxbkiesc.dll
[2009/12/02 12:03:16 | 001,224,704 | —- | C] ( ) – C:\Windows\SysWow64\lxbkserv.dll
[2009/12/02 12:03:16 | 000,991,232 | —- | C] ( ) – C:\Windows\SysWow64\lxbkusb1.dll
[2009/12/02 12:03:16 | 000,696,320 | —- | C] ( ) – C:\Windows\SysWow64\lxbkhbn3.dll
[2009/12/02 12:03:16 | 000,643,072 | —- | C] ( ) – C:\Windows\SysWow64\lxbkpmui.dll
[2009/12/02 12:03:16 | 000,585,728 | —- | C] ( ) – C:\Windows\SysWow64\lxbklmpm.dll
[2009/12/02 12:03:16 | 000,385,704 | —- | C] ( ) – C:\Windows\SysWow64\lxbkih.exe
[2009/12/02 12:03:16 | 000,180,904 | —- | C] ( ) – C:\Windows\SysWow64\lxbkppls.exe
[2009/12/02 12:03:16 | 000,163,840 | —- | C] ( ) – C:\Windows\SysWow64\lxbkprox.dll
[2009/12/02 12:03:16 | 000,094,208 | —- | C] ( ) – C:\Windows\SysWow64\lxbkpplc.dll
[2009/12/02 12:03:15 | 000,684,032 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcomc.dll
[2009/12/02 12:03:15 | 000,537,256 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcoms.exe
[2009/12/02 12:03:15 | 000,421,888 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcomm.dll
[2009/12/02 12:03:15 | 000,381,608 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcfg.exe

========== Files - Modified Within 30 Days ==========

[2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
[2011/03/14 08:18:38 | 000,003,616 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/14 08:18:38 | 000,003,616 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/13 23:23:10 | 000,000,398 | —- | M] () – C:\Windows\tasks\FinalTorrent Update Checker.job
[2011/03/13 23:22:54 | 000,000,920 | —- | M] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\FinalTorrent.lnk
[2011/03/13 23:22:54 | 000,000,896 | —- | M] () – C:\Users\rachelle\Desktop\FinalTorrent.lnk
[2011/03/13 23:22:43 | 000,001,798 | —- | M] () – C:\Users\rachelle\Desktop\Free ClipArt.lnk
[2011/03/13 23:22:43 | 000,001,794 | —- | M] () – C:\Users\rachelle\Desktop\Update Your Computer.lnk
[2011/03/13 23:22:43 | 000,001,782 | —- | M] () – C:\Users\rachelle\Desktop\Play Farmerama for Free, Click here.lnk
[2011/03/13 21:57:28 | 000,014,209 | —- | M] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer(2011)[FLAC].6236092.TPB.torrent
[2011/03/13 21:53:40 | 000,001,774 | —- | M] () – C:\Users\rachelle\Desktop\Click Here For Free Games.lnk
[2011/03/13 21:53:38 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Spin Palace Casino $1000 Free.lnk
[2011/03/13 21:53:38 | 000,001,780 | —- | M] () – C:\Users\rachelle\Desktop\Free Online Game!.lnk
[2011/03/13 21:49:27 | 000,014,209 | —- | M] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer.torrent
[2011/03/12 14:38:33 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\rachelle\Desktop\HiJackThis.exe
[2011/03/12 02:25:34 | 000,001,787 | —- | M] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/12 02:25:20 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2011/03/12 02:19:24 | 000,703,388 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/12 02:19:24 | 000,609,196 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/03/12 02:19:24 | 000,108,672 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/03/12 02:12:42 | 000,000,680 | —- | M] () – C:\Users\rachelle\AppData\Local\d3d9caps.dat
[2011/03/12 02:11:54 | 000,000,350 | —- | M] () – C:\Windows\tasks\RegistryBooster.job
[2011/03/12 02:11:37 | 2105,921,536 | -HS- | M] () – C:\hiberfil.sys
[2011/03/12 02:10:40 | 000,000,012 | —- | M] () – C:\Windows\bthservsdp.dat
[2011/03/12 01:36:56 | 000,000,958 | —- | M] () – C:\Users\rachelle\Desktop\PC Speed Maximizer.lnk
[2011/03/12 01:36:07 | 000,001,442 | —- | M] () – C:\Users\rachelle\Desktop\Play More I-play Games.lnk
[2011/03/12 01:36:02 | 000,001,863 | —- | M] () – C:\Users\rachelle\Desktop\Install_NSS.lnk
[2011/03/12 01:31:44 | 000,001,897 | —- | M] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/03/12 01:31:44 | 000,001,873 | —- | M] () – C:\Users\Public\Desktop\Uniblue RegistryBooster.lnk
[2011/03/12 01:30:24 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Click Here For Free Music.lnk
[2011/03/12 01:30:23 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Create Your Own Video Screensaver!.lnk
[2011/03/12 01:30:23 | 000,001,782 | —- | M] () – C:\Users\rachelle\Desktop\Be Creative on Facebook With Facepaint Layouts.lnk
[2011/03/12 01:28:59 | 000,001,911 | —- | M] () – C:\Users\Public\Desktop\Play My Games.lnk
[2011/03/12 01:28:59 | 000,000,151 | —- | M] () – C:\Users\Public\Desktop\More FREE games.url
[2011/03/12 01:28:57 | 000,000,064 | —- | M] () – C:\Windows\GPlrLanc.dat
[2011/03/10 00:25:03 | 000,011,434 | -HS- | M] () – C:\Users\rachelle\Documents\Folder.jpg
[2011/03/10 00:25:03 | 000,002,640 | -HS- | M] () – C:\Users\rachelle\Documents\AlbumArtSmall.jpg
[2011/03/10 00:24:41 | 011,504,820 | —- | M] () – C:\Users\rachelle\Documents\rapunzel.mp3
[2011/02/23 15:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2011/02/23 15:04:17 | 000,190,016 | —- | M] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/02/23 15:04:07 | 000,238,968 | —- | M] () – C:\Windows\SysNative\aswBoot.exe
[2011/02/23 14:57:04 | 000,280,408 | —- | M] () – C:\Windows\SysNative\drivers\aswSP.sys
[2011/02/23 14:57:01 | 000,505,176 | —- | M] () – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/02/23 14:55:53 | 000,053,592 | —- | M] () – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/02/23 14:55:13 | 000,031,064 | —- | M] () – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/02/23 14:55:05 | 000,064,344 | —- | M] () – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/02/23 14:54:58 | 000,022,360 | —- | M] () – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/02/16 18:13:39 | 000,001,696 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/02/16 18:10:05 | 000,001,758 | —- | M] () – C:\Users\Public\Desktop\QuickTime Player.lnk

========== Files Created - No Company Name ==========

[2011/03/13 23:23:10 | 000,000,398 | —- | C] () – C:\Windows\tasks\FinalTorrent Update Checker.job
[2011/03/13 23:22:54 | 000,000,920 | —- | C] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\FinalTorrent.lnk
[2011/03/13 23:22:54 | 000,000,896 | —- | C] () – C:\Users\rachelle\Desktop\FinalTorrent.lnk
[2011/03/13 23:22:43 | 000,001,798 | —- | C] () – C:\Users\rachelle\Desktop\Free ClipArt.lnk
[2011/03/13 23:22:43 | 000,001,794 | —- | C] () – C:\Users\rachelle\Desktop\Update Your Computer.lnk
[2011/03/13 23:22:43 | 000,001,782 | —- | C] () – C:\Users\rachelle\Desktop\Play Farmerama for Free, Click here.lnk
[2011/03/13 21:57:16 | 000,014,209 | —- | C] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer(2011)[FLAC].6236092.TPB.torrent
[2011/03/13 21:53:40 | 000,001,774 | —- | C] () – C:\Users\rachelle\Desktop\Click Here For Free Games.lnk
[2011/03/13 21:53:38 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Spin Palace Casino $1000 Free.lnk
[2011/03/13 21:53:38 | 000,001,780 | —- | C] () – C:\Users\rachelle\Desktop\Free Online Game!.lnk
[2011/03/13 21:49:12 | 000,014,209 | —- | C] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer.torrent
[2011/03/12 02:25:34 | 000,001,787 | —- | C] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/12 02:25:33 | 000,022,360 | —- | C] () – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/03/12 02:25:32 | 000,280,408 | —- | C] () – C:\Windows\SysNative\drivers\aswSP.sys
[2011/03/12 02:25:25 | 000,031,064 | —- | C] () – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/03/12 02:25:24 | 000,053,592 | —- | C] () – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/03/12 02:25:21 | 000,505,176 | —- | C] () – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/03/12 02:25:20 | 000,064,344 | —- | C] () – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/03/12 02:25:19 | 000,238,968 | —- | C] () – C:\Windows\SysNative\aswBoot.exe
[2011/03/12 01:36:56 | 000,000,958 | —- | C] () – C:\Users\rachelle\Desktop\PC Speed Maximizer.lnk
[2011/03/12 01:36:07 | 000,001,442 | —- | C] () – C:\Users\rachelle\Desktop\Play More I-play Games.lnk
[2011/03/12 01:36:02 | 000,001,871 | —- | C] () – C:\Users\rachelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Install_NSS.lnk
[2011/03/12 01:36:02 | 000,001,863 | —- | C] () – C:\Users\rachelle\Desktop\Install_NSS.lnk
[2011/03/12 01:31:57 | 000,000,350 | —- | C] () – C:\Windows\tasks\RegistryBooster.job
[2011/03/12 01:31:01 | 000,001,897 | —- | C] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/03/12 01:31:01 | 000,001,873 | —- | C] () – C:\Users\Public\Desktop\Uniblue RegistryBooster.lnk
[2011/03/12 01:30:24 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Click Here For Free Music.lnk
[2011/03/12 01:30:23 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Create Your Own Video Screensaver!.lnk
[2011/03/12 01:30:23 | 000,001,782 | —- | C] () – C:\Users\rachelle\Desktop\Be Creative on Facebook With Facepaint Layouts.lnk
[2011/03/12 01:28:59 | 000,001,911 | —- | C] () – C:\Users\Public\Desktop\Play My Games.lnk
[2011/03/12 01:28:59 | 000,000,151 | —- | C] () – C:\Users\Public\Desktop\More FREE games.url
[2011/03/12 01:28:57 | 000,000,064 | —- | C] () – C:\Windows\GPlrLanc.dat
[2011/03/10 00:25:03 | 000,011,434 | -HS- | C] () – C:\Users\rachelle\Documents\Folder.jpg
[2011/03/10 00:25:03 | 000,002,640 | -HS- | C] () – C:\Users\rachelle\Documents\AlbumArtSmall.jpg
[2011/03/10 00:24:21 | 011,504,820 | —- | C] () – C:\Users\rachelle\Documents\rapunzel.mp3
[2011/03/09 16:24:52 | 002,424,320 | —- | C] () – C:\Windows\SysNative\mstscax.dll
[2011/03/09 16:24:51 | 000,730,624 | —- | C] () – C:\Windows\SysNative\mstsc.exe
[2011/03/09 16:24:48 | 000,560,128 | —- | C] () – C:\Windows\SysNative\EncDec.dll
[2011/03/09 16:24:47 | 000,416,768 | —- | C] () – C:\Windows\SysNative\sbe.dll
[2011/03/09 16:24:47 | 000,226,816 | —- | C] () – C:\Windows\SysNative\mpg2splt.ax
[2011/03/09 16:24:46 | 000,210,944 | —- | C] () – C:\Windows\SysNative\sbeio.dll
[2011/02/25 03:01:47 | 000,002,048 | —- | C] () – C:\Windows\SysNative\winrsmgr.dll
[2011/02/25 03:01:45 | 000,013,312 | —- | C] () – C:\Windows\SysNative\wsmplpxy.dll
[2011/02/25 03:01:45 | 000,013,312 | —- | C] () – C:\Windows\SysNative\winrssrv.dll
[2011/02/25 03:01:13 | 000,053,760 | —- | C] () – C:\Windows\SysNative\pwrshplugin.dll
[2011/02/25 03:01:10 | 000,024,064 | —- | C] () – C:\Windows\SysNative\winrshost.exe
[2011/02/25 03:01:10 | 000,013,824 | —- | C] () – C:\Windows\SysNative\wsmprovhost.exe
[2011/02/25 03:01:09 | 000,051,200 | —- | C] () – C:\Windows\SysNative\winrs.exe
[2011/02/25 03:01:03 | 000,232,960 | —- | C] () – C:\Windows\SysNative\wecsvc.dll
[2011/02/25 03:01:03 | 000,113,152 | —- | C] () – C:\Windows\SysNative\wevtfwd.dll
[2011/02/25 03:01:03 | 000,113,152 | —- | C] () – C:\Windows\SysNative\wecutil.exe
[2011/02/25 03:01:03 | 000,084,992 | —- | C] () – C:\Windows\SysNative\wecapi.dll
[2011/02/25 03:01:03 | 000,054,272 | —- | C] () – C:\Windows\SysNative\WsmRes.dll
[2011/02/25 03:00:48 | 000,201,184 | —- | C] () – C:\Windows\SysWow64\winrm.vbs
[2011/02/25 03:00:48 | 000,201,184 | —- | C] () – C:\Windows\SysNative\winrm.vbs
[2011/02/25 03:00:48 | 000,004,675 | —- | C] () – C:\Windows\SysWow64\wsmanconfig_schema.xml
[2011/02/25 03:00:48 | 000,004,675 | —- | C] () – C:\Windows\SysNative\wsmanconfig_schema.xml
[2011/02/25 03:00:48 | 000,002,426 | —- | C] () – C:\Windows\SysWow64\WsmTxt.xsl
[2011/02/25 03:00:48 | 000,002,426 | —- | C] () – C:\Windows\SysNative\WsmTxt.xsl
[2011/02/25 03:00:45 | 000,310,272 | —- | C] () – C:\Windows\SysNative\WsmWmiPl.dll
[2011/02/25 03:00:45 | 000,180,736 | —- | C] () – C:\Windows\SysNative\WsmAuto.dll
[2011/02/25 03:00:44 | 000,370,688 | —- | C] () – C:\Windows\SysNative\winrscmd.dll
[2011/02/25 03:00:43 | 002,050,048 | —- | C] () – C:\Windows\SysNative\WsmSvc.dll
[2011/02/25 03:00:43 | 000,352,768 | —- | C] () – C:\Windows\SysNative\WSManMigrationPlugin.dll
[2011/02/25 03:00:43 | 000,348,672 | —- | C] () – C:\Windows\SysNative\WSManHTTPConfig.exe
[2011/02/16 18:13:39 | 000,001,696 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/02/16 18:13:35 | 000,126,312 | —- | C] () – C:\Windows\SysNative\GEARAspi64.dll
[2011/02/16 18:13:35 | 000,034,152 | —- | C] () – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2011/02/16 18:10:05 | 000,001,758 | —- | C] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2011/02/16 18:08:22 | 000,001,830 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011/02/14 03:27:49 | 000,301,568 | —- | C] () – C:\Windows\SysNative\shsvcs.dll
[2011/01/14 15:44:10 | 000,000,000 | —- | C] () – C:\Users\rachelle\AppData\Roaming\wklnhst.dat
[2010/08/25 23:17:09 | 000,005,120 | —- | C] () – C:\Users\rachelle\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/25 17:18:48 | 000,000,063 | —- | C] () – C:\Windows\wininit.ini
[2009/12/02 12:06:41 | 000,000,101 | —- | C] () – C:\Windows\Lexstat.ini
[2009/12/02 12:03:17 | 000,274,432 | —- | C] () – C:\Windows\SysWow64\LXBKinst.dll
[2009/12/02 12:03:16 | 000,413,696 | —- | C] () – C:\Windows\SysWow64\lxbkutil.dll
[2009/11/27 15:36:42 | 000,143,104 | —- | C] () – C:\Windows\SysWow64\guard32.dll
[2009/11/14 03:41:58 | 000,000,680 | —- | C] () – C:\Users\rachelle\AppData\Local\d3d9caps.dat
[2009/08/04 17:42:08 | 000,982,196 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2009/08/04 17:42:08 | 000,139,824 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/08/04 17:42:08 | 000,097,448 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[2009/08/04 17:42:07 | 000,417,344 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2009/08/04 16:03:20 | 000,000,075 | RHS- | C] () – C:\Windows\CT4CET.bin
[2009/08/04 15:38:53 | 000,000,012 | —- | C] () – C:\Windows\bthservsdp.dat
[2009/04/25 03:58:05 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009/04/25 03:58:04 | 000,106,605 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2008/01/21 02:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2008/01/21 02:49:49 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2006/11/02 12:37:14 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2006/11/02 12:24:17 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 12:18:17 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2006/11/02 09:47:54 | 000,043,131 | —- | C] () – C:\Windows\mib.bin

< End of report >

Results of screen317's Security Check version 0.99.9
Windows Vista (UAC is enabled)
Out of date service pack!!
Internet Explorer 7 Out of date!
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled!
COMODO Firewall Pro
WMI entry may not exist for antivirus; attempting automatic update.
```````````````````````````````
Anti-malware/Other Utilities Check:
Java™ 6 Update 13 (64-bit)
Out of date Java installed!
````````````````````````````````
Process Check:
objlist.exe by Laurent
Windows Defender MSASCui.exe
Comodo Firewall cmdagent.exe
Comodo Firewall cfp.exe
Windows Defender MSASCui.exe
system32 AvastSvc.exe -?-
AVAST Software Avast AvastUI.exe
``````````End of Log````````````

Conspire

Post #6March 14, 2011, 10:54 AM UTC

Hi,

Now this could be your problem : COMODO Firewall Pro and AVAST

Years ago Comodo was indeed a standalone firewall software until recently they added AV feature into their offerings which many people may or may not realize. Two AV on a single computer is never a good idea as they will fight for control over each other. You might want to try uninstall one of them and see how your computer performs.

===================================================

Please uninstall the following Programs using the Add/Remove Programs utility if they exist.
Ask Toolbar
NetAssistant

===================================================

1. All tools MUST be run from the executable. (.exe)
With Admin Rights (Right click, choose "Run as Administrator")

Run OTL.exe

Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

:OTL
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)

:Commands
[EMPTYFLASH]
[EMPTYTEMP]
[CLEARALLRESTOREPOINTS]

Then click the Run Fix button at the top
Let the program run unhindered, reboot when it is done
Then post Fix OTL log as well as a new OTL log by rerunning it after reboot without custom scans script and( don't check the boxes beside LOP Check or Purity this time )

===================================================

On your next reply please post :
OTL fix log
Fresh OTL log

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

radiant

Post #7March 14, 2011, 2:47 PM UTC

Dear conspire My Comodo firewall does not have an anti-virus program, I was careful to just download the firewall in order to avoid the clash with avast. There is another laptop in the house with the same two Comodo and Avast progs and it runs with no problem. Also my laptop has run ok for nearly two years with these two programs, so could you re-consider your view to uninstall before i go ahead. I noticed that my Avast registration had expired the other day and had therefore stopped its protecttion. It could have been like that for up to two weeks i gues….could it be that infection occured during that period? In the meantime, I will perform the instuctions that you gave Regards Rachelle

radiant

Post #8March 14, 2011, 3:24 PM UTC

Sorry I have attempted to run fix the above info that you required. Three attempts have been made….each attempt shows programm 'not responding' Please advise. R

Conspire

Post #9March 14, 2011, 4:01 PM UTC last edited March 14, 2011, 4:01 PM UTC

I want to double check if you had your security programs disabled and right click to select Run as Admin prior to running the tools?

You can skip the OTL fix part and carry on with the uninstallation of the toolbars. In the mean time, I need you to perform another check because I'm not seeing anything that would cause the sluggishness. But I will have another closer look on tomorrow.

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

===================================================

Malwarebytes' Anti-Malware
Download Malwarebytes' Anti-Malware here and save to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program. (Note to Vista users, please right-click and select Run as Administrator.)
At the end, be sure a checkmark is placed next to:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
Then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select Perform quick scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected.
When completed, a log will open in Notepad. Please copy and paste the log back into your next reply

Note:

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
Or via the Logs tab when Malwarebytes' Anti-Malware is started.

Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so. Failure to reboot will prevent MBAM from removing all the malware.

===================================================

ESET Online Scanner
I'd like us to scan your machine with ESET OnlineScan

Note: If you are using Windows Vista/7, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan
Click the [external image: Posted Image] button.
For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
- Double click on the [external image: Posted Image] icon on your desktop.
Check [external image: Posted Image]
Click the [external image: Posted Image] button.
Accept any security warnings from your browser.
Check [external image: Posted Image]
Make sure that the option "Remove found threats" is Unchecked
Push the Start button.
ESET will then download updates for itself, install itself, and begin
scanning your computer. Please be patient as this can take some time.
Look for report in C:\Program Files\ESET\ESET Online Scanner\log.txt. Include the contents of this report in your next reply.
Select Uninstall application on close check box and push [external image: Posted Image]

===================================================

On your next reply please post :
MBAM log
ESET report

Let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

radiant

Post #10March 15, 2011, 3:47 PM UTC

Copnspire
Have managed to do the OTL logs you required by disabling securities and running as admin.
Online scan was not pos because message came up as page unavailable .
The rest is below as requested.
Im happy to uninstall any programs tyhat you think can go.
Many thanks
Rachelle

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6065

Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000

15/03/2011 15:01:40
mbam-log-2011-03-15 (15-01-40).txt

Scan type: Quick scan
Objects scanned: 160785
Time elapsed: 5 minute(s), 48 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 1
Files Infected: 26

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1602F07D-8BF3-4C08-BDD6-DDDB1C48AEDC} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Registry Helper (Rogue.RegistryHelper) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
c:\program files (x86)\registry helper (Rogue.RegistryHelper) -> Quarantined and deleted successfully.

Files Infected:
c:\Users\rachelle\local settings\temporary internet files\Content.IE5\036NF9U7\clickpotatoinstaller[1].exe (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\Users\rachelle\local settings\temporary internet files\Content.IE5\1SLUOFNF\clickpotatoinstaller[1].exe (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\advisorletters.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\background.jpg (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\delete_invalid_entries_grey.jpg (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\errorfound.wav (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\header.gif (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\help.chm (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\iehandler.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\letter.htm (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\letter1.htm (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\letter2.htm (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\letter3.htm (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\letter4.htm (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\letter5.htm (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\logo.jpg (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\print_16.gif (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\registry helper screen saver setup.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\registryhelper.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\registryhelperbundle.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\registryhelperservice.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\registryhelpersetupcb.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\registryhelpersetuptr.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\registryhelperuninstaller.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\Starter.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.
c:\program files (x86)\registry helper\vbrun60sp5.exe (Rogue.RegistryHelper) -> Quarantined and deleted successfully.

All processes killed
========== OTL ==========
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
========== COMMANDS ==========

[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: rachelle
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: rachelle
->Temp folder emptied: 321802279 bytes
->Temporary Internet Files folder emptied: 236345551 bytes
->Java cache emptied: 27057503 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7408 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 558.00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.22.3 log created on 03152011_151139

Files\Folders moved on Reboot…
C:\Users\rachelle\AppData\Local\Temp\Low\~DF91B0.tmp moved successfully.
C:\Users\rachelle\AppData\Local\Temp\Low\~DFA4EA.tmp moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\rachelle\AppData\Roaming\Trusteer\Rapport\user\logs\koan.5956.log moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C\Users\rachelle\AppData\Roaming\Trusteer\Rapport\user\logs\koan.6888.log moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YIW6PQO5\adloader[1].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YIW6PQO5\like[3].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YIW6PQO5\LocalStorage[1].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YIW6PQO5\Messenger[1].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YIW6PQO5\xmlProxy[10].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YIW6PQO5\xmlProxy[3].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\YIW6PQO5\xmlProxy[9].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V79OE814\AdServeMsg[1].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V79OE814\google_co_uk[2].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\V79OE814\index[2].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1JG28J0Q\signin[1].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1JG28J0Q\xmlProxy[2].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1JG28J0Q\xmlProxy[5].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0FZTXG1E\default[2].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0FZTXG1E\iframe[1].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0FZTXG1E\InboxLight[2].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\0FZTXG1E\WebIMPop[1].htm moved successfully.
C:\Users\rachelle\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\A0AB7674-8D67-4F4D-B5E1-96FAEADFB79D.dat moved successfully.
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JKCOJK09\desktop.ini scheduled to be moved on reboot.
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EF75N9M7\desktop.ini scheduled to be moved on reboot.
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E29I8RLN\desktop.ini scheduled to be moved on reboot.
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C2YN33U7\desktop.ini scheduled to be moved on reboot.
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini scheduled to be moved on reboot.
File move failed. C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini scheduled to be moved on reboot.

Registry entries deleted on Reboot…

OTL logfile created on: 15/03/2011 15:22:26 - Run 2
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\rachelle\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 37.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 54.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218.20 Gb Total Space | 150.95 Gb Free Space | 69.18% Space Free | Partition Type: NTFS
Drive E: | 14.65 Gb Total Space | 6.98 Gb Free Space | 47.62% Space Free | Partition Type: NTFS
Unable to calculate disk information.

Computer Name: RACHELLE-PC | User Name: rachelle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
PRC - [2011/02/23 15:04:20 | 003,451,496 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011/02/23 15:04:19 | 000,042,184 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2011/01/21 14:19:38 | 000,025,984 | —- | M] (Uniblue Systems Limited) – C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe
PRC - [2011/01/05 19:02:48 | 000,821,048 | —- | M] (Trusteer Ltd.) – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
PRC - [2011/01/05 19:02:46 | 001,509,176 | —- | M] (Trusteer Ltd.) – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
PRC - [2010/11/24 12:09:30 | 000,173,328 | —- | M] (Avanquest Software) – C:\Program Files (x86)\PC Speed Maximizer\Startw3i.exe
PRC - [2010/11/23 11:10:52 | 000,205,584 | —- | M] (Avanquest Software) – C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe
PRC - [2010/08/28 13:56:44 | 000,202,256 | —- | M] (RealNetworks, Inc.) – C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
PRC - [2010/07/18 11:54:40 | 001,774,080 | —- | M] (Exent Technologies Ltd.) – C:\Program Files (x86)\Free Ride Games\GPlayer.exe
PRC - [2009/11/23 08:43:26 | 002,001,648 | —- | M] (SUPERAntiSpyware.com) – C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
PRC - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
PRC - [2009/02/05 02:26:38 | 000,128,232 | —- | M] (CyberLink Corp.) – C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009/01/09 18:49:08 | 000,405,639 | —- | M] (Creative Technology Ltd) – C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2008/11/18 00:55:58 | 000,014,376 | —- | M] (Broadcom Corporation.) – C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
PRC - [2008/11/09 20:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/05/07 22:41:14 | 000,354,840 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/05/07 22:41:12 | 000,178,712 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008/02/28 11:57:54 | 000,074,408 | —- | M] (Lexmark International, Inc.) – C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmgr.exe
PRC - [2008/02/28 11:57:36 | 000,058,024 | —- | M] (Lexmark International, Inc.) – C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmon.exe

========== Modules (SafeList) ==========

MOD - [2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
MOD - [2011/02/23 15:04:17 | 000,197,208 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\snxhk.dll
MOD - [2010/08/31 15:39:57 | 001,684,480 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll
MOD - [2009/11/27 15:38:11 | 000,249,592 | —- | M] (COMODO) – C:\Windows\SysWOW64\cssdll32.dll
MOD - [2009/11/27 15:36:42 | 000,143,104 | —- | M] () – C:\Windows\SysWOW64\guard32.dll
MOD - [2008/01/21 02:50:31 | 000,140,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\winsta.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/02/23 15:04:19 | 000,042,184 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\AVAST Software\Avast\AvastSvc.exe – (avast! Antivirus)
SRV:64bit: - [2009/11/27 15:36:41 | 000,690,944 | —- | M] () [Auto | Running] – C:\Program Files\Comodo\Firewall\cmdagent.exe – (cmdAgent)
SRV:64bit: - [2009/05/12 13:20:28 | 000,382,464 | —- | M] () [Auto | Running] – C:\Windows\SysNative\ykx64mpcoinst.dll – (yksvc)
SRV:64bit: - [2009/05/11 19:21:42 | 000,268,288 | —- | M] () [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe – (STacSV)
SRV:64bit: - [2009/05/11 19:21:08 | 000,089,600 | —- | M] () [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe – (AESTFilters)
SRV:64bit: - [2008/12/21 18:35:16 | 000,032,768 | —- | M] () [Auto | Running] – C:\Windows\SysNative\WLTRYSVC.EXE – (wltrysvc)
SRV:64bit: - [2008/02/19 09:12:32 | 000,565,928 | —- | M] () [Auto | Running] – C:\Windows\SysNative\lxbkcoms.exe – (lxbk_device)
SRV:64bit: - [2008/01/21 02:47:32 | 000,383,544 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2011/01/05 19:02:48 | 000,821,048 | —- | M] (Trusteer Ltd.) [Auto | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe – (RapportMgmtService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) [Auto | Running] – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe – (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter)
SRV - [2008/11/09 20:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)
SRV - [2008/07/27 18:03:13 | 000,069,632 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)
SRV - [2008/05/07 22:41:14 | 000,354,840 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe – (IAANTMON) Intel®
SRV - [2008/02/19 09:12:18 | 000,537,256 | —- | M] ( ) [Auto | Running] – C:\Windows\SysWow64\lxbkcoms.exe – (lxbk_device)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/02/23 14:55:05 | 000,064,344 | —- | M] () [File_System | Auto | Running] – C:\Windows\SysNative\drivers\aswMonFlt.sys – (aswMonFlt)
DRV:64bit: - [2011/01/05 19:03:26 | 000,062,448 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\Drivers\RapportKE64.sys – (RapportKE64)
DRV:64bit: - [2010/12/14 18:51:20 | 000,051,712 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\Drivers\usbaapl64.sys – (USBAAPL64)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys – (GEARAspiWDM)
DRV:64bit: - [2009/05/12 16:13:06 | 010,275,296 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\igdkmd64.sys – (igfx)
DRV:64bit: - [2009/05/12 13:20:28 | 000,406,016 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\yk60x64.sys – (yukonx64)
DRV:64bit: - [2009/05/11 19:22:00 | 000,477,696 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\stwrt64.sys – (STHDA)
DRV:64bit: - [2009/05/08 00:39:36 | 000,266,800 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\SynTP.sys – (SynTP)
DRV:64bit: - [2009/05/08 00:28:02 | 000,069,120 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\RTSTOR64.SYS – (RTSTOR)
DRV:64bit: - [2009/03/31 18:12:38 | 000,395,288 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iastor.sys – (iaStor)
DRV:64bit: - [2009/03/09 17:00:00 | 000,311,456 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\OA013Vid.sys – (OA013Vid)
DRV:64bit: - [2009/03/06 07:33:58 | 000,159,840 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\OA013Ufd.sys – (OA013Ufd)
DRV:64bit: - [2008/12/31 02:00:22 | 000,172,032 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\CtClsFlt.sys – (CtClsFlt)
DRV:64bit: - [2008/12/23 17:16:42 | 000,021,160 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\btwrchid.sys – (btwrchid)
DRV:64bit: - [2008/12/23 17:16:38 | 000,036,392 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\btwl2cap.sys – (btwl2cap)
DRV:64bit: - [2008/12/23 17:16:36 | 000,133,672 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwavdt.sys – (btwavdt)
DRV:64bit: - [2008/12/23 17:16:36 | 000,095,784 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwaudio.sys – (btwaudio)
DRV:64bit: - [2008/12/21 18:34:48 | 000,022,520 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\BCM42RLY.sys – (BCM42RLY)
DRV:64bit: - [2008/12/16 16:56:52 | 001,526,776 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\bcmwl664.sys – (BCM43XX)
DRV:64bit: - [2008/05/20 18:33:36 | 000,028,416 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\Drivers\RimUsb_AMD64.sys – (RimUsb)
DRV:64bit: - [2008/01/21 02:47:28 | 000,046,080 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\wpdusb.sys – (WpdUsb)
DRV:64bit: - [2008/01/21 02:46:55 | 000,317,952 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\e1e6032e.sys – (e1express) Intel®
DRV:64bit: - [2008/01/21 02:46:52 | 000,013,824 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\Dot4Scan.sys – (Dot4Scan)
DRV:64bit: - [2007/11/14 08:00:00 | 000,053,488 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\Drivers\PxHlpa64.sys – (PxHlpa64)
DRV:64bit: - [2006/11/02 07:48:50 | 002,488,320 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\atikmdag.sys – (R300)
DRV:64bit: - [2006/09/18 21:36:24 | 000,000,308 | —- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\Wbem\ntfs.mof – (Ntfs)
DRV - [2011/01/05 19:03:28 | 000,050,672 | —- | M] (Trusteer Ltd.) [Kernel | System | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys – (RapportEI64)
DRV - [2011/01/05 19:03:26 | 000,058,864 | —- | M] (Trusteer Ltd.) [Kernel | System | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys – (RapportPG64)
DRV - [2010/03/10 21:02:46 | 000,055,328 | —- | M] (Exent Technologies Ltd.) [Kernel | Auto | Running] – C:\Program Files (x86)\Free Ride Games\X5XSEx.sys – (X5XSEx)
DRV - [2009/11/23 08:43:30 | 000,009,968 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\sasdifsv.sys – (SASDIFSV)
DRV - [2009/11/23 08:43:30 | 000,007,408 | R— | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS – (SASENUM)
DRV - [2009/11/23 08:43:28 | 000,074,480 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS – (SASKUTIL)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/08/28 13:57:46 | 000,000,000 | —D | M]

O1 HOSTS File: ([2006/09/18 21:37:24 | 000,000,761 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (PriceGongBHO Class) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.1.0\PriceGongIE.dll (PriceGong)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Surf Canyon Search Engine Assistant) - {5AB7104A-B71F-49AD-9154-F7F8806AE848} - C:\Program Files (x86)\Surf Canyon\surfcanyon.dll (Surf Canyon Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4:64bit: - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Windows\SysNative\WLTRAY.exe ()
O4:64bit: - HKLM..\Run: [COMODO Firewall Pro] C:\Program Files\Comodo\Firewall\cfp.exe ()
O4:64bit: - HKLM..\Run: [COMODO SafeSurf] C:\Program Files\Comodo\SafeSurf\cssurf.exe (COMODO)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe ()
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe ()
O4:64bit: - HKLM..\Run: [lxbkbmgr.exe] C:\Program Files (x86)\Lexmark X1100 Series\lxbkbmgr.exe (Lexmark International, Inc.)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe ()
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Exetender] C:\Program Files (x86)\Free Ride Games\GPlayer.exe (Exent Technologies Ltd.)
O4 - HKCU..\Run: [PC Speed Maximizer] C:\Program Files (x86)\PC Speed Maximizer\SPMStarter.exe ()
O4 - HKCU..\Run: [RegistryBooster] C:\Program Files (x86)\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited)
O4 - HKCU..\Run: [SPMTray] C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe (Avanquest Software)
O4 - HKCU..\Run: [Startw3i] C:\Program Files (x86)\PC Speed Maximizer\Startw3i.exe (Avanquest Software)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [WMPNSCFG] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\guard64.dll) - C:\Windows\SysNative\guard64.dll ()
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\cssdll64.dll) - C:\Windows\SysNative\cssdll64.dll ()
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\guard32.dll) - C:\Windows\SysWOW64\guard32.dll ()
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\cssdll32.dll) - C:\Windows\SysWOW64\cssdll32.dll (COMODO)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll ()
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img27.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img27.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files (x86)\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/03/15 14:52:13 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Malwarebytes
[2011/03/15 14:51:51 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/03/15 14:51:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/03/15 14:51:50 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/03/15 14:51:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/03/15 14:49:43 | 007,734,208 | —- | C] (Malwarebytes Corporation ) – C:\Users\rachelle\Desktop\mbam-setup-1.50.1.1100.exe
[2011/03/14 15:15:46 | 000,000,000 | —D | C] – C:\_OTL
[2011/03/14 08:28:21 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
[2011/03/13 23:22:54 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalTorrent
[2011/03/13 21:57:29 | 000,000,000 | —D | C] – C:\Users\rachelle\Documents\My Downloads
[2011/03/12 14:38:27 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\rachelle\Desktop\HiJackThis.exe
[2011/03/12 02:25:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011/03/12 02:24:18 | 000,040,648 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2011/03/12 02:24:17 | 000,190,016 | —- | C] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/03/12 02:23:44 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2011/03/12 02:23:44 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2011/03/12 02:01:27 | 000,000,000 | —D | C] – C:\Users\rachelle\Desktop\Rachelle
[2011/03/12 01:42:04 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\RegistryKeys
[2011/03/12 01:42:04 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\PC Speed Maximizer
[2011/03/12 01:37:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar
[2011/03/12 01:37:31 | 000,000,000 | —D | C] – C:\ProgramData\GamesBar
[2011/03/12 01:37:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\GamesBar
[2011/03/12 01:36:59 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
[2011/03/12 01:36:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Oberon Media
[2011/03/12 01:36:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\Surf Canyon
[2011/03/12 01:36:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\PC Speed Maximizer
[2011/03/12 01:36:07 | 000,000,000 | —D | C] – C:\Program Files (x86)\Oberon Media
[2011/03/12 01:31:52 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Uniblue
[2011/03/12 01:31:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\File Type Assistant
[2011/03/12 01:31:05 | 000,000,000 | -H-D | C] – C:\ProgramData\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4}
[2011/03/12 01:30:55 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2011/03/12 01:30:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Uniblue
[2011/03/12 01:30:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\FinalTorrent
[2011/03/12 01:30:25 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Local\PackageAware
[2011/03/12 01:30:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\Free Offers from Freeze.com
[2011/03/12 01:29:25 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Local\Yahoo
[2011/03/12 01:28:49 | 000,000,000 | —D | C] – C:\ProgramData\Free Ride Games
[2011/03/12 01:28:35 | 000,053,314 | —- | C] (Exent Technologies Ltd.) – C:\Windows\ExentInfo.exe
[2011/03/12 01:28:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Free Ride Games
[2011/03/12 01:28:29 | 000,000,000 | —D | C] – C:\Remote Programs
[2011/03/12 01:27:01 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo!
[2011/03/12 01:26:40 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo! Companion
[2011/03/12 01:26:13 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Yahoo!
[2011/03/12 01:26:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\PriceGong
[2011/03/12 01:26:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Yahoo!
[2011/03/12 01:22:01 | 000,000,000 | —D | C] – C:\Users\rachelle\Desktop\ron sexsmith
[2011/03/09 16:24:51 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/03/09 16:24:51 | 000,677,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/03/09 16:24:47 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/03/09 16:24:47 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/03/09 16:24:47 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2011/03/09 16:24:46 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbeio.dll
[2011/02/25 03:06:12 | 000,000,000 | —D | C] – C:\Windows\SysWow64\WindowsPowerShell
[2011/02/25 03:06:02 | 000,000,000 | —D | C] – C:\Windows\SysNative\WindowsPowerShell
[2011/02/25 03:01:47 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrsmgr.dll
[2011/02/25 03:01:30 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsmplpxy.dll
[2011/02/25 03:01:30 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrssrv.dll
[2011/02/25 03:01:13 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pwrshplugin.dll
[2011/02/25 03:01:03 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wevtfwd.dll
[2011/02/25 03:01:03 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wecutil.exe
[2011/02/25 03:01:03 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wecapi.dll
[2011/02/25 03:01:03 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmRes.dll
[2011/02/25 03:01:03 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsmprovhost.exe
[2011/02/25 03:01:02 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrs.exe
[2011/02/25 03:01:02 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrshost.exe
[2011/02/25 03:00:45 | 000,252,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSManMigrationPlugin.dll
[2011/02/25 03:00:45 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSManHTTPConfig.exe
[2011/02/25 03:00:45 | 000,241,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrscmd.dll
[2011/02/25 03:00:45 | 000,214,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmWmiPl.dll
[2011/02/25 03:00:45 | 000,145,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmAuto.dll
[2011/02/16 18:14:31 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Apple Computer
[2011/02/16 18:13:39 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/02/16 18:13:35 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2011/02/16 18:13:34 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2011/02/16 18:12:52 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2011/02/16 18:10:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/02/16 18:09:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2011/02/16 18:09:50 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2011/02/16 18:08:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2011/02/16 18:05:00 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2011/02/16 18:02:43 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2011/02/16 18:02:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2011/02/16 18:02:16 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2011/02/16 18:02:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2009/12/02 12:03:17 | 000,413,696 | —- | C] ( ) – C:\Windows\SysWow64\lxbkinpa.dll
[2009/12/02 12:03:17 | 000,397,312 | —- | C] ( ) – C:\Windows\SysWow64\lxbkiesc.dll
[2009/12/02 12:03:16 | 001,224,704 | —- | C] ( ) – C:\Windows\SysWow64\lxbkserv.dll
[2009/12/02 12:03:16 | 000,991,232 | —- | C] ( ) – C:\Windows\SysWow64\lxbkusb1.dll
[2009/12/02 12:03:16 | 000,696,320 | —- | C] ( ) – C:\Windows\SysWow64\lxbkhbn3.dll
[2009/12/02 12:03:16 | 000,643,072 | —- | C] ( ) – C:\Windows\SysWow64\lxbkpmui.dll
[2009/12/02 12:03:16 | 000,585,728 | —- | C] ( ) – C:\Windows\SysWow64\lxbklmpm.dll
[2009/12/02 12:03:16 | 000,385,704 | —- | C] ( ) – C:\Windows\SysWow64\lxbkih.exe
[2009/12/02 12:03:16 | 000,180,904 | —- | C] ( ) – C:\Windows\SysWow64\lxbkppls.exe
[2009/12/02 12:03:16 | 000,163,840 | —- | C] ( ) – C:\Windows\SysWow64\lxbkprox.dll
[2009/12/02 12:03:16 | 000,094,208 | —- | C] ( ) – C:\Windows\SysWow64\lxbkpplc.dll
[2009/12/02 12:03:15 | 000,684,032 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcomc.dll
[2009/12/02 12:03:15 | 000,537,256 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcoms.exe
[2009/12/02 12:03:15 | 000,421,888 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcomm.dll
[2009/12/02 12:03:15 | 000,381,608 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcfg.exe

========== Files - Modified Within 30 Days ==========

[2011/03/15 15:21:42 | 000,000,680 | —- | M] () – C:\Users\rachelle\AppData\Local\d3d9caps.dat
[2011/03/15 15:18:12 | 000,000,350 | —- | M] () – C:\Windows\tasks\RegistryBooster.job
[2011/03/15 15:18:11 | 000,000,398 | —- | M] () – C:\Windows\tasks\FinalTorrent Update Checker.job
[2011/03/15 15:18:05 | 000,003,616 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/15 15:18:05 | 000,003,616 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/15 15:17:48 | 2105,921,536 | -HS- | M] () – C:\hiberfil.sys
[2011/03/15 15:16:51 | 000,000,012 | —- | M] () – C:\Windows\bthservsdp.dat
[2011/03/15 14:51:51 | 000,000,950 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/03/15 14:49:53 | 007,734,208 | —- | M] (Malwarebytes Corporation ) – C:\Users\rachelle\Desktop\mbam-setup-1.50.1.1100.exe
[2011/03/14 09:15:04 | 000,879,069 | —- | M] () – C:\Users\rachelle\Desktop\SecurityCheck.exe
[2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
[2011/03/13 23:22:54 | 000,000,920 | —- | M] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\FinalTorrent.lnk
[2011/03/13 23:22:54 | 000,000,896 | —- | M] () – C:\Users\rachelle\Desktop\FinalTorrent.lnk
[2011/03/13 23:22:43 | 000,001,798 | —- | M] () – C:\Users\rachelle\Desktop\Free ClipArt.lnk
[2011/03/13 23:22:43 | 000,001,794 | —- | M] () – C:\Users\rachelle\Desktop\Update Your Computer.lnk
[2011/03/13 23:22:43 | 000,001,782 | —- | M] () – C:\Users\rachelle\Desktop\Play Farmerama for Free, Click here.lnk
[2011/03/13 21:57:28 | 000,014,209 | —- | M] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer(2011)[FLAC].6236092.TPB.torrent
[2011/03/13 21:53:40 | 000,001,774 | —- | M] () – C:\Users\rachelle\Desktop\Click Here For Free Games.lnk
[2011/03/13 21:53:38 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Spin Palace Casino $1000 Free.lnk
[2011/03/13 21:53:38 | 000,001,780 | —- | M] () – C:\Users\rachelle\Desktop\Free Online Game!.lnk
[2011/03/13 21:49:27 | 000,014,209 | —- | M] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer.torrent
[2011/03/12 14:38:33 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\rachelle\Desktop\HiJackThis.exe
[2011/03/12 02:25:34 | 000,001,787 | —- | M] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/12 02:25:20 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2011/03/12 02:19:24 | 000,703,388 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/12 02:19:24 | 000,609,196 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/03/12 02:19:24 | 000,108,672 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/03/12 01:36:56 | 000,000,958 | —- | M] () – C:\Users\rachelle\Desktop\PC Speed Maximizer.lnk
[2011/03/12 01:36:07 | 000,001,442 | —- | M] () – C:\Users\rachelle\Desktop\Play More I-play Games.lnk
[2011/03/12 01:36:02 | 000,001,863 | —- | M] () – C:\Users\rachelle\Desktop\Install_NSS.lnk
[2011/03/12 01:31:44 | 000,001,897 | —- | M] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/03/12 01:31:44 | 000,001,873 | —- | M] () – C:\Users\Public\Desktop\Uniblue RegistryBooster.lnk
[2011/03/12 01:30:24 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Click Here For Free Music.lnk
[2011/03/12 01:30:23 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Create Your Own Video Screensaver!.lnk
[2011/03/12 01:30:23 | 000,001,782 | —- | M] () – C:\Users\rachelle\Desktop\Be Creative on Facebook With Facepaint Layouts.lnk
[2011/03/12 01:28:59 | 000,001,911 | —- | M] () – C:\Users\Public\Desktop\Play My Games.lnk
[2011/03/12 01:28:59 | 000,000,151 | —- | M] () – C:\Users\Public\Desktop\More FREE games.url
[2011/03/12 01:28:57 | 000,000,064 | —- | M] () – C:\Windows\GPlrLanc.dat
[2011/03/10 00:25:03 | 000,011,434 | -HS- | M] () – C:\Users\rachelle\Documents\Folder.jpg
[2011/03/10 00:25:03 | 000,002,640 | -HS- | M] () – C:\Users\rachelle\Documents\AlbumArtSmall.jpg
[2011/03/10 00:24:41 | 011,504,820 | —- | M] () – C:\Users\rachelle\Documents\rapunzel.mp3
[2011/02/23 15:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2011/02/23 15:04:17 | 000,190,016 | —- | M] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/02/23 15:04:07 | 000,238,968 | —- | M] () – C:\Windows\SysNative\aswBoot.exe
[2011/02/23 14:57:04 | 000,280,408 | —- | M] () – C:\Windows\SysNative\drivers\aswSP.sys
[2011/02/23 14:57:01 | 000,505,176 | —- | M] () – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/02/23 14:55:53 | 000,053,592 | —- | M] () – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/02/23 14:55:13 | 000,031,064 | —- | M] () – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/02/23 14:55:05 | 000,064,344 | —- | M] () – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/02/23 14:54:58 | 000,022,360 | —- | M] () – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/02/16 18:13:39 | 000,001,696 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/02/16 18:10:05 | 000,001,758 | —- | M] () – C:\Users\Public\Desktop\QuickTime Player.lnk

========== Files Created - No Company Name ==========

[2011/03/15 14:51:51 | 000,000,950 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/03/15 14:51:46 | 000,024,152 | —- | C] () – C:\Windows\SysNative\drivers\mbam.sys
[2011/03/14 09:14:54 | 000,879,069 | —- | C] () – C:\Users\rachelle\Desktop\SecurityCheck.exe
[2011/03/13 23:23:10 | 000,000,398 | —- | C] () – C:\Windows\tasks\FinalTorrent Update Checker.job
[2011/03/13 23:22:54 | 000,000,920 | —- | C] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\FinalTorrent.lnk
[2011/03/13 23:22:54 | 000,000,896 | —- | C] () – C:\Users\rachelle\Desktop\FinalTorrent.lnk
[2011/03/13 23:22:43 | 000,001,798 | —- | C] () – C:\Users\rachelle\Desktop\Free ClipArt.lnk
[2011/03/13 23:22:43 | 000,001,794 | —- | C] () – C:\Users\rachelle\Desktop\Update Your Computer.lnk
[2011/03/13 23:22:43 | 000,001,782 | —- | C] () – C:\Users\rachelle\Desktop\Play Farmerama for Free, Click here.lnk
[2011/03/13 21:57:16 | 000,014,209 | —- | C] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer(2011)[FLAC].6236092.TPB.torrent
[2011/03/13 21:53:40 | 000,001,774 | —- | C] () – C:\Users\rachelle\Desktop\Click Here For Free Games.lnk
[2011/03/13 21:53:38 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Spin Palace Casino $1000 Free.lnk
[2011/03/13 21:53:38 | 000,001,780 | —- | C] () – C:\Users\rachelle\Desktop\Free Online Game!.lnk
[2011/03/13 21:49:12 | 000,014,209 | —- | C] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer.torrent
[2011/03/12 02:25:34 | 000,001,787 | —- | C] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/12 02:25:33 | 000,022,360 | —- | C] () – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/03/12 02:25:32 | 000,280,408 | —- | C] () – C:\Windows\SysNative\drivers\aswSP.sys
[2011/03/12 02:25:25 | 000,031,064 | —- | C] () – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/03/12 02:25:24 | 000,053,592 | —- | C] () – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/03/12 02:25:21 | 000,505,176 | —- | C] () – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/03/12 02:25:20 | 000,064,344 | —- | C] () – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/03/12 02:25:19 | 000,238,968 | —- | C] () – C:\Windows\SysNative\aswBoot.exe
[2011/03/12 01:36:56 | 000,000,958 | —- | C] () – C:\Users\rachelle\Desktop\PC Speed Maximizer.lnk
[2011/03/12 01:36:07 | 000,001,442 | —- | C] () – C:\Users\rachelle\Desktop\Play More I-play Games.lnk
[2011/03/12 01:36:02 | 000,001,871 | —- | C] () – C:\Users\rachelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Install_NSS.lnk
[2011/03/12 01:36:02 | 000,001,863 | —- | C] () – C:\Users\rachelle\Desktop\Install_NSS.lnk
[2011/03/12 01:31:57 | 000,000,350 | —- | C] () – C:\Windows\tasks\RegistryBooster.job
[2011/03/12 01:31:01 | 000,001,897 | —- | C] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/03/12 01:31:01 | 000,001,873 | —- | C] () – C:\Users\Public\Desktop\Uniblue RegistryBooster.lnk
[2011/03/12 01:30:24 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Click Here For Free Music.lnk
[2011/03/12 01:30:23 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Create Your Own Video Screensaver!.lnk
[2011/03/12 01:30:23 | 000,001,782 | —- | C] () – C:\Users\rachelle\Desktop\Be Creative on Facebook With Facepaint Layouts.lnk
[2011/03/12 01:28:59 | 000,001,911 | —- | C] () – C:\Users\Public\Desktop\Play My Games.lnk
[2011/03/12 01:28:59 | 000,000,151 | —- | C] () – C:\Users\Public\Desktop\More FREE games.url
[2011/03/12 01:28:57 | 000,000,064 | —- | C] () – C:\Windows\GPlrLanc.dat
[2011/03/10 00:25:03 | 000,011,434 | -HS- | C] () – C:\Users\rachelle\Documents\Folder.jpg
[2011/03/10 00:25:03 | 000,002,640 | -HS- | C] () – C:\Users\rachelle\Documents\AlbumArtSmall.jpg
[2011/03/10 00:24:21 | 011,504,820 | —- | C] () – C:\Users\rachelle\Documents\rapunzel.mp3
[2011/03/09 16:24:52 | 002,424,320 | —- | C] () – C:\Windows\SysNative\mstscax.dll
[2011/03/09 16:24:51 | 000,730,624 | —- | C] () – C:\Windows\SysNative\mstsc.exe
[2011/03/09 16:24:48 | 000,560,128 | —- | C] () – C:\Windows\SysNative\EncDec.dll
[2011/03/09 16:24:47 | 000,416,768 | —- | C] () – C:\Windows\SysNative\sbe.dll
[2011/03/09 16:24:47 | 000,226,816 | —- | C] () – C:\Windows\SysNative\mpg2splt.ax
[2011/03/09 16:24:46 | 000,210,944 | —- | C] () – C:\Windows\SysNative\sbeio.dll
[2011/02/25 03:01:47 | 000,002,048 | —- | C] () – C:\Windows\SysNative\winrsmgr.dll
[2011/02/25 03:01:45 | 000,013,312 | —- | C] () – C:\Windows\SysNative\wsmplpxy.dll
[2011/02/25 03:01:45 | 000,013,312 | —- | C] () – C:\Windows\SysNative\winrssrv.dll
[2011/02/25 03:01:13 | 000,053,760 | —- | C] () – C:\Windows\SysNative\pwrshplugin.dll
[2011/02/25 03:01:10 | 000,024,064 | —- | C] () – C:\Windows\SysNative\winrshost.exe
[2011/02/25 03:01:10 | 000,013,824 | —- | C] () – C:\Windows\SysNative\wsmprovhost.exe
[2011/02/25 03:01:09 | 000,051,200 | —- | C] () – C:\Windows\SysNative\winrs.exe
[2011/02/25 03:01:03 | 000,232,960 | —- | C] () – C:\Windows\SysNative\wecsvc.dll
[2011/02/25 03:01:03 | 000,113,152 | —- | C] () – C:\Windows\SysNative\wevtfwd.dll
[2011/02/25 03:01:03 | 000,113,152 | —- | C] () – C:\Windows\SysNative\wecutil.exe
[2011/02/25 03:01:03 | 000,084,992 | —- | C] () – C:\Windows\SysNative\wecapi.dll
[2011/02/25 03:01:03 | 000,054,272 | —- | C] () – C:\Windows\SysNative\WsmRes.dll
[2011/02/25 03:00:48 | 000,201,184 | —- | C] () – C:\Windows\SysWow64\winrm.vbs
[2011/02/25 03:00:48 | 000,201,184 | —- | C] () – C:\Windows\SysNative\winrm.vbs
[2011/02/25 03:00:48 | 000,004,675 | —- | C] () – C:\Windows\SysWow64\wsmanconfig_schema.xml
[2011/02/25 03:00:48 | 000,004,675 | —- | C] () – C:\Windows\SysNative\wsmanconfig_schema.xml
[2011/02/25 03:00:48 | 000,002,426 | —- | C] () – C:\Windows\SysWow64\WsmTxt.xsl
[2011/02/25 03:00:48 | 000,002,426 | —- | C] () – C:\Windows\SysNative\WsmTxt.xsl
[2011/02/25 03:00:45 | 000,310,272 | —- | C] () – C:\Windows\SysNative\WsmWmiPl.dll
[2011/02/25 03:00:45 | 000,180,736 | —- | C] () – C:\Windows\SysNative\WsmAuto.dll
[2011/02/25 03:00:44 | 000,370,688 | —- | C] () – C:\Windows\SysNative\winrscmd.dll
[2011/02/25 03:00:43 | 002,050,048 | —- | C] () – C:\Windows\SysNative\WsmSvc.dll
[2011/02/25 03:00:43 | 000,352,768 | —- | C] () – C:\Windows\SysNative\WSManMigrationPlugin.dll
[2011/02/25 03:00:43 | 000,348,672 | —- | C] () – C:\Windows\SysNative\WSManHTTPConfig.exe
[2011/02/16 18:13:39 | 000,001,696 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/02/16 18:13:35 | 000,126,312 | —- | C] () – C:\Windows\SysNative\GEARAspi64.dll
[2011/02/16 18:13:35 | 000,034,152 | —- | C] () – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2011/02/16 18:10:05 | 000,001,758 | —- | C] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2011/02/16 18:08:22 | 000,001,830 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011/02/14 03:27:49 | 000,301,568 | —- | C] () – C:\Windows\SysNative\shsvcs.dll
[2011/01/14 15:44:10 | 000,000,000 | —- | C] () – C:\Users\rachelle\AppData\Roaming\wklnhst.dat
[2010/08/25 23:17:09 | 000,005,120 | —- | C] () – C:\Users\rachelle\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/25 17:18:48 | 000,000,063 | —- | C] () – C:\Windows\wininit.ini
[2009/12/02 12:06:41 | 000,000,101 | —- | C] () – C:\Windows\Lexstat.ini
[2009/12/02 12:03:17 | 000,274,432 | —- | C] () – C:\Windows\SysWow64\LXBKinst.dll
[2009/12/02 12:03:16 | 000,413,696 | —- | C] () – C:\Windows\SysWow64\lxbkutil.dll
[2009/11/27 15:36:42 | 000,143,104 | —- | C] () – C:\Windows\SysWow64\guard32.dll
[2009/11/14 03:41:58 | 000,000,680 | —- | C] () – C:\Users\rachelle\AppData\Local\d3d9caps.dat
[2009/08/04 17:42:08 | 000,982,196 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2009/08/04 17:42:08 | 000,139,824 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/08/04 17:42:08 | 000,097,448 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[2009/08/04 17:42:07 | 000,417,344 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2009/08/04 16:03:20 | 000,000,075 | RHS- | C] () – C:\Windows\CT4CET.bin
[2009/08/04 15:38:53 | 000,000,012 | —- | C] () – C:\Windows\bthservsdp.dat
[2009/04/25 03:58:05 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009/04/25 03:58:04 | 000,106,605 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2008/01/21 02:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2008/01/21 02:49:49 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2006/11/02 12:37:14 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2006/11/02 12:24:17 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 12:18:17 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2006/11/02 09:47:54 | 000,043,131 | —- | C] () – C:\Windows\mib.bin

< End of report >

OTL logfile created on: 15/03/2011 15:22:26 - Run 2
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\rachelle\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 37.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 54.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 218.20 Gb Total Space | 150.95 Gb Free Space | 69.18% Space Free | Partition Type: NTFS
Drive E: | 14.65 Gb Total Space | 6.98 Gb Free Space | 47.62% Space Free | Partition Type: NTFS
Unable to calculate disk information.

Computer Name: RACHELLE-PC | User Name: rachelle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
PRC - [2011/02/23 15:04:20 | 003,451,496 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011/02/23 15:04:19 | 000,042,184 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2011/01/21 14:19:38 | 000,025,984 | —- | M] (Uniblue Systems Limited) – C:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe
PRC - [2011/01/05 19:02:48 | 000,821,048 | —- | M] (Trusteer Ltd.) – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
PRC - [2011/01/05 19:02:46 | 001,509,176 | —- | M] (Trusteer Ltd.) – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
PRC - [2010/11/24 12:09:30 | 000,173,328 | —- | M] (Avanquest Software) – C:\Program Files (x86)\PC Speed Maximizer\Startw3i.exe
PRC - [2010/11/23 11:10:52 | 000,205,584 | —- | M] (Avanquest Software) – C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe
PRC - [2010/08/28 13:56:44 | 000,202,256 | —- | M] (RealNetworks, Inc.) – C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
PRC - [2010/07/18 11:54:40 | 001,774,080 | —- | M] (Exent Technologies Ltd.) – C:\Program Files (x86)\Free Ride Games\GPlayer.exe
PRC - [2009/11/23 08:43:26 | 002,001,648 | —- | M] (SUPERAntiSpyware.com) – C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe
PRC - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) – C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe
PRC - [2009/02/05 02:26:38 | 000,128,232 | —- | M] (CyberLink Corp.) – C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2009/01/09 18:49:08 | 000,405,639 | —- | M] (Creative Technology Ltd) – C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2008/11/18 00:55:58 | 000,014,376 | —- | M] (Broadcom Corporation.) – C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
PRC - [2008/11/09 20:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/05/07 22:41:14 | 000,354,840 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008/05/07 22:41:12 | 000,178,712 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008/02/28 11:57:54 | 000,074,408 | —- | M] (Lexmark International, Inc.) – C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmgr.exe
PRC - [2008/02/28 11:57:36 | 000,058,024 | —- | M] (Lexmark International, Inc.) – C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmon.exe

========== Modules (SafeList) ==========

MOD - [2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
MOD - [2011/02/23 15:04:17 | 000,197,208 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\snxhk.dll
MOD - [2010/08/31 15:39:57 | 001,684,480 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6001.18523_none_5cdd65e20837faf2\comctl32.dll
MOD - [2009/11/27 15:38:11 | 000,249,592 | —- | M] (COMODO) – C:\Windows\SysWOW64\cssdll32.dll
MOD - [2009/11/27 15:36:42 | 000,143,104 | —- | M] () – C:\Windows\SysWOW64\guard32.dll
MOD - [2008/01/21 02:50:31 | 000,140,800 | —- | M] (Microsoft Corporation) – C:\Windows\SysWOW64\winsta.dll

========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/02/23 15:04:19 | 000,042,184 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\AVAST Software\Avast\AvastSvc.exe – (avast! Antivirus)
SRV:64bit: - [2009/11/27 15:36:41 | 000,690,944 | —- | M] () [Auto | Running] – C:\Program Files\Comodo\Firewall\cmdagent.exe – (cmdAgent)
SRV:64bit: - [2009/05/12 13:20:28 | 000,382,464 | —- | M] () [Auto | Running] – C:\Windows\SysNative\ykx64mpcoinst.dll – (yksvc)
SRV:64bit: - [2009/05/11 19:21:42 | 000,268,288 | —- | M] () [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\STacSV64.exe – (STacSV)
SRV:64bit: - [2009/05/11 19:21:08 | 000,089,600 | —- | M] () [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe – (AESTFilters)
SRV:64bit: - [2008/12/21 18:35:16 | 000,032,768 | —- | M] () [Auto | Running] – C:\Windows\SysNative\WLTRYSVC.EXE – (wltrysvc)
SRV:64bit: - [2008/02/19 09:12:32 | 000,565,928 | —- | M] () [Auto | Running] – C:\Windows\SysNative\lxbkcoms.exe – (lxbk_device)
SRV:64bit: - [2008/01/21 02:47:32 | 000,383,544 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2011/01/05 19:02:48 | 000,821,048 | —- | M] (Trusteer Ltd.) [Auto | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe – (RapportMgmtService)
SRV - [2010/03/18 13:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2009/05/21 13:59:08 | 000,206,064 | —- | M] (SupportSoft, Inc.) [Auto | Running] – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe – (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter)
SRV - [2008/11/09 20:48:14 | 000,602,392 | —- | M] (Yahoo! Inc.) [Auto | Running] – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe – (YahooAUService)
SRV - [2008/07/27 18:03:13 | 000,069,632 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)
SRV - [2008/05/07 22:41:14 | 000,354,840 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe – (IAANTMON) Intel®
SRV - [2008/02/19 09:12:18 | 000,537,256 | —- | M] ( ) [Auto | Running] – C:\Windows\SysWow64\lxbkcoms.exe – (lxbk_device)

========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/02/23 14:55:05 | 000,064,344 | —- | M] () [File_System | Auto | Running] – C:\Windows\SysNative\drivers\aswMonFlt.sys – (aswMonFlt)
DRV:64bit: - [2011/01/05 19:03:26 | 000,062,448 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\Drivers\RapportKE64.sys – (RapportKE64)
DRV:64bit: - [2010/12/14 18:51:20 | 000,051,712 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\Drivers\usbaapl64.sys – (USBAAPL64)
DRV:64bit: - [2009/05/18 13:17:08 | 000,034,152 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys – (GEARAspiWDM)
DRV:64bit: - [2009/05/12 16:13:06 | 010,275,296 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\igdkmd64.sys – (igfx)
DRV:64bit: - [2009/05/12 13:20:28 | 000,406,016 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\yk60x64.sys – (yukonx64)
DRV:64bit: - [2009/05/11 19:22:00 | 000,477,696 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\stwrt64.sys – (STHDA)
DRV:64bit: - [2009/05/08 00:39:36 | 000,266,800 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\SynTP.sys – (SynTP)
DRV:64bit: - [2009/05/08 00:28:02 | 000,069,120 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\RTSTOR64.SYS – (RTSTOR)
DRV:64bit: - [2009/03/31 18:12:38 | 000,395,288 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iastor.sys – (iaStor)
DRV:64bit: - [2009/03/09 17:00:00 | 000,311,456 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\OA013Vid.sys – (OA013Vid)
DRV:64bit: - [2009/03/06 07:33:58 | 000,159,840 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\OA013Ufd.sys – (OA013Ufd)
DRV:64bit: - [2008/12/31 02:00:22 | 000,172,032 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\CtClsFlt.sys – (CtClsFlt)
DRV:64bit: - [2008/12/23 17:16:42 | 000,021,160 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\btwrchid.sys – (btwrchid)
DRV:64bit: - [2008/12/23 17:16:38 | 000,036,392 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\btwl2cap.sys – (btwl2cap)
DRV:64bit: - [2008/12/23 17:16:36 | 000,133,672 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwavdt.sys – (btwavdt)
DRV:64bit: - [2008/12/23 17:16:36 | 000,095,784 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\btwaudio.sys – (btwaudio)
DRV:64bit: - [2008/12/21 18:34:48 | 000,022,520 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\BCM42RLY.sys – (BCM42RLY)
DRV:64bit: - [2008/12/16 16:56:52 | 001,526,776 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\SysNative\DRIVERS\bcmwl664.sys – (BCM43XX)
DRV:64bit: - [2008/05/20 18:33:36 | 000,028,416 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\Drivers\RimUsb_AMD64.sys – (RimUsb)
DRV:64bit: - [2008/01/21 02:47:28 | 000,046,080 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\wpdusb.sys – (WpdUsb)
DRV:64bit: - [2008/01/21 02:46:55 | 000,317,952 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\e1e6032e.sys – (e1express) Intel®
DRV:64bit: - [2008/01/21 02:46:52 | 000,013,824 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\Dot4Scan.sys – (Dot4Scan)
DRV:64bit: - [2007/11/14 08:00:00 | 000,053,488 | —- | M] () [Kernel | Boot | Running] – C:\Windows\SysNative\Drivers\PxHlpa64.sys – (PxHlpa64)
DRV:64bit: - [2006/11/02 07:48:50 | 002,488,320 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\DRIVERS\atikmdag.sys – (R300)
DRV:64bit: - [2006/09/18 21:36:24 | 000,000,308 | —- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\Wbem\ntfs.mof – (Ntfs)
DRV - [2011/01/05 19:03:28 | 000,050,672 | —- | M] (Trusteer Ltd.) [Kernel | System | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys – (RapportEI64)
DRV - [2011/01/05 19:03:26 | 000,058,864 | —- | M] (Trusteer Ltd.) [Kernel | System | Running] – C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys – (RapportPG64)
DRV - [2010/03/10 21:02:46 | 000,055,328 | —- | M] (Exent Technologies Ltd.) [Kernel | Auto | Running] – C:\Program Files (x86)\Free Ride Games\X5XSEx.sys – (X5XSEx)
DRV - [2009/11/23 08:43:30 | 000,009,968 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\sasdifsv.sys – (SASDIFSV)
DRV - [2009/11/23 08:43:30 | 000,007,408 | R— | M] ( SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | On_Demand | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\SASENUM.SYS – (SASENUM)
DRV - [2009/11/23 08:43:28 | 000,074,480 | —- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] – C:\Program Files (x86)\SUPERAntiSpyware\SASKUTIL.SYS – (SASKUTIL)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com/USCON/2
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/08/28 13:57:46 | 000,000,000 | —D | M]

O1 HOSTS File: ([2006/09/18 21:37:24 | 000,000,761 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (PriceGongBHO Class) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.1.0\PriceGongIE.dll (PriceGong)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Surf Canyon Search Engine Assistant) - {5AB7104A-B71F-49AD-9154-F7F8806AE848} - C:\Program Files (x86)\Surf Canyon\surfcanyon.dll (Surf Canyon Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll (Google Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ()
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4:64bit: - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Windows\SysNative\WLTRAY.exe ()
O4:64bit: - HKLM..\Run: [COMODO Firewall Pro] C:\Program Files\Comodo\Firewall\cfp.exe ()
O4:64bit: - HKLM..\Run: [COMODO SafeSurf] C:\Program Files\Comodo\SafeSurf\cssurf.exe (COMODO)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe ()
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe ()
O4:64bit: - HKLM..\Run: [lxbkbmgr.exe] C:\Program Files (x86)\Lexmark X1100 Series\lxbkbmgr.exe (Lexmark International, Inc.)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe ()
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Exetender] C:\Program Files (x86)\Free Ride Games\GPlayer.exe (Exent Technologies Ltd.)
O4 - HKCU..\Run: [PC Speed Maximizer] C:\Program Files (x86)\PC Speed Maximizer\SPMStarter.exe ()
O4 - HKCU..\Run: [RegistryBooster] C:\Program Files (x86)\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited)
O4 - HKCU..\Run: [SPMTray] C:\Program Files (x86)\PC Speed Maximizer\SPMTray.exe (Avanquest Software)
O4 - HKCU..\Run: [Startw3i] C:\Program Files (x86)\PC Speed Maximizer\Startw3i.exe (Avanquest Software)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [WMPNSCFG] File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8:64bit: - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9:64bit: - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : Send to &Bluetooth Device… - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\guard64.dll) - C:\Windows\SysNative\guard64.dll ()
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\cssdll64.dll) - C:\Windows\SysNative\cssdll64.dll ()
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\guard32.dll) - C:\Windows\SysWOW64\guard32.dll ()
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\cssdll32.dll) - C:\Windows\SysWOW64\cssdll32.dll (COMODO)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll ()
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files (x86)\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img27.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img27.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files (x86)\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/03/15 14:52:13 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Malwarebytes
[2011/03/15 14:51:51 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011/03/15 14:51:51 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/03/15 14:51:50 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/03/15 14:51:46 | 000,000,000 | —D | C] – C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011/03/15 14:49:43 | 007,734,208 | —- | C] (Malwarebytes Corporation ) – C:\Users\rachelle\Desktop\mbam-setup-1.50.1.1100.exe
[2011/03/14 15:15:46 | 000,000,000 | —D | C] – C:\_OTL
[2011/03/14 08:28:21 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
[2011/03/13 23:22:54 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalTorrent
[2011/03/13 21:57:29 | 000,000,000 | —D | C] – C:\Users\rachelle\Documents\My Downloads
[2011/03/12 14:38:27 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\rachelle\Desktop\HiJackThis.exe
[2011/03/12 02:25:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011/03/12 02:24:18 | 000,040,648 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2011/03/12 02:24:17 | 000,190,016 | —- | C] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/03/12 02:23:44 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2011/03/12 02:23:44 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2011/03/12 02:01:27 | 000,000,000 | —D | C] – C:\Users\rachelle\Desktop\Rachelle
[2011/03/12 01:42:04 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\RegistryKeys
[2011/03/12 01:42:04 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\PC Speed Maximizer
[2011/03/12 01:37:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GamesBar
[2011/03/12 01:37:31 | 000,000,000 | —D | C] – C:\ProgramData\GamesBar
[2011/03/12 01:37:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\GamesBar
[2011/03/12 01:36:59 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
[2011/03/12 01:36:42 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Oberon Media
[2011/03/12 01:36:19 | 000,000,000 | —D | C] – C:\Program Files (x86)\Surf Canyon
[2011/03/12 01:36:14 | 000,000,000 | —D | C] – C:\Program Files (x86)\PC Speed Maximizer
[2011/03/12 01:36:07 | 000,000,000 | —D | C] – C:\Program Files (x86)\Oberon Media
[2011/03/12 01:31:52 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Uniblue
[2011/03/12 01:31:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\File Type Assistant
[2011/03/12 01:31:05 | 000,000,000 | -H-D | C] – C:\ProgramData\{DE8EABB5-1C85-4410-A68D-79BD8A4518F4}
[2011/03/12 01:30:55 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2011/03/12 01:30:55 | 000,000,000 | —D | C] – C:\Program Files (x86)\Uniblue
[2011/03/12 01:30:27 | 000,000,000 | —D | C] – C:\Program Files (x86)\FinalTorrent
[2011/03/12 01:30:25 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Local\PackageAware
[2011/03/12 01:30:23 | 000,000,000 | —D | C] – C:\Program Files (x86)\Free Offers from Freeze.com
[2011/03/12 01:29:25 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Local\Yahoo
[2011/03/12 01:28:49 | 000,000,000 | —D | C] – C:\ProgramData\Free Ride Games
[2011/03/12 01:28:35 | 000,053,314 | —- | C] (Exent Technologies Ltd.) – C:\Windows\ExentInfo.exe
[2011/03/12 01:28:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Free Ride Games
[2011/03/12 01:28:29 | 000,000,000 | —D | C] – C:\Remote Programs
[2011/03/12 01:27:01 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo!
[2011/03/12 01:26:40 | 000,000,000 | —D | C] – C:\ProgramData\Yahoo! Companion
[2011/03/12 01:26:13 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Yahoo!
[2011/03/12 01:26:10 | 000,000,000 | —D | C] – C:\Program Files (x86)\PriceGong
[2011/03/12 01:26:08 | 000,000,000 | —D | C] – C:\Program Files (x86)\Yahoo!
[2011/03/12 01:22:01 | 000,000,000 | —D | C] – C:\Users\rachelle\Desktop\ron sexsmith
[2011/03/09 16:24:51 | 002,067,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstscax.dll
[2011/03/09 16:24:51 | 000,677,888 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mstsc.exe
[2011/03/09 16:24:47 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\EncDec.dll
[2011/03/09 16:24:47 | 000,323,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbe.dll
[2011/03/09 16:24:47 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mpg2splt.ax
[2011/03/09 16:24:46 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\sbeio.dll
[2011/02/25 03:06:12 | 000,000,000 | —D | C] – C:\Windows\SysWow64\WindowsPowerShell
[2011/02/25 03:06:02 | 000,000,000 | —D | C] – C:\Windows\SysNative\WindowsPowerShell
[2011/02/25 03:01:47 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrsmgr.dll
[2011/02/25 03:01:30 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsmplpxy.dll
[2011/02/25 03:01:30 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrssrv.dll
[2011/02/25 03:01:13 | 000,041,472 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\pwrshplugin.dll
[2011/02/25 03:01:03 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wevtfwd.dll
[2011/02/25 03:01:03 | 000,079,872 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wecutil.exe
[2011/02/25 03:01:03 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wecapi.dll
[2011/02/25 03:01:03 | 000,054,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmRes.dll
[2011/02/25 03:01:03 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\wsmprovhost.exe
[2011/02/25 03:01:02 | 000,040,448 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrs.exe
[2011/02/25 03:01:02 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrshost.exe
[2011/02/25 03:00:45 | 000,252,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSManMigrationPlugin.dll
[2011/02/25 03:00:45 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WSManHTTPConfig.exe
[2011/02/25 03:00:45 | 000,241,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\winrscmd.dll
[2011/02/25 03:00:45 | 000,214,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmWmiPl.dll
[2011/02/25 03:00:45 | 000,145,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\WsmAuto.dll
[2011/02/16 18:14:31 | 000,000,000 | —D | C] – C:\Users\rachelle\AppData\Roaming\Apple Computer
[2011/02/16 18:13:39 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/02/16 18:13:35 | 000,107,368 | —- | C] (GEAR Software Inc.) – C:\Windows\SysWow64\GEARAspi.dll
[2011/02/16 18:13:34 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2011/02/16 18:12:52 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\Program Files (x86)\iTunes
[2011/02/16 18:12:51 | 000,000,000 | —D | C] – C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2011/02/16 18:10:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011/02/16 18:09:50 | 000,000,000 | —D | C] – C:\Program Files (x86)\QuickTime
[2011/02/16 18:09:50 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2011/02/16 18:08:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Apple Software Update
[2011/02/16 18:05:00 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2011/02/16 18:02:43 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2011/02/16 18:02:43 | 000,000,000 | —D | C] – C:\Program Files (x86)\Bonjour
[2011/02/16 18:02:16 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2011/02/16 18:02:16 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Apple
[2009/12/02 12:03:17 | 000,413,696 | —- | C] ( ) – C:\Windows\SysWow64\lxbkinpa.dll
[2009/12/02 12:03:17 | 000,397,312 | —- | C] ( ) – C:\Windows\SysWow64\lxbkiesc.dll
[2009/12/02 12:03:16 | 001,224,704 | —- | C] ( ) – C:\Windows\SysWow64\lxbkserv.dll
[2009/12/02 12:03:16 | 000,991,232 | —- | C] ( ) – C:\Windows\SysWow64\lxbkusb1.dll
[2009/12/02 12:03:16 | 000,696,320 | —- | C] ( ) – C:\Windows\SysWow64\lxbkhbn3.dll
[2009/12/02 12:03:16 | 000,643,072 | —- | C] ( ) – C:\Windows\SysWow64\lxbkpmui.dll
[2009/12/02 12:03:16 | 000,585,728 | —- | C] ( ) – C:\Windows\SysWow64\lxbklmpm.dll
[2009/12/02 12:03:16 | 000,385,704 | —- | C] ( ) – C:\Windows\SysWow64\lxbkih.exe
[2009/12/02 12:03:16 | 000,180,904 | —- | C] ( ) – C:\Windows\SysWow64\lxbkppls.exe
[2009/12/02 12:03:16 | 000,163,840 | —- | C] ( ) – C:\Windows\SysWow64\lxbkprox.dll
[2009/12/02 12:03:16 | 000,094,208 | —- | C] ( ) – C:\Windows\SysWow64\lxbkpplc.dll
[2009/12/02 12:03:15 | 000,684,032 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcomc.dll
[2009/12/02 12:03:15 | 000,537,256 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcoms.exe
[2009/12/02 12:03:15 | 000,421,888 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcomm.dll
[2009/12/02 12:03:15 | 000,381,608 | —- | C] ( ) – C:\Windows\SysWow64\lxbkcfg.exe

========== Files - Modified Within 30 Days ==========

[2011/03/15 15:21:42 | 000,000,680 | —- | M] () – C:\Users\rachelle\AppData\Local\d3d9caps.dat
[2011/03/15 15:18:12 | 000,000,350 | —- | M] () – C:\Windows\tasks\RegistryBooster.job
[2011/03/15 15:18:11 | 000,000,398 | —- | M] () – C:\Windows\tasks\FinalTorrent Update Checker.job
[2011/03/15 15:18:05 | 000,003,616 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/15 15:18:05 | 000,003,616 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/15 15:17:48 | 2105,921,536 | -HS- | M] () – C:\hiberfil.sys
[2011/03/15 15:16:51 | 000,000,012 | —- | M] () – C:\Windows\bthservsdp.dat
[2011/03/15 14:51:51 | 000,000,950 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/03/15 14:49:53 | 007,734,208 | —- | M] (Malwarebytes Corporation ) – C:\Users\rachelle\Desktop\mbam-setup-1.50.1.1100.exe
[2011/03/14 09:15:04 | 000,879,069 | —- | M] () – C:\Users\rachelle\Desktop\SecurityCheck.exe
[2011/03/14 08:28:26 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\rachelle\Desktop\OTL.exe
[2011/03/13 23:22:54 | 000,000,920 | —- | M] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\FinalTorrent.lnk
[2011/03/13 23:22:54 | 000,000,896 | —- | M] () – C:\Users\rachelle\Desktop\FinalTorrent.lnk
[2011/03/13 23:22:43 | 000,001,798 | —- | M] () – C:\Users\rachelle\Desktop\Free ClipArt.lnk
[2011/03/13 23:22:43 | 000,001,794 | —- | M] () – C:\Users\rachelle\Desktop\Update Your Computer.lnk
[2011/03/13 23:22:43 | 000,001,782 | —- | M] () – C:\Users\rachelle\Desktop\Play Farmerama for Free, Click here.lnk
[2011/03/13 21:57:28 | 000,014,209 | —- | M] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer(2011)[FLAC].6236092.TPB.torrent
[2011/03/13 21:53:40 | 000,001,774 | —- | M] () – C:\Users\rachelle\Desktop\Click Here For Free Games.lnk
[2011/03/13 21:53:38 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Spin Palace Casino $1000 Free.lnk
[2011/03/13 21:53:38 | 000,001,780 | —- | M] () – C:\Users\rachelle\Desktop\Free Online Game!.lnk
[2011/03/13 21:49:27 | 000,014,209 | —- | M] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer.torrent
[2011/03/12 14:38:33 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\rachelle\Desktop\HiJackThis.exe
[2011/03/12 02:25:34 | 000,001,787 | —- | M] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/12 02:25:20 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2011/03/12 02:19:24 | 000,703,388 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/03/12 02:19:24 | 000,609,196 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/03/12 02:19:24 | 000,108,672 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/03/12 01:36:56 | 000,000,958 | —- | M] () – C:\Users\rachelle\Desktop\PC Speed Maximizer.lnk
[2011/03/12 01:36:07 | 000,001,442 | —- | M] () – C:\Users\rachelle\Desktop\Play More I-play Games.lnk
[2011/03/12 01:36:02 | 000,001,863 | —- | M] () – C:\Users\rachelle\Desktop\Install_NSS.lnk
[2011/03/12 01:31:44 | 000,001,897 | —- | M] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/03/12 01:31:44 | 000,001,873 | —- | M] () – C:\Users\Public\Desktop\Uniblue RegistryBooster.lnk
[2011/03/12 01:30:24 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Click Here For Free Music.lnk
[2011/03/12 01:30:23 | 000,001,784 | —- | M] () – C:\Users\rachelle\Desktop\Create Your Own Video Screensaver!.lnk
[2011/03/12 01:30:23 | 000,001,782 | —- | M] () – C:\Users\rachelle\Desktop\Be Creative on Facebook With Facepaint Layouts.lnk
[2011/03/12 01:28:59 | 000,001,911 | —- | M] () – C:\Users\Public\Desktop\Play My Games.lnk
[2011/03/12 01:28:59 | 000,000,151 | —- | M] () – C:\Users\Public\Desktop\More FREE games.url
[2011/03/12 01:28:57 | 000,000,064 | —- | M] () – C:\Windows\GPlrLanc.dat
[2011/03/10 00:25:03 | 000,011,434 | -HS- | M] () – C:\Users\rachelle\Documents\Folder.jpg
[2011/03/10 00:25:03 | 000,002,640 | -HS- | M] () – C:\Users\rachelle\Documents\AlbumArtSmall.jpg
[2011/03/10 00:24:41 | 011,504,820 | —- | M] () – C:\Users\rachelle\Documents\rapunzel.mp3
[2011/02/23 15:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2011/02/23 15:04:17 | 000,190,016 | —- | M] (AVAST Software) – C:\Windows\SysWow64\aswBoot.exe
[2011/02/23 15:04:07 | 000,238,968 | —- | M] () – C:\Windows\SysNative\aswBoot.exe
[2011/02/23 14:57:04 | 000,280,408 | —- | M] () – C:\Windows\SysNative\drivers\aswSP.sys
[2011/02/23 14:57:01 | 000,505,176 | —- | M] () – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/02/23 14:55:53 | 000,053,592 | —- | M] () – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/02/23 14:55:13 | 000,031,064 | —- | M] () – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/02/23 14:55:05 | 000,064,344 | —- | M] () – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/02/23 14:54:58 | 000,022,360 | —- | M] () – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/02/16 18:13:39 | 000,001,696 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/02/16 18:10:05 | 000,001,758 | —- | M] () – C:\Users\Public\Desktop\QuickTime Player.lnk

========== Files Created - No Company Name ==========

[2011/03/15 14:51:51 | 000,000,950 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/03/15 14:51:46 | 000,024,152 | —- | C] () – C:\Windows\SysNative\drivers\mbam.sys
[2011/03/14 09:14:54 | 000,879,069 | —- | C] () – C:\Users\rachelle\Desktop\SecurityCheck.exe
[2011/03/13 23:23:10 | 000,000,398 | —- | C] () – C:\Windows\tasks\FinalTorrent Update Checker.job
[2011/03/13 23:22:54 | 000,000,920 | —- | C] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\FinalTorrent.lnk
[2011/03/13 23:22:54 | 000,000,896 | —- | C] () – C:\Users\rachelle\Desktop\FinalTorrent.lnk
[2011/03/13 23:22:43 | 000,001,798 | —- | C] () – C:\Users\rachelle\Desktop\Free ClipArt.lnk
[2011/03/13 23:22:43 | 000,001,794 | —- | C] () – C:\Users\rachelle\Desktop\Update Your Computer.lnk
[2011/03/13 23:22:43 | 000,001,782 | —- | C] () – C:\Users\rachelle\Desktop\Play Farmerama for Free, Click here.lnk
[2011/03/13 21:57:16 | 000,014,209 | —- | C] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer(2011)[FLAC].6236092.TPB.torrent
[2011/03/13 21:53:40 | 000,001,774 | —- | C] () – C:\Users\rachelle\Desktop\Click Here For Free Games.lnk
[2011/03/13 21:53:38 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Spin Palace Casino $1000 Free.lnk
[2011/03/13 21:53:38 | 000,001,780 | —- | C] () – C:\Users\rachelle\Desktop\Free Online Game!.lnk
[2011/03/13 21:49:12 | 000,014,209 | —- | C] () – C:\Users\rachelle\Desktop\Ron_Sexsmith…Long_Player_Late_Bloomer.torrent
[2011/03/12 02:25:34 | 000,001,787 | —- | C] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011/03/12 02:25:33 | 000,022,360 | —- | C] () – C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011/03/12 02:25:32 | 000,280,408 | —- | C] () – C:\Windows\SysNative\drivers\aswSP.sys
[2011/03/12 02:25:25 | 000,031,064 | —- | C] () – C:\Windows\SysNative\drivers\aswRdr.sys
[2011/03/12 02:25:24 | 000,053,592 | —- | C] () – C:\Windows\SysNative\drivers\aswTdi.sys
[2011/03/12 02:25:21 | 000,505,176 | —- | C] () – C:\Windows\SysNative\drivers\aswSnx.sys
[2011/03/12 02:25:20 | 000,064,344 | —- | C] () – C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011/03/12 02:25:19 | 000,238,968 | —- | C] () – C:\Windows\SysNative\aswBoot.exe
[2011/03/12 01:36:56 | 000,000,958 | —- | C] () – C:\Users\rachelle\Desktop\PC Speed Maximizer.lnk
[2011/03/12 01:36:07 | 000,001,442 | —- | C] () – C:\Users\rachelle\Desktop\Play More I-play Games.lnk
[2011/03/12 01:36:02 | 000,001,871 | —- | C] () – C:\Users\rachelle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Install_NSS.lnk
[2011/03/12 01:36:02 | 000,001,863 | —- | C] () – C:\Users\rachelle\Desktop\Install_NSS.lnk
[2011/03/12 01:31:57 | 000,000,350 | —- | C] () – C:\Windows\tasks\RegistryBooster.job
[2011/03/12 01:31:01 | 000,001,897 | —- | C] () – C:\Users\rachelle\Application Data\Microsoft\Internet Explorer\Quick Launch\Uniblue RegistryBooster.lnk
[2011/03/12 01:31:01 | 000,001,873 | —- | C] () – C:\Users\Public\Desktop\Uniblue RegistryBooster.lnk
[2011/03/12 01:30:24 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Click Here For Free Music.lnk
[2011/03/12 01:30:23 | 000,001,784 | —- | C] () – C:\Users\rachelle\Desktop\Create Your Own Video Screensaver!.lnk
[2011/03/12 01:30:23 | 000,001,782 | —- | C] () – C:\Users\rachelle\Desktop\Be Creative on Facebook With Facepaint Layouts.lnk
[2011/03/12 01:28:59 | 000,001,911 | —- | C] () – C:\Users\Public\Desktop\Play My Games.lnk
[2011/03/12 01:28:59 | 000,000,151 | —- | C] () – C:\Users\Public\Desktop\More FREE games.url
[2011/03/12 01:28:57 | 000,000,064 | —- | C] () – C:\Windows\GPlrLanc.dat
[2011/03/10 00:25:03 | 000,011,434 | -HS- | C] () – C:\Users\rachelle\Documents\Folder.jpg
[2011/03/10 00:25:03 | 000,002,640 | -HS- | C] () – C:\Users\rachelle\Documents\AlbumArtSmall.jpg
[2011/03/10 00:24:21 | 011,504,820 | —- | C] () – C:\Users\rachelle\Documents\rapunzel.mp3
[2011/03/09 16:24:52 | 002,424,320 | —- | C] () – C:\Windows\SysNative\mstscax.dll
[2011/03/09 16:24:51 | 000,730,624 | —- | C] () – C:\Windows\SysNative\mstsc.exe
[2011/03/09 16:24:48 | 000,560,128 | —- | C] () – C:\Windows\SysNative\EncDec.dll
[2011/03/09 16:24:47 | 000,416,768 | —- | C] () – C:\Windows\SysNative\sbe.dll
[2011/03/09 16:24:47 | 000,226,816 | —- | C] () – C:\Windows\SysNative\mpg2splt.ax
[2011/03/09 16:24:46 | 000,210,944 | —- | C] () – C:\Windows\SysNative\sbeio.dll
[2011/02/25 03:01:47 | 000,002,048 | —- | C] () – C:\Windows\SysNative\winrsmgr.dll
[2011/02/25 03:01:45 | 000,013,312 | —- | C] () – C:\Windows\SysNative\wsmplpxy.dll
[2011/02/25 03:01:45 | 000,013,312 | —- | C] () – C:\Windows\SysNative\winrssrv.dll
[2011/02/25 03:01:13 | 000,053,760 | —- | C] () – C:\Windows\SysNative\pwrshplugin.dll
[2011/02/25 03:01:10 | 000,024,064 | —- | C] () – C:\Windows\SysNative\winrshost.exe
[2011/02/25 03:01:10 | 000,013,824 | —- | C] () – C:\Windows\SysNative\wsmprovhost.exe
[2011/02/25 03:01:09 | 000,051,200 | —- | C] () – C:\Windows\SysNative\winrs.exe
[2011/02/25 03:01:03 | 000,232,960 | —- | C] () – C:\Windows\SysNative\wecsvc.dll
[2011/02/25 03:01:03 | 000,113,152 | —- | C] () – C:\Windows\SysNative\wevtfwd.dll
[2011/02/25 03:01:03 | 000,113,152 | —- | C] () – C:\Windows\SysNative\wecutil.exe
[2011/02/25 03:01:03 | 000,084,992 | —- | C] () – C:\Windows\SysNative\wecapi.dll
[2011/02/25 03:01:03 | 000,054,272 | —- | C] () – C:\Windows\SysNative\WsmRes.dll
[2011/02/25 03:00:48 | 000,201,184 | —- | C] () – C:\Windows\SysWow64\winrm.vbs
[2011/02/25 03:00:48 | 000,201,184 | —- | C] () – C:\Windows\SysNative\winrm.vbs
[2011/02/25 03:00:48 | 000,004,675 | —- | C] () – C:\Windows\SysWow64\wsmanconfig_schema.xml
[2011/02/25 03:00:48 | 000,004,675 | —- | C] () – C:\Windows\SysNative\wsmanconfig_schema.xml
[2011/02/25 03:00:48 | 000,002,426 | —- | C] () – C:\Windows\SysWow64\WsmTxt.xsl
[2011/02/25 03:00:48 | 000,002,426 | —- | C] () – C:\Windows\SysNative\WsmTxt.xsl
[2011/02/25 03:00:45 | 000,310,272 | —- | C] () – C:\Windows\SysNative\WsmWmiPl.dll
[2011/02/25 03:00:45 | 000,180,736 | —- | C] () – C:\Windows\SysNative\WsmAuto.dll
[2011/02/25 03:00:44 | 000,370,688 | —- | C] () – C:\Windows\SysNative\winrscmd.dll
[2011/02/25 03:00:43 | 002,050,048 | —- | C] () – C:\Windows\SysNative\WsmSvc.dll
[2011/02/25 03:00:43 | 000,352,768 | —- | C] () – C:\Windows\SysNative\WSManMigrationPlugin.dll
[2011/02/25 03:00:43 | 000,348,672 | —- | C] () – C:\Windows\SysNative\WSManHTTPConfig.exe
[2011/02/16 18:13:39 | 000,001,696 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/02/16 18:13:35 | 000,126,312 | —- | C] () – C:\Windows\SysNative\GEARAspi64.dll
[2011/02/16 18:13:35 | 000,034,152 | —- | C] () – C:\Windows\SysNative\drivers\GEARAspiWDM.sys
[2011/02/16 18:10:05 | 000,001,758 | —- | C] () – C:\Users\Public\Desktop\QuickTime Player.lnk
[2011/02/16 18:08:22 | 000,001,830 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011/02/14 03:27:49 | 000,301,568 | —- | C] () – C:\Windows\SysNative\shsvcs.dll
[2011/01/14 15:44:10 | 000,000,000 | —- | C] () – C:\Users\rachelle\AppData\Roaming\wklnhst.dat
[2010/08/25 23:17:09 | 000,005,120 | —- | C] () – C:\Users\rachelle\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/25 17:18:48 | 000,000,063 | —- | C] () – C:\Windows\wininit.ini
[2009/12/02 12:06:41 | 000,000,101 | —- | C] () – C:\Windows\Lexstat.ini
[2009/12/02 12:03:17 | 000,274,432 | —- | C] () – C:\Windows\SysWow64\LXBKinst.dll
[2009/12/02 12:03:16 | 000,413,696 | —- | C] () – C:\Windows\SysWow64\lxbkutil.dll
[2009/11/27 15:36:42 | 000,143,104 | —- | C] () – C:\Windows\SysWow64\guard32.dll
[2009/11/14 03:41:58 | 000,000,680 | —- | C] () – C:\Users\rachelle\AppData\Local\d3d9caps.dat
[2009/08/04 17:42:08 | 000,982,196 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2009/08/04 17:42:08 | 000,139,824 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/08/04 17:42:08 | 000,097,448 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[2009/08/04 17:42:07 | 000,417,344 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2009/08/04 16:03:20 | 000,000,075 | RHS- | C] () – C:\Windows\CT4CET.bin
[2009/08/04 15:38:53 | 000,000,012 | —- | C] () – C:\Windows\bthservsdp.dat
[2009/04/25 03:58:05 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2009/04/25 03:58:04 | 000,106,605 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2008/01/21 02:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2008/01/21 02:49:49 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2006/11/02 12:37:14 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2006/11/02 12:24:17 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 12:18:17 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2006/11/02 09:47:54 | 000,043,131 | —- | C] () – C:\Windows\mib.bin

< End of report >

Conspire

Post #11March 16, 2011, 5:00 AM UTC

Here is the new link : http://www.eset.com/home/products/online-scanner/

The instruction is same as above.

radiant

Post #12March 16, 2011, 9:20 AM UTC

Getting further with installation of Eset online scanner, but now pausing with comment:-cannot get update, is proxy configured. Unsure what to do. R

Conspire

Post #13March 17, 2011, 1:25 AM UTC

Hi,

Let's try this.

In I.E.

Check internet options settings.
Tools > Internet Options > Connections
LAN settings
Choose "automatically detect settings"
uncheck both proxy settings boxes

In FireFox

Click on Tools -> Options -> Advanced -> Network -> Setttings…
the No Proxy option should be selected

radiant

Post #14March 17, 2011, 3:30 PM UTC

Conspire Hve done the eset scan there was one threat found which was :' registry booster' …this has now been removed followed that up with a second eset scan which reported no threats found. What was the outcome of the previous logs that i sent ? Regards Rachell

Conspire

Post #15March 18, 2011, 2:44 AM UTC

Looking good to me, how is it running for you?

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version Java components and update.

Please download JavaRa and unzip it to your desktop.

***Please close any instances of Internet Explorer before continuing!***

Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
Accept any prompts.
Open JavaRa.exe again and select Search For Updates.
Select Update Using Sun Java's Website then click Search and click on the Open Webpage button. Download and install the latest Java Runtime Environment (JRE) version for your computer.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Suspected VIRUS, Memory delay - sluggish performance

✨ Ask AI

Ask AI