Thank you so much for your reply!
I have the results of the scans as follows:
aswMBR version 0.9.4 Copyright© 2011 AVAST Software
Run date: 2011-03-26 11:47:48
—————————–
11:47:48.380 OS Version: Windows 6.0.6002 Service Pack 2
11:47:48.380 Number of processors: 2 586 0xF0D
11:47:48.380 ComputerName: LORRAINE-PC UserName: lorraine
11:48:40.681 Initialize success
11:48:59.415 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-0
11:48:59.415 Disk 0 Vendor: TOSHIBA_ LB01 Size: 238475MB BusType: 3
11:48:59.477 Disk 0 MBR read successfully
11:48:59.477 Disk 0 MBR scan
11:48:59.477 Disk 0 scanning sectors +488396800
11:48:59.540 Disk 0 scanning C:\Windows\system32\drivers
11:49:11.677 Service scanning
11:49:13.112 Disk 0 trace - called modules:
11:49:13.127 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll iaStor.sys
11:49:13.127 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85b831a8]
11:49:13.127 3 CLASSPNP.SYS[881138b3] -> nt!IofCallDriver -> [0x84c67e80]
11:49:13.127 5 acpi.sys[8069b6bc] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-0[0x84c1e028]
11:49:13.143 Scan finished successfully
__________________________
OTL logfile created on: 3/26/2011 11:52:56 AM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\lorraine\Desktop
Windows Vista Business Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 39.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 70.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 231.42 Gb Total Space | 166.68 Gb Free Space | 72.02% Space Free | Partition Type: NTFS
Drive E: | 7.46 Gb Total Space | 6.85 Gb Free Space | 91.88% Space Free | Partition Type: FAT32
Computer Name: LORRAINE-PC | User Name: lorraine | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\lorraine\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\rpcnetp.exe ()
PRC - C:\Program Files\CyberDefender\Registry Scanner\CDregclean.exe (CyberDefender)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Program Files\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files\Brother\Brmfcmon\BrMfimon.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
PRC - C:\Program Files\TrueSuite Access Manager\FpNotifier.exe (AuthenTec, Inc)
PRC - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe (TOSHIBA Corporation)
PRC - C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
PRC - C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe ()
PRC - C:\Program Files\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe (CyberLink Corp.)
PRC - C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe (TOSHIBA Corporation)
PRC - C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Windows\System32\TAMSvr.exe (AuthenTec Inc.)
PRC - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TrueSuite Access Manager\usbnotify.exe ()
PRC - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (O2Micro International)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
========== Modules (SafeList) ==========
MOD - C:\Users\lorraine\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\msshsq.dll (Microsoft Corporation)
MOD - C:\Windows\System32\duser.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dbghelp.dll (Microsoft Corporation)
MOD - C:\Program Files\TrueSuite Access Manager\IconOvrly.dll (Arachnoid Biometrics Identification Group Corp.)
========== Win32 Services (SafeList) ==========
SRV - (rpcnetp) – C:\Windows\System32\rpcnetp.dll ()
SRV - (GamesAppService) – C:\Program Files\WildTangent Games\App\GamesAppService.exe (WildTangent, Inc.)
SRV - (iWinTrusted) – C:\Program Files\iWin Games\iWinTrusted.exe (iWin Inc.)
SRV - (getPlusHelper) getPlus® – C:\Program Files\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (Symantec Core LC) – C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (LiveUpdate Notice Service) – C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
SRV - (TNaviSrv) – C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe (TOSHIBA Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (WcesComm) – C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) – C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (TosCoSrv) – C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
SRV - (ConfigFree Service) – C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
SRV - (TOSHIBA SMART Log Service) – C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe (TOSHIBA Corporation)
SRV - (TODDSrv) – C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (Swupdtmr) – c:\TOSHIBA\IVP\swupdate\swupdtmr.exe ()
SRV - (Authentec memory manager) – C:\Windows\System32\TAMSvr.exe (AuthenTec Inc.)
SRV - (TOSHIBA Bluetooth Service) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (TOSHIBA CORPORATION)
SRV - (LiveUpdate) – C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE (Symantec Corporation)
SRV - (o2flash) – C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (O2Micro International)
SRV - (pinger) – C:\TOSHIBA\IVP\ISM\pinger.exe ()
SRV - (comHost) – C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe (Symantec Corporation)
SRV - (LiveUpdate Notice Ex) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (CLTNetCnService) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (UleadBurningHelper) – C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
========== Driver Services (SafeList) ==========
DRV - (NEOFLTR_650_15991) Juniper Networks TDI Filter Driver (NEOFLTR_650_15991) – C:\Windows\System32\drivers\NEOFLTR_650_15991.SYS (Juniper Networks)
DRV - (X4HSEx) – C:\Program Files\Free Ride Games\X4HSEx.sys (Exent Technologies Ltd.)
DRV - (SymEvent) – C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (IDSvix86) – C:\ProgramData\Symantec\Definitions\SymcData\idsdefs\20090415.001\IDSvix86.sys (Symantec Corporation)
DRV - (AlfaFF) – C:\Windows\system32\Drivers\AlfaFF.sys (Alfa Corporation)
DRV - (CnxtHdAudAddService) – C:\Windows\System32\drivers\CHDART.sys (Conexant Systems Inc.)
DRV - (tos_sps32) – C:\Windows\system32\DRIVERS\tos_sps32.sys (TOSHIBA Corporation)
DRV - (NETw3v32) Intel® – C:\Windows\System32\drivers\NETw3v32.sys (Intel Corporation)
DRV - (O2MDRDR) – C:\Windows\System32\drivers\o2media.sys (O2Micro )
DRV - (UVCFTR) – C:\Windows\System32\drivers\UVCFTR_S.SYS (Chicony Electronics Co., Ltd.)
DRV - (SRTSPL) – C:\Windows\System32\drivers\srtspl.sys (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\System32\drivers\srtsp.sys (Symantec Corporation)
DRV - (SRTSPX) – C:\Windows\System32\drivers\srtspx.sys (Symantec Corporation)
DRV - (TVALZ) – C:\Windows\system32\DRIVERS\TVALZ_O.SYS (TOSHIBA Corporation)
DRV - (XAudio) – C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (NETw4v32) Intel® – C:\Windows\System32\drivers\NETw4v32.sys (Intel Corporation)
DRV - (ATSWPDRV) AuthenTec TruePrint USB Driver (SwipeSensor) – C:\Windows\System32\drivers\atswpdrv.sys (AuthenTec, Inc.)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (QIOMem) – C:\Windows\System32\drivers\QIOMem.sys (TOSHIBA)
DRV - (SYMTDI) – C:\Windows\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMFW) – C:\Windows\System32\Drivers\SYMFW.SYS (Symantec Corporation)
DRV - (SYMIDS) – C:\Windows\System32\Drivers\SYMIDS.SYS (Symantec Corporation)
DRV - (SYMNDISV) – C:\Windows\System32\Drivers\SYMNDISV.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\Windows\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SYMDNS) – C:\Windows\System32\Drivers\SYMDNS.SYS (Symantec Corporation)
DRV - (KR10I) – C:\Windows\system32\drivers\kr10i.sys (TOSHIBA CORPORATION)
DRV - (KR10N) – C:\Windows\system32\drivers\kr10n.sys (TOSHIBA CORPORATION)
DRV - (tosrfec) – C:\Windows\System32\drivers\tosrfec.sys (TOSHIBA Corporation)
DRV - (tdcmdpst) – C:\Windows\System32\drivers\tdcmdpst.sys (TOSHIBA Corporation.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshibadirect.com/dpdstart
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = [Binary data over 100 bytes]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.toshibadirect.com/dpdstart
IE - HKLM\..\URLSearchHook: {ac417ce4-146b-4c18-a1ca-a2f609af2f9e} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1189411615-3114965565-1695826520-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshibadirect.com/dpdstart
IE - HKU\S-1-5-21-1189411615-3114965565-1695826520-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.google.com
IE - HKU\S-1-5-21-1189411615-3114965565-1695826520-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.toshibadirect.com/dpdstart
IE - HKU\S-1-5-21-1189411615-3114965565-1695826520-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
O1 HOSTS File: ([2011/03/25 15:36:25 | 000,000,734 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1189411615-3114965565-1695826520-1000\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - File not found
O4 - HKLM..\Run: [Camera Assistant Software] C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe (Chicony)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [CLMLServer] C:\Program Files\CyberLink\PowerCinema for TOSHIBA\Kernel\CLML\CLMLSvc.exe (CyberLink)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [FingerPrintNotifer] C:\Program Files\TrueSuite Access Manager\FpNotifier.exe (AuthenTec, Inc)
O4 - HKLM..\Run: [HSON] C:\Program Files\Toshiba\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [ITSecMng] C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe ( TOSHIBA CORPORATION)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [PCMAgent] C:\Program Files\CyberLink\PowerCinema for TOSHIBA\PCMAgent.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\Toshiba\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\Toshiba\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [UsbMonitor] C:\Program Files\TrueSuite Access Manager\usbnotify.exe ()
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Exetender] C:\Program Files\Free Ride Games\GPlayer.exe (Exent Technologies Ltd.)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-1189411615-3114965565-1695826520-1000..\Run: [TOSCDSPD] C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\S-1-5-21-1189411615-3114965565-1695826520-1000\..Trusted Domains: localhost ([]http in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\lorraine\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\lorraine\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{7ebb5bf0-5710-11e0-b99f-001e6867fc95}\Shell - "" = AutoRun
O33 - MountPoints2\{7ebb5bf0-5710-11e0-b99f-001e6867fc95}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\{7fa5ab56-ede7-11df-aba2-001e6867fc95}\Shell\Auto\command - "" = E:\launcher.exe
O33 - MountPoints2\{7fa5ab56-ede7-11df-aba2-001e6867fc95}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\launcher.exe
O33 - MountPoints2\{9f18691e-fb99-11dd-a949-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{9f18691e-fb99-11dd-a949-806e6f6e6963}\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O33 - MountPoints2\{9f18691f-fb99-11dd-a949-806e6f6e6963}\Shell\1\Command - "" = .\tmp.exe
O33 - MountPoints2\{9f18691f-fb99-11dd-a949-806e6f6e6963}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL .\tmp.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\LaunchU3.exe -a
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfPf - Driver
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 10.4
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 10.4
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
========== Files/Folders - Created Within 30 Days ==========
[2011/03/26 11:50:36 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\lorraine\Desktop\OTL.exe
[2011/03/25 18:08:36 | 000,000,000 | —D | C] – C:\Windows\System32\eu-ES
[2011/03/25 18:08:36 | 000,000,000 | —D | C] – C:\Windows\System32\ca-ES
[2011/03/25 18:08:35 | 000,000,000 | —D | C] – C:\Windows\System32\vi-VN
[2011/03/25 16:20:37 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Users\lorraine\Desktop\HijackThis.exe
[2011/03/25 15:52:38 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2011/03/25 15:52:38 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/03/25 15:52:34 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2011/03/25 15:52:34 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/03/25 15:24:24 | 000,000,000 | —D | C] – C:\Program Files\Trend Micro
[2011/03/25 15:08:22 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\Malwarebytes
[2011/03/25 15:08:17 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/03/25 15:04:09 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\U3
[2011/03/16 21:09:41 | 000,000,000 | —D | C] – C:\Program Files\ConduitEngine
[2011/03/07 14:22:40 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Serpent of Isis - Your Journey Continues
[2011/03/07 14:22:40 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Serpent of Isis - Your Journey Continues
[2011/03/07 14:22:40 | 000,000,000 | —D | C] – C:\Program Files\Serpent of Isis - Your Journey Continues
[2011/03/01 14:59:28 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\Fugazo
[2011/02/27 21:38:49 | 000,000,000 | —D | C] – C:\ProgramData\SugarGames
[2011/02/27 20:56:07 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wedding Salon
[2011/02/27 20:56:07 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wedding Salon
[2011/02/27 20:56:07 | 000,000,000 | —D | C] – C:\Program Files\Wedding Salon
[2011/02/27 20:34:45 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fiction Fixers - Adventures in Wonderland
[2011/02/27 20:34:45 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fiction Fixers - Adventures in Wonderland
[2011/02/27 20:34:45 | 000,000,000 | —D | C] – C:\Program Files\Fiction Fixers - Adventures in Wonderland
[2011/02/27 19:42:21 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Otherside - Realm of Eons
[2011/02/27 19:42:21 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Otherside - Realm of Eons
[2011/02/27 19:42:21 | 000,000,000 | —D | C] – C:\Program Files\The Otherside - Realm of Eons
[2011/02/27 19:23:57 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\RegistryKeys
[2011/02/27 19:23:57 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\PC Speed Maximizer
[2011/02/27 19:13:33 | 000,000,000 | —D | C] – C:\ProgramData\Farm Frenzy
[2011/02/27 19:07:00 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Farm Frenzy
[2011/02/27 19:07:00 | 000,000,000 | —D | C] – C:\Program Files\Farm Frenzy
[2011/02/27 19:07:00 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Farm Frenzy
[2011/02/27 19:03:32 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Speed Maximizer
[2011/02/27 19:03:30 | 000,000,000 | —D | C] – C:\Program Files\PC Speed Maximizer
[2011/02/27 19:03:03 | 000,000,000 | —D | C] – C:\Program Files\Surf Canyon
[2011/02/27 19:02:58 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Winferno
[2011/02/27 18:39:03 | 000,000,000 | —D | C] – C:\Windows\System32\WindowsPowerShell
[2011/02/26 17:39:33 | 000,000,000 | —D | C] – C:\Users\lorraine\AppData\Roaming\Dekovir
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/03/26 11:52:03 | 000,604,502 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/03/26 11:52:03 | 000,104,170 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/03/26 11:47:00 | 000,000,886 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/03/26 11:45:22 | 000,000,434 | —- | M] () – C:\Windows\tasks\RegPowerClean.job
[2011/03/26 11:45:21 | 000,000,420 | —- | M] () – C:\Windows\tasks\RPCReminder.job
[2011/03/26 11:45:21 | 000,000,416 | —- | M] () – C:\Windows\tasks\PCConfidential.job
[2011/03/26 11:45:20 | 000,000,882 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/03/26 11:45:03 | 000,017,408 | —- | M] () – C:\Windows\System32\rpcnetp.dll
[2011/03/26 11:44:57 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/26 11:44:57 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/26 11:44:44 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/03/26 11:41:32 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\lorraine\Desktop\OTL.exe
[2011/03/25 19:24:50 | 000,006,540 | —- | M] () – C:\Users\lorraine\AppData\Local\d3d9caps.dat
[2011/03/25 19:23:13 | 000,000,428 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{BC8E2FBD-449D-4311-ABB5-365FF961D66A}.job
[2011/03/25 19:15:12 | 000,017,408 | —- | M] () – C:\Windows\System32\rpcnetp.exe
[2011/03/25 18:13:24 | 000,397,760 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/03/25 18:00:01 | 000,000,414 | —- | M] () – C:\Windows\tasks\Norton Security Scan for lorraine.job
[2011/03/25 16:05:32 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Users\lorraine\Desktop\HijackThis.exe
[2011/03/25 15:36:25 | 000,000,734 | —- | M] () – C:\Windows\System32\drivers\etc\hosts
[2011/03/20 16:36:38 | 000,044,544 | —- | M] (Absolute Software Corp.) – C:\Windows\System32\agremove.exe
[2011/03/07 14:33:22 | 000,001,951 | —- | M] () – C:\Users\Public\Desktop\Play Serpent of Isis - Your Journey Continues.lnk
[2011/03/07 14:33:22 | 000,001,246 | —- | M] () – C:\Users\Public\Desktop\More Great Games.lnk
[2011/03/03 18:02:52 | 000,001,505 | —- | M] () – C:\Users\lorraine\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Manager.lnk
[2011/03/03 18:02:52 | 000,001,481 | —- | M] () – C:\Users\Public\Desktop\Game Manager.lnk
[2011/02/27 20:56:36 | 000,001,704 | —- | M] () – C:\Users\Public\Desktop\Play Wedding Salon.lnk
[2011/02/27 20:36:24 | 000,002,010 | —- | M] () – C:\Users\Public\Desktop\Play Fiction Fixers - Adventures in Wonderland.lnk
[2011/02/27 19:43:37 | 000,001,866 | —- | M] () – C:\Users\Public\Desktop\Play The Otherside - Realm of Eons.lnk
[2011/02/27 19:07:00 | 000,001,715 | —- | M] () – C:\Users\lorraine\Desktop\Farm Frenzy.lnk
[2011/02/27 19:07:00 | 000,001,697 | —- | M] () – C:\Users\lorraine\Desktop\More Free Games.lnk
[2011/02/27 19:03:01 | 000,001,005 | —- | M] () – C:\Users\lorraine\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Confidential.lnk
[2011/02/27 18:47:48 | 000,000,225 | —- | M] () – C:\Users\Public\Desktop\More Great Games.url
[2011/02/26 17:39:08 | 000,000,826 | —- | M] () – C:\Users\lorraine\Desktop\Hidden Object Crosswords.lnk
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/03/25 19:23:13 | 000,000,428 | -H– | C] () – C:\Windows\tasks\User_Feed_Synchronization-{BC8E2FBD-449D-4311-ABB5-365FF961D66A}.job
[2011/03/25 14:25:22 | 000,017,408 | —- | C] () – C:\Windows\System32\rpcnetp.dll
[2011/03/25 14:25:04 | 000,017,408 | —- | C] () – C:\Windows\System32\rpcnetp.exe
[2011/03/07 14:33:22 | 000,001,951 | —- | C] () – C:\Users\Public\Desktop\Play Serpent of Isis - Your Journey Continues.lnk
[2011/03/07 14:33:22 | 000,001,246 | —- | C] () – C:\Users\Public\Desktop\More Great Games.lnk
[2011/02/27 20:56:36 | 000,001,704 | —- | C] () – C:\Users\Public\Desktop\Play Wedding Salon.lnk
[2011/02/27 20:36:24 | 000,002,010 | —- | C] () – C:\Users\Public\Desktop\Play Fiction Fixers - Adventures in Wonderland.lnk
[2011/02/27 19:43:36 | 000,001,866 | —- | C] () – C:\Users\Public\Desktop\Play The Otherside - Realm of Eons.lnk
[2011/02/27 19:07:00 | 000,001,715 | —- | C] () – C:\Users\lorraine\Desktop\Farm Frenzy.lnk
[2011/02/27 19:07:00 | 000,001,697 | —- | C] () – C:\Users\lorraine\Desktop\More Free Games.lnk
[2011/02/27 19:03:04 | 000,000,416 | —- | C] () – C:\Windows\tasks\PCConfidential.job
[2011/02/27 19:03:01 | 000,001,005 | —- | C] () – C:\Users\lorraine\Application Data\Microsoft\Internet Explorer\Quick Launch\PC Confidential.lnk
[2011/02/27 18:47:48 | 000,000,225 | —- | C] () – C:\Users\Public\Desktop\More Great Games.url
[2011/02/27 18:45:00 | 000,001,481 | —- | C] () – C:\Users\Public\Desktop\Game Manager.lnk
[2011/02/27 18:35:17 | 000,201,184 | —- | C] () – C:\Windows\System32\winrm.vbs
[2011/02/27 18:35:17 | 000,004,675 | —- | C] () – C:\Windows\System32\wsmanconfig_schema.xml
[2011/02/27 18:35:17 | 000,002,426 | —- | C] () – C:\Windows\System32\WsmTxt.xsl
[2011/02/26 17:39:08 | 000,000,826 | —- | C] () – C:\Users\lorraine\Desktop\Hidden Object Crosswords.lnk
[2011/01/05 19:02:55 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2011/01/05 19:02:55 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2011/01/05 19:01:47 | 000,062,976 | —- | C] () – C:\Windows\System32\PrintBrmUi.exe
[2010/11/25 20:02:36 | 000,006,540 | —- | C] () – C:\Users\lorraine\AppData\Local\d3d9caps.dat
[2010/08/01 18:39:56 | 000,009,728 | —- | C] () – C:\Users\lorraine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/07/25 15:30:30 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2010/05/16 18:03:17 | 000,000,064 | —- | C] () – C:\Windows\GPlrLanc.dat
[2009/10/18 20:56:11 | 000,000,066 | —- | C] () – C:\Windows\Brfaxrx.ini
[2009/10/18 20:56:09 | 000,000,000 | —- | C] () – C:\Windows\brdfxspd.dat
[2009/08/24 16:46:44 | 000,000,032 | R— | C] () – C:\ProgramData\hash.dat
[2009/04/01 20:05:47 | 000,000,000 | —- | C] () – C:\Windows\brmx2001.ini
[2009/04/01 20:04:03 | 000,000,074 | —- | C] () – C:\Windows\Brownie.ini
[2009/03/12 00:20:46 | 000,000,829 | —- | C] () – C:\Windows\Brpfx04a.ini
[2009/03/12 00:20:46 | 000,000,163 | —- | C] () – C:\Windows\brpcfx.ini
[2009/03/12 00:20:16 | 000,000,419 | —- | C] () – C:\Windows\BRWMARK.INI
[2009/03/12 00:20:16 | 000,000,027 | —- | C] () – C:\Windows\BRPP2KA.INI
[2009/03/12 00:18:58 | 000,000,050 | —- | C] () – C:\Windows\System32\bridf08b.dat
[2009/03/12 00:18:53 | 000,106,496 | —- | C] () – C:\Windows\System32\BrMuSNMP.dll
[2009/03/11 19:24:18 | 000,031,567 | —- | C] () – C:\Windows\maxlink.ini
[2009/02/10 13:24:45 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009/02/08 01:08:20 | 000,000,015 | RHS- | C] () – C:\Windows\System32\drivers\fbd.sys
[2009/02/07 21:47:28 | 000,128,113 | —- | C] () – C:\Windows\System32\csellang.ini
[2009/02/07 21:47:28 | 000,045,056 | —- | C] () – C:\Windows\System32\csellang.dll
[2009/02/07 21:47:28 | 000,009,484 | —- | C] () – C:\Windows\System32\tosmreg.ini
[2009/02/07 21:47:28 | 000,007,671 | —- | C] () – C:\Windows\System32\cseltbl.ini
[2009/02/07 20:56:39 | 000,000,004 | RHS- | C] () – C:\Windows\System32\drivers\taishop.sys
[2008/02/22 16:02:45 | 000,000,000 | —- | C] () – C:\Windows\NDSTray.INI
[2008/02/22 15:21:22 | 000,257,053 | —- | C] () – C:\Windows\WOLSET.exe
[2008/02/22 14:48:43 | 000,204,800 | —- | C] () – C:\Windows\System32\IVIresizeW7.dll
[2008/02/22 14:48:43 | 000,200,704 | —- | C] () – C:\Windows\System32\IVIresizeA6.dll
[2008/02/22 14:48:43 | 000,192,512 | —- | C] () – C:\Windows\System32\IVIresizeP6.dll
[2008/02/22 14:48:43 | 000,192,512 | —- | C] () – C:\Windows\System32\IVIresizeM6.dll
[2008/02/22 14:48:43 | 000,188,416 | —- | C] () – C:\Windows\System32\IVIresizePX.dll
[2008/02/22 14:48:43 | 000,020,480 | —- | C] () – C:\Windows\System32\IVIresize.dll
[2008/02/22 13:34:39 | 000,157,040 | —- | C] () – C:\Windows\fdbpinger.exe
[2008/01/28 22:01:42 | 000,057,344 | —- | C] () – C:\Windows\System32\SmartFaceVCapt.dll
[2008/01/28 22:01:06 | 000,471,040 | —- | C] () – C:\Windows\System32\SmartFaceVCP.dll
[2008/01/28 21:53:02 | 006,701,056 | —- | C] () – C:\Windows\System32\FaceHI.dll
[2008/01/28 21:53:02 | 000,995,328 | —- | C] () – C:\Windows\System32\FaceRec.dll
[2008/01/28 21:53:02 | 000,126,976 | —- | C] () – C:\Windows\System32\SmartFaceVCtrl.dll
[2008/01/28 21:52:28 | 000,094,208 | —- | C] () – C:\Windows\System32\IppLib.dll
[2007/12/21 20:46:32 | 000,118,784 | —- | C] () – C:\Windows\System32\TosBtAcc.dll
[2007/10/08 18:21:46 | 000,958,464 | —- | C] () – C:\Windows\System32\WLIHVUI.dll
[2007/09/13 18:31:06 | 000,147,456 | —- | C] () – C:\Windows\System32\igfxCoIn_v1329.dll
[2007/09/13 18:22:46 | 001,238,832 | —- | C] () – C:\Windows\System32\igmedkrn.dll
[2007/09/13 18:22:46 | 000,104,636 | —- | C] () – C:\Windows\System32\igmedcompkrn.dll
[2007/09/13 18:11:18 | 000,249,856 | —- | C] () – C:\Windows\System32\igfxTMM.dll
[2006/11/02 08:56:48 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 08:47:43 | 000,397,760 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 06:33:01 | 000,604,502 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,104,170 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2006/03/09 13:58:00 | 001,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2005/07/23 01:30:18 | 000,065,536 | —- | C] () – C:\Windows\System32\TosCommAPI.dll
========== LOP Check ==========
[2011/02/26 16:22:38 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\A Gypsy's Tale - The Tower of Secrets
[2011/02/01 14:41:23 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Artifex Mundi
[2010/02/06 19:35:17 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\BanzaiInteractive
[2010/09/15 18:45:40 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Be a King 2
[2010/06/13 12:15:53 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Big Fish Games
[2010/10/28 16:10:10 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Boolat Games
[2010/10/16 21:22:30 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Casual Mechanics
[2011/02/20 18:18:22 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\CyberDefender
[2011/02/26 17:39:33 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Dekovir
[2009/03/24 14:37:24 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\FairyTale
[2010/07/14 18:25:39 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\FCSB000062035
[2010/05/24 17:54:44 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\freshgames
[2011/03/01 14:59:28 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Fugazo
[2010/10/17 12:03:50 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\funkitron
[2010/09/16 12:16:03 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\GameHouse
[2009/03/13 21:40:52 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Gamelab
[2010/10/26 18:16:25 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\GhostFleet
[2010/12/31 05:30:53 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\HamsterSoft
[2010/04/12 21:09:39 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Janes Realty2
[2011/01/12 17:15:32 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Jenkat
[2010/10/13 08:00:37 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Jumb-O-Fun Games
[2010/09/24 07:27:17 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Juniper Networks
[2011/01/13 13:22:29 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Ludia
[2010/09/19 21:20:04 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Magic Academy 2
[2010/04/11 03:28:57 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Meridian93
[2009/04/07 15:32:06 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\My Games
[2010/12/22 10:55:22 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Namco
[2010/11/07 15:02:13 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Orneon
[2010/04/04 23:05:43 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\OtherSide Realm of Eons
[2011/02/27 19:23:57 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\PC Speed Maximizer
[2009/03/16 18:33:26 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\PC-FAX TX
[2010/09/16 13:26:07 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\PlayFirst
[2009/11/20 22:49:32 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Playrix Entertainment
[2011/01/16 16:21:37 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Pogo Games
[2010/07/14 18:25:37 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\PriceGong
[2011/02/27 19:23:57 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\RegistryKeys
[2009/03/11 23:48:29 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\ScanSoft
[2010/04/11 02:02:44 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\ShinyTales
[2009/03/16 16:47:25 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Skip-Bo
[2009/02/24 20:16:43 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Smith Micro
[2011/01/16 15:19:03 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Striped Arts
[2010/05/16 18:15:57 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Titanium Gears
[2010/10/14 15:08:29 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\TOMI2.THE GATES OF FATE
[2009/02/24 19:38:46 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\TOSHIBA
[2009/03/29 14:01:02 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\Total Eclipse
[2009/07/08 17:48:33 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\V-Games
[2010/05/10 16:15:16 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\WeatherBug
[2011/02/20 17:00:08 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\WildTangent
[2010/07/07 13:25:10 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\WildTangentv1001
[2009/02/25 15:42:31 | 000,000,000 | —D | M] – C:\Users\lorraine\AppData\Roaming\WinBatch
[2011/03/26 11:45:21 | 000,000,416 | —- | M] () – C:\Windows\Tasks\PCConfidential.job
[2011/03/26 11:45:22 | 000,000,434 | —- | M] () – C:\Windows\Tasks\RegPowerClean.job
[2011/03/26 11:45:21 | 000,000,420 | —- | M] () – C:\Windows\Tasks\RPCReminder.job
[2011/03/25 19:14:09 | 000,032,542 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2011/03/25 19:23:13 | 000,000,428 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{BC8E2FBD-449D-4311-ABB5-365FF961D66A}.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 173 bytes -> C:\ProgramData\TEMP:D6BEA85D
@Alternate Data Stream - 157 bytes -> C:\ProgramData\TEMP:4673E9EA
@Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:260575F1
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:1B8B59DB
@Alternate Data Stream - 146 bytes -> C:\ProgramData\TEMP:2D3E25B5
@Alternate Data Stream - 146 bytes -> C:\ProgramData\TEMP:2C4CFF17
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:624A6897
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:22F6EE1A
@Alternate Data Stream - 144 bytes -> C:\ProgramData\TEMP:DCB1165A
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:87951F59
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:AF87C9F8
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:62EBE39C
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:CB5C4185
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:75DBEC56
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:91E2E553
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:85B3C587
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:431DB5FA
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:489F57C3
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:2CEFEABF
@Alternate Data Stream - 137 bytes -> C:\ProgramData\TEMP:248AC83D
@Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:EF84937D
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:D0003616
@Alternate Data Stream - 135 bytes -> C:\ProgramData\TEMP:6C1A9365
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:6A1486AD
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:EDD0DF13
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:8DED4A5E
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:55905E7D
@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:0FA1EAA7
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:CB21167F
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:6C0FB4B7
@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:32211F93
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:78E0DF72
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:9E22BBE8
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:8C8DBFC0
@Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:443F2F8E
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:E6540C35
@Alternate Data Stream - 126 bytes -> C:\ProgramData\TEMP:014BC3B4
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:812FD012
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:DC51BAA4
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:68B61847
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:04826ECB
@Alternate Data Stream - 122 bytes -> C:\ProgramData\TEMP:11D3EBBB
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:F0CAA752
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:CA0CE093
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:45F36D2E
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:27D3515D
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:E4E902F0
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:15606AA7
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:FCD3A761
@Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:D6DD5F62
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:0483BBEB
@Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:9C31E38F
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:B818947C
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:2E426A1F
< End of report >
______________________________________________________
OTL Extras logfile created on: 3/26/2011 11:52:56 AM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\lorraine\Desktop
Windows Vista Business Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 39.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 70.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 231.42 Gb Total Space | 166.68 Gb Free Space | 72.02% Space Free | Partition Type: NTFS
Drive E: | 7.46 Gb Total Space | 6.85 Gb Free Space | 91.88% Space Free | Partition Type: FAT32
Computer Name: LORRAINE-PC | User Name: lorraine | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\TOSHIBA\ivp\NetInt\Netint.exe" = C:\TOSHIBA\ivp\NetInt\Netint.exe:*:Enabled:NIE - Toshiba Software Upgrades Engine – (TOSHIBA Corporation)
"C:\TOSHIBA\Ivp\ISM\pinger.exe" = C:\TOSHIBA\Ivp\ISM\pinger.exe:*:Enabled:Toshiba Software Upgrades Pinger – ()
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{08ACDE00-61BB-43AE-A4A7-6B0655C8170D}" = rport=139 | protocol=6 | dir=out | app=system |
"{11822D0B-62E9-4C78-92EB-5D48CC563055}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{1BF204C1-59D6-4FB0-AC9D-A1B657EE0F97}" = lport=137 | protocol=17 | dir=in | app=system |
"{21C66963-4E4A-4D26-94C6-105C6F661FED}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{222844C3-7E0E-4CED-B3C2-4C571E912FAB}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{27EF4023-74F6-45F3-A894-C966CB067BCC}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{2AF727D7-9FD8-4B0B-B73D-EA9A105ED4E2}" = lport=2869 | protocol=6 | dir=in | app=system |
"{3A96A14A-0FBC-40FB-8BA1-6CF12ECA39BB}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner |
"{3D6D6147-5DAB-4546-AE8D-7F6FE6910CA2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{3F3013DD-F72C-4799-AA0D-DAE3D409B578}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=c:\windows\system32\svchost.exe |
"{46090072-AA93-499F-8FE7-966C76867E93}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=c:\windows\system32\svchost.exe |
"{467563B8-2CDC-4185-8AC6-669D6512A604}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{4B27AF26-905A-47BA-98DA-A6D2FBEBB219}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=c:\windows\system32\svchost.exe |
"{5158FF25-0A60-45B1-A813-596C61221CD4}" = rport=138 | protocol=17 | dir=out | app=system |
"{7143C3D0-AF6E-4C2A-A6AD-674149317423}" = lport=445 | protocol=6 | dir=in | app=system |
"{76430FB0-81FD-4C8D-B76B-3A9073E47D33}" = rport=137 | protocol=17 | dir=out | app=system |
"{771B39FC-0370-4938-8489-97BB7574CF8A}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{783C0845-9D6D-4BEA-80CA-64576256F455}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{7B1A672B-C588-48D1-B928-E4150648F92B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{85EC6486-A25C-40A5-8BFF-24A350BFED19}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=c:\windows\system32\svchost.exe |
"{A2A16F08-8801-4D1D-943F-DE56B1CF4EDE}" = lport=1723 | protocol=6 | dir=in | app=system |
"{A474EC79-B1C7-435F-8B5D-C21127D4BB36}" = rport=1723 | protocol=6 | dir=out | app=system |
"{A8A25FA0-E2A1-4BF6-AE3E-4ABCC782DDAE}" = lport=139 | protocol=6 | dir=in | app=system |
"{B6AD6AD8-AF31-4435-BFBC-32A32C117717}" = rport=1701 | protocol=17 | dir=out | app=system |
"{BF875FFD-CD95-4E93-83B1-F050FC357692}" = lport=1701 | protocol=17 | dir=in | app=system |
"{CC9538BA-BBA4-47DE-8EF0-190AEFF003CB}" = lport=138 | protocol=17 | dir=in | app=system |
"{CD513B5F-4083-482E-ADE1-C9EA66A76A71}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=c:\windows\system32\spoolsv.exe |
"{E95B7E13-50AE-4EE3-A431-0385DE5829D0}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=c:\windows\system32\svchost.exe |
"{EC36A29A-7733-43AB-BF2E-B58BFCF20A58}" = rport=445 | protocol=6 | dir=out | app=system |
"{F2D84BC5-ABF7-4DA2-9BF2-D31065DEAA4D}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=c:\windows\system32\svchost.exe |
"{FE22D475-9224-4250-A886-A042356A4996}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=file and printer sharing (spooler service - rpc-epmap) |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01A0AF3F-8AEF-4C1C-9194-29B0C472B1F5}" = protocol=6 | dir=in | app=c:\program files\brother\brmfl08b\faxrx.exe |
"{1007CB71-1022-4BAF-9EDF-E83E17287BDC}" = protocol=6 | dir=out | app=system |
"{11416A3C-66F9-416B-87BE-21EB60AC625E}" = protocol=6 | dir=in | app=c:\program files\iwin games\iwingames.exe |
"{2403D88D-B593-4A01-99EF-1D7C8193B3C8}" = protocol=6 | dir=in | app=c:\program files\iwin games\webupdater.exe |
"{2A8A792B-F93A-4DA0-83F0-F47A14EAA231}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{4092715F-BC6C-4C44-8E61-02633FB22A3D}" = protocol=6 | dir=in | app=c:\program files\iwin games\iwingames.exe |
"{438D7BC9-29DF-4BCE-ADB8-74A7746C4868}" = dir=in | app=c:\program files\cyberlink\powercinema for toshiba\kernel\dmp\clbrowserengine.exe |
"{448117D6-B1CB-409D-8E19-4A7EB85092C1}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{5A9359C8-18E4-4538-89EA-FDADDECA9B63}" = dir=in | app=c:\program files\cyberlink\powercinema for toshiba\powercinema.exe |
"{7178C878-B4F8-45D0-B004-9540907746C2}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{74F098A5-F2BC-4060-8F94-528EF7BE7863}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{7DAABF18-CB74-4DD2-925C-4EF0C9DBDEC0}" = protocol=17 | dir=in | app=c:\program files\iwin games\iwingames.exe |
"{80E697BB-7EEF-4F7E-AB2C-8708CD822591}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{80EC21A3-6916-4CB4-B6E0-86D4AC8C0A99}" = dir=in | app=c:\program files\cyberlink\powercinema for toshiba\pcmservice.exe |
"{87D13045-273E-48C6-B73F-1D9FC02BC755}" = dir=in | app=c:\program files\cyberlink\powercinema for toshiba\kernel\dms\clmsservice.exe |
"{8A59CBD5-F3DC-4B88-AAEB-24C16CA92F12}" = protocol=17 | dir=in | app=c:\program files\iwin games\webupdater.exe |
"{91B0F54F-F029-4AA8-84A2-3283DB90D56C}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{99496635-A361-416C-8072-FDA2BDA7354C}" = protocol=17 | dir=in | app=c:\program files\iwin games\webupdater.exe |
"{9A961267-226C-4495-8644-79AE41521662}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe |
"{9F6938D9-FD13-4FF0-B789-35D454251890}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{AC451A9D-D7F9-4A10-A4DE-B9A0784C00D9}" = protocol=1 | dir=in | name=file and printer sharing (echo request - icmpv4-in) |
"{B853181C-A1F1-48EB-9967-DCC3753E37C1}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe |
"{C90CF198-FE20-44EC-A863-B74CA48729F5}" = protocol=17 | dir=in | app=c:\program files\brother\brmfl08b\faxrx.exe |
"{C9381B53-7B75-4021-B2D3-6F2F1E9F0349}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{C93DC808-25DA-42B0-97F2-5B927A24B3F7}" = protocol=6 | dir=in | app=c:\program files\iwin games\webupdater.exe |
"{CF17C8CE-7C13-4618-8ECC-1D162B5080CB}" = protocol=1 | dir=out | name=file and printer sharing (echo request - icmpv4-out) |
"{D9BFC340-75A5-41C1-BB93-F6BD8FE81BC9}" = protocol=6 | dir=out | app=c:\windows\system32\wudfhost.exe |
"{DD06BAA9-1BA9-4040-8A8C-80C49B165E1C}" = protocol=58 | dir=in | name=file and printer sharing (echo request - icmpv6-in) |
"{F0701F7C-3A34-4BFB-910E-D48BF77E8020}" = protocol=17 | dir=in | app=c:\program files\iwin games\iwingames.exe |
"{FFD83805-0320-4DE8-85B5-58B304E32E89}" = protocol=58 | dir=out | name=file and printer sharing (echo request - icmpv6-out) |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{008D69EB-70FF-46AB-9C75-924620DF191A}" = TOSHIBA Speech System SR Engine(U.S.) Version1.0
"{022DA2C3-81C7-4003-A6BC-1BB147B20097}" = SuppSoft
"{03240EBA-04F2-4652-BC7F-B055902BDCD3}" = Memeo AutoBackup
"{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1CA941F1-5006-487E-9FD4-09F812A7D6B8}" = Norton 360 Help
"{1E5E2F9A-17D3-45CA-8FF0-B0C2927D4B03}" = MobileMe Control Panel
"{206FD69B-F9FE-4164-81BD-D52552BC9C23}" = GearDrvs
"{21829177-4DED-4209-AD08-490B3AC9C01A}" = Norton 360
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = CyberLink PowerCinema for TOSHIBA
"{27F778DD-37B9-4FEA-BB01-CC946CBBBF34}" = Symantec Real Time Storage Protection Component
"{2B7BDADB-EC8C-4C54-B5DD-CE45A016D3A7}" = Free Ride Games Player
"{2BC2781A-F7F6-452E-95EB-018A522F1B2C}" = PaperPort Image Printer
"{2D617065-1C52-4240-B5BC-C0AE12157777}" = Norton 360
"{2DA85B02-13C0-4E6D-9A76-22E6B3DD0CB2}" = SymNet
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{3074EB89-1BCA-4AEF-AFF4-EFB4634C1923}" = Norton Confidential Web Authentification Component
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{350FB27C-CF62-4EF3-AF9D-70FF313FE221}" = iTunes
"{372B31CF-77FB-4E29-860C-A0EA2985AB7F}" = O2Micro Flash Memory Card Reader Driver (x86)
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CCAD2EF-CFF2-4637-82AA-AABF370282D3}" = ccCommon
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{3FADAA19-E595-44CA-A072-58B6B0851768}" = Norton Security Scan
"{3FBF6F99-8EC6-41B4-8527-0A32241B5496}" = TOSHIBA Speech System TTS Engine(U.S.) Version1.0
"{425A2BC2-AA64-4107-9C29-484245BBEA05}" = TOSHIBA Software Upgrades
"{4843B611-8FCB-4428-8C23-31D0A5EAE164}" = Norton Confidential Browser Component
"{491DD193-1B57-4D1C-8B14-18B96992A89F}" = TOSHIBA Supervisor Password
"{52573F8D-F099-4CB5-9EDE-5C27ECB4A02B}" = TOSHIBA Hardware Setup
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"{63A6E9A9-A190-46D4-9430-2DB28654AFD8}" = Norton 360
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
"{6DE18AB5-540B-4981-87D5-6CF7E923D983}_is1" = MyCleanPC Registry Scanner
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-toshiba" = WildTangent Games App (Toshiba Games)
"{7217E2CF-3183-4AFC-928F-95A28C65200C}" = Lifetime Fashion Solitaire
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{77772678-817F-4401-9301-ED1D01A8DA56}" = SPBBC 32bit
"{78C6A78A-8B03-48C8-A47C-78BA1FCA2307}" = TOSHIBA ConfigFree
"{7A8FF745-BBC5-482B-88E4-18D3178249A9}" = ScanSoft PaperPort 11
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}" = Mahjong Escape Ancient China
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113069720}" = Mystery PI
"{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo Layers Client 1.10.01
"{890EF3F8-742F-46BD-9E8E-084B3A1F4364}" = QuickBooks Financial Center
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8C6BB412-D3A8-4AAE-A01B-35B681789D68}" = mHelp
"{8DCE550C-CA43-4E82-92DF-FFC4A48F5BE1}" = Napster Burn Engine
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{92B1B3CC-EC78-45B8-96D0-8B3F11495864}" = Symantec Technical Support Controls
"{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = CD/DVD Drive Acoustic Silencer
"{A1570454-ED12-4050-A7AC-9282C7AFB23C}" = Window Shopper
"{A2075A09-28AA-4D30-9BCC-82EAD9FA51BD}" = TrueSuite Access Manager
"{A67BB21E-D419-45BB-AB86-7D87D14BBCE2}" = Safari
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A945BD16-4774-4A1F-96A7-118BEC004881}" = mCorev32.ism_new
"{AC76BA86-7AD7-1033-7B44-A81000000003}" = Adobe Reader 8.1.0
"{B44AA698-B221-4B3B-8CA5-E65EF6A5AF26}" = Hoyle Card Games 2005
"{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
"{BBBCAE4B-B416-4182-A6F2-438180894A81}" = Napster
"{C53D16CC-E56F-47B8-906E-70AAF8EABB4F}" = Toshiba Registration
"{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{CB84F0F2-927B-458D-9DC5-87832E3DC653}" = GearDrvs
"{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}" = Apple Mobile Device Support
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D353CC51-430D-4C6F-9B7E-52003DA1E05A}" = Norton Confidential Web Protection Component
"{D9461574-5FC0-4641-BBDC-D1038B196F55}" = Brother MFL-Pro Suite MFC-490CW
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}" = LiveUpdate Notice (Symantec Corporation)
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E7B100D8-98A5-42AA-830F-16D6BD5351F1}" = My.Freeze.com NetAssistant
"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime
"{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
"{EE033C1F-443E-41EC-A0E2-559B539A4E4D}" = TOSHIBA Speech System Applications
"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA
"{F32ED8B1-2442-4B0E-8DEC-3F3BFC1C2B7F}" = mCPlug
"{F4DB525F-A986-4249-B98B-42A8066251CA}" = AV
"{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"3dayszoomystery" = 3 Days - Zoo Mystery
"4 Elements" = 4 Elements (remove only)
"A Fairy Tale" = A Fairy Tale (remove only)
"A Gypsy's Tale: The Tower of Secrets" = A Gypsy's Tale: The Tower of Secrets (remove only)
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player
"am-agypsystalethetowerofsecrets" = A Gypsy's Tale - The Tower of Secrets
"Amelie's Cafe: Halloween" = Amelie's Cafe: Halloween (remove only)
"am-hiddenobjectcrosswords" = Hidden Object Crosswords
"Baby Luv" = Baby Luv (remove only)
"Ballville – The Beginning" = Ballville – The Beginning (remove only)
"BFGC" = Big Fish Games: Game Manager
"BFG-Dream Day Wedding Bella Italia" = Dream Day Wedding Bella Italia
"BFG-Fiction Fixers - Adventures in Wonderland" = Fiction Fixers - Adventures in Wonderland
"BFG-Mystery Case Files - Huntsville" = Mystery Case Files: Huntsville ™
"BFG-Mystery Case Files - Prime Suspects" = Mystery Case Files: Prime Suspects ™
"BFG-Mystery Case Files - Ravenhearst" = Mystery Case Files: Ravenhearst ™
"BFG-Serpent of Isis - Your Journey Continues" = The Serpent of Isis: Your Journey Continues
"BFG-The Otherside - Realm of Eons" = The Otherside: Realm of Eons
"BFG-Wedding Salon" = Wedding Salon
"bigcityadventuresanfrancisco" = Big City Adventure - San Francisco
"Biggest Little Adventure" = Biggest Little Adventure (remove only)
"City Sights Hello Seattle" = City Sights Hello Seattle (remove only)
"CNXT_AUDIO_HDA" = Conexant HD Audio
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV;_5051&SUBSYS;_1179" = HDAUDIO Soft Data Fax Modem with SmartCP
"Coconut Queen" = Coconut Queen (remove only)
"Country Harvest" = Country Harvest (remove only)
"Coupon Printer for Windows4.0" = Coupon Printer for Windows
"Digital DJ Pro" = Digital DJ Pro 1.7.0
"Drawn: The Painted Tower" = Drawn: The Painted Tower (remove only)
"Dream Day Wedding: Bella Italia" = Dream Day Wedding: Bella Italia (remove only)
"Dream Day Wedding: Viva Las Vegas" = Dream Day Wedding: Viva Las Vegas (remove only)
"Echoes of the Past: Royal House of Stone" = Echoes of the Past: Royal House of Stone (remove only)
"exent_605350" = Magic Encyclopedia
"exent_629350" = Virtual Villagers 2: The Lost Children
"exent_676550" = Bistro Stars
"Family Feud: Battle of the Sexes" = Family Feud: Battle of the Sexes (remove only)
"Farm Frenzy: Pizza Party" = Farm Frenzy: Pizza Party
"FarmFrenzy" = FarmFrenzy (remove only)
"Fishdom: Seasons Under the Sea" = Fishdom: Seasons Under the Sea (remove only)
"Forgotten Places - Lost Circus" = Forgotten Places - Lost Circus (remove only)
"gamehousesolitairechallenge" = GameHouse Solitaire Challenge
"Gardenscapes" = Gardenscapes (remove only)
"Go-Go Gourmet" = Go-Go Gourmet (remove only)
"Google Chrome" = Google Chrome
"Google Desktop" = Google Desktop
"Great Adventures: Xmas Edition" = Great Adventures: Xmas Edition (remove only)
"HDMI" = Intel® Graphics Media Accelerator Driver
"Hidden Expedition: Amazon" = Hidden Expedition: Amazon (remove only)
"Hidden Wonders of the Depths" = Hidden Wonders of the Depths (remove only)
"hiddenworldofart" = Hidden World of Art
"House M.D" = House M.D (remove only)
"InstallShield_{03240EBA-04F2-4652-BC7F-B055902BDCD3}" = Memeo AutoBackup
"InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = CyberLink PowerCinema for TOSHIBA
"InstallShield_{491DD193-1B57-4D1C-8B14-18B96992A89F}" = TOSHIBA Supervisor Password
"InstallShield_{52573F8D-F099-4CB5-9EDE-5C27ECB4A02B}" = TOSHIBA Hardware Setup
"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"InstallShield_{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition
"InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"iWinArcade" = iWin Games (remove only)
"Jenkat Games Arcade" = Jenkat Games Arcade
"Jewel Quest" = Jewel Quest (remove only)
"Jewel Quest Solitaire" = Jewel Quest Solitaire (remove only)
"Jojo's Fashion Show" = Jojo's Fashion Show (remove only)
"Juniper_Setup_Client Activex Control" = Juniper Networks Setup Client Activex Control
"koisolitaire" = Koi Solitaire
"Little Shop Traveler's Pack" = Little Shop Traveler's Pack (remove only)
"Little Shop: Memories" = Little Shop: Memories (remove only)
"LiveUpdate" = LiveUpdate 3.2 (Symantec Corporation)
"Magic Academy 2" = Magic Academy 2 (remove only)
"Mahjong Escape Ancient Japan_is1" = Mahjong Escape Ancient Japan
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"mortimerbeckettandthetimeparadox" = Mortimer Beckett and the Time Paradox
"MP3 Player Recovery Tool_is1" = MP3 Player Recovery Tool
"Nat Geo Adventure: Ghost Fleet" = Nat Geo Adventure: Ghost Fleet (remove only)
"Neoteris_Secure_Application_Manager" = Juniper Networks Secure Application Manager
"NSSSetup.{3FADAA19-E595-44CA-A072-58B6B0851768}" = Norton Security Scan (Symantec Corporation)
"PAC-MAN" = PAC-MAN (remove only)
"PC Optimizer Pro" = PC Optimizer Pro
"PC Speed Maximizer_is1" = PC Speed Maximizer v2.2
"PCConfidential_is1" = PC Confidential 2008
"Peggle Nights Deluxe" = Peggle Nights Deluxe (remove only)
"Picasa 3" = Picasa 3
"Pictureka Museum Mayhem" = Pictureka Museum Mayhem (remove only)
"PJ Pride Pet Detective" = PJ Pride Pet Detective (remove only)
"PriceGong" = PriceGong 2.1.0
"PROHYBRIDR" = 2007 Microsoft Office system
"ProInst" = Intel® PROSet/Wireless Software
"Puzzle and Board XP Championship" = Puzzle and Board XP Championship
"Radio_TV_1.3 Toolbar" = Radio TV 1.3 Toolbar
"RealArcade" = RealArcade
"RegPowerClean_is1" = Winferno Registry Power Cleaner
"Roads of Rome 2" = Roads of Rome 2 (remove only)
"Search Toolbar" = Search Toolbar
"Shop to Win 2" = Shop to Win 2
"ShopPond" = ShopPond
"skipbocastawaycapertm" = SKIP-BO Castaway Caper™
"Slingo Mystery" = Slingo Mystery (remove only)
"SpeedItup Free 5.20" = SpeedItup Free 5.20
"Star Crossed Love" = Star Crossed Love (remove only)
"Super Granny 4" = Super Granny 4 (remove only)
"Supple: Episode 2" = Supple: Episode 2 (remove only)
"Surf Canyon" = Surf Canyon Search Engine Assistant
"SymSetup.{2D617065-1C52-4240-B5BC-C0AE12157777}" = Norton 360 (Symantec Corporation)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"The Fifth Gate" = The Fifth Gate (remove only)
"The Hidden Object Show 2" = The Hidden Object Show 2 (remove only)
"The Price Is Right 1.0.3" = The Price Is Right 1.0.3
"The Treasures of Mystery Island 2: The Gates of Fate" = The Treasures of Mystery Island 2: The Gates of Fate (remove only)
"theclockworkman" = The Clockwork Man
"Time Mysteries: Inheritance" = Time Mysteries: Inheritance (remove only)
"Treasures of Montezuma 2" = Treasures of Montezuma 2 (remove only)
"Web Games Player Plugin" = Web Games Player Plugin
"Wedding Dash 4Ever" = Wedding Dash 4Ever (remove only)
"WildTangent toshiba Master Uninstall" = WildTangent Games
"WildTangent wildgames Master Uninstall" = WildTangent Games
"wildwestquest" = Wild West Quest
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WT076793" = Mystery P.I. - Lost in Los Angeles
"WT082069" = Mystery P.I. - The New York Fortune
"WTA-17353b7c-6a54-4759-9340-cf6bf4902ed2" = Be a King 2
"WTA-3c915b1c-266e-4aa8-88f3-fd49a5a8a75a" = Crazy Chicken Pinball
"WTA-44142d85-f5d5-4cdb-98ca-3dd69937fcbe" = Love and Death - Bitten
"WTA-788c260f-bb98-47f9-b83b-ae73387741cd" = Plants vs. Zombies - Game of the Year
"WTA-a170ae79-59d2-47a2-835d-2ed22805b8a5" = Hazen ®
"WTA-a4cd39c5-c0c9-4141-8289-526b889d69f1" = A Kingdom for Keflings
"WTA-bfa68231-4c13-4ce1-bdbc-9a9c8c2e5c8e" = Blackhawk Striker 2
"WTA-ed918d8b-9f03-461c-af01-2859a9896efa" = LUXOR 5th Passage
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Software Update" = Yahoo! Software Update
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1189411615-3114965565-1695826520-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Juniper_Setup_Client" = Juniper Networks Setup Client
"Move Networks Player - IE" = Move Networks Media Player for Internet Explorer
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 7/12/2010 3:03:42 PM | Computer Name = lorraine-PC | Source = WinMgmt | ID = 10
Description =
Error - 7/12/2010 3:23:45 PM | Computer Name = lorraine-PC | Source = Microsoft-Windows-CAPI2 | ID = 131585
Description =
Error - 7/13/2010 3:14:54 PM | Computer Name = lorraine-PC | Source = WinMgmt | ID = 10
Description =
Error - 7/13/2010 3:40:13 PM | Computer Name = lorraine-PC | Source = Application Error | ID = 1000
Description = Faulting application MysteryPI.exe, version 1.0.0.5, time stamp 0x46cb14de,
faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code
0xc0000005, fault offset 0x00000060, process id 0x8a4, application start time 0x01cb22c023abf960.
Error - 7/13/2010 9:51:40 PM | Computer Name = lorraine-PC | Source = WinMgmt | ID = 10
Description =
Error - 7/14/2010 1:33:09 PM | Computer Name = lorraine-PC | Source = WinMgmt | ID = 10
Description =
Error - 7/14/2010 5:10:41 PM | Computer Name = lorraine-PC | Source = Application Error | ID = 1000
Description = Faulting application MysteryPI.exe, version 1.0.0.5, time stamp 0x46cb14de,
faulting module MysteryPI.exe, version 1.0.0.5, time stamp 0x46cb14de, exception
code 0xc0000005, fault offset 0x0fc1be03, process id 0x114c, application start time
0x01cb23838477d787.
Error - 7/14/2010 5:10:52 PM | Computer Name = lorraine-PC | Source = Application Error | ID = 1000
Description = Faulting application MysteryPI.exe, version 1.0.0.5, time stamp 0x46cb14de,
faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791a7a6, exception
code 0xc0000005, fault offset 0x00068516, process id 0x114c, application start time
0x01cb23838477d787.
Error - 7/14/2010 5:26:42 PM | Computer Name = lorraine-PC | Source = Application Error | ID = 1000
Description = Faulting application MysteryPI.exe, version 1.0.0.5, time stamp 0x46cb14de,
faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code
0xc0000005, fault offset 0x00000080, process id 0xe88, application start time 0x01cb23991969e3a7.
Error - 7/14/2010 6:17:21 PM | Computer Name = lorraine-PC | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 3/25/2011 6:06:23 PM | Computer Name = lorraine-PC | Source = DCOM | ID = 10010
Description =
Error - 3/25/2011 6:13:57 PM | Computer Name = lorraine-PC | Source = Service Control Manager | ID = 7000
Description =
Error - 3/25/2011 7:16:27 PM | Computer Name = lorraine-PC | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000
Description =
Error - 3/25/2011 7:17:13 PM | Computer Name = lorraine-PC | Source = Service Control Manager | ID = 7001
Description =
Error - 3/25/2011 7:17:13 PM | Computer Name = lorraine-PC | Source = Service Control Manager | ID = 7026
Description =
Error - 3/25/2011 7:20:21 PM | Computer Name = lorraine-PC | Source = DCOM | ID = 10005
Description =
Error - 3/25/2011 7:20:32 PM | Computer Name = lorraine-PC | Source = DCOM | ID = 10005
Description =
Error - 3/25/2011 7:20:41 PM | Computer Name = lorraine-PC | Source = DCOM | ID = 10005
Description =
Error - 3/25/2011 7:23:13 PM | Computer Name = lorraine-PC | Source = DCOM | ID = 10005
Description =
Error - 3/26/2011 11:46:21 AM | Computer Name = lorraine-PC | Source = Service Control Manager | ID = 7000
Description =
< End of report >
I didn't save it to my desktop first! Do I need to re-run it?
I am so sorry for the delay!!!
I had to run to a prior 2:30 engagement.
Anyway, I do not believe she runs lojack on her computer. If she does, she doesn't know it LOL!!!
She doesn't use half the stuff on this laptop, just the games. Oh, and she checks her email. That's it.
I am going to run the program again as instructed. BRB.