This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Internet Explorer, Windows Live Messenger and other applications won&#

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi, I'm not able to use some of the applications on my computer including Windows Live Messenger and Internet. They won't access the internet. I have included my OTL scan files.
Could someone please help me? Thank you.

OTL logfile created on: 30/03/2011 2:58:26 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\sonam\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 58.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 916.44 Gb Total Space | 7.47 Gb Free Space | 0.81% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 10.17 Gb Free Space | 67.81% Space Free | Partition Type: NTFS

Computer Name: SONAM-PC | User Name: sonam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\sonam\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files\Research In Motion\BlackBerry Desktop\Rim.Desktop.AutoUpdate.exe (Research In Motion)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\K-Meleon\k-meleon.exe (http://kmeleon.sf.net/)
PRC - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\Hotspot Shield\bin\openvpntray.exe ()
PRC - C:\Program Files\Hotspot Shield\bin\openvpnas.exe ()
PRC - C:\Program Files\Hotspot Shield\bin\hsswd.exe ()
PRC - C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
PRC - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe (AnchorFree Inc.)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\SmcGui.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Smc.exe (Symantec Corporation)
PRC - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
PRC - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
PRC - C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Windows\System32\pmxmiced.exe (Primax Electronics Ltd.)
PRC - C:\Windows\System32\ico.exe (Primax Electronics Ltd.)


========== Modules (SafeList) ==========

MOD - C:\Users\sonam\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (RoxLiveShare9) – File not found
SRV - (BBSvc) – C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) – C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (McComponentHostService) – C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (HssTrayService) – C:\Program Files\Hotspot Shield\bin\HssTrayService.exe ()
SRV - (HotspotShieldService) – C:\Program Files\Hotspot Shield\bin\openvpnas.exe ()
SRV - (HssWd) – C:\Program Files\Hotspot Shield\bin\hsswd.exe ()
SRV - (AERTFilters) – C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
SRV - (HssSrv) – C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe (AnchorFree Inc.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (SNAC) – C:\Program Files\Symantec AntiVirus\SNAC.EXE (Symantec Corporation)
SRV - (Symantec AntiVirus) – C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (SmcService) – C:\Program Files\Symantec AntiVirus\Smc.exe (Symantec Corporation)
SRV - (LiveUpdate) – C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) – C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (AresChatServer) – C:\Program Files\Ares\chatServer.exe (Ares Development Group)
SRV - (NMSAccessU) – C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
SRV - (GoToAssist) – C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter) – C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (NAVEX15) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110330.003\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110330.003\NAVENG.SYS (Symantec Corporation)
DRV - (Lbd) – C:\Windows\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SymEvent) – C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (RTL8169) – C:\Windows\System32\drivers\Rtlh86.sys (Realtek )
DRV - (HssDrv) – C:\Windows\System32\drivers\HssDrv.sys (AnchorFree Inc.)
DRV - (taphss) – C:\Windows\System32\drivers\taphss.sys (AnchorFree Inc)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (LVPr2Mon) – C:\Windows\System32\drivers\LVPr2Mon.sys ()
DRV - (SRTSPL) – C:\Windows\System32\drivers\srtspl.sys (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\System32\drivers\srtsp.sys (Symantec Corporation)
DRV - (SRTSPX) – C:\Windows\System32\drivers\srtspx.sys (Symantec Corporation)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (SYMTDI) – C:\Windows\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\Windows\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (COH_Mon) – C:\Windows\System32\drivers\COH_Mon.sys (Symantec Corporation)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (AnyDVD) – C:\Windows\System32\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV - (R300) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (NPF) – C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (RtNdPt60) – C:\Windows\System32\drivers\RtNdPt60.sys (Windows ® Codename Longhorn DDK provider)
DRV - (tapvpn) – C:\Windows\System32\drivers\tapvpn.sys (The OpenVPN Project)
DRV - (e1express) Intel® – C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation)
DRV - (RTL8187) – C:\Windows\System32\drivers\wg111v2.sys (NETGEAR Inc.)
DRV - (pmxmouse) – C:\Windows\System32\drivers\pmxmouse.sys (Primax Electronics Ltd.)
DRV - (pmxusblf) – C:\Windows\System32\drivers\pmxusblf.sys (Primax Electronics Ltd.)
DRV - (QCMerced) – C:\Windows\System32\drivers\lvcm.sys ()
DRV - (LVUSBSta) – C:\Windows\System32\drivers\LVUSBSta.sys (Logitech Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/securit…ponse/index.jsp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?lang=en-ca&OCID;=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F0 A3 23 3B 64 E6 CA 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555

========== FireFox ==========


FF - HKLM\software\mozilla\K-Meleon\Extensions\\Plugins: C:\Program Files\K-Meleon\Plugins [2010/10/06 18:17:52 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\K-Meleon\Extensions\\Components: C:\Program Files\K-Meleon\Components [2010/10/06 18:18:12 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/23 06:39:26 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/23 06:39:26 | 000,000,000 | —D | M]

[2009/02/09 15:14:14 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Extensions
[2009/02/09 15:14:14 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Extensions\{ae2cff10-0d52-4066-8be9-4abcf119fa79}
[2011/03/28 19:45:33 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions
[2010/05/03 10:45:16 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/06/15 19:00:06 | 000,000,000 | —D | M] (jDownFF) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66}
[2010/05/03 10:45:17 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/06/04 18:04:59 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/06/04 18:04:53 | 000,000,000 | —D | M] ("BitDefender QuickScan") – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010/05/28 21:04:24 | 000,000,000 | —D | M] (TVU Web Player) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\[removed]
[2011/03/24 23:59:36 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/03/24 23:59:37 | 000,000,000 | —D | M] (Skype extension) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}

O1 HOSTS File: ([2010/01/05 18:08:21 | 000,000,027 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll (AnchorFree Inc.)
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (Veoh Video Compass) - {52836EB0-631A-47B1-94A6-61F9D9112DAE} - C:\Program Files\Veoh Networks\Veoh Video Compass\SearchRecsPlugin.dll (Veoh Networks)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll ()
O3 - HKLM\..\Toolbar: (Veoh Browser Plug-in) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PMX Daemon] C:\Windows\System32\ico.exe (Primax Electronics Ltd.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QT Lite\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKCU..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10n_Plugin.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\sonam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8 - Extra context menu item: &Download; by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab; video by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load; all by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab (RIM AxLoader)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\GoToAssist: DllName - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll - C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img11.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{6699b567-46de-11e0-92c7-0021703a9f80}\Shell\AutoRun\command - "" = J:\start.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…com [@ = ComFile] – Reg Error: Key error. File not found

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.ac3acm - C:\Windows\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\Windows\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\Windows\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.voxacm160 - C:\Windows\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.dvsd - C:\Windows\System32\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.I420 - C:\Windows\System32\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.iv50 - C:\Windows\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.xvid - C:\Windows\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/03/30 14:50:48 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe
[2011/03/30 14:50:08 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{33AD8694-4811-4125-973D-CFBA1B5B716A}
[2011/03/25 00:00:25 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\skypePM
[2011/03/24 23:59:44 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Skype
[2011/03/24 23:59:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011/03/24 23:59:04 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2011/03/24 23:59:00 | 000,000,000 | R–D | C] – C:\Program Files\Skype
[2011/03/24 23:58:46 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2011/03/23 03:22:47 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{3E593D15-4E84-4ED5-BAFB-632910E5C572}
[2011/03/22 18:08:21 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2011/03/22 18:08:21 | 000,288,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2011/03/18 15:10:33 | 000,000,000 | —D | C] – C:\Users\sonam\Documents\BkUp554
[2011/03/17 20:21:31 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{AC2A6EF1-8818-4002-870B-5376CBC63AD3}
[2011/03/16 03:25:25 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{43A2E345-378C-499F-929E-DB4AA7CF365E}
[2011/03/11 14:37:52 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{73BBFA43-A80D-4E47-BEDA-54EA2B5A1A70}
[2011/03/11 13:53:27 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2011/03/11 13:52:29 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Dropbox
[2011/03/10 22:20:28 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2011/03/10 22:19:52 | 000,000,000 | —D | C] – C:\ProgramData\WinZip
[2011/03/10 22:19:19 | 000,000,000 | —D | C] – C:\Program Files\WinZip
[2011/03/10 12:41:39 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{E361019C-C46E-48CD-8CAB-83B5C9FC61AB}
[2011/03/09 16:22:05 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EncDec.dll
[2011/03/09 16:22:04 | 000,322,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbe.dll
[2011/03/09 16:22:04 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mpg2splt.ax
[2011/03/09 16:22:04 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbeio.dll
[2011/03/06 17:22:39 | 000,000,000 | —D | C] – C:\Users\sonam\Documents\BlackBerry
[2011/03/06 17:21:38 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\Research In Motion
[2011/03/06 17:15:51 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{B4A4FB8B-1774-4BDD-8A53-5075870837C1}
[2011/03/06 16:53:09 | 000,038,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2011/03/06 16:52:16 | 000,000,000 | —D | C] – C:\ProgramData\Research In Motion
[2011/03/06 16:40:35 | 000,000,000 | —D | C] – C:\Program Files\Research In Motion Limited
[2011/03/05 00:16:27 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{79597155-7FD4-47F4-BF7F-28693DA8670B}
[2011/03/04 13:03:52 | 000,000,000 | —D | C] – C:\Program Files\Pegasys Inc
[2011/03/03 19:52:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2008/10/22 11:56:11 | 000,047,360 | —- | C] (VSO Software) – C:\Users\sonam\AppData\Roaming\pcouffin.sys

========== Files - Modified Within 30 Days ==========

[2011/03/30 14:55:18 | 000,001,057 | —- | M] () – C:\Users\sonam\AppData\Roaming\vso_ts_preview.xml
[2011/03/30 14:50:53 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe
[2011/03/30 14:04:15 | 000,113,152 | —- | M] () – C:\Users\sonam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/30 13:19:26 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/30 13:19:26 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/27 18:26:00 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-807892715-3149862127-586907164-1000UA.job
[2011/03/27 15:26:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-807892715-3149862127-586907164-1000Core.job
[2011/03/25 00:00:26 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2011/03/24 23:59:06 | 000,001,878 | —- | M] () – C:\Users\Public\Desktop\Skype.lnk
[2011/03/24 00:41:18 | 000,000,000 | —- | M] () – C:\Windows\System32\null
[2011/03/23 03:26:25 | 000,611,664 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/03/23 03:26:25 | 000,109,112 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/03/23 03:20:31 | 000,000,276 | —- | M] () – C:\Windows\tasks\RtlNICDiagVistaStart.job
[2011/03/23 03:19:45 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/03/23 03:19:01 | 3220,365,312 | -HS- | M] () – C:\hiberfil.sys
[2011/03/06 17:11:55 | 000,384,568 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/03/06 16:54:10 | 000,002,098 | —- | M] () – C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
[2011/03/06 16:54:08 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_RimUsb_01009.Wdf
[2011/03/06 16:54:05 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011/03/05 13:15:28 | 000,103,032 | —- | M] () – C:\Users\sonam\Documents\cc_20110305_121354.reg
[2011/03/05 01:08:29 | 005,509,734 | —- | M] () – C:\Users\sonam\Documents\Backup-(2011-03-05).ipd
[2011/03/05 00:42:47 | 000,744,140 | —- | M] () – C:\Users\sonam\Documents\LoaderBackup-(2011-03-04).ipd
[2011/03/05 00:05:31 | 000,000,256 | —- | M] () – C:\Windows\System32\pool.bin
[2011/03/03 19:52:49 | 000,000,861 | —- | M] () – C:\Users\Public\Desktop\VLC media player.lnk

========== Files Created - No Company Name ==========

[2011/03/25 00:00:26 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2011/03/24 23:59:06 | 000,001,878 | —- | C] () – C:\Users\Public\Desktop\Skype.lnk
[2011/03/06 16:54:10 | 000,002,098 | —- | C] () – C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
[2011/03/06 16:54:08 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_RimUsb_01009.Wdf
[2011/03/06 16:54:05 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011/03/06 16:53:13 | 000,000,003 | —- | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf
[2011/03/05 13:15:22 | 000,103,032 | —- | C] () – C:\Users\sonam\Documents\cc_20110305_121354.reg
[2011/03/05 01:08:15 | 005,509,734 | —- | C] () – C:\Users\sonam\Documents\Backup-(2011-03-05).ipd
[2011/03/05 00:42:47 | 000,744,140 | —- | C] () – C:\Users\sonam\Documents\LoaderBackup-(2011-03-04).ipd
[2011/03/05 00:05:31 | 000,000,256 | —- | C] () – C:\Windows\System32\pool.bin
[2011/03/03 19:52:49 | 000,000,861 | —- | C] () – C:\Users\Public\Desktop\VLC media player.lnk
[2010/11/11 04:05:04 | 000,000,118 | —- | C] () – C:\Windows\System32\MRT.INI
[2010/10/29 01:34:24 | 000,000,008 | —- | C] () – C:\Users\sonam\AppData\Roaming\vfzwln.dat
[2010/10/21 14:38:49 | 000,087,608 | —- | C] () – C:\Users\sonam\AppData\Roaming\inst.exe
[2010/09/22 13:58:11 | 000,113,152 | —- | C] () – C:\Users\sonam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/02 21:24:01 | 000,015,880 | —- | C] () – C:\Windows\System32\lsdelete.exe
[2010/01/05 17:57:57 | 000,261,632 | —- | C] () – C:\Windows\PEV.exe
[2010/01/05 17:57:57 | 000,077,312 | —- | C] () – C:\Windows\MBR.exe
[2010/01/05 03:03:31 | 000,000,000 | —- | C] () – C:\Windows\System32\cd.dat
[2009/12/03 10:27:28 | 000,080,416 | —- | C] () – C:\Windows\System32\RtNicProp32.dll
[2009/10/16 15:42:47 | 000,180,720 | —- | C] () – C:\Windows\System32\atiicdxx.dat
[2009/10/16 15:42:47 | 000,081,920 | —- | C] () – C:\Windows\System32\ATIODE.exe
[2009/10/16 15:42:47 | 000,045,056 | —- | C] () – C:\Windows\System32\ATIODCLI.exe
[2009/10/16 15:42:47 | 000,011,264 | —- | C] () – C:\Windows\System32\atimuixx.dll
[2009/10/11 01:01:05 | 000,000,046 | —- | C] () – C:\Windows\System32\DonationCoder_urlsnooper_InstallInfo.dat
[2009/10/07 01:46:36 | 000,025,752 | —- | C] () – C:\Windows\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:23:08 | 000,013,584 | —- | C] () – C:\Windows\System32\drivers\iKeyLFT2.dll
[2009/09/11 01:59:40 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2009/09/11 01:59:39 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/05/19 11:48:25 | 000,000,726 | —- | C] () – C:\Windows\Mp3CutterJoiner.ini
[2009/05/17 16:57:54 | 000,000,005 | —- | C] () – C:\Windows\System32\SySMP3CutJoin.dat
[2009/05/17 16:57:40 | 000,237,568 | —- | C] () – C:\Windows\System32\lame_enc.dll
[2009/03/09 01:05:12 | 000,000,040 | -HS- | C] () – C:\ProgramData\.zreglib
[2009/02/24 15:55:27 | 000,001,057 | —- | C] () – C:\Users\sonam\AppData\Roaming\vso_ts_preview.xml
[2009/01/26 16:02:18 | 000,028,672 | —- | C] () – C:\Windows\System32\AVEQT.dll
[2008/12/25 14:40:14 | 000,129,024 | —- | C] () – C:\Windows\System32\AVERM.dll
[2008/12/23 11:33:18 | 000,053,299 | —- | C] () – C:\Windows\System32\pthreadVC.dll
[2008/11/02 17:05:06 | 000,085,504 | —- | C] () – C:\Windows\System32\ff_vfw.dll
[2008/10/28 18:29:16 | 000,000,069 | —- | C] () – C:\Windows\NeroDigital.ini
[2008/10/22 11:56:11 | 000,007,887 | —- | C] () – C:\Users\sonam\AppData\Roaming\pcouffin.cat
[2008/10/22 11:56:11 | 000,001,144 | —- | C] () – C:\Users\sonam\AppData\Roaming\pcouffin.inf
[2008/10/17 21:40:46 | 000,139,264 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2008/10/17 21:40:45 | 000,524,288 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2008/10/16 17:38:31 | 000,024,206 | —- | C] () – C:\Users\sonam\AppData\Roaming\UserTile.png
[2008/10/15 20:20:23 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/10/04 02:28:21 | 002,192,024 | —- | C] () – C:\Windows\System32\igkrng500.bin
[2008/10/04 02:28:21 | 000,495,376 | —- | C] () – C:\Windows\System32\igcompkrng500.bin
[2008/10/04 02:28:21 | 000,147,456 | —- | C] () – C:\Windows\System32\igfxCoIn_v1527.dll
[2008/10/04 02:28:21 | 000,147,172 | —- | C] () – C:\Windows\System32\igfcg550.bin
[2008/10/04 02:28:18 | 003,107,788 | —- | C] () – C:\Windows\System32\atiumdva.dat
[2008/10/04 02:28:18 | 000,159,744 | —- | C] () – C:\Windows\System32\atitmmxx.dll
[2008/10/04 02:28:18 | 000,090,112 | —- | C] () – C:\Windows\System32\atibrtmon.exe
[2008/10/03 23:46:08 | 000,303,104 | —- | C] () – C:\Windows\System32\FontZoom.exe
[2008/10/03 23:46:08 | 000,131,062 | —- | C] () – C:\Windows\System32\DellPM.ini
[2008/10/03 18:34:16 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2006/11/02 08:57:28 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,384,568 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,611,664 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,109,112 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2005/05/27 09:32:52 | 001,317,152 | —- | C] () – C:\Windows\System32\drivers\lvcm.sys
[2005/05/27 09:10:26 | 000,009,255 | —- | C] () – C:\Windows\System32\lvcoinst.ini

========== LOP Check ==========

[2009/10/15 21:40:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\.anomos
[2009/12/25 15:20:01 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\AVSMedia
[2009/07/06 23:21:08 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\BOXEE
[2009/02/09 15:14:13 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Broad Intelligence
[2008/12/25 12:51:14 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Canneverbe_Limited
[2008/12/25 14:12:12 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\devede
[2009/10/11 01:01:05 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\DonationCoder
[2011/03/16 12:50:10 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Dropbox
[2009/06/18 23:22:41 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\FFSJ
[2010/11/09 13:13:44 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\FrostWire
[2009/12/25 15:32:42 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\GetRightToGo
[2009/03/02 15:22:16 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Graboid Inc
[2010/01/05 20:31:26 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\GrabPro
[2008/12/25 14:14:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\gtk-2.0
[2009/11/17 16:53:39 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ICAClient
[2008/11/14 18:24:38 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ImgBurn
[2009/03/03 23:40:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\iPodifier
[2010/10/06 18:20:59 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\K-Meleon
[2010/09/21 21:05:27 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Leadertech
[2009/10/08 15:53:54 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Livestation
[2010/10/17 23:56:39 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ManyCam
[2009/10/08 15:53:54 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Mchid
[2009/10/18 01:04:11 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Moyea
[2009/06/07 15:27:17 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Octoshape
[2009/04/06 21:16:31 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Opera
[2011/03/17 15:25:24 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Orbit
[2008/10/16 17:38:31 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\PeerNetworking
[2011/02/18 12:18:03 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Pegasys Inc
[2010/12/14 19:43:51 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\QuickScan
[2010/10/28 19:31:04 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Red Kawa
[2011/03/06 17:22:08 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Research In Motion
[2011/03/30 15:02:35 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\uTorrent
[2011/03/30 14:55:20 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Vso
[2011/03/23 03:20:31 | 000,000,276 | —- | M] () – C:\Windows\Tasks\RtlNICDiagVistaStart.job
[2011/03/23 03:17:20 | 000,032,600 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011/03/23 03:18:57 | 000,009,180 | —- | M] () – C:\aaw7boot.log
[2006/09/18 17:43:36 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/04/11 02:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2006/09/18 17:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2008/10/04 02:28:28 | 000,004,871 | RH– | M] () – C:\dell.sdr
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 09:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2011/03/23 03:19:01 | 3220,365,312 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 09:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 09:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 09:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2009/03/15 19:57:16 | 000,001,363 | —- | M] () – C:\MP4debug.log
[2011/03/23 03:18:58 | 3534,172,160 | -HS- | M] () – C:\pagefile.sys
[2007/11/07 09:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI

< %systemroot%\Fonts\*.com >
[2006/11/02 08:37:12 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 08:37:12 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 08:37:12 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/10/15 08:54:21 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 17:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/02 08:35:48 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/11/10 03:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/20 22:43:21 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2008/01/20 23:14:18 | 016,846,848 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/20 23:14:08 | 000,106,496 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2008/01/20 23:14:18 | 000,020,480 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 06:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 06:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/09/03 21:17:30 | 000,000,574 | -HS- | M] () – C:\Users\sonam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2008/11/02 16:46:58 | 004,411,392 | —- | M] (Gabest) – C:\Users\sonam\Desktop\mplayerc.exe
[2011/03/30 14:50:53 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-03-24 07:01:06

========== Alternate Data Streams ==========

@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:5C321E34

< End of report >


OTL Extras logfile created on: 30/03/2011 2:58:27 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\sonam\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 58.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 916.44 Gb Total Space | 7.47 Gb Free Space | 0.81% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 10.17 Gb Free Space | 67.81% Space Free | Partition Type: NTFS

Computer Name: SONAM-PC | User Name: sonam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.bat [@ = batfile] – Reg Error: Key error. File not found
.cmd [@ = cmdfile] – Reg Error: Key error. File not found
.com [@ = ComFile] – Reg Error: Key error. File not found
.html [@ = ChromeHTML] – Reg Error: Key error. File not found
.pif [@ = piffile] – Reg Error: Key error. File not found
.vbs [@ = VBSFile] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] – Reg Error: Key error.
https [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Orbitdownloader\orbitdm.exe" = C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit – (Orbitdownloader.com)
"C:\Program Files\Orbitdownloader\orbitnet.exe" = C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit – (Orbitdownloader.com)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{020F18A4-4D1E-41EA-8F95-BF2547598167}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{0DCBE023-C8BB-41A5-9681-EB077E4D459D}" = lport=137 | protocol=17 | dir=in | app=system |
"{149302FD-D51F-4479-A1C3-990ECA70ED73}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{1678C378-7E70-42AD-B330-2D01EE26254C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{171BFF4D-4175-4237-BACC-E39FF1BA15B5}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{203CD4F2-D04C-4C3C-9103-6E9906309D1B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{21D29308-B912-42B8-9EE5-1620950A6F56}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{2C6CE79A-B831-4F45-AD23-9113CFCFFC33}" = lport=4481 | protocol=17 | dir=in | name=blackberry desktop software wireless music sync discovery |
"{2E7D3774-9AAA-40D5-BF1D-1C38239BC78B}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{30F6DA80-79F7-4169-926B-B1A4A034BFDB}" = rport=137 | protocol=17 | dir=out | app=system |
"{3779C5C4-0195-45D4-9243-62381E2FB78B}" = lport=4482 | protocol=6 | dir=in | name=blackberry desktop software wireless music sync data transfer |
"{3D835AA4-C5B3-45FC-A858-420E96F04BA6}" = lport=10244 | protocol=6 | dir=in | app=system |
"{3E338794-780B-41CF-AD05-437AB7CC4ED1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{43C6C2D8-8476-4F1F-B10E-18031AA779AC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{455CAD2F-833B-4918-B37B-EDDC4A6132C5}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{49BAE87E-8546-497A-B876-51058C7FA650}" = lport=4481 | protocol=6 | dir=in | name=blackberry desktop software wireless music sync data transfer |
"{4F7A9657-5DE9-42E8-89C4-722E80AB6BDB}" = lport=138 | protocol=17 | dir=in | app=system |
"{569EC159-C638-4535-B8FE-9087C09C5163}" = lport=2869 | protocol=6 | dir=in | app=system |
"{5A6462A3-3E71-4D68-884D-2454BA972871}" = lport=139 | protocol=6 | dir=in | app=system |
"{6389132D-AAF6-4520-A5E0-DF439FFE726E}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{6E684312-B52E-48E4-8B36-91104BFF8ECA}" = lport=445 | protocol=6 | dir=in | app=system |
"{776CF0FB-B647-439F-B233-DAAFDDEE004C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8D770665-ECDC-4BDC-BA55-0B10BA57D983}" = lport=4482 | protocol=17 | dir=in | name=blackberry desktop software wireless music sync discovery |
"{9A058CDC-C0CF-4197-B3F8-BF655D51F450}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9AE72CD9-A62A-4D80-8ECE-E8D7F9219263}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A11BF95D-7312-4648-990A-7FF693BFAE1C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A1EFC62F-13E1-42F8-A862-25BFE1E3A97F}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{B960900C-45C2-474A-B055-7C264DFD7140}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C4DFED6E-CAD5-4EC2-ADDA-325FAC206657}" = rport=139 | protocol=6 | dir=out | app=system |
"{C5D4C283-49EC-4FE6-8E49-BEAAD42C578D}" = lport=3390 | protocol=6 | dir=in | app=system |
"{D08C518A-6CBE-4A1A-BD4F-35D53D6D05DF}" = lport=10244 | protocol=6 | dir=in | app=system |
"{DA440C1D-B87E-4A62-9E5D-6FE55FF3C244}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DA89EF79-DF3F-4FE2-825D-A262DA505315}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{E2C6E30B-EAF0-47F2-9958-1677FF9B38BB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E35847D7-FF7A-4ACC-B605-A445E7B73233}" = rport=445 | protocol=6 | dir=out | app=system |
"{EBCF77FF-ACE2-459C-B0F3-114BD04D23A3}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{F24F59E6-3F70-4900-8CB9-EB4CD1CCD5FB}" = rport=138 | protocol=17 | dir=out | app=system |
"{F64C31D4-972D-4E76-B4CB-236EF59DD7EC}" = rport=10244 | protocol=6 | dir=out | app=system |
"{FB3C3A40-BB9A-452E-97FE-2A4E305D9A26}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{FC4E897D-451D-4C62-BD17-0B9A3A410983}" = rport=10244 | protocol=6 | dir=out | app=system |
"{FF6FB171-85E4-4D9D-B2D9-E3466619E7E7}" = lport=3390 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0106581D-91B9-4ABB-92A8-248D27015A18}" = protocol=6 | dir=in | app=c:\program files\symantec antivirus\snac.exe |
"{01BACE72-F99D-49DE-B906-B162474DB2A6}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{04714DBA-EF25-40BD-8C26-98C456884811}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{10D6434F-6F4B-4796-879D-09944FFF028B}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe |
"{12FD7809-4E51-4057-95BE-B544C9EDC3EE}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{15C0B31E-290F-4860-8E96-C3855AE55B34}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{1724EB94-9A9F-47FB-AD52-99F6E359085C}" = protocol=17 | dir=in | app=c:\program files\symantec antivirus\snac.exe |
"{18447BB8-F854-49A0-836C-6F443E3366D3}" = protocol=6 | dir=in | app=c:\users\sonam\appdata\roaming\dropbox\bin\dropbox.exe |
"{1A7D9777-FE8B-4836-924D-756AC422FCD0}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\powerdvd.exe |
"{2B6C00C8-7248-4E19-9461-33090A6B9D73}" = protocol=17 | dir=in | app=c:\program files\dell video chat\dellvideochat.exe |
"{2C576A2D-2F5A-435E-86A0-5E9137629214}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{311E980C-0008-4508-A06C-7F4BA1D21997}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{32CE4213-B9A2-494D-AF1A-5FED84BF1AD3}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{390F6283-7240-4579-BF22-E66AFD6514C5}" = protocol=6 | dir=in | app=c:\users\sonam\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{40B3B95A-9E65-4DCA-9A2E-999FFC2B2C59}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{44115E69-8F7B-437B-AEB3-238F5E91C00A}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{475D486C-71D3-4416-8FAF-D77994D03565}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{4AE8D7A5-E53E-4242-A471-5A11030A63E4}" = protocol=6 | dir=in | app=c:\program files\dell video chat\dellvideochat.exe |
"{4BE85832-4EE4-49AD-BC7D-B7612E297D05}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{52BAD81F-D3EB-4C80-B589-B98F0E27CBBD}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{5E0AC55E-2084-4B34-819B-F3EADD0E6BBB}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{6221F4AB-4A4B-4972-993D-BA46A6AF7FB0}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{73494A89-1154-4135-894F-4792257572A3}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{75CDC363-11BA-4C81-840C-EDFBC54CC2E0}" = protocol=17 | dir=in | app=c:\users\sonam\appdata\roaming\dropbox\bin\dropbox.exe |
"{81C3FB17-C5CB-48E9-82AD-CE072BA1A7FA}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{85444A64-145D-422E-B057-2B64A22801E4}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{87194702-C720-4960-90CC-BB59AE541CC5}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{8DA7E8DD-AC01-466D-A535-D3A45F15F476}" = protocol=17 | dir=in | app=c:\program files\common files\symantec shared\ccapp.exe |
"{91971C24-F826-48E2-85C0-DE135443F588}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{9211A64E-16FA-4669-BFC0-D800CBC809BB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{96B7DFF3-C607-4584-9DBC-13A13DC94CC1}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{A72D0967-61BC-4A72-AF27-32BDD841FCA6}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{A90FB5AF-143E-4444-8EF6-9FC3B75ECB6C}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{AD973EA4-26A8-4EBE-81D8-1982EF498CC2}" = protocol=17 | dir=in | app=c:\users\sonam\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{B001F25D-2DC1-42A4-BCA9-77B0A6675D05}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{B56687AF-2D1C-4F75-952F-730FD712DFC7}" = protocol=6 | dir=in | app=c:\program files\common files\symantec shared\ccapp.exe |
"{BF0376F6-4FD7-461A-8F79-802B1A7BC24D}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{D39F5D90-6F18-4911-9662-78DB5CCD4EE6}" = protocol=17 | dir=in | app=c:\program files\research in motion\blackberry desktop\rim.desktop.exe |
"{D93488C1-9C9F-461C-A40C-0883CB70E7B6}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{DE8BA9B4-6648-45E0-8533-CD42F2DA20DE}" = protocol=6 | dir=in | app=c:\program files\research in motion\blackberry desktop\rim.desktop.exe |
"{DFCC10EB-284F-49D6-94C4-A9FE978A31EE}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{DFE74DE3-3706-4FEF-B20E-815ACE2FEC4A}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{E10E9CB6-5C56-4829-8FE3-89805089E0CF}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{E95A04EF-7A49-453D-9E41-DD863B41D1DC}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{F29D27E9-9B44-429D-8108-B7D5B2E73124}" = protocol=17 | dir=in | app=c:\program files\symantec antivirus\smc.exe |
"{F3E09A7D-3110-4F88-A91B-DDFDC8A97B40}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F54F4389-E06A-4DF8-9C31-8A05B96DEB78}" = protocol=6 | dir=in | app=c:\program files\symantec antivirus\smc.exe |
"{F86924BE-F5B3-4336-BE6F-8932D76F5DF9}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{FC529BFA-95B1-42F5-8D0A-8974D668DB8F}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{FC88DB58-8920-4759-9414-6A209D02F31A}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{FD041AE6-DE09-4017-B295-E9D73EC6BB3D}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"TCP Query User{00B725E1-88C0-4E85-8F8F-D529573BCBF3}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe |
"TCP Query User{29E43933-F01F-4913-8AA0-5F06FF11F1E7}C:\program files\java\jre1.6.0_07\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\javaw.exe |
"TCP Query User{345DF5FB-1813-4CDA-AAAA-64C42AC5FF8F}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{34B4D7EC-7F1B-42BE-A51E-9775557C2FBC}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe |
"TCP Query User{39D4A315-F8AA-44BD-86D2-3546D276EDE6}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"TCP Query User{56210131-7D0F-40F3-BE56-137781FD8ADA}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{5667C8D8-5E79-4240-9CAF-EC849E741C7F}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"TCP Query User{5B0AABD0-5C26-4CD0-B941-C39D6B37C65B}C:\program files\boxee\boxee.exe" = protocol=6 | dir=in | app=c:\program files\boxee\boxee.exe |
"TCP Query User{5DD01ACB-764C-4CC6-8FFE-FF93544E7DCB}C:\program files\soulseekns\slsk.exe" = protocol=6 | dir=in | app=c:\program files\soulseekns\slsk.exe |
"TCP Query User{67CF7A59-369F-4567-B57B-3D76B90BE5DC}C:\program files\qtweb\qtweb.exe" = protocol=6 | dir=in | app=c:\program files\qtweb\qtweb.exe |
"TCP Query User{6AF635C9-F6AC-4193-928D-B80CDB6A5E46}C:\program files\frostwire\frostwire.exe" = protocol=6 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"TCP Query User{724EC638-FCB6-41C5-ABFB-64FFB6459DD9}C:\program files\tvuplayer\tvuplayer.exe" = protocol=6 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"TCP Query User{80F6461E-9743-4FFE-AF08-9B668B5A2B29}C:\program files\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe |
"TCP Query User{A5D61B37-8E4C-48A4-BB73-4C69DD6A2A3A}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{A73A94D1-8136-43C2-BCB4-EFBF00475EDD}C:\program files\real alternative\media player classic\mplayerc.exe" = protocol=6 | dir=in | app=c:\program files\real alternative\media player classic\mplayerc.exe |
"TCP Query User{D9C53E0C-C663-4B8F-9D78-9E4C798E973F}C:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" = protocol=6 | dir=in | app=c:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe |
"TCP Query User{DD478932-7717-4794-8B28-73CDB3C02F97}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"TCP Query User{DDC87E2F-1F7B-4DE8-A2AF-C51E43C5DBD1}C:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe |
"TCP Query User{F0AF53A9-C1D7-45B3-AF77-C6D36D8142B2}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{F1C93F2A-3E38-4F31-8D0E-0C52F3CAD66E}C:\program files\tvants\tvants.exe" = protocol=6 | dir=in | app=c:\program files\tvants\tvants.exe |
"TCP Query User{F7010DC2-456B-43D2-98DD-3DFE046D4282}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"TCP Query User{FD8298A0-E1C5-43D1-88A4-A3B2BF496C84}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"TCP Query User{FE343D2B-4AF4-4BB8-85C6-0826472D46C2}C:\users\sonam\desktop\anomos\anomos.exe" = protocol=6 | dir=in | app=c:\users\sonam\desktop\anomos\anomos.exe |
"UDP Query User{007CCDB3-ABE1-494C-A208-6783D68C9A5F}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{055E4405-011E-4949-BB00-A3C0B35F91C6}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{10F1F206-0154-49F3-9453-A39B5FB122CA}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{163E639E-BC61-48D8-9ECB-F9AE9CB9156C}C:\program files\real alternative\media player classic\mplayerc.exe" = protocol=17 | dir=in | app=c:\program files\real alternative\media player classic\mplayerc.exe |
"UDP Query User{16DA6E11-71F4-430E-B062-32E4900D5992}C:\program files\frostwire\frostwire.exe" = protocol=17 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"UDP Query User{17F35300-37BE-484F-AD48-158F25C5E7D0}C:\program files\qtweb\qtweb.exe" = protocol=17 | dir=in | app=c:\program files\qtweb\qtweb.exe |
"UDP Query User{1C58D239-4354-496B-AD2E-BC858A9B3C34}C:\program files\java\jre1.6.0_07\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\javaw.exe |
"UDP Query User{2BFB3D60-7978-4716-BC50-6685B4A2A245}C:\program files\soulseekns\slsk.exe" = protocol=17 | dir=in | app=c:\program files\soulseekns\slsk.exe |
"UDP Query User{35ECB886-55FE-46A6-9F4A-1FA1FF84878C}C:\program files\tvuplayer\tvuplayer.exe" = protocol=17 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"UDP Query User{37FD5F86-301C-4A5F-B6F8-567A4795470F}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
"UDP Query User{479DCCBB-9F38-4BFC-86D2-FFE071C9B2BD}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe |
"UDP Query User{67210CEB-D4D8-4E57-A06A-76E1DDA7E8D7}C:\program files\boxee\boxee.exe" = protocol=17 | dir=in | app=c:\program files\boxee\boxee.exe |
"UDP Query User{6D68D587-9ED1-4413-8108-61EEC4409021}C:\program files\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe |
"UDP Query User{6F399618-F4DE-4691-93A5-5291DDC3DBEE}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe |
"UDP Query User{7A3026CB-673F-4E89-8DFE-7E8A2BEAF1CB}C:\users\sonam\desktop\anomos\anomos.exe" = protocol=17 | dir=in | app=c:\users\sonam\desktop\anomos\anomos.exe |
"UDP Query User{7A65FFC0-4E85-4606-9F52-737CC4FC2AFE}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"UDP Query User{8D02DFD8-7A21-4331-BEC7-16D082FBEB06}C:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" = protocol=17 | dir=in | app=c:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe |
"UDP Query User{A2D391F8-0BD4-4485-965B-377AF0D3261C}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{AB73C535-7D02-40EE-B5C6-D4A7B2FB1CD5}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{B12ABC17-17D0-4409-B865-61EF86C64915}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"UDP Query User{C07C5736-3B02-43D4-BC69-7F918CDFEF83}C:\program files\tvants\tvants.exe" = protocol=17 | dir=in | app=c:\program files\tvants\tvants.exe |
"UDP Query User{CA778AC5-4F4C-4D93-9E7E-9C5E479D5FC6}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"UDP Query User{DEAC5C38-BC51-4C01-8DC5-969FE5D28E5A}C:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{005F78AF-110D-398A-8430-BE98950A1E22}" = Google Talk Plugin
"{008099FB-FC94-23B9-E613-02F5A7A0B27C}" = Catalyst Control Center Graphics Previews Vista
"{0405E51E-9582-4207-8F38-AC44201D3808}" = VeohTV BETA
"{04FDC8D5-704E-D6FF-6C0F-F243EB1EA544}" = Catalyst Control Center InstallProxy
"{05ADEEC8-BD58-43D9-A9E3-1F53B0DA117A}" = Opera 10.51
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{11B734DB-A59E-67F8-C57B-26AF2A424D26}" = Catalyst Control Center Graphics Full New
"{13C0E1F7-BB8A-4545-B25E-628D025A94AD}_is1" = QtWeb Internet Browser 3.7
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FECF5F8-8E75-432C-9FF7-1C04F1956B54}" = Realtek Ethernet Network Card Diagnostic tool for Windows Vista
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java™ 6 Update 18
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{294BF709-D758-4363-8D75-01479AD20927}" = Windows Live Family Safety
"{2D6ED011-055B-4041-B198-BB903827EBFB}" = Safari
"{2EFCC193-D915-4CCB-9201-31773A27BC06}" = Symantec Endpoint Protection
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{336DBED7-6987-280E-68FD-128C8E49F339}" = ccc-utility
"{338F08AB-C262-42C7-B000-34DE1A475273}" = Ad-Aware Email Scanner for Outlook
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4281EBFF-4B50-3B3F-24AF-37AE651F96AA}" = Catalyst Control Center Graphics Full Existing
"{448E2D77-E504-4221-B2C2-93646B344729}" = Mouse Suite for Desktop Computers
"{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F94119D-1B71-400e-9F04-B4E5CEAE71F8}_is1" = Sothink Movie DVD Maker
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.2
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5DDA0912-0AE8-A706-B227-5F46F29718AF}" = Catalyst Control Center Localization All
"{60082130-7177-B669-5232-A4D8983DAAAB}" = Skins
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{634033F4-3E94-4F5E-B3E4-3928A46A78D7}_is1" = ConvertXtoDVD 4 english manual
"{6350DFD0-01B0-11DE-87AF-0800200C9A66}" = Livestation
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}" = EDocs
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7F205F55-A144-417C-9682-2C128C2A3C14}" = BlackBerry Device Software v6.0.0 for the BlackBerry 9100/9105 smartphone
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{84A78614-0E4B-4A4E-BA8C-2B0A05A08E4E}" = BlackBerry Desktop Software 6.0.1
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8DD6892C-C9A8-404B-95ED-1CCE15324178}" = BlackBerry App World Browser Plugin
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 3.81
"{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}" = iTunes
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A29549FD-65F3-440C-A552-6B8114CF319D}" = Skype Toolbars
"{A5A3D3E5-D31B-94AB-AD40-0C4A6B46F896}" = ccc-core-static
"{A69D7B32-2BE9-42BF-B576-69B5E0FF7394}" = Catalyst Control Center - Branding
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1" = VirtualDubMOD [removed] US
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B8F87E7F-28D2-39A9-DA21-35FE13071761}" = Catalyst Control Center Graphics Previews Common
"{B935C985-A17F-484B-8470-09E4FC27DC26}" = Dell-eBay
"{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}" = Logitech Webcam Software
"{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}" = Apple Mobile Device Support
"{C49067A8-8212-4A82-A4D9-1519701644F0}" = Citrix Presentation Server Client - Web Only
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C0}" = WinZip 15.0
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D4163F73-AAE4-4E4F-9E9E-70828C2ADB58}" = iPodifier
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D6C9AF27-9414-46C8-B9D8-D878BA041033}" = Nero 8
"{D8A081EB-19BB-CA58-A86E-AEF0D1E0B243}" = ATI Catalyst Install Manager
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.1.2.336
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E75AB7CD-E5AF-1FF0-B5FD-AD5DAF91FCBD}" = Catalyst Control Center Core Implementation
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{EDFE0EA5-B933-7125-A7C1-A05C1B5CD57C}" = CCC Help English
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1454832-04F3-5534-48C4-8A11BD348013}" = Catalyst Control Center Graphics Light
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"AC3Filter" = AC3Filter (remove only)
"Ad-Aware" = Ad-Aware
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AnyDVD" = AnyDVD
"Ares" = Ares 2.1.1
"Audacity_is1" = Audacity 1.2.6
"AURC_is1" = Audacity Recovery Utility
"AviSynth" = AviSynth 2.5
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS YouTube Uploader 2.1_is1" = AVS YouTube Uploader version 2.1
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"AVS4YOU Video Editor 4_is1" = AVS Video Editor 4
"BlackBerry_Desktop" = BlackBerry Desktop Software 6.0.1
"Burn4Free" = Burn4Free CD and DVD
"CCleaner" = CCleaner
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"d2mp" = d2mp
"Dell Video Chat" = Dell Video Chat (remove only)
"DeVeDe_is1" = DeVeDe 3.11b
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVD Flick_is1" = DVD Flick 1.3.0.7
"DVD Shrink_is1" = DVD Shrink 3.2
"DVDStyler_is1" = DVDStyler v1.7.4
"eMule" = eMule
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ERUNT_is1" = ERUNT 1.1j
"ffdshow_is1" = ffdshow [rev 3164] [2009-12-14]
"Free Ipod Video Converter_is1" = Free Ipod Video Converter V 2.6
"FrostWire" = FrostWire 4.21.1
"Google Desktop" = Google Desktop
"GoToAssist" = GoToAssist 8.0.0.514
"HaaliMkx" = Haali Media Splitter
"HDMI" = Intel® Graphics Media Accelerator Driver
"HotspotShield" = Hotspot Shield 1.37
"ImgBurn" = ImgBurn
"InstallShield_{0405E51E-9582-4207-8F38-AC44201D3808}" = VeohTV BETA
"K-Meleon" = K-Meleon 1.5.4 en-US (remove only)
"LiveUpdate" = LiveUpdate 3.3 (Symantec Corporation)
"lvdrivers_12.10" = Logitech Webcam Software Driver Package
"Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
"MainApp.exe_is1" = CloneDVD 4.3.0.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"ManyCam" = ManyCam 2.6.1 (remove only)
"McAfee Security Scan" = McAfee Security Scan Plus
"MediaCoder" = MediaCoder 0.6.2
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"MKVtoolnix" = MKVtoolnix 2.2.0
"Mozilla ActiveX Control v1.7.12" = Mozilla ActiveX Control v1.7.12
"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)
"MP3 Cutter Joiner_is1" = MP3 Cutter Joiner 3.00
"MPEG Joiner_is1" = MPEG Joiner
"OpenAL" = OpenAL
"Orbit_is1" = Orbit Downloader
"qt7lite_is1" = QT Lite 2.7.0
"RealAlt_is1" = Real Alternative 2.0.1
"Soulseek2" = SoulSeek 157 NS 13c
"SpywareBlaster_is1" = SpywareBlaster 4.2
"StaxRip_is1" = StaxRip 1.1.1.0
"TVAnts 1.0" = TVAnts 1.0
"TVUPlayer" = TVUPlayer [removed]
"Ultra QuickTime Converter_is1" = Ultra QuickTime Converter 2.3.0916
"Ultra RM Converter_is1" = Ultra RM Converter 4.0.1127
"URLSnooper 2_is1" = URL Snooper v2.23.01
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"Veoh Video Compass" = Veoh Video Compass
"Veoh Web Player Beta" = Veoh Web Player
"Videora iPod Converter" = Videora iPod Converter 6
"VLC media player" = VLC media player 1.1.7
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1 beta5
"WinRAR archiver" = WinRAR archiver
"XviD_is1" = XviD 1.1 final uninstall

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"309a46b1dc89b774" = Dell Driver Download Manager
"BOXEE" = Boxee
"Dropbox" = Dropbox
"Octoshape Streaming Services" = Octoshape Streaming Services
"uTorrent" = µTorrent

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 30/03/2011 12:49:33 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 12:49:34 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 2:44:49 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 2:45:03 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 2:45:22 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 2:50:52 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =

Error - 30/03/2011 2:53:08 PM | Computer Name = sonam-PC | Source = Application Error | ID = 1000
Description = Faulting application plugin-container.exe, version 1.9.2.4095, time
stamp 0x4d852c62, faulting module ntdll.dll, version 6.0.6002.18327, time stamp
0x4cb73436, exception code 0xc0000005, fault offset 0x00048822, process id 0x17d0,
application start time 0x01cbeda23e7b23af.

[ Media Center Events ]
Error - 15/10/2008 10:17:39 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 107
Description =

Error - 15/10/2008 10:21:39 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 107
Description =

Error - 15/10/2008 10:28:32 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 109
Description =

Error - 08/01/2009 12:42:54 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 16/02/2009 12:46:02 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 19/02/2009 12:38:56 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 04/03/2009 12:38:44 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 23/08/2009 4:13:42 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 24/08/2009 5:44:21 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 08/10/2009 3:31:44 PM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

[ OSession Events ]
Error - 28/10/2009 3:39:29 AM | Computer Name = sonam-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 44361
seconds with 180 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 11/03/2011 3:12:58 PM | Computer Name = sonam-PC | Source = cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.

Error - 11/03/2011 3:13:02 PM | Computer Name = sonam-PC | Source = cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.

Error - 11/03/2011 4:44:24 PM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 14/03/2011 7:30:44 PM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 16/03/2011 4:09:38 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 16/03/2011 4:34:13 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 18/03/2011 1:31:03 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 23/03/2011 7:34:02 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 25/03/2011 8:37:55 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 28/03/2011 2:58:48 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.


< End of report >
:welcome:

Please don't attach the scans / logs from these scans, use "copy/paste".



DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.


Vista and Windows 7 users:
1. These tools MUST be run from the executable. (.exe) every time you run them
2. With Admin Rights (Right click, choose "Run as Administrator")


Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

Note: Close all browsers before running ATF Cleaner: IE, FireFox, etc.

Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

If you use Firefox browser

Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.


It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Next:

Launch Notepad (Start>All Programs>Accessories), and copy/paste all the Quoted REGEDIT below to it. Don't forget to include REGEDIT4.
Save in: Desktop
File Name: fixme.reg
Save as Type: All files
Click: Save

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"=-

Save this as fixme.reg Choose to save as *all files and place it on your desktop.
It should look like this: [external image: Posted Image]
Doubleclick on it and when it asks you if you want to merge the contents to the registry, click yes/ok.

Reboot and describe how your computer behaves at the moment.
Thanks for your reply LDTate. I won't be able to access the infected computer for a couple of days but will follow your instructions when I am able to. Thank you.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI