houngan666
Topic Starter
Hi, I'm not able to use some of the applications on my computer including Windows Live Messenger and Internet. They won't access the internet. I have included my OTL scan files.
Could someone please help me? Thank you.
OTL logfile created on: 30/03/2011 2:58:26 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\sonam\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 58.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 916.44 Gb Total Space | 7.47 Gb Free Space | 0.81% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 10.17 Gb Free Space | 67.81% Space Free | Partition Type: NTFS
Computer Name: SONAM-PC | User Name: sonam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\sonam\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files\Research In Motion\BlackBerry Desktop\Rim.Desktop.AutoUpdate.exe (Research In Motion)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\K-Meleon\k-meleon.exe (http://kmeleon.sf.net/)
PRC - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\Hotspot Shield\bin\openvpntray.exe ()
PRC - C:\Program Files\Hotspot Shield\bin\openvpnas.exe ()
PRC - C:\Program Files\Hotspot Shield\bin\hsswd.exe ()
PRC - C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
PRC - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe (AnchorFree Inc.)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\SmcGui.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Smc.exe (Symantec Corporation)
PRC - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
PRC - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
PRC - C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Windows\System32\pmxmiced.exe (Primax Electronics Ltd.)
PRC - C:\Windows\System32\ico.exe (Primax Electronics Ltd.)
========== Modules (SafeList) ==========
MOD - C:\Users\sonam\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (RoxLiveShare9) – File not found
SRV - (BBSvc) – C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) – C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (McComponentHostService) – C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (HssTrayService) – C:\Program Files\Hotspot Shield\bin\HssTrayService.exe ()
SRV - (HotspotShieldService) – C:\Program Files\Hotspot Shield\bin\openvpnas.exe ()
SRV - (HssWd) – C:\Program Files\Hotspot Shield\bin\hsswd.exe ()
SRV - (AERTFilters) – C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
SRV - (HssSrv) – C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe (AnchorFree Inc.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (SNAC) – C:\Program Files\Symantec AntiVirus\SNAC.EXE (Symantec Corporation)
SRV - (Symantec AntiVirus) – C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (SmcService) – C:\Program Files\Symantec AntiVirus\Smc.exe (Symantec Corporation)
SRV - (LiveUpdate) – C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) – C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (AresChatServer) – C:\Program Files\Ares\chatServer.exe (Ares Development Group)
SRV - (NMSAccessU) – C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
SRV - (GoToAssist) – C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter) – C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (NAVEX15) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110330.003\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110330.003\NAVENG.SYS (Symantec Corporation)
DRV - (Lbd) – C:\Windows\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SymEvent) – C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (RTL8169) – C:\Windows\System32\drivers\Rtlh86.sys (Realtek )
DRV - (HssDrv) – C:\Windows\System32\drivers\HssDrv.sys (AnchorFree Inc.)
DRV - (taphss) – C:\Windows\System32\drivers\taphss.sys (AnchorFree Inc)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (LVPr2Mon) – C:\Windows\System32\drivers\LVPr2Mon.sys ()
DRV - (SRTSPL) – C:\Windows\System32\drivers\srtspl.sys (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\System32\drivers\srtsp.sys (Symantec Corporation)
DRV - (SRTSPX) – C:\Windows\System32\drivers\srtspx.sys (Symantec Corporation)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (SYMTDI) – C:\Windows\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\Windows\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (COH_Mon) – C:\Windows\System32\drivers\COH_Mon.sys (Symantec Corporation)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (AnyDVD) – C:\Windows\System32\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV - (R300) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (NPF) – C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (RtNdPt60) – C:\Windows\System32\drivers\RtNdPt60.sys (Windows ® Codename Longhorn DDK provider)
DRV - (tapvpn) – C:\Windows\System32\drivers\tapvpn.sys (The OpenVPN Project)
DRV - (e1express) Intel® – C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation)
DRV - (RTL8187) – C:\Windows\System32\drivers\wg111v2.sys (NETGEAR Inc.)
DRV - (pmxmouse) – C:\Windows\System32\drivers\pmxmouse.sys (Primax Electronics Ltd.)
DRV - (pmxusblf) – C:\Windows\System32\drivers\pmxusblf.sys (Primax Electronics Ltd.)
DRV - (QCMerced) – C:\Windows\System32\drivers\lvcm.sys ()
DRV - (LVUSBSta) – C:\Windows\System32\drivers\LVUSBSta.sys (Logitech Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/securit…ponse/index.jsp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?lang=en-ca&OCID;=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F0 A3 23 3B 64 E6 CA 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
========== FireFox ==========
FF - HKLM\software\mozilla\K-Meleon\Extensions\\Plugins: C:\Program Files\K-Meleon\Plugins [2010/10/06 18:17:52 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\K-Meleon\Extensions\\Components: C:\Program Files\K-Meleon\Components [2010/10/06 18:18:12 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/23 06:39:26 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/23 06:39:26 | 000,000,000 | —D | M]
[2009/02/09 15:14:14 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Extensions
[2009/02/09 15:14:14 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Extensions\{ae2cff10-0d52-4066-8be9-4abcf119fa79}
[2011/03/28 19:45:33 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions
[2010/05/03 10:45:16 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/06/15 19:00:06 | 000,000,000 | —D | M] (jDownFF) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66}
[2010/05/03 10:45:17 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/06/04 18:04:59 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/06/04 18:04:53 | 000,000,000 | —D | M] ("BitDefender QuickScan") – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010/05/28 21:04:24 | 000,000,000 | —D | M] (TVU Web Player) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\[removed]
[2011/03/24 23:59:36 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/03/24 23:59:37 | 000,000,000 | —D | M] (Skype extension) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
O1 HOSTS File: ([2010/01/05 18:08:21 | 000,000,027 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll (AnchorFree Inc.)
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (Veoh Video Compass) - {52836EB0-631A-47B1-94A6-61F9D9112DAE} - C:\Program Files\Veoh Networks\Veoh Video Compass\SearchRecsPlugin.dll (Veoh Networks)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll ()
O3 - HKLM\..\Toolbar: (Veoh Browser Plug-in) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PMX Daemon] C:\Windows\System32\ico.exe (Primax Electronics Ltd.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QT Lite\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKCU..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10n_Plugin.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\sonam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8 - Extra context menu item: &Download; by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab; video by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load; all by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab (RIM AxLoader)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\GoToAssist: DllName - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll - C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img11.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{6699b567-46de-11e0-92c7-0021703a9f80}\Shell\AutoRun\command - "" = J:\start.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…com [@ = ComFile] – Reg Error: Key error. File not found
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
Drivers32: msacm.ac3acm - C:\Windows\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\Windows\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\Windows\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.voxacm160 - C:\Windows\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.dvsd - C:\Windows\System32\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.I420 - C:\Windows\System32\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.iv50 - C:\Windows\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.xvid - C:\Windows\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2011/03/30 14:50:48 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe
[2011/03/30 14:50:08 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{33AD8694-4811-4125-973D-CFBA1B5B716A}
[2011/03/25 00:00:25 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\skypePM
[2011/03/24 23:59:44 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Skype
[2011/03/24 23:59:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011/03/24 23:59:04 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2011/03/24 23:59:00 | 000,000,000 | R–D | C] – C:\Program Files\Skype
[2011/03/24 23:58:46 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2011/03/23 03:22:47 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{3E593D15-4E84-4ED5-BAFB-632910E5C572}
[2011/03/22 18:08:21 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2011/03/22 18:08:21 | 000,288,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2011/03/18 15:10:33 | 000,000,000 | —D | C] – C:\Users\sonam\Documents\BkUp554
[2011/03/17 20:21:31 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{AC2A6EF1-8818-4002-870B-5376CBC63AD3}
[2011/03/16 03:25:25 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{43A2E345-378C-499F-929E-DB4AA7CF365E}
[2011/03/11 14:37:52 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{73BBFA43-A80D-4E47-BEDA-54EA2B5A1A70}
[2011/03/11 13:53:27 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2011/03/11 13:52:29 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Dropbox
[2011/03/10 22:20:28 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2011/03/10 22:19:52 | 000,000,000 | —D | C] – C:\ProgramData\WinZip
[2011/03/10 22:19:19 | 000,000,000 | —D | C] – C:\Program Files\WinZip
[2011/03/10 12:41:39 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{E361019C-C46E-48CD-8CAB-83B5C9FC61AB}
[2011/03/09 16:22:05 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EncDec.dll
[2011/03/09 16:22:04 | 000,322,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbe.dll
[2011/03/09 16:22:04 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mpg2splt.ax
[2011/03/09 16:22:04 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbeio.dll
[2011/03/06 17:22:39 | 000,000,000 | —D | C] – C:\Users\sonam\Documents\BlackBerry
[2011/03/06 17:21:38 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\Research In Motion
[2011/03/06 17:15:51 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{B4A4FB8B-1774-4BDD-8A53-5075870837C1}
[2011/03/06 16:53:09 | 000,038,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2011/03/06 16:52:16 | 000,000,000 | —D | C] – C:\ProgramData\Research In Motion
[2011/03/06 16:40:35 | 000,000,000 | —D | C] – C:\Program Files\Research In Motion Limited
[2011/03/05 00:16:27 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{79597155-7FD4-47F4-BF7F-28693DA8670B}
[2011/03/04 13:03:52 | 000,000,000 | —D | C] – C:\Program Files\Pegasys Inc
[2011/03/03 19:52:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2008/10/22 11:56:11 | 000,047,360 | —- | C] (VSO Software) – C:\Users\sonam\AppData\Roaming\pcouffin.sys
========== Files - Modified Within 30 Days ==========
[2011/03/30 14:55:18 | 000,001,057 | —- | M] () – C:\Users\sonam\AppData\Roaming\vso_ts_preview.xml
[2011/03/30 14:50:53 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe
[2011/03/30 14:04:15 | 000,113,152 | —- | M] () – C:\Users\sonam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/30 13:19:26 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/30 13:19:26 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/27 18:26:00 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-807892715-3149862127-586907164-1000UA.job
[2011/03/27 15:26:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-807892715-3149862127-586907164-1000Core.job
[2011/03/25 00:00:26 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2011/03/24 23:59:06 | 000,001,878 | —- | M] () – C:\Users\Public\Desktop\Skype.lnk
[2011/03/24 00:41:18 | 000,000,000 | —- | M] () – C:\Windows\System32\null
[2011/03/23 03:26:25 | 000,611,664 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/03/23 03:26:25 | 000,109,112 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/03/23 03:20:31 | 000,000,276 | —- | M] () – C:\Windows\tasks\RtlNICDiagVistaStart.job
[2011/03/23 03:19:45 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/03/23 03:19:01 | 3220,365,312 | -HS- | M] () – C:\hiberfil.sys
[2011/03/06 17:11:55 | 000,384,568 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/03/06 16:54:10 | 000,002,098 | —- | M] () – C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
[2011/03/06 16:54:08 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_RimUsb_01009.Wdf
[2011/03/06 16:54:05 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011/03/05 13:15:28 | 000,103,032 | —- | M] () – C:\Users\sonam\Documents\cc_20110305_121354.reg
[2011/03/05 01:08:29 | 005,509,734 | —- | M] () – C:\Users\sonam\Documents\Backup-(2011-03-05).ipd
[2011/03/05 00:42:47 | 000,744,140 | —- | M] () – C:\Users\sonam\Documents\LoaderBackup-(2011-03-04).ipd
[2011/03/05 00:05:31 | 000,000,256 | —- | M] () – C:\Windows\System32\pool.bin
[2011/03/03 19:52:49 | 000,000,861 | —- | M] () – C:\Users\Public\Desktop\VLC media player.lnk
========== Files Created - No Company Name ==========
[2011/03/25 00:00:26 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2011/03/24 23:59:06 | 000,001,878 | —- | C] () – C:\Users\Public\Desktop\Skype.lnk
[2011/03/06 16:54:10 | 000,002,098 | —- | C] () – C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
[2011/03/06 16:54:08 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_RimUsb_01009.Wdf
[2011/03/06 16:54:05 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011/03/06 16:53:13 | 000,000,003 | —- | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf
[2011/03/05 13:15:22 | 000,103,032 | —- | C] () – C:\Users\sonam\Documents\cc_20110305_121354.reg
[2011/03/05 01:08:15 | 005,509,734 | —- | C] () – C:\Users\sonam\Documents\Backup-(2011-03-05).ipd
[2011/03/05 00:42:47 | 000,744,140 | —- | C] () – C:\Users\sonam\Documents\LoaderBackup-(2011-03-04).ipd
[2011/03/05 00:05:31 | 000,000,256 | —- | C] () – C:\Windows\System32\pool.bin
[2011/03/03 19:52:49 | 000,000,861 | —- | C] () – C:\Users\Public\Desktop\VLC media player.lnk
[2010/11/11 04:05:04 | 000,000,118 | —- | C] () – C:\Windows\System32\MRT.INI
[2010/10/29 01:34:24 | 000,000,008 | —- | C] () – C:\Users\sonam\AppData\Roaming\vfzwln.dat
[2010/10/21 14:38:49 | 000,087,608 | —- | C] () – C:\Users\sonam\AppData\Roaming\inst.exe
[2010/09/22 13:58:11 | 000,113,152 | —- | C] () – C:\Users\sonam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/02 21:24:01 | 000,015,880 | —- | C] () – C:\Windows\System32\lsdelete.exe
[2010/01/05 17:57:57 | 000,261,632 | —- | C] () – C:\Windows\PEV.exe
[2010/01/05 17:57:57 | 000,077,312 | —- | C] () – C:\Windows\MBR.exe
[2010/01/05 03:03:31 | 000,000,000 | —- | C] () – C:\Windows\System32\cd.dat
[2009/12/03 10:27:28 | 000,080,416 | —- | C] () – C:\Windows\System32\RtNicProp32.dll
[2009/10/16 15:42:47 | 000,180,720 | —- | C] () – C:\Windows\System32\atiicdxx.dat
[2009/10/16 15:42:47 | 000,081,920 | —- | C] () – C:\Windows\System32\ATIODE.exe
[2009/10/16 15:42:47 | 000,045,056 | —- | C] () – C:\Windows\System32\ATIODCLI.exe
[2009/10/16 15:42:47 | 000,011,264 | —- | C] () – C:\Windows\System32\atimuixx.dll
[2009/10/11 01:01:05 | 000,000,046 | —- | C] () – C:\Windows\System32\DonationCoder_urlsnooper_InstallInfo.dat
[2009/10/07 01:46:36 | 000,025,752 | —- | C] () – C:\Windows\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:23:08 | 000,013,584 | —- | C] () – C:\Windows\System32\drivers\iKeyLFT2.dll
[2009/09/11 01:59:40 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2009/09/11 01:59:39 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/05/19 11:48:25 | 000,000,726 | —- | C] () – C:\Windows\Mp3CutterJoiner.ini
[2009/05/17 16:57:54 | 000,000,005 | —- | C] () – C:\Windows\System32\SySMP3CutJoin.dat
[2009/05/17 16:57:40 | 000,237,568 | —- | C] () – C:\Windows\System32\lame_enc.dll
[2009/03/09 01:05:12 | 000,000,040 | -HS- | C] () – C:\ProgramData\.zreglib
[2009/02/24 15:55:27 | 000,001,057 | —- | C] () – C:\Users\sonam\AppData\Roaming\vso_ts_preview.xml
[2009/01/26 16:02:18 | 000,028,672 | —- | C] () – C:\Windows\System32\AVEQT.dll
[2008/12/25 14:40:14 | 000,129,024 | —- | C] () – C:\Windows\System32\AVERM.dll
[2008/12/23 11:33:18 | 000,053,299 | —- | C] () – C:\Windows\System32\pthreadVC.dll
[2008/11/02 17:05:06 | 000,085,504 | —- | C] () – C:\Windows\System32\ff_vfw.dll
[2008/10/28 18:29:16 | 000,000,069 | —- | C] () – C:\Windows\NeroDigital.ini
[2008/10/22 11:56:11 | 000,007,887 | —- | C] () – C:\Users\sonam\AppData\Roaming\pcouffin.cat
[2008/10/22 11:56:11 | 000,001,144 | —- | C] () – C:\Users\sonam\AppData\Roaming\pcouffin.inf
[2008/10/17 21:40:46 | 000,139,264 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2008/10/17 21:40:45 | 000,524,288 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2008/10/16 17:38:31 | 000,024,206 | —- | C] () – C:\Users\sonam\AppData\Roaming\UserTile.png
[2008/10/15 20:20:23 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/10/04 02:28:21 | 002,192,024 | —- | C] () – C:\Windows\System32\igkrng500.bin
[2008/10/04 02:28:21 | 000,495,376 | —- | C] () – C:\Windows\System32\igcompkrng500.bin
[2008/10/04 02:28:21 | 000,147,456 | —- | C] () – C:\Windows\System32\igfxCoIn_v1527.dll
[2008/10/04 02:28:21 | 000,147,172 | —- | C] () – C:\Windows\System32\igfcg550.bin
[2008/10/04 02:28:18 | 003,107,788 | —- | C] () – C:\Windows\System32\atiumdva.dat
[2008/10/04 02:28:18 | 000,159,744 | —- | C] () – C:\Windows\System32\atitmmxx.dll
[2008/10/04 02:28:18 | 000,090,112 | —- | C] () – C:\Windows\System32\atibrtmon.exe
[2008/10/03 23:46:08 | 000,303,104 | —- | C] () – C:\Windows\System32\FontZoom.exe
[2008/10/03 23:46:08 | 000,131,062 | —- | C] () – C:\Windows\System32\DellPM.ini
[2008/10/03 18:34:16 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2006/11/02 08:57:28 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,384,568 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,611,664 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,109,112 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2005/05/27 09:32:52 | 001,317,152 | —- | C] () – C:\Windows\System32\drivers\lvcm.sys
[2005/05/27 09:10:26 | 000,009,255 | —- | C] () – C:\Windows\System32\lvcoinst.ini
========== LOP Check ==========
[2009/10/15 21:40:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\.anomos
[2009/12/25 15:20:01 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\AVSMedia
[2009/07/06 23:21:08 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\BOXEE
[2009/02/09 15:14:13 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Broad Intelligence
[2008/12/25 12:51:14 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Canneverbe_Limited
[2008/12/25 14:12:12 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\devede
[2009/10/11 01:01:05 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\DonationCoder
[2011/03/16 12:50:10 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Dropbox
[2009/06/18 23:22:41 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\FFSJ
[2010/11/09 13:13:44 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\FrostWire
[2009/12/25 15:32:42 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\GetRightToGo
[2009/03/02 15:22:16 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Graboid Inc
[2010/01/05 20:31:26 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\GrabPro
[2008/12/25 14:14:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\gtk-2.0
[2009/11/17 16:53:39 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ICAClient
[2008/11/14 18:24:38 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ImgBurn
[2009/03/03 23:40:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\iPodifier
[2010/10/06 18:20:59 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\K-Meleon
[2010/09/21 21:05:27 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Leadertech
[2009/10/08 15:53:54 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Livestation
[2010/10/17 23:56:39 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ManyCam
[2009/10/08 15:53:54 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Mchid
[2009/10/18 01:04:11 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Moyea
[2009/06/07 15:27:17 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Octoshape
[2009/04/06 21:16:31 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Opera
[2011/03/17 15:25:24 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Orbit
[2008/10/16 17:38:31 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\PeerNetworking
[2011/02/18 12:18:03 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Pegasys Inc
[2010/12/14 19:43:51 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\QuickScan
[2010/10/28 19:31:04 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Red Kawa
[2011/03/06 17:22:08 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Research In Motion
[2011/03/30 15:02:35 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\uTorrent
[2011/03/30 14:55:20 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Vso
[2011/03/23 03:20:31 | 000,000,276 | —- | M] () – C:\Windows\Tasks\RtlNICDiagVistaStart.job
[2011/03/23 03:17:20 | 000,032,600 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/03/23 03:18:57 | 000,009,180 | —- | M] () – C:\aaw7boot.log
[2006/09/18 17:43:36 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/04/11 02:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2006/09/18 17:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2008/10/04 02:28:28 | 000,004,871 | RH– | M] () – C:\dell.sdr
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 09:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2011/03/23 03:19:01 | 3220,365,312 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 09:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 09:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 09:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2009/03/15 19:57:16 | 000,001,363 | —- | M] () – C:\MP4debug.log
[2011/03/23 03:18:58 | 3534,172,160 | -HS- | M] () – C:\pagefile.sys
[2007/11/07 09:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI
< %systemroot%\Fonts\*.com >
[2006/11/02 08:37:12 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 08:37:12 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 08:37:12 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/10/15 08:54:21 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2006/09/18 17:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/02 08:35:48 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2010/11/10 03:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2008/01/20 22:43:21 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2008/01/20 23:14:18 | 016,846,848 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/20 23:14:08 | 000,106,496 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2008/01/20 23:14:18 | 000,020,480 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 06:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 06:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/09/03 21:17:30 | 000,000,574 | -HS- | M] () – C:\Users\sonam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
< %USERPROFILE%\Desktop\*.exe >
[2008/11/02 16:46:58 | 004,411,392 | —- | M] (Gabest) – C:\Users\sonam\Desktop\mplayerc.exe
[2011/03/30 14:50:53 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-03-24 07:01:06
========== Alternate Data Streams ==========
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:5C321E34
< End of report >
OTL Extras logfile created on: 30/03/2011 2:58:27 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\sonam\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 58.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 916.44 Gb Total Space | 7.47 Gb Free Space | 0.81% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 10.17 Gb Free Space | 67.81% Space Free | Partition Type: NTFS
Computer Name: SONAM-PC | User Name: sonam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.bat [@ = batfile] – Reg Error: Key error. File not found
.cmd [@ = cmdfile] – Reg Error: Key error. File not found
.com [@ = ComFile] – Reg Error: Key error. File not found
.html [@ = ChromeHTML] – Reg Error: Key error. File not found
.pif [@ = piffile] – Reg Error: Key error. File not found
.vbs [@ = VBSFile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] – Reg Error: Key error.
https [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Orbitdownloader\orbitdm.exe" = C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit – (Orbitdownloader.com)
"C:\Program Files\Orbitdownloader\orbitnet.exe" = C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit – (Orbitdownloader.com)
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{020F18A4-4D1E-41EA-8F95-BF2547598167}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{0DCBE023-C8BB-41A5-9681-EB077E4D459D}" = lport=137 | protocol=17 | dir=in | app=system |
"{149302FD-D51F-4479-A1C3-990ECA70ED73}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{1678C378-7E70-42AD-B330-2D01EE26254C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{171BFF4D-4175-4237-BACC-E39FF1BA15B5}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{203CD4F2-D04C-4C3C-9103-6E9906309D1B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{21D29308-B912-42B8-9EE5-1620950A6F56}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{2C6CE79A-B831-4F45-AD23-9113CFCFFC33}" = lport=4481 | protocol=17 | dir=in | name=blackberry desktop software wireless music sync discovery |
"{2E7D3774-9AAA-40D5-BF1D-1C38239BC78B}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{30F6DA80-79F7-4169-926B-B1A4A034BFDB}" = rport=137 | protocol=17 | dir=out | app=system |
"{3779C5C4-0195-45D4-9243-62381E2FB78B}" = lport=4482 | protocol=6 | dir=in | name=blackberry desktop software wireless music sync data transfer |
"{3D835AA4-C5B3-45FC-A858-420E96F04BA6}" = lport=10244 | protocol=6 | dir=in | app=system |
"{3E338794-780B-41CF-AD05-437AB7CC4ED1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{43C6C2D8-8476-4F1F-B10E-18031AA779AC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{455CAD2F-833B-4918-B37B-EDDC4A6132C5}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{49BAE87E-8546-497A-B876-51058C7FA650}" = lport=4481 | protocol=6 | dir=in | name=blackberry desktop software wireless music sync data transfer |
"{4F7A9657-5DE9-42E8-89C4-722E80AB6BDB}" = lport=138 | protocol=17 | dir=in | app=system |
"{569EC159-C638-4535-B8FE-9087C09C5163}" = lport=2869 | protocol=6 | dir=in | app=system |
"{5A6462A3-3E71-4D68-884D-2454BA972871}" = lport=139 | protocol=6 | dir=in | app=system |
"{6389132D-AAF6-4520-A5E0-DF439FFE726E}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{6E684312-B52E-48E4-8B36-91104BFF8ECA}" = lport=445 | protocol=6 | dir=in | app=system |
"{776CF0FB-B647-439F-B233-DAAFDDEE004C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8D770665-ECDC-4BDC-BA55-0B10BA57D983}" = lport=4482 | protocol=17 | dir=in | name=blackberry desktop software wireless music sync discovery |
"{9A058CDC-C0CF-4197-B3F8-BF655D51F450}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9AE72CD9-A62A-4D80-8ECE-E8D7F9219263}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A11BF95D-7312-4648-990A-7FF693BFAE1C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A1EFC62F-13E1-42F8-A862-25BFE1E3A97F}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{B960900C-45C2-474A-B055-7C264DFD7140}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C4DFED6E-CAD5-4EC2-ADDA-325FAC206657}" = rport=139 | protocol=6 | dir=out | app=system |
"{C5D4C283-49EC-4FE6-8E49-BEAAD42C578D}" = lport=3390 | protocol=6 | dir=in | app=system |
"{D08C518A-6CBE-4A1A-BD4F-35D53D6D05DF}" = lport=10244 | protocol=6 | dir=in | app=system |
"{DA440C1D-B87E-4A62-9E5D-6FE55FF3C244}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DA89EF79-DF3F-4FE2-825D-A262DA505315}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{E2C6E30B-EAF0-47F2-9958-1677FF9B38BB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E35847D7-FF7A-4ACC-B605-A445E7B73233}" = rport=445 | protocol=6 | dir=out | app=system |
"{EBCF77FF-ACE2-459C-B0F3-114BD04D23A3}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{F24F59E6-3F70-4900-8CB9-EB4CD1CCD5FB}" = rport=138 | protocol=17 | dir=out | app=system |
"{F64C31D4-972D-4E76-B4CB-236EF59DD7EC}" = rport=10244 | protocol=6 | dir=out | app=system |
"{FB3C3A40-BB9A-452E-97FE-2A4E305D9A26}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{FC4E897D-451D-4C62-BD17-0B9A3A410983}" = rport=10244 | protocol=6 | dir=out | app=system |
"{FF6FB171-85E4-4D9D-B2D9-E3466619E7E7}" = lport=3390 | protocol=6 | dir=in | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0106581D-91B9-4ABB-92A8-248D27015A18}" = protocol=6 | dir=in | app=c:\program files\symantec antivirus\snac.exe |
"{01BACE72-F99D-49DE-B906-B162474DB2A6}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{04714DBA-EF25-40BD-8C26-98C456884811}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{10D6434F-6F4B-4796-879D-09944FFF028B}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe |
"{12FD7809-4E51-4057-95BE-B544C9EDC3EE}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{15C0B31E-290F-4860-8E96-C3855AE55B34}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{1724EB94-9A9F-47FB-AD52-99F6E359085C}" = protocol=17 | dir=in | app=c:\program files\symantec antivirus\snac.exe |
"{18447BB8-F854-49A0-836C-6F443E3366D3}" = protocol=6 | dir=in | app=c:\users\sonam\appdata\roaming\dropbox\bin\dropbox.exe |
"{1A7D9777-FE8B-4836-924D-756AC422FCD0}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\powerdvd.exe |
"{2B6C00C8-7248-4E19-9461-33090A6B9D73}" = protocol=17 | dir=in | app=c:\program files\dell video chat\dellvideochat.exe |
"{2C576A2D-2F5A-435E-86A0-5E9137629214}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{311E980C-0008-4508-A06C-7F4BA1D21997}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{32CE4213-B9A2-494D-AF1A-5FED84BF1AD3}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{390F6283-7240-4579-BF22-E66AFD6514C5}" = protocol=6 | dir=in | app=c:\users\sonam\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{40B3B95A-9E65-4DCA-9A2E-999FFC2B2C59}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{44115E69-8F7B-437B-AEB3-238F5E91C00A}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{475D486C-71D3-4416-8FAF-D77994D03565}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{4AE8D7A5-E53E-4242-A471-5A11030A63E4}" = protocol=6 | dir=in | app=c:\program files\dell video chat\dellvideochat.exe |
"{4BE85832-4EE4-49AD-BC7D-B7612E297D05}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{52BAD81F-D3EB-4C80-B589-B98F0E27CBBD}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{5E0AC55E-2084-4B34-819B-F3EADD0E6BBB}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{6221F4AB-4A4B-4972-993D-BA46A6AF7FB0}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{73494A89-1154-4135-894F-4792257572A3}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{75CDC363-11BA-4C81-840C-EDFBC54CC2E0}" = protocol=17 | dir=in | app=c:\users\sonam\appdata\roaming\dropbox\bin\dropbox.exe |
"{81C3FB17-C5CB-48E9-82AD-CE072BA1A7FA}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{85444A64-145D-422E-B057-2B64A22801E4}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{87194702-C720-4960-90CC-BB59AE541CC5}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{8DA7E8DD-AC01-466D-A535-D3A45F15F476}" = protocol=17 | dir=in | app=c:\program files\common files\symantec shared\ccapp.exe |
"{91971C24-F826-48E2-85C0-DE135443F588}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{9211A64E-16FA-4669-BFC0-D800CBC809BB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{96B7DFF3-C607-4584-9DBC-13A13DC94CC1}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{A72D0967-61BC-4A72-AF27-32BDD841FCA6}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{A90FB5AF-143E-4444-8EF6-9FC3B75ECB6C}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{AD973EA4-26A8-4EBE-81D8-1982EF498CC2}" = protocol=17 | dir=in | app=c:\users\sonam\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{B001F25D-2DC1-42A4-BCA9-77B0A6675D05}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{B56687AF-2D1C-4F75-952F-730FD712DFC7}" = protocol=6 | dir=in | app=c:\program files\common files\symantec shared\ccapp.exe |
"{BF0376F6-4FD7-461A-8F79-802B1A7BC24D}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{D39F5D90-6F18-4911-9662-78DB5CCD4EE6}" = protocol=17 | dir=in | app=c:\program files\research in motion\blackberry desktop\rim.desktop.exe |
"{D93488C1-9C9F-461C-A40C-0883CB70E7B6}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{DE8BA9B4-6648-45E0-8533-CD42F2DA20DE}" = protocol=6 | dir=in | app=c:\program files\research in motion\blackberry desktop\rim.desktop.exe |
"{DFCC10EB-284F-49D6-94C4-A9FE978A31EE}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{DFE74DE3-3706-4FEF-B20E-815ACE2FEC4A}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{E10E9CB6-5C56-4829-8FE3-89805089E0CF}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{E95A04EF-7A49-453D-9E41-DD863B41D1DC}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{F29D27E9-9B44-429D-8108-B7D5B2E73124}" = protocol=17 | dir=in | app=c:\program files\symantec antivirus\smc.exe |
"{F3E09A7D-3110-4F88-A91B-DDFDC8A97B40}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F54F4389-E06A-4DF8-9C31-8A05B96DEB78}" = protocol=6 | dir=in | app=c:\program files\symantec antivirus\smc.exe |
"{F86924BE-F5B3-4336-BE6F-8932D76F5DF9}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{FC529BFA-95B1-42F5-8D0A-8974D668DB8F}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{FC88DB58-8920-4759-9414-6A209D02F31A}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{FD041AE6-DE09-4017-B295-E9D73EC6BB3D}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"TCP Query User{00B725E1-88C0-4E85-8F8F-D529573BCBF3}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe |
"TCP Query User{29E43933-F01F-4913-8AA0-5F06FF11F1E7}C:\program files\java\jre1.6.0_07\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\javaw.exe |
"TCP Query User{345DF5FB-1813-4CDA-AAAA-64C42AC5FF8F}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{34B4D7EC-7F1B-42BE-A51E-9775557C2FBC}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe |
"TCP Query User{39D4A315-F8AA-44BD-86D2-3546D276EDE6}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"TCP Query User{56210131-7D0F-40F3-BE56-137781FD8ADA}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{5667C8D8-5E79-4240-9CAF-EC849E741C7F}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"TCP Query User{5B0AABD0-5C26-4CD0-B941-C39D6B37C65B}C:\program files\boxee\boxee.exe" = protocol=6 | dir=in | app=c:\program files\boxee\boxee.exe |
"TCP Query User{5DD01ACB-764C-4CC6-8FFE-FF93544E7DCB}C:\program files\soulseekns\slsk.exe" = protocol=6 | dir=in | app=c:\program files\soulseekns\slsk.exe |
"TCP Query User{67CF7A59-369F-4567-B57B-3D76B90BE5DC}C:\program files\qtweb\qtweb.exe" = protocol=6 | dir=in | app=c:\program files\qtweb\qtweb.exe |
"TCP Query User{6AF635C9-F6AC-4193-928D-B80CDB6A5E46}C:\program files\frostwire\frostwire.exe" = protocol=6 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"TCP Query User{724EC638-FCB6-41C5-ABFB-64FFB6459DD9}C:\program files\tvuplayer\tvuplayer.exe" = protocol=6 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"TCP Query User{80F6461E-9743-4FFE-AF08-9B668B5A2B29}C:\program files\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe |
"TCP Query User{A5D61B37-8E4C-48A4-BB73-4C69DD6A2A3A}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{A73A94D1-8136-43C2-BCB4-EFBF00475EDD}C:\program files\real alternative\media player classic\mplayerc.exe" = protocol=6 | dir=in | app=c:\program files\real alternative\media player classic\mplayerc.exe |
"TCP Query User{D9C53E0C-C663-4B8F-9D78-9E4C798E973F}C:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" = protocol=6 | dir=in | app=c:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe |
"TCP Query User{DD478932-7717-4794-8B28-73CDB3C02F97}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"TCP Query User{DDC87E2F-1F7B-4DE8-A2AF-C51E43C5DBD1}C:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe |
"TCP Query User{F0AF53A9-C1D7-45B3-AF77-C6D36D8142B2}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{F1C93F2A-3E38-4F31-8D0E-0C52F3CAD66E}C:\program files\tvants\tvants.exe" = protocol=6 | dir=in | app=c:\program files\tvants\tvants.exe |
"TCP Query User{F7010DC2-456B-43D2-98DD-3DFE046D4282}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"TCP Query User{FD8298A0-E1C5-43D1-88A4-A3B2BF496C84}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"TCP Query User{FE343D2B-4AF4-4BB8-85C6-0826472D46C2}C:\users\sonam\desktop\anomos\anomos.exe" = protocol=6 | dir=in | app=c:\users\sonam\desktop\anomos\anomos.exe |
"UDP Query User{007CCDB3-ABE1-494C-A208-6783D68C9A5F}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{055E4405-011E-4949-BB00-A3C0B35F91C6}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{10F1F206-0154-49F3-9453-A39B5FB122CA}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{163E639E-BC61-48D8-9ECB-F9AE9CB9156C}C:\program files\real alternative\media player classic\mplayerc.exe" = protocol=17 | dir=in | app=c:\program files\real alternative\media player classic\mplayerc.exe |
"UDP Query User{16DA6E11-71F4-430E-B062-32E4900D5992}C:\program files\frostwire\frostwire.exe" = protocol=17 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"UDP Query User{17F35300-37BE-484F-AD48-158F25C5E7D0}C:\program files\qtweb\qtweb.exe" = protocol=17 | dir=in | app=c:\program files\qtweb\qtweb.exe |
"UDP Query User{1C58D239-4354-496B-AD2E-BC858A9B3C34}C:\program files\java\jre1.6.0_07\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\javaw.exe |
"UDP Query User{2BFB3D60-7978-4716-BC50-6685B4A2A245}C:\program files\soulseekns\slsk.exe" = protocol=17 | dir=in | app=c:\program files\soulseekns\slsk.exe |
"UDP Query User{35ECB886-55FE-46A6-9F4A-1FA1FF84878C}C:\program files\tvuplayer\tvuplayer.exe" = protocol=17 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"UDP Query User{37FD5F86-301C-4A5F-B6F8-567A4795470F}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
"UDP Query User{479DCCBB-9F38-4BFC-86D2-FFE071C9B2BD}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe |
"UDP Query User{67210CEB-D4D8-4E57-A06A-76E1DDA7E8D7}C:\program files\boxee\boxee.exe" = protocol=17 | dir=in | app=c:\program files\boxee\boxee.exe |
"UDP Query User{6D68D587-9ED1-4413-8108-61EEC4409021}C:\program files\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe |
"UDP Query User{6F399618-F4DE-4691-93A5-5291DDC3DBEE}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe |
"UDP Query User{7A3026CB-673F-4E89-8DFE-7E8A2BEAF1CB}C:\users\sonam\desktop\anomos\anomos.exe" = protocol=17 | dir=in | app=c:\users\sonam\desktop\anomos\anomos.exe |
"UDP Query User{7A65FFC0-4E85-4606-9F52-737CC4FC2AFE}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"UDP Query User{8D02DFD8-7A21-4331-BEC7-16D082FBEB06}C:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" = protocol=17 | dir=in | app=c:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe |
"UDP Query User{A2D391F8-0BD4-4485-965B-377AF0D3261C}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{AB73C535-7D02-40EE-B5C6-D4A7B2FB1CD5}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{B12ABC17-17D0-4409-B865-61EF86C64915}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"UDP Query User{C07C5736-3B02-43D4-BC69-7F918CDFEF83}C:\program files\tvants\tvants.exe" = protocol=17 | dir=in | app=c:\program files\tvants\tvants.exe |
"UDP Query User{CA778AC5-4F4C-4D93-9E7E-9C5E479D5FC6}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"UDP Query User{DEAC5C38-BC51-4C01-8DC5-969FE5D28E5A}C:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{005F78AF-110D-398A-8430-BE98950A1E22}" = Google Talk Plugin
"{008099FB-FC94-23B9-E613-02F5A7A0B27C}" = Catalyst Control Center Graphics Previews Vista
"{0405E51E-9582-4207-8F38-AC44201D3808}" = VeohTV BETA
"{04FDC8D5-704E-D6FF-6C0F-F243EB1EA544}" = Catalyst Control Center InstallProxy
"{05ADEEC8-BD58-43D9-A9E3-1F53B0DA117A}" = Opera 10.51
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{11B734DB-A59E-67F8-C57B-26AF2A424D26}" = Catalyst Control Center Graphics Full New
"{13C0E1F7-BB8A-4545-B25E-628D025A94AD}_is1" = QtWeb Internet Browser 3.7
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FECF5F8-8E75-432C-9FF7-1C04F1956B54}" = Realtek Ethernet Network Card Diagnostic tool for Windows Vista
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java™ 6 Update 18
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{294BF709-D758-4363-8D75-01479AD20927}" = Windows Live Family Safety
"{2D6ED011-055B-4041-B198-BB903827EBFB}" = Safari
"{2EFCC193-D915-4CCB-9201-31773A27BC06}" = Symantec Endpoint Protection
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{336DBED7-6987-280E-68FD-128C8E49F339}" = ccc-utility
"{338F08AB-C262-42C7-B000-34DE1A475273}" = Ad-Aware Email Scanner for Outlook
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4281EBFF-4B50-3B3F-24AF-37AE651F96AA}" = Catalyst Control Center Graphics Full Existing
"{448E2D77-E504-4221-B2C2-93646B344729}" = Mouse Suite for Desktop Computers
"{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F94119D-1B71-400e-9F04-B4E5CEAE71F8}_is1" = Sothink Movie DVD Maker
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.2
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5DDA0912-0AE8-A706-B227-5F46F29718AF}" = Catalyst Control Center Localization All
"{60082130-7177-B669-5232-A4D8983DAAAB}" = Skins
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{634033F4-3E94-4F5E-B3E4-3928A46A78D7}_is1" = ConvertXtoDVD 4 english manual
"{6350DFD0-01B0-11DE-87AF-0800200C9A66}" = Livestation
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}" = EDocs
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7F205F55-A144-417C-9682-2C128C2A3C14}" = BlackBerry Device Software v6.0.0 for the BlackBerry 9100/9105 smartphone
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{84A78614-0E4B-4A4E-BA8C-2B0A05A08E4E}" = BlackBerry Desktop Software 6.0.1
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8DD6892C-C9A8-404B-95ED-1CCE15324178}" = BlackBerry App World Browser Plugin
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 3.81
"{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}" = iTunes
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A29549FD-65F3-440C-A552-6B8114CF319D}" = Skype Toolbars
"{A5A3D3E5-D31B-94AB-AD40-0C4A6B46F896}" = ccc-core-static
"{A69D7B32-2BE9-42BF-B576-69B5E0FF7394}" = Catalyst Control Center - Branding
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1" = VirtualDubMOD [removed] US
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B8F87E7F-28D2-39A9-DA21-35FE13071761}" = Catalyst Control Center Graphics Previews Common
"{B935C985-A17F-484B-8470-09E4FC27DC26}" = Dell-eBay
"{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}" = Logitech Webcam Software
"{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}" = Apple Mobile Device Support
"{C49067A8-8212-4A82-A4D9-1519701644F0}" = Citrix Presentation Server Client - Web Only
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C0}" = WinZip 15.0
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D4163F73-AAE4-4E4F-9E9E-70828C2ADB58}" = iPodifier
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D6C9AF27-9414-46C8-B9D8-D878BA041033}" = Nero 8
"{D8A081EB-19BB-CA58-A86E-AEF0D1E0B243}" = ATI Catalyst Install Manager
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.1.2.336
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E75AB7CD-E5AF-1FF0-B5FD-AD5DAF91FCBD}" = Catalyst Control Center Core Implementation
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{EDFE0EA5-B933-7125-A7C1-A05C1B5CD57C}" = CCC Help English
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1454832-04F3-5534-48C4-8A11BD348013}" = Catalyst Control Center Graphics Light
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"AC3Filter" = AC3Filter (remove only)
"Ad-Aware" = Ad-Aware
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AnyDVD" = AnyDVD
"Ares" = Ares 2.1.1
"Audacity_is1" = Audacity 1.2.6
"AURC_is1" = Audacity Recovery Utility
"AviSynth" = AviSynth 2.5
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS YouTube Uploader 2.1_is1" = AVS YouTube Uploader version 2.1
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"AVS4YOU Video Editor 4_is1" = AVS Video Editor 4
"BlackBerry_Desktop" = BlackBerry Desktop Software 6.0.1
"Burn4Free" = Burn4Free CD and DVD
"CCleaner" = CCleaner
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"d2mp" = d2mp
"Dell Video Chat" = Dell Video Chat (remove only)
"DeVeDe_is1" = DeVeDe 3.11b
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVD Flick_is1" = DVD Flick 1.3.0.7
"DVD Shrink_is1" = DVD Shrink 3.2
"DVDStyler_is1" = DVDStyler v1.7.4
"eMule" = eMule
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ERUNT_is1" = ERUNT 1.1j
"ffdshow_is1" = ffdshow [rev 3164] [2009-12-14]
"Free Ipod Video Converter_is1" = Free Ipod Video Converter V 2.6
"FrostWire" = FrostWire 4.21.1
"Google Desktop" = Google Desktop
"GoToAssist" = GoToAssist 8.0.0.514
"HaaliMkx" = Haali Media Splitter
"HDMI" = Intel® Graphics Media Accelerator Driver
"HotspotShield" = Hotspot Shield 1.37
"ImgBurn" = ImgBurn
"InstallShield_{0405E51E-9582-4207-8F38-AC44201D3808}" = VeohTV BETA
"K-Meleon" = K-Meleon 1.5.4 en-US (remove only)
"LiveUpdate" = LiveUpdate 3.3 (Symantec Corporation)
"lvdrivers_12.10" = Logitech Webcam Software Driver Package
"Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
"MainApp.exe_is1" = CloneDVD 4.3.0.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"ManyCam" = ManyCam 2.6.1 (remove only)
"McAfee Security Scan" = McAfee Security Scan Plus
"MediaCoder" = MediaCoder 0.6.2
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"MKVtoolnix" = MKVtoolnix 2.2.0
"Mozilla ActiveX Control v1.7.12" = Mozilla ActiveX Control v1.7.12
"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)
"MP3 Cutter Joiner_is1" = MP3 Cutter Joiner 3.00
"MPEG Joiner_is1" = MPEG Joiner
"OpenAL" = OpenAL
"Orbit_is1" = Orbit Downloader
"qt7lite_is1" = QT Lite 2.7.0
"RealAlt_is1" = Real Alternative 2.0.1
"Soulseek2" = SoulSeek 157 NS 13c
"SpywareBlaster_is1" = SpywareBlaster 4.2
"StaxRip_is1" = StaxRip 1.1.1.0
"TVAnts 1.0" = TVAnts 1.0
"TVUPlayer" = TVUPlayer [removed]
"Ultra QuickTime Converter_is1" = Ultra QuickTime Converter 2.3.0916
"Ultra RM Converter_is1" = Ultra RM Converter 4.0.1127
"URLSnooper 2_is1" = URL Snooper v2.23.01
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"Veoh Video Compass" = Veoh Video Compass
"Veoh Web Player Beta" = Veoh Web Player
"Videora iPod Converter" = Videora iPod Converter 6
"VLC media player" = VLC media player 1.1.7
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1 beta5
"WinRAR archiver" = WinRAR archiver
"XviD_is1" = XviD 1.1 final uninstall
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"309a46b1dc89b774" = Dell Driver Download Manager
"BOXEE" = Boxee
"Dropbox" = Dropbox
"Octoshape Streaming Services" = Octoshape Streaming Services
"uTorrent" = µTorrent
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 30/03/2011 12:49:33 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 12:49:34 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:44:49 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:45:03 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:45:22 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:50:52 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:53:08 PM | Computer Name = sonam-PC | Source = Application Error | ID = 1000
Description = Faulting application plugin-container.exe, version 1.9.2.4095, time
stamp 0x4d852c62, faulting module ntdll.dll, version 6.0.6002.18327, time stamp
0x4cb73436, exception code 0xc0000005, fault offset 0x00048822, process id 0x17d0,
application start time 0x01cbeda23e7b23af.
[ Media Center Events ]
Error - 15/10/2008 10:17:39 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 107
Description =
Error - 15/10/2008 10:21:39 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 107
Description =
Error - 15/10/2008 10:28:32 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 109
Description =
Error - 08/01/2009 12:42:54 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 16/02/2009 12:46:02 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 19/02/2009 12:38:56 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 04/03/2009 12:38:44 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 23/08/2009 4:13:42 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 24/08/2009 5:44:21 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 08/10/2009 3:31:44 PM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
[ OSession Events ]
Error - 28/10/2009 3:39:29 AM | Computer Name = sonam-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 44361
seconds with 180 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 11/03/2011 3:12:58 PM | Computer Name = sonam-PC | Source = cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.
Error - 11/03/2011 3:13:02 PM | Computer Name = sonam-PC | Source = cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.
Error - 11/03/2011 4:44:24 PM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 14/03/2011 7:30:44 PM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 16/03/2011 4:09:38 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 16/03/2011 4:34:13 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 18/03/2011 1:31:03 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 23/03/2011 7:34:02 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 25/03/2011 8:37:55 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 28/03/2011 2:58:48 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
< End of report >
Could someone please help me? Thank you.
OTL logfile created on: 30/03/2011 2:58:26 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\sonam\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 58.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 916.44 Gb Total Space | 7.47 Gb Free Space | 0.81% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 10.17 Gb Free Space | 67.81% Space Free | Partition Type: NTFS
Computer Name: SONAM-PC | User Name: sonam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\sonam\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files\Research In Motion\BlackBerry Desktop\Rim.Desktop.AutoUpdate.exe (Research In Motion)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\K-Meleon\k-meleon.exe (http://kmeleon.sf.net/)
PRC - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\Hotspot Shield\bin\openvpntray.exe ()
PRC - C:\Program Files\Hotspot Shield\bin\openvpnas.exe ()
PRC - C:\Program Files\Hotspot Shield\bin\hsswd.exe ()
PRC - C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
PRC - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe (AnchorFree Inc.)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\SmcGui.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Smc.exe (Symantec Corporation)
PRC - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
PRC - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
PRC - C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Windows\System32\pmxmiced.exe (Primax Electronics Ltd.)
PRC - C:\Windows\System32\ico.exe (Primax Electronics Ltd.)
========== Modules (SafeList) ==========
MOD - C:\Users\sonam\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (RoxLiveShare9) – File not found
SRV - (BBSvc) – C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) – C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (McComponentHostService) – C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (HssTrayService) – C:\Program Files\Hotspot Shield\bin\HssTrayService.exe ()
SRV - (HotspotShieldService) – C:\Program Files\Hotspot Shield\bin\openvpnas.exe ()
SRV - (HssWd) – C:\Program Files\Hotspot Shield\bin\hsswd.exe ()
SRV - (AERTFilters) – C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (Andrea Electronics Corporation)
SRV - (HssSrv) – C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe (AnchorFree Inc.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (SNAC) – C:\Program Files\Symantec AntiVirus\SNAC.EXE (Symantec Corporation)
SRV - (Symantec AntiVirus) – C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (SmcService) – C:\Program Files\Symantec AntiVirus\Smc.exe (Symantec Corporation)
SRV - (LiveUpdate) – C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) – C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (AresChatServer) – C:\Program Files\Ares\chatServer.exe (Ares Development Group)
SRV - (NMSAccessU) – C:\Program Files\CDBurnerXP\NMSAccessU.exe ()
SRV - (GoToAssist) – C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter) – C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (NAVEX15) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110330.003\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Symantec\Definitions\VirusDefs\20110330.003\NAVENG.SYS (Symantec Corporation)
DRV - (Lbd) – C:\Windows\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SymEvent) – C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (RTL8169) – C:\Windows\System32\drivers\Rtlh86.sys (Realtek )
DRV - (HssDrv) – C:\Windows\System32\drivers\HssDrv.sys (AnchorFree Inc.)
DRV - (taphss) – C:\Windows\System32\drivers\taphss.sys (AnchorFree Inc)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (LVPr2Mon) – C:\Windows\System32\drivers\LVPr2Mon.sys ()
DRV - (SRTSPL) – C:\Windows\System32\drivers\srtspl.sys (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\System32\drivers\srtsp.sys (Symantec Corporation)
DRV - (SRTSPX) – C:\Windows\System32\drivers\srtspx.sys (Symantec Corporation)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (SYMTDI) – C:\Windows\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\Windows\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (COH_Mon) – C:\Windows\System32\drivers\COH_Mon.sys (Symantec Corporation)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (AnyDVD) – C:\Windows\System32\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV - (R300) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (NPF) – C:\Windows\System32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (RtNdPt60) – C:\Windows\System32\drivers\RtNdPt60.sys (Windows ® Codename Longhorn DDK provider)
DRV - (tapvpn) – C:\Windows\System32\drivers\tapvpn.sys (The OpenVPN Project)
DRV - (e1express) Intel® – C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation)
DRV - (RTL8187) – C:\Windows\System32\drivers\wg111v2.sys (NETGEAR Inc.)
DRV - (pmxmouse) – C:\Windows\System32\drivers\pmxmouse.sys (Primax Electronics Ltd.)
DRV - (pmxusblf) – C:\Windows\System32\drivers\pmxusblf.sys (Primax Electronics Ltd.)
DRV - (QCMerced) – C:\Windows\System32\drivers\lvcm.sys ()
DRV - (LVUSBSta) – C:\Windows\System32\drivers\LVUSBSta.sys (Logitech Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.symantec.com/enterprise/securit…ponse/index.jsp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ca.msn.com/?lang=en-ca&OCID;=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-ca
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F0 A3 23 3B 64 E6 CA 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5555
========== FireFox ==========
FF - HKLM\software\mozilla\K-Meleon\Extensions\\Plugins: C:\Program Files\K-Meleon\Plugins [2010/10/06 18:17:52 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\K-Meleon\Extensions\\Components: C:\Program Files\K-Meleon\Components [2010/10/06 18:18:12 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/03/23 06:39:26 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/03/23 06:39:26 | 000,000,000 | —D | M]
[2009/02/09 15:14:14 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Extensions
[2009/02/09 15:14:14 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Extensions\{ae2cff10-0d52-4066-8be9-4abcf119fa79}
[2011/03/28 19:45:33 | 000,000,000 | —D | M] (No name found) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions
[2010/05/03 10:45:16 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/06/15 19:00:06 | 000,000,000 | —D | M] (jDownFF) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{a3b24d40-bac4-11dc-95ff-0800200c9a66}
[2010/05/03 10:45:17 | 000,000,000 | —D | M] (Adblock Plus) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/06/04 18:04:59 | 000,000,000 | —D | M] (DownThemAll!) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/06/04 18:04:53 | 000,000,000 | —D | M] ("BitDefender QuickScan") – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010/05/28 21:04:24 | 000,000,000 | —D | M] (TVU Web Player) – C:\Users\sonam\AppData\Roaming\Mozilla\Firefox\Profiles\1arsg2p9.default\extensions\[removed]
[2011/03/24 23:59:36 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/03/24 23:59:37 | 000,000,000 | —D | M] (Skype extension) – C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
O1 HOSTS File: ([2010/01/05 18:08:21 | 000,000,027 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll (AnchorFree Inc.)
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (Veoh Video Compass) - {52836EB0-631A-47B1-94A6-61F9D9112DAE} - C:\Program Files\Veoh Networks\Veoh Video Compass\SearchRecsPlugin.dll (Veoh Networks)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll ()
O3 - HKLM\..\Toolbar: (Veoh Browser Plug-in) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PMX Daemon] C:\Windows\System32\ico.exe (Primax Electronics Ltd.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QT Lite\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKCU..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10n_Plugin.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\sonam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 0
O8 - Extra context menu item: &Download; by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab; video by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Do&wnload; selected by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load; all by Orbit - C:\Program Files\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {DAF7E6E6-D53A-439A-B28D-12271406B8A9} http://mobileapps.blackberry.com/devicesoftware/AxLoader.cab (RIM AxLoader)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~2\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\GoToAssist: DllName - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll - C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img11.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{6699b567-46de-11e0-92c7-0021703a9f80}\Shell\AutoRun\command - "" = J:\start.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…com [@ = ComFile] – Reg Error: Key error. File not found
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
Drivers32: msacm.ac3acm - C:\Windows\System32\AC3ACM.acm (fccHandler)
Drivers32: msacm.alf2cd - C:\Windows\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\Windows\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.voxacm160 - C:\Windows\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.dvsd - C:\Windows\System32\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.I420 - C:\Windows\System32\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.iv50 - C:\Windows\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.xvid - C:\Windows\System32\xvidvfw.dll ()
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2011/03/30 14:50:48 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe
[2011/03/30 14:50:08 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{33AD8694-4811-4125-973D-CFBA1B5B716A}
[2011/03/25 00:00:25 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\skypePM
[2011/03/24 23:59:44 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Skype
[2011/03/24 23:59:06 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011/03/24 23:59:04 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Skype
[2011/03/24 23:59:00 | 000,000,000 | R–D | C] – C:\Program Files\Skype
[2011/03/24 23:58:46 | 000,000,000 | —D | C] – C:\ProgramData\Skype
[2011/03/23 03:22:47 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{3E593D15-4E84-4ED5-BAFB-632910E5C572}
[2011/03/22 18:08:21 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2011/03/22 18:08:21 | 000,288,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2011/03/18 15:10:33 | 000,000,000 | —D | C] – C:\Users\sonam\Documents\BkUp554
[2011/03/17 20:21:31 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{AC2A6EF1-8818-4002-870B-5376CBC63AD3}
[2011/03/16 03:25:25 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{43A2E345-378C-499F-929E-DB4AA7CF365E}
[2011/03/11 14:37:52 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{73BBFA43-A80D-4E47-BEDA-54EA2B5A1A70}
[2011/03/11 13:53:27 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
[2011/03/11 13:52:29 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Roaming\Dropbox
[2011/03/10 22:20:28 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2011/03/10 22:19:52 | 000,000,000 | —D | C] – C:\ProgramData\WinZip
[2011/03/10 22:19:19 | 000,000,000 | —D | C] – C:\Program Files\WinZip
[2011/03/10 12:41:39 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{E361019C-C46E-48CD-8CAB-83B5C9FC61AB}
[2011/03/09 16:22:05 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EncDec.dll
[2011/03/09 16:22:04 | 000,322,560 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbe.dll
[2011/03/09 16:22:04 | 000,177,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mpg2splt.ax
[2011/03/09 16:22:04 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sbeio.dll
[2011/03/06 17:22:39 | 000,000,000 | —D | C] – C:\Users\sonam\Documents\BlackBerry
[2011/03/06 17:21:38 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\Research In Motion
[2011/03/06 17:15:51 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{B4A4FB8B-1774-4BDD-8A53-5075870837C1}
[2011/03/06 16:53:09 | 000,038,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\WdfLdr.sys
[2011/03/06 16:52:16 | 000,000,000 | —D | C] – C:\ProgramData\Research In Motion
[2011/03/06 16:40:35 | 000,000,000 | —D | C] – C:\Program Files\Research In Motion Limited
[2011/03/05 00:16:27 | 000,000,000 | —D | C] – C:\Users\sonam\AppData\Local\{79597155-7FD4-47F4-BF7F-28693DA8670B}
[2011/03/04 13:03:52 | 000,000,000 | —D | C] – C:\Program Files\Pegasys Inc
[2011/03/03 19:52:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2008/10/22 11:56:11 | 000,047,360 | —- | C] (VSO Software) – C:\Users\sonam\AppData\Roaming\pcouffin.sys
========== Files - Modified Within 30 Days ==========
[2011/03/30 14:55:18 | 000,001,057 | —- | M] () – C:\Users\sonam\AppData\Roaming\vso_ts_preview.xml
[2011/03/30 14:50:53 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe
[2011/03/30 14:04:15 | 000,113,152 | —- | M] () – C:\Users\sonam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/30 13:19:26 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/03/30 13:19:26 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/03/27 18:26:00 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-807892715-3149862127-586907164-1000UA.job
[2011/03/27 15:26:00 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-807892715-3149862127-586907164-1000Core.job
[2011/03/25 00:00:26 | 000,000,056 | -H– | M] () – C:\ProgramData\ezsidmv.dat
[2011/03/24 23:59:06 | 000,001,878 | —- | M] () – C:\Users\Public\Desktop\Skype.lnk
[2011/03/24 00:41:18 | 000,000,000 | —- | M] () – C:\Windows\System32\null
[2011/03/23 03:26:25 | 000,611,664 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/03/23 03:26:25 | 000,109,112 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/03/23 03:20:31 | 000,000,276 | —- | M] () – C:\Windows\tasks\RtlNICDiagVistaStart.job
[2011/03/23 03:19:45 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/03/23 03:19:01 | 3220,365,312 | -HS- | M] () – C:\hiberfil.sys
[2011/03/06 17:11:55 | 000,384,568 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/03/06 16:54:10 | 000,002,098 | —- | M] () – C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
[2011/03/06 16:54:08 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\Msft_Kernel_RimUsb_01009.Wdf
[2011/03/06 16:54:05 | 000,000,000 | -H– | M] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011/03/05 13:15:28 | 000,103,032 | —- | M] () – C:\Users\sonam\Documents\cc_20110305_121354.reg
[2011/03/05 01:08:29 | 005,509,734 | —- | M] () – C:\Users\sonam\Documents\Backup-(2011-03-05).ipd
[2011/03/05 00:42:47 | 000,744,140 | —- | M] () – C:\Users\sonam\Documents\LoaderBackup-(2011-03-04).ipd
[2011/03/05 00:05:31 | 000,000,256 | —- | M] () – C:\Windows\System32\pool.bin
[2011/03/03 19:52:49 | 000,000,861 | —- | M] () – C:\Users\Public\Desktop\VLC media player.lnk
========== Files Created - No Company Name ==========
[2011/03/25 00:00:26 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2011/03/24 23:59:06 | 000,001,878 | —- | C] () – C:\Users\Public\Desktop\Skype.lnk
[2011/03/06 16:54:10 | 000,002,098 | —- | C] () – C:\Users\Public\Desktop\BlackBerry Desktop Software.lnk
[2011/03/06 16:54:08 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\Msft_Kernel_RimUsb_01009.Wdf
[2011/03/06 16:54:05 | 000,000,000 | -H– | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2011/03/06 16:53:13 | 000,000,003 | —- | C] () – C:\Windows\System32\drivers\MsftWdf_Kernel_01009_Inbox_Critical.Wdf
[2011/03/05 13:15:22 | 000,103,032 | —- | C] () – C:\Users\sonam\Documents\cc_20110305_121354.reg
[2011/03/05 01:08:15 | 005,509,734 | —- | C] () – C:\Users\sonam\Documents\Backup-(2011-03-05).ipd
[2011/03/05 00:42:47 | 000,744,140 | —- | C] () – C:\Users\sonam\Documents\LoaderBackup-(2011-03-04).ipd
[2011/03/05 00:05:31 | 000,000,256 | —- | C] () – C:\Windows\System32\pool.bin
[2011/03/03 19:52:49 | 000,000,861 | —- | C] () – C:\Users\Public\Desktop\VLC media player.lnk
[2010/11/11 04:05:04 | 000,000,118 | —- | C] () – C:\Windows\System32\MRT.INI
[2010/10/29 01:34:24 | 000,000,008 | —- | C] () – C:\Users\sonam\AppData\Roaming\vfzwln.dat
[2010/10/21 14:38:49 | 000,087,608 | —- | C] () – C:\Users\sonam\AppData\Roaming\inst.exe
[2010/09/22 13:58:11 | 000,113,152 | —- | C] () – C:\Users\sonam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/02 21:24:01 | 000,015,880 | —- | C] () – C:\Windows\System32\lsdelete.exe
[2010/01/05 17:57:57 | 000,261,632 | —- | C] () – C:\Windows\PEV.exe
[2010/01/05 17:57:57 | 000,077,312 | —- | C] () – C:\Windows\MBR.exe
[2010/01/05 03:03:31 | 000,000,000 | —- | C] () – C:\Windows\System32\cd.dat
[2009/12/03 10:27:28 | 000,080,416 | —- | C] () – C:\Windows\System32\RtNicProp32.dll
[2009/10/16 15:42:47 | 000,180,720 | —- | C] () – C:\Windows\System32\atiicdxx.dat
[2009/10/16 15:42:47 | 000,081,920 | —- | C] () – C:\Windows\System32\ATIODE.exe
[2009/10/16 15:42:47 | 000,045,056 | —- | C] () – C:\Windows\System32\ATIODCLI.exe
[2009/10/16 15:42:47 | 000,011,264 | —- | C] () – C:\Windows\System32\atimuixx.dll
[2009/10/11 01:01:05 | 000,000,046 | —- | C] () – C:\Windows\System32\DonationCoder_urlsnooper_InstallInfo.dat
[2009/10/07 01:46:36 | 000,025,752 | —- | C] () – C:\Windows\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:23:08 | 000,013,584 | —- | C] () – C:\Windows\System32\drivers\iKeyLFT2.dll
[2009/09/11 01:59:40 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2009/09/11 01:59:39 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/05/19 11:48:25 | 000,000,726 | —- | C] () – C:\Windows\Mp3CutterJoiner.ini
[2009/05/17 16:57:54 | 000,000,005 | —- | C] () – C:\Windows\System32\SySMP3CutJoin.dat
[2009/05/17 16:57:40 | 000,237,568 | —- | C] () – C:\Windows\System32\lame_enc.dll
[2009/03/09 01:05:12 | 000,000,040 | -HS- | C] () – C:\ProgramData\.zreglib
[2009/02/24 15:55:27 | 000,001,057 | —- | C] () – C:\Users\sonam\AppData\Roaming\vso_ts_preview.xml
[2009/01/26 16:02:18 | 000,028,672 | —- | C] () – C:\Windows\System32\AVEQT.dll
[2008/12/25 14:40:14 | 000,129,024 | —- | C] () – C:\Windows\System32\AVERM.dll
[2008/12/23 11:33:18 | 000,053,299 | —- | C] () – C:\Windows\System32\pthreadVC.dll
[2008/11/02 17:05:06 | 000,085,504 | —- | C] () – C:\Windows\System32\ff_vfw.dll
[2008/10/28 18:29:16 | 000,000,069 | —- | C] () – C:\Windows\NeroDigital.ini
[2008/10/22 11:56:11 | 000,007,887 | —- | C] () – C:\Users\sonam\AppData\Roaming\pcouffin.cat
[2008/10/22 11:56:11 | 000,001,144 | —- | C] () – C:\Users\sonam\AppData\Roaming\pcouffin.inf
[2008/10/17 21:40:46 | 000,139,264 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2008/10/17 21:40:45 | 000,524,288 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2008/10/16 17:38:31 | 000,024,206 | —- | C] () – C:\Users\sonam\AppData\Roaming\UserTile.png
[2008/10/15 20:20:23 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/10/04 02:28:21 | 002,192,024 | —- | C] () – C:\Windows\System32\igkrng500.bin
[2008/10/04 02:28:21 | 000,495,376 | —- | C] () – C:\Windows\System32\igcompkrng500.bin
[2008/10/04 02:28:21 | 000,147,456 | —- | C] () – C:\Windows\System32\igfxCoIn_v1527.dll
[2008/10/04 02:28:21 | 000,147,172 | —- | C] () – C:\Windows\System32\igfcg550.bin
[2008/10/04 02:28:18 | 003,107,788 | —- | C] () – C:\Windows\System32\atiumdva.dat
[2008/10/04 02:28:18 | 000,159,744 | —- | C] () – C:\Windows\System32\atitmmxx.dll
[2008/10/04 02:28:18 | 000,090,112 | —- | C] () – C:\Windows\System32\atibrtmon.exe
[2008/10/03 23:46:08 | 000,303,104 | —- | C] () – C:\Windows\System32\FontZoom.exe
[2008/10/03 23:46:08 | 000,131,062 | —- | C] () – C:\Windows\System32\DellPM.ini
[2008/10/03 18:34:16 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2006/11/02 08:57:28 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,384,568 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,611,664 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,109,112 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2005/05/27 09:32:52 | 001,317,152 | —- | C] () – C:\Windows\System32\drivers\lvcm.sys
[2005/05/27 09:10:26 | 000,009,255 | —- | C] () – C:\Windows\System32\lvcoinst.ini
========== LOP Check ==========
[2009/10/15 21:40:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\.anomos
[2009/12/25 15:20:01 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\AVSMedia
[2009/07/06 23:21:08 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\BOXEE
[2009/02/09 15:14:13 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Broad Intelligence
[2008/12/25 12:51:14 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Canneverbe_Limited
[2008/12/25 14:12:12 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\devede
[2009/10/11 01:01:05 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\DonationCoder
[2011/03/16 12:50:10 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Dropbox
[2009/06/18 23:22:41 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\FFSJ
[2010/11/09 13:13:44 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\FrostWire
[2009/12/25 15:32:42 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\GetRightToGo
[2009/03/02 15:22:16 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Graboid Inc
[2010/01/05 20:31:26 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\GrabPro
[2008/12/25 14:14:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\gtk-2.0
[2009/11/17 16:53:39 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ICAClient
[2008/11/14 18:24:38 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ImgBurn
[2009/03/03 23:40:45 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\iPodifier
[2010/10/06 18:20:59 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\K-Meleon
[2010/09/21 21:05:27 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Leadertech
[2009/10/08 15:53:54 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Livestation
[2010/10/17 23:56:39 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\ManyCam
[2009/10/08 15:53:54 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Mchid
[2009/10/18 01:04:11 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Moyea
[2009/06/07 15:27:17 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Octoshape
[2009/04/06 21:16:31 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Opera
[2011/03/17 15:25:24 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Orbit
[2008/10/16 17:38:31 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\PeerNetworking
[2011/02/18 12:18:03 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Pegasys Inc
[2010/12/14 19:43:51 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\QuickScan
[2010/10/28 19:31:04 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Red Kawa
[2011/03/06 17:22:08 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Research In Motion
[2011/03/30 15:02:35 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\uTorrent
[2011/03/30 14:55:20 | 000,000,000 | —D | M] – C:\Users\sonam\AppData\Roaming\Vso
[2011/03/23 03:20:31 | 000,000,276 | —- | M] () – C:\Windows\Tasks\RtlNICDiagVistaStart.job
[2011/03/23 03:17:20 | 000,032,600 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/03/23 03:18:57 | 000,009,180 | —- | M] () – C:\aaw7boot.log
[2006/09/18 17:43:36 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/04/11 02:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2006/09/18 17:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2008/10/04 02:28:28 | 000,004,871 | RH– | M] () – C:\dell.sdr
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 09:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2011/03/23 03:19:01 | 3220,365,312 | -HS- | M] () – C:\hiberfil.sys
[2007/11/07 09:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 09:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007/11/07 09:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2009/03/15 19:57:16 | 000,001,363 | —- | M] () – C:\MP4debug.log
[2011/03/23 03:18:58 | 3534,172,160 | -HS- | M] () – C:\pagefile.sys
[2007/11/07 09:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI
< %systemroot%\Fonts\*.com >
[2006/11/02 08:37:12 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 08:37:12 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 08:37:12 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/10/15 08:54:21 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2006/09/18 17:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/02 08:35:48 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2010/11/10 03:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2008/01/20 22:43:21 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2008/01/20 23:14:18 | 016,846,848 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/20 23:14:08 | 000,106,496 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2008/01/20 23:14:18 | 000,020,480 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 06:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 06:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/09/03 21:17:30 | 000,000,574 | -HS- | M] () – C:\Users\sonam\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
< %USERPROFILE%\Desktop\*.exe >
[2008/11/02 16:46:58 | 004,411,392 | —- | M] (Gabest) – C:\Users\sonam\Desktop\mplayerc.exe
[2011/03/30 14:50:53 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\sonam\Desktop\OTL.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-03-24 07:01:06
========== Alternate Data Streams ==========
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:5C321E34
< End of report >
OTL Extras logfile created on: 30/03/2011 2:58:27 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\sonam\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19019)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 58.00% Memory free
6.00 Gb Paging File | 4.00 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 916.44 Gb Total Space | 7.47 Gb Free Space | 0.81% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 10.17 Gb Free Space | 67.81% Space Free | Partition Type: NTFS
Computer Name: SONAM-PC | User Name: sonam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.bat [@ = batfile] – Reg Error: Key error. File not found
.cmd [@ = cmdfile] – Reg Error: Key error. File not found
.com [@ = ComFile] – Reg Error: Key error. File not found
.html [@ = ChromeHTML] – Reg Error: Key error. File not found
.pif [@ = piffile] – Reg Error: Key error. File not found
.vbs [@ = VBSFile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] – Reg Error: Key error.
https [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Orbitdownloader\orbitdm.exe" = C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit – (Orbitdownloader.com)
"C:\Program Files\Orbitdownloader\orbitnet.exe" = C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit – (Orbitdownloader.com)
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{020F18A4-4D1E-41EA-8F95-BF2547598167}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{0DCBE023-C8BB-41A5-9681-EB077E4D459D}" = lport=137 | protocol=17 | dir=in | app=system |
"{149302FD-D51F-4479-A1C3-990ECA70ED73}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{1678C378-7E70-42AD-B330-2D01EE26254C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{171BFF4D-4175-4237-BACC-E39FF1BA15B5}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{203CD4F2-D04C-4C3C-9103-6E9906309D1B}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{21D29308-B912-42B8-9EE5-1620950A6F56}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{2C6CE79A-B831-4F45-AD23-9113CFCFFC33}" = lport=4481 | protocol=17 | dir=in | name=blackberry desktop software wireless music sync discovery |
"{2E7D3774-9AAA-40D5-BF1D-1C38239BC78B}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{30F6DA80-79F7-4169-926B-B1A4A034BFDB}" = rport=137 | protocol=17 | dir=out | app=system |
"{3779C5C4-0195-45D4-9243-62381E2FB78B}" = lport=4482 | protocol=6 | dir=in | name=blackberry desktop software wireless music sync data transfer |
"{3D835AA4-C5B3-45FC-A858-420E96F04BA6}" = lport=10244 | protocol=6 | dir=in | app=system |
"{3E338794-780B-41CF-AD05-437AB7CC4ED1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{43C6C2D8-8476-4F1F-B10E-18031AA779AC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{455CAD2F-833B-4918-B37B-EDDC4A6132C5}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{49BAE87E-8546-497A-B876-51058C7FA650}" = lport=4481 | protocol=6 | dir=in | name=blackberry desktop software wireless music sync data transfer |
"{4F7A9657-5DE9-42E8-89C4-722E80AB6BDB}" = lport=138 | protocol=17 | dir=in | app=system |
"{569EC159-C638-4535-B8FE-9087C09C5163}" = lport=2869 | protocol=6 | dir=in | app=system |
"{5A6462A3-3E71-4D68-884D-2454BA972871}" = lport=139 | protocol=6 | dir=in | app=system |
"{6389132D-AAF6-4520-A5E0-DF439FFE726E}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{6E684312-B52E-48E4-8B36-91104BFF8ECA}" = lport=445 | protocol=6 | dir=in | app=system |
"{776CF0FB-B647-439F-B233-DAAFDDEE004C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8D770665-ECDC-4BDC-BA55-0B10BA57D983}" = lport=4482 | protocol=17 | dir=in | name=blackberry desktop software wireless music sync discovery |
"{9A058CDC-C0CF-4197-B3F8-BF655D51F450}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9AE72CD9-A62A-4D80-8ECE-E8D7F9219263}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A11BF95D-7312-4648-990A-7FF693BFAE1C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A1EFC62F-13E1-42F8-A862-25BFE1E3A97F}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{B960900C-45C2-474A-B055-7C264DFD7140}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C4DFED6E-CAD5-4EC2-ADDA-325FAC206657}" = rport=139 | protocol=6 | dir=out | app=system |
"{C5D4C283-49EC-4FE6-8E49-BEAAD42C578D}" = lport=3390 | protocol=6 | dir=in | app=system |
"{D08C518A-6CBE-4A1A-BD4F-35D53D6D05DF}" = lport=10244 | protocol=6 | dir=in | app=system |
"{DA440C1D-B87E-4A62-9E5D-6FE55FF3C244}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DA89EF79-DF3F-4FE2-825D-A262DA505315}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{E2C6E30B-EAF0-47F2-9958-1677FF9B38BB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E35847D7-FF7A-4ACC-B605-A445E7B73233}" = rport=445 | protocol=6 | dir=out | app=system |
"{EBCF77FF-ACE2-459C-B0F3-114BD04D23A3}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{F24F59E6-3F70-4900-8CB9-EB4CD1CCD5FB}" = rport=138 | protocol=17 | dir=out | app=system |
"{F64C31D4-972D-4E76-B4CB-236EF59DD7EC}" = rport=10244 | protocol=6 | dir=out | app=system |
"{FB3C3A40-BB9A-452E-97FE-2A4E305D9A26}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{FC4E897D-451D-4C62-BD17-0B9A3A410983}" = rport=10244 | protocol=6 | dir=out | app=system |
"{FF6FB171-85E4-4D9D-B2D9-E3466619E7E7}" = lport=3390 | protocol=6 | dir=in | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0106581D-91B9-4ABB-92A8-248D27015A18}" = protocol=6 | dir=in | app=c:\program files\symantec antivirus\snac.exe |
"{01BACE72-F99D-49DE-B906-B162474DB2A6}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{04714DBA-EF25-40BD-8C26-98C456884811}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{10D6434F-6F4B-4796-879D-09944FFF028B}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe |
"{12FD7809-4E51-4057-95BE-B544C9EDC3EE}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{15C0B31E-290F-4860-8E96-C3855AE55B34}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{1724EB94-9A9F-47FB-AD52-99F6E359085C}" = protocol=17 | dir=in | app=c:\program files\symantec antivirus\snac.exe |
"{18447BB8-F854-49A0-836C-6F443E3366D3}" = protocol=6 | dir=in | app=c:\users\sonam\appdata\roaming\dropbox\bin\dropbox.exe |
"{1A7D9777-FE8B-4836-924D-756AC422FCD0}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\powerdvd.exe |
"{2B6C00C8-7248-4E19-9461-33090A6B9D73}" = protocol=17 | dir=in | app=c:\program files\dell video chat\dellvideochat.exe |
"{2C576A2D-2F5A-435E-86A0-5E9137629214}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{311E980C-0008-4508-A06C-7F4BA1D21997}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{32CE4213-B9A2-494D-AF1A-5FED84BF1AD3}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{390F6283-7240-4579-BF22-E66AFD6514C5}" = protocol=6 | dir=in | app=c:\users\sonam\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{40B3B95A-9E65-4DCA-9A2E-999FFC2B2C59}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{44115E69-8F7B-437B-AEB3-238F5E91C00A}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{475D486C-71D3-4416-8FAF-D77994D03565}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{4AE8D7A5-E53E-4242-A471-5A11030A63E4}" = protocol=6 | dir=in | app=c:\program files\dell video chat\dellvideochat.exe |
"{4BE85832-4EE4-49AD-BC7D-B7612E297D05}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{52BAD81F-D3EB-4C80-B589-B98F0E27CBBD}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{5E0AC55E-2084-4B34-819B-F3EADD0E6BBB}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{6221F4AB-4A4B-4972-993D-BA46A6AF7FB0}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{73494A89-1154-4135-894F-4792257572A3}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{75CDC363-11BA-4C81-840C-EDFBC54CC2E0}" = protocol=17 | dir=in | app=c:\users\sonam\appdata\roaming\dropbox\bin\dropbox.exe |
"{81C3FB17-C5CB-48E9-82AD-CE072BA1A7FA}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{85444A64-145D-422E-B057-2B64A22801E4}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{87194702-C720-4960-90CC-BB59AE541CC5}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{8DA7E8DD-AC01-466D-A535-D3A45F15F476}" = protocol=17 | dir=in | app=c:\program files\common files\symantec shared\ccapp.exe |
"{91971C24-F826-48E2-85C0-DE135443F588}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{9211A64E-16FA-4669-BFC0-D800CBC809BB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{96B7DFF3-C607-4584-9DBC-13A13DC94CC1}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{A72D0967-61BC-4A72-AF27-32BDD841FCA6}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{A90FB5AF-143E-4444-8EF6-9FC3B75ECB6C}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{AD973EA4-26A8-4EBE-81D8-1982EF498CC2}" = protocol=17 | dir=in | app=c:\users\sonam\appdata\local\google\google talk plugin\googletalkplugin.exe |
"{B001F25D-2DC1-42A4-BCA9-77B0A6675D05}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{B56687AF-2D1C-4F75-952F-730FD712DFC7}" = protocol=6 | dir=in | app=c:\program files\common files\symantec shared\ccapp.exe |
"{BF0376F6-4FD7-461A-8F79-802B1A7BC24D}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{D39F5D90-6F18-4911-9662-78DB5CCD4EE6}" = protocol=17 | dir=in | app=c:\program files\research in motion\blackberry desktop\rim.desktop.exe |
"{D93488C1-9C9F-461C-A40C-0883CB70E7B6}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{DE8BA9B4-6648-45E0-8533-CD42F2DA20DE}" = protocol=6 | dir=in | app=c:\program files\research in motion\blackberry desktop\rim.desktop.exe |
"{DFCC10EB-284F-49D6-94C4-A9FE978A31EE}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{DFE74DE3-3706-4FEF-B20E-815ACE2FEC4A}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{E10E9CB6-5C56-4829-8FE3-89805089E0CF}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{E95A04EF-7A49-453D-9E41-DD863B41D1DC}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{F29D27E9-9B44-429D-8108-B7D5B2E73124}" = protocol=17 | dir=in | app=c:\program files\symantec antivirus\smc.exe |
"{F3E09A7D-3110-4F88-A91B-DDFDC8A97B40}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{F54F4389-E06A-4DF8-9C31-8A05B96DEB78}" = protocol=6 | dir=in | app=c:\program files\symantec antivirus\smc.exe |
"{F86924BE-F5B3-4336-BE6F-8932D76F5DF9}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{FC529BFA-95B1-42F5-8D0A-8974D668DB8F}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{FC88DB58-8920-4759-9414-6A209D02F31A}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{FD041AE6-DE09-4017-B295-E9D73EC6BB3D}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"TCP Query User{00B725E1-88C0-4E85-8F8F-D529573BCBF3}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe |
"TCP Query User{29E43933-F01F-4913-8AA0-5F06FF11F1E7}C:\program files\java\jre1.6.0_07\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\javaw.exe |
"TCP Query User{345DF5FB-1813-4CDA-AAAA-64C42AC5FF8F}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{34B4D7EC-7F1B-42BE-A51E-9775557C2FBC}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe |
"TCP Query User{39D4A315-F8AA-44BD-86D2-3546D276EDE6}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"TCP Query User{56210131-7D0F-40F3-BE56-137781FD8ADA}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{5667C8D8-5E79-4240-9CAF-EC849E741C7F}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"TCP Query User{5B0AABD0-5C26-4CD0-B941-C39D6B37C65B}C:\program files\boxee\boxee.exe" = protocol=6 | dir=in | app=c:\program files\boxee\boxee.exe |
"TCP Query User{5DD01ACB-764C-4CC6-8FFE-FF93544E7DCB}C:\program files\soulseekns\slsk.exe" = protocol=6 | dir=in | app=c:\program files\soulseekns\slsk.exe |
"TCP Query User{67CF7A59-369F-4567-B57B-3D76B90BE5DC}C:\program files\qtweb\qtweb.exe" = protocol=6 | dir=in | app=c:\program files\qtweb\qtweb.exe |
"TCP Query User{6AF635C9-F6AC-4193-928D-B80CDB6A5E46}C:\program files\frostwire\frostwire.exe" = protocol=6 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"TCP Query User{724EC638-FCB6-41C5-ABFB-64FFB6459DD9}C:\program files\tvuplayer\tvuplayer.exe" = protocol=6 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"TCP Query User{80F6461E-9743-4FFE-AF08-9B668B5A2B29}C:\program files\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe |
"TCP Query User{A5D61B37-8E4C-48A4-BB73-4C69DD6A2A3A}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{A73A94D1-8136-43C2-BCB4-EFBF00475EDD}C:\program files\real alternative\media player classic\mplayerc.exe" = protocol=6 | dir=in | app=c:\program files\real alternative\media player classic\mplayerc.exe |
"TCP Query User{D9C53E0C-C663-4B8F-9D78-9E4C798E973F}C:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" = protocol=6 | dir=in | app=c:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe |
"TCP Query User{DD478932-7717-4794-8B28-73CDB3C02F97}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"TCP Query User{DDC87E2F-1F7B-4DE8-A2AF-C51E43C5DBD1}C:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe |
"TCP Query User{F0AF53A9-C1D7-45B3-AF77-C6D36D8142B2}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{F1C93F2A-3E38-4F31-8D0E-0C52F3CAD66E}C:\program files\tvants\tvants.exe" = protocol=6 | dir=in | app=c:\program files\tvants\tvants.exe |
"TCP Query User{F7010DC2-456B-43D2-98DD-3DFE046D4282}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"TCP Query User{FD8298A0-E1C5-43D1-88A4-A3B2BF496C84}C:\windows\system32\java.exe" = protocol=6 | dir=in | app=c:\windows\system32\java.exe |
"TCP Query User{FE343D2B-4AF4-4BB8-85C6-0826472D46C2}C:\users\sonam\desktop\anomos\anomos.exe" = protocol=6 | dir=in | app=c:\users\sonam\desktop\anomos\anomos.exe |
"UDP Query User{007CCDB3-ABE1-494C-A208-6783D68C9A5F}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{055E4405-011E-4949-BB00-A3C0B35F91C6}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{10F1F206-0154-49F3-9453-A39B5FB122CA}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{163E639E-BC61-48D8-9ECB-F9AE9CB9156C}C:\program files\real alternative\media player classic\mplayerc.exe" = protocol=17 | dir=in | app=c:\program files\real alternative\media player classic\mplayerc.exe |
"UDP Query User{16DA6E11-71F4-430E-B062-32E4900D5992}C:\program files\frostwire\frostwire.exe" = protocol=17 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"UDP Query User{17F35300-37BE-484F-AD48-158F25C5E7D0}C:\program files\qtweb\qtweb.exe" = protocol=17 | dir=in | app=c:\program files\qtweb\qtweb.exe |
"UDP Query User{1C58D239-4354-496B-AD2E-BC858A9B3C34}C:\program files\java\jre1.6.0_07\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\javaw.exe |
"UDP Query User{2BFB3D60-7978-4716-BC50-6685B4A2A245}C:\program files\soulseekns\slsk.exe" = protocol=17 | dir=in | app=c:\program files\soulseekns\slsk.exe |
"UDP Query User{35ECB886-55FE-46A6-9F4A-1FA1FF84878C}C:\program files\tvuplayer\tvuplayer.exe" = protocol=17 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"UDP Query User{37FD5F86-301C-4A5F-B6F8-567A4795470F}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
"UDP Query User{479DCCBB-9F38-4BFC-86D2-FFE071C9B2BD}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe |
"UDP Query User{67210CEB-D4D8-4E57-A06A-76E1DDA7E8D7}C:\program files\boxee\boxee.exe" = protocol=17 | dir=in | app=c:\program files\boxee\boxee.exe |
"UDP Query User{6D68D587-9ED1-4413-8108-61EEC4409021}C:\program files\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe |
"UDP Query User{6F399618-F4DE-4691-93A5-5291DDC3DBEE}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe |
"UDP Query User{7A3026CB-673F-4E89-8DFE-7E8A2BEAF1CB}C:\users\sonam\desktop\anomos\anomos.exe" = protocol=17 | dir=in | app=c:\users\sonam\desktop\anomos\anomos.exe |
"UDP Query User{7A65FFC0-4E85-4606-9F52-737CC4FC2AFE}C:\windows\system32\java.exe" = protocol=17 | dir=in | app=c:\windows\system32\java.exe |
"UDP Query User{8D02DFD8-7A21-4331-BEC7-16D082FBEB06}C:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe" = protocol=17 | dir=in | app=c:\users\sonam\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe |
"UDP Query User{A2D391F8-0BD4-4485-965B-377AF0D3261C}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{AB73C535-7D02-40EE-B5C6-D4A7B2FB1CD5}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{B12ABC17-17D0-4409-B865-61EF86C64915}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"UDP Query User{C07C5736-3B02-43D4-BC69-7F918CDFEF83}C:\program files\tvants\tvants.exe" = protocol=17 | dir=in | app=c:\program files\tvants\tvants.exe |
"UDP Query User{CA778AC5-4F4C-4D93-9E7E-9C5E479D5FC6}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |
"UDP Query User{DEAC5C38-BC51-4C01-8DC5-969FE5D28E5A}C:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{005F78AF-110D-398A-8430-BE98950A1E22}" = Google Talk Plugin
"{008099FB-FC94-23B9-E613-02F5A7A0B27C}" = Catalyst Control Center Graphics Previews Vista
"{0405E51E-9582-4207-8F38-AC44201D3808}" = VeohTV BETA
"{04FDC8D5-704E-D6FF-6C0F-F243EB1EA544}" = Catalyst Control Center InstallProxy
"{05ADEEC8-BD58-43D9-A9E3-1F53B0DA117A}" = Opera 10.51
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{11B734DB-A59E-67F8-C57B-26AF2A424D26}" = Catalyst Control Center Graphics Full New
"{13C0E1F7-BB8A-4545-B25E-628D025A94AD}_is1" = QtWeb Internet Browser 3.7
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FECF5F8-8E75-432C-9FF7-1C04F1956B54}" = Realtek Ethernet Network Card Diagnostic tool for Windows Vista
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java™ 6 Update 18
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{294BF709-D758-4363-8D75-01479AD20927}" = Windows Live Family Safety
"{2D6ED011-055B-4041-B198-BB903827EBFB}" = Safari
"{2EFCC193-D915-4CCB-9201-31773A27BC06}" = Symantec Endpoint Protection
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{336DBED7-6987-280E-68FD-128C8E49F339}" = ccc-utility
"{338F08AB-C262-42C7-B000-34DE1A475273}" = Ad-Aware Email Scanner for Outlook
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4281EBFF-4B50-3B3F-24AF-37AE651F96AA}" = Catalyst Control Center Graphics Full Existing
"{448E2D77-E504-4221-B2C2-93646B344729}" = Mouse Suite for Desktop Computers
"{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4F94119D-1B71-400e-9F04-B4E5CEAE71F8}_is1" = Sothink Movie DVD Maker
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.2
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5DDA0912-0AE8-A706-B227-5F46F29718AF}" = Catalyst Control Center Localization All
"{60082130-7177-B669-5232-A4D8983DAAAB}" = Skins
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{634033F4-3E94-4F5E-B3E4-3928A46A78D7}_is1" = ConvertXtoDVD 4 english manual
"{6350DFD0-01B0-11DE-87AF-0800200C9A66}" = Livestation
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}" = EDocs
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7F205F55-A144-417C-9682-2C128C2A3C14}" = BlackBerry Device Software v6.0.0 for the BlackBerry 9100/9105 smartphone
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{84A78614-0E4B-4A4E-BA8C-2B0A05A08E4E}" = BlackBerry Desktop Software 6.0.1
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8DD6892C-C9A8-404B-95ED-1CCE15324178}" = BlackBerry App World Browser Plugin
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 3.81
"{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}" = iTunes
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A29549FD-65F3-440C-A552-6B8114CF319D}" = Skype Toolbars
"{A5A3D3E5-D31B-94AB-AD40-0C4A6B46F896}" = ccc-core-static
"{A69D7B32-2BE9-42BF-B576-69B5E0FF7394}" = Catalyst Control Center - Branding
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B158F76F-76AB-4115-A4F0-4C6EF6956093}_is1" = VirtualDubMOD [removed] US
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B8F87E7F-28D2-39A9-DA21-35FE13071761}" = Catalyst Control Center Graphics Previews Common
"{B935C985-A17F-484B-8470-09E4FC27DC26}" = Dell-eBay
"{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}" = Logitech Webcam Software
"{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}" = Apple Mobile Device Support
"{C49067A8-8212-4A82-A4D9-1519701644F0}" = Citrix Presentation Server Client - Web Only
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C0}" = WinZip 15.0
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D4163F73-AAE4-4E4F-9E9E-70828C2ADB58}" = iPodifier
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D6C9AF27-9414-46C8-B9D8-D878BA041033}" = Nero 8
"{D8A081EB-19BB-CA58-A86E-AEF0D1E0B243}" = ATI Catalyst Install Manager
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.1.2.336
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E75AB7CD-E5AF-1FF0-B5FD-AD5DAF91FCBD}" = Catalyst Control Center Core Implementation
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{EDFE0EA5-B933-7125-A7C1-A05C1B5CD57C}" = CCC Help English
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1454832-04F3-5534-48C4-8A11BD348013}" = Catalyst Control Center Graphics Light
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"AC3Filter" = AC3Filter (remove only)
"Ad-Aware" = Ad-Aware
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AnyDVD" = AnyDVD
"Ares" = Ares 2.1.1
"Audacity_is1" = Audacity 1.2.6
"AURC_is1" = Audacity Recovery Utility
"AviSynth" = AviSynth 2.5
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS YouTube Uploader 2.1_is1" = AVS YouTube Uploader version 2.1
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.3
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"AVS4YOU Video Editor 4_is1" = AVS Video Editor 4
"BlackBerry_Desktop" = BlackBerry Desktop Software 6.0.1
"Burn4Free" = Burn4Free CD and DVD
"CCleaner" = CCleaner
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"d2mp" = d2mp
"Dell Video Chat" = Dell Video Chat (remove only)
"DeVeDe_is1" = DeVeDe 3.11b
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVD Flick_is1" = DVD Flick 1.3.0.7
"DVD Shrink_is1" = DVD Shrink 3.2
"DVDStyler_is1" = DVDStyler v1.7.4
"eMule" = eMule
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ERUNT_is1" = ERUNT 1.1j
"ffdshow_is1" = ffdshow [rev 3164] [2009-12-14]
"Free Ipod Video Converter_is1" = Free Ipod Video Converter V 2.6
"FrostWire" = FrostWire 4.21.1
"Google Desktop" = Google Desktop
"GoToAssist" = GoToAssist 8.0.0.514
"HaaliMkx" = Haali Media Splitter
"HDMI" = Intel® Graphics Media Accelerator Driver
"HotspotShield" = Hotspot Shield 1.37
"ImgBurn" = ImgBurn
"InstallShield_{0405E51E-9582-4207-8F38-AC44201D3808}" = VeohTV BETA
"K-Meleon" = K-Meleon 1.5.4 en-US (remove only)
"LiveUpdate" = LiveUpdate 3.3 (Symantec Corporation)
"lvdrivers_12.10" = Logitech Webcam Software Driver Package
"Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
"MainApp.exe_is1" = CloneDVD 4.3.0.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"ManyCam" = ManyCam 2.6.1 (remove only)
"McAfee Security Scan" = McAfee Security Scan Plus
"MediaCoder" = MediaCoder 0.6.2
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"MKVtoolnix" = MKVtoolnix 2.2.0
"Mozilla ActiveX Control v1.7.12" = Mozilla ActiveX Control v1.7.12
"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)
"MP3 Cutter Joiner_is1" = MP3 Cutter Joiner 3.00
"MPEG Joiner_is1" = MPEG Joiner
"OpenAL" = OpenAL
"Orbit_is1" = Orbit Downloader
"qt7lite_is1" = QT Lite 2.7.0
"RealAlt_is1" = Real Alternative 2.0.1
"Soulseek2" = SoulSeek 157 NS 13c
"SpywareBlaster_is1" = SpywareBlaster 4.2
"StaxRip_is1" = StaxRip 1.1.1.0
"TVAnts 1.0" = TVAnts 1.0
"TVUPlayer" = TVUPlayer [removed]
"Ultra QuickTime Converter_is1" = Ultra QuickTime Converter 2.3.0916
"Ultra RM Converter_is1" = Ultra RM Converter 4.0.1127
"URLSnooper 2_is1" = URL Snooper v2.23.01
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"Veoh Video Compass" = Veoh Video Compass
"Veoh Web Player Beta" = Veoh Web Player
"Videora iPod Converter" = Videora iPod Converter 6
"VLC media player" = VLC media player 1.1.7
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1 beta5
"WinRAR archiver" = WinRAR archiver
"XviD_is1" = XviD 1.1 final uninstall
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"309a46b1dc89b774" = Dell Driver Download Manager
"BOXEE" = Boxee
"Dropbox" = Dropbox
"Octoshape Streaming Services" = Octoshape Streaming Services
"uTorrent" = µTorrent
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 30/03/2011 12:49:33 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 12:49:34 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 12:53:22 AM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:44:49 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:45:03 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:45:22 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:50:52 PM | Computer Name = sonam-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 30/03/2011 2:53:08 PM | Computer Name = sonam-PC | Source = Application Error | ID = 1000
Description = Faulting application plugin-container.exe, version 1.9.2.4095, time
stamp 0x4d852c62, faulting module ntdll.dll, version 6.0.6002.18327, time stamp
0x4cb73436, exception code 0xc0000005, fault offset 0x00048822, process id 0x17d0,
application start time 0x01cbeda23e7b23af.
[ Media Center Events ]
Error - 15/10/2008 10:17:39 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 107
Description =
Error - 15/10/2008 10:21:39 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 107
Description =
Error - 15/10/2008 10:28:32 PM | Computer Name = sonam-PC | Source = McrMgr | ID = 109
Description =
Error - 08/01/2009 12:42:54 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 16/02/2009 12:46:02 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 19/02/2009 12:38:56 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 04/03/2009 12:38:44 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 23/08/2009 4:13:42 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 24/08/2009 5:44:21 AM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
Error - 08/10/2009 3:31:44 PM | Computer Name = sonam-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.
[ OSession Events ]
Error - 28/10/2009 3:39:29 AM | Computer Name = sonam-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 44361
seconds with 180 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 11/03/2011 3:12:58 PM | Computer Name = sonam-PC | Source = cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.
Error - 11/03/2011 3:13:02 PM | Computer Name = sonam-PC | Source = cdrom | ID = 262151
Description = The device, \Device\CdRom0, has a bad block.
Error - 11/03/2011 4:44:24 PM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 14/03/2011 7:30:44 PM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 16/03/2011 4:09:38 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 16/03/2011 4:34:13 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 18/03/2011 1:31:03 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 23/03/2011 7:34:02 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 25/03/2011 8:37:55 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
Error - 28/03/2011 2:58:48 AM | Computer Name = sonam-PC | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.
< End of report >