edgardavids
Topic Starter
Hi my computer is generally running slow and internet homepages have changed to searchqu.com when i open up new tabs, it has also started to pop up sites by itself - some not for family viewing !! and on some websites i get the message webpage could not be displayed……………Avast also reported a Dropper trojan ? Please could you take a look at my OTL files pasted below
Many Thanks in advance
OTL logfile created on: 29/04/2011 12:20:57 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Lee Edgar\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
1,022.00 Mb Total Physical Memory | 192.00 Mb Available Physical Memory | 19.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 51.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.45 Gb Total Space | 26.47 Gb Free Space | 35.56% Space Free | Partition Type: NTFS
Drive G: | 149.05 Gb Total Space | 123.67 Gb Free Space | 82.98% Space Free | Partition Type: NTFS
Computer Name: MAINCOMPUTER | User Name: Lee Edgar | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - File not found
PRC - C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
PRC - C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\PrinterShare\paConsole.exe (PrinterAnywhere)
PRC - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
PRC - C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
PRC - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\Common Files\LogiShrd\KHAL2\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Program Files\Logitech\QuickCam\Quickcam.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\DAEMON Tools\daemon.exe (DT Soft Ltd.)
PRC - C:\Program Files\FinePixViewer\QuickDCF2.exe (FUJIFILM Corporation)
PRC - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\Unlocker\UnlockerAssistant.exe ()
PRC - C:\Program Files\UPHClean\uphclean.exe (Microsoft Corporation)
PRC - C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.)
PRC - C:\Program Files\A4Tech\Keyboard\Ikeymain.exe (A4Tech Co.,Ltd.)
PRC - C:\Program Files\SpywareGuard\sgmain.exe ()
PRC - C:\Program Files\SpywareGuard\sgbhp.exe ()
PRC - C:\WINDOWS\SYSTEM32\DSentry.exe (Dell - Advanced Desktop Engineering)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Alwil Software\Avast5\snxhk.dll (AVAST Software)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\Logitech\SetPoint\lgscroll.dll (Logitech, Inc.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll (Microsoft Corporation)
MOD - C:\Program Files\Unlocker\UnlockerHook.dll ()
========== Win32 Services (SafeList) ==========
SRV - (SecureSrv) – File not found
SRV - (ResultBar Service) – File not found
SRV - (Pml Driver HPZ12) – File not found
SRV - (HidServ) – File not found
SRV - (AppMgmt) – File not found
SRV - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (pdfFactory Pro Dispatcher v3) – C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
SRV - (ServiceLayer) – C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (LBTServ) – C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (EPSON_EB_RPCV4_01) EPSON V5 Service4(01) – C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE (SEIKO EPSON CORPORATION)
SRV - (UxTuneUp) – C:\WINDOWS\SYSTEM32\uxtuneup.dll (TuneUp Software GmbH)
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) – C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE (SEIKO EPSON CORPORATION)
SRV - (UPHClean) – C:\Program Files\UPHClean\uphclean.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (aswSnx) – C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) – C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) – C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMon2) – C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswRdr) – C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (Aavmker4) – C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswFsBlk) – C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (BVRPMPR5) – C:\WINDOWS\SYSTEM32\DRIVERS\BVRPMPR5.SYS (Avanquest Software)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (fssfltr) – C:\WINDOWS\SYSTEM32\DRIVERS\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (nmwcd) – C:\WINDOWS\SYSTEM32\DRIVERS\ccdcmb.sys (Nokia)
DRV - (WinDriver6) – C:\WINDOWS\SYSTEM32\DRIVERS\windrvr6.sys (Jungo)
DRV - (LUsbFilt) – C:\WINDOWS\SYSTEM32\DRIVERS\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouKE) – C:\WINDOWS\SYSTEM32\DRIVERS\LMouKE.Sys (Logitech, Inc.)
DRV - (LMouFilt) – C:\WINDOWS\SYSTEM32\DRIVERS\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\WINDOWS\SYSTEM32\DRIVERS\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042mou) – C:\WINDOWS\SYSTEM32\DRIVERS\L8042mou.Sys (Logitech, Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\SYSTEM32\DRIVERS\L8042Kbd.sys (Logitech, Inc.)
DRV - (PCANDIS5) – C:\WINDOWS\SYSTEM32\PCANDIS5.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (FilterService) – C:\WINDOWS\SYSTEM32\DRIVERS\lvuvcflt.sys (Logitech Inc.)
DRV - (LVUVC) Logitech QuickCam E3500(UVC) – C:\WINDOWS\SYSTEM32\DRIVERS\lvuvc.sys (Logitech Inc.)
DRV - (LVUSBSta) – C:\WINDOWS\SYSTEM32\DRIVERS\LVUSBSta.sys (Logitech Inc.)
DRV - (LVRS) – C:\WINDOWS\SYSTEM32\DRIVERS\lvrs.sys (Logitech Inc.)
DRV - (LVPr2Mon) – C:\WINDOWS\SYSTEM32\DRIVERS\LVPr2Mon.sys ()
DRV - (pccsmcfd) – C:\WINDOWS\SYSTEM32\DRIVERS\pccsmcfd.sys (Nokia)
DRV - (s117obex) – C:\WINDOWS\SYSTEM32\DRIVERS\s117obex.sys (MCCI Corporation)
DRV - (s117mdm) – C:\WINDOWS\SYSTEM32\DRIVERS\s117mdm.sys (MCCI Corporation)
DRV - (s117mgmt) Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\s117mgmt.sys (MCCI Corporation)
DRV - (s117unic) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\s117unic.sys (MCCI Corporation)
DRV - (s117nd5) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS) – C:\WINDOWS\SYSTEM32\DRIVERS\s117nd5.sys (MCCI Corporation)
DRV - (s117mdfl) – C:\WINDOWS\SYSTEM32\DRIVERS\s117mdfl.sys (MCCI Corporation)
DRV - (s117bus) Sony Ericsson Device 117 driver (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\s117bus.sys (MCCI Corporation)
DRV - (sptd) – C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (vaxscsi) – C:\WINDOWS\System32\Drivers\vaxscsi.sys (Alcohol Soft Co., Ltd.)
DRV - (SE27mdm) – C:\WINDOWS\SYSTEM32\DRIVERS\SE27mdm.sys (MCCI)
DRV - (SE27mdfl) – C:\WINDOWS\SYSTEM32\DRIVERS\SE27mdfl.sys (MCCI)
DRV - (SE27bus) Sony Ericsson Device 039 Driver driver (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\SE27bus.sys (MCCI)
DRV - (LHidKe) – C:\WINDOWS\SYSTEM32\DRIVERS\LHidKE.Sys (Logitech, Inc.)
DRV - (LHidUsbK) – C:\WINDOWS\SYSTEM32\DRIVERS\LHidUsbK.sys (Logitech, Inc.)
DRV - (pfc) – C:\WINDOWS\SYSTEM32\DRIVERS\pfc.sys (Padus, Inc.)
DRV - (Amps2prt) – C:\WINDOWS\SYSTEM32\DRIVERS\Amps2prt.sys (A4Tech Co.,Ltd.)
DRV - (iAimFP4) – C:\WINDOWS\SYSTEM32\DRIVERS\wvchntxx.sys (Intel® Corporation)
DRV - (iAimFP3) – C:\WINDOWS\SYSTEM32\DRIVERS\wsiintxx.sys (Intel® Corporation)
DRV - (iAimTV4) – C:\WINDOWS\SYSTEM32\DRIVERS\wch7xxnt.sys (Intel® Corporation)
DRV - (iAimTV3) – C:\WINDOWS\SYSTEM32\DRIVERS\watv04nt.sys (Intel® Corporation)
DRV - (iAimTV1) – C:\WINDOWS\SYSTEM32\DRIVERS\watv02nt.sys (Intel® Corporation)
DRV - (iAimTV0) – C:\WINDOWS\SYSTEM32\DRIVERS\watv01nt.sys (Intel® Corporation)
DRV - (iAimFP0) – C:\WINDOWS\SYSTEM32\DRIVERS\wadv01nt.sys (Intel® Corporation)
DRV - (iAimFP1) – C:\WINDOWS\SYSTEM32\DRIVERS\wadv02nt.sys (Intel® Corporation)
DRV - (iAimFP2) – C:\WINDOWS\SYSTEM32\DRIVERS\wadv05nt.sys (Intel® Corporation)
DRV - (i81x) – C:\WINDOWS\SYSTEM32\DRIVERS\i81xnt5.sys (Intel® Corporation)
DRV - (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN) – C:\WINDOWS\SYSTEM32\DRIVERS\alcan5wn.sys (THOMSON)
DRV - (alcaudsl) – C:\WINDOWS\SYSTEM32\DRIVERS\alcaudsl.sys (THOMSON)
DRV - (BCMModem) – C:\WINDOWS\SYSTEM32\DRIVERS\BCMSM.sys (Broadcom Corporation)
DRV - (Machnm32) – C:\WINDOWS\SYSTEM32\Machnm32.sys ()
DRV - (bcm4sbxp) – C:\WINDOWS\SYSTEM32\DRIVERS\bcm4sbxp.sys (Broadcom Corporation)
DRV - (DCamUSBSQTECH) Dual-Mode DSC(2770) – C:\WINDOWS\SYSTEM32\DRIVERS\SQCaptur.sys (Service & Quality Technology.)
DRV - (omci) – C:\WINDOWS\SYSTEM32\DRIVERS\omci.sys (Dell Computer Corporation)
DRV - (EL90XBC) – C:\WINDOWS\SYSTEM32\DRIVERS\EL90XBC5.SYS (3Com Corporation)
DRV - (DLPortIO) – C:\WINDOWS\SYSTEM32\DRIVERS\DLPORTIO.SYS ()
DRV - (Aspi32) – C:\WINDOWS\System32\drivers\aspi32.sys (Adaptec)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&am;…amp;affID=17978
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/iat/us_gb.aspx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\..\URLSearchHook: {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Yahoo-Mp3Tube"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.defaulturl: "http://www.bing.com/search?FORM=IEFM1&q;="
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.search.selectedEngineURL: "http://mp3tubetoolbarsearch.com/?tmp=toolbar_mp3tube_results&prt;=pinballtb01ff&clid;=591a699985204c28835e93a02489f74a&subid;=&Keywords;={searchTerms}"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.searchqu.com/406"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 44
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:[removed]
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0
FF - prefs.js..extensions.enabledItems: [removed]:1.6.1
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:[removed]
FF - prefs.js..extensions.enabledItems: {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.10.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {34EFA911-B536-4C08-BECE-CD5E55C875B0}:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0
FF - prefs.js..extensions.enabledItems: {e968fc70-8f95-4ab9-9e79-304de2a71ee1}:0.7.3
FF - prefs.js..extensions.enabledItems: {40a1f5d7-afc2-498f-b264-02668d616ff6}:1.1
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: [removed]:1.1.3
FF - prefs.js..keyword.URL: "http://www.searchqu.com/web?src=ffb&systemid;=406&q;="
FF - user.js..keyword.URL: "http://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords;="
FF - user.js..keyword.enabled: 1
FF - HKLM\software\mozilla\Firefox\extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010/04/15 23:15:53 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/04/18 15:33:53 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/24 13:33:53 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010/04/15 23:15:54 | 000,000,000 | —D | M]
[2011/04/24 14:09:21 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Extensions
[2011/04/24 14:09:00 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions
[2010/05/11 11:20:25 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/03/15 21:29:02 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/01/22 16:34:08 | 000,000,000 | —D | M] (Mega Manager Integration) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{40a1f5d7-afc2-498f-b264-02668d616ff6}
[2011/02/08 13:52:50 | 000,000,000 | —D | M] (NoScript) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011/04/24 14:09:00 | 000,000,000 | —D | M] (Searchqu Toolbar) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2011/01/16 20:18:29 | 000,000,000 | —D | M] (DownThemAll!) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2009/09/15 19:29:11 | 000,000,000 | —D | M] (Adobe DLM (powered by getPlus®)) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2011/02/08 13:53:02 | 000,000,000 | —D | M] (Page Speed) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}
[2011/01/18 20:28:06 | 000,000,000 | —D | M] (User Agent Switcher) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}
[2011/03/30 17:43:52 | 000,000,000 | —D | M] (Babylon) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\[removed]
[2010/12/31 15:35:08 | 000,000,000 | —D | M] (Personas) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\[removed]
[2011/04/18 15:39:29 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\staged
[2011/01/22 16:35:54 | 000,000,000 | —D | M] (vShare) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\vshare@toolbar
[2010/05/14 15:53:24 | 000,001,819 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\searchplugins\bing.xml
[2010/12/14 13:27:53 | 000,001,215 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\searchplugins\Mp3Tube.xml
[2011/03/23 13:24:21 | 000,005,529 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\searchplugins\SearchquWebSearch.xml
[2011/01/22 16:36:49 | 000,001,583 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\searchplugins\web-search.xml
[2011/04/24 14:09:21 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/12/14 14:30:39 | 000,000,000 | —D | M] (ResultBar) – C:\Program Files\Mozilla Firefox\extensions\{34EFA911-B536-4C08-BECE-CD5E55C875B0}
[2010/05/15 08:58:00 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/05 17:44:12 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/10/26 10:19:50 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010/12/19 12:33:29 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/02/24 20:14:50 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) –
[2010/05/15 08:57:36 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/03/18 18:57:02 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/01/01 09:00:00 | 000,001,538 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2011/03/30 17:43:56 | 000,002,428 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
[2010/01/01 09:00:00 | 000,002,252 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
[2010/01/01 09:00:00 | 000,000,947 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2010/01/01 09:00:00 | 000,001,180 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010/12/13 13:36:54 | 000,002,035 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrchddr.xml
[2010/12/14 13:27:53 | 000,001,215 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\Mp3Tube.xml
[2011/03/23 13:24:21 | 000,005,529 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml
[2010/01/01 09:00:00 | 000,001,135 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml
O1 HOSTS File: ([2010/04/14 18:49:40 | 000,000,734 | —- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Phone\IEPlugin\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (SpywareGuardDLBLOCK.CBrowserHelper) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Discordia, LTD)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {4E7BD74F-2B8D-469E-A1FB-F862B587B57D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {8B68564D-53FD-4293-B80C-993A9F3988EE} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows iLivid Toolbar\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] File not found
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD)
O4 - HKLM..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe (Dell - Advanced Desktop Engineering)
O4 - HKLM..\Run: [iKeyWorks] C:\Program Files\A4Tech\Keyboard\Ikeymain.exe (A4Tech Co.,Ltd.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\QuickCam\Quickcam.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
O4 - HKLM..\Run: [pdfFactory Pro Dispatcher v3] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKLM..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.)
O4 - HKLM..\Run: [Windows Defender] File not found
O4 - HKCU..\Run: [DAEMON Tools] C:\Program Files\DAEMON Tools\daemon.exe (DT Soft Ltd.)
O4 - HKCU..\Run: [EPSON Stylus SX400 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEGE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [LDM] File not found
O4 - HKCU..\Run: [Mega Manager] C:\Program Files\Megaupload\Mega Manager\MegaManager.exe (Megaupload Limited)
O4 - HKCU..\Run: [NBJ] C:\Program Files\Ahead\Nero BackItUp\NBJ.exe (Ahead Software AG)
O4 - HKCU..\Run: [PrinterShare] C:\Program Files\PrinterShare\paConsole.exe (PrinterAnywhere)
O4 - HKCU..\Run: [runner32] File not found
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [Windows Defender] File not found
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil10o_ActiveX.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe (FUJIFILM Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O4 - Startup: C:\Documents and Settings\Lee Edgar\Start Menu\Programs\Startup\SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: Windows Defender = C:\Documents and Settings\Lee Edgar\Application Data\winup.exe
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 157
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: Policies = c:\directory\CyberGate\install\svchost.exe
O8 - Extra context menu item: Download Link Using Mega Manager… - C:\Program Files\Megaupload\Mega Manager\mm_file.htm ()
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Phone\IEPlugin\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - Reg Error: Key error. File not found
O9 - Extra Button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - Reg Error: Key error. File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\SYSTEM32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: ([]msn in My Computer)
O15 - HKCU\..Trusted Domains: securesuite.co.uk ([www] https in Trusted sites)
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} http://support.dell.com/systemprofiler/SysPro.CAB (SysProWmi Class)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/templates/ieawsdc.cab (Microsoft Office Template and Media Control)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Monopoly/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} http://pcpitstop.com/internet/pcpConnCheck.cab (iCC Class)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {32505657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/0/A…01F/wmvadvd.cab (Reg Error: Key error.)
O16 - DPF: {38AB6A6C-CC4C-4F9E-A3DD-3C5681EF18A1} http://launcher.station.sony.com/weblaunch…ebInstaller.cab (SonyOnlineInstallerX)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGam…1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase1140.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {75A6AEA3-F26E-4608-AE9B-8DA78C87576E} https://secure.footprint.net/kingsisle/stat…ameLauncher.CAB (Wizard101GameLauncher)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {8BC53B30-32E4-4ED3-BEF9-DB761DB77453} http://u3.sandisk.com/download/apps/LPInstaller.CAB (CInstallLPCtrl Object)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A4639D2F-774E-11D3-A490-00C04F6843FB} http://download.microsoft.com/download/Pow…N-US/msorun.cab (IEAnimBehaviorFactory Class)
O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} http://h20264.www2.hp.com/ediags/dd/instal…nosticsxp2k.cab (Reg Error: Key error.)
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} http://www.superadblocker.com/activex/sabspx.cab (SABScanProcesses Class)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Monopoly/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shock…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/2.9.2.0…inAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\bw+0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw+0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw-0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw00 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw00s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw-0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw10 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw10s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw20 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw20s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw30 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw30s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw40 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw40s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw50 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw50s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw60 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw60s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw70 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw70s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw80 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw80s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw90 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw90s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwa0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwa0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwb0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwb0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwc0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwc0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwd0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwd0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwe0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwe0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwf0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwf0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwg0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwg0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwh0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwh0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwi0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwi0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwj0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwj0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwk0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwk0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwl0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwl0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwm0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwm0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwn0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwn0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwo0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwo0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwp0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwp0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwq0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwq0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwr0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwr0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bws0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bws0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwt0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwt0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwu0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwu0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwv0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwv0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bww0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bww0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwx0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwx0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwy0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwy0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwz0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwz0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\offline-8876480 {F1B5BA50-5002-468D-8565-1D301F6E6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll ()
O20 - AppInit_DLLs: (C:\PROGRA~1\WI371A~1\Datamngr\datamngr.dll) - C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngr.dll (Discordia, LTD)
O20 - AppInit_DLLs: (C:\PROGRA~1\WI371A~1\Datamngr\IEBHO.dll) - C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Discordia, LTD)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logitech\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logitech\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ()
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: UxTuneUp - C:\WINDOWS\SYSTEM32\uxtuneup.dll (TuneUp Software GmbH)
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\System32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\SYSTEM32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\TSSOFT32.ACM (DSP GROUP, INC.)
Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\IR32_32.DLL ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\IR32_32.DLL ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.SP54 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.SP55 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.SP56 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.SP57 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.SP58 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.WMV3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (56027075282206720)
========== Files/Folders - Created Within 30 Days ==========
[2011/04/29 12:19:00 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe
[2011/04/24 14:11:09 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\Ilivid Player
[2011/04/24 14:09:50 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{6A6F35C2-F1BB-455A-85C0-F522DF746DDA}
[2011/04/24 14:09:34 | 000,000,000 | —D | C] – C:\Program Files\iLivid
[2011/04/24 14:08:51 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Application Data\searchqutoolbar
[2011/04/24 14:08:41 | 000,000,000 | —D | C] – C:\Program Files\Windows iLivid Toolbar
[2011/04/12 23:21:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\MetaGeek,_LLC
[2011/04/12 21:04:28 | 000,049,904 | R— | C] (Avanquest Software) – C:\WINDOWS\System32\drivers\BVRPMPR5.SYS
[2011/04/12 20:59:22 | 000,000,000 | —D | C] – C:\Netgear
[2011/04/12 12:50:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Application Data\PriceGong
[2011/04/12 12:23:50 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Application Data\BabylonToolbar
[2011/04/05 20:24:08 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\My Documents\EpicBot
[2011/04/05 20:23:43 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\Yahoo
[2011/04/05 20:22:04 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\PackageAware
[2011/04/05 20:22:03 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo!
[2011/04/05 20:21:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2011/04/05 20:21:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Application Data\Yahoo!
[2011/04/05 20:21:07 | 000,000,000 | —D | C] – C:\Program Files\Yahoo!
[2011/04/04 11:21:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\My Documents\BookSmartData
[2011/04/04 11:20:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\.blurb
[2011/04/04 11:19:56 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\BookSmart
[2011/04/04 11:18:21 | 000,000,000 | —D | C] – C:\Program Files\BookSmart
[2011/04/02 12:33:03 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Wizard101(UK)
[2011/04/02 12:33:00 | 000,000,000 | —D | C] – C:\Program Files\Wizard101(UK)
[2006/10/28 16:10:12 | 000,047,360 | —- | C] (VSO Software) – C:\Documents and Settings\Lee Edgar\Application Data\pcouffin.sys
[7 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/04/29 12:57:36 | 000,004,204 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\data.dat
[2011/04/29 12:19:16 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe
[2011/04/29 11:58:37 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/04/29 09:15:57 | 000,000,430 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{497F6515-09E8-4C56-A584-629BB37D8D0F}.job
[2011/04/28 22:05:51 | 000,000,129 | —- | M] () – C:\Documents and Settings\Lee Edgar\jagex_runescape_preferences2.dat
[2011/04/28 22:05:51 | 000,000,046 | —- | M] () – C:\Documents and Settings\Lee Edgar\jagex_runescape_preferences.dat
[2011/04/24 20:58:43 | 000,000,116 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/04/24 20:58:37 | 000,179,200 | —- | M] () – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/24 13:46:23 | 000,445,604 | —- | M] () – C:\WINDOWS\System32\PERFH009.DAT
[2011/04/24 13:46:23 | 000,072,810 | —- | M] () – C:\WINDOWS\System32\PERFC009.DAT
[2011/04/24 13:44:21 | 000,001,170 | —- | M] () – C:\WINDOWS\System32\WPA.DBL
[2011/04/24 13:42:14 | 000,000,164 | —- | M] () – C:\WINDOWS\System32\FppLicense3.ini
[2011/04/24 13:41:05 | 000,000,000 | —- | M] () – C:\WINDOWS\System32\drivers\logiflt.iad
[2011/04/24 13:33:53 | 000,001,729 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/04/23 12:26:22 | 010,541,276 | —- | M] () – C:\Documents and Settings\Lee Edgar\My Documents\Lee.zip
[2011/04/22 21:57:18 | 000,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/04/22 17:50:24 | 000,000,398 | —- | M] () – C:\WINDOWS\tasks\1-Click Maintenance.job
[2011/04/20 21:36:09 | 000,110,120 | -H– | M] () – C:\WINDOWS\System32\mlfcache.dat
[2011/04/19 07:42:10 | 000,000,000 | —- | M] () – C:\WINDOWS\System32\drivers\lvuvc.hs
[2011/04/18 15:34:05 | 000,000,742 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/04/18 15:34:05 | 000,000,724 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/04/16 11:01:37 | 000,001,601 | —- | M] () – C:\Documents and Settings\Lee Edgar\My Documents\esemee prices.rtf
[2011/04/16 03:46:56 | 000,446,904 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/16 03:28:48 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/04/15 09:08:51 | 002,359,681 | —- | M] () – C:\Documents and Settings\Lee Edgar\Desktop\Router manual.pdf
[2011/04/12 22:29:12 | 000,006,203 | —- | M] () – C:\Documents and Settings\Lee Edgar\Desktop\Router_Setup.html
[2011/04/12 17:39:31 | 000,000,640 | —- | M] () – C:\Documents and Settings\Lee Edgar\Desktop\TweetDeck.lnk
[2011/04/04 11:19:58 | 000,001,570 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\BookSmart.lnk
[2011/04/04 11:19:58 | 000,001,570 | —- | M] () – C:\Documents and Settings\All Users\Desktop\BookSmart.lnk
[7 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/04/28 20:53:10 | 000,004,179 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\data.dat
[2011/04/18 15:34:05 | 000,000,730 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/04/18 15:34:05 | 000,000,724 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/04/16 11:01:37 | 000,001,601 | —- | C] () – C:\Documents and Settings\Lee Edgar\My Documents\esemee prices.rtf
[2011/04/15 09:08:51 | 002,359,681 | —- | C] () – C:\Documents and Settings\Lee Edgar\Desktop\Router manual.pdf
[2011/04/12 22:29:14 | 000,000,172 | R— | C] () – C:\Documents and Settings\Lee Edgar\Desktop\Router Login.url
[2011/04/12 22:29:11 | 000,006,203 | —- | C] () – C:\Documents and Settings\Lee Edgar\Desktop\Router_Setup.html
[2011/04/12 17:39:31 | 000,000,640 | —- | C] () – C:\Documents and Settings\Lee Edgar\Desktop\TweetDeck.lnk
[2011/04/04 11:19:58 | 000,001,570 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\BookSmart.lnk
[2011/04/04 11:19:58 | 000,001,570 | —- | C] () – C:\Documents and Settings\All Users\Desktop\BookSmart.lnk
[2011/02/28 18:45:32 | 000,057,845 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\Lee Edgar3SQLite3.dll
[2011/02/25 14:24:42 | 000,000,000 | —- | C] () – C:\WINDOWS\Protector Eclipse.ini
[2011/02/20 08:19:06 | 001,970,176 | —- | C] () – C:\WINDOWS\System32\d3dx9.dll
[2011/01/01 14:36:58 | 000,004,096 | —- | C] () – C:\WINDOWS\d3dx.dat
[2010/12/06 14:58:56 | 002,496,715 | —- | C] () – C:\WINDOWS\System32\abgx360.exe
[2010/09/08 15:57:47 | 000,000,053 | —- | C] () – C:\WINDOWS\webica.ini
[2010/06/13 17:39:17 | 000,000,125 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\.zreglib
[2010/03/19 09:02:26 | 000,000,164 | —- | C] () – C:\WINDOWS\System32\FppLicense3.ini
[2010/03/19 09:01:51 | 000,086,016 | —- | C] () – C:\WINDOWS\System32\fppent3a.dll
[2009/12/28 21:18:54 | 000,110,120 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2009/11/21 00:51:22 | 000,001,353 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2009/11/19 20:57:14 | 000,000,000 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\dm.ini
[2009/09/10 20:16:37 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2009/09/04 17:35:54 | 000,004,594 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2009/09/04 17:35:51 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2009/05/29 20:40:06 | 000,000,029 | —- | C] () – C:\WINDOWS\DEBUGSM.INI
[2009/05/29 19:50:27 | 000,111,932 | —- | C] () – C:\WINDOWS\System32\EPPICPrinterDB.dat
[2009/05/29 19:50:27 | 000,001,146 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2009/05/29 19:50:27 | 000,001,136 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2009/05/29 19:50:27 | 000,001,120 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2009/05/29 19:50:27 | 000,001,107 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2009/05/29 19:50:27 | 000,001,104 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2009/05/29 19:50:27 | 000,000,097 | —- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2009/05/29 19:50:26 | 000,031,053 | —- | C] () – C:\WINDOWS\System32\EPPICPattern131.dat
[2009/05/29 19:50:26 | 000,027,417 | —- | C] () – C:\WINDOWS\System32\EPPICPattern121.dat
[2009/05/29 19:50:26 | 000,026,154 | —- | C] () – C:\WINDOWS\System32\EPPICPattern1.dat
[2009/05/29 19:50:26 | 000,024,903 | —- | C] () – C:\WINDOWS\System32\EPPICPattern3.dat
[2009/05/29 19:50:26 | 000,021,390 | —- | C] () – C:\WINDOWS\System32\EPPICPattern5.dat
[2009/05/29 19:50:26 | 000,020,148 | —- | C] () – C:\WINDOWS\System32\EPPICPattern2.dat
[2009/05/29 19:50:26 | 000,011,811 | —- | C] () – C:\WINDOWS\System32\EPPICPattern4.dat
[2009/05/29 19:50:26 | 000,004,943 | —- | C] () – C:\WINDOWS\System32\EPPICPattern6.dat
[2009/05/29 19:50:26 | 000,001,139 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2009/05/29 19:50:26 | 000,001,139 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2009/05/29 19:50:26 | 000,001,129 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2009/05/29 19:50:26 | 000,001,129 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2009/05/29 19:45:51 | 000,000,025 | —- | C] () – C:\WINDOWS\CDE SX400DEFGIPS.ini
[2009/05/03 17:18:19 | 000,081,110 | —- | C] () – C:\WINDOWS\System32\lvcoinst.ini
[2008/12/17 21:51:13 | 000,000,056 | -H– | C] () – C:\WINDOWS\System32\ezsidmv.dat
[2008/12/16 21:58:54 | 000,025,624 | —- | C] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2008/12/16 21:50:56 | 000,013,584 | —- | C] () – C:\WINDOWS\System32\drivers\iKeyLgFT.dll
[2008/05/15 19:40:21 | 000,163,840 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\fontdb.mdb
[2008/05/15 19:40:21 | 000,000,130 | —- | C] () – C:\WINDOWS\ODBC.INI
[2008/03/12 20:28:43 | 000,000,032 | —- | C] () – C:\Documents and Settings\All Users\Application Data\ezsid.dat
[2008/03/02 14:54:08 | 000,001,057 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\vso_ts_preview.xml
[2007/12/07 22:19:24 | 000,001,298 | —- | C] () – C:\WINDOWS\ARCHPR.INI
[2007/11/12 17:12:54 | 000,000,000 | —- | C] () – C:\WINDOWS\MSDraw.ini
[2007/11/10 15:14:20 | 000,015,840 | —- | C] () – C:\WINDOWS\System32\Machnm1.exe
[2007/11/10 15:14:20 | 000,002,304 | —- | C] () – C:\WINDOWS\System32\Machnm32.sys
[2007/05/08 14:26:59 | 000,000,214 | —- | C] () – C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2007/02/25 13:48:02 | 000,000,754 | —- | C] () – C:\WINDOWS\WORDPAD.INI
[2006/12/03 12:04:03 | 000,262,144 | —- | C] () – C:\WINDOWS\System32\default_user_class.dat_BAK_13980
[2006/12/03 12:04:03 | 000,008,192 | —- | C] () – C:\WINDOWS\System32\default_user_class.dat
[2006/10/28 16:10:13 | 000,087,608 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\ezpinst.exe
[2006/10/28 16:10:13 | 000,007,824 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\pcouffin.cat
[2006/10/28 16:10:12 | 000,001,144 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\pcouffin.inf
[2006/09/26 20:37:54 | 000,000,000 | —- | C] () – C:\WINDOWS\mngui.INI
[2006/09/07 21:58:16 | 000,696,320 | —- | C] () – C:\Program Files\Common Files\XCMHook.dll
[2006/09/07 21:58:16 | 000,024,576 | —- | C] () – C:\Program Files\Common Files\XCPCMenu.exe
[2006/08/19 12:21:38 | 000,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2006/08/19 11:56:35 | 000,000,059 | —- | C] () – C:\WINDOWS\WININIT.INI
[2006/07/29 22:23:21 | 000,737,280 | —- | C] () – C:\WINDOWS\dbplugin.exe
[2006/07/29 22:23:20 | 000,933,888 | —- | C] () – C:\WINDOWS\npdbplug.dll
[2006/07/29 22:23:20 | 000,346,624 | —- | C] () – C:\WINDOWS\dwbreader.exe
[2006/07/25 22:57:50 | 000,000,002 | —- | C] () – C:\WINDOWS\msoffice.ini
[2006/07/11 21:05:58 | 000,278,528 | —- | C] () – C:\Program Files\Common Files\FDEUnInstaller.exe
[2006/06/11 14:52:50 | 000,118,784 | R— | C] () – C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
[2006/05/09 19:46:51 | 000,118,784 | —- | C] () – C:\WINDOWS\ShowBmp.exe
[2006/05/09 19:46:51 | 000,001,325 | —- | C] () – C:\WINDOWS\Remove.ini
[2006/04/20 20:13:52 | 000,000,959 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2006/04/20 19:34:17 | 000,002,215 | —- | C] () – C:\WINDOWS\CDPR.INI
[2006/03/05 14:51:06 | 000,000,116 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2005/10/03 19:14:38 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2005/10/03 09:16:04 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2005/09/23 23:43:24 | 003,596,288 | R— | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2005/09/23 23:43:24 | 000,159,744 | R— | C] () – C:\WINDOWS\System32\ssleay32.dll
[2005/09/23 23:43:22 | 000,831,488 | R— | C] () – C:\WINDOWS\System32\libeay32.dll
[2005/09/23 23:43:22 | 000,524,288 | R— | C] () – C:\WINDOWS\System32\divxsm.exe
[2005/09/23 23:43:22 | 000,110,592 | R— | C] () – C:\WINDOWS\System32\dtu100.dll
[2005/05/11 21:46:12 | 000,001,001 | —- | C] () – C:\WINDOWS\psmplay.ini
[2005/05/10 19:57:48 | 000,000,559 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2005/05/10 18:31:07 | 000,090,112 | —- | C] () – C:\WINDOWS\System32\ESICOMMN.DLL
[2005/04/08 03:16:43 | 000,092,349 | -H– | C] () – C:\Documents and Settings\Lee Edgar\Application Data\Lee Edgarlog.dat
[2005/02/23 18:37:09 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlsz.INI
[2005/01/07 23:06:34 | 000,077,824 | —- | C] () – C:\WINDOWS\pysoft_uninstaller.exe
[2004/10/30 10:52:37 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/10/06 17:40:55 | 000,005,606 | —- | C] () – C:\WINDOWS\System32\stci.dll
[2004/09/16 14:26:40 | 000,012,634 | —- | C] () – C:\WINDOWS\System32\drivers\ADFUUD.SYS
[2004/09/16 14:26:40 | 000,012,634 | —- | C] () – C:\WINDOWS\ADFUUD.SYS
[2004/09/09 17:43:14 | 000,000,000 | —- | C] () – C:\WINDOWS\OpPrintServer.INI
[2004/03/10 22:44:19 | 000,179,200 | —- | C] () – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004/03/02 23:17:34 | 000,445,604 | —- | C] () – C:\WINDOWS\System32\PERFH009.DAT
[2004/03/02 23:17:34 | 000,072,810 | —- | C] () – C:\WINDOWS\System32\PERFC009.DAT
[2004/03/02 23:17:20 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2004/03/02 23:17:05 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/03/02 23:06:12 | 000,000,550 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2003/03/09 21:31:04 | 000,561,152 | —- | C] () – C:\WINDOWS\System32\hpotscl.dll
[2002/09/03 10:05:08 | 000,446,904 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2002/09/03 09:56:30 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2002/08/29 06:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\MLANG.DAT
[2002/08/29 06:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\PERFI009.DAT
[2002/08/29 06:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\DSSEC.DAT
[2002/08/29 06:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\MIB.BIN
[2002/08/29 06:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\PERFD009.DAT
[2002/08/29 06:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2002/08/29 06:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\NOISE.DAT
[2000/06/29 17:24:14 | 000,003,584 | —- | C] () – C:\WINDOWS\System32\drivers\DLPORTIO.SYS
[1996/04/03 20:33:26 | 000,005,248 | —- | C] () – C:\WINDOWS\System32\giveio.sys
[1980/01/01 01:00:00 | 000,155,648 | —- | C] () – C:\WINDOWS\System32\igfxtray.exe
[1980/01/01 01:00:00 | 000,126,976 | —- | C] () – C:\WINDOWS\System32\hkcmd.exe
========== LOP Check ==========
[2010/08/28 17:20:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alwil Software
[2009/09/10 17:31:32 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2006/09/08 22:27:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Bluetooth
[2009/05/29 19:49:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EPSON
[2010/04/15 23:13:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\OviInstallerCache
[2010/04/15 23:33:04 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Suite
[2011/03/08 22:53:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PrinterShare
[2010/12/26 17:58:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ResultBar
[2010/06/13 17:39:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SlySoft
[2008/08/14 20:07:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sony
[2007/07/23 21:08:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SPAMfighter
[2006/09/09 20:15:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Teleca
[2010/08/16 21:23:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2006/09/11 19:31:23 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2009/05/29 19:57:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\UDL
[2004/08/19 19:09:53 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2010/03/13 16:06:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\vsosdk
[2011/04/24 14:09:51 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{6A6F35C2-F1BB-455A-85C0-F522DF746DDA}
[2009/12/25 08:27:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010/11/07 20:41:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\.minecraft
[2011/01/20 20:08:51 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\abgx360
[2008/03/28 21:18:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\AutoTransfer
[2009/09/10 17:40:38 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\AVGTOOLBAR
[2008/06/01 09:57:31 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Azureus
[2011/04/12 12:23:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\BabylonToolbar
[2008/05/15 19:48:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\BorWare
[2010/03/02 08:36:38 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/05/16 13:49:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\com.imoneymanager.imm.2184A5AABEFD9A95272C652C16767C2B5E7A1512.1
[2010/12/12 13:14:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Electronic Arts
[2009/05/29 20:40:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\EPSON
[2011/01/16 09:58:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\facemoods.com
[2010/08/01 14:47:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\FixIt
[2010/08/04 17:49:29 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\FUJIFILM
[2011/01/01 14:37:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\GamesCafe
[2010/07/04 19:53:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\GameTuts
[2010/09/02 21:05:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\GARMIN
[2010/11/21 20:00:02 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\ICAClient
[2009/05/24 20:58:23 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Image Zone Express
[2011/01/20 22:37:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\ImgBurn
[2004/03/06 22:39:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Leadertech
[2008/06/01 09:57:32 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\MailWasherPro
[2011/01/20 00:13:17 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Megaupload
[2010/12/14 13:33:45 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Mp3Tube Toolbar
[2010/04/15 23:35:25 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Nokia
[2010/04/15 23:33:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\PC Suite
[2011/04/12 12:50:10 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\PriceGong
[2011/04/24 14:09:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\searchqutoolbar
[2010/06/25 14:49:43 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\SmartDraw
[2011/03/30 17:43:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Sony
[2010/06/05 17:38:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Sony Online Entertainment
[2007/07/23 21:09:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\SPAMfighter
[2009/02/17 22:06:02 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Spectaculator
[2008/09/30 21:14:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\SpinTop
[2008/10/19 18:40:18 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Sports Interactive
[2009/09/23 22:30:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\TeamViewer
[2006/09/09 20:18:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Teleca
[2004/03/10 18:33:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Template
[2006/09/25 22:44:29 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\TuneUp Software
[2008/10/23 18:06:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\TuxPaint
[2010/10/25 17:21:35 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1
[2004/08/19 19:09:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Ulead Systems
[2011/04/12 12:33:54 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Uniblue
[2011/04/24 20:54:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\uTorrent
[2010/09/25 16:02:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\vShare
[2011/03/31 19:58:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Vso
[2011/04/22 17:50:24 | 000,000,398 | —- | M] () – C:\WINDOWS\Tasks\1-Click Maintenance.job
[2011/04/29 09:15:57 | 000,000,430 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{497F6515-09E8-4C56-A584-629BB37D8D0F}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/03/09 20:11:55 | 000,504,058 | —- | M] () – C:\4D53082D.gpd
[2004/11/01 18:48:40 | 000,000,211 | —- | M] () – C:\Boot.bak
[2009/12/01 21:45:34 | 000,000,281 | -HS- | M] () – C:\BOOT.INI
[2002/09/03 09:38:46 | 000,000,512 | -HS- | M] () – C:\BOOTSECT.DOS
[2004/08/03 23:00:00 | 000,260,272 | —- | M] () – C:\cmldr
[2002/09/03 09:59:58 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2008/12/17 21:57:15 | 000,000,133 | —- | M] () – C:\DeletePrintJobs.cmd
[2004/03/02 23:09:36 | 000,004,275 | RH– | M] () – C:\DELL.SDR
[2008/05/29 20:04:00 | 000,004,300 | —- | M] () – C:\hotfix.txt
[2009/05/25 09:53:48 | 000,000,488 | —- | M] () – C:\hpfr5550.xml
[2009/05/24 22:31:33 | 000,000,796 | -H– | M] () – C:\hpothb07.dat
[2009/05/24 22:31:33 | 000,001,495 | -H– | M] () – C:\hpothb07.tif
[2002/09/03 09:59:58 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2004/03/02 23:38:12 | 000,000,454 | -H– | M] () – C:\IPH.PH
[2002/09/03 09:59:58 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/11/01 18:39:33 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/06/01 16:26:41 | 000,250,048 | RHS- | M] () – C:\NTLDR
[2006/09/07 22:03:30 | 000,000,456 | -H– | M] () – C:\os100944.bin
[2011/04/24 13:41:13 | 805,306,368 | -HS- | M] () – C:\pagefile.sys
[2008/05/29 20:04:00 | 000,624,768 | —- | M] (Microsoft Corporation) – C:\q828133.exe
[2010/06/03 09:12:24 | 000,000,026 | —- | M] () – C:\register.js
[2009/04/30 10:19:06 | 000,345,448 | —- | M] (Adobe Systems Incorporated) – C:\Setup.exe
[2009/10/29 20:26:26 | 000,003,072 | -HS- | M] () – C:\Thumbs.db
[2004/05/04 22:39:47 | 000,000,016 | —- | M] () – C:\win2.log
< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2002/09/03 09:59:02 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\DESKTOP.INI
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 13:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\filterpipelineprintproc.dll
[2006/10/26 20:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\msonpppr.dll
[2008/07/06 11:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2011/02/23 16:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2008/02/20 17:50:28 | 000,903,680 | —- | M] (Jan Kolarik & Ondrej Vaverka) – C:\WINDOWS\Protector Eclipse.scr
[2010/04/17 00:04:40 | 000,306,032 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
[2006/06/28 22:04:42 | 000,001,618 | -H– | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\LastFlashConfig.WFC
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2002/09/03 09:47:18 | 000,094,208 | —- | M] () – C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.SAV
[2002/09/03 09:47:18 | 000,602,112 | —- | M] () – C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.SAV
[2002/09/03 09:47:18 | 000,380,928 | —- | M] () – C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.SAV
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/06/01 16:34:37 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\DESKTOP.INI
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2004/11/01 18:55:39 | 000,000,177 | -HS- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\DESKTOP.INI
[2004/03/05 22:16:51 | 000,000,079 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2009/09/10 20:21:43 | 000,050,688 | —- | M] (Atribune.org) – C:\Documents and Settings\Lee Edgar\Desktop\ATF-Cleaner.exe
[2011/02/25 15:36:03 | 010,257,408 | —- | M] (HaxScene.com) – C:\Documents and Settings\Lee Edgar\Desktop\Eclipse.exe
[2009/09/09 23:12:35 | 000,085,504 | —- | M] () – C:\Documents and Settings\Lee Edgar\Desktop\Inherit.exe
[2011/04/29 12:19:16 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe
[2007/09/10 14:17:56 | 002,414,704 | —- | M] (Radica Games Limited) – C:\Documents and Settings\Lee Edgar\Desktop\Patch001.exe
< %PROGRAMFILES%\Common Files\*.* >
[2006/07/11 21:05:58 | 000,278,528 | —- | M] () – C:\Program Files\Common Files\FDEUnInstaller.exe
[2000/01/14 15:46:26 | 000,696,320 | —- | M] () – C:\Program Files\Common Files\XCMHook.dll
[2000/01/14 15:46:28 | 000,024,576 | —- | M] () – C:\Program Files\Common Files\XCPCMenu.exe
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-04-28 16:44:41
< >
========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\WINDOWS\$hf_mig$\KB932168\KB932168] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\$hf_mig$\KB933729\KB933729] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\$hf_mig$\KB943460\KB943460] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\System.EnterpriseServices] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\IEExecRemote] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP283.tmp\ZAP283.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA0.tmp\ZAPA0.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\tmp\tmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Cache\Adobe Reader 6.0.1\Adobe Reader 6.0.1] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Config\Config] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Connection Wizard\Connection Wizard] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Debug\UserMode\UserMode] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Downloaded Program Files\CONFLICT.1\CONFLICT.1] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\ftpcache\ftpcache] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\IME\IMEJP\APPLETS\APPLETS] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\IME\IMEJP98\IMEJP98] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109411090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109440090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109511090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109711090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109910090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109B10090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100A0C00000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\LastGood(2)\INF\INF] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Minidump\Minidump] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\MSAPPS\MSINFO\MSINFO] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\msdownld.tmp\msdownld.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\MUI\MUI] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\ErrorRep\UserDumps\UserDumps] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\BATCH\BATCH] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\Config\CheckPoint\CheckPoint] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\HelpFiles\HelpFiles] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\InstalledSKUs\InstalledSKUs] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\System\DFS\DFS] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\Temp\Temp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PIF\PIF] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Registration\CRMLog\CRMLog] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\REPAIR\Backup\ServiceState\ServiceState] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\backup\backup] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Sun\Java\Deployment\Deployment] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SxsCaPendDel\SxsCaPendDel] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1025\1025] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1028\1028] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1031\1031] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1037\1037] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1041\1041] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1042\1042] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1054\1054] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\2052\2052] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\3076\3076] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\3COM_DMI\3COM_DMI] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\Adobe\update\update] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TempDir\TempDir] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Identities\{8D32DF8B-D3B8-4783-A0C5-FE37E2FC8659}\{8D32DF8B-D3B8-4783-A0C5-FE37E2FC8659}] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\Credentials\Credentials] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\MMC\MMC] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Sun\Java\Deployment\javaws\cache\cache] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Desktop\Desktop] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Local Settings\Application Data\Microsoft\CD Burning\CD Burning] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Local Settings\Application Data\Microsoft\Credentials\Credentials] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\My Documents\My Pictures\Dell Image Expert Images\Dell Image Expert Images] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\NetHood\NetHood] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\PrintHood\PrintHood] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\DHCP\DHCP] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\DRIVERS\DISDN\DISDN] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\EXPORT\EXPORT] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\FxsTmp\FxsTmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\INETSRV\INETSRV] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\Macromed\update\update] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\MUI\DISPSPEC\DISPSPEC] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\NtmsData\Export\Export] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\HTML\ISPSGNUP\ISPSGNUP] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\HTML\OEMCUST\OEMCUST] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\HTML\OEMHW\OEMHW] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\HTML\OEMREG\OEMREG] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\SAMPLE\SAMPLE] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\ShellExt\ShellExt] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\WBEM\MOF\BAD\BAD] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\WBEM\MOF\GOOD\GOOD] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\WBEM\SNMP\SNMP] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\WINS\WINS] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\XIRCOM\XIRCOM] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\WinSxS\InstallTemp\InstallTemp] -> \Device\__max++>\^ -> Mount Point
========== Alternate Data Streams ==========
@Alternate Data Stream - 96 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:52B72A7C
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AFFC859A
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:48A9EADC
< End of report >
OTL Extras logfile created on: 29/04/2011 12:20:57 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Lee Edgar\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
1,022.00 Mb Total Physical Memory | 192.00 Mb Available Physical Memory | 19.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 51.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.45 Gb Total Space | 26.47 Gb Free Space | 35.56% Space Free | Partition Type: NTFS
Drive G: | 149.05 Gb Total Space | 123.67 Gb Free Space | 82.98% Space Free | Partition Type: NTFS
Computer Name: MAINCOMPUTER | User Name: Lee Edgar | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.ini [@ = GetDiz.Document] – C:\Program Files\GetDiz\GetDiz.exe (Outer Technologies - http://outertech.com)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = htmlfile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [FinePix] – "C:\Program Files\FinePixViewer\FinePixViewer.exe" "%1" (FUJIFILM Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"16193:TCP" = 16193:TCP:*:Enabled:BitComet 16193 TCP
"16193:UDP" = 16193:UDP:*:Enabled:BitComet 16193 UDP
"55064:TCP" = 55064:TCP:*:Enabled:bitcomet 55064 tcp
"55064:UDP" = 55064:UDP:*:Enabled:bitcomet 55064 udp
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger – (Logitech)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger – (Logitech)
"C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast – (www.sopcast.com)
"C:\WINDOWS\SYSTEM32\fxsclnt.exe" = C:\WINDOWS\SYSTEM32\fxsclnt.exe:*:Disabled:Microsoft Fax Console – (Microsoft Corporation)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)
"C:\Program Files\Real\RealPlayer\realplay.exe" = C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer – (RealNetworks, Inc.)
"C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager 1.0\MediaManager.exe" = C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager 1.0\MediaManager.exe:*:Enabled:Sony Ericsson Media Manager 1.0 – (Sony Creative Software Inc.)
"C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:*:Enabled:Football Manager 2008 – (Sports Interactive)
"C:\Program Files\PFPortChecker\PFPortChecker.exe" = C:\Program Files\PFPortChecker\PFPortChecker.exe:*:Enabled:PFPortchecker by portforward.com helps check if your ports are properly forwarded.
"C:\Documents and Settings\Lee Edgar\Application Data\SopCast\adv\SopAdver.exe" = C:\Documents and Settings\Lee Edgar\Application Data\SopCast\adv\SopAdver.exe:*:Enabled:SopAdver
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox – (Mozilla Corporation)
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe" = C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application – (TeamViewer GmbH)
"C:\Program Files\Orange\Livebox\RGWREPAIR.EXE" = C:\Program Files\Orange\Livebox\RGWREPAIR.EXE:*:Enabled:RGWRepair – (Inventel)
"C:\Program Files\SopCast\adv\SopAdver.exe" = C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver – (www.sopcast.com)
"C:\Program Files\PrinterShare\paConsole.exe" = C:\Program Files\PrinterShare\paConsole.exe:*:Enabled:PrinterAnywhere Console – (PrinterAnywhere)
"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\Program Files\Windows iLivid Toolbar\ToolBar\dtUser.exe" = C:\Program Files\Windows iLivid Toolbar\ToolBar\dtUser.exe:*:Enabled:DTX broker – (Visicom Media Inc.)
"C:\DOCUME~1\LEEEDG~1\LOCALS~1\Temp\dll75.exe" = C:\DOCUME~1\LEEEDG~1\LOCALS~1\Temp\dll75.exe:*:Enabled:Windows Messanger
"C:\Documents and Settings\Lee Edgar\Application Data\winup.exe" = C:\Documents and Settings\Lee Edgar\Application Data\winup.exe:*:Enabled:Windows Messanger
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{015C5B35-B678-451C-9AEE-821E8D69621C}_is1" = PeerBlock 1.1 (r518)
"{06AC45D1-CB9B-48CC-B5C8-1A55DEE26AD0}" = Sony Ericsson Media Manager 1.0
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{11F1920A-56A2-4642-B6E0-3B31A12C9288}" = Dell Solution Center
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{151C555A-A9E7-4A2E-B6D7-165D04A3C956}" = Dell Picture Studio - Dell Image Expert
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{1BD07DF4-FB06-41BA-B896-B2DA59000C96}" = Windows Live Toolbar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{24ED4D80-8294-11D5-96CD-0040266301AD}" = FinePixViewer Ver.5.5
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Dell Media Experience
"{26792CA7-D87A-4DBE-896B-C2F66B344511}" =
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 24
"{26BDE7D8-93F0-4A07-AD47-1707DB417941}" = Camera Support Core Library
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{2F81FBFC-9A37-431F-9050-14B55485DF5A}" = Internet Library
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{32343DB6-9A52-40C9-87E4-5E7C79791C87}" = MSXML 4.0 SP2 and SOAP Toolkit 3.0
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}" = Mega Manager
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{41A80758-D20A-4935-B128-15010FFF0001}" = PokerSidekick
"{42EDF895-158C-484E-A7F2-42B90759F281}" = Camera RAW Plug-In for EPSON Creativity Suite
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{45EA11B5-874D-480E-89B9-2545505BBE3E}" = Microsoft OpenType Font File Properties Extension
"{46CBBDF8-55B5-40DB-B459-7B848394309C}" = EPSON File Manager
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E1CD3D5-D4EE-4246-AE24-F0FD5A60390D}" = OviMPlatform
"{4FFD1AB4-54F0-4069-88D9-3A55B38F874B}" = Nokia Ovi Suite Software Updater
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{607169F0-07F6-4797-99D2-D5E7C4715E20}" = Mega Manager
"{60DED9C2-22BF-47A3-B6C8-6B141BA31DFD}" = Ovi Desktop Sync Engine
"{64116298-93C5-401D-B06C-39D8E3338508}" = DAO
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7397EDED-F38A-4654-B669-BF61065803D0}" = PC Connectivity Solution
"{764D06D8-D8DE-411E-A1C8-D9E9380F8A84}" = Microsoft Works 7.0
"{7689CA7A-1270-425A-9959-EB4CB25EA29A}" = Sony Ericsson PC Suite 1.20.224
"{76BC2442-0002-47FA-9617-43BAD82BEF4C}" = Bonjour
"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.0.0.1
"{76EFFC7C-17A6-479D-9E47-8E658C1695AE}" = Windows Backup Utility
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7784A172-61F1-445E-8368-601607E0DD22}" = MP3 Player Utilities 3.68
"{7C5B4583-7CBF-4289-B195-03B553959DEA}" = VoiceOver Kit
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page
"{88D68A69-D247-466B-90DD-575F6BE16230}_is1" = CardRecovery 5.20
"{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Management Programs
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Extreme Graphics Driver
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8A8F8391-4C2C-4BE1-A984-CD4A5A546467}" = EPSON Easy Photo Print
"{8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}" = iLivid
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90840409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Excel Viewer 2003
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{90AF0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office PowerPoint Viewer 2003
"{90D55A3F-1D99-4C94-A77E-46DC14F0BF08}" = Help and Support Customization
"{937B232D-9776-471E-92BD-D424E514EF14}" = Logitech QuickCam
"{9455959E-D588-EFAE-329C-F66CC797F32A}" = Adobe Media Player
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0122-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{98DF85D9-96C0-4F57-A92E-C3539477EF5E}" = DVDSentry
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A4D10F4F-EF30-4498-8E18-CF2AB549DA97}" = PDF Download for Internet Explorer
"{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}" = Windows Defender Signatures
"{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}" = iTunes
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.4
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AD13BFB0-FDD2-4AFA-A8AF-9F4A950D56B7}" = ArcSoft Camera Suite 1.3
"{AEEB3643-71DE-414d-9E3F-1159177FE211}" = Office Animation Runtime
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AFE499B5-FCC4-45E6-A1A5-3C51AE0E539B}" = Mobipocket Creator 4.2
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B2AE44CB-2AAB-4C08-A54B-D264BD604DA8}" = Citrix Presentation Server Client
"{B44529FF-501E-47CD-A06D-223C161BE058}" = FinePixViewer Resource
"{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
"{B9C9DB4C-6D77-4AE9-AD1C-C708C23239A0}" = Nokia Connectivity Cable Driver
"{BB406CEB-6207-4512-9BB2-89950DC9D6B6}_is1" = ConvertXtoDVD 2.2.3.258
"{BBC0D330-C37B-4472-BFB9-AA217CF0C95F}" = Ulead Photo Express 4.0 SE
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C1205500-2179-11D7-B0B9-0000E24D4B29}" = Digital Camera
"{C335649B-351B-4865-8136-F92D23340CF6}" = Spectaculator 6.25
"{C6E388F5-F0BE-A758-93BE-15758C09C0ED}" = TweetDeck
"{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}" = TuneUp Utilities 2007
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDD55C1D-FC16-41F7-9E8D-884466E622EC}" = Roxio Easy DVD Copy 2
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = SpeedTouch USB Software
"{D6DE02C7-1F47-11D4-9515-00105AE4B89A}" = Paint Shop Pro 7
"{D92FF8EB-BD77-40AE-B68B-A6BFC6F8661D}" = Windows Live Family Safety
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.10.324
"{DCCF734A-42DA-4951-8C8E-92CD33D2FA2E}" = PrinterShare 2.3.05
"{DEE1E2E5-B553-4F88-9DE7-23CBEA5D739C}" = Nokia Ovi Suite
"{E3B3AB03-8ABC-46CF-8CA9-DB5581E1F368}" = FinePix Studio
"{E53A095D-F5A9-4D06-BEC9-98805DEDBF2A}_is1" = AmortizeIT! v3.2
"{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
"{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
"{F01F78CF-A022-EA98-5E54-8F3D47DABDEE}" = iMoneyManager 1.1.1
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F19F7B24-AAD4-4236-8475-5335483DA676}" = Avery Wizard 3.1
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{FF77941A-2BFA-4A18-BE2E-69B9498E4D55}" = User Profile Hive Cleanup Service
"{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}" = Disc2Phone
"504244733D18C8F63FF584AEB290E3904E791693" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"A4Tech iKeyWorks" = A4Tech iKeyWorks 7.64
"abgx360" = abgx360 v1.0.5
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AdobeESD" = Adobe Download Manager 1.2 (Remove Only)
"Advanced Archive Password Recovery" = Advanced Archive Password Recovery (remove only)
"avast" = avast! Free Antivirus
"BookSmart® 3.0.2 3.0.2" = BookSmart® 3.0.2 3.0.2
"Branding" =
"Cheat Engine 5.5_is1" = Cheat Engine 5.5
"Cheat Engine 6.0_is1" = Cheat Engine 6.0
"CLUE Classic1.0" = CLUE Classic
"com.imoneymanager.imm.2184A5AABEFD9A95272C652C16767C2B5E7A1512.1" = iMoneyManager 1.1.1
"Connection Manager" =
"COVKITS Screensaver" = COVKITS Screensaver
"COVKITS[1] Screensaver" = COVKITS[1] Screensaver
"DECCHECK" = Microsoft Windows XP Video Decoder Checkup Utility
"DVD Decrypter" = DVD Decrypter (Remove Only)
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EPSON Scanner" = EPSON Scan
"EPSON Stylus SX200_SX400_TX200_TX400 User’s Guide" = EPSON Stylus SX200_SX400_TX200_TX400 Manual
"EPSON Stylus SX400 Series" = EPSON Stylus SX400 Series Printer Uninstall
"ERUNT_is1" = ERUNT 1.1j
"Eusing Free Registry Cleaner" = Eusing Free Registry Cleaner
"Football Manager 2008" = Football Manager 2008
"GetDiz 3.0" = GetDiz 3.0
"Halo Tool Box" = Halo Tool Box
"Highfieldroad Screensaver" = Highfieldroad Screensaver
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"iLivid" = iLivid
"ImgBurn" = ImgBurn
"InstallShield Uninstall Information" =
"InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"InstallShield_{26BDE7D8-93F0-4A07-AD47-1707DB417941}" = Canon Camera Support Core Library
"InstallShield_{2F81FBFC-9A37-431F-9050-14B55485DF5A}" = Canon Internet Library for ZoomBrowser EX
"InstallShield_{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Management Programs
"Intelore - RAR Password Recovery" = RAR Password Recovery v1.1 RC16 (remove only)
"IrfanView" = IrfanView (remove only)
"legacyqcam_11.10" = Logitech Legacy USB Camera Driver Package
"lvdrivers_11.90" = Logitech QuickCam Driver Package
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"modding programs" = modding programs
"Mozilla Firefox 4.0 (x86 en-GB)" = Mozilla Firefox 4.0 (x86 en-GB)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSI30a-KB884016" =
"MSI30-Beta1" =
"MSI30-Beta2" =
"MSI30-KB884016" =
"MSI30-RC1" =
"MSI30-RC2" =
"MSI31-Beta" =
"MSI31-RC1" =
"Nero - Burning Rom!UninstallKey" =
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia Ovi Suite" = Nokia Ovi Suite
"orange3" = Orange Search Toolbar
"PartyTool_is1" = PartyTool 1.24
"PCHealth" =
"pdfFactory Pro" = pdfFactory Pro
"PonyProg v1.17h_is1" = PonyProg v1.17h
"Protector Eclipse_is1" = Protector Eclipse
"QuickSFV" = QuickSFV (Remove only)
"RealPlayer 12.0" = RealPlayer
"ResultBar" = ResultBar 1.0 build 115
"Searchqu 406 MediaBar" = Windows iLivid Toolbar
"SkyBlue70s Screensaver" = SkyBlue70s Screensaver
"SontheVilla Screensaver" = SontheVilla Screensaver
"SopCast" = SopCast 3.2.9
"Space Invaders_is1" = Space Invaders 1.1.0
"SpywareGuard_is1" = SpywareGuard v2.2
"SSC Service Utility_is1" = SSC Service Utility v4.30
"Sunplus CA533A" = Icatch(IV) Camera Driver
"TeamViewer 4" = TeamViewer 4
"ToolBand.SkypeIEToolbarToolbar" = Skype add-on for IE
"TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1" = TweetDeck
"U.B. Funkeys" = U.B. Funkeys
"Unlocker" = Unlocker 1.8.5
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VideoLAN VLC media player 0.8.6a
"VoilaBar" =
"vShare" = vShare Plugin
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WheelMouse" = A4Tech iWheelWorks 7.64
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinISO_is1" = WinISO 5.3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"Wizard101(UK)_is1" = Wizard101(UK)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Software Update" = Yahoo! Software Update
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"EA SPORTS Gameface Browser Plugin" = EA SPORTS Gameface Browser Plugin 1.3.0.0
"UnityWebPlayer" = Unity Web Player
"uTorrent" = µTorrent
========== Last 10 Event Log Errors ==========
[ Antivirus Events ]
Error - 21/08/2010 23:54:16 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 22/08/2010 17:54:04 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 23/08/2010 12:41:23 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 24/08/2010 08:36:56 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 25/08/2010 05:47:04 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 26/08/2010 00:07:51 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 26/08/2010 18:22:37 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 27/08/2010 06:58:01 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 27/08/2010 13:53:37 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 28/08/2010 09:26:39 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
[ Application Events ]
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Our Record 3 lost: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Pkt Record: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Our Record 2 won: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 25654 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Pkt Record: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 25654 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Our Record 3 lost: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Pkt Record: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 25654 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Our Record 3 lost: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:34 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Ignoring response received before we even
began probing: 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:34 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 192.168.0.4:1025 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 25654 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:34 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: ProbeCount 2; will rename 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
[ System Events ]
Error - 29/04/2011 06:58:54 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:56 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:56 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:56 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
< End of report >
Many Thanks in advance
OTL logfile created on: 29/04/2011 12:20:57 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Lee Edgar\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
1,022.00 Mb Total Physical Memory | 192.00 Mb Available Physical Memory | 19.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 51.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.45 Gb Total Space | 26.47 Gb Free Space | 35.56% Space Free | Partition Type: NTFS
Drive G: | 149.05 Gb Total Space | 123.67 Gb Free Space | 82.98% Space Free | Partition Type: NTFS
Computer Name: MAINCOMPUTER | User Name: Lee Edgar | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - File not found
PRC - C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
PRC - C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\PrinterShare\paConsole.exe (PrinterAnywhere)
PRC - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
PRC - C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
PRC - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\Common Files\LogiShrd\KHAL2\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Program Files\Logitech\QuickCam\Quickcam.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\DAEMON Tools\daemon.exe (DT Soft Ltd.)
PRC - C:\Program Files\FinePixViewer\QuickDCF2.exe (FUJIFILM Corporation)
PRC - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\Unlocker\UnlockerAssistant.exe ()
PRC - C:\Program Files\UPHClean\uphclean.exe (Microsoft Corporation)
PRC - C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.)
PRC - C:\Program Files\A4Tech\Keyboard\Ikeymain.exe (A4Tech Co.,Ltd.)
PRC - C:\Program Files\SpywareGuard\sgmain.exe ()
PRC - C:\Program Files\SpywareGuard\sgbhp.exe ()
PRC - C:\WINDOWS\SYSTEM32\DSentry.exe (Dell - Advanced Desktop Engineering)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Alwil Software\Avast5\snxhk.dll (AVAST Software)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\Logitech\SetPoint\lgscroll.dll (Logitech, Inc.)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll (Microsoft Corporation)
MOD - C:\Program Files\Unlocker\UnlockerHook.dll ()
========== Win32 Services (SafeList) ==========
SRV - (SecureSrv) – File not found
SRV - (ResultBar Service) – File not found
SRV - (Pml Driver HPZ12) – File not found
SRV - (HidServ) – File not found
SRV - (AppMgmt) – File not found
SRV - (avast! Antivirus) – C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (pdfFactory Pro Dispatcher v3) – C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
SRV - (ServiceLayer) – C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (LBTServ) – C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (EPSON_EB_RPCV4_01) EPSON V5 Service4(01) – C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE (SEIKO EPSON CORPORATION)
SRV - (UxTuneUp) – C:\WINDOWS\SYSTEM32\uxtuneup.dll (TuneUp Software GmbH)
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) – C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE (SEIKO EPSON CORPORATION)
SRV - (UPHClean) – C:\Program Files\UPHClean\uphclean.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (aswSnx) – C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) – C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) – C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMon2) – C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswRdr) – C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (Aavmker4) – C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswFsBlk) – C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (BVRPMPR5) – C:\WINDOWS\SYSTEM32\DRIVERS\BVRPMPR5.SYS (Avanquest Software)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (fssfltr) – C:\WINDOWS\SYSTEM32\DRIVERS\fssfltr_tdi.sys (Microsoft Corporation)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (nmwcd) – C:\WINDOWS\SYSTEM32\DRIVERS\ccdcmb.sys (Nokia)
DRV - (WinDriver6) – C:\WINDOWS\SYSTEM32\DRIVERS\windrvr6.sys (Jungo)
DRV - (LUsbFilt) – C:\WINDOWS\SYSTEM32\DRIVERS\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouKE) – C:\WINDOWS\SYSTEM32\DRIVERS\LMouKE.Sys (Logitech, Inc.)
DRV - (LMouFilt) – C:\WINDOWS\SYSTEM32\DRIVERS\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\WINDOWS\SYSTEM32\DRIVERS\LHidFilt.Sys (Logitech, Inc.)
DRV - (L8042mou) – C:\WINDOWS\SYSTEM32\DRIVERS\L8042mou.Sys (Logitech, Inc.)
DRV - (L8042Kbd) – C:\WINDOWS\SYSTEM32\DRIVERS\L8042Kbd.sys (Logitech, Inc.)
DRV - (PCANDIS5) – C:\WINDOWS\SYSTEM32\PCANDIS5.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (FilterService) – C:\WINDOWS\SYSTEM32\DRIVERS\lvuvcflt.sys (Logitech Inc.)
DRV - (LVUVC) Logitech QuickCam E3500(UVC) – C:\WINDOWS\SYSTEM32\DRIVERS\lvuvc.sys (Logitech Inc.)
DRV - (LVUSBSta) – C:\WINDOWS\SYSTEM32\DRIVERS\LVUSBSta.sys (Logitech Inc.)
DRV - (LVRS) – C:\WINDOWS\SYSTEM32\DRIVERS\lvrs.sys (Logitech Inc.)
DRV - (LVPr2Mon) – C:\WINDOWS\SYSTEM32\DRIVERS\LVPr2Mon.sys ()
DRV - (pccsmcfd) – C:\WINDOWS\SYSTEM32\DRIVERS\pccsmcfd.sys (Nokia)
DRV - (s117obex) – C:\WINDOWS\SYSTEM32\DRIVERS\s117obex.sys (MCCI Corporation)
DRV - (s117mdm) – C:\WINDOWS\SYSTEM32\DRIVERS\s117mdm.sys (MCCI Corporation)
DRV - (s117mgmt) Sony Ericsson Device 117 USB WMC Device Management Drivers (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\s117mgmt.sys (MCCI Corporation)
DRV - (s117unic) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\s117unic.sys (MCCI Corporation)
DRV - (s117nd5) Sony Ericsson Device 117 USB Ethernet Emulation SEMC117 (NDIS) – C:\WINDOWS\SYSTEM32\DRIVERS\s117nd5.sys (MCCI Corporation)
DRV - (s117mdfl) – C:\WINDOWS\SYSTEM32\DRIVERS\s117mdfl.sys (MCCI Corporation)
DRV - (s117bus) Sony Ericsson Device 117 driver (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\s117bus.sys (MCCI Corporation)
DRV - (sptd) – C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (vaxscsi) – C:\WINDOWS\System32\Drivers\vaxscsi.sys (Alcohol Soft Co., Ltd.)
DRV - (SE27mdm) – C:\WINDOWS\SYSTEM32\DRIVERS\SE27mdm.sys (MCCI)
DRV - (SE27mdfl) – C:\WINDOWS\SYSTEM32\DRIVERS\SE27mdfl.sys (MCCI)
DRV - (SE27bus) Sony Ericsson Device 039 Driver driver (WDM) – C:\WINDOWS\SYSTEM32\DRIVERS\SE27bus.sys (MCCI)
DRV - (LHidKe) – C:\WINDOWS\SYSTEM32\DRIVERS\LHidKE.Sys (Logitech, Inc.)
DRV - (LHidUsbK) – C:\WINDOWS\SYSTEM32\DRIVERS\LHidUsbK.sys (Logitech, Inc.)
DRV - (pfc) – C:\WINDOWS\SYSTEM32\DRIVERS\pfc.sys (Padus, Inc.)
DRV - (Amps2prt) – C:\WINDOWS\SYSTEM32\DRIVERS\Amps2prt.sys (A4Tech Co.,Ltd.)
DRV - (iAimFP4) – C:\WINDOWS\SYSTEM32\DRIVERS\wvchntxx.sys (Intel® Corporation)
DRV - (iAimFP3) – C:\WINDOWS\SYSTEM32\DRIVERS\wsiintxx.sys (Intel® Corporation)
DRV - (iAimTV4) – C:\WINDOWS\SYSTEM32\DRIVERS\wch7xxnt.sys (Intel® Corporation)
DRV - (iAimTV3) – C:\WINDOWS\SYSTEM32\DRIVERS\watv04nt.sys (Intel® Corporation)
DRV - (iAimTV1) – C:\WINDOWS\SYSTEM32\DRIVERS\watv02nt.sys (Intel® Corporation)
DRV - (iAimTV0) – C:\WINDOWS\SYSTEM32\DRIVERS\watv01nt.sys (Intel® Corporation)
DRV - (iAimFP0) – C:\WINDOWS\SYSTEM32\DRIVERS\wadv01nt.sys (Intel® Corporation)
DRV - (iAimFP1) – C:\WINDOWS\SYSTEM32\DRIVERS\wadv02nt.sys (Intel® Corporation)
DRV - (iAimFP2) – C:\WINDOWS\SYSTEM32\DRIVERS\wadv05nt.sys (Intel® Corporation)
DRV - (i81x) – C:\WINDOWS\SYSTEM32\DRIVERS\i81xnt5.sys (Intel® Corporation)
DRV - (alcan5wn) SpeedTouch USB ADSL PPP Networking Driver (NDISWAN) – C:\WINDOWS\SYSTEM32\DRIVERS\alcan5wn.sys (THOMSON)
DRV - (alcaudsl) – C:\WINDOWS\SYSTEM32\DRIVERS\alcaudsl.sys (THOMSON)
DRV - (BCMModem) – C:\WINDOWS\SYSTEM32\DRIVERS\BCMSM.sys (Broadcom Corporation)
DRV - (Machnm32) – C:\WINDOWS\SYSTEM32\Machnm32.sys ()
DRV - (bcm4sbxp) – C:\WINDOWS\SYSTEM32\DRIVERS\bcm4sbxp.sys (Broadcom Corporation)
DRV - (DCamUSBSQTECH) Dual-Mode DSC(2770) – C:\WINDOWS\SYSTEM32\DRIVERS\SQCaptur.sys (Service & Quality Technology.)
DRV - (omci) – C:\WINDOWS\SYSTEM32\DRIVERS\omci.sys (Dell Computer Corporation)
DRV - (EL90XBC) – C:\WINDOWS\SYSTEM32\DRIVERS\EL90XBC5.SYS (3Com Corporation)
DRV - (DLPortIO) – C:\WINDOWS\SYSTEM32\DRIVERS\DLPORTIO.SYS ()
DRV - (Aspi32) – C:\WINDOWS\System32\drivers\aspi32.sys (Adaptec)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&am;…amp;affID=17978
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/iat/us_gb.aspx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\..\URLSearchHook: {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Yahoo-Mp3Tube"
FF - prefs.js..browser.search.defaultenginename: "Web Search"
FF - prefs.js..browser.search.defaulturl: "http://www.bing.com/search?FORM=IEFM1&q;="
FF - prefs.js..browser.search.order.1: "Web Search"
FF - prefs.js..browser.search.selectedEngine: "Web Search"
FF - prefs.js..browser.search.selectedEngineURL: "http://mp3tubetoolbarsearch.com/?tmp=toolbar_mp3tube_results&prt;=pinballtb01ff&clid;=591a699985204c28835e93a02489f74a&subid;=&Keywords;={searchTerms}"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.searchqu.com/406"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 44
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:[removed]
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.0
FF - prefs.js..extensions.enabledItems: [removed]:1.6.1
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:[removed]
FF - prefs.js..extensions.enabledItems: {e3f6c2cc-d8db-498c-af6c-499fb211db97}:1.10.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {34EFA911-B536-4C08-BECE-CD5E55C875B0}:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0
FF - prefs.js..extensions.enabledItems: {e968fc70-8f95-4ab9-9e79-304de2a71ee1}:0.7.3
FF - prefs.js..extensions.enabledItems: {40a1f5d7-afc2-498f-b264-02668d616ff6}:1.1
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: [removed]:1.1.3
FF - prefs.js..keyword.URL: "http://www.searchqu.com/web?src=ffb&systemid;=406&q;="
FF - user.js..keyword.URL: "http://mp3tubetoolbarsearch.com/?prt=pinballtb02ff&Keywords;="
FF - user.js..keyword.enabled: 1
FF - HKLM\software\mozilla\Firefox\extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010/04/15 23:15:53 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/04/18 15:33:53 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/24 13:33:53 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010/04/15 23:15:54 | 000,000,000 | —D | M]
[2011/04/24 14:09:21 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Extensions
[2011/04/24 14:09:00 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions
[2010/05/11 11:20:25 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/03/15 21:29:02 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/01/22 16:34:08 | 000,000,000 | —D | M] (Mega Manager Integration) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{40a1f5d7-afc2-498f-b264-02668d616ff6}
[2011/02/08 13:52:50 | 000,000,000 | —D | M] (NoScript) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011/04/24 14:09:00 | 000,000,000 | —D | M] (Searchqu Toolbar) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2011/01/16 20:18:29 | 000,000,000 | —D | M] (DownThemAll!) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2009/09/15 19:29:11 | 000,000,000 | —D | M] (Adobe DLM (powered by getPlus®)) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2011/02/08 13:53:02 | 000,000,000 | —D | M] (Page Speed) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}
[2011/01/18 20:28:06 | 000,000,000 | —D | M] (User Agent Switcher) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}
[2011/03/30 17:43:52 | 000,000,000 | —D | M] (Babylon) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\[removed]
[2010/12/31 15:35:08 | 000,000,000 | —D | M] (Personas) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\[removed]
[2011/04/18 15:39:29 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\staged
[2011/01/22 16:35:54 | 000,000,000 | —D | M] (vShare) – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\extensions\vshare@toolbar
[2010/05/14 15:53:24 | 000,001,819 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\searchplugins\bing.xml
[2010/12/14 13:27:53 | 000,001,215 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\searchplugins\Mp3Tube.xml
[2011/03/23 13:24:21 | 000,005,529 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\searchplugins\SearchquWebSearch.xml
[2011/01/22 16:36:49 | 000,001,583 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Mozilla\Firefox\Profiles\ndizvsja.default\searchplugins\web-search.xml
[2011/04/24 14:09:21 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/12/14 14:30:39 | 000,000,000 | —D | M] (ResultBar) – C:\Program Files\Mozilla Firefox\extensions\{34EFA911-B536-4C08-BECE-CD5E55C875B0}
[2010/05/15 08:58:00 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/05 17:44:12 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/10/26 10:19:50 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010/12/19 12:33:29 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/02/24 20:14:50 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) –
[2010/05/15 08:57:36 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/03/18 18:57:02 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/01/01 09:00:00 | 000,001,538 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\amazon-en-GB.xml
[2011/03/30 17:43:56 | 000,002,428 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
[2010/01/01 09:00:00 | 000,002,252 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\bing.xml
[2010/01/01 09:00:00 | 000,000,947 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\chambers-en-GB.xml
[2010/01/01 09:00:00 | 000,001,180 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\eBay-en-GB.xml
[2010/12/13 13:36:54 | 000,002,035 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\fcmdSrchddr.xml
[2010/12/14 13:27:53 | 000,001,215 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\Mp3Tube.xml
[2011/03/23 13:24:21 | 000,005,529 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\SearchquWebSearch.xml
[2010/01/01 09:00:00 | 000,001,135 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\yahoo-en-GB.xml
O1 HOSTS File: ([2010/04/14 18:49:40 | 000,000,734 | —- | M]) - C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Phone\IEPlugin\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (SpywareGuardDLBLOCK.CBrowserHelper) - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Discordia, LTD)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {4E7BD74F-2B8D-469E-A1FB-F862B587B57D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {8B68564D-53FD-4293-B80C-993A9F3988EE} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows iLivid Toolbar\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] File not found
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe (Discordia, LTD)
O4 - HKLM..\Run: [DVDSentry] C:\WINDOWS\System32\DSentry.exe (Dell - Advanced Desktop Engineering)
O4 - HKLM..\Run: [iKeyWorks] C:\Program Files\A4Tech\Keyboard\Ikeymain.exe (A4Tech Co.,Ltd.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\QuickCam\Quickcam.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\System32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)
O4 - HKLM..\Run: [pdfFactory Pro Dispatcher v3] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis3a.exe (FinePrint Software, LLC)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe ()
O4 - HKLM..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe (A4Tech Co.,Ltd.)
O4 - HKLM..\Run: [Windows Defender] File not found
O4 - HKCU..\Run: [DAEMON Tools] C:\Program Files\DAEMON Tools\daemon.exe (DT Soft Ltd.)
O4 - HKCU..\Run: [EPSON Stylus SX400 Series (Copy 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIEGE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [LDM] File not found
O4 - HKCU..\Run: [Mega Manager] C:\Program Files\Megaupload\Mega Manager\MegaManager.exe (Megaupload Limited)
O4 - HKCU..\Run: [NBJ] C:\Program Files\Ahead\Nero BackItUp\NBJ.exe (Ahead Software AG)
O4 - HKCU..\Run: [PrinterShare] C:\Program Files\PrinterShare\paConsole.exe (PrinterAnywhere)
O4 - HKCU..\Run: [runner32] File not found
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [Windows Defender] File not found
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\System32\Macromed\Flash\FlashUtil10o_ActiveX.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe (FUJIFILM Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe (Logitech)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O4 - Startup: C:\Documents and Settings\Lee Edgar\Start Menu\Programs\Startup\SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: Windows Defender = C:\Documents and Settings\Lee Edgar\Application Data\winup.exe
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 157
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: Policies = c:\directory\CyberGate\install\svchost.exe
O8 - Extra context menu item: Download Link Using Mega Manager… - C:\Program Files\Megaupload\Mega Manager\mm_file.htm ()
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Phone\IEPlugin\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - Reg Error: Key error. File not found
O9 - Extra Button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - Reg Error: Key error. File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\SYSTEM32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: ([]msn in My Computer)
O15 - HKCU\..Trusted Domains: securesuite.co.uk ([www] https in Trusted sites)
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} http://support.dell.com/systemprofiler/SysPro.CAB (SysProWmi Class)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/templates/ieawsdc.cab (Microsoft Office Template and Media Control)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Monopoly/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1842B0EE-B597-11D4-8997-00104BD12D94} http://pcpitstop.com/internet/pcpConnCheck.cab (iCC Class)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {32505657-9980-0010-8000-00AA00389B71} http://download.microsoft.com/download/0/A…01F/wmvadvd.cab (Reg Error: Key error.)
O16 - DPF: {38AB6A6C-CC4C-4F9E-A3DD-3C5681EF18A1} http://launcher.station.sony.com/weblaunch…ebInstaller.cab (SonyOnlineInstallerX)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGam…1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} http://cdn.scan.onecare.live.com/resource/…lscbase1140.cab (Windows Live Safety Center Base Module)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {75A6AEA3-F26E-4608-AE9B-8DA78C87576E} https://secure.footprint.net/kingsisle/stat…ameLauncher.CAB (Wizard101GameLauncher)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {8BC53B30-32E4-4ED3-BEF9-DB761DB77453} http://u3.sandisk.com/download/apps/LPInstaller.CAB (CInstallLPCtrl Object)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A4639D2F-774E-11D3-A490-00C04F6843FB} http://download.microsoft.com/download/Pow…N-US/msorun.cab (IEAnimBehaviorFactory Class)
O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} http://h20264.www2.hp.com/ediags/dd/instal…nosticsxp2k.cab (Reg Error: Key error.)
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} http://www.superadblocker.com/activex/sabspx.cab (SABScanProcesses Class)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Monopoly/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shock…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/2.9.2.0…inAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\bw+0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw+0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw-0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw00 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw00s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw-0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw10 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw10s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw20 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw20s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw30 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw30s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw40 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw40s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw50 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw50s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw60 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw60s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw70 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw70s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw80 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw80s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw90 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bw90s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwa0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwa0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwb0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwb0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwc0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwc0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwd0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwd0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwe0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwe0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwf0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwf0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwg0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwg0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwh0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwh0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwi0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwi0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwj0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwj0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwk0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwk0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwl0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwl0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwm0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwm0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwn0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwn0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwo0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwo0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwp0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwp0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwq0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwq0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwr0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwr0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bws0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bws0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwt0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwt0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwu0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwu0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwv0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwv0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bww0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bww0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwx0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwx0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwy0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwy0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwz0 {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\bwz0s {f1b5ba50-5002-468d-8565-1d301f6e6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\offline-8876480 {F1B5BA50-5002-468D-8565-1D301F6E6521} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. )
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll ()
O20 - AppInit_DLLs: (C:\PROGRA~1\WI371A~1\Datamngr\datamngr.dll) - C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngr.dll (Discordia, LTD)
O20 - AppInit_DLLs: (C:\PROGRA~1\WI371A~1\Datamngr\IEBHO.dll) - C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Discordia, LTD)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logitech\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logitech\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files\SpywareGuard\spywareguard.dll ()
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: UxTuneUp - C:\WINDOWS\SYSTEM32\uxtuneup.dll (TuneUp Software GmbH)
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\System32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\SYSTEM32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\TSSOFT32.ACM (DSP GROUP, INC.)
Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\IR32_32.DLL ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\IR32_32.DLL ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.SP54 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.SP55 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.SP56 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.SP57 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.SP58 - C:\WINDOWS\System32\SP5X_32.DLL (Sunplus)
Drivers32: VIDC.WMV3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (56027075282206720)
========== Files/Folders - Created Within 30 Days ==========
[2011/04/29 12:19:00 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe
[2011/04/24 14:11:09 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\Ilivid Player
[2011/04/24 14:09:50 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{6A6F35C2-F1BB-455A-85C0-F522DF746DDA}
[2011/04/24 14:09:34 | 000,000,000 | —D | C] – C:\Program Files\iLivid
[2011/04/24 14:08:51 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Application Data\searchqutoolbar
[2011/04/24 14:08:41 | 000,000,000 | —D | C] – C:\Program Files\Windows iLivid Toolbar
[2011/04/12 23:21:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\MetaGeek,_LLC
[2011/04/12 21:04:28 | 000,049,904 | R— | C] (Avanquest Software) – C:\WINDOWS\System32\drivers\BVRPMPR5.SYS
[2011/04/12 20:59:22 | 000,000,000 | —D | C] – C:\Netgear
[2011/04/12 12:50:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Application Data\PriceGong
[2011/04/12 12:23:50 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Application Data\BabylonToolbar
[2011/04/05 20:24:08 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\My Documents\EpicBot
[2011/04/05 20:23:43 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\Yahoo
[2011/04/05 20:22:04 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\PackageAware
[2011/04/05 20:22:03 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo!
[2011/04/05 20:21:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Yahoo! Companion
[2011/04/05 20:21:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\Application Data\Yahoo!
[2011/04/05 20:21:07 | 000,000,000 | —D | C] – C:\Program Files\Yahoo!
[2011/04/04 11:21:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\My Documents\BookSmartData
[2011/04/04 11:20:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Lee Edgar\.blurb
[2011/04/04 11:19:56 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\BookSmart
[2011/04/04 11:18:21 | 000,000,000 | —D | C] – C:\Program Files\BookSmart
[2011/04/02 12:33:03 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Wizard101(UK)
[2011/04/02 12:33:00 | 000,000,000 | —D | C] – C:\Program Files\Wizard101(UK)
[2006/10/28 16:10:12 | 000,047,360 | —- | C] (VSO Software) – C:\Documents and Settings\Lee Edgar\Application Data\pcouffin.sys
[7 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/04/29 12:57:36 | 000,004,204 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\data.dat
[2011/04/29 12:19:16 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe
[2011/04/29 11:58:37 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/04/29 09:15:57 | 000,000,430 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{497F6515-09E8-4C56-A584-629BB37D8D0F}.job
[2011/04/28 22:05:51 | 000,000,129 | —- | M] () – C:\Documents and Settings\Lee Edgar\jagex_runescape_preferences2.dat
[2011/04/28 22:05:51 | 000,000,046 | —- | M] () – C:\Documents and Settings\Lee Edgar\jagex_runescape_preferences.dat
[2011/04/24 20:58:43 | 000,000,116 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/04/24 20:58:37 | 000,179,200 | —- | M] () – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/04/24 13:46:23 | 000,445,604 | —- | M] () – C:\WINDOWS\System32\PERFH009.DAT
[2011/04/24 13:46:23 | 000,072,810 | —- | M] () – C:\WINDOWS\System32\PERFC009.DAT
[2011/04/24 13:44:21 | 000,001,170 | —- | M] () – C:\WINDOWS\System32\WPA.DBL
[2011/04/24 13:42:14 | 000,000,164 | —- | M] () – C:\WINDOWS\System32\FppLicense3.ini
[2011/04/24 13:41:05 | 000,000,000 | —- | M] () – C:\WINDOWS\System32\drivers\logiflt.iad
[2011/04/24 13:33:53 | 000,001,729 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/04/23 12:26:22 | 010,541,276 | —- | M] () – C:\Documents and Settings\Lee Edgar\My Documents\Lee.zip
[2011/04/22 21:57:18 | 000,002,137 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/04/22 17:50:24 | 000,000,398 | —- | M] () – C:\WINDOWS\tasks\1-Click Maintenance.job
[2011/04/20 21:36:09 | 000,110,120 | -H– | M] () – C:\WINDOWS\System32\mlfcache.dat
[2011/04/19 07:42:10 | 000,000,000 | —- | M] () – C:\WINDOWS\System32\drivers\lvuvc.hs
[2011/04/18 15:34:05 | 000,000,742 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/04/18 15:34:05 | 000,000,724 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/04/16 11:01:37 | 000,001,601 | —- | M] () – C:\Documents and Settings\Lee Edgar\My Documents\esemee prices.rtf
[2011/04/16 03:46:56 | 000,446,904 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/04/16 03:28:48 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/04/15 09:08:51 | 002,359,681 | —- | M] () – C:\Documents and Settings\Lee Edgar\Desktop\Router manual.pdf
[2011/04/12 22:29:12 | 000,006,203 | —- | M] () – C:\Documents and Settings\Lee Edgar\Desktop\Router_Setup.html
[2011/04/12 17:39:31 | 000,000,640 | —- | M] () – C:\Documents and Settings\Lee Edgar\Desktop\TweetDeck.lnk
[2011/04/04 11:19:58 | 000,001,570 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\BookSmart.lnk
[2011/04/04 11:19:58 | 000,001,570 | —- | M] () – C:\Documents and Settings\All Users\Desktop\BookSmart.lnk
[7 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/04/28 20:53:10 | 000,004,179 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\data.dat
[2011/04/18 15:34:05 | 000,000,730 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Mozilla Firefox.lnk
[2011/04/18 15:34:05 | 000,000,724 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/04/16 11:01:37 | 000,001,601 | —- | C] () – C:\Documents and Settings\Lee Edgar\My Documents\esemee prices.rtf
[2011/04/15 09:08:51 | 002,359,681 | —- | C] () – C:\Documents and Settings\Lee Edgar\Desktop\Router manual.pdf
[2011/04/12 22:29:14 | 000,000,172 | R— | C] () – C:\Documents and Settings\Lee Edgar\Desktop\Router Login.url
[2011/04/12 22:29:11 | 000,006,203 | —- | C] () – C:\Documents and Settings\Lee Edgar\Desktop\Router_Setup.html
[2011/04/12 17:39:31 | 000,000,640 | —- | C] () – C:\Documents and Settings\Lee Edgar\Desktop\TweetDeck.lnk
[2011/04/04 11:19:58 | 000,001,570 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\BookSmart.lnk
[2011/04/04 11:19:58 | 000,001,570 | —- | C] () – C:\Documents and Settings\All Users\Desktop\BookSmart.lnk
[2011/02/28 18:45:32 | 000,057,845 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\Lee Edgar3SQLite3.dll
[2011/02/25 14:24:42 | 000,000,000 | —- | C] () – C:\WINDOWS\Protector Eclipse.ini
[2011/02/20 08:19:06 | 001,970,176 | —- | C] () – C:\WINDOWS\System32\d3dx9.dll
[2011/01/01 14:36:58 | 000,004,096 | —- | C] () – C:\WINDOWS\d3dx.dat
[2010/12/06 14:58:56 | 002,496,715 | —- | C] () – C:\WINDOWS\System32\abgx360.exe
[2010/09/08 15:57:47 | 000,000,053 | —- | C] () – C:\WINDOWS\webica.ini
[2010/06/13 17:39:17 | 000,000,125 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\.zreglib
[2010/03/19 09:02:26 | 000,000,164 | —- | C] () – C:\WINDOWS\System32\FppLicense3.ini
[2010/03/19 09:01:51 | 000,086,016 | —- | C] () – C:\WINDOWS\System32\fppent3a.dll
[2009/12/28 21:18:54 | 000,110,120 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2009/11/21 00:51:22 | 000,001,353 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2009/11/19 20:57:14 | 000,000,000 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\dm.ini
[2009/09/10 20:16:37 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2009/09/04 17:35:54 | 000,004,594 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2009/09/04 17:35:51 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2009/05/29 20:40:06 | 000,000,029 | —- | C] () – C:\WINDOWS\DEBUGSM.INI
[2009/05/29 19:50:27 | 000,111,932 | —- | C] () – C:\WINDOWS\System32\EPPICPrinterDB.dat
[2009/05/29 19:50:27 | 000,001,146 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2009/05/29 19:50:27 | 000,001,136 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2009/05/29 19:50:27 | 000,001,120 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2009/05/29 19:50:27 | 000,001,107 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2009/05/29 19:50:27 | 000,001,104 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2009/05/29 19:50:27 | 000,000,097 | —- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2009/05/29 19:50:26 | 000,031,053 | —- | C] () – C:\WINDOWS\System32\EPPICPattern131.dat
[2009/05/29 19:50:26 | 000,027,417 | —- | C] () – C:\WINDOWS\System32\EPPICPattern121.dat
[2009/05/29 19:50:26 | 000,026,154 | —- | C] () – C:\WINDOWS\System32\EPPICPattern1.dat
[2009/05/29 19:50:26 | 000,024,903 | —- | C] () – C:\WINDOWS\System32\EPPICPattern3.dat
[2009/05/29 19:50:26 | 000,021,390 | —- | C] () – C:\WINDOWS\System32\EPPICPattern5.dat
[2009/05/29 19:50:26 | 000,020,148 | —- | C] () – C:\WINDOWS\System32\EPPICPattern2.dat
[2009/05/29 19:50:26 | 000,011,811 | —- | C] () – C:\WINDOWS\System32\EPPICPattern4.dat
[2009/05/29 19:50:26 | 000,004,943 | —- | C] () – C:\WINDOWS\System32\EPPICPattern6.dat
[2009/05/29 19:50:26 | 000,001,139 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2009/05/29 19:50:26 | 000,001,139 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2009/05/29 19:50:26 | 000,001,129 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2009/05/29 19:50:26 | 000,001,129 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2009/05/29 19:45:51 | 000,000,025 | —- | C] () – C:\WINDOWS\CDE SX400DEFGIPS.ini
[2009/05/03 17:18:19 | 000,081,110 | —- | C] () – C:\WINDOWS\System32\lvcoinst.ini
[2008/12/17 21:51:13 | 000,000,056 | -H– | C] () – C:\WINDOWS\System32\ezsidmv.dat
[2008/12/16 21:58:54 | 000,025,624 | —- | C] () – C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2008/12/16 21:50:56 | 000,013,584 | —- | C] () – C:\WINDOWS\System32\drivers\iKeyLgFT.dll
[2008/05/15 19:40:21 | 000,163,840 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\fontdb.mdb
[2008/05/15 19:40:21 | 000,000,130 | —- | C] () – C:\WINDOWS\ODBC.INI
[2008/03/12 20:28:43 | 000,000,032 | —- | C] () – C:\Documents and Settings\All Users\Application Data\ezsid.dat
[2008/03/02 14:54:08 | 000,001,057 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\vso_ts_preview.xml
[2007/12/07 22:19:24 | 000,001,298 | —- | C] () – C:\WINDOWS\ARCHPR.INI
[2007/11/12 17:12:54 | 000,000,000 | —- | C] () – C:\WINDOWS\MSDraw.ini
[2007/11/10 15:14:20 | 000,015,840 | —- | C] () – C:\WINDOWS\System32\Machnm1.exe
[2007/11/10 15:14:20 | 000,002,304 | —- | C] () – C:\WINDOWS\System32\Machnm32.sys
[2007/05/08 14:26:59 | 000,000,214 | —- | C] () – C:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2007/02/25 13:48:02 | 000,000,754 | —- | C] () – C:\WINDOWS\WORDPAD.INI
[2006/12/03 12:04:03 | 000,262,144 | —- | C] () – C:\WINDOWS\System32\default_user_class.dat_BAK_13980
[2006/12/03 12:04:03 | 000,008,192 | —- | C] () – C:\WINDOWS\System32\default_user_class.dat
[2006/10/28 16:10:13 | 000,087,608 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\ezpinst.exe
[2006/10/28 16:10:13 | 000,007,824 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\pcouffin.cat
[2006/10/28 16:10:12 | 000,001,144 | —- | C] () – C:\Documents and Settings\Lee Edgar\Application Data\pcouffin.inf
[2006/09/26 20:37:54 | 000,000,000 | —- | C] () – C:\WINDOWS\mngui.INI
[2006/09/07 21:58:16 | 000,696,320 | —- | C] () – C:\Program Files\Common Files\XCMHook.dll
[2006/09/07 21:58:16 | 000,024,576 | —- | C] () – C:\Program Files\Common Files\XCPCMenu.exe
[2006/08/19 12:21:38 | 000,000,206 | —- | C] () – C:\WINDOWS\HPGdiPlus.ini
[2006/08/19 11:56:35 | 000,000,059 | —- | C] () – C:\WINDOWS\WININIT.INI
[2006/07/29 22:23:21 | 000,737,280 | —- | C] () – C:\WINDOWS\dbplugin.exe
[2006/07/29 22:23:20 | 000,933,888 | —- | C] () – C:\WINDOWS\npdbplug.dll
[2006/07/29 22:23:20 | 000,346,624 | —- | C] () – C:\WINDOWS\dwbreader.exe
[2006/07/25 22:57:50 | 000,000,002 | —- | C] () – C:\WINDOWS\msoffice.ini
[2006/07/11 21:05:58 | 000,278,528 | —- | C] () – C:\Program Files\Common Files\FDEUnInstaller.exe
[2006/06/11 14:52:50 | 000,118,784 | R— | C] () – C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe
[2006/05/09 19:46:51 | 000,118,784 | —- | C] () – C:\WINDOWS\ShowBmp.exe
[2006/05/09 19:46:51 | 000,001,325 | —- | C] () – C:\WINDOWS\Remove.ini
[2006/04/20 20:13:52 | 000,000,959 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2006/04/20 19:34:17 | 000,002,215 | —- | C] () – C:\WINDOWS\CDPR.INI
[2006/03/05 14:51:06 | 000,000,116 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2005/10/03 19:14:38 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2005/10/03 09:16:04 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\CddbFileTaggerRoxio.dll
[2005/09/23 23:43:24 | 003,596,288 | R— | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2005/09/23 23:43:24 | 000,159,744 | R— | C] () – C:\WINDOWS\System32\ssleay32.dll
[2005/09/23 23:43:22 | 000,831,488 | R— | C] () – C:\WINDOWS\System32\libeay32.dll
[2005/09/23 23:43:22 | 000,524,288 | R— | C] () – C:\WINDOWS\System32\divxsm.exe
[2005/09/23 23:43:22 | 000,110,592 | R— | C] () – C:\WINDOWS\System32\dtu100.dll
[2005/05/11 21:46:12 | 000,001,001 | —- | C] () – C:\WINDOWS\psmplay.ini
[2005/05/10 19:57:48 | 000,000,559 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2005/05/10 18:31:07 | 000,090,112 | —- | C] () – C:\WINDOWS\System32\ESICOMMN.DLL
[2005/04/08 03:16:43 | 000,092,349 | -H– | C] () – C:\Documents and Settings\Lee Edgar\Application Data\Lee Edgarlog.dat
[2005/02/23 18:37:09 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlsz.INI
[2005/01/07 23:06:34 | 000,077,824 | —- | C] () – C:\WINDOWS\pysoft_uninstaller.exe
[2004/10/30 10:52:37 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/10/06 17:40:55 | 000,005,606 | —- | C] () – C:\WINDOWS\System32\stci.dll
[2004/09/16 14:26:40 | 000,012,634 | —- | C] () – C:\WINDOWS\System32\drivers\ADFUUD.SYS
[2004/09/16 14:26:40 | 000,012,634 | —- | C] () – C:\WINDOWS\ADFUUD.SYS
[2004/09/09 17:43:14 | 000,000,000 | —- | C] () – C:\WINDOWS\OpPrintServer.INI
[2004/03/10 22:44:19 | 000,179,200 | —- | C] () – C:\Documents and Settings\Lee Edgar\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2004/03/02 23:17:34 | 000,445,604 | —- | C] () – C:\WINDOWS\System32\PERFH009.DAT
[2004/03/02 23:17:34 | 000,072,810 | —- | C] () – C:\WINDOWS\System32\PERFC009.DAT
[2004/03/02 23:17:20 | 000,363,520 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2004/03/02 23:17:05 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/03/02 23:06:12 | 000,000,550 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2003/03/09 21:31:04 | 000,561,152 | —- | C] () – C:\WINDOWS\System32\hpotscl.dll
[2002/09/03 10:05:08 | 000,446,904 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2002/09/03 09:56:30 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2002/08/29 06:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\MLANG.DAT
[2002/08/29 06:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\PERFI009.DAT
[2002/08/29 06:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\DSSEC.DAT
[2002/08/29 06:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\MIB.BIN
[2002/08/29 06:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\PERFD009.DAT
[2002/08/29 06:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2002/08/29 06:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\NOISE.DAT
[2000/06/29 17:24:14 | 000,003,584 | —- | C] () – C:\WINDOWS\System32\drivers\DLPORTIO.SYS
[1996/04/03 20:33:26 | 000,005,248 | —- | C] () – C:\WINDOWS\System32\giveio.sys
[1980/01/01 01:00:00 | 000,155,648 | —- | C] () – C:\WINDOWS\System32\igfxtray.exe
[1980/01/01 01:00:00 | 000,126,976 | —- | C] () – C:\WINDOWS\System32\hkcmd.exe
========== LOP Check ==========
[2010/08/28 17:20:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alwil Software
[2009/09/10 17:31:32 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
[2006/09/08 22:27:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Bluetooth
[2009/05/29 19:49:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EPSON
[2010/04/15 23:13:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\OviInstallerCache
[2010/04/15 23:33:04 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Suite
[2011/03/08 22:53:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PrinterShare
[2010/12/26 17:58:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ResultBar
[2010/06/13 17:39:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SlySoft
[2008/08/14 20:07:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sony
[2007/07/23 21:08:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SPAMfighter
[2006/09/09 20:15:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Teleca
[2010/08/16 21:23:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2006/09/11 19:31:23 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2009/05/29 19:57:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\UDL
[2004/08/19 19:09:53 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ulead Systems
[2010/03/13 16:06:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\vsosdk
[2011/04/24 14:09:51 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{6A6F35C2-F1BB-455A-85C0-F522DF746DDA}
[2009/12/25 08:27:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010/11/07 20:41:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\.minecraft
[2011/01/20 20:08:51 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\abgx360
[2008/03/28 21:18:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\AutoTransfer
[2009/09/10 17:40:38 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\AVGTOOLBAR
[2008/06/01 09:57:31 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Azureus
[2011/04/12 12:23:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\BabylonToolbar
[2008/05/15 19:48:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\BorWare
[2010/03/02 08:36:38 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/05/16 13:49:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\com.imoneymanager.imm.2184A5AABEFD9A95272C652C16767C2B5E7A1512.1
[2010/12/12 13:14:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Electronic Arts
[2009/05/29 20:40:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\EPSON
[2011/01/16 09:58:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\facemoods.com
[2010/08/01 14:47:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\FixIt
[2010/08/04 17:49:29 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\FUJIFILM
[2011/01/01 14:37:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\GamesCafe
[2010/07/04 19:53:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\GameTuts
[2010/09/02 21:05:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\GARMIN
[2010/11/21 20:00:02 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\ICAClient
[2009/05/24 20:58:23 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Image Zone Express
[2011/01/20 22:37:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\ImgBurn
[2004/03/06 22:39:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Leadertech
[2008/06/01 09:57:32 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\MailWasherPro
[2011/01/20 00:13:17 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Megaupload
[2010/12/14 13:33:45 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Mp3Tube Toolbar
[2010/04/15 23:35:25 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Nokia
[2010/04/15 23:33:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\PC Suite
[2011/04/12 12:50:10 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\PriceGong
[2011/04/24 14:09:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\searchqutoolbar
[2010/06/25 14:49:43 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\SmartDraw
[2011/03/30 17:43:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Sony
[2010/06/05 17:38:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Sony Online Entertainment
[2007/07/23 21:09:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\SPAMfighter
[2009/02/17 22:06:02 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Spectaculator
[2008/09/30 21:14:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\SpinTop
[2008/10/19 18:40:18 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Sports Interactive
[2009/09/23 22:30:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\TeamViewer
[2006/09/09 20:18:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Teleca
[2004/03/10 18:33:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Template
[2006/09/25 22:44:29 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\TuneUp Software
[2008/10/23 18:06:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\TuxPaint
[2010/10/25 17:21:35 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1
[2004/08/19 19:09:57 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Ulead Systems
[2011/04/12 12:33:54 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Uniblue
[2011/04/24 20:54:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\uTorrent
[2010/09/25 16:02:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\vShare
[2011/03/31 19:58:21 | 000,000,000 | —D | M] – C:\Documents and Settings\Lee Edgar\Application Data\Vso
[2011/04/22 17:50:24 | 000,000,398 | —- | M] () – C:\WINDOWS\Tasks\1-Click Maintenance.job
[2011/04/29 09:15:57 | 000,000,430 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{497F6515-09E8-4C56-A584-629BB37D8D0F}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/03/09 20:11:55 | 000,504,058 | —- | M] () – C:\4D53082D.gpd
[2004/11/01 18:48:40 | 000,000,211 | —- | M] () – C:\Boot.bak
[2009/12/01 21:45:34 | 000,000,281 | -HS- | M] () – C:\BOOT.INI
[2002/09/03 09:38:46 | 000,000,512 | -HS- | M] () – C:\BOOTSECT.DOS
[2004/08/03 23:00:00 | 000,260,272 | —- | M] () – C:\cmldr
[2002/09/03 09:59:58 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2008/12/17 21:57:15 | 000,000,133 | —- | M] () – C:\DeletePrintJobs.cmd
[2004/03/02 23:09:36 | 000,004,275 | RH– | M] () – C:\DELL.SDR
[2008/05/29 20:04:00 | 000,004,300 | —- | M] () – C:\hotfix.txt
[2009/05/25 09:53:48 | 000,000,488 | —- | M] () – C:\hpfr5550.xml
[2009/05/24 22:31:33 | 000,000,796 | -H– | M] () – C:\hpothb07.dat
[2009/05/24 22:31:33 | 000,001,495 | -H– | M] () – C:\hpothb07.tif
[2002/09/03 09:59:58 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2004/03/02 23:38:12 | 000,000,454 | -H– | M] () – C:\IPH.PH
[2002/09/03 09:59:58 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/11/01 18:39:33 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/06/01 16:26:41 | 000,250,048 | RHS- | M] () – C:\NTLDR
[2006/09/07 22:03:30 | 000,000,456 | -H– | M] () – C:\os100944.bin
[2011/04/24 13:41:13 | 805,306,368 | -HS- | M] () – C:\pagefile.sys
[2008/05/29 20:04:00 | 000,624,768 | —- | M] (Microsoft Corporation) – C:\q828133.exe
[2010/06/03 09:12:24 | 000,000,026 | —- | M] () – C:\register.js
[2009/04/30 10:19:06 | 000,345,448 | —- | M] (Adobe Systems Incorporated) – C:\Setup.exe
[2009/10/29 20:26:26 | 000,003,072 | -HS- | M] () – C:\Thumbs.db
[2004/05/04 22:39:47 | 000,000,016 | —- | M] () – C:\win2.log
< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2002/09/03 09:59:02 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\DESKTOP.INI
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 13:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\filterpipelineprintproc.dll
[2006/10/26 20:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\msonpppr.dll
[2008/07/06 11:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\SYSTEM32\SPOOL\PRTPROCS\W32X86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2011/02/23 16:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2008/02/20 17:50:28 | 000,903,680 | —- | M] (Jan Kolarik & Ondrej Vaverka) – C:\WINDOWS\Protector Eclipse.scr
[2010/04/17 00:04:40 | 000,306,032 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
[2006/06/28 22:04:42 | 000,001,618 | -H– | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\LastFlashConfig.WFC
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2002/09/03 09:47:18 | 000,094,208 | —- | M] () – C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.SAV
[2002/09/03 09:47:18 | 000,602,112 | —- | M] () – C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.SAV
[2002/09/03 09:47:18 | 000,380,928 | —- | M] () – C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.SAV
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/06/01 16:34:37 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\DESKTOP.INI
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2004/11/01 18:55:39 | 000,000,177 | -HS- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\DESKTOP.INI
[2004/03/05 22:16:51 | 000,000,079 | —- | M] () – C:\Documents and Settings\Lee Edgar\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2009/09/10 20:21:43 | 000,050,688 | —- | M] (Atribune.org) – C:\Documents and Settings\Lee Edgar\Desktop\ATF-Cleaner.exe
[2011/02/25 15:36:03 | 010,257,408 | —- | M] (HaxScene.com) – C:\Documents and Settings\Lee Edgar\Desktop\Eclipse.exe
[2009/09/09 23:12:35 | 000,085,504 | —- | M] () – C:\Documents and Settings\Lee Edgar\Desktop\Inherit.exe
[2011/04/29 12:19:16 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Lee Edgar\Desktop\OTL.exe
[2007/09/10 14:17:56 | 002,414,704 | —- | M] (Radica Games Limited) – C:\Documents and Settings\Lee Edgar\Desktop\Patch001.exe
< %PROGRAMFILES%\Common Files\*.* >
[2006/07/11 21:05:58 | 000,278,528 | —- | M] () – C:\Program Files\Common Files\FDEUnInstaller.exe
[2000/01/14 15:46:26 | 000,696,320 | —- | M] () – C:\Program Files\Common Files\XCMHook.dll
[2000/01/14 15:46:28 | 000,024,576 | —- | M] () – C:\Program Files\Common Files\XCPCMenu.exe
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-04-28 16:44:41
< >
========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\WINDOWS\$hf_mig$\KB932168\KB932168] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\$hf_mig$\KB933729\KB933729] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\$hf_mig$\KB943460\KB943460] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\System.EnterpriseServices] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\IEExecRemote] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP283.tmp\ZAP283.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAPA0.tmp\ZAPA0.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\assembly\tmp\tmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Cache\Adobe Reader 6.0.1\Adobe Reader 6.0.1] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Config\Config] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Connection Wizard\Connection Wizard] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Debug\UserMode\UserMode] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Downloaded Program Files\CONFLICT.1\CONFLICT.1] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\ftpcache\ftpcache] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Help\SBSI\Training\WXPPer\Cbz\Cbz] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Help\SBSI\Training\WXPPer\Lib\Lib] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Help\SBSI\Training\WXPPer\Wave\Wave] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\IME\IMEJP\APPLETS\APPLETS] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\IME\IMEJP98\IMEJP98] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109411090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109440090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109511090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109711090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109910090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109B10090400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100A0C00000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\00002109F100C0400000000000F01FEC\12.0.4518\12.0.4518] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\0DC1503A46F231838AD88BCDDC8E8F7C\3.2.30729\3.2.30729] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\D7314F9862C648A4DB8BE2A5B47BE100\1.0.0\1.0.0] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Installer\$PatchCache$\Managed\DC3BF90CC0D3D2F398A9A6D1762F70F3\2.2.30729\2.2.30729] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\LastGood(2)\INF\INF] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Temporary ASP.NET Files\Bind Logs\Bind Logs] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\Temporary ASP.NET Files] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Minidump\Minidump] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\MSAPPS\MSINFO\MSINFO] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\msdownld.tmp\msdownld.tmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\MUI\MUI] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\ErrorRep\UserDumps\UserDumps] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\BATCH\BATCH] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\Config\CheckPoint\CheckPoint] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\HelpFiles\HelpFiles] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\InstalledSKUs\InstalledSKUs] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\System\DFS\DFS] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PCHealth\HelpCtr\Temp\Temp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\PIF\PIF] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Registration\CRMLog\CRMLog] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\REPAIR\Backup\ServiceState\ServiceState] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\Downloaded] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SoftwareDistribution\Download\355f788b6de8a3ec79e9aa172e6317f1\backup\backup] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\Sun\Java\Deployment\Deployment] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SxsCaPendDel\SxsCaPendDel] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1025\1025] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1028\1028] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1031\1031] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1037\1037] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1041\1041] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1042\1042] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\1054\1054] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\2052\2052] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\3076\3076] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\3COM_DMI\3COM_DMI] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\Adobe\update\update] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TempDir\TempDir] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Identities\{8D32DF8B-D3B8-4783-A0C5-FE37E2FC8659}\{8D32DF8B-D3B8-4783-A0C5-FE37E2FC8659}] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\Credentials\Credentials] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\MMC\MMC] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\SystemCertificates\My\Certificates\Certificates] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\SystemCertificates\My\CRLs\CRLs] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Microsoft\SystemCertificates\My\CTLs\CTLs] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Application Data\Sun\Java\Deployment\javaws\cache\cache] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Desktop\Desktop] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Local Settings\Application Data\Microsoft\CD Burning\CD Burning] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Local Settings\Application Data\Microsoft\Credentials\Credentials] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\My Documents\My Pictures\Dell Image Expert Images\Dell Image Expert Images] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\NetHood\NetHood] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\PrintHood\PrintHood] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\DHCP\DHCP] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\DRIVERS\DISDN\DISDN] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\EXPORT\EXPORT] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\FxsTmp\FxsTmp] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\INETSRV\INETSRV] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\Macromed\update\update] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\MUI\DISPSPEC\DISPSPEC] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\NtmsData\Export\Export] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\HTML\ISPSGNUP\ISPSGNUP] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\HTML\OEMCUST\OEMCUST] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\HTML\OEMHW\OEMHW] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\HTML\OEMREG\OEMREG] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\OOBE\SAMPLE\SAMPLE] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\ShellExt\ShellExt] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\WBEM\MOF\BAD\BAD] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\WBEM\MOF\GOOD\GOOD] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\WBEM\SNMP\SNMP] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\WINS\WINS] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\SYSTEM32\XIRCOM\XIRCOM] -> \Device\__max++>\^ -> Mount Point
[C:\WINDOWS\WinSxS\InstallTemp\InstallTemp] -> \Device\__max++>\^ -> Mount Point
========== Alternate Data Streams ==========
@Alternate Data Stream - 96 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:52B72A7C
@Alternate Data Stream - 113 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:AFFC859A
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:48A9EADC
< End of report >
OTL Extras logfile created on: 29/04/2011 12:20:57 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Lee Edgar\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy
1,022.00 Mb Total Physical Memory | 192.00 Mb Available Physical Memory | 19.00% Memory free
2.00 Gb Paging File | 1.00 Gb Available in Paging File | 51.00% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.45 Gb Total Space | 26.47 Gb Free Space | 35.56% Space Free | Partition Type: NTFS
Drive G: | 149.05 Gb Total Space | 123.67 Gb Free Space | 82.98% Space Free | Partition Type: NTFS
Computer Name: MAINCOMPUTER | User Name: Lee Edgar | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.ini [@ = GetDiz.Document] – C:\Program Files\GetDiz\GetDiz.exe (Outer Technologies - http://outertech.com)
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = htmlfile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [FinePix] – "C:\Program Files\FinePixViewer\FinePixViewer.exe" "%1" (FUJIFILM Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"16193:TCP" = 16193:TCP:*:Enabled:BitComet 16193 TCP
"16193:UDP" = 16193:UDP:*:Enabled:BitComet 16193 UDP
"55064:TCP" = 55064:TCP:*:Enabled:bitcomet 55064 tcp
"55064:UDP" = 55064:UDP:*:Enabled:bitcomet 55064 udp
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger – (Logitech)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger – (Logitech)
"C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast – (www.sopcast.com)
"C:\WINDOWS\SYSTEM32\fxsclnt.exe" = C:\WINDOWS\SYSTEM32\fxsclnt.exe:*:Disabled:Microsoft Fax Console – (Microsoft Corporation)
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)
"C:\Program Files\Real\RealPlayer\realplay.exe" = C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer – (RealNetworks, Inc.)
"C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager 1.0\MediaManager.exe" = C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager 1.0\MediaManager.exe:*:Enabled:Sony Ericsson Media Manager 1.0 – (Sony Creative Software Inc.)
"C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe" = C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:*:Enabled:Football Manager 2008 – (Sports Interactive)
"C:\Program Files\PFPortChecker\PFPortChecker.exe" = C:\Program Files\PFPortChecker\PFPortChecker.exe:*:Enabled:PFPortchecker by portforward.com helps check if your ports are properly forwarded.
"C:\Documents and Settings\Lee Edgar\Application Data\SopCast\adv\SopAdver.exe" = C:\Documents and Settings\Lee Edgar\Application Data\SopCast\adv\SopAdver.exe:*:Enabled:SopAdver
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox – (Mozilla Corporation)
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe" = C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application – (TeamViewer GmbH)
"C:\Program Files\Orange\Livebox\RGWREPAIR.EXE" = C:\Program Files\Orange\Livebox\RGWREPAIR.EXE:*:Enabled:RGWRepair – (Inventel)
"C:\Program Files\SopCast\adv\SopAdver.exe" = C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver – (www.sopcast.com)
"C:\Program Files\PrinterShare\paConsole.exe" = C:\Program Files\PrinterShare\paConsole.exe:*:Enabled:PrinterAnywhere Console – (PrinterAnywhere)
"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\Program Files\Windows iLivid Toolbar\ToolBar\dtUser.exe" = C:\Program Files\Windows iLivid Toolbar\ToolBar\dtUser.exe:*:Enabled:DTX broker – (Visicom Media Inc.)
"C:\DOCUME~1\LEEEDG~1\LOCALS~1\Temp\dll75.exe" = C:\DOCUME~1\LEEEDG~1\LOCALS~1\Temp\dll75.exe:*:Enabled:Windows Messanger
"C:\Documents and Settings\Lee Edgar\Application Data\winup.exe" = C:\Documents and Settings\Lee Edgar\Application Data\winup.exe:*:Enabled:Windows Messanger
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{015C5B35-B678-451C-9AEE-821E8D69621C}_is1" = PeerBlock 1.1 (r518)
"{06AC45D1-CB9B-48CC-B5C8-1A55DEE26AD0}" = Sony Ericsson Media Manager 1.0
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{11F1920A-56A2-4642-B6E0-3B31A12C9288}" = Dell Solution Center
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{151C555A-A9E7-4A2E-B6D7-165D04A3C956}" = Dell Picture Studio - Dell Image Expert
"{178832DE-9DE0-4C87-9F82-9315A9B03985}" = Windows Live Writer
"{1BD07DF4-FB06-41BA-B896-B2DA59000C96}" = Windows Live Toolbar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{24ED4D80-8294-11D5-96CD-0040266301AD}" = FinePixViewer Ver.5.5
"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = Dell Media Experience
"{26792CA7-D87A-4DBE-896B-C2F66B344511}" =
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 24
"{26BDE7D8-93F0-4A07-AD47-1707DB417941}" = Camera Support Core Library
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{2F81FBFC-9A37-431F-9050-14B55485DF5A}" = Internet Library
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{32343DB6-9A52-40C9-87E4-5E7C79791C87}" = MSXML 4.0 SP2 and SOAP Toolkit 3.0
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3B6E3FC6-274C-4B6C-BC85-5C3B15DE18E2}" = Mega Manager
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{41A80758-D20A-4935-B128-15010FFF0001}" = PokerSidekick
"{42EDF895-158C-484E-A7F2-42B90759F281}" = Camera RAW Plug-In for EPSON Creativity Suite
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{45EA11B5-874D-480E-89B9-2545505BBE3E}" = Microsoft OpenType Font File Properties Extension
"{46CBBDF8-55B5-40DB-B459-7B848394309C}" = EPSON File Manager
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E1CD3D5-D4EE-4246-AE24-F0FD5A60390D}" = OviMPlatform
"{4FFD1AB4-54F0-4069-88D9-3A55B38F874B}" = Nokia Ovi Suite Software Updater
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{607169F0-07F6-4797-99D2-D5E7C4715E20}" = Mega Manager
"{60DED9C2-22BF-47A3-B6C8-6B141BA31DFD}" = Ovi Desktop Sync Engine
"{64116298-93C5-401D-B06C-39D8E3338508}" = DAO
"{6412CECE-8172-4BE5-935B-6CECACD2CA87}" = Windows Live Mail
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7397EDED-F38A-4654-B669-BF61065803D0}" = PC Connectivity Solution
"{764D06D8-D8DE-411E-A1C8-D9E9380F8A84}" = Microsoft Works 7.0
"{7689CA7A-1270-425A-9959-EB4CB25EA29A}" = Sony Ericsson PC Suite 1.20.224
"{76BC2442-0002-47FA-9617-43BAD82BEF4C}" = Bonjour
"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.0.0.1
"{76EFFC7C-17A6-479D-9E47-8E658C1695AE}" = Windows Backup Utility
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7784A172-61F1-445E-8368-601607E0DD22}" = MP3 Player Utilities 3.68
"{7C5B4583-7CBF-4289-B195-03B553959DEA}" = VoiceOver Kit
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{7F14F68C-17FA-4F88-B3FD-7F449C1EBF32}" = EPSON Web-To-Page
"{88D68A69-D247-466B-90DD-575F6BE16230}_is1" = CardRecovery 5.20
"{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Management Programs
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Extreme Graphics Driver
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8A8F8391-4C2C-4BE1-A984-CD4A5A546467}" = EPSON Easy Photo Print
"{8D15E1B2-D2B7-4A17-B44B-D2DDE5981406}" = iLivid
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90840409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Excel Viewer 2003
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{90AF0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office PowerPoint Viewer 2003
"{90D55A3F-1D99-4C94-A77E-46DC14F0BF08}" = Help and Support Customization
"{937B232D-9776-471E-92BD-D424E514EF14}" = Logitech QuickCam
"{9455959E-D588-EFAE-329C-F66CC797F32A}" = Adobe Media Player
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0122-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{98DF85D9-96C0-4F57-A92E-C3539477EF5E}" = DVDSentry
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A4D10F4F-EF30-4498-8E18-CF2AB549DA97}" = PDF Download for Internet Explorer
"{A5CC2A09-E9D3-49EC-923D-03874BBD4C2C}" = Windows Defender Signatures
"{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}" = iTunes
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.4
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AD13BFB0-FDD2-4AFA-A8AF-9F4A950D56B7}" = ArcSoft Camera Suite 1.3
"{AEEB3643-71DE-414d-9E3F-1159177FE211}" = Office Animation Runtime
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AFE499B5-FCC4-45E6-A1A5-3C51AE0E539B}" = Mobipocket Creator 4.2
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B2AE44CB-2AAB-4C08-A54B-D264BD604DA8}" = Citrix Presentation Server Client
"{B44529FF-501E-47CD-A06D-223C161BE058}" = FinePixViewer Resource
"{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger
"{B9C9DB4C-6D77-4AE9-AD1C-C708C23239A0}" = Nokia Connectivity Cable Driver
"{BB406CEB-6207-4512-9BB2-89950DC9D6B6}_is1" = ConvertXtoDVD 2.2.3.258
"{BBC0D330-C37B-4472-BFB9-AA217CF0C95F}" = Ulead Photo Express 4.0 SE
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C1205500-2179-11D7-B0B9-0000E24D4B29}" = Digital Camera
"{C335649B-351B-4865-8136-F92D23340CF6}" = Spectaculator 6.25
"{C6E388F5-F0BE-A758-93BE-15758C09C0ED}" = TweetDeck
"{C8BB4912-12D9-42AE-B571-E580D8CD1B5B}" = TuneUp Utilities 2007
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDD55C1D-FC16-41F7-9E8D-884466E622EC}" = Roxio Easy DVD Copy 2
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = SpeedTouch USB Software
"{D6DE02C7-1F47-11D4-9515-00105AE4B89A}" = Paint Shop Pro 7
"{D92FF8EB-BD77-40AE-B68B-A6BFC6F8661D}" = Windows Live Family Safety
"{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1" = ConvertXtoDVD 4.0.10.324
"{DCCF734A-42DA-4951-8C8E-92CD33D2FA2E}" = PrinterShare 2.3.05
"{DEE1E2E5-B553-4F88-9DE7-23CBEA5D739C}" = Nokia Ovi Suite
"{E3B3AB03-8ABC-46CF-8CA9-DB5581E1F368}" = FinePix Studio
"{E53A095D-F5A9-4D06-BEC9-98805DEDBF2A}_is1" = AmortizeIT! v3.2
"{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call
"{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
"{F01F78CF-A022-EA98-5E54-8F3D47DABDEE}" = iMoneyManager 1.1.1
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F19F7B24-AAD4-4236-8475-5335483DA676}" = Avery Wizard 3.1
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{FF77941A-2BFA-4A18-BE2E-69B9498E4D55}" = User Profile Hive Cleanup Service
"{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}" = Disc2Phone
"504244733D18C8F63FF584AEB290E3904E791693" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"A4Tech iKeyWorks" = A4Tech iKeyWorks 7.64
"abgx360" = abgx360 v1.0.5
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AdobeESD" = Adobe Download Manager 1.2 (Remove Only)
"Advanced Archive Password Recovery" = Advanced Archive Password Recovery (remove only)
"avast" = avast! Free Antivirus
"BookSmart® 3.0.2 3.0.2" = BookSmart® 3.0.2 3.0.2
"Branding" =
"Cheat Engine 5.5_is1" = Cheat Engine 5.5
"Cheat Engine 6.0_is1" = Cheat Engine 6.0
"CLUE Classic1.0" = CLUE Classic
"com.imoneymanager.imm.2184A5AABEFD9A95272C652C16767C2B5E7A1512.1" = iMoneyManager 1.1.1
"Connection Manager" =
"COVKITS Screensaver" = COVKITS Screensaver
"COVKITS[1] Screensaver" = COVKITS[1] Screensaver
"DECCHECK" = Microsoft Windows XP Video Decoder Checkup Utility
"DVD Decrypter" = DVD Decrypter (Remove Only)
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EPSON Scanner" = EPSON Scan
"EPSON Stylus SX200_SX400_TX200_TX400 User’s Guide" = EPSON Stylus SX200_SX400_TX200_TX400 Manual
"EPSON Stylus SX400 Series" = EPSON Stylus SX400 Series Printer Uninstall
"ERUNT_is1" = ERUNT 1.1j
"Eusing Free Registry Cleaner" = Eusing Free Registry Cleaner
"Football Manager 2008" = Football Manager 2008
"GetDiz 3.0" = GetDiz 3.0
"Halo Tool Box" = Halo Tool Box
"Highfieldroad Screensaver" = Highfieldroad Screensaver
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"iLivid" = iLivid
"ImgBurn" = ImgBurn
"InstallShield Uninstall Information" =
"InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"InstallShield_{26BDE7D8-93F0-4A07-AD47-1707DB417941}" = Canon Camera Support Core Library
"InstallShield_{2F81FBFC-9A37-431F-9050-14B55485DF5A}" = Canon Internet Library for ZoomBrowser EX
"InstallShield_{89EE857B-8970-4F9F-AB58-A1C873AC72B3}" = Broadcom Management Programs
"Intelore - RAR Password Recovery" = RAR Password Recovery v1.1 RC16 (remove only)
"IrfanView" = IrfanView (remove only)
"legacyqcam_11.10" = Logitech Legacy USB Camera Driver Package
"lvdrivers_11.90" = Logitech QuickCam Driver Package
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"modding programs" = modding programs
"Mozilla Firefox 4.0 (x86 en-GB)" = Mozilla Firefox 4.0 (x86 en-GB)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSI30a-KB884016" =
"MSI30-Beta1" =
"MSI30-Beta2" =
"MSI30-KB884016" =
"MSI30-RC1" =
"MSI30-RC2" =
"MSI31-Beta" =
"MSI31-RC1" =
"Nero - Burning Rom!UninstallKey" =
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia Ovi Suite" = Nokia Ovi Suite
"orange3" = Orange Search Toolbar
"PartyTool_is1" = PartyTool 1.24
"PCHealth" =
"pdfFactory Pro" = pdfFactory Pro
"PonyProg v1.17h_is1" = PonyProg v1.17h
"Protector Eclipse_is1" = Protector Eclipse
"QuickSFV" = QuickSFV (Remove only)
"RealPlayer 12.0" = RealPlayer
"ResultBar" = ResultBar 1.0 build 115
"Searchqu 406 MediaBar" = Windows iLivid Toolbar
"SkyBlue70s Screensaver" = SkyBlue70s Screensaver
"SontheVilla Screensaver" = SontheVilla Screensaver
"SopCast" = SopCast 3.2.9
"Space Invaders_is1" = Space Invaders 1.1.0
"SpywareGuard_is1" = SpywareGuard v2.2
"SSC Service Utility_is1" = SSC Service Utility v4.30
"Sunplus CA533A" = Icatch(IV) Camera Driver
"TeamViewer 4" = TeamViewer 4
"ToolBand.SkypeIEToolbarToolbar" = Skype add-on for IE
"TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1" = TweetDeck
"U.B. Funkeys" = U.B. Funkeys
"Unlocker" = Unlocker 1.8.5
"uTorrent" = µTorrent
"Veetle TV" = Veetle TV 0.9.18
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VideoLAN VLC media player 0.8.6a
"VoilaBar" =
"vShare" = vShare Plugin
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WheelMouse" = A4Tech iWheelWorks 7.64
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinISO_is1" = WinISO 5.3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"Wizard101(UK)_is1" = Wizard101(UK)
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Software Update" = Yahoo! Software Update
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"EA SPORTS Gameface Browser Plugin" = EA SPORTS Gameface Browser Plugin 1.3.0.0
"UnityWebPlayer" = Unity Web Player
"uTorrent" = µTorrent
========== Last 10 Event Log Errors ==========
[ Antivirus Events ]
Error - 21/08/2010 23:54:16 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 22/08/2010 17:54:04 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 23/08/2010 12:41:23 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 24/08/2010 08:36:56 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 25/08/2010 05:47:04 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 26/08/2010 00:07:51 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 26/08/2010 18:22:37 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 27/08/2010 06:58:01 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 27/08/2010 13:53:37 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
Error - 28/08/2010 09:26:39 | Computer Name = MAINCOMPUTER | Source = avast! | ID = 33554522
Description =
[ Application Events ]
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Our Record 3 lost: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Pkt Record: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Our Record 2 won: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 25654 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Pkt Record: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 25654 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Our Record 3 lost: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Pkt Record: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 25654 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:33 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = ResolveSimultaneousProbe: Our Record 3 lost: 9B977D9C 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:34 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Ignoring response received before we even
began probing: 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:34 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: Received from 192.168.0.4:1025 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 25654 MAINCOMPUTER.local.
Error - 24/04/2011 08:45:34 | Computer Name = MAINCOMPUTER | Source = Bonjour Service | ID = 100
Description = mDNSCoreReceiveResponse: ProbeCount 2; will rename 26 The\032Edgar\032Family\032Computer._printershare._tcp.local.
SRV 0 0 13924 MAINCOMPUTER.local.
[ System Events ]
Error - 29/04/2011 06:58:54 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:55 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:56 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:56 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
Error - 29/04/2011 06:58:56 | Computer Name = MAINCOMPUTER | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {1F87137D-0E7C-44D5-8C73-4EFFB68962F2}.
The
error: "%5" Happened while starting this command: C:\WINDOWS\system32\wbem\wmiprvse.exe
-secured -Embedding
< End of report >
