Windows 7 - Security Center service won't start

log file of OTL

OTL Extras logfile created on: 05/05/2011 2:54:56 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\feykun\Downloads\Programs
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000043e | Country: Malaysia | Language: MSL | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 51.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 59.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 80.08 Gb Total Space | 42.67 Gb Free Space | 53.29% Space Free | Partition Type: NTFS
Drive D: | 137.23 Gb Total Space | 42.93 Gb Free Space | 31.28% Space Free | Partition Type: NTFS
Drive E: | 248.35 Gb Total Space | 248.25 Gb Free Space | 99.96% Space Free | Partition Type: NTFS

Computer Name: FEYKUN-PC | User Name: feykun | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] – C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] – "C:\Program Files\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
https [open] – "C:\Program Files\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{294BF709-D758-4363-8D75-01479AD20927}" = Windows Live Family Safety
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{364A2212-8C45-44EF-8046-707C66D187CA}" = Microsoft Office SharePoint Designer 2007 Training
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{65C0025A-2CDE-43C5-82D0-C7A56EF0DB39}" = Bing Bar Platform
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8991E763-21F5-4DEA-A938-5D9D77DCB488}" = Broadcom 802.11 Wireless Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0017-0000-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer 2007
"{90120000-0017-0409-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-003B-0000-0000-0000000FF1CE}" = Microsoft Office Project Professional 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00B4-0409-0000-0000000FF1CE}" = Microsoft Office Project MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = Lenovo Bluetooth with Enhanced Data Rate Software
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-AA0000000001}" = Adobe Reader X (10.0.1)
"{AE1E24C2-E720-42D5-B8E1-48F71A97B4DB}" = Energy Management
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DFB19121-0609-49C1-92B1-546E5A940FE8}" = Onekey Theater
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE7AD27A-62B1-44F6-B69C-25D1ECA94F5D}" = Lenovo EasyCamera
"A6A8668C0A13640CA28FE2A7D9654BE4AE478B13" = Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Alarm Clock_is1" = Alarm Clock v1.0
"ALSong_is1" = ALSong
"ALUpdate_is1" = ALTools Update
"Amazing Adventures The Caribbean Secret" = Amazing Adventures The Caribbean Secret
"avast" = avast! Free Antivirus
"B7541EC5F72AA713F557569278EB6273725F5607" = Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000)
"BabylonToolbar" = Babylon toolbar
"Bejeweled 2 Deluxe 1.0" = Bejeweled 2 Deluxe 1.0
"BF20603967CFDCB2BBF91950E8A56DFBC5C833FE" = Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)
"BitTorrent" = BitTorrent
"BitTorrentBar Toolbar" = BitTorrentBar Toolbar
"Cake Shop 21.0.0.0" = Cake Shop 2
"CNXT_AUDIO_HDA" = Conexant HD Audio
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2010-10-10
"Condition Zero" = Condition Zero
"conduitEngine" = Conduit Engine
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"Diner Dash 2_is1" = Diner Dash 2
"Elantech" = ETDWare PS/2-x86 7.0.4.18_WHQL
"ENTERPRISE" = Microsoft Office Enterprise 2007
"GameBox" = iGamesBar Toolbar
"GOM Player" = GOM Player
"Google Chrome" = Google Chrome
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"Internet Download Manager" = Internet Download Manager
"Kamus2" = Kamus 2.03
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Maxis Broadband" = Maxis Broadband
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft DirectX SDK (June 2010)" = Microsoft DirectX SDK (June 2010)
"Mozilla Firefox 4.0.1 (x86 en-US)" = Mozilla Firefox 4.0.1 (x86 en-US)
"Notepad++" = Notepad++
"NVIDIA Drivers" = NVIDIA Drivers
"Picasa 3" = Picasa 3
"PicPick" = PicPick
"PRJPRO" = Microsoft Office Project Professional 2007
"RealAlt_is1" = Real Alternative 2.0.2
"SharePointDesigner" = Microsoft Office SharePoint Designer 2007
"StarUML_is1" = StarUML 5.0.2.1570
"The House Of The Dead 2" = The House Of The Dead 2
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update
"Zuma Deluxe 1.0" = Zuma Deluxe 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus 2.9.8

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 01/05/2011 19:02:38 | Computer Name = feykun-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\silicon
motion\lenovo easycamera\driverpackage\DPInst64.exe". Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 02/05/2011 14:36:52 | Computer Name = feykun-PC | Source = Application Error | ID = 1000
Description = Faulting application name: IDMan.exe, version: 6.3.10.2, time stamp:
0x4ce408e5 Faulting module name: ntdll.dll, version: 6.1.7600.16695, time stamp:
0x4cc7ab44 Exception code: 0xc0000374 Fault offset: 0x000c35e3 Faulting process id:
0x944 Faulting application start time: 0x01cc07e966ab6cf1 Faulting application path:
C:\Program Files\Internet Download Manager\IDMan.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report
Id: 2573ccd1-74eb-11e0-a078-801d564db296

Error - 02/05/2011 16:43:14 | Computer Name = feykun-PC | Source = SideBySide | ID = 16842811
Description = Activation context generation failed for "c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll".Error in manifest or policy
file "c:\program files\microsoft\search enhancement pack\search box extension\SrchBxEx.dll"
on line 2. Invalid Xml syntax.

Error - 02/05/2011 16:43:30 | Computer Name = feykun-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\silicon
motion\lenovo easycamera\driverpackage\DPInst64.exe". Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 03/05/2011 8:08:12 | Computer Name = feykun-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 8.0.7600.16766,
time stamp: 0x4d65d5c3 Faulting module name: kernel32.dll, version: 6.1.7600.16481,
time stamp: 0x4b1e3897 Exception code: 0xc0000005 Fault offset: 0x0003df00 Faulting
process id: 0x1440 Faulting application start time: 0x01cc098ac33b5e26 Faulting application
path: C:\Program Files\Internet Explorer\iexplore.exe Faulting module path: C:\Windows\system32\kernel32.dll
Report
Id: 0449cdfc-757e-11e0-a644-8af1973f509e

Error - 03/05/2011 8:08:30 | Computer Name = feykun-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16766 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 1370 Start
Time: 01cc098a4f0d5f07 Termination Time: 0 Application Path: C:\Program Files\Internet
Explorer\iexplore.exe Report Id:

Error - 03/05/2011 8:10:45 | Computer Name = feykun-PC | Source = Application Hang | ID = 1002
Description = The program iexplore.exe version 8.0.7600.16766 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: d58 Start
Time: 01cc098ad402a84a Termination Time: 48 Application Path: C:\Program Files\Internet
Explorer\iexplore.exe Report Id: 550110bc-757e-11e0-a644-8af1973f509e

Error - 03/05/2011 15:26:19 | Computer Name = feykun-PC | Source = Application Error | ID = 1000
Description = Faulting application name: chnfs13tn.exe, version: 0.0.0.0, time stamp:
0x4563d944 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception
code: 0xc0000005 Fault offset: 0x00000000 Faulting process id: 0xbac Faulting application
start time: 0x01cc09c7f702c4a7 Faulting application path: C:\Users\feykun\Desktop\Need
for Speed Carbon\chnfs13tn.exe Faulting module path: unknown Report Id: 3833b11f-75bb-11e0-8fb4-dc3efc35539c

Error - 03/05/2011 18:35:38 | Computer Name = feykun-PC | Source = SideBySide | ID = 16842811
Description = Activation context generation failed for "c:\program files\microsoft\search
enhancement pack\search box extension\SrchBxEx.dll".Error in manifest or policy
file "c:\program files\microsoft\search enhancement pack\search box extension\SrchBxEx.dll"
on line 2. Invalid Xml syntax.

Error - 03/05/2011 18:35:53 | Computer Name = feykun-PC | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\silicon
motion\lenovo easycamera\driverpackage\DPInst64.exe". Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

[ System Events ]
Error - 16/04/2011 19:40:37 | Computer Name = feykun-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR1.

Error - 23/04/2011 0:10:44 | Computer Name = feykun-PC | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetBT_Tcpip_{D6918CA0-2BEA-4567-BEFA-C0BFAAA61B84}
because another computer on the network has the same name. The server could not
start.

Error - 26/04/2011 5:13:30 | Computer Name = feykun-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR2.

Error - 26/04/2011 7:59:00 | Computer Name = feykun-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR2.

Error - 02/05/2011 23:19:51 | Computer Name = feykun-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 11:19:06 on ?03/?05/?2011 was unexpected.

Error - 03/05/2011 11:57:38 | Computer Name = feykun-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR2.

Error - 03/05/2011 11:57:38 | Computer Name = feykun-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR2.

Error - 03/05/2011 11:57:39 | Computer Name = feykun-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR2.

Error - 03/05/2011 11:57:39 | Computer Name = feykun-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR2.

Error - 03/05/2011 11:57:40 | Computer Name = feykun-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR2.


< End of report >
















notepad log file

OTL logfile created on: 05/05/2011 2:54:56 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\feykun\Downloads\Programs
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 0000043e | Country: Malaysia | Language: MSL | Date Format: dd/MM/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 51.00% Memory free
4.00 Gb Paging File | 2.00 Gb Available in Paging File | 59.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 80.08 Gb Total Space | 42.67 Gb Free Space | 53.29% Space Free | Partition Type: NTFS
Drive D: | 137.23 Gb Total Space | 42.93 Gb Free Space | 31.28% Space Free | Partition Type: NTFS
Drive E: | 248.35 Gb Total Space | 248.25 Gb Free Space | 99.96% Space Free | Partition Type: NTFS

Computer Name: FEYKUN-PC | User Name: feykun | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\feykun\Downloads\Programs\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\GameBox\vprot.exe ()
PRC - C:\Users\feykun\Downloads\Programs\ninja.exe (Nuno Brito)
PRC - C:\Users\feykun\Downloads\Programs\BitTorrent-7.2.1.exe (BitTorrent, Inc.)
PRC - C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\PicPick\picpick.exe ()
PRC - C:\Program Files\Elantech\ETDCtrlHelper.exe (ELAN Microelectronics Corp.)
PRC - C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
PRC - C:\Program Files\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
PRC - C:\ProgramData\DatacardService\DCSHelper.exe (Huawei Technologies Co., Ltd.)
PRC - C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo)
PRC - C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
PRC - C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
PRC - C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe (Conexant Systems, Inc.)
PRC - C:\Program Files\CONEXANT\SAII\SmartAudio.exe (Conexant Systems, Inc)
PRC - C:\Program Files\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.)
PRC - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Users\feykun\Downloads\Programs\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\AVAST Software\Avast\snxhk.dll (AVAST Software)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\Elantech\ETDApix.dll (ELAN Microelectronics Corp.)


========== Win32 Services (SafeList) ==========

SRV - (WatAdminSvc) – C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (avast! Antivirus) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (DCService.exe) – C:\ProgramData\DatacardService\DCService.exe ()
SRV - (IAStorDataMgrSvc) Intel® – C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (UNS) Intel® – C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (btwdins) – C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) – C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)


========== Driver Services (SafeList) ==========

DRV - (aswSnx) – C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) – C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) – C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswRdr) – C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMonFlt) – C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) – C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (IDMWFP) – C:\Windows\System32\drivers\idmwfp.sys (Tonec Inc.)
DRV - (huawei_enumerator) – C:\Windows\System32\drivers\ew_jubusenum.sys (Huawei Technologies Co., Ltd.)
DRV - (nvlddmkm) – C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (ewusbnet) – C:\Windows\System32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (btusbflt) – C:\Windows\System32\drivers\btusbflt.sys (Broadcom Corporation.)
DRV - (hwdatacard) – C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (NVHDA) – C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (ACPIVPC) – C:\Windows\System32\drivers\AcpiVpc.sys (Lenovo Corporation)
DRV - (RSUSBSTOR) – C:\Windows\System32\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV - (CnxtHdAudService) – C:\Windows\System32\drivers\CHDRT32.sys (Conexant Systems Inc.)
DRV - (usbsmi) – C:\Windows\System32\drivers\SMIksdrv.sys (SMI)
DRV - (HECI) Intel® – C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
DRV - (vmbus) – C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation)
DRV - (storflt) – C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) – C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation)
DRV - (s3cap) – C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation)
DRV - (VMBusHID) – C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&am…amp;affID=17981
IE - HKLM\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://igb.toolbarhome.com/?hp=df
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Web Search…"
FF - prefs.js..browser.search.defaulturl: "http://www.bing.com/search?FORM=WLETDF&PC=WLEM&q="
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: [removed]:7.1.8
FF - prefs.js..extensions.enabledItems: [removed]:20110101
FF - prefs.js..extensions.enabledItems: [removed]:3.3.3.2
FF - prefs.js..extensions.enabledItems: [removed]:1.6.2
FF - prefs.js..keyword.URL: "http://igb.toolbarhome.com/search.aspx?srch=ku&q="
FF - prefs.js..network.proxy.type: 0


FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/03/28 11:03:56 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/04/30 14:22:00 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/11 01:00:37 | 000,000,000 | —D | M]

[2011/03/28 10:37:59 | 000,000,000 | —D | M] (No name found) – C:\Users\feykun\AppData\Roaming\Mozilla\Extensions
[2011/04/28 19:07:24 | 000,000,000 | —D | M] (No name found) – C:\Users\feykun\AppData\Roaming\Mozilla\Firefox\Profiles\qig3x71p.default\extensions
[2011/04/05 20:27:45 | 000,000,000 | —D | M] (BitTorrentBar Community Toolbar) – C:\Users\feykun\AppData\Roaming\Mozilla\Firefox\Profiles\qig3x71p.default\extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}
[2011/04/05 20:27:45 | 000,000,000 | —D | M] (Conduit Engine) – C:\Users\feykun\AppData\Roaming\Mozilla\Firefox\Profiles\qig3x71p.default\extensions\[removed]
[2011/04/05 20:27:51 | 000,000,000 | —D | M] (Firebug) – C:\Users\feykun\AppData\Roaming\Mozilla\Firefox\Profiles\qig3x71p.default\extensions\[removed]
[2011/03/29 00:09:04 | 000,000,000 | —D | M] ("Ask Toolbar") – C:\Users\feykun\AppData\Roaming\Mozilla\Firefox\Profiles\qig3x71p.default\extensions\[removed]
[2011/04/06 19:04:47 | 000,001,832 | —- | M] () – C:\Users\feykun\AppData\Roaming\Mozilla\Firefox\Profiles\qig3x71p.default\searchplugins\bing.xml
[2011/04/28 13:33:09 | 000,001,580 | —- | M] () – C:\Users\feykun\AppData\Roaming\Mozilla\Firefox\Profiles\qig3x71p.default\searchplugins\web-search.xml
[2011/04/11 01:00:38 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) –
[2011/03/28 11:03:56 | 000,000,000 | —D | M] (avast! WebRep) – C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2011/03/28 10:44:26 | 000,000,000 | —D | M] (IDM CC) – C:\USERS\FEYKUN\APPDATA\ROAMING\IDM\IDMMZCC3
[2011/04/30 14:21:58 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\Mozilla Firefox\components\browsercomps.dll
[2011/04/23 16:09:39 | 000,002,428 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
[2010/01/01 16:00:00 | 000,002,252 | —- | M] () – C:\Program Files\Mozilla Firefox\searchplugins\bing.xml

O1 HOSTS File: ([2011/04/02 01:07:35 | 000,000,856 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 111.223.32.203 www.175iris.com
O2 - BHO: (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Tonec Inc.)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (iGamesBar Toolbar) - {0FEF2D2C-CDA6-45E4-B2ED-9DF7C50C95FF} - C:\Program Files\GameBox\gamebox_toolbar.dll ()
O2 - BHO: (CescrtHlpr Object) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (iGamesBar Toolbar) - {0FEF2D2C-CDA6-45E4-B2ED-9DF7C50C95FF} - C:\Program Files\GameBox\gamebox_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (BitTorrentBar Toolbar) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (iGamesBar Toolbar) - {0FEF2D2C-CDA6-45E4-B2ED-9DF7C50C95FF} - C:\Program Files\GameBox\gamebox_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (BitTorrentBar Toolbar) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - C:\Program Files\BitTorrentBar\tbBitT.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BabylonToolbar] C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
O4 - HKLM..\Run: [cAudioFilterAgent] C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe (Conexant Systems, Inc.)
O4 - HKLM..\Run: [Energy Management] C:\Program Files\Lenovo\Energy Management\Energy Management.exe (Lenovo (Beijing) Limited)
O4 - HKLM..\Run: [EnergyUtility] C:\Program Files\Lenovo\Energy Management\utility.exe (Lenovo(beijing) Limited)
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [OnekeyStudio] C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo)
O4 - HKLM..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4 - HKLM..\Run: [UCam_Menu] C:\Program Files\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [YouCam Mirror Tray icon] C:\Program Files\Lenovo\YouCam\YouCamTray.exe (CyberLink Corp.)
O4 - HKCU..\Run: [BitTorrent] C:\Users\feykun\Downloads\Programs\BitTorrent-7.2.1.exe (BitTorrent, Inc.)
O4 - HKCU..\Run: [GateWay] File not found
O4 - HKCU..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [PicPick Start] C:\Program Files\PicPick\picpick.exe ()
O4 - HKCU..\Run: [SmartAudio] C:\Program Files\CONEXANT\SAII\SAIICpl.exe ()
O4 - HKCU..\Run: [vProt] C:\Program Files\GameBox\vprot.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm ()
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm ()
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm ()
O8 - Extra context menu item: Send image to &Bluetooth Device… - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth Device… - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\Lenovo\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm ()
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\gameboxchrome {494D4E3B-FA53-4487-8AF6-3F50FE1167A9} - C:\Program Files\GameBox\gamebox_toolbar.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 05:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{a9ca2ce5-58e1-11e0-a339-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{a9ca2ce5-58e1-11e0-a339-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup.exe
O33 - MountPoints2\{d73fac4a-5e8e-11e0-9e2c-e6ac21eebd85}\Shell - "" = AutoRun
O33 - MountPoints2\{d73fac4a-5e8e-11e0-9e2c-e6ac21eebd85}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{d73fac5f-5e8e-11e0-9e2c-c6233c142a75}\Shell - "" = AutoRun
O33 - MountPoints2\{d73fac5f-5e8e-11e0-9e2c-c6233c142a75}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.divxa32 - C:\Windows\System32\msaud32_divx.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Program Files\Combined Community Codec Pack\Filters\FFDShow\ff_vfw.dll ()


========== Files/Folders - Created Within 30 Days ==========

[2011/05/02 04:24:28 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\EleFun Games
[2011/05/02 02:48:02 | 000,000,000 | —D | C] – C:\Windows\Cake Shop 2
[2011/05/02 02:48:02 | 000,000,000 | —D | C] – C:\Program Files\Cake Shop 2
[2011/05/02 02:39:29 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diner Dash 2
[2011/05/02 02:39:14 | 000,000,000 | —D | C] – C:\Program Files\Diner Dash 2
[2011/05/02 02:39:03 | 000,000,000 | —D | C] – C:\Program Files\ReflexiveArcade
[2011/05/01 07:01:42 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\System32\prevhost.exe
[2011/05/01 07:01:39 | 001,686,016 | —- | C] (Microsoft Corporation) – C:\Windows\System32\esent.dll
[2011/05/01 07:01:38 | 000,146,304 | —- | C] (Microsoft Corporation) – C:\Windows\System32\drivers\storport.sys
[2011/05/01 07:01:38 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\System32\fsutil.exe
[2011/05/01 07:01:34 | 000,442,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsPrint.dll
[2011/05/01 07:01:33 | 002,614,784 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/05/01 02:37:41 | 000,038,224 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbamswissarmy.sys
[2011/05/01 02:37:41 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/05/01 02:37:37 | 000,020,952 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2011/05/01 02:37:37 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/05/01 00:58:44 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Malwarebytes
[2011/05/01 00:58:38 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2011/04/30 23:26:33 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Rovio
[2011/04/30 23:12:34 | 000,000,000 | —D | C] – C:\Users\feykun\Desktop\Angry Birds HAUS
[2011/04/30 22:45:10 | 000,000,000 | —D | C] – C:\Users\feykun\Desktop\New Folder
[2011/04/30 22:04:45 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\PopCapv1003
[2011/04/30 22:04:25 | 000,000,000 | —D | C] – C:\ProgramData\SpinTop Games
[2011/04/29 13:57:23 | 000,000,000 | —D | C] – C:\Users\feykun\Desktop\[EpicMoviez.Com] Fast Five (2011) TS 400MB - ThePecko
[2011/04/28 11:57:03 | 000,000,000 | —D | C] – C:\Program Files\GameBox
[2011/04/28 11:56:31 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PicPick
[2011/04/28 11:56:30 | 000,000,000 | —D | C] – C:\Program Files\PicPick
[2011/04/28 00:44:52 | 000,000,000 | —D | C] – C:\Users\feykun\Desktop\uml
[2011/04/27 03:57:42 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kamus 2.03
[2011/04/27 03:57:42 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kamus 2.03
[2011/04/27 03:57:41 | 000,000,000 | —D | C] – C:\Program Files\Kamus2
[2011/04/27 03:10:02 | 000,288,256 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XpsGdiConverter.dll
[2011/04/26 17:22:01 | 000,000,000 | —D | C] – C:\Temp
[2011/04/26 17:17:02 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Condition Zero
[2011/04/26 17:14:53 | 000,000,000 | —D | C] – C:\Valve
[2011/04/26 12:21:16 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarUML
[2011/04/26 12:21:06 | 000,000,000 | —D | C] – C:\Program Files\StarUML
[2011/04/26 11:35:41 | 000,000,000 | —D | C] – C:\Program Files\GameHouse
[2011/04/26 11:29:30 | 000,000,000 | —D | C] – C:\BigFishGamesCache
[2011/04/26 05:29:55 | 000,000,000 | —D | C] – C:\Users\feykun\Desktop\vb
[2011/04/26 03:29:01 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The House Of The Dead 2
[2011/04/26 03:26:55 | 000,000,000 | —D | C] – C:\Program Files\The House Of The Dead 2
[2011/04/26 02:49:26 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\GetRightToGo
[2011/04/26 02:49:26 | 000,000,000 | —D | C] – C:\Users\feykun\Documents\Downloads
[2011/04/26 02:44:39 | 000,000,000 | —D | C] – C:\Windows\Fireball
[2011/04/23 16:12:55 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XAMPP for Windows
[2011/04/23 16:09:34 | 000,000,000 | —D | C] – C:\Program Files\BabylonToolbar
[2011/04/23 16:08:50 | 000,000,000 | —D | C] – C:\xampp
[2011/04/23 15:48:55 | 053,670,736 | —- | C] (Apache Friends) – C:\Users\feykun\Desktop\xampp-win32-1.7.3.exe
[2011/04/21 16:46:00 | 000,000,000 | —D | C] – C:\Users\feykun\Desktop\[EpicMoviez.Com] I Am Number Four (2011) PPV 400MB - ThePecko
[2011/04/19 19:50:50 | 000,381,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iedkcs32.dll
[2011/04/19 19:50:49 | 000,606,208 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mstime.dll
[2011/04/19 19:50:49 | 000,599,040 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeeds.dll
[2011/04/19 19:50:49 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\System32\iepeers.dll
[2011/04/19 19:50:49 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2011/04/19 19:50:49 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedsbs.dll
[2011/04/19 19:50:49 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\licmgr10.dll
[2011/04/19 19:50:48 | 001,638,912 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2011/04/19 19:50:48 | 000,386,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\html.iec
[2011/04/19 19:50:48 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2011/04/19 19:50:48 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\msfeedssync.exe
[2011/04/19 19:50:33 | 000,191,488 | —- | C] (Microsoft Corporation) – C:\Windows\System32\FXSCOVER.exe
[2011/04/19 19:50:32 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript.dll
[2011/04/19 19:50:32 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\Windows\System32\vbscript.dll
[2011/04/19 19:50:31 | 002,331,136 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2011/04/19 19:50:30 | 000,294,912 | —- | C] (Adobe Systems Incorporated) – C:\Windows\System32\atmfd.dll
[2011/04/19 19:50:30 | 000,034,304 | —- | C] (Adobe Systems) – C:\Windows\System32\atmlib.dll
[2011/04/19 19:50:05 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\Windows\System32\dnscacheugc.exe
[2011/04/19 19:49:32 | 001,164,288 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfc42u.dll
[2011/04/19 19:49:32 | 001,137,664 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mfc42.dll
[2011/04/18 03:32:05 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\PlayFirst
[2011/04/18 03:27:17 | 000,000,000 | —D | C] – C:\ProgramData\PlayFirst
[2011/04/18 02:58:16 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Alarm Clock
[2011/04/18 02:58:16 | 000,000,000 | —D | C] – C:\Program Files\Alarm Clock
[2011/04/16 18:59:54 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
[2011/04/16 18:59:54 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
[2011/04/16 18:59:52 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Notepad++
[2011/04/16 18:59:52 | 000,000,000 | —D | C] – C:\Program Files\Notepad++
[2011/04/14 21:27:13 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PopCap Games
[2011/04/14 21:27:11 | 000,000,000 | —D | C] – C:\Program Files\PopCap Games
[2011/04/14 16:41:08 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3
[2011/04/14 16:40:28 | 000,000,000 | —D | C] – C:\ProgramData\PopCap Games
[2011/04/14 03:27:39 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Roaming\Real
[2011/04/13 20:46:53 | 000,000,000 | —D | C] – C:\ProgramData\Reflexive
[2011/04/09 14:46:43 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office SharePoint Designer 2007 Training
[2011/04/08 04:31:23 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Local\Diagnostics
[2011/04/07 04:44:50 | 000,000,000 | —D | C] – C:\Users\feykun\Desktop\Need for Speed Carbon
[2011/04/07 02:09:29 | 000,000,000 | —D | C] – C:\Users\feykun\Documents\NFS Carbon
[2011/04/06 20:57:34 | 000,000,000 | —D | C] – C:\Users\feykun\Desktop\projek sad
[2011/04/06 13:13:33 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Local\{B3E905A3-3D4E-4D8B-AB30-7DA334899CB6}
[2011/04/06 13:13:33 | 000,000,000 | —D | C] – C:\Users\feykun\AppData\Local\{19F5EEDF-FBCB-4C09-A8B5-F188EC8ECD63}
[2011/04/05 16:21:56 | 000,737,280 | —- | C] (Indigo Rose Corporation) – C:\Windows\iun6002.exe
[2 C:\Users\feykun\AppData\Local\*.tmp files -> C:\Users\feykun\AppData\Local\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/05/05 02:14:00 | 000,000,996 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/05/04 18:55:46 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/05/04 11:46:16 | 000,042,045 | —- | M] () – C:\Windows\System32\license.rtf
[2011/05/04 07:14:00 | 000,000,992 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/05/04 02:27:37 | 000,001,141 | —- | M] () – C:\Users\feykun\Desktop\Frozen Throne - Shortcut.lnk
[2011/05/04 00:58:08 | 000,017,168 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/05/04 00:58:08 | 000,017,168 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/05/04 00:51:02 | 000,000,300 | -HS- | M] () – C:\Windows\tasks\frosi.job
[2011/05/04 00:50:45 | 1553,084,416 | -HS- | M] () – C:\hiberfil.sys
[2011/05/04 00:48:17 | 000,000,000 | —- | M] () – C:\Users\feykun\AppData\Local\{56B6F358-8A62-4F89-BD5A-6CF20FC76F57}
[2011/05/04 00:45:54 | 000,000,000 | —- | M] () – C:\Users\feykun\AppData\Local\{969DEF01-2540-4260-8DBB-B6D109FCB500}
[2011/05/04 00:43:30 | 000,410,560 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/05/03 21:19:50 | 000,611,472 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/05/03 21:19:50 | 000,107,658 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/05/03 20:19:47 | 000,001,890 | —- | M] () – C:\Windows\diagwrn.xml
[2011/05/03 20:19:47 | 000,001,890 | —- | M] () – C:\Windows\diagerr.xml
[2011/05/03 14:58:20 | 000,476,444 | —- | M] () – C:\Users\feykun\Desktop\saleperson.exe
[2011/05/03 14:54:34 | 000,001,829 | —- | M] () – C:\Users\feykun\Desktop\saleperson.cpp
[2011/05/03 00:04:06 | 000,000,016 | —- | M] () – C:\Windows\popcinfo.dat
[2011/05/01 02:37:41 | 000,001,071 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/30 22:32:30 | 000,135,168 | RHS- | M] () – C:\Windows\System32\lsass6.dll
[2011/04/30 14:22:45 | 000,002,002 | —- | M] () – C:\Users\feykun\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/04/29 18:15:39 | 000,002,290 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2011/04/28 04:07:21 | 000,152,576 | —- | M] () – C:\Users\feykun\Documents\Project1.mpp
[2011/04/27 22:56:12 | 000,000,903 | —- | M] () – C:\Users\feykun\Desktop\StarUML.lnk
[2011/04/26 17:17:04 | 000,657,209 | —- | M] () – C:\Windows\Condition Zero Uninstaller.exe
[2011/04/26 17:17:02 | 000,001,622 | —- | M] () – C:\Users\feykun\Desktop\Counter-Strike.lnk
[2011/04/26 17:17:02 | 000,001,610 | —- | M] () – C:\Users\feykun\Desktop\Condition Zero.lnk
[2011/04/26 04:00:15 | 000,004,096 | —- | M] () – C:\Windows\d3dx.dat
[2011/04/26 03:28:43 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/04/26 03:28:43 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/04/26 00:34:48 | 000,000,009 | —- | M] () – C:\Windows\nfsc_patch.ini
[2011/04/24 03:45:39 | 000,011,544 | —- | M] () – C:\Users\feykun\Documents\Lenovo G Series G530-444627J 15.4- WXGA (1 CCFL backlight) LCD Screens, (New) most screens $345 to $455.gif
[2011/04/23 16:14:33 | 000,001,448 | —- | M] () – C:\Users\feykun\Desktop\XAMPP Control Panel.lnk
[2011/04/23 16:08:38 | 053,670,736 | —- | M] (Apache Friends) – C:\Users\feykun\Desktop\xampp-win32-1.7.3.exe
[2011/04/11 01:00:39 | 000,001,096 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/04/08 19:54:59 | 000,000,008 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2011/04/05 16:21:37 | 000,737,280 | —- | M] (Indigo Rose Corporation) – C:\Windows\iun6002.exe
[2011/04/05 13:28:55 | 000,014,012 | —- | M] () – C:\Users\feykun\Documents\Presentation1.jpg
[2 C:\Users\feykun\AppData\Local\*.tmp files -> C:\Users\feykun\AppData\Local\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/05/04 02:27:41 | 000,001,141 | —- | C] () – C:\Users\feykun\Desktop\Frozen Throne - Shortcut.lnk
[2011/05/04 00:47:52 | 000,000,000 | —- | C] () – C:\Users\feykun\AppData\Local\{56B6F358-8A62-4F89-BD5A-6CF20FC76F57}
[2011/05/04 00:45:39 | 000,000,000 | —- | C] () – C:\Users\feykun\AppData\Local\{969DEF01-2540-4260-8DBB-B6D109FCB500}
[2011/05/03 20:19:46 | 000,001,890 | —- | C] () – C:\Windows\diagwrn.xml
[2011/05/03 20:19:46 | 000,001,890 | —- | C] () – C:\Windows\diagerr.xml
[2011/05/03 14:54:36 | 000,476,444 | —- | C] () – C:\Users\feykun\Desktop\saleperson.exe
[2011/05/03 14:46:16 | 000,001,829 | —- | C] () – C:\Users\feykun\Desktop\saleperson.cpp
[2011/05/02 22:29:36 | 000,000,016 | —- | C] () – C:\Windows\popcinfo.dat
[2011/05/01 02:37:41 | 000,001,071 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/04/30 22:32:30 | 000,135,168 | RHS- | C] () – C:\Windows\System32\lsass6.dll
[2011/04/30 22:32:30 | 000,000,300 | -HS- | C] () – C:\Windows\tasks\frosi.job
[2011/04/28 04:07:21 | 000,152,576 | —- | C] () – C:\Users\feykun\Documents\Project1.mpp
[2011/04/26 17:17:02 | 000,657,209 | —- | C] () – C:\Windows\Condition Zero Uninstaller.exe
[2011/04/26 17:17:02 | 000,001,622 | —- | C] () – C:\Users\feykun\Desktop\Counter-Strike.lnk
[2011/04/26 17:17:02 | 000,001,610 | —- | C] () – C:\Users\feykun\Desktop\Condition Zero.lnk
[2011/04/26 12:21:16 | 000,000,903 | —- | C] () – C:\Users\feykun\Desktop\StarUML.lnk
[2011/04/26 04:00:15 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2011/04/26 03:28:43 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2011/04/26 03:28:43 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2011/04/25 23:57:52 | 000,000,009 | —- | C] () – C:\Windows\nfsc_patch.ini
[2011/04/24 03:45:39 | 000,011,544 | —- | C] () – C:\Users\feykun\Documents\Lenovo G Series G530-444627J 15.4- WXGA (1 CCFL backlight) LCD Screens, (New) most screens $345 to $455.gif
[2011/04/23 16:12:55 | 000,001,448 | —- | C] () – C:\Users\feykun\Desktop\XAMPP Control Panel.lnk
[2011/04/11 01:00:39 | 000,001,108 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2011/04/08 19:49:36 | 000,000,008 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2011/04/05 13:28:52 | 000,014,012 | —- | C] () – C:\Users\feykun\Documents\Presentation1.jpg
[2011/03/28 11:43:51 | 000,006,088 | —- | C] () – C:\Windows\System32\drivers\CDConfig.bin
[2011/03/28 10:37:36 | 000,000,000 | —- | C] () – C:\Windows\nsreg.dat
[2011/03/28 10:03:54 | 000,163,840 | —- | C] () – C:\Windows\System32\SM37XCoInst.dll
[2011/01/21 07:36:02 | 000,080,416 | —- | C] () – C:\Windows\System32\RtNicProp32.dll
[2010/05/07 10:39:46 | 000,040,588 | —- | C] () – C:\Windows\System32\nvcoproc.bin
[2009/07/14 12:57:37 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/14 12:33:53 | 000,410,560 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2009/07/14 10:05:48 | 000,611,472 | —- | C] () – C:\Windows\System32\perfh009.dat
[2009/07/14 10:05:48 | 000,291,294 | —- | C] () – C:\Windows\System32\perfi009.dat
[2009/07/14 10:05:48 | 000,107,658 | —- | C] () – C:\Windows\System32\perfc009.dat
[2009/07/14 10:05:48 | 000,031,548 | —- | C] () – C:\Windows\System32\perfd009.dat
[2009/07/14 10:05:05 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2009/07/14 10:04:11 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2009/07/14 08:19:49 | 000,066,048 | —- | C] () – C:\Windows\System32\PrintBrmUi.exe
[2009/07/14 07:55:01 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/14 07:51:43 | 000,073,728 | —- | C] () – C:\Windows\System32\BthpanContextHandler.dll
[2009/07/14 07:42:10 | 000,064,000 | —- | C] () – C:\Windows\System32\BWContextHandler.dll
[2009/06/11 05:26:10 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2006/11/22 13:00:40 | 000,132,096 | —- | C] () – C:\Windows\System32\gc.dll

========== LOP Check ==========

[2011/05/05 03:00:03 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\BitTorrent
[2011/03/28 11:16:26 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\Dev-Cpp
[2011/05/04 19:30:37 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\DMCache
[2011/03/29 00:18:37 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\Easy Duplicate Finder
[2011/05/02 04:24:28 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\EleFun Games
[2011/04/26 02:59:41 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\GetRightToGo
[2011/04/30 22:37:20 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\IDM
[2011/04/16 18:59:59 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\Notepad++
[2011/05/02 02:42:39 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\PlayFirst
[2011/04/30 22:04:45 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\PopCapv1003
[2011/04/02 00:53:39 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\Reasonable Software House Ltd
[2011/04/30 23:26:33 | 000,000,000 | —D | M] – C:\Users\feykun\AppData\Roaming\Rovio
[2011/05/04 00:51:02 | 000,000,300 | -HS- | M] () – C:\Windows\Tasks\frosi.job
[2009/07/14 12:53:46 | 000,014,952 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009/06/11 05:42:20 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2011/03/28 10:09:46 | 000,000,177 | —- | M] () – C:\BroadcomWLAN.log
[2009/06/11 05:42:20 | 000,000,010 | —- | M] () – C:\config.sys
[2011/05/04 00:50:45 | 1553,084,416 | -HS- | M] () – C:\hiberfil.sys
[2011/04/26 03:28:43 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/04/26 03:28:43 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/05/04 00:50:47 | 2070,781,952 | -HS- | M] () – C:\pagefile.sys

< %systemroot%\Fonts\*.com >
[2009/07/14 12:52:25 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 12:52:25 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 12:52:25 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 12:52:25 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/11 05:31:19 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/07/14 09:15:35 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\msonpppr.dll
[2009/07/14 09:16:19 | 000,029,696 | —- | M] (Microsoft Corporation) – C:\Windows\System32\spool\prtprocs\w32x86\winprint.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2011/02/23 23:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2010/11/10 02:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 12:41:57 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/04/02 08:52:22 | 000,000,221 | -HS- | M] () – C:\Users\feykun\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/05/03 14:58:20 | 000,476,444 | —- | M] () – C:\Users\feykun\Desktop\saleperson.exe
[2011/04/23 16:08:38 | 053,670,736 | —- | M] (Apache Friends) – C:\Users\feykun\Desktop\xampp-win32-1.7.3.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-05-01 10:12:14

< End of report >