Spyware / Malware / Virus Removal

Virus / Trojan and start menu wiped out

22 min read

Looking for the outcome? Ask AI

saicool171 Topic Starter

Post #1May 21, 2011, 8:56 PM UTC

Yesterday we had some popups that came up and multiple windows opened and wiped out the start menu options except Firefox. I've run Zonealarm and then Kaspersky Pure but can't tell if the system is clean. And, I don't know how to restore my Start menu.

Your help is appreciated. Thank you in advance.

As per the instructions I ran OTL. The log is below.

OTL.txt

OTL logfile created on: 5/21/2011 3:24:31 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Manjula\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 56.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 278.92 Gb Total Space | 229.79 Gb Free Space | 82.38% Space Free | Partition Type: NTFS

Computer Name: DELL-LAPTOP | User Name: Manjula | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Manjula\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe (Kaspersky Lab)
PRC - C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Infowatch)
PRC - C:\Program Files (x86)\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe (Amazon.com)
PRC - C:\Program Files (x86)\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe (Amazon.com)
PRC - C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (SoftThinks)
PRC - C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
PRC - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
PRC - C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\Users\Manjula\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)

========== Modules (SafeList) ==========

MOD - C:\Users\Manjula\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)

========== Win32 Services (SafeList) ==========

SRV:64bit: - (wltrysvc) – C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE ()
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (STacSV) – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_afc3018f8cfedd20\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV - (AVP) – C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe (Kaspersky Lab)
SRV - (LMIMaint) – C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) – C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (LogMeIn) – C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn, Inc.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (getPlusHelper) getPlus® – C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (CSObjectsSrv) – C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Infowatch)
SRV - (Amazon Download Agent) – C:\Program Files (x86)\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe (Amazon.com)
SRV - (GoToAssist) – C:\Program Files (x86)\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (SftService) – C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (SoftThinks)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (sprtsvc_DellSupportCenter) SupportSoft Sprocket Service (DellSupportCenter) – C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (SBSDWSCService) – C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (YahooAUService) – C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)

========== Driver Services (SafeList) ==========

DRV:64bit: - (KLIF) – C:\Windows\SysNative\drivers\klif.sys (Kaspersky Lab)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (LMIRfsClientNP) – C:\Windows\SysNative\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV:64bit: - (LMIRfsDriver) – C:\Windows\SysNative\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV:64bit: - (lmimirr) – C:\Windows\SysNative\drivers\lmimirr.sys (LogMeIn, Inc.)
DRV:64bit: - (CSCrySec) – C:\Windows\SysNative\drivers\CSCrySec.sys (Infowatch)
DRV:64bit: - (CSVirtualDiskDrv) – C:\Windows\SysNative\drivers\CSVirtualDiskDrv.sys (Infowatch)
DRV:64bit: - (KLBG) – C:\Windows\SysNative\drivers\klbg.sys (Kaspersky Lab)
DRV:64bit: - (klmouflt) – C:\Windows\SysNative\drivers\klmouflt.sys (Kaspersky Lab)
DRV:64bit: - (KLIM6) – C:\Windows\SysNative\drivers\klim6.sys (Kaspersky Lab)
DRV:64bit: - (kl1) – C:\Windows\SysNative\drivers\kl1.sys (Kaspersky Lab)
DRV:64bit: - (BCM42RLY) – C:\Windows\SysNative\drivers\bcm42rly.sys (Broadcom Corporation)
DRV:64bit: - (BCM43XX) – C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (CtClsFlt) – C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (ApfiltrService) – C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV:64bit: - (WimFltr) – C:\Windows\SysNative\drivers\WimFltr.sys (Microsoft Corporation)
DRV - (LMIInfo) – C:\Program Files (x86)\LogMeIn\x64\rainfo.sys (LogMeIn, Inc.)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.msn.com/USCON/1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.defaulturl: "http://www.bing.com/search?FORM=DLCDF8&PC=WLEM&q="
FF - prefs.js..browser.search.param.yahoo-fr: "chrf-ytbm"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm"
FF - prefs.js..browser.search.param.yahoo-type: "${8}"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.com"
FF - prefs.js..extensions.enabledItems: [removed]:1.6.1
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.88
FF - prefs.js..extensions.enabledItems: {6AC85730-7D0F-4de0-B3FA-21142DD85326}:2.5.5
FF - prefs.js..extensions.enabledItems: {75CEEE46-9B64-46f8-94BF-54012DE155F0}:0.4.8
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:[removed]
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.2
FF - prefs.js..extensions.enabledItems: [removed]:0.42
FF - prefs.js..extensions.enabledItems: [removed]:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 3
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {FFB96CC1-7EB3-449D-B827-DB661701C6BB}:[removed]
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=DLCDF8&PC=WLEM&q="

FF - HKLM\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKLM\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010/08/09 18:14:12 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2156.0\Firefox [2010/08/09 18:15:47 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/04/24 13:49:49 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/04/24 13:49:47 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\THBExt [2011/05/21 13:20:01 | 000,000,000 | —D | M]

[2010/01/30 18:26:12 | 000,000,000 | —D | M] (No name found) – C:\Users\Manjula\AppData\Roaming\Mozilla\Extensions
[2011/05/20 13:34:49 | 000,000,000 | —D | M] (No name found) – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions
[2011/05/06 08:55:02 | 000,000,000 | —D | M] (FireShot) – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2011/04/15 12:52:08 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/04/25 13:51:03 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/04/24 13:30:50 | 000,000,000 | —D | M] (ColorZilla) – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}
[2011/04/24 13:30:51 | 000,000,000 | —D | M] (MeasureIt) – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions\{75CEEE46-9B64-46f8-94BF-54012DE155F0}
[2010/02/02 21:20:47 | 000,000,000 | —D | M] (Adobe DLM (powered by getPlus®)) – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010/09/26 13:43:08 | 000,000,000 | —D | M] (TVU Web Player) – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions\[removed]
[2010/02/03 08:37:13 | 000,000,000 | —D | M] ("Inline Code Finder for Firebug") – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\extensions\[removed]
[2010/08/13 12:01:34 | 000,001,832 | —- | M] () – C:\Users\Manjula\AppData\Roaming\Mozilla\Firefox\Profiles\47mll4aj.default\searchplugins\bing.xml
[2011/05/21 13:21:13 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/03/08 20:29:01 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/05/21 13:21:13 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files (x86)\Mozilla Firefox\extensions\[removed]
File not found (No name found) –
() (No name found) – C:\USERS\MANJULA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\47MLL4AJ.DEFAULT\EXTENSIONS\{E4A8A97B-F2ED-450B-B12D-EE082BA24781}.XPI
() (No name found) – C:\USERS\MANJULA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\47MLL4AJ.DEFAULT\EXTENSIONS\[removed]
() (No name found) – C:\USERS\MANJULA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\47MLL4AJ.DEFAULT\EXTENSIONS\[removed]
[2011/03/18 12:53:24 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/02/02 22:40:24 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml

O1 HOSTS File: ([2011/03/04 21:49:34 | 000,430,706 | R— | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 127.0.0.1 1-2005-search.com
O1 - Hosts: 127.0.0.1 123fporn.info
O1 - Hosts: 14824 more lines…
O2:64bit: - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 9\DLLx64\SnagitBHO64.dll (TechSmith Corporation)
O2:64bit: - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\ievkbd.dll (Kaspersky Lab)
O2:64bit: - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (SnagIt Toolbar Loader) - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files (x86)\TechSmith\Snagit 9\SnagitBHO.dll (TechSmith Corporation)
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\ievkbd.dll (Kaspersky Lab)
O2 - BHO: (ZoneAlarm Toolbar Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - File not found
O2 - BHO: (Bing Bar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll (Microsoft Corporation)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll (Kaspersky Lab)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (@C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll,-100) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.0.2156.0\npwinext.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Snagit) - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 9\SnagitIEAddin.dll (TechSmith Corporation)
O3 - HKLM\..\Toolbar: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - File not found
O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Toolbar) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - File not found
O4:64bit: - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [Broadcom Wireless Manager UI] C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRAY.EXE (Dell Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [ISW] File not found
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [AmazonGSDownloaderTray] C:\Program Files (x86)\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe (Amazon.com)
O4 - HKLM..\Run: [AVP] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\avp.exe (Kaspersky Lab)
O4 - HKLM..\Run: [CheckPoint Cleanup] C:\Users\Manjula\AppData\Local\Temp\cpes_clean_launcher.exe ()
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKCU..\Run: [googletalk] C:\Users\Manjula\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [ooVoo.exe] C:\Program Files (x86)\ooVoo\oovoo.exe (ooVoo LLC)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [Spyware Doctor] C:\Users\Manjula\Desktop\sdsetup.exe ()
O4 - Startup: C:\Users\Manjula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O8:64bit: - Extra context menu item: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\ie_banner_deny.htm ()
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\ie_banner_deny.htm ()
O9:64bit: - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\klwtbbho.dll (Kaspersky Lab)
O9:64bit: - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll (Kaspersky Lab)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\klwtbbho.dll (Kaspersky Lab)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {6F6FDB9E-5072-498C-BCB0-2B7F00C49EE7} http://support.dell.com/systemprofiler/DellSystemLite.CAB (DellSystemLite.Scanner)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} Reg Error: Value error. (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://seomozevents.webex.com/client/T27LB/nbr/ieatgpc1.cab (GpcContainer Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 [removed] [removed]
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\kloehk.dll (Kaspersky Lab)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\x64\sbhook64.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\mzvkbd3.dll (Kaspersky Lab)
O20 - AppInit_DLLs: (C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE\sbhook.dll (Kaspersky Lab)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\GoToAssist: DllName - Reg Error: Key error. - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\klogon: DllName - Reg Error: Key error. - C:\Windows\SysNative\klogon.dll (Kaspersky Lab)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/05/21 15:22:03 | 000,580,608 | —- | C] (OldTimer Tools) – C:\Users\Manjula\Desktop\OTL.exe
[2011/05/21 13:20:35 | 000,085,048 | —- | C] (Infowatch) – C:\Windows\SysNative\drivers\CSCrySec.sys
[2011/05/21 13:20:35 | 000,066,104 | —- | C] (Infowatch) – C:\Windows\SysNative\drivers\CSVirtualDiskDrv.sys
[2011/05/21 13:20:34 | 000,000,000 | —D | C] – C:\Windows\SysNative\DRVSTORE
[2011/05/21 13:19:31 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\InfoWatch
[2011/05/21 13:19:30 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky PURE
[2011/05/21 13:19:30 | 000,000,000 | —D | C] – C:\ProgramData\Kaspersky Lab
[2011/05/21 13:19:30 | 000,000,000 | —D | C] – C:\Program Files (x86)\Kaspersky Lab
[2011/05/21 13:19:09 | 000,353,296 | —- | C] (Kaspersky Lab) – C:\Windows\SysNative\drivers\klif.sys
[2011/05/21 13:13:16 | 000,000,000 | —D | C] – C:\ProgramData\ZA_PreservedFiles
[2011/05/21 12:31:56 | 000,000,000 | —D | C] – C:\Users\Manjula\AppData\Roaming\f-secure
[2011/05/21 12:31:34 | 000,000,000 | —D | C] – C:\ProgramData\F-Secure
[2011/05/20 10:25:18 | 000,000,000 | —D | C] – C:\Users\Manjula\AppData\Local\{690FD8E3-2E0B-4AFB-9003-3DFD9AF10D6D}
[2011/05/20 10:18:54 | 000,344,576 | —- | C] (Microsoft Corporation) – C:\ProgramData\42852088.exe
[2011/05/19 16:10:34 | 000,000,000 | —D | C] – C:\Users\Manjula\AppData\Local\{A715F192-60C9-4983-AAE3-A4A0F468344F}
[2011/05/14 11:54:41 | 000,000,000 | —D | C] – C:\Users\Manjula\AppData\Roaming\Audacity
[2011/05/14 11:54:12 | 000,000,000 | —D | C] – C:\Program Files (x86)\Audacity 1.3 Beta (Unicode)
[2011/05/14 11:32:09 | 000,000,000 | —D | C] – C:\Users\Manjula\AppData\Roaming\DJ ToneXpress
[2011/05/14 11:31:56 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJ ToneXpress v4
[2011/05/14 11:31:05 | 000,000,000 | —D | C] – C:\ProgramData\Applications
[2011/05/12 06:57:41 | 000,000,000 | —D | C] – C:\Users\Manjula\AppData\Local\{B73E9519-47ED-454E-B5EF-AAF02CBF01E6}
[2011/05/11 20:44:56 | 000,142,336 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\poqexec.exe
[2011/05/11 20:44:56 | 000,123,904 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\poqexec.exe
[2011/05/11 17:33:57 | 005,509,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2011/05/11 17:33:56 | 003,957,632 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2011/05/11 17:33:56 | 003,901,824 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2011/05/11 17:33:30 | 000,324,608 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbport.sys
[2011/05/11 17:33:29 | 000,007,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\usbd.sys
[2011/05/01 21:38:52 | 000,000,000 | —D | C] – C:\Users\Manjula\AppData\Local\{606586F3-684F-4B1C-A970-66C9D3DC12D9}
[2011/04/28 06:52:35 | 000,000,000 | —D | C] – C:\Users\Manjula\AppData\Local\{F3524D55-B597-4A9A-AB49-990B34D0A323}
[2011/04/27 13:19:51 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\prevhost.exe
[2011/04/27 13:19:51 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\prevhost.exe
[2011/04/27 13:19:31 | 002,870,272 | —- | C] (Microsoft Corporation) – C:\Windows\explorer.exe
[2011/04/27 13:19:31 | 002,614,784 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\explorer.exe
[2011/04/27 13:19:10 | 000,662,528 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XpsPrint.dll
[2011/04/27 13:19:10 | 000,442,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XpsPrint.dll
[2011/04/27 13:18:37 | 002,566,144 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\esent.dll
[2011/04/27 13:18:36 | 001,686,016 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\esent.dll
[2011/04/27 13:18:36 | 000,187,264 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\storport.sys
[2011/04/27 13:18:36 | 000,107,904 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdsata.sys
[2011/04/27 13:18:36 | 000,096,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\fsutil.exe
[2011/04/27 13:18:36 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\fsutil.exe
[2011/04/27 13:18:36 | 000,027,008 | —- | C] (Advanced Micro Devices) – C:\Windows\SysNative\drivers\amdxata.sys
[2010/12/26 11:07:28 | 000,099,840 | —- | C] ( ) – C:\Windows\SysWow64\Zipdll.dll
[2010/12/26 11:07:23 | 000,094,208 | —- | C] ( ) – C:\Windows\SysWow64\Unzdll.dll
[2 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/05/21 15:22:03 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\Manjula\Desktop\OTL.exe
[2011/05/21 15:07:41 | 000,000,812 | -HS- | M] () – C:\Windows\KLIF.spi
[2011/05/21 14:58:00 | 000,000,916 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2941801158-3006526266-1162735378-1000UA.job
[2011/05/21 14:06:52 | 000,151,619 | —- | M] () – C:\Windows\SysNative\drivers\klin.dat
[2011/05/21 14:06:52 | 000,107,075 | —- | M] () – C:\Windows\SysNative\drivers\klick.dat
[2011/05/21 13:34:57 | 000,014,016 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/05/21 13:34:57 | 000,014,016 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/05/21 13:26:47 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/05/21 13:26:40 | 3190,050,816 | -HS- | M] () – C:\hiberfil.sys
[2011/05/21 13:19:09 | 000,353,296 | —- | M] (Kaspersky Lab) – C:\Windows\SysNative\drivers\klif.sys
[2011/05/20 18:09:05 | 000,000,864 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2941801158-3006526266-1162735378-1000Core.job
[2011/05/20 10:18:54 | 000,344,576 | —- | M] (Microsoft Corporation) – C:\ProgramData\42852088.exe
[2011/05/19 13:06:57 | 000,002,038 | -H– | M] () – C:\Users\Manjula\Documents\Default.rdp
[2011/04/24 13:50:32 | 000,002,054 | —- | M] () – C:\Users\Manjula\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/05/21 14:15:13 | 000,000,812 | -HS- | C] () – C:\Windows\KLIF.spi
[2011/05/21 13:21:07 | 000,151,619 | —- | C] () – C:\Windows\SysNative\drivers\klin.dat
[2011/05/21 13:21:07 | 000,107,075 | —- | C] () – C:\Windows\SysNative\drivers\klick.dat
[2011/01/20 18:06:17 | 000,000,095 | —- | C] () – C:\Users\Manjula\AppData\Local\fusioncache.dat
[2010/12/26 11:07:30 | 000,230,912 | —- | C] () – C:\Windows\SysWow64\Zipit.dll
[2010/12/26 11:07:18 | 000,314,880 | —- | C] () – C:\Windows\SysWow64\Tx32.dll
[2010/12/23 12:10:09 | 000,000,016 | —- | C] () – C:\Users\Manjula\AppData\Roaming\vedsadsat
[2010/10/08 21:28:57 | 000,900,374 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/09/10 20:17:38 | 000,819,200 | —- | C] () – C:\Windows\SysWow64\xvidcore.dll
[2010/09/10 20:17:38 | 000,180,224 | —- | C] () – C:\Windows\SysWow64\xvidvfw.dll
[2010/07/07 07:10:51 | 000,000,013 | -H– | C] () – C:\ProgramData\1ÌØ13.sys
[2010/02/16 20:15:11 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2009/09/30 06:08:15 | 000,982,220 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2009/09/30 06:08:13 | 000,134,592 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/09/30 06:08:13 | 000,092,216 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[2009/09/30 06:08:12 | 000,433,024 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2009/09/30 03:44:21 | 000,000,075 | RHS- | C] () – C:\Windows\CT4CET.bin
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2011/05/14 12:11:10 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\Audacity
[2010/10/17 11:37:48 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\Blender Foundation
[2010/03/02 20:44:42 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\CheckPoint
[2010/03/30 22:16:31 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\com.desktopreporting.flex.polaris.D45E9FAD25C0AD532F3E3C235E51131DC132F796.
1
[2011/05/14 11:32:09 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\DJ ToneXpress
[2011/05/21 12:31:56 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\f-secure
[2010/12/23 14:21:43 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\FileZilla
[2011/04/22 11:16:37 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\Hoyle
[2010/12/31 10:27:53 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\Hoyle FaceCreator
[2010/06/01 20:49:58 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\ICAClient
[2010/12/26 08:54:01 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\mypanchang.com
[2010/08/29 09:04:01 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\ooVoo Details
[2010/06/01 20:49:18 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\Runaware
[2011/02/22 20:49:44 | 000,000,000 | —D | M] – C:\Users\Manjula\AppData\Roaming\Windows Live Writer
[2011/02/05 08:56:32 | 000,032,630 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2010/12/01 18:11:14 | 000,001,024 | —- | M] () – C:\.rnd
[2009/08/18 23:17:02 | 000,106,427 | —- | M] () – C:\Build.Log
[2009/09/30 06:14:47 | 000,003,261 | RH– | M] () – C:\dell.sdr
[2011/05/21 13:26:40 | 3190,050,816 | -HS- | M] () – C:\hiberfil.sys
[2006/12/01 23:37:14 | 000,904,704 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2011/05/21 13:26:43 | 4253,405,184 | -HS- | M] () – C:\pagefile.sys
[2010/03/19 18:55:52 | 002,073,703 | —- | M] () – C:\VS_EXPBSLN_x64_enu.CAB
[2010/03/19 18:58:20 | 000,551,424 | —- | M] () – C:\VS_EXPBSLN_x64_enu.MSI

< %systemroot%\Fonts\*.com >
[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 15:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/11/10 03:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/01/30 17:31:15 | 000,000,221 | -HS- | M] () – C:\Users\Manjula\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/05/21 15:22:03 | 000,580,608 | —- | M] (OldTimer Tools) – C:\Users\Manjula\Desktop\OTL.exe
[2011/03/04 20:36:59 | 000,512,992 | —- | M] () – C:\Users\Manjula\Desktop\sdsetup.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >

Extras.txt

OTL Extras logfile created on: 5/21/2011 3:24:31 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Manjula\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 56.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 278.92 Gb Total Space | 229.79 Gb Free Space | 82.38% Space Free | Partition Type: NTFS

Computer Name: DELL-LAPTOP | User Name: Manjula | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0826F9E4-787E-481D-83E0-BC6A57B056D5}" = Microsoft SQL Server VSS Writer
"{0F37D969-1260-419E-B308-EF7D29ABDE20}" = Web Deployment Tool
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java™ 6 Update 14 (64-bit)
"{2F14965D-567B-4E59-ADEB-0A2CC1E3ADDF}" = Sql Server Customer Experience Improvement Program
"{5340A3B5-3853-4745-BED2-DD9FF5371331}" = Microsoft SQL Server 2008 Common Files
"{59996900-0E6C-45B7-8C39-C64CB98462E4}" = Microsoft Web Platform Installer 2.0
"{7ACE202B-1B01-4B43-B6AE-03D66D621CDE}" = Microsoft SQL Server 2008 RsFx Driver
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{893F27E6-D6BE-4B9F-80E6-0ADA694A31A8}" = Microsoft SQL Server 2008 Common Files
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{B40EE88B-400A-4266-A17B-E3DE64E94431}" = Microsoft SQL Server 2008 Setup Support Files
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{BBDE8A3D-64A2-43A6-95F3-C27B87DF7AC1}" = Microsoft SQL Server 2008 Native Client
"{BCA26999-EC22-3007-BB79-638913079C9A}" = Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU
"{CC8BA866-16A7-4667-BA0C-C494A1E7B2BF}" = Microsoft SQL Server 2008 Database Engine Shared
"{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF167CE3-60E7-44EA-99EC-2507C51F37AE}" = Microsoft SQL Server 2008 Database Engine Shared
"{E60B7350-EA5F-41E0-9D6F-E508781E36D2}" = Dell Dock
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FA7394B8-CE65-4F9E-AC99-F372AD365424}" = Microsoft SQL Server 2008 Database Engine Services
"{FBD367D1-642F-47CF-B79B-9BE48FB34007}" = Microsoft SQL Server 2008 Database Engine Services
"{FCADA26A-5672-31DD-BF0E-BA76ECF9B02D}" = Microsoft Help Viewer 1.0
"Dell Wireless WLAN Card Utility" = Dell Wireless WLAN Card Utility
"HDMI" = Intel® Graphics Media Accelerator Driver
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft SQL Server 10" = Microsoft SQL Server 2008 (64-bit)
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04F3038E-4120-44CC-B330-E05F737246A5}" = Roxio Update Manager
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{07766F89-EFAA-4635-86B7-636B89EA2C0D}" = Bing Bar Platform
"{08234a0d-cf39-4dca-99f0-0c5cb496da81}" = Bing Bar
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{1803A630-3C38-4D2B-9B9A-0CB37243539C}" = Microsoft ASP.NET MVC 2
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1A59064A-12A9-469F-99F6-04BF118DBCFF}" = Kaspersky PURE
"{1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}" = Microsoft Default Manager
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2012098D-EEE9-4769-8DD3-B038050854D4}" = Microsoft Silverlight 3 SDK
"{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java™ 6 Update 24
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2A2F3AE8-246A-4252-BB26-1BEB45627074}" = Microsoft SQL Server System CLR Types
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{36C9E08A-BE2B-40A0-83C5-576748F7B777}" = TestDrive Client
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A47E0EC-6DE5-416C-AD38-25EB7BA1F115}" = Advanced Web Ranking 7.2
"{4E968D9C-21A7-4915-B698-F7AEB913541D}" = Microsoft SQL Server 2008 R2 Management Objects
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{597E70FF-7C46-4EED-8092-91B7C2E0529D}" = Google SketchUp 7
"{5BDFAB82-060E-438B-AB4F-A2331B2294C0}" = Microsoft ASP.NET MVC 2 - VWD Express 2010 Tools
"{5C47C8B6-77FF-4FC7-A388-66FCF9CFC24C}" = Snagit 9.1.3
"{5D112C61-C8D0-4718-8DD7-B9115EB9AF90}" = LogMeIn
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A86554B-8928-30E4-A53C-D7337689134D}" = Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{85076DFF-7A17-3566-9CC0-488E6E6D4494}" = Microsoft Visual Web Developer 2010 Express - ENU
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1.2
"{ACE28263-76A4-4BF5-B6F4-8BD719595969}" = Microsoft SQL Server Database Publishing Wizard 1.4
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}" = Roxio Burn
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B87C6F3B-E650-4722-9682-941F077B6AB9}" = Nakshatra Astrology Software for Windows by mypanchang.com
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C688457E-03FD-4941-923B-A27F4D42A7DD}" = Microsoft SQL Server 2008 Browser
"{CB2094F9-F8DA-CC88-DF1D-6BAE7E20A915}" = Desktop Reporting - Polaris
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}" = WinZip 14.5
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF0EDB56-BBF6-3C9F-9C50-2E3B3D444641}" = Google Talk Plugin
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D65F8E34-C050-4E6C-86DB-D2B9075749A0}" = Windows Live Sync ActiveX Control for Remote Connections
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F47C37A4-7189-430A-B81D-739FF8A7A554}" = Consumer In-Home Service Agreement
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Amazon Games & Software Downloader_is1" = Amazon Games & Software Downloader
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.13 (Unicode)
"Blender" = Blender (remove only)
"CoffeeCup Flash FireStarter" = CoffeeCup Flash FireStarter
"CoffeeCup Free Zip Wizard" = CoffeeCup Free Zip Wizard
"com.desktopreporting.flex.polaris.D45E9FAD25C0AD532F3E3C235E51131DC132F796.
1" = Desktop Reporting - Polaris
"Dell Webcam Central" = Dell Webcam Central
"FileZilla Client" = FileZilla Client 3.3.5.1
"GoToAssist" = GoToAssist 8.0.0.514
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"Hoyle Casino Games 2011" = Hoyle Casino Games 2011 (remove only)
"InstallWIX_{1A59064A-12A9-469F-99F6-04BF118DBCFF}" = Kaspersky PURE
"Jagannatha Hora_is1" = Jagannatha Hora 7.4
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft Visual Web Developer 2010 Express - ENU" = Microsoft Visual Web Developer 2010 Express - ENU
"Mozilla Firefox 4.0 (x86 en-US)" = Mozilla Firefox 4.0 (x86 en-US)
"ShipWorks_is1" = ShipWorks® 2.9.65
"Super Bounce Out_is1" = Super Bounce Out
"TR-2.2.1" = ThinkingRock-2.2.1
"WinLiveSuite" = Windows Live Essentials
"Xvid_is1" = Xvid 1.2.2 final uninstall
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"Google Chrome" = Google Chrome
"GoToMeeting" = GoToMeeting 4.5.0.456
"Shapeways Editor" = Shapeways Editor

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

Error - 4/14/2011 4:44:18 AM | Computer Name = Dell-Laptop | Source = .NET Runtime | ID = 1023
Description =

[ OSession Events ]
Error - 5/2/2010 11:45:09 AM | Computer Name = Dell-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 41
seconds with 0 seconds of active time. This session ended with a crash.

Error - 5/2/2010 6:37:02 PM | Computer Name = Dell-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 704
seconds with 120 seconds of active time. This session ended with a crash.

Error - 5/2/2010 6:37:12 PM | Computer Name = Dell-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3
seconds with 0 seconds of active time. This session ended with a crash.

Error - 5/3/2010 8:34:40 AM | Computer Name = Dell-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 120
seconds with 60 seconds of active time. This session ended with a crash.

Error - 5/3/2010 8:34:50 AM | Computer Name = Dell-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2
seconds with 0 seconds of active time. This session ended with a crash.

Error - 5/8/2010 9:03:42 PM | Computer Name = Dell-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 131864
seconds with 4620 seconds of active time. This session ended with a crash.

Error - 5/8/2010 9:05:16 PM | Computer Name = Dell-Laptop | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 35
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 1/1/2011 12:54:17 PM | Computer Name = Dell-Laptop | Source = Service Control Manager | ID = 7023
Description = The LogMeIn service terminated with the following error: %%10013

Error - 1/1/2011 12:54:47 PM | Computer Name = Dell-Laptop | Source = Service Control Manager | ID = 7023
Description = The LogMeIn service terminated with the following error: %%10013

Error - 1/1/2011 12:55:17 PM | Computer Name = Dell-Laptop | Source = Service Control Manager | ID = 7023
Description = The LogMeIn service terminated with the following error: %%10013

Error - 1/1/2011 12:55:47 PM | Computer Name = Dell-Laptop | Source = Service Control Manager | ID = 7023
Description = The LogMeIn service terminated with the following error: %%10013

Error - 1/1/2011 12:56:17 PM | Computer Name = Dell-Laptop | Source = Service Control Manager | ID = 7023
Description = The LogMeIn service terminated with the following error: %%10013

Error - 1/1/2011 12:56:47 PM | Computer Name = Dell-Laptop | Source = Service Control Manager | ID = 7023
Description = The LogMeIn service terminated with the following error: %%10013

Error - 1/1/2011 12:57:17 PM | Computer Name = Dell-Laptop | Source = Service Control Manager | ID = 7023
Description = The LogMeIn service terminated with the following error: %%10013

Error - 1/1/2011 12:57:48 PM | Computer Name = Dell-Laptop | Source = Service Control Manager | ID = 7023
Description = The LogMeIn service terminated with the following error: %%10013

Error - 1/10/2011 10:50:46 AM | Computer Name = Dell-Laptop | Source = iaStor | ID = 262153
Description = The device, \Device\Ide\iaStor0, did not respond within the timeout
period.

Error - 1/10/2011 10:50:49 AM | Computer Name = Dell-Laptop | Source = volsnap | ID = 393230
Description = The shadow copies of volume C: were aborted because of an IO failure
on volume C:.

< End of report >

oldman960

Post #2May 22, 2011, 8:54 PM UTC

Hi saicool171, welcome to the forum.

To make cleaning this machine easier

Please do not uninstall/install any programs unless asked to
It is more difficult when files/programs are appearing in/disappearing from the logs.
Please do not run any scans other than those requested
Please follow all instructions in the order posted
All logs/reports, etc.. must be posted in Notepad. Please ensure that word wrap is unchecked. In notepad click format, uncheck word wrap if it is checked.
Do not attach any logs/reports, etc.. unless specifically requested to do so.
If you have problems with or do not understand the instructions, Please ask before continuing.
Please stay with this thread until given the All Clear. A absence of symptoms does not mean a clean machine.

Please download UnHide.exe by Grinler and save it to your desktop.

Right click unhide.exe and click "Run as Administrator" to run it. When the tool finishes check to see if the programs are now visible.

Next
I need some information on a file. We will use Virustotal Please submit these files for analysis

To submit a file to virustotal

copy and paste the following into the upload a file box

C:\ProgramData\42852088.exe

scroll down a bit and click "send file", wait for the results and post them in your next reply.

Please note that sometimes the scans take a few minutes.

Next

Please open OTL

Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, click the None button near the top (it may looked greyed out)
In the window under Custom Scans/Fixes copy and paste the following

C:\Users\Manjula\AppData\Local\{690FD8E3-2E0B-4AFB-9003-3DFD9AF10D6D}\*.* /s
C:\Users\Manjula\AppData\Local\{A715F192-60C9-4983-AAE3-A4A0F468344F}\*.* /s
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open a notepad window, OTL.Txt. Please post this log.

Please post back with

VirusTotal results
OTL.txt

Is the start menu back?

Thanks

saicool171

Post #3May 23, 2011, 12:33 AM UTC

First, Thank you for your time. Appreciate it.

I ran unhide.exe - my start menu has not been reset. Still shows only firefox. As suggested by unhide, I also turned off my anti-virus program and ran it with no success.

—————————————-
The result of virustotal

Antivirus Version Last update Result
AhnLab-V3 2011.05.23.00 2011.05.22 -
AntiVir 7.11.8.93 2011.05.22 -
Antiy-AVL 2.0.3.7 2011.05.23 -
Avast 4.8.1351.0 2011.05.22 -
Avast5 5.0.677.0 2011.05.22 Win32:FakeAV-BUC
AVG 10.0.0.1190 2011.05.22 FakeAlert.ACX
BitDefender 7.2 2011.05.23 Gen:Variant.Kazy.23824
CAT-QuickHeal 11.00 2011.05.22 -
ClamAV 0.97.0.0 2011.05.22 -
Commtouch 5.3.2.6 2011.05.22 -
Comodo 8799 2011.05.23 TrojWare.Win32.Trojan.Agent.Gen
DrWeb 5.0.2.03300 2011.05.23 -
eSafe 7.0.17.0 2011.05.22 -
eTrust-Vet 36.1.8339 2011.05.20 -
F-Prot 4.6.2.117 2011.05.22 -
F-Secure 9.0.16440.0 2011.05.22 Gen:Variant.Kazy.23824
Fortinet 4.2.257.0 2011.05.22 -
GData 22 2011.05.23 Gen:Variant.Kazy.23824
Ikarus T3.1.1.104.0 2011.05.22 Virus.Win32.CeeInject
Jiangmin 13.0.900 2011.05.22 -
K7AntiVirus 9.103.4693 2011.05.20 -
Kaspersky 9.0.0.837 2011.05.23 -
McAfee 5.400.0.1158 2011.05.23 -
McAfee-GW-Edition 2010.1D 2011.05.22 -
Microsoft 1.6903 2011.05.22 VirTool:Win32/CeeInject.W
NOD32 6142 2011.05.23 a variant of Win32/Kryptik.NZN
Norman 6.07.07 2011.05.22 -
nProtect 2011-05-22.01 2011.05.22 Gen:Variant.Kazy.23824
Panda 10.0.3.5 2011.05.22 Suspicious file
PCTools 7.0.3.5 2011.05.19 -
Prevx 3.0 2011.05.23 -
Rising 23.58.06.03 2011.05.22 -
Sophos 4.65.0 2011.05.22 Mal/Generic-L
SUPERAntiSpyware 4.40.0.1006 2011.05.23 Trojan.Agent/Gen-FraudAV
Symantec 20111.1.0.186 2011.05.23 Trojan.Gen.2
TheHacker 6.7.0.1.202 2011.05.20 -
TrendMicro 9.200.0.1012 2011.05.22 -
TrendMicro-HouseCall 9.200.0.1012 2011.05.23 -
VBA32 3.12.16.0 2011.05.20 -
VIPRE 9360 2011.05.23 -
ViRobot 2011.5.21.4472 2011.05.22 -
VirusBuster 13.6.367.0 2011.05.22 -
MD5: fc7a836dfc685cdc2dab0d188c44e113
SHA1: 262800a5b2198669416e4640af8f66d57d1837b7
SHA256: 0b78ec0ca47169c64caad277e14185e1932b9fc55c1e23d847d681e7ac09488c
File size: 344576 bytes
Scan date: 2011-05-23 00:05:36 (UTC)

——————————————————-
OTL.txt

OTL logfile created on: 5/22/2011 7:32:54 PM - Run 3
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Manjula\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 57.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 71.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 278.92 Gb Total Space | 230.77 Gb Free Space | 82.74% Space Free | Partition Type: NTFS

Computer Name: DELL-LAPTOP | User Name: Manjula | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Custom Scans ==========

< C:\Users\Manjula\AppData\Local\{690FD8E3-2E0B-4AFB-9003-3DFD9AF10D6D}\*.* /s >

< C:\Users\Manjula\AppData\Local\{A715F192-60C9-4983-AAE3-A4A0F468344F}\*.* /s >

< End of report >

oldman960

Post #4May 23, 2011, 4:49 AM UTC last edited May 23, 2011, 5:24 AM UTC

Hi saicool171,

Next, Right click on OTL.exe and chose Run as Administrator to run it

Under the Custom Scans/Fixes box at the bottom, paste in the following
Do Not copy the word CODE
please note the fix starts with the :

:Services

:Files
C:\Users\Manjula\AppData\Local\{690FD8E3-2E0B-4AFB-9003-3DFD9AF10D6D}
C:\Users\Manjula\AppData\Local\{A715F192-60C9-4983-AAE3-A4A0F468344F}
C:\ProgramData\42852088.exe

:Commands
[createrestorepoint]

Then click the Run Fix button at the top

Let the program run unhindered
Please save the resulting log to be posted in your next reply.

Please post the OTL fix log.

Next

Please open OTL if it is not opened.

Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, click the None button near the top (it may looked greyed out)
In the window under Custom Scans/Fixes copy and paste the following

%Temp%\smtmp\*.* /s
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open a notepad window, OTL.Txt. Please post this log.

Thanks

saicool171

Post #5May 23, 2011, 12:17 PM UTC

Hi Oldman960,

Thanks again for your time. The reports are below.

The first OTL report/log from 'run fix':

========== SERVICES/DRIVERS ==========
========== FILES ==========
C:\Users\Manjula\AppData\Local\{690FD8E3-2E0B-4AFB-9003-3DFD9AF10D6D} folder moved successfully.
C:\Users\Manjula\AppData\Local\{A715F192-60C9-4983-AAE3-A4A0F468344F} folder moved successfully.
C:\ProgramData\42852088.exe moved successfully.
========== COMMANDS ==========
Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.22.3 log created on 05232011_070925

OTL.txt from the scan:

OTL logfile created on: 5/23/2011 7:11:37 AM - Run 4
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Manjula\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 59.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 73.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 278.92 Gb Total Space | 230.59 Gb Free Space | 82.67% Space Free | Partition Type: NTFS

Computer Name: DELL-LAPTOP | User Name: Manjula | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Custom Scans ==========

< %Temp%\smtmp\*.* /s >
[2009/07/14 00:01:14 | 000,001,282 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Default Programs.lnk
[2009/07/14 00:01:14 | 000,000,442 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\desktop.ini
[2009/09/30 03:46:54 | 000,002,675 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Software Updates.lnk
[2009/07/13 23:49:40 | 000,001,266 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Windows Update.lnk
[2009/09/30 03:33:50 | 000,002,441 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Adobe Reader 9.lnk
[2010/05/15 21:15:20 | 000,002,519 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Apple Software Update.lnk
[2011/05/14 11:54:28 | 000,001,162 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Audacity 1.3 Beta (Unicode).lnk
[2010/01/30 16:11:06 | 000,001,979 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Help Documentation.lnk
[2011/02/19 18:42:34 | 000,001,748 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\desktop.ini
[2010/11/20 15:31:36 | 000,001,147 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Jagannatha Hora.lnk
[2010/12/01 18:11:18 | 000,000,990 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\LogMeIn.lnk
[2009/09/30 05:26:09 | 000,001,345 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Media Center.lnk
[2010/08/09 18:14:12 | 000,001,382 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Default Manager.lnk
[2009/09/30 03:34:52 | 000,002,557 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
[2010/10/08 21:26:38 | 000,002,061 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Web Platform Installer.lnk
[2010/02/01 04:08:21 | 000,001,149 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works Task Launcher.lnk
[2011/04/24 13:49:52 | 000,001,152 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Mozilla Firefox.lnk
[2009/09/30 03:42:21 | 000,002,084 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\PowerDVD DX.lnk
[2009/07/13 23:57:08 | 000,001,330 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Sidebar.lnk
[2009/07/13 23:57:09 | 000,001,352 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Anytime Upgrade.lnk
[2009/09/30 05:26:07 | 000,001,326 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows DVD Maker.lnk
[2009/07/13 23:54:59 | 000,001,210 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Fax and Scan.lnk
[2011/02/19 18:41:49 | 000,001,460 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Mail.lnk
[2011/02/19 18:41:16 | 000,002,488 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Messenger.lnk
[2011/02/19 18:42:34 | 000,001,307 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Movie Maker.lnk
[2011/02/19 18:42:22 | 000,001,376 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Photo Gallery.lnk
[2009/07/14 00:09:29 | 000,001,547 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Media Player.lnk
[2009/07/13 23:57:08 | 000,001,246 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\XPS Viewer.lnk
[2009/07/13 23:55:00 | 000,001,230 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Calculator.lnk
[2009/09/30 05:26:10 | 000,001,726 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Desktop.ini
[2009/07/13 23:54:23 | 000,001,266 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\displayswitch.lnk
[2009/09/30 05:26:10 | 000,001,364 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Math Input Panel.lnk
[2009/09/30 05:26:06 | 000,001,238 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Mobility Center.lnk
[2009/07/13 23:54:32 | 000,001,242 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Paint.lnk
[2009/07/13 23:53:55 | 000,001,367 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Remote Desktop Connection.lnk
[2009/09/30 05:26:08 | 000,001,272 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Snipping Tool.lnk
[2009/07/13 23:57:08 | 000,001,330 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sound Recorder.lnk
[2009/09/30 05:26:09 | 000,001,351 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sticky Notes.lnk
[2009/07/13 23:54:58 | 000,001,254 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sync Center.lnk
[2009/07/13 23:57:09 | 000,001,579 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Welcome Center.lnk
[2009/07/13 23:54:58 | 000,001,322 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Wordpad.lnk
[2009/07/13 23:57:07 | 000,000,370 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Desktop.ini
[2009/07/13 23:57:07 | 000,001,388 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Speech Recognition.lnk
[2009/07/13 23:55:00 | 000,001,248 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Character Map.lnk
[2009/07/13 23:57:09 | 000,001,338 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Desktop.ini
[2009/07/13 23:54:25 | 000,001,290 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\dfrgui.lnk
[2009/07/13 23:54:58 | 000,001,252 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Disk Cleanup.lnk
[2009/07/13 23:53:50 | 000,001,242 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Resource Monitor.lnk
[2009/07/13 23:53:33 | 000,001,250 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Information.lnk
[2009/07/13 23:54:57 | 000,001,246 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Restore.lnk
[2009/07/13 23:54:29 | 000,001,268 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Task Scheduler.lnk
[2009/07/13 23:57:09 | 000,001,320 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk
[2009/07/13 23:57:09 | 000,001,316 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer.lnk
[2009/09/30 05:26:09 | 000,000,343 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Desktop.ini
[2009/09/30 05:26:06 | 000,001,436 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\ShapeCollector.lnk
[2009/09/30 05:26:05 | 000,001,386 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\TabTip.lnk
[2009/09/30 05:26:09 | 000,001,316 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Windows Journal.lnk
[2009/07/13 23:57:13 | 000,000,216 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\desktop.ini
[2009/07/14 00:32:31 | 000,001,989 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk
[2009/07/13 23:57:13 | 000,001,468 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk
[2009/07/13 23:57:13 | 000,001,468 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk
[2009/07/14 00:32:31 | 000,001,899 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
[2009/07/13 23:57:13 | 000,001,242 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Component Services.lnk
[2009/07/13 23:54:21 | 000,001,294 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Computer Management.lnk
[2009/07/13 23:53:52 | 000,001,270 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Data Sources (ODBC).lnk
[2009/07/13 23:57:13 | 000,001,674 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\desktop.ini
[2009/07/13 23:54:29 | 000,001,298 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Event Viewer.lnk
[2009/07/13 23:54:22 | 000,001,274 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\iSCSI Initiator.lnk
[2009/07/13 23:53:33 | 000,001,268 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
[2011/01/20 18:03:41 | 000,001,330 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk
[2011/01/20 18:03:41 | 000,001,381 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk
[2009/07/13 23:53:50 | 000,001,232 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Performance Monitor.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\services.lnk
[2009/07/13 23:53:33 | 000,001,246 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\System Configuration.lnk
[2009/07/13 23:54:29 | 000,001,262 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Task Scheduler.lnk
[2009/07/13 23:53:58 | 000,001,274 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk
[2009/07/14 00:32:31 | 000,002,741 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows PowerShell Modules.lnk
[2010/04/20 08:15:10 | 000,001,218 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Advanced Link Manager.lnk
[2010/04/20 08:15:10 | 000,001,213 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Advanced Web Ranking.lnk
[2010/04/20 08:15:10 | 000,001,824 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Uninstall.lnk
[2010/05/22 18:18:24 | 000,001,013 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon Games\Super Bounce Out\Uninstall Super Bounce Out.lnk
[2010/05/22 18:18:24 | 000,000,878 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon Games\Super Bounce Out\ Super Bounce Out.lnk
[2010/05/22 14:51:06 | 000,002,273 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Amazon Games & Software Downloader.lnk
[2010/05/22 14:51:06 | 000,002,106 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Download Folder.lnk
[2010/05/22 14:51:06 | 000,000,230 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Go to Your Games & Software Library.url
[2010/05/22 14:51:06 | 000,000,220 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Help.url
[2010/05/22 14:51:07 | 000,002,267 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Uninstall Amazon Games & Software Downloader.lnk
[2010/12/26 08:46:52 | 000,002,727 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\astrology by mypanchang\nakshatra.exe.lnk
[2010/07/07 07:10:42 | 000,001,240 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\CoffeeCup Software\CoffeeCup Flash FireStarter.lnk
[2010/07/07 06:59:42 | 000,002,109 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\CoffeeCup Software\CoffeeCup Free Zip Wizard.lnk
[2009/09/30 03:35:27 | 000,001,862 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell DataSafe\Dell DataSafe Local Backup.lnk
[2009/09/30 03:38:04 | 000,002,781 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\About Dell Support Center.lnk
[2009/09/30 03:38:04 | 000,002,675 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center Alerts.lnk
[2009/09/30 03:38:04 | 000,002,691 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center User Settings.lnk
[2009/09/30 03:38:04 | 000,002,581 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center.lnk
[2009/09/30 03:43:33 | 000,002,201 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Dell Webcam Central.lnk
[2009/09/30 03:44:19 | 000,002,222 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\License Agreement.lnk
[2009/09/30 03:44:19 | 000,002,412 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Live! Cam Avatar Creator Help.lnk
[2009/09/30 03:44:18 | 000,002,398 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Live! Cam Avatar Creator.lnk
[2009/09/30 03:44:19 | 000,002,215 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Read Me.lnk
[2009/09/30 03:44:20 | 000,002,635 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Uninstall Live! Cam Avatar Creator.lnk
[2009/09/30 03:31:57 | 000,002,055 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\Dell Wireless WLAN Card Readme.lnk
[2009/09/30 03:31:57 | 000,001,955 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\Dell Wireless WLAN Card Utility.lnk
[2009/09/30 03:31:57 | 000,000,173 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\desktop.ini
[2009/09/30 03:47:49 | 000,002,615 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Dell Dock.lnk
[2009/09/30 03:48:53 | 000,001,137 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Dell Software & Utilities\Dell Getting Started Guide.lnk
[2009/09/30 03:35:11 | 000,000,735 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Service Agreements\InHome.pdf.lnk
[2010/03/30 22:16:23 | 000,001,035 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Desktop Reporting\Polaris.lnk
[2010/12/23 14:10:28 | 000,001,213 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\FileZilla FTP Client\FileZilla.lnk
[2010/12/23 14:10:28 | 000,001,120 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\FileZilla FTP Client\Uninstall.lnk
[2010/05/06 19:49:55 | 000,000,143 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\GameHouse\Visit GameHouse.url
[2009/09/30 05:26:06 | 000,000,352 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Chess.lnk
[2009/09/30 05:26:06 | 000,001,128 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Desktop.ini
[2009/07/13 23:55:00 | 000,000,364 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\FreeCell.lnk
[2009/07/13 23:54:59 | 000,000,258 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\GameExplorer.lnk
[2009/07/13 23:57:12 | 000,000,356 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Hearts.lnk
[2009/09/30 05:26:06 | 000,000,474 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Backgammon.lnk
[2009/09/30 05:26:06 | 000,000,470 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Checkers.lnk
[2009/09/30 05:26:06 | 000,000,466 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Spades.lnk
[2009/09/30 05:26:06 | 000,000,360 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Mahjong.lnk
[2009/07/13 23:57:12 | 000,000,376 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Minesweeper.lnk
[2009/07/13 23:57:12 | 000,000,370 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\More Games from Microsoft.lnk
[2009/07/13 23:57:12 | 000,000,378 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Purble Place.lnk
[2009/07/13 23:55:01 | 000,000,368 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Solitaire.lnk
[2009/07/13 23:57:12 | 000,000,392 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Spider Solitaire.lnk
[2010/03/14 10:30:52 | 000,002,045 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Google SketchUp 7\Google SketchUp.lnk
[2010/12/31 09:49:46 | 000,002,429 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyle®\Hoyle Casino Games 2011\Buy other Hoyle products.lnk
[2010/12/31 09:49:47 | 000,002,163 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyle®\Hoyle Casino Games 2011\Hoyle Casino Games 2011 Manual.lnk
[2010/12/31 09:49:45 | 000,002,207 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyle®\Hoyle Casino Games 2011\Hoyle Casino Games 2011.lnk
[2010/12/31 09:49:46 | 000,001,958 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyle®\Hoyle Casino Games 2011\Uninstall Hoyle Casino Games 2011.lnk
[2009/09/30 03:33:23 | 000,001,198 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Intel® Matrix Storage Manager\Intel® Matrix Storage Console.lnk
[2009/07/13 23:57:07 | 000,001,304 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Backup and Restore Center.lnk
[2009/07/13 23:57:07 | 000,001,248 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Create Recovery Disc.lnk
[2009/07/13 23:57:09 | 000,000,606 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Desktop.ini
[2009/07/13 23:57:09 | 000,001,212 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Remote Assistance.lnk
[2011/03/02 23:45:11 | 000,001,133 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk
[2011/03/02 23:45:11 | 000,001,133 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk
[2011/03/02 23:45:11 | 000,001,157 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Uninstall Malwarebytes' Anti-Malware.lnk
[2010/02/04 21:40:53 | 000,001,194 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office Live Add-in\Office Live Add-in Help.lnk
[2010/02/04 21:40:53 | 000,001,154 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office Live Add-in\Office Live Workspace.lnk
[2010/01/30 17:21:31 | 000,002,655 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Excel 2007.lnk
[2010/01/30 17:21:31 | 000,002,619 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office OneNote 2007.lnk
[2010/01/30 17:21:31 | 000,002,645 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office PowerPoint 2007.lnk
[2010/01/30 17:21:31 | 000,002,693 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Word 2007.lnk
[2010/01/30 17:21:31 | 000,002,647 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Digital Certificate for VBA Projects.lnk
[2010/01/30 17:21:31 | 000,002,627 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Clip Organizer.lnk
[2010/01/30 17:21:31 | 000,002,527 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office 2007 Language Settings.lnk
[2010/01/30 17:21:31 | 000,002,625 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Diagnostics.lnk
[2010/01/30 17:21:31 | 000,002,605 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Picture Manager.lnk
[2010/10/08 21:41:22 | 000,001,338 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Silverlight 3 SDK\Welcome.lnk
[2011/04/22 03:01:47 | 000,002,269 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk
[2010/10/08 21:46:57 | 000,001,179 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Import and Export Data (64-bit).lnk
[2010/10/08 21:46:09 | 000,000,858 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Configuration Manager.lnk
[2010/10/08 21:46:58 | 000,001,103 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Error and Usage Reporting.lnk
[2010/10/08 21:44:37 | 000,001,360 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Installation Center (64-bit).lnk
[2010/10/08 21:38:12 | 000,001,398 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Visual Studio 2010 Express\Microsoft Visual Web Developer 2010 Express.lnk
[2010/10/08 21:38:11 | 000,000,200 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Visual Studio 2010 Express\Try Visual Studio 2010 Professional.url
[2009/09/30 03:34:42 | 000,002,577 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Getting Started.lnk
[2009/09/30 03:34:42 | 000,002,597 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Calendar.lnk
[2009/09/30 03:34:42 | 000,002,605 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Database.lnk
[2009/09/30 03:34:42 | 000,002,647 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Portfolio.lnk
[2010/12/16 04:04:33 | 000,002,629 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Spreadsheet.lnk
[2010/02/01 04:08:21 | 000,001,155 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Task Launcher.lnk
[2009/09/30 03:34:42 | 000,002,649 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Word Processor.lnk
[2010/08/29 09:02:49 | 000,001,877 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ooVoo\ooVoo.lnk
[2010/05/15 21:16:15 | 000,002,441 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\About QuickTime.lnk
[2010/05/15 21:16:15 | 000,002,471 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\PictureViewer.lnk
[2010/05/15 21:16:15 | 000,002,441 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime Player.lnk
[2010/05/15 21:16:15 | 000,001,818 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\Uninstall QuickTime.lnk
[2009/09/30 03:47:05 | 000,001,027 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Roxio\Roxio Burn.lnk
[2011/01/20 18:06:11 | 000,000,977 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ShipWorks\Interapptive ShipWorks.lnk
[2011/01/20 18:06:11 | 000,001,859 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ShipWorks\ShipWorks Help.lnk
[2010/02/16 20:10:26 | 000,002,533 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Skype\Skype.lnk
[2010/01/30 18:30:37 | 000,002,551 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Snagit 9\Snagit 9 Editor.lnk
[2010/01/30 18:30:37 | 000,002,551 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Snagit 9\Snagit 9.lnk
[2011/03/04 20:43:27 | 000,001,171 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\File Shredder.lnk
[2011/03/04 20:43:27 | 000,001,282 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Spybot - Search & Destroy.lnk
[2011/03/04 20:43:27 | 000,001,310 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Tutorial.lnk
[2011/03/04 20:43:27 | 000,001,298 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Uninstall Spybot-S&D.lnk
[2011/03/04 20:43:27 | 000,001,212 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Update Spybot-S&D.lnk
[2011/02/19 18:42:41 | 000,000,095 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live\desktop.ini
[2011/02/19 18:42:41 | 000,002,350 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live\Windows Live Writer.lnk
[2010/05/16 08:40:26 | 000,001,657 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\WinZip\Help Manual.lnk
[2010/05/16 08:40:25 | 000,002,267 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\WinZip\WinZip 14.5.lnk
[2010/09/10 20:17:39 | 000,001,654 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Configure Decoder.lnk
[2010/09/10 20:17:39 | 000,001,664 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Configure Encoder.lnk
[2010/09/10 20:17:39 | 000,001,009 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Doom9's Xvid Forum.lnk
[2010/09/10 20:17:39 | 000,001,083 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Koepi's Homepage (Updates).lnk
[2010/09/10 20:17:39 | 000,001,013 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Xvid Homepage.lnk
[2010/09/10 20:17:38 | 000,001,042 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Koepi's OGMCalc.lnk
[2010/09/10 20:17:39 | 000,000,993 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Nic's FourCC changer.lnk
[2010/09/10 20:17:38 | 000,000,997 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Nic's MiniCalc.lnk
[2010/09/10 20:17:38 | 000,001,051 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Release Notes.lnk
[2010/09/10 20:17:39 | 000,001,074 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Some quantization matrices.lnk
[2010/09/10 20:17:39 | 000,001,030 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\StatsReader 2.1.lnk
[2010/09/10 20:17:39 | 000,001,028 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\StatsReader Notes.lnk
[2010/09/10 20:17:39 | 000,001,859 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Uninstall Xvid.lnk
[2010/09/10 20:17:39 | 000,001,960 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Vidc.Cleaner.lnk
[2010/08/15 07:43:56 | 000,001,159 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Yahoo! Messenger\Yahoo! Messenger.lnk
[2011/03/04 09:08:51 | 000,001,085 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\Readme.lnk
[2011/03/04 09:08:51 | 000,002,052 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\Uninstall ZoneAlarm Security.lnk
[2011/03/04 09:08:51 | 000,001,342 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\ZoneAlarm Diagnostics Tool.lnk
[2011/03/04 09:08:51 | 000,001,090 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\ZoneAlarm Security.lnk
[2010/02/17 08:23:19 | 000,000,086 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\3\desktop.ini
[2010/05/28 18:08:21 | 000,002,389 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Google Chrome.lnk
[2011/04/24 13:50:32 | 000,001,152 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Mozilla Firefox.lnk
[2009/07/13 23:49:38 | 000,001,228 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Windows Explorer.lnk
[2010/04/20 08:15:10 | 000,001,200 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Advanced Link Manager.lnk
[2010/04/20 08:15:10 | 000,001,195 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Advanced Web Ranking.lnk
[2010/07/07 06:59:57 | 000,001,086 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\CoffeeCup Free Zip Wizard.lnk
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\desktop.ini
[2010/03/14 10:30:52 | 000,002,027 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Google SketchUp 7.lnk
[2010/12/31 09:49:47 | 000,002,183 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Hoyle Casino Games 2011.lnk
[2010/11/20 15:31:36 | 000,001,135 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Jagannatha Hora.lnk
[2011/03/02 23:45:11 | 000,001,115 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Malwarebytes' Anti-Malware.lnk
[2011/04/24 13:49:52 | 000,001,140 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Mozilla Firefox.lnk
[2010/12/26 08:46:52 | 000,002,709 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\nakshatra.exe.lnk
[2010/08/29 09:02:49 | 000,001,859 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\ooVoo.lnk
[2010/02/16 20:10:26 | 000,002,515 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Skype.lnk
[2010/08/15 07:43:56 | 000,001,141 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Yahoo! Messenger.lnk

< End of report >

oldman960

Post #6May 23, 2011, 7:06 PM UTC

Hi saicool171,

Next, Right click on OTL.exe and chose Run as Administrator to run it

Under the Custom Scans/Fixes box at the bottom, paste in the following
Do Not copy the word CODE
please note the fix starts with the :

:Services

:Files
xcopy %Temp%\smtmp\1 "%AllUsersProfile%\Start Menu" /H /I /S /Y /C
xcopy %Temp%\smtmp\4 "%AllUsersProfile%\Desktop" /H /I /S /Y /C
xcopy %Temp%\smtmp\3 "%AppData%\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar" /H /I /S /Y /C

:Commands
[createrestorepoint]

Then click the Run Fix button at the top

Let the program run unhindered
Please save the resulting log to be posted in your next reply.

Please post the OTL fix log.

All icons and programs back now?

Thanks

saicool171

Post #7May 23, 2011, 11:17 PM UTC

Hi oldman960,

I ran the fix as instructed. The log is below.

The start menu still doesn't have the icons and links back - just the firefox which is the only one that didn't get wiped out.

Thanks again for your time,

OTL Fix log:

========== SERVICES/DRIVERS ==========
========== FILES ==========
< xcopy %Temp%\smtmp\1 "%AllUsersProfile%\Start Menu" /H /I /S /Y /C >
0 File(s) copied
C:\Users\Manjula\Desktop\cmd.bat deleted successfully.
C:\Users\Manjula\Desktop\cmd.txt deleted successfully.
< xcopy %Temp%\smtmp\4 "%AllUsersProfile%\Desktop" /H /I /S /Y /C >
0 File(s) copied
C:\Users\Manjula\Desktop\cmd.bat deleted successfully.
C:\Users\Manjula\Desktop\cmd.txt deleted successfully.
< xcopy %Temp%\smtmp\3 "%AppData%\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar" /H /I /S /Y /C >
C:\Users\Manjula\AppData\Local\Temp\smtmp\3\desktop.ini
C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Google Chrome.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Mozilla Firefox.lnk
C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Windows Explorer.lnk
4 File(s) copied
C:\Users\Manjula\Desktop\cmd.bat deleted successfully.
C:\Users\Manjula\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.22.3 log created on 05232011_181002

oldman960

Post #8May 24, 2011, 1:03 AM UTC

Hi

Not sure why the files weren't copied. Let's see if they are still there

Next

Please open OTL .

Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, click the None button near the top (it may looked greyed out)
In the window under Custom Scans/Fixes copy and paste the following

%Temp%\smtmp\*.* /s
Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open a notepad window, OTL.Txt. Please post this log.

Thanks

saicool171

Post #9May 24, 2011, 11:58 AM UTC

When I try to start up my laptop the screen goes blank. When I restart - I get the Windows Resume Loader message with the following message: ————————————- The last attempt to resume the system from its previous location failed. Attempt to resume again? (Use the arrow keys to highlight your choice) Continue with system resume Delete restoration data and proceed to system boot menu ————————————- Continue with system resume kicks back the same message. But I wanted to check in before I delete restoration data. Please advise. Thanks again for your time. Appreciate it.

saicool171

Post #10May 24, 2011, 12:07 PM UTC

Hi,

The system resumed - it seemed like it had 'hung' on 'Continue with system resume' but it finally loaded.

I ran the requested OTL scan. The report is below:

OTL logfile created on: 5/24/2011 7:03:22 AM - Run 5
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Manjula\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 65.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 77.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 278.92 Gb Total Space | 230.26 Gb Free Space | 82.55% Space Free | Partition Type: NTFS

Computer Name: DELL-LAPTOP | User Name: Manjula | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Custom Scans ==========

< %Temp%\smtmp\*.*/s >
[2009/07/14 00:01:14 | 000,001,282 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Default Programs.lnk
[2009/07/14 00:01:14 | 000,000,442 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\desktop.ini
[2009/09/30 03:46:54 | 000,002,675 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Software Updates.lnk
[2009/07/13 23:49:40 | 000,001,266 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Windows Update.lnk
[2009/09/30 03:33:50 | 000,002,441 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Adobe Reader 9.lnk
[2010/05/15 21:15:20 | 000,002,519 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Apple Software Update.lnk
[2011/05/14 11:54:28 | 000,001,162 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Audacity 1.3 Beta (Unicode).lnk
[2010/01/30 16:11:06 | 000,001,979 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Help Documentation.lnk
[2011/02/19 18:42:34 | 000,001,748 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\desktop.ini
[2010/11/20 15:31:36 | 000,001,147 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Jagannatha Hora.lnk
[2010/12/01 18:11:18 | 000,000,990 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\LogMeIn.lnk
[2009/09/30 05:26:09 | 000,001,345 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Media Center.lnk
[2010/08/09 18:14:12 | 000,001,382 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Default Manager.lnk
[2009/09/30 03:34:52 | 000,002,557 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
[2010/10/08 21:26:38 | 000,002,061 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Web Platform Installer.lnk
[2010/02/01 04:08:21 | 000,001,149 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works Task Launcher.lnk
[2011/04/24 13:49:52 | 000,001,152 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Mozilla Firefox.lnk
[2009/09/30 03:42:21 | 000,002,084 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\PowerDVD DX.lnk
[2009/07/13 23:57:08 | 000,001,330 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Sidebar.lnk
[2009/07/13 23:57:09 | 000,001,352 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Anytime Upgrade.lnk
[2009/09/30 05:26:07 | 000,001,326 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows DVD Maker.lnk
[2009/07/13 23:54:59 | 000,001,210 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Fax and Scan.lnk
[2011/02/19 18:41:49 | 000,001,460 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Mail.lnk
[2011/02/19 18:41:16 | 000,002,488 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Messenger.lnk
[2011/02/19 18:42:34 | 000,001,307 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Movie Maker.lnk
[2011/02/19 18:42:22 | 000,001,376 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live Photo Gallery.lnk
[2009/07/14 00:09:29 | 000,001,547 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Media Player.lnk
[2009/07/13 23:57:08 | 000,001,246 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\XPS Viewer.lnk
[2009/07/13 23:55:00 | 000,001,230 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Calculator.lnk
[2009/09/30 05:26:10 | 000,001,726 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Desktop.ini
[2009/07/13 23:54:23 | 000,001,266 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\displayswitch.lnk
[2009/09/30 05:26:10 | 000,001,364 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Math Input Panel.lnk
[2009/09/30 05:26:06 | 000,001,238 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Mobility Center.lnk
[2009/07/13 23:54:32 | 000,001,242 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Paint.lnk
[2009/07/13 23:53:55 | 000,001,367 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Remote Desktop Connection.lnk
[2009/09/30 05:26:08 | 000,001,272 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Snipping Tool.lnk
[2009/07/13 23:57:08 | 000,001,330 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sound Recorder.lnk
[2009/09/30 05:26:09 | 000,001,351 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sticky Notes.lnk
[2009/07/13 23:54:58 | 000,001,254 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Sync Center.lnk
[2009/07/13 23:57:09 | 000,001,579 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Welcome Center.lnk
[2009/07/13 23:54:58 | 000,001,322 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Wordpad.lnk
[2009/07/13 23:57:07 | 000,000,370 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Desktop.ini
[2009/07/13 23:57:07 | 000,001,388 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Accessibility\Speech Recognition.lnk
[2009/07/13 23:55:00 | 000,001,248 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Character Map.lnk
[2009/07/13 23:57:09 | 000,001,338 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Desktop.ini
[2009/07/13 23:54:25 | 000,001,290 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\dfrgui.lnk
[2009/07/13 23:54:58 | 000,001,252 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Disk Cleanup.lnk
[2009/07/13 23:53:50 | 000,001,242 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Resource Monitor.lnk
[2009/07/13 23:53:33 | 000,001,250 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Information.lnk
[2009/07/13 23:54:57 | 000,001,246 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\System Restore.lnk
[2009/07/13 23:54:29 | 000,001,268 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Task Scheduler.lnk
[2009/07/13 23:57:09 | 000,001,320 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer Reports.lnk
[2009/07/13 23:57:09 | 000,001,316 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\System Tools\Windows Easy Transfer.lnk
[2009/09/30 05:26:09 | 000,000,343 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Desktop.ini
[2009/09/30 05:26:06 | 000,001,436 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\ShapeCollector.lnk
[2009/09/30 05:26:05 | 000,001,386 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\TabTip.lnk
[2009/09/30 05:26:09 | 000,001,316 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Tablet PC\Windows Journal.lnk
[2009/07/13 23:57:13 | 000,000,216 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\desktop.ini
[2009/07/14 00:32:31 | 000,001,989 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk
[2009/07/13 23:57:13 | 000,001,468 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE (x86).lnk
[2009/07/13 23:57:13 | 000,001,468 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell ISE.lnk
[2009/07/14 00:32:31 | 000,001,899 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
[2009/07/13 23:57:13 | 000,001,242 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Component Services.lnk
[2009/07/13 23:54:21 | 000,001,294 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Computer Management.lnk
[2009/07/13 23:53:52 | 000,001,270 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Data Sources (ODBC).lnk
[2009/07/13 23:57:13 | 000,001,674 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\desktop.ini
[2009/07/13 23:54:29 | 000,001,298 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Event Viewer.lnk
[2009/07/13 23:54:22 | 000,001,274 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\iSCSI Initiator.lnk
[2009/07/13 23:53:33 | 000,001,268 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Memory Diagnostics Tool.lnk
[2011/01/20 18:03:41 | 000,001,330 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Configuration.lnk
[2011/01/20 18:03:41 | 000,001,381 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Microsoft .NET Framework 1.1 Wizards.lnk
[2009/07/13 23:53:50 | 000,001,232 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Performance Monitor.lnk
[2009/07/13 23:54:05 | 000,001,288 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\services.lnk
[2009/07/13 23:53:33 | 000,001,246 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\System Configuration.lnk
[2009/07/13 23:54:29 | 000,001,262 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Task Scheduler.lnk
[2009/07/13 23:53:58 | 000,001,274 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk
[2009/07/14 00:32:31 | 000,002,741 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Administrative Tools\Windows PowerShell Modules.lnk
[2010/04/20 08:15:10 | 000,001,218 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Advanced Link Manager.lnk
[2010/04/20 08:15:10 | 000,001,213 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Advanced Web Ranking.lnk
[2010/04/20 08:15:10 | 000,001,824 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Advanced Web Ranking 7.2\Uninstall.lnk
[2010/05/22 18:18:24 | 000,001,013 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon Games\Super Bounce Out\Uninstall Super Bounce Out.lnk
[2010/05/22 18:18:24 | 000,000,878 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon Games\Super Bounce Out\ Super Bounce Out.lnk
[2010/05/22 14:51:06 | 000,002,273 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Amazon Games & Software Downloader.lnk
[2010/05/22 14:51:06 | 000,002,106 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Download Folder.lnk
[2010/05/22 14:51:06 | 000,000,230 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Go to Your Games & Software Library.url
[2010/05/22 14:51:06 | 000,000,220 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Help.url
[2010/05/22 14:51:07 | 000,002,267 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Amazon\Amazon Games & Software\Uninstall Amazon Games & Software Downloader.lnk
[2010/12/26 08:46:52 | 000,002,727 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\astrology by mypanchang\nakshatra.exe.lnk
[2010/07/07 07:10:42 | 000,001,240 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\CoffeeCup Software\CoffeeCup Flash FireStarter.lnk
[2010/07/07 06:59:42 | 000,002,109 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\CoffeeCup Software\CoffeeCup Free Zip Wizard.lnk
[2009/09/30 03:35:27 | 000,001,862 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell DataSafe\Dell DataSafe Local Backup.lnk
[2009/09/30 03:38:04 | 000,002,781 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\About Dell Support Center.lnk
[2009/09/30 03:38:04 | 000,002,675 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center Alerts.lnk
[2009/09/30 03:38:04 | 000,002,691 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center User Settings.lnk
[2009/09/30 03:38:04 | 000,002,581 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Support Center\Dell Support Center.lnk
[2009/09/30 03:43:33 | 000,002,201 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Dell Webcam Central.lnk
[2009/09/30 03:44:19 | 000,002,222 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\License Agreement.lnk
[2009/09/30 03:44:19 | 000,002,412 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Live! Cam Avatar Creator Help.lnk
[2009/09/30 03:44:18 | 000,002,398 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Live! Cam Avatar Creator.lnk
[2009/09/30 03:44:19 | 000,002,215 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Read Me.lnk
[2009/09/30 03:44:20 | 000,002,635 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Webcam\Live! Cam Avatar Creator\Uninstall Live! Cam Avatar Creator.lnk
[2009/09/30 03:31:57 | 000,002,055 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\Dell Wireless WLAN Card Readme.lnk
[2009/09/30 03:31:57 | 000,001,955 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\Dell Wireless WLAN Card Utility.lnk
[2009/09/30 03:31:57 | 000,000,173 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell Wireless\desktop.ini
[2009/09/30 03:47:49 | 000,002,615 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Dell Dock.lnk
[2009/09/30 03:48:53 | 000,001,137 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Dell Software & Utilities\Dell Getting Started Guide.lnk
[2009/09/30 03:35:11 | 000,000,735 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Dell\Service Agreements\InHome.pdf.lnk
[2010/03/30 22:16:23 | 000,001,035 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Desktop Reporting\Polaris.lnk
[2010/12/23 14:10:28 | 000,001,213 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\FileZilla FTP Client\FileZilla.lnk
[2010/12/23 14:10:28 | 000,001,120 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\FileZilla FTP Client\Uninstall.lnk
[2010/05/06 19:49:55 | 000,000,143 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\GameHouse\Visit GameHouse.url
[2009/09/30 05:26:06 | 000,000,352 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Chess.lnk
[2009/09/30 05:26:06 | 000,001,128 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Desktop.ini
[2009/07/13 23:55:00 | 000,000,364 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\FreeCell.lnk
[2009/07/13 23:54:59 | 000,000,258 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\GameExplorer.lnk
[2009/07/13 23:57:12 | 000,000,356 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Hearts.lnk
[2009/09/30 05:26:06 | 000,000,474 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Backgammon.lnk
[2009/09/30 05:26:06 | 000,000,470 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Checkers.lnk
[2009/09/30 05:26:06 | 000,000,466 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Internet Spades.lnk
[2009/09/30 05:26:06 | 000,000,360 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Mahjong.lnk
[2009/07/13 23:57:12 | 000,000,376 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Minesweeper.lnk
[2009/07/13 23:57:12 | 000,000,370 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\More Games from Microsoft.lnk
[2009/07/13 23:57:12 | 000,000,378 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Purble Place.lnk
[2009/07/13 23:55:01 | 000,000,368 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Solitaire.lnk
[2009/07/13 23:57:12 | 000,000,392 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Games\Spider Solitaire.lnk
[2010/03/14 10:30:52 | 000,002,045 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Google SketchUp 7\Google SketchUp.lnk
[2010/12/31 09:49:46 | 000,002,429 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyle®\Hoyle Casino Games 2011\Buy other Hoyle products.lnk
[2010/12/31 09:49:47 | 000,002,163 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyle®\Hoyle Casino Games 2011\Hoyle Casino Games 2011 Manual.lnk
[2010/12/31 09:49:45 | 000,002,207 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyle®\Hoyle Casino Games 2011\Hoyle Casino Games 2011.lnk
[2010/12/31 09:49:46 | 000,001,958 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Hoyle®\Hoyle Casino Games 2011\Uninstall Hoyle Casino Games 2011.lnk
[2009/09/30 03:33:23 | 000,001,198 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Intel® Matrix Storage Manager\Intel® Matrix Storage Console.lnk
[2009/07/13 23:57:07 | 000,001,304 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Backup and Restore Center.lnk
[2009/07/13 23:57:07 | 000,001,248 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Create Recovery Disc.lnk
[2009/07/13 23:57:09 | 000,000,606 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Desktop.ini
[2009/07/13 23:57:09 | 000,001,212 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Maintenance\Remote Assistance.lnk
[2011/03/02 23:45:11 | 000,001,133 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware Help.lnk
[2011/03/02 23:45:11 | 000,001,133 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Malwarebytes' Anti-Malware.lnk
[2011/03/02 23:45:11 | 000,001,157 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Malwarebytes' Anti-Malware\Uninstall Malwarebytes' Anti-Malware.lnk
[2010/02/04 21:40:53 | 000,001,194 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office Live Add-in\Office Live Add-in Help.lnk
[2010/02/04 21:40:53 | 000,001,154 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office Live Add-in\Office Live Workspace.lnk
[2010/01/30 17:21:31 | 000,002,655 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Excel 2007.lnk
[2010/01/30 17:21:31 | 000,002,619 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office OneNote 2007.lnk
[2010/01/30 17:21:31 | 000,002,645 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office PowerPoint 2007.lnk
[2010/01/30 17:21:31 | 000,002,693 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Word 2007.lnk
[2010/01/30 17:21:31 | 000,002,647 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Digital Certificate for VBA Projects.lnk
[2010/01/30 17:21:31 | 000,002,627 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Clip Organizer.lnk
[2010/01/30 17:21:31 | 000,002,527 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office 2007 Language Settings.lnk
[2010/01/30 17:21:31 | 000,002,625 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Diagnostics.lnk
[2010/01/30 17:21:31 | 000,002,605 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Office\Microsoft Office Tools\Microsoft Office Picture Manager.lnk
[2010/10/08 21:41:22 | 000,001,338 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Silverlight 3 SDK\Welcome.lnk
[2011/04/22 03:01:47 | 000,002,269 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk
[2010/10/08 21:46:57 | 000,001,179 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Import and Export Data (64-bit).lnk
[2010/10/08 21:46:09 | 000,000,858 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Configuration Manager.lnk
[2010/10/08 21:46:58 | 000,001,103 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Error and Usage Reporting.lnk
[2010/10/08 21:44:37 | 000,001,360 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft SQL Server 2008\Configuration Tools\SQL Server Installation Center (64-bit).lnk
[2010/10/08 21:38:12 | 000,001,398 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Visual Studio 2010 Express\Microsoft Visual Web Developer 2010 Express.lnk
[2010/10/08 21:38:11 | 000,000,200 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Visual Studio 2010 Express\Try Visual Studio 2010 Professional.url
[2009/09/30 03:34:42 | 000,002,577 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Getting Started.lnk
[2009/09/30 03:34:42 | 000,002,597 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Calendar.lnk
[2009/09/30 03:34:42 | 000,002,605 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Database.lnk
[2009/09/30 03:34:42 | 000,002,647 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Portfolio.lnk
[2010/12/16 04:04:33 | 000,002,629 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Spreadsheet.lnk
[2010/02/01 04:08:21 | 000,001,155 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Task Launcher.lnk
[2009/09/30 03:34:42 | 000,002,649 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Microsoft Works\Microsoft Works Word Processor.lnk
[2010/08/29 09:02:49 | 000,001,877 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ooVoo\ooVoo.lnk
[2010/05/15 21:16:15 | 000,002,441 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\About QuickTime.lnk
[2010/05/15 21:16:15 | 000,002,471 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\PictureViewer.lnk
[2010/05/15 21:16:15 | 000,002,441 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\QuickTime Player.lnk
[2010/05/15 21:16:15 | 000,001,818 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\QuickTime\Uninstall QuickTime.lnk
[2009/09/30 03:47:05 | 000,001,027 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Roxio\Roxio Burn.lnk
[2011/01/20 18:06:11 | 000,000,977 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ShipWorks\Interapptive ShipWorks.lnk
[2011/01/20 18:06:11 | 000,001,859 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ShipWorks\ShipWorks Help.lnk
[2010/02/16 20:10:26 | 000,002,533 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Skype\Skype.lnk
[2010/01/30 18:30:37 | 000,002,551 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Snagit 9\Snagit 9 Editor.lnk
[2010/01/30 18:30:37 | 000,002,551 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Snagit 9\Snagit 9.lnk
[2011/03/04 20:43:27 | 000,001,171 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\File Shredder.lnk
[2011/03/04 20:43:27 | 000,001,282 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Spybot - Search & Destroy.lnk
[2011/03/04 20:43:27 | 000,001,310 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Tutorial.lnk
[2011/03/04 20:43:27 | 000,001,298 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Uninstall Spybot-S&D.lnk
[2011/03/04 20:43:27 | 000,001,212 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Spybot - Search & Destroy\Update Spybot-S&D.lnk
[2011/02/19 18:42:41 | 000,000,095 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live\desktop.ini
[2011/02/19 18:42:41 | 000,002,350 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Windows Live\Windows Live Writer.lnk
[2010/05/16 08:40:26 | 000,001,657 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\WinZip\Help Manual.lnk
[2010/05/16 08:40:25 | 000,002,267 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\WinZip\WinZip 14.5.lnk
[2010/09/10 20:17:39 | 000,001,654 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Configure Decoder.lnk
[2010/09/10 20:17:39 | 000,001,664 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Configure Encoder.lnk
[2010/09/10 20:17:39 | 000,001,009 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Doom9's Xvid Forum.lnk
[2010/09/10 20:17:39 | 000,001,083 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Koepi's Homepage (Updates).lnk
[2010/09/10 20:17:39 | 000,001,013 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\INet-Xvid Homepage.lnk
[2010/09/10 20:17:38 | 000,001,042 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Koepi's OGMCalc.lnk
[2010/09/10 20:17:39 | 000,000,993 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Nic's FourCC changer.lnk
[2010/09/10 20:17:38 | 000,000,997 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Nic's MiniCalc.lnk
[2010/09/10 20:17:38 | 000,001,051 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Release Notes.lnk
[2010/09/10 20:17:39 | 000,001,074 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Some quantization matrices.lnk
[2010/09/10 20:17:39 | 000,001,030 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\StatsReader 2.1.lnk
[2010/09/10 20:17:39 | 000,001,028 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\StatsReader Notes.lnk
[2010/09/10 20:17:39 | 000,001,859 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Uninstall Xvid.lnk
[2010/09/10 20:17:39 | 000,001,960 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Xvid\Vidc.Cleaner.lnk
[2010/08/15 07:43:56 | 000,001,159 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\Yahoo! Messenger\Yahoo! Messenger.lnk
[2011/03/04 09:08:51 | 000,001,085 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\Readme.lnk
[2011/03/04 09:08:51 | 000,002,052 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\Uninstall ZoneAlarm Security.lnk
[2011/03/04 09:08:51 | 000,001,342 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\ZoneAlarm Diagnostics Tool.lnk
[2011/03/04 09:08:51 | 000,001,090 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\1\Programs\ZoneAlarm\ZoneAlarm Security.lnk
[2010/02/17 08:23:19 | 000,000,086 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\3\desktop.ini
[2010/05/28 18:08:21 | 000,002,389 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Google Chrome.lnk
[2011/04/24 13:50:32 | 000,001,152 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Mozilla Firefox.lnk
[2009/07/13 23:49:38 | 000,001,228 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\3\Windows Explorer.lnk
[2010/04/20 08:15:10 | 000,001,200 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Advanced Link Manager.lnk
[2010/04/20 08:15:10 | 000,001,195 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Advanced Web Ranking.lnk
[2010/07/07 06:59:57 | 000,001,086 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\CoffeeCup Free Zip Wizard.lnk
[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\desktop.ini
[2010/03/14 10:30:52 | 000,002,027 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Google SketchUp 7.lnk
[2010/12/31 09:49:47 | 000,002,183 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Hoyle Casino Games 2011.lnk
[2010/11/20 15:31:36 | 000,001,135 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Jagannatha Hora.lnk
[2011/03/02 23:45:11 | 000,001,115 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Malwarebytes' Anti-Malware.lnk
[2011/04/24 13:49:52 | 000,001,140 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Mozilla Firefox.lnk
[2010/12/26 08:46:52 | 000,002,709 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\nakshatra.exe.lnk
[2010/08/29 09:02:49 | 000,001,859 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\ooVoo.lnk
[2010/02/16 20:10:26 | 000,002,515 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Skype.lnk
[2010/08/15 07:43:56 | 000,001,141 | —- | M] () – C:\Users\Manjula\AppData\Local\Temp\smtmp\4\Yahoo! Messenger.lnk

< End of report >

oldman960

Post #11May 25, 2011, 3:02 AM UTC last edited May 25, 2011, 3:03 AM UTC

Hi saicool171,

That message was related to Hibernation mode. It just meant Windows was having a problem loading the current instance of windows after Hibernation. Had you used option 2 all that would have happened would be windows would have closed and started up again. You would have lost any unsaved data though.

The files are still there. We should back them up just in case we loose them.

Please download ZipIt from here:

Download

Right click ZipIt! and click "Run as Adminstrator to run it.
Then copy the content of the following codebox into the textfield:
```
C:\Users\Manjula\AppData\Local\Temp\smtmp
```
Then, just click the Zip button.
When finished, and if successful, a new file will have been created on your Desktop. You will be notified of what the file name is when the process has been completed.

Just leave it there, it will be our backup if needed.

Next, Right click on OTL.exe and chose Run as Administrator to run it

Under the Custom Scans/Fixes box at the bottom, paste in the following
Do Not copy the word CODE
please note the fix starts with the :

:Services

:Files
xcopy %Temp%\smtmp\1 "%AllUsersProfile%\Start Menu" /H /I /S /Y /C
xcopy %Temp%\smtmp\4 "%AllUsersProfile%\Desktop" /H /I /S /Y /C

:Commands
[createrestorepoint]

Then click the Run Fix button at the top

Let the program run unhindered
Please save the resulting log to be posted in your next reply.

Please post the OTL fix log.

Programs/icons back?

Thanks

saicool171

Post #12May 25, 2011, 12:42 PM UTC

Hi oldman960,

Thanks for the explanation. Truly appreciate the time you are taking with this.

Still no icons in the start menu. Just for clarity (and I'm sorry I missed explaining this in more detail sooner) - The firefox icon shows up when I click on Start menu and there is a link to 'all programs >' - the other shortcuts which typically show up (I think the most used programs) are the ones that are wiped out.

Thanks again.

The OTL log is below:

========== SERVICES/DRIVERS ==========
========== FILES ==========
< xcopy %Temp%\smtmp\1 "%AllUsersProfile%\Start Menu" /H /I /S /Y /C >
0 File(s) copied
C:\Users\Manjula\Desktop\cmd.bat deleted successfully.
C:\Users\Manjula\Desktop\cmd.txt deleted successfully.
< xcopy %Temp%\smtmp\4 "%AllUsersProfile%\Desktop" /H /I /S /Y /C >
0 File(s) copied
C:\Users\Manjula\Desktop\cmd.bat deleted successfully.
C:\Users\Manjula\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.22.3 log created on 05252011_073124

oldman960

Post #13May 26, 2011, 1:19 AM UTC

Hi saicool171,

Thanks for the info. To be clear, if you click your start button and highlight All Programs, the program list will populate?

Your desktop icon are also visible on the desktop?

For the missing "Recently Used Item" Check the settings in the start menu.

Click your start button
In the menu that appears the right hand side should be a blue color
right click on a blank area and click properties
On the Start menu tab you should see see 2 options for saving recently opened programs and items
Check both boxes, click apply, click ok.

Open a program and see if it now appears.

saicool171

Post #14May 26, 2011, 1:47 AM UTC

Hi Oldman960, To answer your questions: Yes, when I click on All Programs the program list populates My desktop icons are visible as well. Changing the property settings as per your instructions populated the recently used items. It actually showed a list of programs and icons (I don't recall them as the last ones used, but I could be mistaken about that) - I didn't have to open a program to have it show up. Please let me know the next steps, if any. Thanks so very much, Saicool171

oldman960

Post #15May 26, 2011, 6:19 AM UTC

Hi saicool171,

You have this program installed, Malwarebytes' Anti-Malware (MBAM). Please update it and run a scan.

Open MBAM

Click the Update tab
Click Check for Updates
If an update is found, it will download and install the latest version.
The program will close to update and reopen.
Once the program has loaded, select "Perform Quick Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Let's look for stragglers.

As a Vista/Win7 user you will need to right click your browser icon and select "Run as Administrator" in order to run this scan.

Do not use this instance of your browser for anything besides doing this scan
When the scan is complete and the results saved, close that instance of your browser
Open a new one the usual way and post the results in this topic.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

Go here to run an online scannner from
ESET

(Note: You can use Internet Explorer or FireFox for this scan. If you use FireFox you will be asked to install an additional component. Please allow this.)

Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activex control to install
Disable your Antivirus software. You can usually do this with its Notfication Tray icon near the clock
Click Start
Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is Checked.
Click Scan.
Wait for the scan to finish.
Re-enable your Antivirus software.
A logfile is created and located at C:\Program Files\EsetOnlineScanner\log.txt. or C:\Program Files\ESET\log.txtWe will need this later.

Please post back with the ESET log.

Please post back with

MBAM log
ESET log

Thanks

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Virus / Trojan and start menu wiped out

✨ Ask AI

Ask AI