This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

SearchQU

14 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

No evident harms to my computer. It has been here for af ew days. The only thing it has done so far is automatically go to the searchqu search engine, which is incredibly annoying. My computer and internet has been going slower as well, not sure if related.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 1:36:36 PM, on 25/06/2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16800)
Boot mode: Normal

Running processes:
c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
C:\Program Files (x86)\Lexmark 9500 Series\lxdomon.exe
C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe
C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files (x86)\iTunes\iTunes.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Last.fm\LastFM.exe
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Users\SD\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/406
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a…ion&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: UrlHelper Class - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O2 - BHO: Microsoft Live Search Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0560.0\msneshellx.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (file missing)
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Microsoft Live Search Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0560.0\msneshellx.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coIEPlg.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll
O4 - HKLM\..\Run: [HPCam_Menu] "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" "c:\Program Files (x86)\Hewlett-Packard\Media\Webcam" UpdateWithCreateOnce "Software\Hewlett-Packard\Media\Webcam"
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [UpdatePRCShortCut] "C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Hewlett-Packard\Recovery" UpdateWithCreateOnce "Software\CyberLink\PowerRecover"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Lexmark 9500 Series] "C:\Program Files (x86)\Lexmark 9500 Series\fm3032.exe" /s
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\WI3C8A~1\Datamngr\DATAMN~1.EXE
O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [EPSON NX510 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIA.EXE /FU "C:\Windows\TEMP\E_SDB67.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Epson Stylus NX510(Network)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIA.EXE /FU "C:\Windows\TEMP\E_SAF87.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Video Library] C:\Windows\system32\rundll32.exe C:\Users\SD\AppData\Local\Temp\Rpcqt.dll,Sets
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files (x86)\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGam…1/GAME_UNO1.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {B3E32D88-8E7F-468F-B0E2-3A300FD4A82C} (Enlite 2.x Simulation Engine Installer) - http://myitlab.pearsoned.com/Pegasus/Modul…ces/ax/stub.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS…er.cab56986.cab
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} (ChessControl Class) - http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: c:\PROGRA~2\WI3C8A~1\Datamngr\datamngr.dll c:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: lxdoCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\x64\3\\lxdoserv.exe
O23 - Service: lxdo_device - - C:\Windows\system32\lxdocoms.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\STacSV64.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

–
End of file - 18508 bytes
Hello and Welcome DT35 to WhatTheTech Forums

Please be advised, as I am still in training, all my replies to you will be checked for accuracy by one of our experts to ensure that I am giving you the best possible advise, this will be a team effort.
This may cause a delay, but I will do my best to keep it as short as possible. Please bear with me, I will post back to you as soon as I can.
I have OTL reports too just incase:

OTL logfile created on: 6/26/2011 4:40:05 AM - Run 1
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Users\SD\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.91 Gb Total Physical Memory | 1.73 Gb Available Physical Memory | 44.40% Memory free
7.81 Gb Paging File | 5.12 Gb Available in Paging File | 65.51% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452.36 Gb Total Space | 349.17 Gb Free Space | 77.19% Space Free | Partition Type: NTFS
Drive D: | 13.21 Gb Total Space | 2.20 Gb Free Space | 16.66% Space Free | Partition Type: NTFS

Computer Name: SD-PC | User Name: SD | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found –
PRC - [2011/06/26 04:39:46 | 000,579,072 | —- | M] (OldTimer Tools) – C:\Users\SD\Downloads\OTL.exe
PRC - [2011/06/23 06:33:32 | 000,912,344 | —- | M] (Mozilla Corporation) – C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011/06/01 16:44:15 | 001,546,640 | —- | M] (Bandoo Media, inc) – C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe
PRC - [2011/05/25 01:22:20 | 000,399,736 | —- | M] (BitTorrent, Inc.) – C:\Program Files (x86)\uTorrent\uTorrent.exe
PRC - [2010/10/27 22:21:54 | 001,155,072 | —- | M] (Last.fm) – C:\Program Files (x86)\Last.fm\LastFM.exe
PRC - [2010/09/16 16:04:06 | 001,164,584 | —- | M] () – C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/03/06 04:04:24 | 000,310,224 | —- | M] (Adobe Systems Incorporated) – C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
PRC - [2010/02/25 20:21:50 | 000,126,392 | R— | M] (Symantec Corporation) – C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccsvchst.exe
PRC - [2009/07/23 23:45:52 | 000,128,296 | —- | M] (CyberLink Corp.) – c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
PRC - [2009/07/23 14:37:16 | 000,206,120 | —- | M] (CyberLink) – c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
PRC - [2009/06/04 20:03:32 | 000,186,904 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009/06/04 20:03:06 | 000,354,840 | —- | M] (Intel Corporation) – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2009/04/07 09:13:10 | 000,673,616 | —- | M] (SEIKO EPSON CORPORATION) – C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
PRC - [2007/08/10 02:11:54 | 000,020,480 | —- | M] () – C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe
PRC - [2007/01/15 14:23:48 | 000,344,064 | —- | M] (Sony Corporation) – C:\Program Files (x86)\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
PRC - [2006/12/19 18:23:20 | 000,094,208 | —- | M] (SEIKO EPSON CORPORATION) – C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe


========== Modules (SafeList) ==========

MOD - [2011/06/26 04:39:46 | 000,579,072 | —- | M] (OldTimer Tools) – C:\Users\SD\Downloads\OTL.exe
MOD - [2010/08/21 01:21:32 | 001,680,896 | —- | M] (Microsoft Corporation) – C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010/09/22 18:10:10 | 000,057,184 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe – (wlcrasvc)
SRV:64bit: - [2010/03/23 14:53:06 | 000,247,808 | —- | M] (IDT, Inc.) [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stacsv64.exe – (STacSV)
SRV:64bit: - [2009/07/13 21:41:27 | 001,011,712 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV:64bit: - [2009/07/08 16:49:02 | 000,030,520 | —- | M] (Hewlett-Packard) [Auto | Running] – C:\Windows\SysNative\hpservice.exe – (hpsrv)
SRV:64bit: - [2009/03/02 18:42:58 | 000,089,600 | —- | M] (Andrea Electronics Corporation) [Auto | Running] – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe – (AESTFilters)
SRV:64bit: - [2007/09/20 16:33:06 | 001,039,360 | —- | M] ( ) [Auto | Running] – C:\Windows\SysNative\lxdocoms.exe – (lxdo_device)
SRV:64bit: - [2007/07/17 08:29:01 | 000,028,672 | —- | M] () [Auto | Stopped] – C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxdoserv.exe – (lxdoCATSCustConnectService)
SRV - [2011/06/02 19:44:09 | 000,403,240 | —- | M] (Valve Corporation) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Steam\SteamService.exe – (Steam Client Service)
SRV - [2010/03/18 13:16:28 | 000,130,384 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe – (clr_optimization_v4.0.30319_32)
SRV - [2010/02/25 20:21:50 | 000,126,392 | R— | M] (Symantec Corporation) [Unknown | Running] – C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe – (N360)
SRV - [2010/02/19 13:37:14 | 000,517,096 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe – (SwitchBoard)
SRV - [2009/11/04 08:07:31 | 000,163,840 | —- | M] (SEIKO EPSON CORPORATION) [Auto | Running] – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE – (EPSON_EB_RPCV4_01) EPSON V5 Service4(01)
SRV - [2009/11/04 08:07:31 | 000,126,464 | —- | M] (SEIKO EPSON CORPORATION) [Auto | Running] – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE – (EPSON_PM_RPCV4_01) EPSON V3 Service4(01)
SRV - [2009/06/10 17:23:09 | 000,066,384 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32)
SRV - [2009/06/04 20:03:06 | 000,354,840 | —- | M] (Intel Corporation) [Auto | Running] – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe – (IAANTMON) Intel®
SRV - [2009/05/22 14:02:20 | 000,250,616 | —- | M] (WildTangent, Inc.) [On_Demand | Stopped] – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe – (GameConsoleService)
SRV - [2007/09/20 16:05:06 | 000,589,824 | —- | M] ( ) [Auto | Running] – C:\Windows\SysWow64\lxdocoms.exe – (lxdo_device)
SRV - [2006/12/19 18:23:20 | 000,094,208 | —- | M] (SEIKO EPSON CORPORATION) [Auto | Running] – C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe – (EpsonBidirectionalService)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011/05/10 08:06:08 | 000,051,712 | —- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\usbaapl64.sys – (USBAAPL64)
DRV:64bit: - [2011/03/11 02:22:41 | 000,107,904 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdsata.sys – (amdsata)
DRV:64bit: - [2011/03/11 02:22:40 | 000,027,008 | —- | M] (Advanced Micro Devices) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdxata.sys – (amdxata)
DRV:64bit: - [2011/01/07 17:03:08 | 000,045,408 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\point64.sys – (Point64)
DRV:64bit: - [2011/01/06 20:37:02 | 000,051,584 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\dc3d.sys – (dc3d) MS Hardware Device Detection Driver (USB)
DRV:64bit: - [2011/01/01 10:12:24 | 000,097,040 | —- | M] (MotioninJoy) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\MijXfilt.sys – (MotioninJoyXFilter)
DRV:64bit: - [2010/09/23 00:36:48 | 000,048,488 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\fssfltr.sys – (fssfltr)
DRV:64bit: - [2010/08/29 12:14:32 | 000,173,104 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS – (SymEvent)
DRV:64bit: - [2010/08/19 20:24:34 | 000,074,960 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\xusb21.sys – (xusb21)
DRV:64bit: - [2010/07/16 15:04:04 | 000,030,008 | —- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\hpdskflt.sys – (hpdskflt)
DRV:64bit: - [2010/07/16 15:03:48 | 000,043,320 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\Accelerometer.sys – (Accelerometer)
DRV:64bit: - [2010/05/27 22:32:56 | 000,320,560 | —- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\SynTP.sys – (SynTP)
DRV:64bit: - [2010/05/06 00:01:59 | 000,451,120 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\N360x64\0403000.005\symtdiv.sys – (SYMTDIv)
DRV:64bit: - [2010/04/29 01:03:51 | 000,150,064 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\N360x64\0403000.005\ironx64.sys – (SymIRON)
DRV:64bit: - [2010/04/21 23:02:20 | 000,221,232 | —- | M] (Symantec Corporation) [File_System | Boot | Running] – C:\Windows\SysNative\drivers\N360x64\0403000.005\symefa64.sys – (SymEFA)
DRV:64bit: - [2010/04/21 22:29:51 | 000,505,392 | —- | M] (Symantec Corporation) [File_System | On_Demand | Running] – C:\Windows\SysNative\drivers\N360x64\0403000.005\srtsp64.sys – (SRTSP)
DRV:64bit: - [2010/04/21 22:29:51 | 000,032,304 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\N360x64\0403000.005\srtspx64.sys – (SRTSPX) Symantec Real Time Storage Protection (PEL)
DRV:64bit: - [2010/03/23 14:53:06 | 000,505,344 | —- | M] (IDT, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\stwrt64.sys – (STHDA)
DRV:64bit: - [2010/02/25 20:22:52 | 000,615,040 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Windows\SysNative\drivers\N360x64\0403000.005\cchpx64.sys – (ccHP)
DRV:64bit: - [2010/01/13 16:37:18 | 007,675,392 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\NETw5s64.sys – (NETw5s64) Intel®
DRV:64bit: - [2010/01/06 19:46:45 | 000,139,264 | —- | M] (Intel® Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\IntcHdmi.sys – (IntcHdmiAddService) Intel®
DRV:64bit: - [2010/01/06 19:46:32 | 007,369,600 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\igdkmd64.sys – (igfx)
DRV:64bit: - [2009/10/14 23:50:05 | 000,433,200 | R— | M] (Symantec Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\N360x64\0403000.005\symds64.sys – (SymDS)
DRV:64bit: - [2009/10/09 22:41:20 | 000,109,056 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\sdbus.sys – (sdbus)
DRV:64bit: - [2009/07/20 19:33:42 | 007,058,432 | —- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\NETw1v64.sys – (NETw1v64) Intel®
DRV:64bit: - [2009/07/13 21:52:20 | 000,194,128 | —- | M] (AMD Technologies Inc.) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\amdsbs.sys – (amdsbs)
DRV:64bit: - [2009/07/13 21:48:04 | 000,065,600 | —- | M] (LSI Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\lsi_sas2.sys – (LSI_SAS2)
DRV:64bit: - [2009/07/13 21:47:48 | 000,077,888 | —- | M] (Hewlett-Packard Company) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\HpSAMD.sys – (HpSAMD)
DRV:64bit: - [2009/07/13 21:45:55 | 000,024,656 | —- | M] (Promise Technology) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\stexstor.sys – (stexstor)
DRV:64bit: - [2009/07/13 20:39:20 | 000,023,040 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\WSDPrint.sys – (WSDPrintDevice)
DRV:64bit: - [2009/07/13 18:31:00 | 000,233,472 | —- | M] (Realtek ) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\Rt64win7.sys – (RTL8167)
DRV:64bit: - [2009/07/13 17:59:33 | 005,020,672 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\atikmdag.sys – (atikmdag)
DRV:64bit: - [2009/06/29 14:17:00 | 000,070,656 | —- | M] (ENE TECHNOLOGY INC.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\enecir.sys – (enecir)
DRV:64bit: - [2009/06/10 17:01:11 | 001,485,312 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTDPV6.SYS – (SrvHsfV92)
DRV:64bit: - [2009/06/10 17:01:11 | 000,740,864 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTCNXT6.SYS – (SrvHsfWinac)
DRV:64bit: - [2009/06/10 17:01:11 | 000,292,864 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\VSTAZL6.SYS – (SrvHsfHDA)
DRV:64bit: - [2009/06/10 17:01:06 | 001,146,880 | —- | M] (LSI Corp) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\agrsm64.sys – (AgereSoftModem)
DRV:64bit: - [2009/06/10 16:38:56 | 000,000,308 | —- | M] () [File_System | On_Demand | Running] – C:\Windows\SysNative\wbem\ntfs.mof – (Ntfs)
DRV:64bit: - [2009/06/10 16:35:33 | 000,389,120 | —- | M] (Marvell) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\yk62x64.sys – (yukonw7)
DRV:64bit: - [2009/06/10 16:35:28 | 005,434,368 | —- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\netw5v64.sys – (netw5v64) Intel®
DRV:64bit: - [2009/06/10 16:34:33 | 003,286,016 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\evbda.sys – (ebdrv)
DRV:64bit: - [2009/06/10 16:34:28 | 000,468,480 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\bxvbda.sys – (b06bdrv)
DRV:64bit: - [2009/06/10 16:34:23 | 000,270,848 | —- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\b57nd60a.sys – (b57nd60a)
DRV:64bit: - [2009/06/10 16:31:59 | 000,031,232 | —- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\hcw85cir.sys – (hcw85cir)
DRV:64bit: - [2009/06/04 19:54:36 | 000,408,600 | —- | M] (Intel Corporation) [Kernel | Boot | Running] – C:\Windows\SysNative\drivers\iaStor.sys – (iaStor)
DRV:64bit: - [2009/05/18 18:17:08 | 000,034,152 | R— | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\GEARAspiWDM.sys – (GEARAspiWDM)
DRV:64bit: - [2009/05/09 02:14:20 | 000,015,752 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\nuidfltr.sys – (NuidFltr)
DRV:64bit: - [2009/04/29 11:48:32 | 000,018,432 | —- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\HpqKbFiltr.sys – (HpqKbFiltr)
DRV:64bit: - [2009/02/24 18:35:44 | 000,255,552 | —- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysNative\drivers\mcdbus.sys – (mcdbus)
DRV:64bit: - [2008/05/06 16:06:00 | 000,014,464 | —- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] – C:\Windows\SysNative\drivers\wdcsam64.sys – (WDC_SAM)
DRV - [2011/06/02 21:08:18 | 000,488,056 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110624.050\IDSviA64.sys – (IDSVia64)
DRV - [2011/05/19 15:37:05 | 001,143,416 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110616.003\BHDrvx64.sys – (BHDrvx64)
DRV - [2011/05/18 02:07:24 | 002,011,768 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110625.002\EX64.SYS – (NAVEX15)
DRV - [2011/05/18 02:07:23 | 000,117,880 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110625.002\ENG64.SYS – (NAVENG)
DRV - [2011/05/09 20:05:51 | 000,481,912 | —- | M] (Symantec Corporation) [Kernel | System | Running] – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys – (eeCtrl)
DRV - [2011/05/09 20:05:51 | 000,136,824 | —- | M] (Symantec Corporation) [Kernel | On_Demand | Running] – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys – (EraserUtilRebootDrv)
DRV - [2009/02/24 18:35:44 | 000,255,552 | —- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] – C:\Windows\SysWOW64\drivers\mcdbus.sys – (mcdbus)
DRV - [2005/03/09 20:50:16 | 000,033,792 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Windows\SysWOW64\drivers\libusb0.sys – (libusb0)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE - HKLM\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/406
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "google.ca"
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: {f701c26a-479a-4724-b4f1-870db12f063c}:1.4.3
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:[removed]
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid;=119&systemid;=406&q;="
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2009/12/19 02:38:29 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010/09/10 20:54:50 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010/08/29 12:14:52 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/06/23 06:33:33 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/06/23 06:33:33 | 000,000,000 | —D | M]

[2011/06/23 05:34:19 | 000,000,000 | —D | M] (No name found) – C:\Users\SD\AppData\Roaming\Mozilla\Extensions
[2011/06/25 05:40:01 | 000,000,000 | —D | M] (No name found) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions
[2010/12/13 13:07:27 | 000,000,000 | —D | M] (uTorrentBar Community Toolbar) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2011/03/11 15:28:19 | 000,000,000 | —D | M] (Greasemonkey) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011/03/11 15:28:18 | 000,000,000 | —D | M] (Text-to-Image) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{f701c26a-479a-4724-b4f1-870db12f063c}
[2010/12/13 13:07:28 | 000,000,000 | —D | M] (Conduit Engine) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\[removed]
[2011/01/01 18:39:12 | 000,002,566 | —- | M] () – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\searchplugins\askcom.xml
[2011/06/23 05:34:09 | 000,002,501 | —- | M] () – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\searchplugins\SearchResults.xml
[2011/06/23 05:34:19 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/10/10 04:13:43 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/11/10 11:04:41 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/02/16 03:07:25 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/06/23 05:34:18 | 000,000,000 | —D | M] (DataMngr) – C:\PROGRAM FILES (X86)\WINDOWS ILIVID TOOLBAR\DATAMNGR\FIREFOXEXTENSION
[2010/08/29 12:14:52 | 000,000,000 | —D | M] (Norton Toolbar) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\COFFPLGN
[2010/09/10 20:54:50 | 000,000,000 | —D | M] (Norton IPS) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPLGN
[2011/05/04 04:52:23 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2011/06/23 05:34:09 | 000,002,501 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\SearchResults.xml

O1 HOSTS File: ([2011/01/02 00:26:28 | 000,000,822 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media, inc)
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O2 - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0560.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0560.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (uTorrentBar Toolbar) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (uTorrentBar Toolbar) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - C:\Program Files (x86)\uTorrentBar\tbuTor.dll (Conduit Ltd.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [itype] c:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [lxdoamon] C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe ()
O4:64bit: - HKLM..\Run: [lxdomon.exe] C:\Program Files (x86)\Lexmark 9500 Series\lxdomon.exe ()
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [WrtMon.exe] C:\Windows\SysNative\spool\drivers\x64\3\WrtMon.exe ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Lexmark 9500 Series] C:\Program Files (x86)\Lexmark 9500 Series\fm3032.exe ()
O4 - HKLM..\Run: [NortonOnlineBackupReminder] C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe (Symantec Corporation)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [EPSON NX510 Series] File not found
O4 - HKCU..\Run: [Epson Stylus NX510(Network)] File not found
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKCU..\Run: [Video Library] File not found
O4 - Startup: C:\Users\SD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk = C:\Program Files (x86)\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (Sony Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGam…1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {B3E32D88-8E7F-468F-B0E2-3A300FD4A82C} http://myitlab.pearsoned.com/Pegasus/Modul…ces/ax/stub.cab (Enlite 2.x Simulation Engine Installer)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab (MSN Games - Installer)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineS…er.cab56986.cab (Minesweeper Flags Class)
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab (ChessControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\WI3C8A~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\x64\datamngr.dll (Bandoo Media, inc)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\WI3C8A~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\x64\IEBHO.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (c:\PROGRA~2\WI3C8A~1\Datamngr\datamngr.dll) - c:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (c:\PROGRA~2\WI3C8A~1\Datamngr\IEBHO.dll) - c:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{ddca1124-4d09-11e0-b77e-fb040d9047cc}\Shell - "" = AutoRun
O33 - MountPoints2\{ddca1124-4d09-11e0-b77e-fb040d9047cc}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (MACHINE BootExecut) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/06/25 13:19:25 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{2927B91F-4193-446E-AE6F-895C03E91E57}
[2011/06/24 11:39:26 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{384F287D-5C5C-4F82-A4F8-D6EF8BBDDE58}
[2011/06/24 09:45:42 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2011/06/24 09:45:42 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2011/06/24 09:45:42 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2011/06/24 09:45:29 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2011/06/24 09:45:26 | 000,000,000 | –SD | C] – C:\ComboFix
[2011/06/24 09:45:11 | 000,000,000 | –SD | C] – C:\32788R22FWJFW
[2011/06/24 09:44:20 | 000,000,000 | —D | C] – C:\Qoobox
[2011/06/23 07:27:13 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Roaming\Tific
[2011/06/23 07:27:13 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\Symantec
[2011/06/23 05:35:27 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\Ilivid Player
[2011/06/23 05:34:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows iLivid Toolbar
[2011/06/21 05:31:24 | 000,000,000 | —D | C] – C:\Users\SD\Documents\Webcam
[2011/06/18 00:13:20 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{6B988CC2-4191-418B-B5B1-79EBB3A14597}
[2011/06/16 18:08:10 | 000,703,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/06/16 18:08:10 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/06/16 18:08:09 | 000,256,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/06/16 18:08:09 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/06/16 18:08:09 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/06/16 18:08:09 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/06/16 18:08:09 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/06/16 18:08:09 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/06/16 18:08:09 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/06/16 18:08:09 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/06/16 18:08:09 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/06/16 18:08:09 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/06/16 18:08:08 | 000,482,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/06/16 18:08:08 | 000,386,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/06/16 18:06:05 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/06/16 18:06:05 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2011/06/16 18:05:58 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2011/06/13 23:02:38 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{FACDEE1A-604B-4E56-97C7-C53D1AE4FEC1}
[2011/06/12 17:15:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/06/12 13:04:54 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{BDE88CBD-1F55-44DB-82FA-50E8B5059B04}
[2011/06/09 02:39:43 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{1275D24E-AB32-4605-99E6-781EB438DC04}
[2011/06/09 02:27:52 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{75E1105F-ADB4-4ED0-877B-79488B937F4A}
[2011/06/08 15:55:57 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\2K Sports
[2011/06/08 15:39:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\2K Sports
[2011/06/08 15:38:17 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Roaming\2K Sports
[2011/06/07 23:32:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\AVG
[2011/06/07 23:19:52 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{6A2EADBC-3CB7-4712-A271-39119463CDD6}
[2011/06/07 23:00:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Uniblue
[2011/06/07 23:00:16 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\PackageAware
[2011/06/07 22:54:04 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Roaming\Systweak
[2011/06/07 22:54:02 | 000,018,816 | —- | C] (Systweak Inc., (www.systweak.com)) – C:\Windows\SysNative\roboot64.exe
[2011/06/05 13:04:07 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{E21D310F-F577-4BEC-8A26-FFF40DAEDCAB}
[2011/05/31 13:36:19 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{7C809736-549F-43E8-88DD-89823692C9CA}
[2011/05/04 10:05:18 | 000,360,448 | —- | C] ( ) – C:\Windows\SysWow64\lxdoinpa.dll
[2011/05/04 10:05:18 | 000,339,968 | —- | C] ( ) – C:\Windows\SysWow64\lxdoiesc.dll
[2011/05/04 10:05:17 | 000,643,072 | —- | C] ( ) – C:\Windows\SysWow64\lxdopmui.dll
[2011/05/04 10:05:16 | 000,954,368 | —- | C] ( ) – C:\Windows\SysWow64\lxdousb1.dll
[2011/05/04 10:05:15 | 001,069,056 | —- | C] ( ) – C:\Windows\SysWow64\lxdoserv.dll
[2011/05/04 10:05:15 | 000,569,344 | —- | C] ( ) – C:\Windows\SysWow64\lxdolmpm.dll
[2011/05/04 10:05:15 | 000,053,248 | —- | C] ( ) – C:\Windows\SysWow64\lxdoprox.dll
[2011/05/04 10:05:14 | 000,851,968 | —- | C] ( ) – C:\Windows\SysWow64\lxdocomc.dll
[2011/05/04 10:05:14 | 000,663,552 | —- | C] ( ) – C:\Windows\SysWow64\lxdohbn3.dll
[2011/05/04 10:05:14 | 000,589,824 | —- | C] ( ) – C:\Windows\SysWow64\lxdocoms.exe
[2011/05/04 10:05:14 | 000,364,544 | —- | C] ( ) – C:\Windows\SysWow64\lxdocomm.dll
[2011/05/04 10:05:14 | 000,315,392 | —- | C] ( ) – C:\Windows\SysWow64\lxdoih.exe
[2011/05/04 10:05:13 | 000,360,448 | —- | C] ( ) – C:\Windows\SysWow64\lxdocfg.exe
[5 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/06/26 03:59:00 | 000,000,890 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/06/25 13:26:06 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/06/25 13:26:06 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/06/25 13:14:12 | 000,000,886 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/06/25 13:13:50 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/06/25 13:13:48 | 597,519,966 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/06/25 13:13:44 | 3145,089,024 | -HS- | M] () – C:\hiberfil.sys
[2011/06/18 00:07:50 | 005,009,064 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/06/12 17:15:54 | 000,001,783 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/06/07 23:33:15 | 000,081,248 | —- | M] () – C:\Program Files (x86)\Uninstall.exe
[2011/06/07 23:33:15 | 000,001,868 | —- | M] () – C:\Program Files (x86)\Uninstall.ini
[2011/06/07 23:16:25 | 000,001,632 | —- | M] () – C:\Windows\SysNative\ASOROSet.bin
[2011/06/07 13:03:14 | 000,018,816 | —- | M] (Systweak Inc., (www.systweak.com)) – C:\Windows\SysNative\roboot64.exe
[5 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/06/24 09:45:42 | 000,256,512 | —- | C] () – C:\Windows\PEV.exe
[2011/06/24 09:45:42 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2011/06/24 09:45:42 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2011/06/24 09:45:42 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2011/06/24 09:45:42 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2011/06/12 17:15:51 | 000,001,783 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/06/07 23:33:15 | 000,001,868 | —- | C] () – C:\Program Files (x86)\Uninstall.ini
[2011/06/07 23:04:41 | 000,001,632 | —- | C] () – C:\Windows\SysNative\ASOROSet.bin
[2011/05/05 10:13:53 | 000,033,792 | —- | C] () – C:\Windows\SysWow64\drivers\libusb0.sys
[2011/05/04 10:06:36 | 000,028,672 | —- | C] () – C:\Windows\hookdllX.dll
[2011/05/04 10:06:36 | 000,011,776 | —- | C] () – C:\Windows\SysWow64\pmsbfn32.dll
[2011/05/04 10:05:18 | 000,385,024 | —- | C] () – C:\Windows\SysWow64\lxdocomx.dll
[2011/05/04 10:05:18 | 000,348,160 | —- | C] () – C:\Windows\SysWow64\lxdoinst.dll
[2011/04/02 08:57:08 | 000,081,248 | —- | C] () – C:\Program Files (x86)\Uninstall.exe
[2011/03/21 12:59:12 | 000,003,584 | —- | C] () – C:\Users\SD\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/19 17:45:45 | 000,043,520 | —- | C] () – C:\Windows\SysWow64\CmdLineExt03.dll
[2011/01/30 23:51:37 | 000,000,616 | —- | C] () – C:\Windows\eReg.dat
[2010/10/10 04:18:50 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/09/04 16:56:21 | 000,073,220 | —- | C] () – C:\Windows\SysWow64\EPPICPrinterDB.dat
[2010/09/04 16:56:21 | 000,031,053 | —- | C] () – C:\Windows\SysWow64\EPPICPattern131.dat
[2010/09/04 16:56:21 | 000,029,114 | —- | C] () – C:\Windows\SysWow64\EPPICPattern1.dat
[2010/09/04 16:56:21 | 000,027,417 | —- | C] () – C:\Windows\SysWow64\EPPICPattern121.dat
[2010/09/04 16:56:21 | 000,021,021 | —- | C] () – C:\Windows\SysWow64\EPPICPattern3.dat
[2010/09/04 16:56:21 | 000,015,670 | —- | C] () – C:\Windows\SysWow64\EPPICPattern5.dat
[2010/09/04 16:56:21 | 000,013,280 | —- | C] () – C:\Windows\SysWow64\EPPICPattern2.dat
[2010/09/04 16:56:21 | 000,010,673 | —- | C] () – C:\Windows\SysWow64\EPPICPattern4.dat
[2010/09/04 16:56:21 | 000,004,943 | —- | C] () – C:\Windows\SysWow64\EPPICPattern6.dat
[2010/09/04 16:56:21 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2010/09/04 16:56:21 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2010/09/04 16:56:21 | 000,001,137 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2010/09/04 16:56:21 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2010/09/04 16:56:21 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2010/09/04 16:56:21 | 000,001,104 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2010/09/04 16:56:21 | 000,000,097 | —- | C] () – C:\Windows\SysWow64\PICSDK.ini
[2010/09/04 16:51:13 | 000,000,079 | —- | C] () – C:\Windows\EPNX510.ini
[2010/07/24 18:13:06 | 000,000,132 | —- | C] () – C:\Users\SD\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/04/17 22:59:23 | 000,000,040 | -HS- | C] () – C:\ProgramData\.zreglib
[2009/12/28 23:04:24 | 000,043,809 | —- | C] () – C:\Users\SD\AppData\Local\tmpSNAPSHOT_20091227.0
[2009/12/28 23:04:24 | 000,035,438 | —- | C] () – C:\Users\SD\AppData\Local\tmpSNAPSHOT_20091227.JPG
[2009/12/19 04:28:18 | 000,003,654 | —- | C] () – C:\Windows\SysWow64\drivers\Sonyhcp.dll
[2009/12/19 02:37:44 | 000,023,111 | —- | C] () – C:\Windows\hpqins15.dat
[2009/08/21 00:31:22 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2009/08/13 22:51:32 | 000,439,300 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2009/07/15 20:50:42 | 000,013,312 | —- | C] () – C:\Windows\LPRES.DLL
[2009/07/14 01:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:59:36 | 001,498,564 | —- | C] () – C:\Windows\SysWow64\igkrng400.bin
[2009/07/13 17:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2009/06/03 15:14:00 | 000,982,220 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2009/06/03 15:14:00 | 000,134,592 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/06/03 15:14:00 | 000,092,216 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[1913/08/01 10:18:54 | 000,056,832 | —- | C] () – C:\Windows\SysWow64\iyvu9_32.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:0B4227B4

< End of report >
OTL Extras logfile created on: 6/26/2011 4:40:05 AM - Run 1
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Users\SD\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.91 Gb Total Physical Memory | 1.73 Gb Available Physical Memory | 44.40% Memory free
7.81 Gb Paging File | 5.12 Gb Available in Paging File | 65.51% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452.36 Gb Total Space | 349.17 Gb Free Space | 77.19% Space Free | Partition Type: NTFS
Drive D: | 13.21 Gb Total Space | 2.20 Gb Free Space | 16.66% Space Free | Partition Type: NTFS

Computer Name: SD-PC | User Name: SD | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [Bridge] – C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] – "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] – "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] – "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [Bridge] – C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] – "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] – "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] – "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0E543634-7E25-4B8F-8D5B-97880E5E5088}" = Bonjour
"{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java™ 6 Update 14 (64-bit)
"{28D73032-5DAA-4F83-B154-85105DBCCB92}" = iTunes
"{2BF35D84-6377-4F70-9F39-97CF67E67FFF}" = Microsoft IntelliPoint 8.0
"{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1" = MotioninJoy ds3 driver version 0.6.0003
"{439760BC-7737-4386-9B1D-A90A3E8A22EA}" = Apple Mobile Device Support
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{85A42FF0-F0D0-44A3-B226-C124D6E8B1D5}" = HP 3D DriveGuard
"{88E60521-1E4E-4785-B9F1-1798A4BD0C30}" = HP MediaSmart SmartMenu
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{98C8DF59-BE5F-4EC2-9B12-FD2A54928EDB}" = Microsoft IntelliType Pro 8.0
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"EPSON NX510 Series" = EPSON NX510 Series Printer Uninstall
"FFE7D41DF3C645075BB149E21988B63996C34187" = ENE CIR Receiver Driver
"HDMI" = Intel® Graphics Media Accelerator Driver
"HP Smart Web Printing" = HP Smart Web Printing 4.60
"Lexmark 9500 Series" = Lexmark 9500 Series
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinRAR archiver" = WinRAR archiver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{01501EBA-EC35-4F9F-8889-3BE346E5DA13}" = MSXML4 Parser
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ 4.0
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{2D4E1F8A-901B-4BBD-B311-B6E56059066E}" = Microsoft Live Search Toolbar
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = HP MediaSmart Movie Themes
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3E31400D-274E-4647-916C-2CACC3741799}" = EpsonNet Print
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = PowerRecover
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4E074808-1B86-4230-A9EB-0904942EC4AE}" = LEGO Star Wars II
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{54CC7901-804D-4155-B353-21F0CC9112AB}" = HP Wireless Assistant
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}" = Sony USB Driver
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart Live TV
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{72CD4C5F-AB0B-4814-8780-9A4F26A2086B}" = Presto! PageManager 7.12.20
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{81DD0597-29EB-4FA0-8223-4F41362B2E72}" = NBA 2K11
"{82A213BD-B6AA-4281-A2D3-59D51893CC56}" = HP MediaSmart Software Notebook Demo
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{A9F6CFB0-806D-11E0-8EA1-B8AC6F97B88E}" = Google Earth Plug-in
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.4.4 MUI
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"{B3575D00-27EF-49C2-B9E0-14B3D954E992}" = Apple Application Support
"{B51605BF-6326-4553-AE96-6D7F1813D5F5}" = HP User Guides 0154
"{B53E61D7-7C80-40DF-82D2-CF5390D6D20A}" = HP Advisor
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{B79920F8-AB6E-45B2-B257-900BBA969FF7}" = Presto! Forms 3.60.10
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}" = Activate Norton Online Backup
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CC8E94A2-55C7-4460-953C-2A790180578C}" = LightScribe System Software
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Picture Package Music Transfer
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DBC4F4D8-6A94-4CFB-9023-666266BB97A6}" = Music Wars Rebirth
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DF802C05-4660-418c-970C-B988ADB1D316}" = Microsoft Live Search Toolbar
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}" = HP MediaSmart Internet TV
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL
"{F3B912F5-EB57-45AA-B3D1-EB532BCF6EF8}" = HP Setup
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{FC17E0A7-EAA9-4902-92F8-C83B9FD02246}" = HP Support Assistant
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FFFAE01B-466F-4C07-9821-A94FD753BDDA}" = EpsonNet Setup
"Activision_THPS2UninstallKey" = Tony Hawk's Pro Skater 2
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"ASIO4ALL" = ASIO4ALL
"AVG PC Tuneup 2011 Patch" = AVG PC Tuneup 2011 Patch
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Cisco Connect" = Cisco Connect
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"conduitEngine" = Conduit Engine
"Diablo II" = Diablo II
"DivX Setup.divx.com" = DivX Setup
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EPSON Scanner" = EPSON Scan
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"ImTOO Video Converter Ultimate" = ImTOO Video Converter Ultimate
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = HP MediaSmart Movie Themes
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{4E074808-1B86-4230-A9EB-0904942EC4AE}" = LEGO Star Wars II
"InstallShield_{67626E09-5366-4480-8F1E-93FADF50CA15}" = HP MediaSmart Live TV
"InstallShield_{B2EE25B9-5B00-4ACF-94F0-92433C28C39E}" = HP MediaSmart Music/Photo/Video
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{E553760D-D7F7-48BF-BD8B-C7E23BA04CB5}" = HP MediaSmart Internet TV
"LastFM_is1" = Last.fm 1.5.4.27091
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Mozilla Firefox (3.6.18)" = Mozilla Firefox (3.6.18)
"N360" = Norton 360
"Out of the Park Baseball11" = Out of the Park Baseball 11
"Sakura" = Sakura
"Sawer" = Sawer
"Searchqu 406 MediaBar" = Windows iLivid Toolbar
"Steam App 400" = Portal
"Steam App 440" = Team Fortress 2
"uTorrent" = µTorrent
"uTorrentBar Toolbar" = uTorrentBar Toolbar
"VLC media player" = VLC media player 1.0.1
"WildTangent hp Master Uninstall" = HP Games
"Winamp" = Winamp
"WinLiveSuite" = Windows Live Essentials
"Xilisoft DVD Ripper Platinum 5" = Xilisoft DVD Ripper Platinum 5

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"UnityWebPlayer" = Unity Web Player

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >
Hello DT35,

Thank you for the OTL log,now lets get going :thumbup:


IMPORTANT NOTE : Please do not delete anything unless instructed to.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

Vista and Windows 7 users:

These tools MUST be run from the executable. (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator")
=======================
  • P2P Programs:


  • P2P programs are a major source of Malware infections.
  • From your log I see you have uTorrent We do not pass judgment on file-sharing, however we must inform you that engaging in this activity and having this kind of software installed on your system will always make you more susceptible to Malware infections.
  • The use of P2P programs may be contributing to your current situation, and you would certainly be doing yourself a favour by removing them.
  • If you wish to keep the program(s), please do not use them until your computer is cleaned.
  • It is strongly recommend that you uninstall any P2P programs you have on your system.

    PLEASE NOTE:
  • Even if you are using a P2P program that is deemed safe, it is only the program that is safe. Any files that you receive using a "safe" P2P program may be infected with Malware. The malware writers use P2P file-sharing as a major conduit to spread infected files.

===========================

Please do the following:
Hold down the Windows key and press R to open a run box
type the following text into the run box

appwiz.cpl

This will open your Programs And FeaturesA list of installed programs will populate

Remove the following programs:

Windows iLivid Toolbar
iLivid
uTorrent
uTorrentBar Toolbar

===========================
NEXT

  • Download OTL to your desktop.
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
      Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
    • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.
    ===========================
    NEXT
    Please download aswMBR ( 511KB ) to your desktop.
    • Double click the aswMBR.exe icon to run it
    • Click the Scan button to start the scan
    • On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.
    ===========================
    Please include in your next reply:
    1. Any problem executing the instructions?
    2. OTL log
    3. aswMBR log
iLivid wasn't in the remove programs window, I think I deleted that before I came here for help.

OTL

OTL logfile created on: 6/26/2011 11:13:50 PM - Run 2
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Users\SD\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.91 Gb Total Physical Memory | 1.98 Gb Available Physical Memory | 50.76% Memory free
7.81 Gb Paging File | 5.34 Gb Available in Paging File | 68.36% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 452.36 Gb Total Space | 348.70 Gb Free Space | 77.08% Space Free | Partition Type: NTFS
Drive D: | 13.21 Gb Total Space | 2.20 Gb Free Space | 16.66% Space Free | Partition Type: NTFS

Computer Name: SD-PC | User Name: SD | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - File not found
PRC - C:\Users\SD\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Last.fm\LastFM.exe (Last.fm)
PRC - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccsvchst.exe (Symantec Corporation)
PRC - c:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe (CyberLink Corp.)
PRC - c:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe (CyberLink)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
PRC - C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe ()
PRC - C:\Program Files (x86)\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (Sony Corporation)
PRC - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe (SEIKO EPSON CORPORATION)


========== Modules (SafeList) ==========

MOD - C:\Users\SD\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (wlcrasvc) – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV:64bit: - (STacSV) – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (hpsrv) – C:\Windows\SysNative\hpservice.exe (Hewlett-Packard)
SRV:64bit: - (AESTFilters) – C:\Windows\SysNative\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe (Andrea Electronics Corporation)
SRV:64bit: - (lxdo_device) – C:\Windows\SysNative\lxdocoms.exe ( )
SRV:64bit: - (lxdoCATSCustConnectService) – C:\Windows\SysNative\spool\DRIVERS\x64\3\\lxdoserv.exe ()
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (N360) – C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe (Symantec Corporation)
SRV - (SwitchBoard) – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (EPSON_EB_RPCV4_01) EPSON V5 Service4(01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (SEIKO EPSON CORPORATION)
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (GameConsoleService) – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (lxdo_device) – C:\Windows\SysWow64\lxdocoms.exe ( )
SRV - (EpsonBidirectionalService) – C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe (SEIKO EPSON CORPORATION)


========== Driver Services (SafeList) ==========

DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (Point64) – C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (dc3d) MS Hardware Device Detection Driver (USB) – C:\Windows\SysNative\drivers\dc3d.sys (Microsoft Corporation)
DRV:64bit: - (MotioninJoyXFilter) – C:\Windows\SysNative\drivers\MijXfilt.sys (MotioninJoy)
DRV:64bit: - (fssfltr) – C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (SymEvent) – C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (xusb21) – C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)
DRV:64bit: - (hpdskflt) – C:\Windows\SysNative\drivers\hpdskflt.sys (Hewlett-Packard Company)
DRV:64bit: - (Accelerometer) – C:\Windows\SysNative\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (SYMTDIv) – C:\Windows\SysNative\drivers\N360x64\0403000.005\symtdiv.sys (Symantec Corporation)
DRV:64bit: - (SymIRON) – C:\Windows\SysNative\drivers\N360x64\0403000.005\ironx64.sys (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:\Windows\SysNative\drivers\N360x64\0403000.005\symefa64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:\Windows\SysNative\drivers\N360x64\0403000.005\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\SysNative\drivers\N360x64\0403000.005\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (ccHP) – C:\Windows\SysNative\drivers\N360x64\0403000.005\cchpx64.sys (Symantec Corporation)
DRV:64bit: - (NETw5s64) Intel® – C:\Windows\SysNative\drivers\NETw5s64.sys (Intel Corporation)
DRV:64bit: - (IntcHdmiAddService) Intel® – C:\Windows\SysNative\drivers\IntcHdmi.sys (Intel® Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (SymDS) – C:\Windows\SysNative\drivers\N360x64\0403000.005\symds64.sys (Symantec Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (NETw1v64) Intel® – C:\Windows\SysNative\drivers\NETw1v64.sys (Intel Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (WSDPrintDevice) – C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (atikmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (enecir) – C:\Windows\SysNative\drivers\enecir.sys (ENE TECHNOLOGY INC.)
DRV:64bit: - (SrvHsfV92) – C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) – C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) – C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (AgereSoftModem) – C:\Windows\SysNative\drivers\agrsm64.sys (LSI Corp)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) Intel® – C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (NuidFltr) – C:\Windows\SysNative\drivers\nuidfltr.sys (Microsoft Corporation)
DRV:64bit: - (HpqKbFiltr) – C:\Windows\SysNative\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
DRV:64bit: - (mcdbus) – C:\Windows\SysNative\drivers\mcdbus.sys (MagicISO, Inc.)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV - (IDSVia64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110624.050\IDSviA64.sys (Symantec Corporation)
DRV - (BHDrvx64) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110616.003\BHDrvx64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110625.002\EX64.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\VirusDefs\20110625.002\ENG64.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (mcdbus) – C:\Windows\SysWOW64\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (libusb0) – C:\Windows\SysWOW64\drivers\libusb0.sys ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cnnb
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/406
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "google.ca"
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: {f701c26a-479a-4724-b4f1-870db12f063c}:1.4.3
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.6
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:[removed]
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid;=119&systemid;=406&q;="
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 0

FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2009/12/19 02:38:29 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn\ [2010/09/10 20:54:50 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn\ [2010/08/29 12:14:52 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/06/23 06:33:33 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/06/23 06:33:33 | 000,000,000 | —D | M]

[2011/06/26 23:11:23 | 000,000,000 | —D | M] (No name found) – C:\Users\SD\AppData\Roaming\Mozilla\Extensions
[2011/06/26 06:03:01 | 000,000,000 | —D | M] (No name found) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions
[2010/12/13 13:07:27 | 000,000,000 | —D | M] (uTorrentBar Community Toolbar) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2011/03/11 15:28:19 | 000,000,000 | —D | M] (Greasemonkey) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011/03/11 15:28:18 | 000,000,000 | —D | M] (Text-to-Image) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{f701c26a-479a-4724-b4f1-870db12f063c}
[2010/12/13 13:07:28 | 000,000,000 | —D | M] (Conduit Engine) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\[removed]
[2011/01/01 18:39:12 | 000,002,566 | —- | M] () – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\searchplugins\askcom.xml
[2011/06/23 05:34:09 | 000,002,501 | —- | M] () – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\searchplugins\SearchResults.xml
[2011/06/26 23:11:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/10/10 04:13:43 | 000,000,000 | —D | M] (Skype extension for Firefox) – C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010/11/10 11:04:41 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/02/16 03:07:25 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/06/26 23:11:23 | 000,000,000 | —D | M] (No name found) – C:\PROGRAM FILES (X86)\WINDOWS ILIVID TOOLBAR\DATAMNGR\FIREFOXEXTENSION
[2010/08/29 12:14:52 | 000,000,000 | —D | M] (Norton Toolbar) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\COFFPLGN
[2010/09/10 20:54:50 | 000,000,000 | —D | M] (Norton IPS) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPLGN
[2011/05/04 04:52:23 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2011/06/23 05:34:09 | 000,002,501 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\SearchResults.xml

O1 HOSTS File: ([2011/01/02 00:26:28 | 000,000,822 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - File not found
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Microsoft Live Search Toolbar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - c:\Program Files (x86)\MSN\Toolbar\3.0.0560.0\msneshellx.dll (Microsoft Corp.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - File not found
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (Microsoft Live Search Toolbar) - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - c:\Program Files (x86)\MSN\Toolbar\3.0.0560.0\msneshellx.dll (Microsoft Corp.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - File not found
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\4.3.0.5\coieplg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [itype] c:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [lxdoamon] C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe ()
O4:64bit: - HKLM..\Run: [lxdomon.exe] C:\Program Files (x86)\Lexmark 9500 Series\lxdomon.exe ()
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4:64bit: - HKLM..\Run: [WrtMon.exe] C:\Windows\SysNative\spool\drivers\x64\3\WrtMon.exe ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [EEventManager] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [HPCam_Menu] c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Lexmark 9500 Series] C:\Program Files (x86)\Lexmark 9500 Series\fm3032.exe ()
O4 - HKLM..\Run: [NortonOnlineBackupReminder] C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe (Symantec Corporation)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [UpdatePRCShortCut] C:\Program Files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKCU..\Run: [EPSON NX510 Series] File not found
O4 - HKCU..\Run: [Epson Stylus NX510(Network)] File not found
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O4 - HKCU..\Run: [Video Library] File not found
O4 - HKLM..\RunOnce: [removeSearchqudatamngr] File not found
O4 - HKLM..\RunOnce: [removeSearchqutoolbar] File not found
O4 - Startup: C:\Users\SD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Picture Motion Browser Media Check Tool.lnk = C:\Program Files (x86)\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe (Sony Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 2
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_14)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/MessengerGam…1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {B3E32D88-8E7F-468F-B0E2-3A300FD4A82C} http://myitlab.pearsoned.com/Pegasus/Modul…ces/ax/stub.cab (Enlite 2.x Simulation Engine Installer)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab (MSN Games - Installer)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} http://messenger.zone.msn.com/binary/MineS…er.cab56986.cab (Minesweeper Flags Class)
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab (ChessControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{ddca1124-4d09-11e0-b77e-fb040d9047cc}\Shell - "" = AutoRun
O33 - MountPoints2\{ddca1124-4d09-11e0-b77e-fb040d9047cc}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (MACHINE BootExecut) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/06/25 13:19:25 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{2927B91F-4193-446E-AE6F-895C03E91E57}
[2011/06/24 11:39:26 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{384F287D-5C5C-4F82-A4F8-D6EF8BBDDE58}
[2011/06/24 09:45:42 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2011/06/24 09:45:42 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2011/06/24 09:45:42 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2011/06/24 09:45:29 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2011/06/24 09:45:26 | 000,000,000 | –SD | C] – C:\ComboFix
[2011/06/24 09:45:11 | 000,000,000 | –SD | C] – C:\32788R22FWJFW
[2011/06/24 09:44:20 | 000,000,000 | —D | C] – C:\Qoobox
[2011/06/23 07:27:13 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Roaming\Tific
[2011/06/23 07:27:13 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\Symantec
[2011/06/23 05:35:27 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\Ilivid Player
[2011/06/23 05:34:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows iLivid Toolbar
[2011/06/21 05:31:24 | 000,000,000 | —D | C] – C:\Users\SD\Documents\Webcam
[2011/06/18 00:13:20 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{6B988CC2-4191-418B-B5B1-79EBB3A14597}
[2011/06/16 18:08:10 | 000,703,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeeds.dll
[2011/06/16 18:08:10 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeeds.dll
[2011/06/16 18:08:09 | 000,256,000 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\iepeers.dll
[2011/06/16 18:08:09 | 000,247,808 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2011/06/16 18:08:09 | 000,185,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\iepeers.dll
[2011/06/16 18:08:09 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2011/06/16 18:08:09 | 000,097,280 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2011/06/16 18:08:09 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2011/06/16 18:08:09 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\licmgr10.dll
[2011/06/16 18:08:09 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\licmgr10.dll
[2011/06/16 18:08:09 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\msfeedssync.exe
[2011/06/16 18:08:09 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\msfeedssync.exe
[2011/06/16 18:08:08 | 000,482,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\html.iec
[2011/06/16 18:08:08 | 000,386,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\html.iec
[2011/06/16 18:06:05 | 000,197,120 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2011/06/16 18:06:05 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2011/06/16 18:05:58 | 000,861,184 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\oleaut32.dll
[2011/06/13 23:02:38 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{FACDEE1A-604B-4E56-97C7-C53D1AE4FEC1}
[2011/06/12 17:15:49 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2011/06/12 13:04:54 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{BDE88CBD-1F55-44DB-82FA-50E8B5059B04}
[2011/06/09 02:39:43 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{1275D24E-AB32-4605-99E6-781EB438DC04}
[2011/06/09 02:27:52 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{75E1105F-ADB4-4ED0-877B-79488B937F4A}
[2011/06/08 15:55:57 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\2K Sports
[2011/06/08 15:39:24 | 000,000,000 | —D | C] – C:\Program Files (x86)\2K Sports
[2011/06/08 15:38:17 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Roaming\2K Sports
[2011/06/07 23:32:44 | 000,000,000 | —D | C] – C:\Program Files (x86)\AVG
[2011/06/07 23:19:52 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{6A2EADBC-3CB7-4712-A271-39119463CDD6}
[2011/06/07 23:00:34 | 000,000,000 | —D | C] – C:\Program Files (x86)\Uniblue
[2011/06/07 23:00:16 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\PackageAware
[2011/06/07 22:54:04 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Roaming\Systweak
[2011/06/07 22:54:02 | 000,018,816 | —- | C] (Systweak Inc., (www.systweak.com)) – C:\Windows\SysNative\roboot64.exe
[2011/06/05 13:04:07 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{E21D310F-F577-4BEC-8A26-FFF40DAEDCAB}
[2011/05/31 13:36:19 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\{7C809736-549F-43E8-88DD-89823692C9CA}
[2011/05/04 10:05:18 | 000,360,448 | —- | C] ( ) – C:\Windows\SysWow64\lxdoinpa.dll
[2011/05/04 10:05:18 | 000,339,968 | —- | C] ( ) – C:\Windows\SysWow64\lxdoiesc.dll
[2011/05/04 10:05:17 | 000,643,072 | —- | C] ( ) – C:\Windows\SysWow64\lxdopmui.dll
[2011/05/04 10:05:16 | 000,954,368 | —- | C] ( ) – C:\Windows\SysWow64\lxdousb1.dll
[2011/05/04 10:05:15 | 001,069,056 | —- | C] ( ) – C:\Windows\SysWow64\lxdoserv.dll
[2011/05/04 10:05:15 | 000,569,344 | —- | C] ( ) – C:\Windows\SysWow64\lxdolmpm.dll
[2011/05/04 10:05:15 | 000,053,248 | —- | C] ( ) – C:\Windows\SysWow64\lxdoprox.dll
[2011/05/04 10:05:14 | 000,851,968 | —- | C] ( ) – C:\Windows\SysWow64\lxdocomc.dll
[2011/05/04 10:05:14 | 000,663,552 | —- | C] ( ) – C:\Windows\SysWow64\lxdohbn3.dll
[2011/05/04 10:05:14 | 000,589,824 | —- | C] ( ) – C:\Windows\SysWow64\lxdocoms.exe
[2011/05/04 10:05:14 | 000,364,544 | —- | C] ( ) – C:\Windows\SysWow64\lxdocomm.dll
[2011/05/04 10:05:14 | 000,315,392 | —- | C] ( ) – C:\Windows\SysWow64\lxdoih.exe
[2011/05/04 10:05:13 | 000,360,448 | —- | C] ( ) – C:\Windows\SysWow64\lxdocfg.exe
[5 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/06/26 23:09:15 | 000,000,890 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/06/26 08:59:00 | 000,000,886 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/06/25 13:26:06 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/06/25 13:26:06 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/06/25 13:13:50 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/06/25 13:13:48 | 597,519,966 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/06/25 13:13:44 | 3145,089,024 | -HS- | M] () – C:\hiberfil.sys
[2011/06/18 00:07:50 | 005,009,064 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/06/12 17:15:54 | 000,001,783 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/06/07 23:33:15 | 000,081,248 | —- | M] () – C:\Program Files (x86)\Uninstall.exe
[2011/06/07 23:33:15 | 000,001,868 | —- | M] () – C:\Program Files (x86)\Uninstall.ini
[2011/06/07 23:16:25 | 000,001,632 | —- | M] () – C:\Windows\SysNative\ASOROSet.bin
[2011/06/07 13:03:14 | 000,018,816 | —- | M] (Systweak Inc., (www.systweak.com)) – C:\Windows\SysNative\roboot64.exe
[5 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/06/24 09:45:42 | 000,256,512 | —- | C] () – C:\Windows\PEV.exe
[2011/06/24 09:45:42 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2011/06/24 09:45:42 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2011/06/24 09:45:42 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2011/06/24 09:45:42 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2011/06/12 17:15:51 | 000,001,783 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2011/06/07 23:33:15 | 000,001,868 | —- | C] () – C:\Program Files (x86)\Uninstall.ini
[2011/06/07 23:04:41 | 000,001,632 | —- | C] () – C:\Windows\SysNative\ASOROSet.bin
[2011/05/05 10:13:53 | 000,033,792 | —- | C] () – C:\Windows\SysWow64\drivers\libusb0.sys
[2011/05/04 10:06:36 | 000,028,672 | —- | C] () – C:\Windows\hookdllX.dll
[2011/05/04 10:06:36 | 000,011,776 | —- | C] () – C:\Windows\SysWow64\pmsbfn32.dll
[2011/05/04 10:05:18 | 000,385,024 | —- | C] () – C:\Windows\SysWow64\lxdocomx.dll
[2011/05/04 10:05:18 | 000,348,160 | —- | C] () – C:\Windows\SysWow64\lxdoinst.dll
[2011/04/02 08:57:08 | 000,081,248 | —- | C] () – C:\Program Files (x86)\Uninstall.exe
[2011/03/21 12:59:12 | 000,003,584 | —- | C] () – C:\Users\SD\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/03/19 17:45:45 | 000,043,520 | —- | C] () – C:\Windows\SysWow64\CmdLineExt03.dll
[2011/01/30 23:51:37 | 000,000,616 | —- | C] () – C:\Windows\eReg.dat
[2010/10/10 04:18:50 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/09/04 16:56:21 | 000,073,220 | —- | C] () – C:\Windows\SysWow64\EPPICPrinterDB.dat
[2010/09/04 16:56:21 | 000,031,053 | —- | C] () – C:\Windows\SysWow64\EPPICPattern131.dat
[2010/09/04 16:56:21 | 000,029,114 | —- | C] () – C:\Windows\SysWow64\EPPICPattern1.dat
[2010/09/04 16:56:21 | 000,027,417 | —- | C] () – C:\Windows\SysWow64\EPPICPattern121.dat
[2010/09/04 16:56:21 | 000,021,021 | —- | C] () – C:\Windows\SysWow64\EPPICPattern3.dat
[2010/09/04 16:56:21 | 000,015,670 | —- | C] () – C:\Windows\SysWow64\EPPICPattern5.dat
[2010/09/04 16:56:21 | 000,013,280 | —- | C] () – C:\Windows\SysWow64\EPPICPattern2.dat
[2010/09/04 16:56:21 | 000,010,673 | —- | C] () – C:\Windows\SysWow64\EPPICPattern4.dat
[2010/09/04 16:56:21 | 000,004,943 | —- | C] () – C:\Windows\SysWow64\EPPICPattern6.dat
[2010/09/04 16:56:21 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2010/09/04 16:56:21 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2010/09/04 16:56:21 | 000,001,137 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2010/09/04 16:56:21 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2010/09/04 16:56:21 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2010/09/04 16:56:21 | 000,001,104 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2010/09/04 16:56:21 | 000,000,097 | —- | C] () – C:\Windows\SysWow64\PICSDK.ini
[2010/09/04 16:51:13 | 000,000,079 | —- | C] () – C:\Windows\EPNX510.ini
[2010/07/24 18:13:06 | 000,000,132 | —- | C] () – C:\Users\SD\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/04/17 22:59:23 | 000,000,040 | -HS- | C] () – C:\ProgramData\.zreglib
[2009/12/28 23:04:24 | 000,043,809 | —- | C] () – C:\Users\SD\AppData\Local\tmpSNAPSHOT_20091227.0
[2009/12/28 23:04:24 | 000,035,438 | —- | C] () – C:\Users\SD\AppData\Local\tmpSNAPSHOT_20091227.JPG
[2009/12/19 04:28:18 | 000,003,654 | —- | C] () – C:\Windows\SysWow64\drivers\Sonyhcp.dll
[2009/12/19 02:37:44 | 000,023,111 | —- | C] () – C:\Windows\hpqins15.dat
[2009/08/21 00:31:22 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2009/08/13 22:51:32 | 000,439,300 | —- | C] () – C:\Windows\SysWow64\igcompkrng500.bin
[2009/07/15 20:50:42 | 000,013,312 | —- | C] () – C:\Windows\LPRES.DLL
[2009/07/14 01:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 22:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 22:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 20:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 19:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 17:59:36 | 001,498,564 | —- | C] () – C:\Windows\SysWow64\igkrng400.bin
[2009/07/13 17:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 17:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2009/06/03 15:14:00 | 000,982,220 | —- | C] () – C:\Windows\SysWow64\igkrng500.bin
[2009/06/03 15:14:00 | 000,134,592 | —- | C] () – C:\Windows\SysWow64\igfcg500.bin
[2009/06/03 15:14:00 | 000,092,216 | —- | C] () – C:\Windows\SysWow64\igfcg500m.bin
[1913/08/01 10:18:54 | 000,056,832 | —- | C] () – C:\Windows\SysWow64\iyvu9_32.dll

========== LOP Check ==========

[2011/03/02 22:17:42 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\.minecraft
[2011/06/08 15:38:17 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\2K Sports
[2011/05/07 21:23:04 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\9500 Series
[2010/01/15 19:16:56 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\EA
[2010/09/09 09:47:02 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Epson
[2010/07/22 04:10:46 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\GameRanger
[2010/01/31 00:58:20 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Hardcore
[2011/05/20 11:56:08 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\ImTOO Software Studio
[2010/01/31 00:58:18 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Juce VST Host
[2010/09/04 17:13:32 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Leadertech
[2011/05/26 00:29:05 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Lexmark Productivity Studio
[2011/02/03 18:44:31 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\MotioninJoy
[2010/03/28 01:58:53 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\MusicBrainz
[2011/03/11 19:14:47 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\NFT
[2010/12/20 18:23:52 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Out of the Park Developments
[2010/12/25 23:49:02 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\PFStaticIP
[2010/05/20 23:03:33 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Sports Interactive
[2010/04/08 22:33:18 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\StreamTorrent
[2010/01/26 17:47:46 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\SynthMaker
[2011/06/07 23:26:17 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Systweak
[2011/06/23 07:27:13 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Tific
[2011/06/26 23:12:24 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\uTorrent
[2009/12/20 19:38:22 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\WildTangent
[2010/08/29 12:05:21 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\WinBatch
[2011/05/04 18:09:55 | 000,000,000 | —D | M] – C:\Users\SD\AppData\Roaming\Windows Live Writer
[2009/07/14 01:08:49 | 000,031,150 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:0B4227B4

< End of report >

MBR


aswMBR version 0.9.7.675 Copyright© 2011 AVAST Software
Run date: 2011-06-27 11:40:57
—————————–
11:40:57.609 OS Version: Windows x64 6.1.7600
11:40:57.609 Number of processors: 2 586 0x170A
11:40:57.610 ComputerName: SD-PC UserName: SD
11:41:00.393 Initialize success
11:41:07.550 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
11:41:07.553 Disk 0 Vendor: FUJITSU_ 8919 Size: 476940MB BusType: 3
11:41:07.562 Disk 0 MBR read successfully
11:41:07.565 Disk 0 MBR scan
11:41:07.568 Disk 0 unknown MBR code
11:41:07.572 Service scanning
11:41:08.509 Disk 0 trace - called modules:
11:41:08.528 ntoskrnl.exe CLASSPNP.SYS disk.sys hpdskflt.sys iaStor.sys hal.dll
11:41:08.534 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8005806060]
11:41:08.541 3 CLASSPNP.SYS[fffff8800113843f] -> nt!IofCallDriver -> [0xfffffa8005805040]
11:41:08.547 5 hpdskflt.sys[fffff88001e572bd] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0xfffffa8004b2d050]
11:41:08.555 Scan finished successfully
11:41:13.702 Disk 0 MBR has been saved successfully to "C:\Users\SD\Downloads\MBR.dat"
11:41:13.703 The log file has been saved successfully to "C:\Users\SD\Downloads\aswMBR.txt"
Hello DT35,

Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :Services
    
    :OTL
    PRC - File not found –
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/406
    IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
    FF - prefs.js..browser.search.defaultengine: "Ask.com"
    FF - prefs.js..browser.search.defaultenginename: "Ask.com"
    FF - prefs.js..browser.search.order.1: "Ask.com"
    FF - prefs.js..browser.search.selectedEngine: "Ask.com"
    FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2
    FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
    FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=119&systemid=406&q="
    [2010/12/13 13:07:28 | 000,000,000 | —D | M] (Conduit Engine) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\[removed]
    [2011/01/01 18:39:12 | 000,002,566 | —- | M] () – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\searchplugins\askcom.xml
    O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - File not found
    O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - File not found
    O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
    O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - File not found
    O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
    O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O33 - MountPoints2\{ddca1124-4d09-11e0-b77e-fb040d9047cc}\Shell - "" = AutoRun
    O33 - MountPoints2\{ddca1124-4d09-11e0-b77e-fb040d9047cc}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
    [2011/06/24 09:45:42 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
    [2011/06/23 05:35:27 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\Ilivid Player
    [2011/06/23 05:34:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows iLivid Toolbar
    [5 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
    [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
    [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
    [2011/06/07 23:16:25 | 000,001,632 | —- | M] () – C:\Windows\SysNative\ASOROSet.bin
    [2009/08/21 00:31:22 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
    @Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:0B4227B4
    
    :Commands
    [createrestorepoint]
    [purity]
    [emptytemp]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )
==================
Please include in your next reply:
1. Any problem executing the instructions?
2. OTL log
3. How is the computer behaving?
When I insert that to OTL, the program gets a few lines into the scan and then freezes every time. This is what it says:

PCR - file not found –

IE - HKCU\software\microsoft\internet explorer\main,start page = http://searchqu.com/406
IE - HKCU\..\URLsearchhook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File Not Found.
FF - prefs.js..browser..search.defaultengine: "ask.com"
FF - prefs.js..browser..search.defaultenginename: "ask.com"
FF - prefs.js..browser..search.order.1: "Ask.com"

And then I get non responding.
Hello DT35,

Lets try it this way.


Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :Services
    
    :processes
    killallprocesses
    
    :OTL
    PRC - File not found –
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/406
    IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
    FF - prefs.js..browser.search.defaultengine: "Ask.com"
    FF - prefs.js..browser.search.defaultenginename: "Ask.com"
    FF - prefs.js..browser.search.order.1: "Ask.com"
    FF - prefs.js..browser.search.selectedEngine: "Ask.com"
    FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2
    FF - prefs.js..extensions.enabledItems: {1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0
    FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid=119&systemid=406&q="
    [2010/12/13 13:07:28 | 000,000,000 | —D | M] (Conduit Engine) – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\[removed]
    [2011/01/01 18:39:12 | 000,002,566 | —- | M] () – C:\Users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\searchplugins\askcom.xml
    O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - File not found
    O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - File not found
    O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
    O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - File not found
    O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
    O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
    O33 - MountPoints2\{ddca1124-4d09-11e0-b77e-fb040d9047cc}\Shell - "" = AutoRun
    O33 - MountPoints2\{ddca1124-4d09-11e0-b77e-fb040d9047cc}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
    [2011/06/24 09:45:42 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
    [2011/06/23 05:35:27 | 000,000,000 | —D | C] – C:\Users\SD\AppData\Local\Ilivid Player
    [2011/06/23 05:34:09 | 000,000,000 | —D | C] – C:\Program Files (x86)\Windows iLivid Toolbar
    [5 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
    [3 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
    [1 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
    [2011/06/07 23:16:25 | 000,001,632 | —- | M] () – C:\Windows\SysNative\ASOROSet.bin
    [2009/08/21 00:31:22 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
    @Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:0B4227B4
    
    :Commands
    [createrestorepoint]
    [purity]
    [emptytemp]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )
==================
Please include in your next reply:
1. Any problem executing the instructions?
2. OTL log
3. How is the computer behaving?
Hi DT35,

Download Combofix from either of the links below, and save it to your desktop.
Link 1
Link 2

**Note: It is important that it is saved directly to your desktop**

——————————————————————–

IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

——————————————————————–

Double click on ComboFix.exe & follow the prompts.
  • When finished, it will produce a report for you.
  • Please post the C:\ComboFix.txt for further review.
===============
Please include in your next reply:
1. Any problem executing the instructions?
2. Combofix log
3. How is the computer behaving?
Internet still loading extremely slow, and videos buffering extremely slow.

ComboFix 11-06-27.01 - SD 27/06/2011  21:14:32.1.2 - x64
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.2.1033.18.3999.2198 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: Norton 360 *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
FW: Norton 360 *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
SP: Norton 360 *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Uninstall.exe
c:\program files (x86)\Uninstall.ini
c:\users\Public\videos\HP MediaSmart Demo.exe
.
.
(((((((((((((((((((((((((   Files Created from 2011-05-28 to 2011-06-28  )))))))))))))))))))))))))))))))
.
.
2011-06-28 01:24 . 2011-06-28 01:24	——–	d—–w-	c:\users\Default\AppData\Local\temp
2011-06-27 19:11 . 2011-06-27 19:11	——–	d—–w-	c:\users\SD\AppData\Local\{AD5E08EB-8340-4D6E-9535-926DBBFF7B4F}
2011-06-27 18:10 . 2011-06-27 18:10	——–	d—–w-	C:\_OTL
2011-06-25 17:19 . 2011-06-25 17:19	——–	d—–w-	c:\users\SD\AppData\Local\{2927B91F-4193-446E-AE6F-895C03E91E57}
2011-06-24 15:39 . 2011-06-24 15:39	——–	d—–w-	c:\users\SD\AppData\Local\{384F287D-5C5C-4F82-A4F8-D6EF8BBDDE58}
2011-06-24 13:45 . 2011-06-28 01:12	——–	d—–w-	C:\32788R22FWJFW
2011-06-23 11:27 . 2011-06-23 11:27	——–	d—–w-	c:\users\SD\AppData\Roaming\Tific
2011-06-23 11:27 . 2011-06-23 11:27	——–	d—–w-	c:\users\SD\AppData\Local\Symantec
2011-06-23 09:35 . 2011-06-23 09:35	——–	d—–w-	c:\users\SD\AppData\Local\Ilivid Player
2011-06-18 04:13 . 2011-06-18 04:13	——–	d—–w-	c:\users\SD\AppData\Local\{6B988CC2-4191-418B-B5B1-79EBB3A14597}
2011-06-16 22:09 . 2011-04-25 05:32	1896832	—-a-w-	c:\windows\system32\drivers\tcpip.sys
2011-06-16 22:09 . 2011-04-25 02:44	499712	—-a-w-	c:\windows\system32\drivers\afd.sys
2011-06-16 22:09 . 2011-04-27 02:57	102400	—-a-w-	c:\windows\system32\drivers\dfsc.sys
2011-06-16 22:06 . 2011-01-17 06:17	197120	—-a-w-	c:\windows\system32\d3d10_1.dll
2011-06-16 22:06 . 2011-01-17 05:38	161792	—-a-w-	c:\windows\SysWow64\d3d10_1.dll
2011-06-16 22:06 . 2011-04-29 03:13	461312	—-a-w-	c:\windows\system32\drivers\srv.sys
2011-06-16 22:06 . 2011-04-29 03:12	399872	—-a-w-	c:\windows\system32\drivers\srv2.sys
2011-06-16 22:06 . 2011-04-29 03:12	161792	—-a-w-	c:\windows\system32\drivers\srvnet.sys
2011-06-16 22:05 . 2010-12-18 06:13	861184	—-a-w-	c:\windows\system32\oleaut32.dll
2011-06-16 22:05 . 2010-12-18 05:31	571904	—-a-w-	c:\windows\SysWow64\oleaut32.dll
2011-06-16 22:05 . 2011-05-03 05:21	976896	—-a-w-	c:\windows\system32\inetcomm.dll
2011-06-16 22:05 . 2011-05-03 04:50	740864	—-a-w-	c:\windows\SysWow64\inetcomm.dll
2011-06-14 03:02 . 2011-06-14 03:02	——–	d—–w-	c:\users\SD\AppData\Local\{FACDEE1A-604B-4E56-97C7-C53D1AE4FEC1}
2011-06-12 17:04 . 2011-06-12 17:05	——–	d—–w-	c:\users\SD\AppData\Local\{BDE88CBD-1F55-44DB-82FA-50E8B5059B04}
2011-06-09 06:39 . 2011-06-09 06:39	——–	d—–w-	c:\users\SD\AppData\Local\{1275D24E-AB32-4605-99E6-781EB438DC04}
2011-06-09 06:27 . 2011-06-09 06:28	——–	d—–w-	c:\users\SD\AppData\Local\{75E1105F-ADB4-4ED0-877B-79488B937F4A}
2011-06-08 19:39 . 2011-06-08 19:39	——–	d—–w-	c:\program files (x86)\2K Sports
2011-06-08 19:38 . 2011-06-08 19:38	——–	d—–w-	c:\users\SD\AppData\Roaming\2K Sports
2011-06-08 03:32 . 2011-06-08 03:32	——–	d—–w-	c:\program files (x86)\AVG
2011-06-08 03:19 . 2011-06-08 03:19	——–	d—–w-	c:\users\SD\AppData\Local\{6A2EADBC-3CB7-4712-A271-39119463CDD6}
2011-06-08 03:04 . 2011-06-08 03:16	1632	—-a-w-	c:\windows\system32\ASOROSet.bin
2011-06-08 03:00 . 2011-06-08 03:00	——–	d—–w-	c:\program files (x86)\Uniblue
2011-06-08 03:00 . 2011-06-08 03:00	——–	d—–w-	c:\users\SD\AppData\Local\PackageAware
2011-06-08 02:54 . 2011-06-08 03:26	——–	d—–w-	c:\users\SD\AppData\Roaming\Systweak
2011-06-08 02:54 . 2011-06-07 17:03	18816	—-a-w-	c:\windows\system32\roboot64.exe
2011-06-05 17:04 . 2011-06-05 17:04	——–	d—–w-	c:\users\SD\AppData\Local\{E21D310F-F577-4BEC-8A26-FFF40DAEDCAB}
2011-05-31 17:36 . 2011-05-31 17:36	——–	d—–w-	c:\users\SD\AppData\Local\{7C809736-549F-43E8-88DD-89823692C9CA}
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-10 12:06 . 2011-05-10 12:06	51712	—-a-w-	c:\windows\system32\drivers\usbaapl64.sys
2011-05-10 12:06 . 2011-05-10 12:06	4517664	—-a-w-	c:\windows\system32\usbaaplrc.dll
2011-05-08 22:19 . 2011-05-08 22:19	0	—-a-w-	c:\windows\DXT2F53.tmp
2011-05-08 22:19 . 2011-05-08 22:19	0	—-a-w-	c:\windows\DXT2F52.tmp
2011-05-08 22:19 . 2011-05-08 22:19	0	—-a-w-	c:\windows\DXT2F32.tmp
2011-05-05 17:25 . 2011-03-19 21:45	43520	—-a-w-	c:\windows\SysWow64\CmdLineExt03.dll
2011-05-04 08:52 . 2010-05-15 02:41	472808	—-a-w-	c:\windows\SysWow64\deployJava1.dll
2011-05-02 09:04 . 2011-05-02 09:04	249856	——w-	c:\windows\Setup1.exe
2011-05-02 09:04 . 2011-05-02 09:04	73216	—-a-w-	c:\windows\ST6UNST.EXE
2011-04-22 20:18 . 2011-05-24 18:32	27008	—-a-w-	c:\windows\system32\drivers\Diskdump.sys
2011-04-09 06:58 . 2011-05-19 03:32	142336	—-a-w-	c:\windows\system32\poqexec.exe
2011-04-09 06:45 . 2011-05-11 05:34	5509504	—-a-w-	c:\windows\system32\ntoskrnl.exe
2011-04-09 06:13 . 2011-05-11 05:34	3957632	—-a-w-	c:\windows\SysWow64\ntkrnlpa.exe
2011-04-09 06:13 . 2011-05-11 05:34	3901824	—-a-w-	c:\windows\SysWow64\ntoskrnl.exe
2011-04-09 05:56 . 2011-05-19 03:32	123904	—-a-w-	c:\windows\SysWow64\poqexec.exe
2011-04-06 20:26 . 2011-04-06 20:26	96544	—-a-w-	c:\windows\system32\dnssd.dll
2011-04-06 20:26 . 2011-04-06 20:26	119584	—-a-w-	c:\windows\system32\dns-sd.exe
2011-04-06 20:20 . 2011-04-06 20:20	91424	—-a-w-	c:\windows\SysWow64\dnssd.dll
2011-04-06 20:20 . 2011-04-06 20:20	107808	—-a-w-	c:\windows\SysWow64\dns-sd.exe
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"="c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-07-16 1668664]
"LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-05-26 1242448]
"msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]
"QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-24 323640]
"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-05-13 581480]
"UpdatePRCShortCut"="c:\program files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"EEventManager"="c:\progra~2\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"Lexmark 9500 Series"="c:\program files (x86)\Lexmark 9500 Series\fm3032.exe" [2007-09-18 307200]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-06-07 421160]
.
c:\users\SD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Picture Motion Browser Media Check Tool.lnk - c:\program files (x86)\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2009-12-19 344064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"WallpaperStyle"= 2
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-22 136176]
R2 lxdoCATSCustConnectService;lxdoCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxdoserv.exe [2007-07-17 28672]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-22 136176]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys [x]
R3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw1v64.sys [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\0403000.005\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\0403000.005\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110616.003\BHDrvx64.sys [2011-05-19 1143416]
S1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360x64\0403000.005\ccHPx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110624.050\IDSvia64.sys [2011-06-03 488056]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\0403000.005\Ironx64.SYS [x]
S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\N360x64\0403000.005\SYMTDIV.SYS [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x]
S2 lxdo_device;lxdo_device;c:\windows\system32\lxdocoms.exe [2007-09-20 1039360]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe [2010-02-26 126392]
S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [x]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-10 136824]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x]
S3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 17:24	451872	—-a-w-	c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-06-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-22 15:16]
.
2011-06-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-22 15:16]
.
2011-06-28 c:\windows\Tasks\HPCeeScheduleForSD.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07 09:22]
.
.
——— x86-64 ———–
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-07-21 610872]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-21 171520]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-01-06 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-01-06 387608]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-01-06 365592]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-03-23 487424]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2010-07-21 2306448]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-01-07 2328944]
"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2007-04-11 26704]
"lxdomon.exe"="c:\program files (x86)\Lexmark 9500 Series\lxdomon.exe" [2007-09-06 450560]
"lxdoamon"="c:\program files (x86)\Lexmark 9500 Series\lxdoamon.exe" [2007-08-10 20480]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.searchqu.com/406
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp;=iehome&locale;=en_CA&c;=94&bd;=Pavilion&pf;=cnnb
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport; to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - google.ca
FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid;=119&systemid;=406&q;=
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Text-to-Image: {f701c26a-479a-4724-b4f1-870db12f063c} - %profile%\extensions\{f701c26a-479a-4724-b4f1-870db12f063c}
FF - Ext: Conduit Engine : [removed] - %profile%\extensions\[removed]
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
FF - Ext: Norton IPS: {BBDA0591-3099-440a-AA10-41764D9DB4DB} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn
FF - Ext: Norton Toolbar: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
Toolbar-10 - (no file)
Toolbar-10 - (no file)
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\4.3.0.5\diMaster.dll\" /prefetch:1"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
———————— Other Running Processes ————————
.
c:\program files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
c:\program files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
c:\windows\System32\spool\drivers\x64\3\WrtProc.exe
c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files (x86)\Mozilla Firefox\firefox.exe
.
**************************************************************************
.
Completion time: 2011-06-27  21:36:29 - machine was rebooted
ComboFix-quarantined-files.txt  2011-06-28 01:36
.
Pre-Run: 391,615,520,768 bytes free
Post-Run: 391,258,914,816 bytes free
.
- - End Of File - - 901C114391EEBCD46E9984023A3C3E2C
Hello DT35,


Please go to one of the below sites to scan the following files:
Virus Total
jotti.org
Kaspersky Virus File Scanner


click on Browse, and upload the following file for analysis:
c:\windows\Setup1.exe

Then click Submit. Allow the file to be scanned, and then please copy and paste the results here for me to see.
If it says already scanned – click "reanalyze now"
Please post the results in your next reply.

==================
Vista and Windows 7 users:

These tools MUST be run from the executable. (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator")
=======================
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below.
  • They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".

ComboFix - CFScript

This script is for this user and computer ONLY! Using this tool incorrectly could cause problems with your operating system… preventing it from ever starting again!
You will not have Internet access when you execute ComboFix. All open windows will need to be closed!

Open notepad and copy/paste the text in the quotebox below into it:

KILLALL::


File::
c:\windows\DXT2F53.tmp
c:\windows\DXT2F52.tmp
c:\windows\DXT2F32.tmp

Folder::
c:\users\SD\AppData\Local\Ilivid Player
c:\program files (x86)\AVG

Firefox::
uStart Page = hxxp://www.searchqu.com/406
FF - ProfilePath - c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=119&systemid=406&q=
FF - Ext: uTorrentBar Community Toolbar: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - %profile%\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}


Save this as "CFScript.txt", and as Type: All Files (*.*) in the same location as ComboFix.exe

[external image: Posted Image]

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

==============
Please include in your next reply:
1. Any problem executing the instructions?
2. CFScript log
3. virustotal log
Computer still going kind of slow, but I am starting to think it is unrelated to the searchqu thing. Jotti.org detected no viruses.

ComboFix 11-06-27.01 - SD 28/06/2011 15:02:11.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.2.1033.18.3999.2270 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
Command switches used :: c:\users\SD\Desktop\CFScript.txt
AV: Norton 360 *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}
FW: Norton 360 *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}
SP: Norton 360 *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\DXT2F32.tmp"
"c:\windows\DXT2F52.tmp"
"c:\windows\DXT2F53.tmp"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\AVG
c:\program files (x86)\AVG\AVG PC Tuneup 2011\bugreport.txt
c:\program files (x86)\AVG\AVG PC Tuneup 2011\Data\AVG\AVG PC Tuneup 2011\aushelper.dll
c:\program files (x86)\AVG\AVG PC Tuneup 2011\Data\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
c:\program files (x86)\AVG\AVG PC Tuneup 2011\Data\AVG\AVG PC Tuneup 2011\commonforms.dll
c:\program files (x86)\AVG\AVG PC Tuneup 2011\Data\AVG\AVG PC Tuneup 2011\TweakManager.exe
c:\program files (x86)\AVG\AVG PC Tuneup 2011\Data\Uninstall.exe
c:\program files (x86)\AVG\AVG PC Tuneup 2011\Data\Uninstall.ini
c:\users\SD\AppData\Local\Ilivid Player
c:\users\SD\AppData\Local\Ilivid Player\script.qscript
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome.manifest
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\chrome\utorrentbar.jar
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitAutoCompleteSearch.js
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitAutoCompleteSearch.xpt
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.idl
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.js
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\ConduitToolbar.xpt
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.dll
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.xpt
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCoreGecko19.dll
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\alertSettingsComponent.xml
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\appContextMenu.xml
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\engineContextMenu.xml
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\engineSettings.json
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\fbAlert.js
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\getAppsContextMenu.xml
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\postAppsContextMenu.xml
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\toolbarContextMenu.xml
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\defaults\unsharedAppsContextMenu.xml
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\install.rdf
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\lib\xpcom.js
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\manifest.mf
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\zigbert.rsa
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\META-INF\zigbert.sf
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.gif
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.ico
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.PNG
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.src
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\searchplugin\conduit.xml
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\setup.ini
c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\version.txt
c:\windows\DXT2F32.tmp
c:\windows\DXT2F52.tmp
c:\windows\DXT2F53.tmp
.
.
((((((((((((((((((((((((( Files Created from 2011-05-28 to 2011-06-28 )))))))))))))))))))))))))))))))
.
.
2011-06-28 19:53 . 2011-06-28 19:53 -------- d-----w- c:\users\SD\AppData\Local\{9A8C3A05-8749-4E05-ABE2-887F9240DDC2}
2011-06-28 19:49 . 2011-06-28 19:49 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-06-27 19:11 . 2011-06-27 19:11 -------- d-----w- c:\users\SD\AppData\Local\{AD5E08EB-8340-4D6E-9535-926DBBFF7B4F}
2011-06-27 18:10 . 2011-06-27 18:10 -------- d-----w- C:\_OTL
2011-06-25 17:19 . 2011-06-25 17:19 -------- d-----w- c:\users\SD\AppData\Local\{2927B91F-4193-446E-AE6F-895C03E91E57}
2011-06-24 15:39 . 2011-06-24 15:39 -------- d-----w- c:\users\SD\AppData\Local\{384F287D-5C5C-4F82-A4F8-D6EF8BBDDE58}
2011-06-23 11:27 . 2011-06-23 11:27 -------- d-----w- c:\users\SD\AppData\Roaming\Tific
2011-06-23 11:27 . 2011-06-23 11:27 -------- d-----w- c:\users\SD\AppData\Local\Symantec
2011-06-18 04:13 . 2011-06-18 04:13 -------- d-----w- c:\users\SD\AppData\Local\{6B988CC2-4191-418B-B5B1-79EBB3A14597}
2011-06-16 22:09 . 2011-04-25 05:32 1896832 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-06-16 22:09 . 2011-04-25 02:44 499712 ----a-w- c:\windows\system32\drivers\afd.sys
2011-06-16 22:09 . 2011-04-27 02:57 102400 ----a-w- c:\windows\system32\drivers\dfsc.sys
2011-06-16 22:06 . 2011-01-17 06:17 197120 ----a-w- c:\windows\system32\d3d10_1.dll
2011-06-16 22:06 . 2011-01-17 05:38 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2011-06-16 22:06 . 2011-04-29 03:13 461312 ----a-w- c:\windows\system32\drivers\srv.sys
2011-06-16 22:06 . 2011-04-29 03:12 399872 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-06-16 22:06 . 2011-04-29 03:12 161792 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-06-16 22:05 . 2010-12-18 06:13 861184 ----a-w- c:\windows\system32\oleaut32.dll
2011-06-16 22:05 . 2010-12-18 05:31 571904 ----a-w- c:\windows\SysWow64\oleaut32.dll
2011-06-16 22:05 . 2011-05-03 05:21 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-06-16 22:05 . 2011-05-03 04:50 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-06-14 03:02 . 2011-06-14 03:02 -------- d-----w- c:\users\SD\AppData\Local\{FACDEE1A-604B-4E56-97C7-C53D1AE4FEC1}
2011-06-12 17:04 . 2011-06-12 17:05 -------- d-----w- c:\users\SD\AppData\Local\{BDE88CBD-1F55-44DB-82FA-50E8B5059B04}
2011-06-09 06:39 . 2011-06-09 06:39 -------- d-----w- c:\users\SD\AppData\Local\{1275D24E-AB32-4605-99E6-781EB438DC04}
2011-06-09 06:27 . 2011-06-09 06:28 -------- d-----w- c:\users\SD\AppData\Local\{75E1105F-ADB4-4ED0-877B-79488B937F4A}
2011-06-08 19:39 . 2011-06-08 19:39 -------- d-----w- c:\program files (x86)\2K Sports
2011-06-08 19:38 . 2011-06-08 19:38 -------- d-----w- c:\users\SD\AppData\Roaming\2K Sports
2011-06-08 03:19 . 2011-06-08 03:19 -------- d-----w- c:\users\SD\AppData\Local\{6A2EADBC-3CB7-4712-A271-39119463CDD6}
2011-06-08 03:04 . 2011-06-08 03:16 1632 ----a-w- c:\windows\system32\ASOROSet.bin
2011-06-08 03:00 . 2011-06-08 03:00 -------- d-----w- c:\program files (x86)\Uniblue
2011-06-08 03:00 . 2011-06-08 03:00 -------- d-----w- c:\users\SD\AppData\Local\PackageAware
2011-06-08 02:54 . 2011-06-08 03:26 -------- d-----w- c:\users\SD\AppData\Roaming\Systweak
2011-06-08 02:54 . 2011-06-07 17:03 18816 ----a-w- c:\windows\system32\roboot64.exe
2011-06-05 17:04 . 2011-06-05 17:04 -------- d-----w- c:\users\SD\AppData\Local\{E21D310F-F577-4BEC-8A26-FFF40DAEDCAB}
2011-05-31 17:36 . 2011-05-31 17:36 -------- d-----w- c:\users\SD\AppData\Local\{7C809736-549F-43E8-88DD-89823692C9CA}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-05-10 12:06 . 2011-05-10 12:06 51712 ----a-w- c:\windows\system32\drivers\usbaapl64.sys
2011-05-10 12:06 . 2011-05-10 12:06 4517664 ----a-w- c:\windows\system32\usbaaplrc.dll
2011-05-05 17:25 . 2011-03-19 21:45 43520 ----a-w- c:\windows\SysWow64\CmdLineExt03.dll
2011-05-04 08:52 . 2010-05-15 02:41 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-05-02 09:04 . 2011-05-02 09:04 249856 ------w- c:\windows\Setup1.exe
2011-05-02 09:04 . 2011-05-02 09:04 73216 ----a-w- c:\windows\ST6UNST.EXE
2011-04-22 20:18 . 2011-05-24 18:32 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-04-09 06:58 . 2011-05-19 03:32 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-04-09 06:45 . 2011-05-11 05:34 5509504 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-04-09 06:13 . 2011-05-11 05:34 3957632 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-04-09 06:13 . 2011-05-11 05:34 3901824 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-04-09 05:56 . 2011-05-19 03:32 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2011-04-06 20:26 . 2011-04-06 20:26 96544 ----a-w- c:\windows\system32\dnssd.dll
2011-04-06 20:26 . 2011-04-06 20:26 119584 ----a-w- c:\windows\system32\dns-sd.exe
2011-04-06 20:20 . 2011-04-06 20:20 91424 ----a-w- c:\windows\SysWow64\dnssd.dll
2011-04-06 20:20 . 2011-04-06 20:20 107808 ----a-w- c:\windows\SysWow64\dns-sd.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2011-06-28_01.26.47 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-14 05:35 . 2009-07-14 02:32 69632 c:\windows\system32\en\AuthFWWizFwk.Resources.dll
+ 2009-12-19 18:06 . 2009-05-18 22:17 34152 c:\windows\system32\DRVSTORE\GEARAspiWD_B60A2DA9F47E0A7F3329B57AA751F1789961A8BE\x64\GEARAspiWDM.sys
+ 2010-10-21 01:25 . 2010-09-23 04:36 48488 c:\windows\system32\DRVSTORE\fssfltr_A5FA3C925848FF31CD1FDE1A2696CEACA292B950\fssfltr.sys
+ 2009-08-14 02:10 . 2009-08-14 02:10 73984 c:\windows\system32\DriverStore\FileRepository\xusb21.inf_amd64_neutral_68c06a8fe00c5ac3\x64\xusb21.sys
+ 2009-07-14 00:39 . 2009-07-14 00:39 23040 c:\windows\system32\DriverStore\FileRepository\wsdprint.inf_amd64_neutral_f91980f20f3112ed\WSDPrint.sys
+ 2009-07-14 00:21 . 2009-07-14 01:41 88064 c:\windows\system32\DriverStore\FileRepository\wpdmtp.inf_amd64_neutral_28f06ca2e38e8979\WpdMtpUS.dll
+ 2009-07-14 00:21 . 2009-07-14 01:41 83968 c:\windows\system32\DriverStore\FileRepository\wpdmtp.inf_amd64_neutral_28f06ca2e38e8979\WpdMtpIP.dll
+ 2009-07-14 00:21 . 2009-07-14 01:41 95744 c:\windows\system32\DriverStore\FileRepository\wpdmtp.inf_amd64_neutral_28f06ca2e38e8979\WpdMtpbt.dll
+ 2009-07-14 00:21 . 2009-07-14 01:41 83456 c:\windows\system32\DriverStore\FileRepository\wpdcomp.inf_amd64_neutral_cd9217822125c77c\Wpdcomp.dll
+ 2009-07-14 00:06 . 2009-07-14 00:06 40448 c:\windows\system32\DriverStore\FileRepository\winusb.inf_amd64_neutral_2878b0df142d775e\winusb.sys
+ 2009-07-14 00:00 . 2009-07-14 01:40 66048 c:\windows\system32\DriverStore\FileRepository\windowssideshowenhanceddriver.inf_amd64_neutral_184a2ef2a8f57c33\AuxiliaryDisplayEnhancedDriver.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 20992 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWPpb4.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 58368 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWCbgnd.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 11776 c:\windows\system32\DriverStore\FileRepository\wiasa002.inf_amd64_neutral_6429a42f1243419a\SaSegFlt.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 33280 c:\windows\system32\DriverStore\FileRepository\wiasa002.inf_amd64_neutral_6429a42f1243419a\SaImgFlt.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 10752 c:\windows\system32\DriverStore\FileRepository\wiasa002.inf_amd64_neutral_6429a42f1243419a\SaErHdlr.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 75776 c:\windows\system32\DriverStore\FileRepository\wialx004.inf_amd64_neutral_0a3a62ae6ed43127\lxa3WIA.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 75776 c:\windows\system32\DriverStore\FileRepository\wialx003.inf_amd64_neutral_db618863f9347f9a\lxa2WIA.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:41 77312 c:\windows\system32\DriverStore\FileRepository\wialx002.inf_amd64_neutral_71f4aacee1aa9f06\lxa1WIA.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 13824 c:\windows\system32\DriverStore\FileRepository\wiaky002.inf_amd64_neutral_b898f5982403f3cb\kyweds10.dll
+ 2009-07-14 01:20 . 2009-07-14 01:40 86528 c:\windows\system32\DriverStore\FileRepository\wiaep003.inf_amd64_neutral_c2a98813147bf34e\ep0icd1.dll
+ 2009-07-14 01:20 . 2009-07-14 01:40 59904 c:\windows\system32\DriverStore\FileRepository\wiaep003.inf_amd64_neutral_c2a98813147bf34e\ep0icb1.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 84480 c:\windows\system32\DriverStore\FileRepository\wiaep002.inf_amd64_neutral_0a982dec66379cb0\ep0icd0.dll
+ 2009-07-14 01:17 . 2009-07-14 01:41 73216 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHW900.DLL
+ 2009-07-14 01:17 . 2009-07-14 01:41 77312 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHW830.DLL
+ 2009-07-14 01:17 . 2009-07-14 01:41 73216 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHW760S.DLL
+ 2009-07-14 01:17 . 2009-07-14 01:41 77824 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHW750S.DLL
+ 2009-07-14 01:17 . 2009-07-14 01:41 78336 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHW730S.DLL
+ 2009-07-14 01:17 . 2009-07-14 01:41 68096 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHW500.DLL
+ 2009-07-14 01:17 . 2009-07-14 01:41 72192 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHW370S.DLL
+ 2009-07-14 01:17 . 2009-07-14 01:41 73728 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHW170S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 83456 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHL830.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 26624 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHL750S.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:40 17920 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHL730S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 55808 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHL500.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:40 18432 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHL370S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 55296 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHL170S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 20992 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHIPRO.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 87040 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHC750S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 73216 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHC730S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 76288 c:\windows\system32\DriverStore\FileRepository\wiacn001.inf_amd64_neutral_b7a0b2f53d745b5a\CNHC370S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 18432 c:\windows\system32\DriverStore\FileRepository\wiaca00i.inf_amd64_neutral_de104aaa48ee4b00\CNHMCA6.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 18432 c:\windows\system32\DriverStore\FileRepository\wiaca00i.inf_amd64_neutral_de104aaa48ee4b00\CNHMCA.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 30208 c:\windows\system32\DriverStore\FileRepository\wiaca00i.inf_amd64_neutral_de104aaa48ee4b00\CNHI08A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 88576 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHL950.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 90624 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHL800R.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 88576 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHL800.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:40 90624 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHL530.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 78848 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHL510.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 34816 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHI06S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 34816 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHI06A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 34816 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHI05A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 83968 c:\windows\system32\DriverStore\FileRepository\wiaca00e.inf_amd64_neutral_5a376e6a7cb007d5\CNHL960.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 83456 c:\windows\system32\DriverStore\FileRepository\wiaca00e.inf_amd64_neutral_5a376e6a7cb007d5\CNHL810.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 79360 c:\windows\system32\DriverStore\FileRepository\wiaca00e.inf_amd64_neutral_5a376e6a7cb007d5\CNHL600R.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 79360 c:\windows\system32\DriverStore\FileRepository\wiaca00e.inf_amd64_neutral_5a376e6a7cb007d5\CNHL600.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 34816 c:\windows\system32\DriverStore\FileRepository\wiaca00e.inf_amd64_neutral_5a376e6a7cb007d5\CNHI06A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 78848 c:\windows\system32\DriverStore\FileRepository\wiaca00d.inf_amd64_neutral_2c3623fa97b0c28e\CNHL460.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 78848 c:\windows\system32\DriverStore\FileRepository\wiaca00d.inf_amd64_neutral_2c3623fa97b0c28e\CNHL180.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 78336 c:\windows\system32\DriverStore\FileRepository\wiaca00d.inf_amd64_neutral_2c3623fa97b0c28e\CNHL160.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 34816 c:\windows\system32\DriverStore\FileRepository\wiaca00d.inf_amd64_neutral_2c3623fa97b0c28e\CNHI06A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 96768 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHLX310.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 95232 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHLX300.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 96256 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHL470.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 96256 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHL220.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 95232 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHL210.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 78336 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHL140.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 29696 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHI07A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 34816 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHI06A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 18432 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHMCA6.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 18432 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHMCA.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:40 98816 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHLX850.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 98816 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHL7600.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 95232 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHL190.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 29696 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHI08S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 30208 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHI08A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 29696 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHI07A.DLL
+ 2009-07-14 01:19 . 2009-06-10 20:43 59232 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNC980W.DAT
+ 2009-07-14 01:20 . 2009-07-14 01:40 18944 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNHMWL6.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 18944 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNHMWL.dll
+ 2009-07-14 01:20 . 2009-07-14 01:40 97280 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNHLX700.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 96768 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNHL610.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 96256 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNHL520.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 29696 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNHI07A.DLL
+ 2009-07-14 01:20 . 2009-06-10 20:43 24648 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNC970W.DAT
+ 2009-07-14 01:19 . 2009-07-14 01:40 38400 c:\windows\system32\DriverStore\FileRepository\wiabr00a.inf_amd64_neutral_6033065925bcc882\BrUs2Sti.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 38400 c:\windows\system32\DriverStore\FileRepository\wiabr009.inf_amd64_neutral_2d7b3edfda95df40\BrUs2Sti.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 38400 c:\windows\system32\DriverStore\FileRepository\wiabr008.inf_amd64_neutral_27d1c9a28eac4eed\BrUs2Sti.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 38400 c:\windows\system32\DriverStore\FileRepository\wiabr007.inf_amd64_neutral_442d902f3f3dd5b7\BrUs2Sti.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 38400 c:\windows\system32\DriverStore\FileRepository\wiabr006.inf_amd64_neutral_0232ca4f23224d01\BrUs2Sti.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 38400 c:\windows\system32\DriverStore\FileRepository\wiabr005.inf_amd64_neutral_e14a0514f37611d8\BrUs2Sti.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 38400 c:\windows\system32\DriverStore\FileRepository\wiabr004.inf_amd64_neutral_b1d90b3749c5e6a6\BrUs2Sti.dll
+ 2009-07-14 01:19 . 2009-07-14 01:40 38400 c:\windows\system32\DriverStore\FileRepository\wiabr002.inf_amd64_neutral_b4ea26a49ad66560\BrUs2Sti.dll
+ 2008-05-06 20:06 . 2008-05-06 20:06 14464 c:\windows\system32\DriverStore\FileRepository\wdcsam.inf_amd64_neutral_782a203832146fb2\wdcsam64.sys
+ 2009-07-13 23:19 . 2009-07-14 01:45 21056 c:\windows\system32\DriverStore\FileRepository\wd.inf_amd64_neutral_759109899b486d47\wd.sys
+ 2011-04-27 13:50 . 2011-03-11 04:31 91136 c:\windows\system32\DriverStore\FileRepository\usbstor.inf_amd64_neutral_dd8b7470ecdd8b8b\USBSTOR.SYS
+ 2009-07-14 00:06 . 2009-07-14 00:06 89600 c:\windows\system32\DriverStore\FileRepository\usbstor.inf_amd64_neutral_c301b770e0bfb179\USBSTOR.SYS
+ 2009-07-14 00:38 . 2009-07-14 00:38 25088 c:\windows\system32\DriverStore\FileRepository\usbprint.inf_amd64_neutral_54948be2bc4bcdd1\usbprint.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 30720 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_5a41ca742f7973cc\usbuhci.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 25600 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_5a41ca742f7973cc\usbohci.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 51200 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_5a41ca742f7973cc\usbehci.sys
+ 2011-05-11 05:33 . 2011-03-25 03:22 30720 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbuhci.sys
+ 2011-05-11 05:33 . 2011-03-25 03:22 25600 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbohci.sys
+ 2011-05-11 05:33 . 2011-03-25 03:22 52224 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbehci.sys
+ 2011-05-10 12:06 . 2011-05-10 12:06 51712 c:\windows\system32\DriverStore\FileRepository\usbaapl64.inf_amd64_neutral_d7a1a1654f22581c\usbaapl64.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 98816 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_e2b28ecac19a29af\usbccgp.sys
+ 2011-05-11 05:33 . 2011-03-25 03:23 98816 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_d378b476be3d939d\usbccgp.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 48640 c:\windows\system32\DriverStore\FileRepository\umbus.inf_amd64_neutral_694fa3d3c00382f7\umbus.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 40448 c:\windows\system32\DriverStore\FileRepository\transfercable.inf_amd64_neutral_be3c50934fb3a02b\amd64\winusb.sys
+ 2009-07-13 23:21 . 2009-07-13 23:21 38400 c:\windows\system32\DriverStore\FileRepository\tpm.inf_amd64_neutral_d5bb6575cf91cd73\tpm.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 10752 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\sonyait.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 10240 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\mammoth.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 10240 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\exabyte2.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 11776 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\dlttape.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 16384 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\4mmdat.sys
+ 2009-08-25 08:33 . 2009-07-22 01:33 38400 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\suhlp64.exe
+ 2009-08-25 08:33 . 2009-07-22 01:33 88576 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\IDTPMA64.exe
+ 2009-08-25 08:33 . 2009-03-02 20:47 90624 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTCo64.dll
+ 2009-08-25 08:33 . 2009-03-02 20:58 68608 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTAR64.dll
+ 2010-03-23 18:53 . 2010-03-23 18:53 38400 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\suhlp64.exe
+ 2010-03-23 18:53 . 2010-03-23 18:53 88576 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\IDTPMA64.exe
+ 2009-03-02 22:42 . 2009-03-02 22:42 89600 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe
+ 2009-03-02 21:47 . 2009-03-02 21:47 90624 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTCo64.dll
+ 2009-03-02 21:58 . 2009-03-02 21:58 68608 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTAR64.dll
+ 2009-07-14 00:35 . 2009-07-14 00:35 25088 c:\windows\system32\DriverStore\FileRepository\sti.inf_amd64_neutral_9d9a7113099a28a2\WSDScan.sys
+ 2009-07-14 00:35 . 2009-07-14 00:35 41984 c:\windows\system32\DriverStore\FileRepository\sti.inf_amd64_neutral_9d9a7113099a28a2\usbscan.sys
+ 2009-07-14 00:35 . 2009-07-14 00:35 12288 c:\windows\system32\DriverStore\FileRepository\sti.inf_amd64_neutral_9d9a7113099a28a2\serscan.sys
+ 2009-07-14 00:35 . 2009-07-14 00:35 17920 c:\windows\system32\DriverStore\FileRepository\sti.inf_amd64_neutral_9d9a7113099a28a2\scsiscan.sys
+ 2009-07-13 21:59 . 2009-07-14 01:45 24656 c:\windows\system32\DriverStore\FileRepository\stexstor.inf_amd64_neutral_80ee226e29362f51\stexstor.sys
+ 2009-07-13 21:59 . 2009-06-10 20:37 26112 c:\windows\system32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\stcusb.sys
+ 2009-07-13 21:59 . 2009-06-10 20:37 26112 c:\windows\system32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\SCR111.sys
+ 2009-06-10 20:37 . 2009-06-10 20:37 25600 c:\windows\system32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\scmstcs.sys
+ 2009-07-14 00:00 . 2009-07-14 00:00 23552 c:\windows\system32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\pscr.sys
+ 2009-06-10 20:37 . 2009-06-10 20:37 38400 c:\windows\system32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\grserial.sys
+ 2009-07-13 21:59 . 2009-06-10 20:37 84560 c:\windows\system32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\cxbp0wdm.sys
+ 2009-06-10 20:37 . 2009-06-10 20:37 23936 c:\windows\system32\DriverStore\FileRepository\smartcrd.inf_amd64_neutral_6fb75ea318f84fe5\cmbp0wdm.sys
+ 2009-07-13 21:59 . 2009-07-14 01:45 80464 c:\windows\system32\DriverStore\FileRepository\sisraid4.inf_amd64_neutral_65ab84e9830f6f4b\sisraid4.sys
+ 2009-06-10 20:37 . 2009-07-14 01:45 43584 c:\windows\system32\DriverStore\FileRepository\sisraid2.inf_amd64_neutral_845e008c32615283\sisraid2.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 14336 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_4ef95a3b96c130d1\sffp_sd.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 13824 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_4ef95a3b96c130d1\sffp_mmc.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 14336 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_4ef95a3b96c130d1\sffdisk.sys
+ 2010-08-29 16:22 . 2009-10-10 03:17 14336 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_2790a2fc3fcffde4\sffp_sd.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 13824 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_2790a2fc3fcffde4\sffp_mmc.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 14336 c:\windows\system32\DriverStore\FileRepository\sffdisk.inf_amd64_neutral_2790a2fc3fcffde4\sffdisk.sys
+ 2009-07-14 07:43 . 2009-07-14 01:41 44544 c:\windows\system32\DriverStore\FileRepository\sensorsalsdriver.inf_amd64_neutral_1c5bc8e71eb90127\SensorsAlsDriver.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 77312 c:\windows\system32\DriverStore\FileRepository\ricoh.inf_amd64_neutral_66b4504d1fb1c857\RW430Ext.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 97280 c:\windows\system32\DriverStore\FileRepository\ricoh.inf_amd64_neutral_66b4504d1fb1c857\RW001Ext.dll
+ 2009-07-14 00:17 . 2009-07-14 00:17 24064 c:\windows\system32\DriverStore\FileRepository\rdpbus.inf_amd64_neutral_3b741ca76444b9c3\rdpbus.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 27648 c:\windows\system32\DriverStore\FileRepository\ramdisk.inf_amd64_neutral_798b5d4dd3f22a07\ramdisk.sys
+ 2009-07-14 01:20 . 2009-07-14 01:41 80896 c:\windows\system32\DriverStore\FileRepository\prnso002.inf_amd64_neutral_c3b7ce4e6f71641f\Amd64\SODPPUN2.DLL
+ 2009-07-14 01:18 . 2009-07-14 01:41 83456 c:\windows\system32\DriverStore\FileRepository\prnso002.inf_amd64_neutral_c3b7ce4e6f71641f\Amd64\SODPPUI2.DLL
+ 2009-07-14 01:18 . 2009-07-14 01:41 94208 c:\windows\system32\DriverStore\FileRepository\prnso002.inf_amd64_neutral_c3b7ce4e6f71641f\Amd64\SODPPLM2.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 43008 c:\windows\system32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\smpsrd1.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 40960 c:\windows\system32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\smpclrd1.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 99840 c:\windows\system32\DriverStore\FileRepository\prnlx00z.inf_amd64_neutral_aea50acf04a2db1d\Amd64\LXKPTPRC.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 26624 c:\windows\system32\DriverStore\FileRepository\prnlx00y.inf_amd64_neutral_977318f2317f5ddd\Amd64\LXKXLRD.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 34304 c:\windows\system32\DriverStore\FileRepository\prnlx00x.inf_amd64_neutral_808baf4e08594a59\Amd64\lxkpsrd.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 26112 c:\windows\system32\DriverStore\FileRepository\prnlx00v.inf_amd64_neutral_86ff307c66080d00\Amd64\lxkpclrd.dll
+ 2009-07-14 01:17 . 2009-07-14 01:30 92160 c:\windows\system32\DriverStore\FileRepository\prnky009.inf_amd64_neutral_8e54c9ff272b72f1\Amd64\KYW7FRES.DLL
+ 2009-07-14 01:17 . 2009-07-14 01:30 92160 c:\windows\system32\DriverStore\FileRepository\prnky007.inf_amd64_neutral_e637699044f367f3\Amd64\kyw7fr04.dll
+ 2009-07-14 01:17 . 2009-07-14 01:30 92160 c:\windows\system32\DriverStore\FileRepository\prnky004.inf_amd64_neutral_5db759db19acd3ae\Amd64\kyw7fr03.dll
+ 2009-07-14 01:17 . 2009-07-14 01:30 92160 c:\windows\system32\DriverStore\FileRepository\prnky003.inf_amd64_neutral_fe7ea176f20ab839\Amd64\KYW7FRES.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 94720 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfrsw73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 60928 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfllw73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 48640 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpf3lw73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 46080 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpz3lw72.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 22528 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpfrsw71.dll
+ 2011-03-18 00:00 . 2011-03-18 00:00 90624 c:\windows\Installer\ad439455.msp
+ 2010-10-21 01:26 . 2010-10-21 01:26 56832 c:\windows\Installer\7e1ee12.msi
+ 2010-10-21 01:26 . 2010-10-21 01:26 65536 c:\windows\Installer\7e1ee0e.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 74240 c:\windows\Installer\7e1ee0a.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 29696 c:\windows\Installer\7e1ee02.msi
+ 2010-10-21 01:22 . 2010-10-21 01:22 67072 c:\windows\Installer\7e1ede2.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 37888 c:\windows\Installer\7e1ec9c.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 53248 c:\windows\Installer\7e1ec98.msi
+ 2010-10-21 01:22 . 2010-10-21 01:22 74240 c:\windows\Installer\7e1ec8c.msi
+ 2010-10-21 01:22 . 2010-10-21 01:22 26112 c:\windows\Installer\7e1ec88.msi
+ 2010-11-10 06:21 . 2010-11-10 06:21 24576 c:\windows\Installer\5f2024a9.msp
+ 2008-10-05 08:12 . 2008-10-05 08:12 55808 c:\windows\Installer\574573.msi
+ 2011-06-02 12:54 . 2011-06-02 12:54 25088 c:\windows\Installer\3f5a0eb.msi
+ 2010-04-01 02:47 . 2010-04-01 02:47 35840 c:\windows\Installer\34a7e767.msi
+ 2009-08-21 05:35 . 2009-08-21 05:35 20480 c:\windows\Installer\282730.msi
+ 2010-07-02 07:27 . 2010-07-02 07:27 22528 c:\windows\Installer\1c9307bb.msi
+ 2010-07-02 07:25 . 2010-07-02 07:25 23040 c:\windows\Installer\1c93078b.msi
+ 2010-07-02 07:25 . 2010-07-02 07:25 31232 c:\windows\Installer\1c930785.msi
+ 2009-07-14 05:37 . 2009-07-14 05:37 31548 c:\windows\inf\PERFLIB\0409\perfd.dat
+ 2009-07-14 05:37 . 2009-07-14 05:37 31548 c:\windows\inf\PERFLIB\0409\perfc.dat
+ 2009-07-14 02:34 . 2009-07-14 01:00 31548 c:\windows\inf\PERFLIB\0000\perfd.dat
+ 2009-07-14 02:34 . 2009-07-14 01:00 31548 c:\windows\inf\PERFLIB\0000\perfc.dat
+ 2010-08-28 05:50 . 2010-05-19 13:31 14904 c:\windows\Help\OEM\Scripts\launchWebChat.exe
+ 2010-08-28 05:50 . 2010-07-16 17:51 14904 c:\windows\Help\OEM\Scripts\LaunchHPForums.exe
+ 2010-08-28 05:50 . 2009-10-07 16:33 49152 c:\windows\Help\OEM\Scripts\Interop.TaskScheduler.dll
+ 2010-08-28 05:50 . 2009-10-29 20:03 58632 c:\windows\Help\OEM\Scripts\HPSAUpdaterObj.exe
+ 2010-08-28 05:50 . 2009-10-08 19:10 23816 c:\windows\Help\OEM\Scripts\HPSAScript.exe
+ 2010-10-27 17:28 . 2010-10-27 17:28 11320 c:\windows\Help\OEM\Scripts\HPSARedirectorLauncher.exe
+ 2010-08-28 05:50 . 2009-08-14 14:22 20744 c:\windows\Help\OEM\Scripts\checkMui.dll
+ 2009-07-14 00:09 . 2009-07-14 01:15 21504 c:\windows\ehome\wow\ehdebug.dll
+ 2009-07-14 00:24 . 2009-07-14 01:41 88576 c:\windows\ehome\NetBridge.dll
+ 2009-07-14 00:25 . 2009-07-14 01:51 56320 c:\windows\ehome\Microsoft.MediaCenter.Mheg.dll
+ 2009-07-13 22:25 . 2009-07-14 01:52 45056 c:\windows\ehome\Microsoft.MediaCenter.ITVVM.dll
+ 2009-07-13 22:24 . 2009-07-14 01:51 24576 c:\windows\ehome\Microsoft.MediaCenter.iTv.Hosting.dll
+ 2009-07-13 22:24 . 2009-07-14 01:51 86016 c:\windows\ehome\Microsoft.MediaCenter.iTV.dll
+ 2009-07-14 00:24 . 2009-07-14 01:41 73216 c:\windows\ehome\MFCongestionController.dll
+ 2009-07-14 00:24 . 2009-07-14 01:28 11264 c:\windows\ehome\MediaCenterWebLauncherRes.dll
+ 2009-07-13 22:24 . 2009-07-14 01:49 57344 c:\windows\ehome\MediaCenterWebLauncher.exe
+ 2009-07-14 00:24 . 2009-07-14 01:39 37376 c:\windows\ehome\McxTask.exe
+ 2009-07-14 00:24 . 2009-07-14 01:41 86016 c:\windows\ehome\McxDataPath.dll
+ 2009-07-14 00:25 . 2009-07-14 01:39 19968 c:\windows\ehome\mcspad.exe
+ 2009-07-14 00:24 . 2009-07-14 01:41 59904 c:\windows\ehome\McITvVmData.dll
+ 2009-07-14 00:24 . 2009-07-14 01:39 61440 c:\windows\ehome\mcGlidHost.exe
+ 2009-07-14 00:24 . 2009-07-14 01:28 42496 c:\windows\ehome\markup.dll
+ 2009-07-14 00:24 . 2009-07-14 01:40 26112 c:\windows\ehome\ehSSO.dll
+ 2009-07-14 00:24 . 2009-07-14 01:39 76800 c:\windows\ehome\ehrec.exe
+ 2009-07-14 00:25 . 2009-07-14 01:39 48640 c:\windows\ehome\ehmsas.exe
+ 2009-07-14 00:25 . 2009-07-14 01:40 46080 c:\windows\ehome\ehkorime.dll
+ 2009-07-14 00:24 . 2009-07-14 01:40 28160 c:\windows\ehome\ehjpnime.dll
+ 2009-07-13 22:34 . 2009-07-14 01:22 86016 c:\windows\ehome\ehiWUapi.dll
+ 2009-07-13 22:34 . 2009-07-14 01:20 32768 c:\windows\ehome\ehiUserXp.dll
+ 2009-07-13 22:25 . 2009-07-14 01:46 86016 c:\windows\ehome\ehiTVMSMusic.dll
+ 2009-07-13 22:23 . 2009-07-14 01:46 40960 c:\windows\ehome\ehiiTV.dll
+ 2009-07-13 22:34 . 2009-07-14 01:20 77824 c:\windows\ehome\ehiExtens.dll
+ 2009-07-13 22:25 . 2009-07-14 01:46 11776 c:\windows\ehome\ehiBmlDataCarousel.dll
+ 2009-07-13 22:25 . 2009-07-14 01:46 15872 c:\windows\ehome\ehiActivScp.dll
+ 2009-07-14 00:24 . 2009-07-14 01:40 15872 c:\windows\ehome\ehepgnet.dll
+ 2009-07-14 00:24 . 2009-07-14 01:40 43520 c:\windows\ehome\ehentt.dll
+ 2009-07-14 00:24 . 2009-07-14 01:40 27136 c:\windows\ehome\ehdebug.dll
+ 2009-07-13 22:35 . 2009-07-14 01:20 94208 c:\windows\ehome\ehCIR.dll
+ 2009-07-14 00:24 . 2009-07-14 01:40 79872 c:\windows\ehome\ehchtime.dll
+ 2009-07-13 22:25 . 2009-07-14 01:48 86016 c:\windows\ehome\CreateDisc\SonicMCEBurnEngine.dll
+ 2009-07-14 00:25 . 2009-07-14 01:41 38400 c:\windows\ehome\CreateDisc\SFXPlugins\StandardFX_Plugin.dll
+ 2009-07-14 00:25 . 2009-07-14 01:41 28160 c:\windows\ehome\CreateDisc\SBEServerPS.dll
+ 2009-07-13 22:25 . 2009-07-14 01:46 40960 c:\windows\ehome\CreateDisc\CreateDisc.dll
+ 2010-09-04 20:55 . 2002-07-25 21:13 24576 c:\windows\Downloaded Program Files\dwusplay.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 67072 c:\windows\diagnostics\system\WindowsUpdate\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 81408 c:\windows\diagnostics\system\WindowsMediaPlayerPlayDVD\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 63488 c:\windows\diagnostics\system\WindowsMediaPlayerMediaLibrary\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 66560 c:\windows\diagnostics\system\WindowsMediaPlayerConfiguration\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 80896 c:\windows\diagnostics\system\Search\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 64000 c:\windows\diagnostics\system\Printer\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 74752 c:\windows\diagnostics\system\Power\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 84480 c:\windows\diagnostics\system\Performance\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 66048 c:\windows\diagnostics\system\PCW\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 69120 c:\windows\diagnostics\system\IESecurity\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 92160 c:\windows\diagnostics\system\IEBrowseWeb\DiagPackage.dll
+ 2009-07-13 21:14 . 2009-07-14 01:46 19968 c:\windows\diagnostics\system\HomeGroup\Microsoft-Windows-HomeGroupDiagnostic.NetListMgr.Interop.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 78848 c:\windows\diagnostics\system\HomeGroup\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 55296 c:\windows\diagnostics\system\Device\DiagPackage.dll
+ 2009-07-13 21:14 . 2009-07-14 01:26 28672 c:\windows\diagnostics\system\Audio\AudioDiagnosticSnapIn.dll
+ 2009-07-13 21:14 . 2009-07-14 01:26 12288 c:\windows\diagnostics\system\AERO\MonitorSnapIn.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 80384 c:\windows\diagnostics\system\AERO\DiagPackage.dll
+ 2009-07-14 00:06 . 2009-07-14 00:06 5632 c:\windows\system32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_423894ded0ba8fdf\drmkaud.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 7936 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_5a41ca742f7973cc\usbd.sys
+ 2011-05-11 05:33 . 2011-03-25 03:22 7936 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbd.sys
+ 2009-07-14 00:06 . 2009-07-14 01:40 9728 c:\windows\system32\DriverStore\FileRepository\usbcir.inf_amd64_neutral_f1253b523596f76d\CIRCoInst.dll
+ 2009-07-14 00:06 . 2009-07-14 00:06 9728 c:\windows\system32\DriverStore\FileRepository\umpass.inf_amd64_neutral_e3be362bfab667d2\umpass.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 9728 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\tandqic.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 9216 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\qic157.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 9728 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\miniqic.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 9728 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\ltotape.sys
+ 2009-07-14 00:01 . 2009-07-14 00:01 8192 c:\windows\system32\DriverStore\FileRepository\tape.inf_amd64_neutral_c6a6811d3d827dba\hpt4qic.sys
+ 2009-07-14 07:43 . 2009-07-14 00:00 9728 c:\windows\system32\DriverStore\FileRepository\sensorsalsdriver.inf_amd64_neutral_1c5bc8e71eb90127\acpials.sys
+ 2009-08-25 08:35 . 2009-08-25 08:35 3584 c:\windows\Installer\71327.msi
+ 2010-08-28 05:50 . 2006-09-29 18:28 4096 c:\windows\Help\OEM\Scripts\Interop.HelpPane.dll
+ 2010-08-28 05:50 . 2008-12-03 14:24 7168 c:\windows\Help\OEM\Scripts\HPHS_Launcher.exe
+ 2009-07-14 00:24 . 2009-07-14 01:41 7680 c:\windows\ehome\McrMgr.dll
+ 2009-07-14 00:25 . 2009-07-14 01:28 2048 c:\windows\ehome\ItvRes.dll
+ 2009-07-14 00:24 . 2009-07-14 01:26 2048 c:\windows\ehome\ehSidebarRes.dll
+ 2009-07-13 22:23 . 2009-07-14 01:46 6144 c:\windows\ehome\ehiUPnP.dll
+ 2009-07-14 00:24 . 2009-07-14 01:26 4608 c:\windows\ehome\ehepgres.dll
+ 2009-07-14 00:24 . 2009-07-14 01:26 3584 c:\windows\ehome\ehcmres.dll
+ 2009-07-13 23:31 . 2009-07-14 01:40 6144 c:\windows\diagnostics\system\Printer\UpdatePrinterDriver.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 2048 c:\windows\diagnostics\system\DeviceCenter\DiagPackage.dll
+ 2009-07-13 21:14 . 2009-07-14 01:26 5120 c:\windows\diagnostics\system\AERO\DesktopWindowsMgmt.dll
+ 2009-07-14 05:35 . 2009-07-14 02:32 159744 c:\windows\system32\en\Narrator.resources.dll
+ 2009-12-19 18:06 . 2008-04-17 21:12 126312 c:\windows\system32\DRVSTORE\GEARAspiWD_B60A2DA9F47E0A7F3329B57AA751F1789961A8BE\x64\GEARAspi64.dll
+ 2009-12-19 18:06 . 2008-04-17 21:12 107368 c:\windows\system32\DRVSTORE\GEARAspiWD_B60A2DA9F47E0A7F3329B57AA751F1789961A8BE\x64\GEARAspi.dll
+ 2009-07-14 00:01 . 2009-07-14 00:01 679936 c:\windows\system32\DriverStore\FileRepository\xnacc.inf_amd64_neutral_13c4e272a96185a1\xnacc.sys
+ 2009-07-13 22:53 . 2009-06-10 20:32 368128 c:\windows\system32\DriverStore\FileRepository\xcbdav.inf_amd64_neutral_cf80e4da1c95e6e2\xcmemVx64.sys
+ 2009-07-13 22:53 . 2009-06-10 20:32 671744 c:\windows\system32\DriverStore\FileRepository\xcbdav.inf_amd64_neutral_cf80e4da1c95e6e2\xcfeVx64.sys
+ 2009-06-10 20:32 . 2009-06-10 20:32 214784 c:\windows\system32\DriverStore\FileRepository\xcbdav.inf_amd64_neutral_cf80e4da1c95e6e2\xcbdaVx64.sys
+ 2009-07-14 00:00 . 2009-07-14 01:41 116224 c:\windows\system32\DriverStore\FileRepository\wudfusbcciddriver.inf_amd64_neutral_e98cea3f75d1c6bf\WUDFUsbccidDriver.dll
+ 2009-07-14 00:35 . 2009-07-14 01:41 262144 c:\windows\system32\DriverStore\FileRepository\wsdscdrv.inf_amd64_neutral_47406488f9e8d5b8\WSDScDrv.dll
+ 2009-07-14 00:21 . 2009-07-14 01:41 297984 c:\windows\system32\DriverStore\FileRepository\wpdmtp.inf_amd64_neutral_28f06ca2e38e8979\WpdMtp.dll
+ 2009-07-14 00:21 . 2009-07-14 01:41 299520 c:\windows\system32\DriverStore\FileRepository\wpdfs.inf_amd64_neutral_fc4ebadff3a40ae4\WpdFs.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 263168 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWPusd.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 108032 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWPpb3.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 355840 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWPcpst.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 504320 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWPcpl.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 244224 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWPcoin.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 213504 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWCtmg2.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 344064 c:\windows\system32\DriverStore\FileRepository\wiaxx002.inf_amd64_neutral_fbe080a7dd77c4a3\xrWCdev.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 150528 c:\windows\system32\DriverStore\FileRepository\wiasa002.inf_amd64_neutral_6429a42f1243419a\SaMinDrv.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 138240 c:\windows\system32\DriverStore\FileRepository\wialx006.inf_amd64_neutral_ae607a72b46f9cfc\lxa5WIA.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 372736 c:\windows\system32\DriverStore\FileRepository\wialx006.inf_amd64_neutral_ae607a72b46f9cfc\lxa5drs.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 138240 c:\windows\system32\DriverStore\FileRepository\wialx005.inf_amd64_neutral_5304c93e2193f237\lxa4WIA.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 373248 c:\windows\system32\DriverStore\FileRepository\wialx005.inf_amd64_neutral_5304c93e2193f237\lxa4drs.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 812032 c:\windows\system32\DriverStore\FileRepository\wialx004.inf_amd64_neutral_0a3a62ae6ed43127\lxa3usb1.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:41 401920 c:\windows\system32\DriverStore\FileRepository\wialx004.inf_amd64_neutral_0a3a62ae6ed43127\lxa3iobj.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:41 812032 c:\windows\system32\DriverStore\FileRepository\wialx003.inf_amd64_neutral_db618863f9347f9a\lxa2usb1.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 400896 c:\windows\system32\DriverStore\FileRepository\wialx003.inf_amd64_neutral_db618863f9347f9a\lxa2iobj.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 968192 c:\windows\system32\DriverStore\FileRepository\wialx002.inf_amd64_neutral_71f4aacee1aa9f06\lxa1usb1.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:41 932352 c:\windows\system32\DriverStore\FileRepository\wialx002.inf_amd64_neutral_71f4aacee1aa9f06\lxa1comc.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:41 197120 c:\windows\system32\DriverStore\FileRepository\wiaky002.inf_amd64_neutral_b898f5982403f3cb\kywuds10.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 108032 c:\windows\system32\DriverStore\FileRepository\wiaky002.inf_amd64_neutral_b898f5982403f3cb\kywdds10.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 204800 c:\windows\system32\DriverStore\FileRepository\wiahp001.inf_amd64_neutral_aee49cdf3b352e58\hpljbfig.dll
+ 2009-07-14 01:20 . 2009-07-14 01:40 204288 c:\windows\system32\DriverStore\FileRepository\wiaep003.inf_amd64_neutral_c2a98813147bf34e\ep0icn3.dll
+ 2009-07-14 01:20 . 2009-07-14 01:40 204288 c:\windows\system32\DriverStore\FileRepository\wiaep003.inf_amd64_neutral_c2a98813147bf34e\ep0icn2.dll
+ 2009-07-14 01:20 . 2009-07-14 01:40 204288 c:\windows\system32\DriverStore\FileRepository\wiaep003.inf_amd64_neutral_c2a98813147bf34e\ep0icn1.dll
+ 2009-07-14 01:20 . 2009-07-14 01:40 158720 c:\windows\system32\DriverStore\FileRepository\wiaca00i.inf_amd64_neutral_de104aaa48ee4b00\CNHW08A.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:40 137728 c:\windows\system32\DriverStore\FileRepository\wiaca00i.inf_amd64_neutral_de104aaa48ee4b00\CNHL08A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 146944 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHW06S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 165888 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHW06A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 147968 c:\windows\system32\DriverStore\FileRepository\wiaca00f.inf_amd64_neutral_f7f7e179d99acc58\CNHW05A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 165888 c:\windows\system32\DriverStore\FileRepository\wiaca00e.inf_amd64_neutral_5a376e6a7cb007d5\CNHW06A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 165888 c:\windows\system32\DriverStore\FileRepository\wiaca00d.inf_amd64_neutral_2c3623fa97b0c28e\CNHW06A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 161280 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHW07A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 165888 c:\windows\system32\DriverStore\FileRepository\wiaca00c.inf_amd64_neutral_27f4ad26fea72eb1\CNHW06A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 144896 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHW08S.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 158720 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHW08A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 161280 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHW07A.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:40 137728 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNHL08A.DLL
+ 2009-07-14 01:20 . 2009-06-10 20:43 786432 c:\windows\system32\DriverStore\FileRepository\wiaca00b.inf_amd64_neutral_1aaa057d3d52ea43\CNC980N.DAT
+ 2009-07-14 01:20 . 2009-07-14 01:40 161280 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNHW07A.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:40 103936 c:\windows\system32\DriverStore\FileRepository\wiaca00a.inf_amd64_neutral_163313056d8f34ab\CNHL970.DLL
+ 2009-07-14 01:18 . 2009-07-14 01:41 229376 c:\windows\system32\DriverStore\FileRepository\wiabr00a.inf_amd64_neutral_6033065925bcc882\Brmf3wia.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 229376 c:\windows\system32\DriverStore\FileRepository\wiabr009.inf_amd64_neutral_2d7b3edfda95df40\Brmf3wia.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 229376 c:\windows\system32\DriverStore\FileRepository\wiabr008.inf_amd64_neutral_27d1c9a28eac4eed\Brmf3wia.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 229376 c:\windows\system32\DriverStore\FileRepository\wiabr007.inf_amd64_neutral_442d902f3f3dd5b7\Brmf3wia.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 229376 c:\windows\system32\DriverStore\FileRepository\wiabr006.inf_amd64_neutral_0232ca4f23224d01\Brmf3wia.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 229376 c:\windows\system32\DriverStore\FileRepository\wiabr005.inf_amd64_neutral_e14a0514f37611d8\Brmf3wia.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 229376 c:\windows\system32\DriverStore\FileRepository\wiabr004.inf_amd64_neutral_b1d90b3749c5e6a6\Brmf3wia.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 229376 c:\windows\system32\DriverStore\FileRepository\wiabr002.inf_amd64_neutral_b4ea26a49ad66560\Brmf3wia.dll
+ 2009-07-14 00:22 . 2009-07-14 01:41 378880 c:\windows\system32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_423894ded0ba8fdf\SysFxUI.dll
+ 2009-07-14 00:06 . 2009-07-14 00:06 230400 c:\windows\system32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_423894ded0ba8fdf\portcls.sys
+ 2009-07-14 00:06 . 2009-07-14 01:01 116224 c:\windows\system32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_423894ded0ba8fdf\drmk.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 109568 c:\windows\system32\DriverStore\FileRepository\wdma_usb.inf_amd64_neutral_c81656b241a238c8\USBAUDIO.sys
+ 2009-06-10 20:37 . 2009-07-14 01:45 161872 c:\windows\system32\DriverStore\FileRepository\vsmraid.inf_amd64_neutral_be11b7aaa746e92d\vsmraid.sys
+ 2009-07-13 23:20 . 2009-07-14 01:45 294992 c:\windows\system32\DriverStore\FileRepository\volume.inf_amd64_neutral_1b1a512d99c5b72c\volsnap.sys
+ 2009-07-14 00:01 . 2009-07-14 01:45 217680 c:\windows\system32\DriverStore\FileRepository\vhdmp.inf_amd64_neutral_ff4ad1ec394a9f9d\vhdmp.sys
+ 2009-07-14 00:07 . 2009-07-14 00:07 184576 c:\windows\system32\DriverStore\FileRepository\usbvideo.inf_amd64_neutral_bf0f016516bef613\usbvideo.sys
+ 2010-10-02 16:31 . 2010-03-04 04:40 184832 c:\windows\system32\DriverStore\FileRepository\usbvideo.inf_amd64_neutral_23bfbf6f668380d6\usbvideo.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 324608 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_5a41ca742f7973cc\usbport.sys
+ 2009-07-14 00:07 . 2009-07-14 00:07 343040 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_5a41ca742f7973cc\usbhub.sys
+ 2011-05-11 05:33 . 2011-03-25 03:23 324608 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbport.sys
+ 2011-05-11 05:33 . 2011-03-25 03:23 343040 c:\windows\system32\DriverStore\FileRepository\usbport.inf_amd64_neutral_36529aeb1510bb0c\usbhub.sys
+ 2009-07-14 00:06 . 2009-07-14 00:06 100352 c:\windows\system32\DriverStore\FileRepository\usbcir.inf_amd64_neutral_f1253b523596f76d\usbcir.sys
+ 2009-07-14 00:07 . 2009-07-14 00:07 343040 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_e2b28ecac19a29af\usbhub.sys
+ 2011-05-11 05:33 . 2011-03-25 03:23 343040 c:\windows\system32\DriverStore\FileRepository\usb.inf_amd64_neutral_d378b476be3d939d\usbhub.sys
+ 2009-07-14 00:18 . 2009-07-14 01:41 149504 c:\windows\system32\DriverStore\FileRepository\tsprint.inf_amd64_neutral_80c35baded1b3a7f\amd64\tsprint.dll
+ 2009-07-14 00:06 . 2009-07-14 00:06 158720 c:\windows\system32\DriverStore\FileRepository\tdibth.inf_amd64_neutral_6ad685957123daf1\rfcomm.sys
+ 2009-07-14 23:13 . 2009-07-14 23:13 337192 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\Tutorial.exe
+ 2009-07-14 23:13 . 2009-07-14 23:13 247080 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynZMetr.exe
+ 2009-07-14 23:13 . 2009-07-14 23:13 120616 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTPHelper.exe
+ 2009-07-14 23:13 . 2009-07-14 23:13 107816 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTPCOM32.dll
+ 2009-07-14 23:13 . 2009-07-14 23:13 120104 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTPCOM.dll
+ 2009-07-14 23:13 . 2009-07-14 23:13 147752 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTPCo4.dll
+ 2009-07-14 23:13 . 2009-07-14 23:13 203560 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTPAPI.dll
+ 2009-07-14 23:16 . 2009-07-14 23:16 273456 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTP.sys
+ 2009-07-14 23:12 . 2009-07-14 23:12 238888 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynMood.exe
+ 2009-07-14 23:13 . 2009-07-14 23:13 197928 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynISDLL.dll
+ 2009-07-14 23:13 . 2009-07-14 23:13 206120 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynCtrl32.dll
+ 2009-07-14 23:13 . 2009-07-14 23:13 260904 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynCtrl.dll
+ 2009-07-14 23:13 . 2009-07-14 23:13 169256 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynCOM32.dll
+ 2009-07-14 23:13 . 2009-07-14 23:13 395048 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynCOM.dll
+ 2009-07-14 23:12 . 2009-07-14 23:12 149800 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\InstNT.exe
+ 2010-05-28 02:29 . 2010-05-28 02:29 337192 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\Tutorial.exe
+ 2010-05-28 02:29 . 2010-05-28 02:29 247080 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynZMetr.exe
+ 2010-05-28 02:29 . 2010-05-28 02:29 121128 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTPHelper.exe
+ 2010-05-28 02:29 . 2010-05-28 02:29 107816 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTPCOM32.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 120616 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTPCOM.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 147752 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTPCo4.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 214824 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTPAPI.dll
+ 2010-05-28 02:32 . 2010-05-28 02:32 320560 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTP.sys
+ 2010-05-28 02:29 . 2010-05-28 02:29 238888 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynMood.exe
+ 2010-05-28 02:29 . 2010-05-28 02:29 218408 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynISDLL.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 210216 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynCtrl32.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 265000 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynCtrl.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 173352 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynCOM32.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 396584 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynCOM.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 150824 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\InstNT.exe
+ 2009-08-25 08:33 . 2009-07-22 01:33 487936 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stwrt64.sys
+ 2009-08-25 08:33 . 2009-07-22 01:33 450048 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\sttray64.exe
+ 2009-08-25 08:33 . 2009-07-22 01:33 431616 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stcplx64.dll
+ 2009-08-25 08:33 . 2009-07-22 01:33 604672 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stapi64.dll
+ 2009-08-25 08:33 . 2009-07-22 01:33 240128 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stacsv64.exe
+ 2009-08-25 08:33 . 2009-07-22 01:33 209920 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\staco64.dll
+ 2009-08-25 08:33 . 2008-12-20 01:01 249856 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\sluapo64.dll
+ 2009-08-25 08:33 . 2008-12-20 01:01 160256 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\sltshd64.dll
+ 2009-08-25 08:33 . 2008-12-20 01:01 140800 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\slh36064.dll
+ 2009-08-25 08:33 . 2008-12-20 01:01 169472 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\slcshp64.dll
+ 2009-08-25 08:33 . 2009-07-22 01:33 564224 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\idt64mp1.exe
+ 2009-08-25 08:33 . 2009-07-22 01:33 200192 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\HPToneCtrls64.dll
+ 2009-08-25 08:33 . 2009-05-21 21:57 436224 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTEC64.dll
+ 2009-08-25 08:33 . 2009-06-25 21:59 160768 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTAC64.dll
+ 2010-03-23 18:53 . 2010-03-23 18:53 505344 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stwrt64.sys
+ 2010-03-23 18:53 . 2010-03-23 18:53 487424 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\sttray64.exe
+ 2010-03-23 18:53 . 2010-03-23 18:53 431616 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stcplx64.dll
+ 2010-03-23 18:53 . 2010-03-23 18:53 645632 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stapi64.dll
+ 2010-03-23 18:53 . 2010-03-23 18:53 247808 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stacsv64.exe
+ 2010-03-23 18:53 . 2010-03-23 18:53 209920 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\staco64.dll
+ 2008-12-20 02:01 . 2008-12-20 02:01 249856 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\sluapo64.dll
+ 2008-12-20 02:01 . 2008-12-20 02:01 160256 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\sltshd64.dll
+ 2008-12-20 02:01 . 2008-12-20 02:01 140800 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\slh36064.dll
+ 2008-12-20 02:01 . 2008-12-20 02:01 169472 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\slcshp64.dll
+ 2010-03-23 18:53 . 2010-03-23 18:53 564224 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\idt64mp1.exe
+ 2010-03-23 18:53 . 2010-03-23 18:53 220672 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\HPToneCtrls64.dll
+ 2009-10-09 20:45 . 2009-10-09 20:45 442368 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTEC64.dll
+ 2010-01-26 22:30 . 2010-01-26 22:30 162816 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTAC64.dll
+ 2009-07-14 00:35 . 2009-07-14 01:41 107520 c:\windows\system32\DriverStore\FileRepository\sti.inf_amd64_neutral_9d9a7113099a28a2\wiafbdrv.dll
+ 2010-08-29 16:22 . 2009-10-10 02:41 109056 c:\windows\system32\DriverStore\FileRepository\sdbus.inf_amd64_neutral_788ac264b4f52f85\sdbus.sys
+ 2009-07-13 23:31 . 2009-07-13 23:31 109056 c:\windows\system32\DriverStore\FileRepository\sdbus.inf_amd64_neutral_2f494d114e8c2997\sdbus.sys
+ 2009-07-13 23:19 . 2009-07-14 01:45 104016 c:\windows\system32\DriverStore\FileRepository\sbp2.inf_amd64_neutral_2fff12561375e45f\sbp2port.sys
+ 2009-08-25 08:33 . 2009-06-24 19:00 216576 c:\windows\system32\DriverStore\FileRepository\rtsustor.inf_amd64_neutral_423cb4ac73f732b6\RtsUStor.sys
+ 2009-08-25 08:33 . 2009-06-22 19:52 351744 c:\windows\system32\DriverStore\FileRepository\rtsustor.inf_amd64_neutral_423cb4ac73f732b6\RtsUStor.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 199168 c:\windows\system32\DriverStore\FileRepository\ricoh.inf_amd64_neutral_66b4504d1fb1c857\RWia450.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 195584 c:\windows\system32\DriverStore\FileRepository\ricoh.inf_amd64_neutral_66b4504d1fb1c857\RWia430.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 194560 c:\windows\system32\DriverStore\FileRepository\ricoh.inf_amd64_neutral_66b4504d1fb1c857\RWia330.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 195584 c:\windows\system32\DriverStore\FileRepository\ricoh.inf_amd64_neutral_66b4504d1fb1c857\RWia001.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 102400 c:\windows\system32\DriverStore\FileRepository\ricoh.inf_amd64_neutral_66b4504d1fb1c857\RW450Ext.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 102912 c:\windows\system32\DriverStore\FileRepository\ricoh.inf_amd64_neutral_66b4504d1fb1c857\RW330Ext.dll
+ 2009-07-13 21:59 . 2009-07-14 01:45 128592 c:\windows\system32\DriverStore\FileRepository\ql40xx.inf_amd64_neutral_77a826e5c0a07842\ql40xx.sys
+ 2009-07-14 01:19 . 2009-07-14 01:41 307200 c:\windows\system32\DriverStore\FileRepository\prnts003.inf_amd64_neutral_33a68664c7e7ae4b\Amd64\tsmxuui3.dll
+ 2009-07-14 01:18 . 2009-07-14 01:30 359424 c:\windows\system32\DriverStore\FileRepository\prnsh002.inf_amd64_neutral_42b7a64f45c7554c\Amd64\SH_1_RES.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:33 102912 c:\windows\system32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\smpclrc1.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 199168 c:\windows\system32\DriverStore\FileRepository\prnsa002.inf_amd64_neutral_d9df1d04d8cbe336\Amd64\smcomu1.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 162816 c:\windows\system32\DriverStore\FileRepository\prnrc00c.inf_amd64_neutral_53a58f4fd7d88575\Amd64\RIPSRES7.DLL
+ 2009-07-14 01:18 . 2009-07-14 01:41 456704 c:\windows\system32\DriverStore\FileRepository\prnrc00a.inf_amd64_neutral_565c5d04cc520c48\Amd64\RIARES7.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:30 271872 c:\windows\system32\DriverStore\FileRepository\prnok002.inf_amd64_neutral_616c1e9b7df7d5a9\Amd64\OKDTURES.DLL
+ 2009-07-14 01:18 . 2009-07-14 01:30 929280 c:\windows\system32\DriverStore\FileRepository\prnok002.inf_amd64_neutral_616c1e9b7df7d5a9\Amd64\OKDTERES.DLL
+ 2009-07-14 01:18 . 2009-07-14 01:30 929280 c:\windows\system32\DriverStore\FileRepository\prnod002.inf_amd64_neutral_a10c656b6c7c053c\Amd64\OKDTERES.DLL
+ 2009-07-14 00:36 . 2009-07-14 01:40 156672 c:\windows\system32\DriverStore\FileRepository\prnms002.inf_amd64_neutral_d439051ec90eeda4\Amd64\FXSWZRD.DLL
+ 2009-07-14 00:36 . 2009-07-14 01:40 160256 c:\windows\system32\DriverStore\FileRepository\prnms002.inf_amd64_neutral_d439051ec90eeda4\Amd64\FXSUI.DLL
+ 2009-07-14 00:35 . 2009-07-14 01:40 434176 c:\windows\system32\DriverStore\FileRepository\prnms002.inf_amd64_neutral_d439051ec90eeda4\Amd64\FXSTIFF.DLL
+ 2009-07-14 00:36 . 2009-07-14 01:40 379904 c:\windows\system32\DriverStore\FileRepository\prnms002.inf_amd64_neutral_d439051ec90eeda4\Amd64\FXSDRV.DLL
+ 2009-07-14 00:35 . 2009-07-14 01:40 623104 c:\windows\system32\DriverStore\FileRepository\prnms002.inf_amd64_neutral_d439051ec90eeda4\Amd64\FXSAPI.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:41 220672 c:\windows\system32\DriverStore\FileRepository\prnms001.inf_amd64_neutral_9b214cd9b78760aa\mxdwdui.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 717824 c:\windows\system32\DriverStore\FileRepository\prnlx00y.inf_amd64_neutral_977318f2317f5ddd\Amd64\LXKXLUI.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:30 344064 c:\windows\system32\DriverStore\FileRepository\prnlx00y.inf_amd64_neutral_977318f2317f5ddd\Amd64\LXKXLRES.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:41 781824 c:\windows\system32\DriverStore\FileRepository\prnlx00x.inf_amd64_neutral_808baf4e08594a59\Amd64\lxkpsui.dll
+ 2009-07-14 01:19 . 2009-07-14 01:30 536576 c:\windows\system32\DriverStore\FileRepository\prnlx00w.inf_amd64_neutral_d4c93bb2fbf75723\Amd64\lxkpclrs.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 717824 c:\windows\system32\DriverStore\FileRepository\prnlx00v.inf_amd64_neutral_86ff307c66080d00\Amd64\lxkpclui.dll
+ 2009-07-14 01:20 . 2009-07-14 01:28 115712 c:\windows\system32\DriverStore\FileRepository\prnky009.inf_amd64_neutral_8e54c9ff272b72f1\Amd64\KYW7SRES.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:28 115712 c:\windows\system32\DriverStore\FileRepository\prnky007.inf_amd64_neutral_e637699044f367f3\Amd64\kyw7sr03.dll
+ 2009-07-14 01:20 . 2009-07-14 01:28 115712 c:\windows\system32\DriverStore\FileRepository\prnky004.inf_amd64_neutral_5db759db19acd3ae\Amd64\kyw7sr02.dll
+ 2009-07-14 01:17 . 2009-07-14 01:30 402432 c:\windows\system32\DriverStore\FileRepository\prnky004.inf_amd64_neutral_5db759db19acd3ae\Amd64\KYW7FR02.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:28 115712 c:\windows\system32\DriverStore\FileRepository\prnky003.inf_amd64_neutral_fe7ea176f20ab839\Amd64\KYW7SRES.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:30 321024 c:\windows\system32\DriverStore\FileRepository\prnkm003.inf_amd64_neutral_48652cda3bb15180\Amd64\KO0C0001.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 188928 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfvuw73.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 346624 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfprw73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 258048 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfppw73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 428032 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfpaw73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 420352 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfigw73.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 254976 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfiew73.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 562688 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfevw73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 216576 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\HPCDMC71.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 178688 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpzvuw72.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 343040 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpzprw72.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 257024 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpzppw72.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 432640 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpzpaw72.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 558592 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpzevw72.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 281088 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpfigw71.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 244224 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpfiew71.dll
+ 2009-07-14 01:20 . 2009-07-14 01:27 694272 c:\windows\system32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpzssw71.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 836096 c:\windows\system32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpzsew71.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 343552 c:\windows\system32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpzprw71.dll
+ 2010-02-07 19:01 . 2010-02-07 19:01 720896 c:\windows\Installer\fbc11.msi
+ 2009-09-23 14:23 . 2009-09-23 14:23 508416 c:\windows\Installer\fbc0b.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 153600 c:\windows\Installer\7e1edfe.msi
+ 2010-10-21 01:24 . 2010-10-21 01:24 775168 c:\windows\Installer\7e1edd2.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 429056 c:\windows\Installer\7e1ecd4.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 147968 c:\windows\Installer\7e1ecd0.msi
+ 2010-04-26 19:01 . 2010-04-26 19:01 858624 c:\windows\Installer\77b7d6f.msi
+ 2010-08-04 19:13 . 2010-08-04 19:13 686080 c:\windows\Installer\6d0f9fd.msp
+ 2010-11-10 06:39 . 2010-11-10 06:39 636928 c:\windows\Installer\5f2024b1.msp
+ 2010-11-10 06:31 . 2010-11-10 06:31 205312 c:\windows\Installer\5f2024a1.msp
+ 2010-11-10 06:15 . 2010-11-10 06:15 136704 c:\windows\Installer\5f202453.msp
+ 2010-11-10 02:15 . 2010-11-10 02:15 113664 c:\windows\Installer\5f2023db.msp
+ 2010-07-23 06:03 . 2010-07-23 06:03 338432 c:\windows\Installer\4655c9ea.msp
+ 2011-01-11 13:19 . 2011-01-11 13:19 226816 c:\windows\Installer\3cce9cb.msi
+ 2009-02-12 17:58 . 2009-02-12 17:58 549888 c:\windows\Installer\30e6a1.msp
+ 2007-10-15 04:44 . 2007-10-15 04:44 324608 c:\windows\Installer\30e510.msp
+ 2007-10-15 04:46 . 2007-10-15 04:46 324608 c:\windows\Installer\30e509.msp
+ 2009-07-22 05:23 . 2009-07-22 05:23 199680 c:\windows\Installer\30e345.msi
+ 2009-07-22 05:01 . 2009-07-22 05:01 251904 c:\windows\Installer\30e2eb.msi
+ 2009-07-22 05:08 . 2009-07-22 05:08 262144 c:\windows\Installer\30e2e5.msi
+ 2007-03-23 07:03 . 2007-03-23 07:03 356864 c:\windows\Installer\2c5f3.msi
+ 2007-02-14 14:31 . 2007-02-14 14:31 361984 c:\windows\Installer\2c5ed.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 847872 c:\windows\Installer\2c5b6.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 502272 c:\windows\Installer\2c5a9.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 507904 c:\windows\Installer\2c5a3.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 518144 c:\windows\Installer\2c59c.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 514048 c:\windows\Installer\2c595.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 502272 c:\windows\Installer\2c58f.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 503296 c:\windows\Installer\2c589.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 502272 c:\windows\Installer\2c571.msi
+ 2009-05-26 23:53 . 2009-05-26 23:53 579072 c:\windows\Installer\2ba057d.msp
+ 2008-08-08 21:11 . 2008-08-08 21:11 232960 c:\windows\Installer\295a4.msi
+ 2010-01-06 23:59 . 2010-01-06 23:59 412672 c:\windows\Installer\25ef2cc4.msi
+ 2009-11-25 10:23 . 2009-11-25 10:23 855552 c:\windows\Installer\22a116.msi
+ 2005-03-17 00:20 . 2005-03-17 00:20 539648 c:\windows\Installer\2165f59c.msi
+ 2009-08-03 19:14 . 2009-08-03 19:14 882688 c:\windows\Installer\1decc2.msi
+ 2009-12-19 07:11 . 2009-12-19 07:11 502272 c:\windows\Installer\1de392.msi
+ 2009-12-19 07:11 . 2009-12-19 07:11 502272 c:\windows\Installer\1de35e.msi
+ 2011-03-18 00:03 . 2011-03-18 00:03 308736 c:\windows\Installer\17bd6384.msp
+ 2011-04-19 08:54 . 2011-04-19 08:54 227328 c:\windows\Installer\17bd6313.msi
+ 2011-05-17 10:09 . 2011-05-17 10:09 926720 c:\windows\Installer\16593587.msi
+ 2009-05-09 13:03 . 2009-05-09 13:03 568320 c:\windows\Installer\15ee6.msi
+ 2009-05-13 00:15 . 2009-05-13 00:15 888320 c:\windows\Installer\1477b2.msi
+ 2010-11-26 14:17 . 2010-11-26 14:17 532992 c:\windows\Installer\1248302d.msi
+ 2010-11-26 15:19 . 2010-11-26 15:19 620032 c:\windows\Installer\1248301d.msi
+ 2010-11-26 17:32 . 2010-11-26 17:32 510976 c:\windows\Installer\1248300d.msi
+ 2010-11-26 17:32 . 2010-11-26 17:32 607744 c:\windows\Installer\12483005.msi
+ 2010-11-26 14:45 . 2010-11-26 14:45 606208 c:\windows\Installer\12482fed.msi
+ 2010-11-26 15:19 . 2010-11-26 15:19 725504 c:\windows\Installer\12482fdd.msi
+ 2007-04-10 21:31 . 2007-04-10 21:31 930816 c:\windows\Installer\1004744.msi
+ 2009-07-14 05:37 . 2009-07-14 05:37 291294 c:\windows\inf\PERFLIB\0409\perfi.dat
+ 2009-07-14 05:37 . 2009-07-14 05:37 291294 c:\windows\inf\PERFLIB\0409\perfh.dat
+ 2009-07-14 02:34 . 2009-07-14 01:00 291294 c:\windows\inf\PERFLIB\0000\perfi.dat
+ 2009-07-14 02:34 . 2009-07-14 01:00 291294 c:\windows\inf\PERFLIB\0000\perfh.dat
+ 2009-07-14 00:14 . 2009-07-14 01:16 126976 c:\windows\IME\SPTIP.DLL
+ 2010-08-28 05:50 . 2009-11-06 15:59 382216 c:\windows\Help\OEM\Scripts\HPSAUpgrade.exe
+ 2009-07-14 00:25 . 2009-07-14 01:39 135680 c:\windows\ehome\WTVConverter.exe
+ 2009-07-14 00:25 . 2009-07-14 01:41 190976 c:\windows\ehome\wtv2dvrms.dll
+ 2009-07-14 00:09 . 2009-07-14 01:20 134656 c:\windows\ehome\wow\mcstoredb.dll
+ 2009-07-14 00:10 . 2009-07-14 01:15 801280 c:\windows\ehome\wow\ehui.dll
+ 2009-07-14 00:09 . 2009-07-14 01:15 128512 c:\windows\ehome\wow\ehtrace.dll
+ 2009-07-13 22:36 . 2009-07-14 01:22 139264 c:\windows\ehome\wow\ehexthost32.exe
+ 2009-07-14 00:06 . 2009-07-14 01:25 238080 c:\windows\ehome\wow\BDATunePIA.dll
+ 2009-07-13 22:24 . 2009-07-14 01:51 106496 c:\windows\ehome\RegisterMCEApp.exe
+ 2009-07-14 00:22 . 2009-07-14 01:41 465920 c:\windows\ehome\mstvcapn.dll
+ 2009-07-14 00:24 . 2009-07-14 01:52 327168 c:\windows\ehome\Microsoft.MediaCenter.TV.Tuners.Interop.dll
+ 2009-07-13 22:36 . 2009-07-14 01:24 241664 c:\windows\ehome\Microsoft.MediaCenter.Sports.dll
+ 2010-10-26 18:36 . 2010-08-04 07:14 114688 c:\windows\ehome\Microsoft.MediaCenter.Playback.dll
+ 2009-07-14 00:24 . 2009-07-14 01:51 147968 c:\windows\ehome\Microsoft.MediaCenter.iTV.Media.dll
+ 2009-07-14 00:24 . 2009-07-14 01:51 315392 c:\windows\ehome\Microsoft.MediaCenter.Interop.dll
+ 2009-07-13 22:36 . 2009-07-14 01:22 385024 c:\windows\ehome\Microsoft.MediaCenter.dll
+ 2009-07-14 00:25 . 2009-07-14 01:41 691200 c:\windows\ehome\MhegVM.dll
+ 2009-07-14 00:24 . 2009-07-14 01:39 197632 c:\windows\ehome\Mcx2Prov.exe
+ 2009-07-14 00:24 . 2009-07-14 01:50 133120 c:\windows\ehome\Mcx2Dvcs.dll
+ 2010-10-26 18:36 . 2010-08-04 07:14 198656 c:\windows\ehome\mcupdate.exe
+ 2009-07-14 00:24 . 2009-07-14 01:48 139264 c:\windows\ehome\mcstoredb.dll
+ 2010-10-26 18:36 . 2010-08-04 06:28 638976 c:\windows\ehome\mcstore.dll
+ 2009-07-14 01:05 . 2009-07-14 01:39 343552 c:\windows\ehome\McrMgr.exe
+ 2009-07-14 00:25 . 2009-07-14 01:49 207872 c:\windows\ehome\mcplayerinterop.dll
+ 2010-10-26 18:36 . 2010-08-04 07:07 957952 c:\windows\ehome\mcplayer.dll
+ 2009-07-13 22:24 . 2009-07-14 01:47 118784 c:\windows\ehome\mcglidhostobj.dll
+ 2010-10-26 18:36 . 2010-08-04 07:14 741376 c:\windows\ehome\mcepg.dll
+ 2009-07-13 22:24 . 2009-07-14 01:50 106496 c:\windows\ehome\loadmxf.exe
+ 2009-07-14 00:24 . 2009-07-14 01:39 288256 c:\windows\ehome\ehvid.exe
+ 2009-07-14 00:25 . 2009-07-14 01:39 163328 c:\windows\ehome\ehtray.exe
+ 2009-07-14 00:24 . 2009-07-14 01:40 189440 c:\windows\ehome\ehtrace.dll
+ 2009-07-14 00:25 . 2009-07-14 01:40 394752 c:\windows\ehome\ehskb.dll
+ 2009-07-14 00:24 . 2009-07-14 01:39 103936 c:\windows\ehome\ehshell.exe
+ 2009-07-14 00:24 . 2009-07-14 01:39 127488 c:\windows\ehome\ehsched.exe
+ 2009-07-14 00:25 . 2009-07-14 01:40 415744 c:\windows\ehome\ehReplay.dll
+ 2010-10-26 18:36 . 2010-08-04 07:05 696320 c:\windows\ehome\ehrecvr.exe
+ 2009-07-13 22:35 . 2009-07-14 01:21 196608 c:\windows\ehome\ehRecObj.dll
+ 2009-07-14 00:24 . 2009-07-14 01:40 125440 c:\windows\ehome\ehProxy.dll
+ 2010-10-26 18:36 . 2010-08-04 07:05 295936 c:\windows\ehome\ehprivjob.exe
+ 2010-10-26 18:36 . 2010-08-04 07:07 150528 c:\windows\ehome\ehPresenter.dll
+ 2009-07-13 22:35 . 2009-07-14 01:21 143360 c:\windows\ehome\ehiwmp.dll
+ 2009-07-13 22:35 . 2009-07-14 01:20 335872 c:\windows\ehome\ehiVidCtl.dll
+ 2009-07-14 00:24 . 2009-07-14 01:40 100864 c:\windows\ehome\ehitvhost.dll
+ 2009-07-13 22:35 . 2009-07-14 01:20 172032 c:\windows\ehome\ehiProxy.dll
+ 2010-10-26 18:36 . 2010-08-04 07:07 758784 c:\windows\ehome\ehglid.dll
+ 2009-07-13 22:36 . 2009-07-14 01:20 143360 c:\windows\ehome\ehexthost.exe
+ 2009-07-14 00:24 . 2009-07-14 01:40 316416 c:\windows\ehome\ehdrop.dll
+ 2009-07-14 00:25 . 2009-07-14 01:40 249344 c:\windows\ehome\ehchhime.dll
+ 2009-07-14 01:05 . 2009-07-14 01:41 303104 c:\windows\ehome\cbva.dll
+ 2009-07-14 00:25 . 2009-07-14 01:40 408576 c:\windows\ehome\BmlDataCarousel.dll
+ 2009-07-14 00:21 . 2009-07-14 01:54 249344 c:\windows\ehome\BDATunePIA.dll
+ 2010-09-04 20:55 . 2002-07-25 21:05 172032 c:\windows\Downloaded Program Files\isusweb.dll
+ 2010-09-04 20:55 . 2002-07-25 21:13 196608 c:\windows\Downloaded Program Files\dwusplay.exe
+ 2009-07-14 00:07 . 2009-07-14 01:26 489472 c:\windows\diagnostics\system\Networking\DiagPackage.dll
+ 2009-07-13 23:31 . 2009-07-14 01:26 175616 c:\windows\diagnostics\system\Audio\DiagPackage.dll
+ 2009-07-14 05:35 . 2009-07-14 02:32 1617920 c:\windows\system32\en\AuthFWSnapIn.Resources.dll
+ 2009-07-31 02:46 . 2009-07-31 02:46 1436920 c:\windows\system32\DriverStore\FileRepository\xusb21.inf_amd64_neutral_68c06a8fe00c5ac3\x64\WdfCoInstaller01009.dll
+ 2009-07-13 22:53 . 2009-06-10 20:32 5898752 c:\windows\system32\DriverStore\FileRepository\xcbdav.inf_amd64_neutral_cf80e4da1c95e6e2\xchalVx64.sys
+ 2009-07-14 00:22 . 2009-07-14 01:41 1195008 c:\windows\system32\DriverStore\FileRepository\wpdmtp.inf_amd64_neutral_28f06ca2e38e8979\WpdMtpDr.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 1052160 c:\windows\system32\DriverStore\FileRepository\wialx004.inf_amd64_neutral_0a3a62ae6ed43127\lxa3comc.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 1052160 c:\windows\system32\DriverStore\FileRepository\wialx003.inf_amd64_neutral_db618863f9347f9a\lxa2comc.DLL
+ 2009-07-14 00:22 . 2009-07-14 01:41 1393152 c:\windows\system32\DriverStore\FileRepository\wdmaudio.inf_amd64_neutral_423894ded0ba8fdf\WMALFXGFXDSP.dll
+ 2011-05-10 12:06 . 2011-05-10 12:06 4517664 c:\windows\system32\DriverStore\FileRepository\usbaapl64.inf_amd64_neutral_d7a1a1654f22581c\usbaaplrc.dll
+ 2008-07-08 18:55 . 2008-07-08 18:55 1490656 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\WdfCoInstaller01007.dll
+ 2009-07-14 23:13 . 2009-07-14 23:13 8056616 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTPRes.dll
+ 2009-07-14 23:12 . 2009-07-14 23:12 1815848 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTPEnh.exe
+ 2009-07-14 23:13 . 2009-07-14 23:13 1526568 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_dfa572168d4f7a89\SynTPCpl.dll
+ 2009-08-07 20:49 . 2009-08-07 20:49 1721576 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\WdfCoInstaller01009.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 2096424 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTPEnh.exe
+ 2010-05-28 02:29 . 2010-05-28 02:29 1794344 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTPCpl.dll
+ 2009-08-25 08:33 . 2009-07-22 01:33 3593216 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stlang64.dll
+ 2009-08-25 08:33 . 2009-07-22 01:33 1431552 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\stapo64.dll
+ 2010-03-23 18:53 . 2010-03-23 18:53 3348480 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stlang64.dll
+ 2010-03-23 18:53 . 2010-03-23 18:53 1465344 c:\windows\system32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\stapo64.dll
+ 2009-08-25 08:33 . 2009-02-03 02:27 7347200 c:\windows\system32\DriverStore\FileRepository\rtsustor.inf_amd64_neutral_423cb4ac73f732b6\RtsUStoricon.dll
+ 2009-06-10 20:37 . 2009-07-14 01:45 1524816 c:\windows\system32\DriverStore\FileRepository\ql2300.inf_amd64_neutral_ca8487daf77ff7cb\ql2300.sys
+ 2009-07-14 01:18 . 2009-07-14 01:41 1275392 c:\windows\system32\DriverStore\FileRepository\prnrc00c.inf_amd64_neutral_53a58f4fd7d88575\Amd64\RIPSUI7.DLL
+ 2009-07-14 01:18 . 2009-07-14 01:41 1259008 c:\windows\system32\DriverStore\FileRepository\prnrc00a.inf_amd64_neutral_565c5d04cc520c48\Amd64\RIAUI27.DLL
+ 2009-07-14 01:18 . 2009-07-14 01:41 1259008 c:\windows\system32\DriverStore\FileRepository\prnrc00a.inf_amd64_neutral_565c5d04cc520c48\Amd64\RIAUI17.DLL
+ 2009-07-14 01:19 . 2009-07-14 01:30 6565888 c:\windows\system32\DriverStore\FileRepository\prnms002.inf_amd64_neutral_d439051ec90eeda4\Amd64\FXSRES.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:41 1115136 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfvew73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 1591808 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfuiw73.dll
+ 2009-07-14 01:20 . 2009-07-14 01:27 1058816 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpfstw73.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 1667072 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpf4400t.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 1858048 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpf3rw73.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1667072 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpd2600t.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1674752 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpc4600t.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 1633792 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hpc309at.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1674752 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp8500nt.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1674752 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp8500gt.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 1674752 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp8500at.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 1674752 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp8000at.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 1667584 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp6500nt.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1667584 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp6500at.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1667584 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp6000nt.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 1667584 c:\windows\system32\DriverStore\FileRepository\prnhp005.inf_amd64_neutral_914d6c300207814f\Amd64\hp6000at.dll
+ 2009-07-14 01:20 . 2009-07-14 01:27 3498496 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpzurw72.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 1473536 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpzuiw72.dll
+ 2009-07-14 01:20 . 2009-07-14 01:27 1063936 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpzstw72.dll
+ 2009-07-14 01:20 . 2009-07-14 01:41 1832448 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpz3rw72.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1416192 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpd7500t.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1416192 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpD5400t.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 1422336 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpc6300t.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1416704 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpc5500t.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1416192 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpc5300t.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 1412096 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpc4500t.dll
+ 2009-07-14 01:18 . 2009-07-14 01:41 1423360 c:\windows\system32\DriverStore\FileRepository\prnhp004.inf_amd64_neutral_53f688945cfc24cc\Amd64\hpb8500t.dll
+ 2009-07-14 01:20 . 2009-07-14 01:27 1176064 c:\windows\system32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\hpzurw71.dll
+ 2009-07-14 01:19 . 2009-07-14 01:41 3506176 c:\windows\system32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\HPZUIW71.DLL
+ 2009-07-14 01:20 . 2009-07-14 01:27 6061568 c:\windows\system32\DriverStore\FileRepository\prnhp003.inf_amd64_neutral_4480210763997eb4\Amd64\HPZSTW71.DLL
+ 2011-06-12 20:29 . 2011-06-12 20:29 2528256 c:\windows\Installer\e61100.msi
+ 2011-03-18 00:05 . 2011-03-18 00:05 4989440 c:\windows\Installer\ad43949a.msp
+ 2011-01-11 21:49 . 2011-01-11 21:49 9003008 c:\windows\Installer\ad439473.msp
+ 2010-11-21 03:32 . 2010-11-21 03:32 4165120 c:\windows\Installer\ad43942e.msp
+ 2010-11-21 03:34 . 2010-11-21 03:34 1198080 c:\windows\Installer\ad439400.msp
+ 2011-03-18 00:01 . 2011-03-18 00:01 9563648 c:\windows\Installer\ad4393cb.msp
+ 2011-01-11 21:50 . 2011-01-11 21:50 8177152 c:\windows\Installer\ad43939d.msp
+ 2010-11-21 03:33 . 2010-11-21 03:33 1980928 c:\windows\Installer\ad43937d.msp
+ 2009-07-23 19:11 . 2009-07-23 19:11 5855744 c:\windows\Installer\aba40.msi
+ 2011-04-29 16:27 . 2011-04-29 16:27 4158464 c:\windows\Installer\a94b59c.msp
+ 2011-04-28 09:42 . 2011-04-28 09:42 4990976 c:\windows\Installer\a94b576.msp
+ 2011-04-29 16:30 . 2011-04-29 16:30 1197056 c:\windows\Installer\a94b558.msp
+ 2009-11-14 00:49 . 2009-11-14 00:49 1619968 c:\windows\Installer\878359.msi
+ 2010-07-09 21:28 . 2010-07-09 21:28 2151424 c:\windows\Installer\82ac520.msp
+ 2010-07-26 20:00 . 2010-07-26 20:00 5010944 c:\windows\Installer\82ac50b.msp
+ 2010-07-11 00:14 . 2010-07-11 00:14 2850816 c:\windows\Installer\82ac4cf.msp
+ 2011-05-26 06:43 . 2011-05-26 06:43 1606656 c:\windows\Installer\810d8d.msi
+ 2010-10-21 01:26 . 2010-10-21 01:26 3095552 c:\windows\Installer\7e1ee16.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 2631168 c:\windows\Installer\7e1ee06.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 4250112 c:\windows\Installer\7e1edfa.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 4175360 c:\windows\Installer\7e1edf6.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 3410944 c:\windows\Installer\7e1edf2.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 6660608 c:\windows\Installer\7e1edee.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 1070592 c:\windows\Installer\7e1edea.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 1492992 c:\windows\Installer\7e1ede6.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 3454976 c:\windows\Installer\7e1edde.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 6195200 c:\windows\Installer\7e1edda.msi
+ 2010-10-21 01:25 . 2010-10-21 01:25 6363136 c:\windows\Installer\7e1edd6.msi
+ 2010-10-21 01:24 . 2010-10-21 01:24 1819136 c:\windows\Installer\7e1edc6.msi
+ 2010-10-21 01:24 . 2010-10-21 01:24 8313856 c:\windows\Installer\7e1edc2.msi
+ 2010-10-21 01:24 . 2010-10-21 01:24 3734016 c:\windows\Installer\7e1ed3b.msi
+ 2010-10-21 01:24 . 2010-10-21 01:24 3664384 c:\windows\Installer\7e1ed37.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 8332288 c:\windows\Installer\7e1ecf1.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 2312704 c:\windows\Installer\7e1eced.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 4004864 c:\windows\Installer\7e1ecde.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 2343936 c:\windows\Installer\7e1eccc.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 4680704 c:\windows\Installer\7e1ecbe.msi
+ 2010-10-21 01:22 . 2010-10-21 01:22 7710720 c:\windows\Installer\7e1eca7.msi
+ 2010-10-21 01:22 . 2010-10-21 01:22 9433088 c:\windows\Installer\7e1eca0.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 9553920 c:\windows\Installer\7e1ec94.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 2856448 c:\windows\Installer\7e1ec90.msi
+ 2010-10-21 01:22 . 2010-10-21 01:22 4227072 c:\windows\Installer\7e1ec84.msi
+ 2010-10-21 01:22 . 2010-10-21 01:22 8810496 c:\windows\Installer\7e1ec80.msi
+ 2010-03-18 21:41 . 2010-03-18 21:41 1901056 c:\windows\Installer\77b7d9c.msi
+ 2010-08-13 22:01 . 2010-08-13 22:01 8993280 c:\windows\Installer\74a26ac.msp
+ 2010-08-13 21:59 . 2010-08-13 21:59 8182272 c:\windows\Installer\74a2670.msp
+ 2010-08-13 22:02 . 2010-08-13 22:02 2545664 c:\windows\Installer\74a2642.msp
+ 2010-08-13 22:00 . 2010-08-13 22:00 9404928 c:\windows\Installer\74a2629.msp
+ 2010-07-16 12:41 . 2010-07-16 12:41 1732608 c:\windows\Installer\74a2612.msp
+ 2011-01-07 21:03 . 2011-01-07 21:03 1943552 c:\windows\Installer\70d9792.msi
+ 2011-01-07 21:03 . 2011-01-07 21:03 2081792 c:\windows\Installer\70d9602.msi
+ 2010-09-17 10:06 . 2010-09-17 10:06 3355648 c:\windows\Installer\6e8b1cb.msp
+ 2010-08-19 21:57 . 2010-08-19 21:57 3395584 c:\windows\Installer\6d0f9e6.msp
+ 2010-08-04 19:12 . 2010-08-04 19:12 1004544 c:\windows\Installer\6d0f9cf.msp
+ 2009-08-21 06:37 . 2009-08-21 06:37 1584128 c:\windows\Installer\62575d.msi
+ 2011-04-14 14:46 . 2011-04-14 14:46 3854848 c:\windows\Installer\613b5.msp
+ 2010-11-10 06:36 . 2010-11-10 06:36 2958336 c:\windows\Installer\5f202496.msp
+ 2010-11-10 06:20 . 2010-11-10 06:20 2932736 c:\windows\Installer\5f20247a.msp
+ 2010-11-10 05:46 . 2010-11-10 05:46 4427776 c:\windows\Installer\5f202464.msp
+ 2010-11-10 07:16 . 2010-11-10 07:16 3314688 c:\windows\Installer\5f20241c.msp
+ 2010-11-10 07:20 . 2010-11-10 07:20 3733504 c:\windows\Installer\5f2023fd.msp
+ 2010-11-10 07:22 . 2010-11-10 07:22 5514240 c:\windows\Installer\5f2023f1.msp
+ 2010-11-10 08:58 . 2010-11-10 08:58 5870080 c:\windows\Installer\5f20239c.msp
+ 2010-11-10 05:23 . 2010-11-10 05:23 1139712 c:\windows\Installer\5f202383.msp
+ 2010-11-10 06:15 . 2010-11-10 06:15 1830400 c:\windows\Installer\5f202375.msp
+ 2009-10-16 11:08 . 2009-10-16 11:08 2237952 c:\windows\Installer\5ee2b11.msp
+ 2010-04-09 19:21 . 2010-04-09 19:21 5025792 c:\windows\Installer\5ee2afa.msp
+ 2008-10-05 11:12 . 2008-10-05 11:12 4784128 c:\windows\Installer\574579.msp
+ 2010-09-17 11:04 . 2010-09-17 11:04 9401856 c:\windows\Installer\508b16c.msp
+ 2010-10-21 23:12 . 2010-10-21 23:12 3359744 c:\windows\Installer\508b163.msp
+ 2010-10-07 23:43 . 2010-10-07 23:43 1980416 c:\windows\Installer\508b135.msp
+ 2010-02-04 22:24 . 2010-02-04 22:24 9122304 c:\windows\Installer\4d2d9010.msp
+ 2010-02-21 06:00 . 2010-02-21 06:00 8480768 c:\windows\Installer\4d2d8fd4.msp
+ 2010-02-04 05:59 . 2010-02-04 05:59 5031936 c:\windows\Installer\4d2d8fcb.msp
+ 2009-08-21 06:14 . 2009-08-21 06:14 1474048 c:\windows\Installer\4cdd1a.msi
+ 2010-10-21 23:10 . 2010-10-21 23:10 3995136 c:\windows\Installer\4655ca3c.msp
+ 2010-11-24 15:51 . 2010-11-24 15:51 2190336 c:\windows\Installer\4655ca22.msp
+ 2010-11-21 04:35 . 2010-11-21 04:35 3359744 c:\windows\Installer\4655ca11.msp
+ 2011-02-16 18:54 . 2011-02-16 18:54 4992000 c:\windows\Installer\462b31cb.msp
+ 2011-01-11 22:53 . 2011-01-11 22:53 1763328 c:\windows\Installer\462b31b4.msp
+ 2010-04-28 19:05 . 2010-04-28 19:05 2097664 c:\windows\Installer\3fbac8f4.msi
+ 2011-01-11 04:54 . 2011-01-11 04:54 3173888 c:\windows\Installer\3cce9d1.msi
+ 2010-12-17 05:17 . 2010-12-17 05:17 3362304 c:\windows\Installer\3a6fbe84.msp
+ 2010-09-05 15:26 . 2010-09-05 15:26 1964544 c:\windows\Installer\383711f.msi
+ 2010-04-01 02:47 . 2010-04-01 02:47 1411584 c:\windows\Installer\34a7e74c.msi
+ 2010-11-08 07:14 . 2010-11-08 07:14 3402752 c:\windows\Installer\33c032a7.msp
+ 2009-07-03 03:55 . 2009-07-03 03:55 2591744 c:\windows\Installer\329b51.msi
+ 2009-07-11 00:21 . 2009-07-11 00:21 5506048 c:\windows\Installer\329b49.msi
+ 2009-07-03 03:42 . 2009-07-03 03:42 3399680 c:\windows\Installer\329b44.msi
+ 2009-07-13 23:24 . 2009-07-13 23:24 8215040 c:\windows\Installer\329b3f.msi
+ 2009-07-10 02:35 . 2009-07-10 02:35 2303488 c:\windows\Installer\329b3a.msi
+ 2010-02-21 05:03 . 2010-02-21 05:03 4472832 c:\windows\Installer\31b5396.msp
+ 2010-02-21 05:02 . 2010-02-21 05:02 4195840 c:\windows\Installer\31b5379.msp
+ 2010-03-12 03:59 . 2010-03-12 03:59 5031424 c:\windows\Installer\31b5362.msp
+ 2009-04-14 09:49 . 2009-04-14 09:49 1922560 c:\windows\Installer\30e6e5.msp
+ 2009-07-21 05:29 . 2009-07-21 05:29 6057984 c:\windows\Installer\30e633.msi
+ 2008-06-19 23:28 . 2008-06-19 23:28 1573376 c:\windows\Installer\30e624.msp
+ 2008-10-01 02:07 . 2008-10-01 02:07 6042112 c:\windows\Installer\30e5dd.msi
+ 2009-04-14 09:51 . 2009-04-14 09:51 1303040 c:\windows\Installer\30e5d5.msp
+ 2008-04-11 23:48 . 2008-04-11 23:48 6774272 c:\windows\Installer\30e57c.msp
+ 2009-02-26 00:08 . 2009-02-26 00:08 8311808 c:\windows\Installer\30e544.msp
+ 2007-10-15 04:43 . 2007-10-15 04:43 5749760 c:\windows\Installer\30e4de.msp
+ 2007-10-15 04:43 . 2007-10-15 04:43 6956544 c:\windows\Installer\30e4d5.msp
+ 2008-05-21 05:45 . 2008-05-21 05:45 5246976 c:\windows\Installer\30e360.msp
+ 2009-04-14 09:50 . 2009-04-14 09:50 5191680 c:\windows\Installer\30e2f3.msp
+ 2008-10-20 15:18 . 2008-10-20 15:18 6474240 c:\windows\Installer\30e2c7.msp
+ 2010-05-20 23:57 . 2010-05-20 23:57 4989952 c:\windows\Installer\2ef8756b.msp
+ 2010-05-20 23:57 . 2010-05-20 23:57 5907456 c:\windows\Installer\2ef8756a.msp
+ 2010-06-11 15:03 . 2010-06-11 15:03 5021184 c:\windows\Installer\2ef8754a.msp
+ 2009-12-03 19:15 . 2009-12-03 19:15 5004288 c:\windows\Installer\2e7017b.msp
+ 2009-04-04 22:10 . 2009-04-04 22:10 1282560 c:\windows\Installer\2dbc874.msp
+ 2009-04-04 22:10 . 2009-04-04 22:10 7888384 c:\windows\Installer\2dbc86c.msp
+ 2009-04-04 22:10 . 2009-04-04 22:10 9926144 c:\windows\Installer\2dbc862.msp
+ 2009-04-04 22:05 . 2009-04-04 22:05 7999488 c:\windows\Installer\2dbc857.msp
+ 2009-04-04 15:14 . 2009-04-04 15:14 1094656 c:\windows\Installer\2dbc5c7.msp
+ 2007-06-22 14:28 . 2007-06-22 14:28 8440832 c:\windows\Installer\2c5e7.msi
+ 2007-03-22 13:46 . 2007-03-22 13:46 8198656 c:\windows\Installer\2c5d6.msp
+ 2009-12-19 06:06 . 2009-12-19 06:06 3779584 c:\windows\Installer\2c5c5.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 9614848 c:\windows\Installer\2c5be.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 1654272 c:\windows\Installer\2c5af.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 1642496 c:\windows\Installer\2c583.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 1642496 c:\windows\Installer\2c57d.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 1714176 c:\windows\Installer\2c577.msi
+ 2009-12-19 06:02 . 2009-12-19 06:02 2398720 c:\windows\Installer\2c56b.msi
+ 2009-07-02 01:38 . 2009-07-02 01:38 2100436 c:\windows\Installer\2c565.msi
+ 2009-04-14 09:18 . 2009-04-14 09:18 9684480 c:\windows\Installer\2ba0761.msp
+ 2009-05-26 23:54 . 2009-05-26 23:54 4192768 c:\windows\Installer\2ba0730.msp
+ 2009-08-18 17:58 . 2009-08-18 17:58 8301056 c:\windows\Installer\2ba06fd.msp
+ 2009-04-24 17:31 . 2009-04-24 17:31 1425920 c:\windows\Installer\2ba06de.msp
+ 2009-04-24 17:30 . 2009-04-24 17:30 2583552 c:\windows\Installer\2ba06bc.msp
+ 2009-11-21 04:36 . 2009-11-21 04:36 5002752 c:\windows\Installer\2ba06a3.msp
+ 2009-04-24 17:38 . 2009-04-24 17:38 1229312 c:\windows\Installer\2ba068c.msp
+ 2009-08-05 12:49 . 2009-08-05 12:49 3457024 c:\windows\Installer\2ba066a.msp
+ 2009-04-24 17:28 . 2009-04-24 17:28 4450816 c:\windows\Installer\2ba0632.msp
+ 2009-07-27 09:31 . 2009-07-27 09:31 3738624 c:\windows\Installer\2ba05de.msp
+ 2009-04-14 08:20 . 2009-04-14 08:20 9573376 c:\windows\Installer\2ba05d5.msp
+ 2009-08-18 17:57 . 2009-08-18 17:57 9122304 c:\windows\Installer\2ba05bc.msp
+ 2009-09-18 14:30 . 2009-09-18 14:30 5016576 c:\windows\Installer\2ba05a4.msp
+ 2009-10-16 12:09 . 2009-10-16 12:09 2518016 c:\windows\Installer\2ba0557.msp
+ 2009-08-18 18:08 . 2009-08-18 18:08 1373696 c:\windows\Installer\2ba0519.msp
+ 2009-04-24 17:29 . 2009-04-24 17:29 9013760 c:\windows\Installer\2ba04b6.msp
+ 2010-06-20 08:01 . 2010-06-20 08:01 8040960 c:\windows\Installer\2ac58b2d.msp
+ 2009-07-03 03:39 . 2009-07-03 03:39 2519040 c:\windows\Installer\295fa.msi
+ 2009-07-03 03:38 . 2009-07-03 03:38 4588544 c:\windows\Installer\295f2.msi
+ 2009-07-03 03:37 . 2009-07-03 03:37 3232768 c:\windows\Installer\295e9.msi
+ 2009-07-03 03:36 . 2009-07-03 03:36 8120320 c:\windows\Installer\295dd.msi
+ 2009-07-10 02:34 . 2009-07-10 02:34 2303488 c:\windows\Installer\295c8.msi
+ 2009-07-21 17:37 . 2009-07-21 17:37 1276928 c:\windows\Installer\295c2.msi
+ 2009-07-14 19:55 . 2009-07-14 19:55 1643520 c:\windows\Installer\295bc.msi
+ 2009-07-16 22:20 . 2009-07-16 22:20 3614720 c:\windows\Installer\295b3.msi
+ 2009-07-25 01:31 . 2009-07-25 01:31 3670528 c:\windows\Installer\295ae.msi
+ 2009-07-23 19:12 . 2009-07-23 19:12 3528704 c:\windows\Installer\295a9.msi
+ 2009-07-02 21:00 . 2009-07-02 21:00 3358208 c:\windows\Installer\2959a.msi
+ 2009-07-24 03:56 . 2009-07-24 03:56 3617280 c:\windows\Installer\29595.msi
+ 2011-01-11 22:52 . 2011-01-11 22:52 3360768 c:\windows\Installer\22366705.msp
+ 2005-03-17 01:14 . 2005-03-17 01:14 3559424 c:\windows\Installer\2165f5a8.msi
+ 2005-03-25 13:50 . 2005-03-25 13:50 5091808 c:\windows\Installer\2165f589.msi
+ 2006-12-02 09:20 . 2006-12-02 09:20 3227648 c:\windows\Installer\1f61a.msi
+ 2009-04-23 22:25 . 2009-04-23 22:25 1238528 c:\windows\Installer\1e64c.msi
+ 2009-12-19 07:11 . 2009-12-19 07:11 1654272 c:\windows\Installer\1de38c.msi
+ 2009-12-19 07:11 . 2009-12-19 07:11 1653760 c:\windows\Installer\1de382.msi
+ 2009-12-19 07:11 . 2009-12-19 07:11 2320896 c:\windows\Installer\1de364.msi
+ 2009-12-19 07:11 . 2009-12-19 07:11 1648640 c:\windows\Installer\1de358.msi
+ 2009-12-19 07:11 . 2009-12-19 07:11 2024448 c:\windows\Installer\1de34e.msi
+ 2010-10-10 08:13 . 2010-10-10 08:13 2391040 c:\windows\Installer\18f58fce.msi
+ 2010-04-24 21:08 . 2010-04-24 21:08 9129984 c:\windows\Installer\18c03c95.msp
+ 2010-03-24 22:54 . 2010-03-24 22:54 3126272 c:\windows\Installer\18c03c6d.msp
+ 2010-03-24 22:54 . 2010-03-24 22:54 2516992 c:\windows\Installer\18c03c6c.msp
+ 2010-04-24 21:07 . 2010-04-24 21:07 4667392 c:\windows\Installer\18c03c23.msp
+ 2010-04-24 21:05 . 2010-04-24 21:05 4199424 c:\windows\Installer\18c03bfd.msp
+ 2010-05-19 03:35 . 2010-05-19 03:35 5023744 c:\windows\Installer\18c03be6.msp
+ 2010-04-24 21:10 . 2010-04-24 21:10 8486400 c:\windows\Installer\18c03b82.msp
+ 2002-09-18 07:07 . 2002-09-18 07:07 1126400 c:\windows\Installer\181eb4e0.msi
+ 2011-04-29 16:31 . 2011-04-29 16:31 9006080 c:\windows\Installer\17bd635e.msp
+ 2011-04-29 16:28 . 2011-04-29 16:28 1995264 c:\windows\Installer\17bd631b.msp
+ 2011-04-29 16:33 . 2011-04-29 16:33 8173568 c:\windows\Installer\17bd62db.msp
+ 2011-04-16 12:44 . 2011-04-16 12:44 2770944 c:\windows\Installer\17bd62d3.msi
+ 2011-04-16 04:14 . 2011-04-16 04:14 3186176 c:\windows\Installer\17bd62bb.msi
+ 2007-08-14 20:19 . 2007-08-14 20:19 1591808 c:\windows\Installer\173472ed.msi
+ 2010-01-15 02:26 . 2010-01-15 02:26 5027840 c:\windows\Installer\12497d01.msp
+ 2010-11-26 19:20 . 2010-11-26 19:20 2258944 c:\windows\Installer\1248303b.msi
+ 2010-11-26 18:34 . 2010-11-26 18:34 9998336 c:\windows\Installer\12483035.msi
+ 2010-11-26 17:44 . 2010-11-26 17:44 3123200 c:\windows\Installer\12483025.msi
+ 2010-11-26 13:04 . 2010-11-26 13:04 1911808 c:\windows\Installer\12483015.msi
+ 2010-11-26 15:44 . 2010-11-26 15:44 1528320 c:\windows\Installer\12482ffd.msi
+ 2010-11-26 17:44 . 2010-11-26 17:44 3670016 c:\windows\Installer\12482fe5.msi
+ 2010-11-26 15:43 . 2010-11-26 15:43 1997312 c:\windows\Installer\12482fd5.msi
+ 2010-11-26 17:32 . 2010-11-26 17:32 2211328 c:\windows\Installer\12482fcd.msi
+ 2010-07-21 22:14 . 2010-07-21 22:14 1904128 c:\windows\Installer\102e6fa4.msi
+ 2009-07-14 02:34 . 2009-06-10 20:44 9633792 c:\windows\Fonts\StaticCache.dat
+ 2010-10-26 18:36 . 2010-08-04 06:16 1551872 c:\windows\ehome\wow\ehuihlp.dll
+ 2009-07-13 22:35 . 2009-07-14 01:26 2596864 c:\windows\ehome\Microsoft.MediaCenter.UI.dll
+ 2009-07-13 22:35 . 2009-07-14 01:23 1572864 c:\windows\ehome\Microsoft.MediaCenter.Shell.dll
+ 2009-07-13 22:25 . 2009-07-14 01:52 1159168 c:\windows\ehome\Microsoft.MediaCenter.Bml.dll
+ 2009-07-13 23:13 . 2009-07-14 01:41 2608640 c:\windows\ehome\Mcx2Filter.dll
+ 2010-10-26 18:36 . 2010-08-04 07:07 1668608 c:\windows\ehome\ehuihlp.dll
+ 2009-07-14 00:26 . 2009-07-14 01:40 1195520 c:\windows\ehome\ehui.dll
+ 2010-10-26 18:36 . 2010-08-04 06:28 6307840 c:\windows\ehome\ehshell.dll
+ 2009-07-14 00:25 . 2009-07-14 01:40 1362432 c:\windows\ehome\ehchsime.dll
+ 2010-05-28 02:29 . 2010-05-28 02:29 10209576 c:\windows\system32\DriverStore\FileRepository\synpd.inf_amd64_neutral_c7be43ec68176fed\SynTPRes.dll
+ 2010-08-28 05:47 . 2010-08-28 05:47 35334656 c:\windows\Installer\fbc05.msi
+ 2011-01-31 10:45 . 2011-01-31 10:45 11135488 c:\windows\Installer\f6a2e3d.msp
+ 2011-06-12 21:11 . 2011-06-12 21:11 39970304 c:\windows\Installer\e61afd.msi
+ 2011-06-12 20:39 . 2011-06-12 20:39 10877952 c:\windows\Installer\e6110d.msi
+ 2011-06-12 20:26 . 2011-06-12 20:26 17836544 c:\windows\Installer\e610c9.msi
+ 2010-04-14 22:17 . 2010-04-14 22:17 23085056 c:\windows\Installer\b113d.msp
+ 2011-02-24 19:15 . 2011-02-24 19:15 11551232 c:\windows\Installer\ad439366.msp
+ 2011-02-11 12:59 . 2011-02-11 12:59 23633408 c:\windows\Installer\ad43934a.msp
+ 2011-04-22 23:41 . 2011-04-22 23:41 11507712 c:\windows\Installer\a94b5d6.msp
+ 2010-01-05 01:44 . 2010-01-05 01:44 27012608 c:\windows\Installer\a711a9d.msp
+ 2010-04-04 06:54 . 2010-04-04 06:54 11850240 c:\windows\Installer\a711a9c.msp
+ 2009-04-04 12:35 . 2009-04-04 12:35 36977152 c:\windows\Installer\92286.msp
+ 2009-04-04 12:35 . 2009-04-04 12:35 38325760 c:\windows\Installer\9227b.msp
+ 2010-07-11 00:06 . 2010-07-11 00:06 10120192 c:\windows\Installer\82ac4b6.msp
+ 2010-10-21 01:24 . 2010-10-21 01:24 11846656 c:\windows\Installer\7e1edce.msi
+ 2010-10-21 01:24 . 2010-10-21 01:24 34193408 c:\windows\Installer\7e1edca.msi
+ 2010-10-21 01:24 . 2010-10-21 01:24 13850624 c:\windows\Installer\7e1ed90.msi
+ 2010-10-21 01:23 . 2010-10-21 01:23 21302784 c:\windows\Installer\7e1ed1f.msi
+ 2010-09-23 13:12 . 2010-09-23 13:12 28854784 c:\windows\Installer\7e1ec5b.msp
+ 2010-08-13 18:09 . 2010-08-13 18:09 12263936 c:\windows\Installer\7681399.msp
+ 2009-08-21 06:50 . 2009-08-21 06:50 36169728 c:\windows\Installer\6e0266.msi
+ 2010-07-23 05:04 . 2010-07-23 05:04 11395072 c:\windows\Installer\6d0f9c7.msp
+ 2011-03-13 01:02 . 2011-03-13 01:02 15139328 c:\windows\Installer\613b6.msp
+ 2010-11-10 07:18 . 2010-11-10 07:18 14617088 c:\windows\Installer\5f20244b.msp
+ 2010-06-04 11:43 . 2010-06-04 11:43 20242432 c:\windows\Installer\579de504.msp
+ 2010-10-09 03:07 . 2010-10-09 03:07 11559424 c:\windows\Installer\4655c9d3.msp
+ 2010-12-09 22:38 . 2010-12-09 22:38 26896384 c:\windows\Installer\454c7da4.msi
+ 2010-12-21 18:06 . 2010-12-21 18:06 11570688 c:\windows\Installer\3a6fbe6d.msp
+ 2010-04-01 02:47 . 2010-04-01 02:47 11643904 c:\windows\Installer\34a7e810.msi
+ 2010-03-22 20:03 . 2010-03-22 20:03 11732992 c:\windows\Installer\31b53af.msp
+ 2008-09-24 17:05 . 2008-09-24 17:05 16381440 c:\windows\Installer\30e6a9.msp
+ 2008-08-11 16:51 . 2008-08-11 16:51 15916544 c:\windows\Installer\30e664.msp
+ 2008-10-20 15:16 . 2008-10-20 15:16 13211648 c:\windows\Installer\30e64b.msp
+ 2008-08-11 16:49 . 2008-08-11 16:49 22457344 c:\windows\Installer\30e5ee.msp
+ 2009-04-14 09:21 . 2009-04-14 09:21 15303168 c:\windows\Installer\30e5e5.msp
+ 2009-04-14 08:46 . 2009-04-14 08:46 15438848 c:\windows\Installer\30e5cc.msp
+ 2009-02-26 00:05 . 2009-02-26 00:05 11840000 c:\windows\Installer\30e5b3.msp
+ 2009-04-14 09:56 . 2009-04-14 09:56 20498944 c:\windows\Installer\30e520.msp
+ 2009-12-19 07:41 . 2009-12-19 07:41 15709696 c:\windows\Installer\30e518.msp
+ 2007-10-15 04:43 . 2007-10-15 04:43 12743168 c:\windows\Installer\30e4e5.msp
+ 2007-10-15 04:43 . 2007-10-15 04:43 21981184 c:\windows\Installer\30e481.msp
+ 2007-10-15 04:33 . 2007-10-15 04:33 26646016 c:\windows\Installer\30e33e.msp
+ 2009-02-26 00:07 . 2009-02-26 00:07 11646464 c:\windows\Installer\30e31d.msp
+ 2007-10-15 04:59 . 2007-10-15 04:59 26614784 c:\windows\Installer\30e306.msp
+ 2010-05-20 23:58 . 2010-05-20 23:58 12114432 c:\windows\Installer\2ef87533.msp
+ 2009-04-04 22:09 . 2009-04-04 22:09 15190016 c:\windows\Installer\2dbc5cf.msp
+ 2009-04-04 16:36 . 2009-04-04 16:36 21390848 c:\windows\Installer\2dbc5c8.msp
+ 2009-08-18 18:19 . 2009-08-18 18:19 10098688 c:\windows\Installer\2ba0748.msp
+ 2009-05-07 14:04 . 2009-05-07 14:04 18341376 c:\windows\Installer\2ba0683.msp
+ 2009-04-14 08:22 . 2009-04-14 08:22 19840000 c:\windows\Installer\2ba0532.msp
+ 2009-08-18 17:50 . 2009-08-18 17:50 12022272 c:\windows\Installer\2ba0502.msp
+ 2010-11-24 02:20 . 2010-11-24 02:20 18991616 c:\windows\Installer\2a4dc6af.msi
+ 2011-03-04 18:03 . 2011-03-04 18:03 20308992 c:\windows\Installer\284d311b.msp
+ 2009-02-28 04:58 . 2009-02-28 04:58 21356032 c:\windows\Installer\282726.msi
+ 2010-01-20 12:32 . 2010-01-20 12:32 15710720 c:\windows\Installer\26eecfc0.msp
+ 2010-09-05 13:20 . 2010-09-05 13:20 20303872 c:\windows\Installer\234bac1a.msp
+ 2005-03-16 01:53 . 2005-03-16 01:53 12826624 c:\windows\Installer\2165f5a2.msi
+ 2005-03-24 21:29 . 2005-03-24 21:29 31518208 c:\windows\Installer\2165f58f.msi
+ 2009-12-19 07:12 . 2009-12-19 07:12 18183680 c:\windows\Installer\1de3e1.msi
+ 2010-10-02 16:53 . 2010-10-02 16:53 20303872 c:\windows\Installer\1a0660.msp
+ 2010-04-24 21:09 . 2010-04-24 21:09 11750912 c:\windows\Installer\18c03cae.msp
+ 2010-04-24 21:07 . 2010-04-24 21:07 10118144 c:\windows\Installer\18c03bbf.msp
+ 2011-06-17 07:41 . 2011-06-17 07:41 20333056 c:\windows\Installer\17bd630c.msp
+ 2011-01-06 12:53 . 2011-01-06 12:53 20304384 c:\windows\Installer\165e8361.msp
+ 2010-11-26 17:21 . 2010-11-26 17:21 12719104 c:\windows\Installer\12482ff5.msi
+ 2011-04-22 07:07 . 2011-04-22 07:07 20314624 c:\windows\Installer\123a0048.msp
+ 2009-07-14 00:26 . 2009-07-14 01:26 22177792 c:\windows\ehome\ehres.dll
+ 2009-07-14 00:47 . 2009-07-14 01:39 15697920 c:\windows\ehome\CreateDisc\SBEServer.exe
+ 2009-08-21 06:03 . 2009-08-21 06:03 16405504 c:\windows\Downloaded Installations\{3C5939F8-2E83-4DD6-B9F6-2782673C2A13}\HP Smart Web Printing.msi
+ 2007-10-15 04:43 . 2007-10-15 04:43 229852160 c:\windows\Installer\30e457.msp
+ 2009-04-04 22:08 . 2009-04-04 22:08 343058432 c:\windows\Installer\2dbc7a6.msp
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"="c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-07-16 1668664]
"LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
"Steam"="c:\program files (x86)\Steam\steam.exe" [2011-05-26 1242448]
"msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-11-10 4240760]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"HPCam_Menu"="c:\program files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe" [2009-02-25 218408]
"QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-24 323640]
"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-05-13 581480]
"UpdatePRCShortCut"="c:\program files (x86)\Hewlett-Packard\Recovery\MUITransfer\MUIStartMenu.exe" [2009-05-20 222504]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"EEventManager"="c:\progra~2\EPSONS~1\EVENTM~1\EEventManager.exe" [2009-04-07 673616]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"Lexmark 9500 Series"="c:\program files (x86)\Lexmark 9500 Series\fm3032.exe" [2007-09-18 307200]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-06-07 421160]
.
c:\users\SD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Picture Motion Browser Media Check Tool.lnk - c:\program files (x86)\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2009-12-19 344064]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"WallpaperStyle"= 2
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-22 136176]
R2 lxdoCATSCustConnectService;lxdoCATSCustConnectService;c:\windows\system32\spool\DRIVERS\x64\3\\lxdoserv.exe [2007-07-17 28672]
R3 gupdatem;Google Update Service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-22 136176]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys [x]
R3 NETw1v64;Intel® Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw1v64.sys [x]
R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 RtsUIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360x64\0403000.005\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360x64\0403000.005\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\BASHDefs\20110616.003\BHDrvx64.sys [2011-05-19 1143416]
S1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\N360x64\0403000.005\ccHPx64.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\Definitions\IPSDefs\20110625.050\IDSvia64.sys [2011-06-03 488056]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360x64\0403000.005\Ironx64.SYS [x]
S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\N360x64\0403000.005\SYMTDIV.SYS [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_960c1f056a541068\AESTSr64.exe [2009-03-02 89600]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x]
S2 lxdo_device;lxdo_device;c:\windows\system32\lxdocoms.exe [2007-09-20 1039360]
S2 N360;Norton 360;c:\program files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe [2010-02-26 126392]
S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [x]
S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-05-10 136824]
S3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
S3 NETw5s64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x]
S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
S3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 17:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
Contents of the 'Scheduled Tasks' folder
.
2011-06-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-22 15:16]
.
2011-06-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-05-22 15:16]
.
2011-06-28 c:\windows\Tasks\HPCeeScheduleForSD.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07 09:22]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-07-21 610872]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-21 171520]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-01-06 165912]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-01-06 387608]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-01-06 365592]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-03-23 487424]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2010-07-21 2306448]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-01-07 2328944]
"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2007-04-11 26704]
"lxdomon.exe"="c:\program files (x86)\Lexmark 9500 Series\lxdomon.exe" [2007-09-06 450560]
"lxdoamon"="c:\program files (x86)\Lexmark 9500 Series\lxdoamon.exe" [2007-08-10 20480]
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.searchqu.com/406
uLocal Page = c:\windows\system32\blank.htm
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=en_CA&c=94&bd=Pavilion&pf=cnnb
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\SD\AppData\Roaming\Mozilla\Firefox\Profiles\71yq919k.default\
FF - prefs.js: browser.startup.homepage - google.ca
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files (x86)\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Skype extension for Firefox: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Text-to-Image: {f701c26a-479a-4724-b4f1-870db12f063c} - %profile%\extensions\{f701c26a-479a-4724-b4f1-870db12f063c}
FF - Ext: Conduit Engine : [removed] - %profile%\extensions\[removed]
FF - Ext: Norton IPS: {BBDA0591-3099-440a-AA10-41764D9DB4DB} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\IPSFFPlgn
FF - Ext: Norton Toolbar: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62} - c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.0.0.127\coFFPlgn
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-10 - (no file)
Wow6432Node-HKCU-Run-uTorrent - c:\program files (x86)\uTorrent\uTorrent.exe
AddRemove-AVG PC Tuneup 2011 Patch - c:\program files (x86)\AVG\AVG PC Tuneup 2011\Data\Uninstall.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360]
"ImagePath"="\"c:\program files (x86)\Norton 360\Engine\4.3.0.5\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360\Engine\4.3.0.5\diMaster.dll\" /prefetch:1"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10e.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10e.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exe
c:\windows\System32\spool\drivers\x64\3\WrtProc.exe
c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
.
**************************************************************************
.
Completion time: 2011-06-28 16:23:25 - machine was rebooted
ComboFix-quarantined-files.txt 2011-06-28 20:23
ComboFix2.txt 2011-06-28 01:36
.
Pre-Run: 389,436,895,232 bytes free
Post-Run: 389,231,489,024 bytes free
.
- - End Of File - - E9AE96FA7B8A40D416A75592DB569253

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI