good news, I was able to figure out how to get OTL to run. I had my browser shut off so could not tell you.
Here is the logs from OtL
OTL logfile created on: 6/27/2011 9:29:54 PM - Run 1
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Documents and Settings\anyone\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1014.98 Mb Total Physical Memory | 687.21 Mb Available Physical Memory | 67.71% Memory free
1.64 Gb Paging File | 1.47 Gb Available in Paging File | 89.97% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 8.57 Gb Free Space | 23.01% Space Free | Partition Type: NTFS
Computer Name: MVW-HOME | User Name: anyone | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\anyone\Desktop\iexplore.exe.exe (OldTimer Tools)
PRC - C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\HPZipm12.exe (HP)
========== Modules (SafeList) ==========
MOD - C:\Documents and Settings\anyone\Desktop\iexplore.exe.exe (OldTimer Tools)
MOD - C:\Program Files\AVAST Software\Avast\snxhk.dll (AVAST Software)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (AppMgmt) – File not found
SRV - (BBSvc) – C:\Program Files\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (SeaPort) – C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (avast! Antivirus) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (Lavasoft Ad-Aware Service) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (IS360service) – C:\Program Files\IObit\IObit Security 360\is360srv.exe (IObit)
SRV - (PCPitstop Scheduling) – C:\Program Files\PCPitstop\PCPitstopScheduleService.exe (PC Pitstop LLC)
SRV - (SupportSoft RemoteAssist) – C:\Program Files\Common Files\supportsoft\bin\ssrc.exe (SupportSoft, Inc.)
SRV - (Amazon Download Agent) – C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe (Amazon.com)
SRV - (bgsvcgen) – C:\WINDOWS\System32\bgsvcgen.exe (B.H.A Corporation)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\HPZipm12.exe (HP)
========== Driver Services (SafeList) ==========
DRV - (MBAMSwissArmy) – C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (SmartDefragDriver) – C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys ()
DRV - (aswSnx) – C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) – C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) – C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMon2) – C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswRdr) – C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (Aavmker4) – C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswFsBlk) – C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (supersafer) – C:\WINDOWS\system32\drivers\supersafer.sys (TrueCrypt Foundation)
DRV - (Lbd) – C:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (pavboot) – C:\WINDOWS\system32\drivers\pavboot.sys (Panda Security, S.L.)
DRV - (PSI) – C:\WINDOWS\system32\drivers\psi_mf.sys (Secunia)
DRV - (FETNDISB) – C:\WINDOWS\system32\drivers\dlkfet5b.sys (D-Link )
DRV - (cdrbsdrv) – C:\WINDOWS\System32\drivers\cdrbsdrv.sys (B.H.A Corporation)
DRV - (FTSER2K) – C:\WINDOWS\system32\drivers\ftser2k.sys (FTDI Ltd.)
DRV - (FTDIBUS) – C:\WINDOWS\system32\drivers\ftdibus.sys (FTDI Ltd.)
DRV - (rtl8139) Realtek RTL8139(A/B/C) – C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (mrtRate) – C:\WINDOWS\System32\drivers\MrtRate.sys (Marimba, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 30 7E 48 80 E8 31 CC 01 [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.defaulturl: "
http://www.bing.com/search?FORM=BSRTDF&PC;=BBSR&q;="
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://go.microsoft.com/fwlink/?LinkId=69157"
FF - prefs.js..extensions.enabledItems: {22119944-ED35-4ab1-910B-E619EA06A115}:6.10.1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.2.20100119091315
FF - prefs.js..extensions.enabledItems: [removed]:1.0.0.%(version)s
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: ChoiceGuard@Microsoft:2.0
FF - prefs.js..extensions.enabledItems: [removed]:3.9.1.100005
FF - prefs.js..extensions.enabledItems: [removed]:20110101
FF - prefs.js..keyword.URL: "
http://www.bing.com/search?FORM=BSRTDF&PC;=BBSR&q;="
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 1
FF - HKLM\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files\Siber Systems\AI RoboForm\Firefox [2008/05/29 10:19:31 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2011/02/21 09:53:44 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2011/03/03 11:06:16 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/09/12 07:28:06 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/13 16:37:06 | 000,000,000 | —D | M]
[2009/09/08 21:45:55 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\anyone\Application Data\Mozilla\Extensions
[2009/09/08 21:45:55 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\anyone\Application Data\Mozilla\Extensions\[removed]
[2011/06/27 10:51:11 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\anyone\Application Data\Mozilla\Firefox\Profiles\erw28dko.default\extensions
[2010/05/02 22:40:13 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\anyone\Application Data\Mozilla\Firefox\Profiles\erw28dko.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/01/23 23:03:24 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Documents and Settings\anyone\Application Data\Mozilla\Firefox\Profiles\erw28dko.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/02/21 09:52:59 | 000,000,000 | —D | M] (Microsoft Choice Guard) – C:\Documents and Settings\anyone\Application Data\Mozilla\Firefox\Profiles\erw28dko.default\extensions\ChoiceGuard@Microsoft
[2011/06/25 22:34:40 | 000,000,000 | —D | M] ("Foxit PDF Creator Toolbar") – C:\Documents and Settings\anyone\Application Data\Mozilla\Firefox\Profiles\erw28dko.default\extensions\[removed]
[2010/11/14 14:01:22 | 000,001,832 | —- | M] () – C:\Documents and Settings\anyone\Application Data\Mozilla\Firefox\Profiles\erw28dko.default\searchplugins\bing.xml
[2011/06/27 10:32:09 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/12/24 23:03:06 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/03/19 16:30:26 | 000,000,000 | —D | M] (Move Media Player) – C:\DOCUMENTS AND SETTINGS\ANYONE\APPLICATION DATA\MOVE NETWORKS
[2011/03/03 11:06:16 | 000,000,000 | —D | M] (avast! WebRep) – C:\PROGRAM FILES\AVAST SOFTWARE\AVAST\WEBREP\FF
[2010/12/24 23:03:02 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2008/05/29 10:19:31 | 000,000,000 | —D | M] (AI Roboform Toolbar for Firefox) – C:\PROGRAM FILES\SIBER SYSTEMS\AI ROBOFORM\FIREFOX
[2010/04/16 07:41:54 | 000,466,944 | —- | M] (Invenda Corporation) – C:\Program Files\Mozilla Firefox\plugins\NPcolPM450.dll
[2009/11/19 17:16:28 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npCouponPrinter.dll
[2010/05/13 21:04:07 | 000,411,368 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2009/11/19 17:16:29 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\Mozilla Firefox\plugins\npMozCouponPrinter.dll
O1 HOSTS File: ([2011/06/13 08:51:46 | 000,435,614 | R— | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.123topsearch.com
O1 - Hosts: 127.0.0.1 123topsearch.com
O1 - Hosts: 127.0.0.1 www.132.com
O1 - Hosts: 127.0.0.1 132.com
O1 - Hosts: 127.0.0.1 www.136136.net
O1 - Hosts: 127.0.0.1 136136.net
O1 - Hosts: 127.0.0.1 www.163ns.com
O1 - Hosts: 127.0.0.1 163ns.com
O1 - Hosts: 14994 more lines…
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - No CLSID value found.
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (Advertising Cookie Opt-out) - {8E425EB4-ADBD-4816-B1E8-49BB9DECF034} - C:\Program Files\Google\Advertising Cookie Opt-out\opt_out.dll (Google Inc)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O2 - BHO: (Club Bing Toolbar Helper) - {B771FEA3-2A05-4c21-B1E2-55551A97D520} - C:\Program Files\Club Bing Toolbar Helper\Bmbho.dll (Microsoft Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Club Bing Toolbar) - {719D74AB-1AF9-43A1-8C62-D8750628D93E} - C:\Program Files\Club Bing Toolbar\Toolbar.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (&RoboForm;) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll ()
O3 - HKLM\..\Toolbar: (Club Bing Toolbar Helper) - {B771FEA3-2A05-4c21-B1E2-55551A97D520} - C:\Program Files\Club Bing Toolbar Helper\Bmbho.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-CBFF-F37CB0E7FA7D} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Club Bing Toolbar) - {719D74AB-1AF9-43A1-8C62-D8750628D93E} - C:\Program Files\Club Bing Toolbar\Toolbar.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&RoboForm;) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Club Bing Toolbar Helper) - {B771FEA3-2A05-4C21-B1E2-55551A97D520} - C:\Program Files\Club Bing Toolbar Helper\Bmbho.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Foxit PDF Creator Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O8 - Extra context menu item: Customize Menu - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
O8 - Extra context menu item: Fill Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O8 - Extra context menu item: RoboForm Toolbar - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O8 - Extra context menu item: Save Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O9 - Extra Button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra 'Tools' menuitem : RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {01010200-5E80-11D8-9E86-0007E96C65AE}
https://ra.qwest.com/sdccommon/download/tgctlins.cab (SupportSoft Installer)
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED}
https://ra.qwest.com/sdccommon/download/tgctlcm.cab (Support.com Configuration Class)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94}
http://utilities.pcpitstop.com/Nirvana/con…s/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {3107C2A8-9F0B-4404-A58B-21BD85268FBC}
http://www.pogo.com/cdl/launcher/PogoWebLa…erInstaller.CAB (PogoWebLauncher Control)
O16 - DPF: {49232000-16E4-426C-A231-62846947304B}
http://ipgweb.cce.hp.com/rdqcpqdktp/downloads/sysinfo.cab (SysData Class)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
http://www.update.microsoft.com/windowsupd…b?1206314855781 (WUWebControl Class)
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://update.microsoft.com/microsoftupdat…b?1219361103748 (MUWebControl Class)
O16 - DPF: {6F750203-1362-4815-A476-88533DE61D0C}
http://www.kodakgallery.com/downloads/BUM/…_2/axofupld.cab (Kodak Gallery Easy Upload Manager Class)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203}
http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (GMNRev Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5}
http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913}
http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab (ActiveScan 2.0 Installer Class)
O16 - DPF: {94E5218F-9737-4FC2-8457-567B1FF23DC0}
http://utilities.pcpitstop.com/Nirvana/con…DiskMD3Ctrl.dll (diskhealth Class)
O16 - DPF: {A553720A-BFED-4EA4-A71F-7EFCA690A1F7}
http://utilities.pcpitstop.com/Nirvana/con…opAntiVirus.dll (PCPitstop AntiVirus)
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD}
http://www.superadblocker.com/activex/sabspx.cab (SABScanProcesses Class)
O16 - DPF: {BAC761D3-DFFD-4DB4-A01D-173346E090A7}
http://pogo.oberon-media.com/online2/pogo/…eb.1.0.0.10.cab (CPlayFirstzenerchiControl Object)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
https://fpdownload.macromedia.com/get/shock…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {F46BD8B1-DE4C-4A4F-B6F6-8FB68D25342D}
http://games.bigfishgames.com/en_mahjong-r…eb.1.0.0.17.cab (CPlayFirstMahjongRoaControl Object)
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7}
http://utilities.pcpitstop.com/Nirvana/con…/pcpitstop2.dll (PCPitstop Exam)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\anyone\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\anyone\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/03/22 23:45:55 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (SmartDefragBootTime.exe) - C:\WINDOWS\System32\SmartDefragBootTime.exe ()
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O35 - HKCU\..exefile [open] – "C:\DOCUME~1\anyone\LOCALS~1\Temp\R66v.exe" -a "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKCU\…exe [@ = exefile] – "C:\DOCUME~1\anyone\LOCALS~1\Temp\R66v.exe" -a "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (56027131116781568)
========== Files/Folders - Created Within 30 Days ==========
[2011/06/27 20:45:12 | 000,579,072 | —- | C] (OldTimer Tools) – C:\Documents and Settings\anyone\Desktop\iexplore.exe.exe
[2011/06/27 10:46:58 | 000,000,000 | —D | C] – C:\Documents and Settings\anyone\Start Menu\Programs\HiJackThis
[2011/06/06 14:53:05 | 000,000,000 | —D | C] – C:\Program Files\Jar of Marbles
[2011/06/06 14:53:05 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Jar of Marbles
[2011/06/06 14:51:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Big Fish Games
========== Files - Modified Within 30 Days ==========
[2011/06/27 20:45:12 | 000,579,072 | —- | M] (OldTimer Tools) – C:\Documents and Settings\anyone\Desktop\iexplore.exe.exe
[2011/06/27 20:42:33 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/06/27 15:15:19 | 000,014,690 | —- | M] () – C:\Documents and Settings\anyone\Desktop\CATMOUSE.JPG
[2011/06/27 14:16:59 | 000,001,253 | —- | M] () – C:\Documents and Settings\anyone\Desktop\notepad.exe
[2011/06/27 11:08:04 | 000,002,449 | —- | M] () – C:\Documents and Settings\anyone\Desktop\HiJackThis.lnk
[2011/06/27 07:05:09 | 000,012,598 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/06/27 07:01:41 | 000,007,914 | -HS- | M] () – C:\Documents and Settings\anyone\Local Settings\Application Data\20p3ovnf4xr7113t28jw2ia45ds3kj676tg48011yyx
[2011/06/27 07:01:41 | 000,007,914 | -HS- | M] () – C:\Documents and Settings\All Users\Application Data\20p3ovnf4xr7113t28jw2ia45ds3kj676tg48011yyx
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\All Users\Application Data\yib.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\All Users\Application Data\yfx.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\All Users\Application Data\xua.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\anyone\Local Settings\Application Data\plt.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\All Users\Application Data\mqj.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\anyone\Local Settings\Application Data\kbp.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\All Users\Application Data\jte.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\anyone\Local Settings\Application Data\hxw.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | M] () – C:\Documents and Settings\anyone\Local Settings\Application Data\edr.exe
[2011/06/26 18:43:34 | 000,000,211 | —- | M] () – C:\Documents and Settings\anyone\Desktop\caringbridge.url
[2011/06/25 21:55:12 | 000,000,244 | —- | M] () – C:\Documents and Settings\anyone\Desktop\Free Crochet Pattern.url
[2011/06/23 16:49:51 | 000,000,069 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/06/15 20:15:41 | 000,503,240 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/06/15 20:15:41 | 000,087,580 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/06/15 20:04:46 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/06/15 07:16:12 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/06/13 20:15:39 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011/06/13 08:51:46 | 000,435,614 | R— | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2011/06/08 22:37:00 | 002,475,015 | —- | M] () – C:\Documents and Settings\anyone\Desktop\trashbag purse paswword is my name.pdf
[2011/06/08 15:47:59 | 000,000,151 | —- | M] () – C:\WINDOWS\PhotoSnapViewer.INI
[2011/06/06 14:53:33 | 000,001,620 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Play Jar of Marbles.lnk
[2011/06/06 14:53:33 | 000,001,194 | —- | M] () – C:\Documents and Settings\All Users\Desktop\More Great Games.lnk
[2011/06/06 14:51:12 | 000,001,417 | —- | M] () – C:\Documents and Settings\anyone\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Manager.lnk
[2011/06/06 14:51:12 | 000,001,399 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Game Manager.lnk
[2011/06/03 02:27:54 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc21bfc0f5a158.job
[2011/06/02 07:16:04 | 000,000,232 | —- | M] () – C:\Documents and Settings\anyone\Desktop\tangledhappy.url
[2011/06/02 07:15:14 | 000,000,228 | —- | M] () – C:\Documents and Settings\anyone\Desktop\popcorn purse.url
[2011/05/30 17:19:48 | 005,964,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2011/05/29 13:11:53 | 000,912,655 | —- | M] () – C:\Documents and Settings\anyone\Desktop\Red BowDaciousDrawstringHandbag.pdf
[2011/05/29 09:11:30 | 000,039,984 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/05/29 09:11:20 | 000,022,712 | —- | M] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
========== Files Created - No Company Name ==========
[2011/06/27 15:15:18 | 000,014,690 | —- | C] () – C:\Documents and Settings\anyone\Desktop\CATMOUSE.JPG
[2011/06/27 14:16:59 | 000,001,253 | —- | C] () – C:\Documents and Settings\anyone\Desktop\notepad.exe
[2011/06/27 10:46:58 | 000,002,449 | —- | C] () – C:\Documents and Settings\anyone\Desktop\HiJackThis.lnk
[2011/06/27 07:00:21 | 000,007,914 | -HS- | C] () – C:\Documents and Settings\anyone\Local Settings\Application Data\20p3ovnf4xr7113t28jw2ia45ds3kj676tg48011yyx
[2011/06/27 07:00:21 | 000,007,914 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\20p3ovnf4xr7113t28jw2ia45ds3kj676tg48011yyx
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\All Users\Application Data\yib.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\All Users\Application Data\yfx.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\All Users\Application Data\xua.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\anyone\Local Settings\Application Data\plt.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\All Users\Application Data\mqj.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\anyone\Local Settings\Application Data\kbp.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\All Users\Application Data\jte.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\anyone\Local Settings\Application Data\hxw.exe
[2011/06/27 07:00:21 | 000,000,000 | —- | C] () – C:\Documents and Settings\anyone\Local Settings\Application Data\edr.exe
[2011/06/25 20:20:38 | 000,000,211 | —- | C] () – C:\Documents and Settings\anyone\Desktop\caringbridge.url
[2011/06/08 22:36:58 | 002,475,015 | —- | C] () – C:\Documents and Settings\anyone\Desktop\trashbag purse paswword is my name.pdf
[2011/06/06 14:53:33 | 000,001,620 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Play Jar of Marbles.lnk
[2011/06/06 14:53:33 | 000,001,194 | —- | C] () – C:\Documents and Settings\All Users\Desktop\More Great Games.lnk
[2011/06/06 14:51:28 | 000,001,584 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Game Manager.lnk
[2011/06/06 14:51:27 | 000,001,184 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\More Great Games.lnk
[2011/06/06 14:51:12 | 000,001,417 | —- | C] () – C:\Documents and Settings\anyone\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Manager.lnk
[2011/06/06 14:51:12 | 000,001,399 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Game Manager.lnk
[2011/06/03 02:27:54 | 000,000,882 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc21bfc0f5a158.job
[2011/05/29 11:10:34 | 000,912,655 | —- | C] () – C:\Documents and Settings\anyone\Desktop\Red BowDaciousDrawstringHandbag.pdf
[2011/03/04 10:22:13 | 000,029,520 | —- | C] () – C:\WINDOWS\System32\SmartDefragBootTime.exe
[2011/03/04 10:22:13 | 000,013,496 | —- | C] () – C:\WINDOWS\System32\drivers\SmartDefragDriver.sys
[2010/09/12 19:33:10 | 000,000,000 | —- | C] () – C:\Documents and Settings\anyone\Application Data\SuperSafer.cfg
[2010/09/12 19:33:09 | 002,771,968 | —- | C] () – C:\WINDOWS\System32\wxmsw28u_core_vc_custom.dll
[2010/09/12 19:33:09 | 001,163,776 | —- | C] () – C:\WINDOWS\System32\wxbase28u_vc_custom.dll
[2010/09/12 19:33:09 | 000,681,472 | —- | C] () – C:\WINDOWS\System32\wxmsw28u_adv_vc_custom.dll
[2010/09/12 19:33:09 | 000,492,032 | —- | C] () – C:\WINDOWS\System32\wxmsw28u_xrc_vc_custom.dll
[2010/09/12 19:33:09 | 000,470,528 | —- | C] () – C:\WINDOWS\System32\wxmsw28u_html_vc_custom.dll
[2010/09/12 19:33:09 | 000,119,808 | —- | C] () – C:\WINDOWS\System32\wxbase28u_net_vc_custom.dll
[2010/09/12 19:33:09 | 000,118,784 | —- | C] () – C:\WINDOWS\System32\wxbase28u_xml_vc_custom.dll
[2010/07/29 10:38:17 | 000,000,221 | —- | C] () – C:\WINDOWS\NCLogConfig.ini
[2010/07/24 18:07:32 | 000,015,880 | —- | C] () – C:\WINDOWS\System32\lsdelete.exe
[2010/07/23 08:03:05 | 000,767,952 | —- | C] () – C:\WINDOWS\BDTSupport.dll.old
[2010/07/19 12:41:01 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2010/01/06 00:35:49 | 000,085,504 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2010/01/05 22:57:05 | 001,152,128 | —- | C] () – C:\Documents and Settings\All Users\Application Data\HDForm.evl
[2009/06/28 18:38:28 | 000,000,064 | —- | C] () – C:\WINDOWS\GPlrLanc.dat
[2009/04/15 19:33:31 | 000,004,096 | —- | C] () – C:\WINDOWS\d3dx.dat
[2009/04/15 19:29:08 | 000,000,010 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2009/04/05 17:29:22 | 000,000,151 | —- | C] () – C:\WINDOWS\PhotoSnapViewer.INI
[2009/03/21 17:52:25 | 000,000,000 | —- | C] () – C:\WINDOWS\QFN.ini
[2009/03/21 17:52:25 | 000,000,000 | —- | C] () – C:\WINDOWS\QDQICK.ini
[2009/03/20 19:58:39 | 000,000,043 | —- | C] () – C:\WINDOWS\INTUIT.INI
[2009/03/08 10:54:42 | 000,000,025 | —- | C] () – C:\Documents and Settings\anyone\Application Data\tcw_config.cfg
[2009/02/22 16:02:50 | 000,000,185 | —- | C] () – C:\WINDOWS\intuprof.ini
[2009/02/22 16:02:47 | 000,007,406 | —- | C] () – C:\WINDOWS\ICOADB32.DAT
[2009/02/22 16:02:47 | 000,000,875 | —- | C] () – C:\WINDOWS\QUICKEN.INI
[2009/01/15 20:00:53 | 000,000,069 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2008/12/08 09:24:42 | 000,009,728 | —- | C] () – C:\Documents and Settings\anyone\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/08/03 06:30:43 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2008/06/26 17:57:57 | 000,000,000 | —- | C] () – C:\WINDOWS\hpqEmlSz.INI
[2008/05/27 19:27:56 | 000,000,129 | —- | C] () – C:\Documents and Settings\anyone\Local Settings\Application Data\fusioncache.dat
[2008/05/27 16:19:27 | 000,000,110 | —- | C] () – C:\WINDOWS\System32\ftdiun2k.ini
[2008/05/27 16:19:26 | 000,086,082 | —- | C] () – C:\WINDOWS\System32\ftdiunin.exe
[2008/05/27 14:44:23 | 000,112,446 | —- | C] () – C:\WINDOWS\hpoins07.dat
[2008/05/27 14:44:23 | 000,021,124 | —- | C] () – C:\WINDOWS\hpomdl07.dat
[2008/05/26 21:59:42 | 000,018,904 | —- | C] () – C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | —- | C] () – C:\WINDOWS\System32\structuredqueryschema.bin
[2008/03/22 23:48:17 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2008/03/22 23:43:21 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2008/03/22 16:26:10 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2008/03/22 16:24:54 | 000,122,928 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2007/09/27 10:51:02 | 000,020,698 | —- | C] () – C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | —- | C] () – C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | —- | C] () – C:\WINDOWS\System32\gthrctr.ini
[2006/02/28 07:00:00 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2006/02/28 07:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2006/02/28 07:00:00 | 000,503,240 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2006/02/28 07:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2006/02/28 07:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2006/02/28 07:00:00 | 000,087,580 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2006/02/28 07:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2006/02/28 07:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2006/02/28 07:00:00 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2006/02/28 07:00:00 | 000,004,461 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2006/02/28 07:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2006/02/28 07:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2004/09/17 18:37:42 | 000,069,632 | —- | C] () – C:\WINDOWS\System32\vuins32.dll
[2001/07/06 15:30:00 | 000,003,399 | —- | C] () – C:\WINDOWS\System32\hptcpmon.ini
========== LOP Check ==========
[2009/06/27 14:13:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\55-6o-66-65-p3-7p
[2010/12/16 21:05:15 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Alwil Software
[2009/02/09 08:19:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Amazon
[2011/03/03 11:06:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVAST Software
[2010/12/14 22:51:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\avg9
[2011/06/06 14:51:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Big Fish Games
[2010/09/04 22:30:20 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Canneverbe Limited
[2010/10/18 20:15:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FarmFrenzy-PizzaParty
[2009/05/01 14:34:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FireGlow
[2009/06/28 18:38:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Free Ride Games
[2010/07/17 18:13:37 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FreshGames
[2009/01/28 16:06:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Friday's games
[2009/04/06 19:38:23 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Fugazo
[2009/06/17 21:18:41 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GameHouse
[2009/06/15 21:05:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Gogii
[2011/03/04 10:24:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IObit
[2011/04/24 21:17:59 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\iProlog
[2009/01/15 19:23:10 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LightScribe
[2009/04/16 19:04:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MumboJumbo
[2010/01/05 22:33:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Panasonic
[2010/03/18 08:27:04 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PCPitstop
[2009/04/11 07:25:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PoBros
[2008/12/25 18:42:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2008/05/27 18:19:16 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RoboForm
[2010/12/05 16:48:57 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Sandlot Games
[2009/02/13 18:33:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Slapdash Games
[2009/02/14 21:02:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpecialBit
[2010/09/12 19:33:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Spotmau
[2010/03/19 22:29:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Startup Manager
[2010/03/12 18:22:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SugarGames
[2011/04/27 21:14:10 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\System
[2011/06/06 15:31:13 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2010/09/26 12:34:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TERMINAL Studio
[2009/04/07 11:15:27 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2009/01/14 23:04:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
[2010/01/06 10:25:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/07/03 20:38:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2010/07/24 10:39:55 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{BD986C1B-72EC-4B82-B47B-6CAC4E6F494E}
[2008/11/12 11:51:52 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Amazon
[2011/03/26 12:00:21 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Bidgood Svcs
[2010/09/04 22:30:21 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Canneverbe Limited
[2010/02/17 10:33:28 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Ceedo
[2010/04/16 07:41:54 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\E-centives
[2009/01/07 12:29:08 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Fabulous Finds
[2011/02/25 08:22:39 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Foxit Software
[2010/09/24 03:12:44 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\FreeBurner
[2010/08/25 21:57:37 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\FreeFileViewer
[2009/05/05 08:05:10 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\GameHouse
[2010/09/12 20:23:37 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\ImgBurn
[2011/03/04 10:22:43 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\IObit
[2011/04/24 21:13:13 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\iProlog
[2009/04/05 01:46:42 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Jetsetter
[2009/12/21 08:03:18 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\LimeWire
[2008/10/08 17:13:41 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\MailWasher
[2011/04/13 16:55:52 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\MailWasherFree
[2009/02/22 16:01:44 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\MechCAD
[2010/07/12 13:38:22 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\mjusbsp
[2009/03/04 12:57:17 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\OpenOffice.org
[2008/11/20 09:47:06 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Opera
[2010/01/05 22:34:07 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Panasonic
[2009/05/09 22:52:58 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\PlayFirst
[2009/03/08 09:16:57 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Playrix Entertainment
[2009/04/11 07:25:50 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\PoBros
[2010/09/13 18:09:27 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\spotmau
[2009/04/15 19:39:30 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Sudden Games
[2009/02/09 08:40:32 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\TheScruffs
[2010/07/31 08:02:46 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Trio
[2010/12/16 23:15:19 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Wildfire
[2008/08/21 18:36:46 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Windows Desktop Search
[2008/08/21 21:23:40 | 000,000,000 | —D | M] – C:\Documents and Settings\anyone\Application Data\Windows Search
[2011/04/01 19:53:32 | 000,000,282 | -H– | M] () – C:\WINDOWS\Tasks\613189f7.job
[2011/03/19 16:37:08 | 000,000,472 | —- | M] () – C:\WINDOWS\Tasks\Ad-Aware Update (Weekly).job
[2011/04/02 06:58:58 | 000,032,572 | —- | M] () – C:\WINDOWS\Tasks\SCHEDLGU.TXT
[2011/04/02 00:01:00 | 000,000,236 | —- | M] () – C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
[2011/04/01 13:25:37 | 000,000,424 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{A405D0A9-9741-43E2-B387-1F5C25CD48D6}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2011/03/04 08:16:11 | 000,020,742 | —- | M] () – C:\aaw7boot.log
[2008/03/22 23:45:55 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/04/01 20:11:11 | 000,000,281 | RHS- | M] () – C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | —- | M] () – C:\cmldr
[2008/03/22 23:45:55 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010/05/13 10:45:02 | 000,003,136 | —- | M] () – C:\DeQuarantine.txt
[2008/03/22 23:45:55 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2008/08/08 07:41:52 | 000,007,953 | —- | M] () – C:\JavaRa.log
[2010/03/18 19:43:41 | 000,121,898 | —- | M] () – C:\MGlogs.zip
[2008/03/22 23:45:55 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2006/02/28 07:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/07/20 10:39:23 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/06/27 20:42:26 | 792,723,456 | -HS- | M] () – C:\pagefile.sys
[2009/09/05 09:39:50 | 000,007,073 | —- | M] () – C:\playground.log
[2010/03/18 19:29:15 | 000,002,546 | —- | M] () – C:\RootRepeal report 03-18-10 (19-22-08).txt
[2009/05/05 08:06:51 | 000,000,088 | —- | M] () – C:\RUBEAREA.SAV
[2009/03/29 08:26:08 | 000,000,290 | —- | M] () – C:\Win32.Worm.Downladup.Gen.log
< %systemroot%\Fonts\*.com >
< %systemroot%\Fonts\*.dll >
[2005/05/11 23:36:48 | 000,012,288 | —- | M] (Hewlett-Packard Co.) – C:\WINDOWS\Fonts\RandFont.dll
< %systemroot%\Fonts\*.ini >
[2008/03/22 23:45:23 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 07:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/07/06 05:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[2011/02/23 10:04:21 | 000,040,648 | —- | M] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2010/04/17 01:04:40 | 000,306,032 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WLXPGSS.SCR
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2008/03/22 16:24:06 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\config\default.sav
[2008/03/22 16:24:06 | 000,634,880 | —- | M] () – C:\WINDOWS\system32\config\software.sav
[2008/03/22 16:24:06 | 000,880,640 | —- | M] () – C:\WINDOWS\system32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lîk /x >
[2008/07/20 10:46:18 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
[2008/05/27 14:52:40 | 000,000,984 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\HP Solution Center.lnk
[2008/05/27 18:03:49 | 000,001,566 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Microsoft Update.lnk
[2009/01/07 10:56:41 | 000,001,563 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Set Program Access and Defaults.lnk
[2008/03/22 23:46:01 | 000,000,398 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Windows Catalog.lnk
[2008/10/09 06:59:47 | 000,001,507 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Windows Update.lnk
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Mikzosoft\Internet Explorer\Quick Launch\*.lnk /x >
< %USERPROFILE%\Deskuop\*.exe >
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-06-16 01:16:19
< %Temp%\smtmp\*.* /s >
< MD5 for: EXPLORER.EXE >
[2008/04/13 19:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 – C:\WINDOWS\ERDNT\cache\explorer.exe
[2008/04/13 19:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 – C:\WINDOWS\explorer.exe
[2008/04/13 19:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 – C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2008/04/13 19:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 – C:\WINDOWS\system32\dllcache\explorer.exe
[2007/06/13 06:26:03 | 001,033,216 | —- | M] (Microsoft Corporation) MD5=7712DF0CDDE3A5AC89843E61CD5B3658 – C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2007/06/13 05:23:07 | 001,033,216 | —- | M] (Microsoft Corporation) MD5=97BD6515465659FF8F3B7BE375B2EA87 – C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: EXPLORER.SCF >
[2006/02/28 07:00:00 | 000,000,080 | —- | M] () MD5=A3975A7D2C98B30A2AE010754FFB9392 – C:\WINDOWS\explorer.scf
< MD5 for: IEXPLORE.CHM >
[2009/02/21 01:21:24 | 000,529,818 | —- | M] () MD5=1435F4731719DF5F57D17DC38196245D – C:\WINDOWS\Help\iexplore.chm
[2006/02/28 07:00:00 | 000,204,810 | —- | M] () MD5=60858526AAD1CC55F5F0055B8E3B66FE – C:\WINDOWS\ie7\iexplore.chm
[2006/09/01 09:43:50 | 000,503,758 | —- | M] () MD5=652E46500C149D1DC948BF9CEA8C4933 – C:\WINDOWS\ie8\iexplore.chm
< MD5 for: IEXPLORE.EXE >
[2009/06/29 02:25:31 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=02E2754D3E566C11A4934825920C47DD – C:\WINDOWS\$hf_mig$\KB972260-IE7\SP3QFE\iexplore.exe
[2008/12/19 00:25:25 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=030D78FE84A086ED376EFCBD2D72C522 – C:\WINDOWS\ie7updates\KB972260-IE7\iexplore.exe
[2008/10/15 01:34:58 | 000,633,632 | —- | M] (Microsoft Corporation) MD5=056C927CF7207857E8B34F7A8FFD9B9E – C:\WINDOWS\$hf_mig$\KB958215-IE7\SP2QFE\iexplore.exe
[2008/12/19 00:25:30 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=15E8A89499741D5CF59A9CF6463A4339 – C:\WINDOWS\$hf_mig$\KB961260-IE7\SP2QFE\iexplore.exe
[2008/04/22 03:02:46 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=197B7E4030CFBD8D2979D375E1787AA2 – C:\WINDOWS\$hf_mig$\KB950759-IE7\SP2QFE\iexplore.exe
[2008/08/23 00:56:15 | 000,635,848 | —- | M] (Microsoft Corporation) MD5=1F03216084447F990AE797317D0A6E70 – C:\WINDOWS\ie7updates\KB958215-IE7\iexplore.exe
[2008/04/22 02:40:18 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=232B22817B90AE0AFF2D189E3E3735AC – C:\WINDOWS\ie7updates\KB953838-IE7\iexplore.exe
[2007/12/06 06:01:25 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=2703D940A62B731AA220529DD7331A78 – C:\WINDOWS\ie7updates\KB947864-IE7\iexplore.exe
[2007/12/06 06:01:25 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=2703D940A62B731AA220529DD7331A78 – C:\WINDOWS\SoftwareDistribution.old\Download.old\e5a204b08ee9dd0f7a20547e61486b27\SP2GDR\iexplore.exe
[2008/02/29 03:55:46 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=2D0E5592AB5A46C27DAF7CCAFF4F5B59 – C:\WINDOWS\ie7updates\KB950759-IE7\iexplore.exe
[2009/06/29 03:35:10 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=3CFC56F73D494FC1AA2B6E981DF15ACD – C:\WINDOWS\ie8\iexplore.exe
[2008/04/13 19:12:22 | 000,093,184 | —- | M] (Microsoft Corporation) MD5=55794B97A7FAABD2910873C85274F409 – C:\WINDOWS\ServicePackFiles\i386\iexplore.exe
[2007/10/10 03:16:56 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=632BDE0179847234433CA50945442ACB – C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\iexplore.exe
[2007/10/10 03:16:56 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=632BDE0179847234433CA50945442ACB – C:\WINDOWS\SoftwareDistribution.old\Download.old\e3709fbfd9557a7d083f543d51d38612\SP2QFE\iexplore.exe
[2008/06/23 04:20:52 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=64E376A47763DAEABCDA14BD5B6EA286 – C:\WINDOWS\ie7updates\KB956390-IE7\iexplore.exe
[2008/02/22 04:40:22 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=6E0888626E0CAC79F57149814E22DB4D – C:\WINDOWS\$hf_mig$\KB947864-IE7\SP2QFE\iexplore.exe
[2007/12/06 03:34:45 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=809D17D8FA0FDAEE07778CD821CAFFDE – C:\WINDOWS\$hf_mig$\KB944533-IE7\SP2QFE\iexplore.exe
[2007/12/06 03:34:45 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=809D17D8FA0FDAEE07778CD821CAFFDE – C:\WINDOWS\SoftwareDistribution.old\Download.old\e5a204b08ee9dd0f7a20547e61486b27\SP2QFE\iexplore.exe
[2008/10/15 02:06:26 | 000,633,632 | —- | M] (Microsoft Corporation) MD5=9D3DB9ADFABD2F0BC778EC03250A3ABB – C:\WINDOWS\ie7updates\KB961260-IE7\iexplore.exe
[2009/03/08 14:09:26 | 000,638,816 | —- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E – C:\Program Files\Internet Explorer\iexplore.exe
[2009/03/08 14:09:26 | 000,638,816 | —- | M] (Microsoft Corporation) MD5=B60DDDD2D63CE41CB8C487FCFBB6419E – C:\WINDOWS\system32\dllcache\iexplore.exe
[2008/06/23 03:23:52 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=C52A9EF571E91535EB78DB4B8B95EA07 – C:\WINDOWS\$hf_mig$\KB953838-IE7\SP2QFE\iexplore.exe
[2007/08/13 19:43:56 | 000,622,080 | —- | M] (Microsoft Corporation) MD5=DE49B348A18369B4626FBA1D49B07FB4 – C:\WINDOWS\ie7updates\KB942615-IE7\iexplore.exe
[2006/02/28 07:00:00 | 000,093,184 | —- | M] (Microsoft Corporation) MD5=E7484514C0464642BE7B4DC2689354C8 – C:\WINDOWS\ie7\iexplore.exe
[2008/08/23 00:56:16 | 000,635,848 | —- | M] (Microsoft Corporation) MD5=E8305C30D35E85D6657ED3E9934CB302 – C:\WINDOWS\$hf_mig$\KB956390-IE7\SP2QFE\iexplore.exe
[2007/10/10 05:59:52 | 000,625,152 | —- | M] (Microsoft Corporation) MD5=E854D02E4231F704D9BE782A424E6D8B – C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe
[2007/10/10 05:59:52 | 000,625,152 | —- | M] (Microsoft Corporation) MD5=E854D02E4231F704D9BE782A424E6D8B – C:\WINDOWS\SoftwareDistribution.old\Download.old\e3709fbfd9557a7d083f543d51d38612\SP2GDR\iexplore.exe
< MD5 for: IEXPLORE.EXE.000 >
[2007/10/10 05:59:52 | 000,625,152 | —- | M] (Microsoft Corporation) MD5=E854D02E4231F704D9BE782A424E6D8B – C:\WINDOWS\ie7updates\KB944533-IE7\iexplore.exe.000
< MD5 for: IEXPLORE.EXE.EXE >
[2011/06/27 20:45:12 | 000,579,072 | —- | M] (OldTimer Tools) MD5=352C7A6245B638C8CB3D11371CE01267 – C:\Documents and Settings\anyone\Desktop\iexplore.exe.exe
[2011/06/27 20:46:58 | 000,579,072 | —- | M] (OldTimer Tools) MD5=352C7A6245B638C8CB3D11371CE01267 – C:\Documents and Settings\anyone\Local Settings\Application Data\Opera\Opera\temporary_downloads\iexplore.exe.exe
< MD5 for: IEXPLORE.EXE.EXP.LOG >
[2009/12/12 08:31:59 | 000,000,652 | —- | M] () MD5=3566C3F5364C27903FE906AACE48B73D – C:\Program Files\Internet Explorer\IEXPLORE.EXE.exp.log
< MD5 for: IEXPLORE.EXE.MUI >
[2009/03/08 14:21:44 | 000,012,288 | —- | M] (Microsoft Corporation) MD5=943030B55FDB56FB8B8FCC086071E119 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2009/03/08 14:21:44 | 000,012,288 | —- | M] (Microsoft Corporation) MD5=943030B55FDB56FB8B8FCC086071E119 – C:\Program Files\Internet Explorer\iexplore.exe.mui
[2007/08/13 19:43:36 | 000,573,440 | —- | M] (Microsoft Corporation) MD5=B58D8A1C7EE0E922EC7D2616DA136FC3 – C:\WINDOWS\ie8\iexplore.exe.mui
< MD5 for: IEXPLORE.EXE-27122324.PF >
[2011/04/02 06:54:42 | 000,070,298 | —- | M] () MD5=971494D10DE8DD165C772C20DC82930A – C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf
< MD5 for: IEXPLORE.HLP >
[2006/02/28 07:00:00 | 000,180,335 | —- | M] () MD5=3F19AF1B745140DAFAC6F78F561A3C62 – C:\WINDOWS\Help\iexplore.hlp
< MD5 for: WINLOGON.EXE >
[2006/02/28 07:00:00 | 000,502,272 | —- | M] (Microsoft Corporation) MD5=01C3346C241652F43AED8E2149881BFE – C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008/04/13 19:12:39 | 000,507,904 | —- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E – C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008/04/13 19:12:39 | 000,507,904 | —- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E – C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008/04/13 19:12:39 | 000,507,904 | —- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E – C:\WINDOWS\system32\dllcache\winlogon.exe
[2008/04/13 19:12:39 | 000,507,904 | —- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E – C:\WINDOWS\system32\winlogon.exe
========== Alternate Data Streams ==========
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:17639624
@Alternate Data Stream - 232 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:8FBE6CA7
@Alternate Data Stream - 194 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:4673E9EA
@Alternate Data Stream - 192 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:6F1F66C0
@Alternate Data Stream - 190 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:260575F1
@Alternate Data Stream - 189 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:639F0420
@Alternate Data Stream - 143 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 133 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:571CCF8E
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:5C321E34
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0656FCD2
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:C213B3C4
@Alternate Data Stream - 115 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:2EA99C48
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 105 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:430C6D84
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:ADF211B1
< End of report >
and here is the extra files
OTL Extras logfile created on: 6/27/2011 9:29:54 PM - Run 1
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Documents and Settings\anyone\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1014.98 Mb Total Physical Memory | 687.21 Mb Available Physical Memory | 67.71% Memory free
1.64 Gb Paging File | 1.47 Gb Available in Paging File | 89.97% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37.26 Gb Total Space | 8.57 Gb Free Space | 23.01% Space Free | Partition Type: NTFS
Computer Name: MVW-HOME | User Name: anyone | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.exe [@ = exefile] – "C:\DOCUME~1\anyone\LOCALS~1\Temp\R66v.exe" -a "%1" %*
.html [@ = htmlfile] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 1
"UacDisableNotify" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"5985:TCP" = 5985:TCP:*:Disabled:Windows Remote Management
"80:TCP" = 80:TCP:*:Disabled:Windows Remote Management - Compatibility Mode (HTTP-In)
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" = C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe – (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe – (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe – ()
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe – ( )
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe – (Hewlett-Packard Co.)
"C:\Program Files\7-Zip\7zFM.exe" = C:\Program Files\7-Zip\7zFM.exe:*:Enabled:7-Zip File Manager – (Igor Pavlov)
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe" = C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home – (Nero AG)
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe" = C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup – (Nero AG)
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser – (Opera Software)
"C:\Documents and Settings\anyone\Application Data\mjusbsp\magicJack.exe" = C:\Documents and Settings\anyone\Application Data\mjusbsp\magicJack.exe:*:Enabled:magicJack – (magicJack L.P.)
"C:\Program Files\SUPERAntiSpyware\RUNSAS.EXE" = C:\Program Files\SUPERAntiSpyware\RUNSAS.EXE:*:Enabled:SUPERAntiSpyware Alternate Start – ()
"C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE" = C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE:*:Enabled:SUPERAntiSpyware Free Edition – (SUPERAntiSpyware.com)
"C:\Documents and Settings\All Users\Start Menu\Programs\Whistle.exe" = C:\Documents and Settings\All Users\Start Menu\Programs\Whistle.exe:*:Enabled:Whistle – (Vail Systems, Inc.)
"C:\Documents and Settings\anyone\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe" = C:\Documents and Settings\anyone\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\octoshape\octoshape.exe:*:Enabled:Octoshape add-in for Adobe Flash Player
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{03B1B42B-F6DE-41d9-8CFF-DC44E895C7A7}" = PhotoGallery
"{0590062B-1E79-4717-B1AC-45B6DCA43B36}" = GEAR driver installer for x86 and x64
"{0611BD4E-4FE4-4a62-B0C0-18A4CC463428}" = CP_Package_Variety1
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{09984AEC-6B9F-4ca7-B78D-CB44D4771DA3}" = Destinations
"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan
"{0F3B5F1A-484D-4A8A-BD20-BAE7B08B88C4}" = Whistle
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{15EE79F4-4ED1-4267-9B0F-351009325D7D}" = HP Software Update
"{172975EB-9465-4861-95B5-C7BB6D3DE62A}" = DocumentViewer
"{193DB24F-9A66-4896-8404-22D53EA89075}" = 1400_Help
"{1C139D7D-9FEA-468d-A9C8-2A6E3BDE564A}" = CP_Package_Variety3
"{1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}" = Microsoft Default Manager
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{21199F32-B676-4FE2-A443-EF7DB6B8FD4F}" = Opera 10.10
"{21DB3D90-D816-4092-A260-CA3F6B55A6DD}" = Sonic_PrimoSDK
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{23A7B376-BBEC-4e76-BBD7-0F155E70D74B}" = CP_Panorama1Config
"{266959FA-0AEE-41D0-A88E-F1EAC10A7C14}" = 1400
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 20
"{2CADCEAB-D5DA-44D6-B5FC-7DEE87AB3C0C}" = Unload
"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{32BDCCB8-9DC8-496d-9DB1-F77510775BDB}" = InstantShareDevices
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36E47DA1-10E1-45d9-8B19-14D19607CDCF}" = CP_CalendarTemplates1
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{4415B0E6-B266-49C3-B501-FFEF76C3D71B}" = Google Advertising Cookie Opt-out
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D777040-B426-44F8-8AA5-4EA26C38ECAE}" = Club Bing Toolbar Helper
"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder
"{54E3707F-808E-4fd4-95C9-15D1AB077E5D}" = NewCopy
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{56EE8B17-8274-418d-89AC-C057C5DB251E}" = RandMap
"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg
"{59046D29-2E6B-4224-BF0D-64F3E7A93F7B}" = LightScribe System Software [removed]
"{5A01C58E-B0EC-49b9-AD71-7C0468688087}" = CP_Package_Basic1
"{5B622B7A-60FB-4630-B11D-F121D20BCCD6}" = MarketResearch
"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B
"{5F26311C-B135-4F7F-B11E-8E650F83651E}" = DeviceFunctionQFolder
"{61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17}" = Bing Rewards Client Installer
"{6206FD57-3E60-4A52-AD1B-7D9F7BA2777E}" = Multimedia Keyboard Only
"{63AB8FDC-BBAC-4FA0-B275-B84B5213EBEA}" = Little Shop - Big City
"{66BA8C26-AFE4-4408-807B-43E76B57EF53}" = SkinsHP1
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6B32ADF6-7C6D-4146-9163-15FAD6ABBA8C}" = Yard Sale Hidden Treasures - Sunnyville
"{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724}" = DocProc
"{6DBC7380-4A86-4A91-AA03-000901473F46}" = Inkgard
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F8A71E-3515-4832-B8B2-2F1EDBD2E0F1}" = Bing Bar
"{7850A6D2-CBEA-4728-9877-F1BEDEA9F619}" = AiOSoftware
"{7C03270C-4FAB-4F5C-B10D-52FEDA190790}" = DocumentViewerQFolder
"{7C9B95B7-B598-4398-B30F-7F6827192E6C}" = ProductContext
"{7E27304E-BAA2-4d90-A34E-76641FAFABB4}" = CP_AtenaShokunin1Config
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117164797}" = Dream Vacation Solitaire FREE
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Extreme Graphics 2 Driver
"{90AF0409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office PowerPoint Viewer 2003
"{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F}" = Readme
"{92BF38A8-5616-4209-87A3-D910B45A1D98}" = Homescan Internet Transporter
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95774351-6087-3A3B-8CA8-70BEE49D2BD5}" = Google Gears
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9EDF1A5D-D8E0-413E-9782-75DD4A8C831B}" = VideoCam Suite 2.0
"{A195B13E-A5E3-4BAF-A995-7F70F445CD06}" = ScannerCopy
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A35B36EA-39FE-4AA8-8119-D66B060C9E72}" = Club Bing Toolbar
"{A5BB5365-EFB4-44c3-A7E2-EB59B7EFD23D}" = CueTour
"{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}" = iTunes
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-AA0000000001}" = Adobe Reader X (10.0.1)
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5}" = PanoStandAlone
"{B824B5C9-849F-4b9e-9EA7-6FD8CD8116DA}" = CP_Package_Variety2
"{B996AE66-10DB-4ac5-B151-E8B4BFBC42FC}" = BufferChm
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan
"{C510CA36-98D6-4F07-8AFF-81E7399A075B}" = 1400Trb
"{C5C649A8-1D21-4C83-9B08-7B3752E580F4}" = Safari
"{C71A1FD7-EB23-45AA-A9AA-8DFEC0881875}" = 530TX+
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition
"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = Fax
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant
"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter
"{EE39FFBD-544E-49E4-A999-6819828EAE91}" = Windows Live Photo Gallery
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F44DA61E-720D-4E79-871F-F6E628B33242}" = OpenOffice.org 3.0
"{F4A4E6B2-D45F-4EB1-8C3A-6EB8D45A31C9}" = ClientTools
"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status
"{F8131A35-47FD-27AD-116D-0E79AF5DE5EE}" = Acrobat.com
"{F90D6825-8F1F-4E3A-9E42-A9C8A9DD1033}" = Nero 7 Essentials
"7-Zip" = 7-Zip 4.58 beta
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Ad-Aware" = Ad-Aware
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"Advanced SystemCare 3_is1" = Advanced SystemCare 3
"AI RoboForm" = AI RoboForm (All Users)
"Almeza MultiSet Professional_is1" = Almeza MultiSet Professional 7.8.1
"Amazon Games & Software Downloader_is1" = Amazon Games & Software Downloader
"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.3
"amg-farmfrenzypizzaparty" = Farm Frenzy - Pizza Party!
"avast" = avast! Free Antivirus
"BFGC" = Big Fish Games: Game Manager
"BFG-Jar of Marbles" = Jar of Marbles
"CCleaner" = CCleaner
"CDL Test & Answer Software" = CDL Test & Answer Software
"CleanUp!" = CleanUp!
"ClubBingToolbar" = Club Bing Toolbar
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Coupon Printer for Windows4.0" = Coupon Printer for Windows
"Coupon Printer for Windows5.0.0.0" = Coupon Printer for Windows
"Crazy-Pool-2" = Crazy Pool 2
"ESET Online Scanner" = ESET Online Scanner v3
"ffdshow_is1" = ffdshow [rev 3178] [2010-01-03]
"Foxit Reader" = Foxit Reader
"FTDICOMM" = FTDI USB Serial Converter Drivers
"GameHouse" = GameHouse
"HijackThis" = HijackThis 2.0.2
"HP Document Viewer" = HP Document Viewer 5.3
"HP Imaging Device Functions" = HP Imaging Device Functions 5.3
"HP Photo & Imaging" = HP Image Zone 5.3
"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3
"HPExtendedCapabilities" = HP Extended Capabilities 5.3
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"ImgBurn" = ImgBurn
"InstallShield_{6206FD57-3E60-4A52-AD1B-7D9F7BA2777E}" = Multimedia Keyboard Only
"InstallShield_{C71A1FD7-EB23-45AA-A9AA-8DFEC0881875}" = 530TX+
"IObit Security 360_is1" = IObit Security 360
"MailWasher Free_is1" = MailWasher Free 6.5.4
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.0.1200
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"OfotoEZUpload" = KODAK EASYSHARE Gallery Upload ActiveX Control
"PC Matic_is1" = PC Matic 1.0.0.0
"Quicken 2002 New User Edition" = Quicken 2002 New User Edition
"RarZilla Free Unrar 2.53" = RarZilla Free Unrar 2.53
"Secunia PSI" = Secunia PSI
"Smart Defrag 2_is1" = Smart Defrag 2
"Sophos-AntiRootkit" = Sophos Anti-Rootkit 1.3.1
"Spotmau 2010_Spotmau_is1" = Spotmau 5.1.3.9132
"SpywareBlaster_is1" = SpywareBlaster 4.3
"Startup_Manager_is1" = Startup Manager 2.4.2
"Test My Hardware_is1" = Test My Hardware 3.0
"The Rise of Atlantis_is1" = The Rise of Atlantis
"The Scruffs_is1" = The Scruffs
"VN_VUIns_Rhine_D-Link" = D-Link PCI Fast Ethernet Adapter
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"YInstHelper" = Yahoo! Install Manager
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Move Media Player" = Move Media Player
"Octoshape add-in for Adobe Flash Player" = Octoshape add-in for Adobe Flash Player
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 6/10/2011 3:15:54 AM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
Error - 6/13/2011 9:14:57 PM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
Error - 6/14/2011 1:14:45 PM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
Error - 6/15/2011 9:21:56 PM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
Error - 6/15/2011 9:23:25 PM | Computer Name = MVW-HOME | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Tried to start a service that wasn't the latest version of CLR Optimization service.
Will shutdown
Error - 6/27/2011 8:54:46 AM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
Error - 6/27/2011 11:21:54 AM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
Error - 6/27/2011 12:08:29 PM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
Error - 6/27/2011 3:19:27 PM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
Error - 6/27/2011 9:43:23 PM | Computer Name = MVW-HOME | Source = JavaQuickStarterService | ID = 1
Description =
[ System Events ]
Error - 6/27/2011 11:22:08 AM | Computer Name = MVW-HOME | Source = Service Control Manager | ID = 7024
Description = The Java Quick Starter service terminated with service-specific error
1 (0x1).
Error - 6/27/2011 11:50:09 AM | Computer Name = MVW-HOME | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 6/27/2011 11:51:21 AM | Computer Name = MVW-HOME | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
Aavmker4 aswSnx aswSP aswTdi Fips intelppm pavboot SASDIFSV SASKUTIL
Error - 6/27/2011 12:04:37 PM | Computer Name = MVW-HOME | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service MSIServer with
arguments "" in order to run the server: {000C101C-0000-0000-C000-000000000046}
Error - 6/27/2011 12:06:32 PM | Computer Name = MVW-HOME | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 6/27/2011 12:08:43 PM | Computer Name = MVW-HOME | Source = Service Control Manager | ID = 7024
Description = The Java Quick Starter service terminated with service-specific error
1 (0x1).
Error - 6/27/2011 3:14:20 PM | Computer Name = MVW-HOME | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service WSearch with
arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
Error - 6/27/2011 3:19:37 PM | Computer Name = MVW-HOME | Source = Service Control Manager | ID = 7024
Description = The Java Quick Starter service terminated with service-specific error
1 (0x1).
Error - 6/27/2011 3:20:04 PM | Computer Name = MVW-HOME | Source = DCOM | ID = 10010
Description = The server {4EB61BAC-A3B6-4760-9581-655041EF4D69} did not register
with DCOM within the required timeout.
Error - 6/27/2011 9:43:32 PM | Computer Name = MVW-HOME | Source = Service Control Manager | ID = 7024
Description = The Java Quick Starter service terminated with service-specific error
1 (0x1).
< End of report >
Do you still want me to run the programs you listed in the last post?
![[external image: Posted Image]](http://i582.photobucket.com/albums/ss269/Cat_Byte/GMER/gmer_screen2-1.gif){kind=link}