" F2 - REG:system.ini UserIniot=userinit.exe"
It then pops up a message stating the usual:
Looked at Host file (nothing seems remiss):For some reason your system denied write access to the Host file.
If any Hijacked domains are in this file, HijackThis may NOT be able to fix
this.
If that happens, you need to edit the file yourself. To do this, click Start>Run and type:
notepad C:WindowsSystem32driversetchosts
and press Enter. Find the line(s) HijackThis reports and delete them.
Save the file as `hosts' (with quotes), and reboot.
For Vista: simply, exit HijackThis, right click on the HijackThis icon,
choose "Run as administrator:
Tried changing Properties in HijackThis Icon:# Copyright © 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
::1 localhost
[right click icon]>[Press Advanced…] Run as administrator is greyed out; can't change.
Any thoughts would be appreciated.
Thanks for being here!!!
Adding OTL & DDS logs (they worked)
Sorry for not including them with original … Better late than never.
OTL Log
OTL logfile created on: 7/4/2011 2:05:33 PM - Run 1
OTL by OldTimer - Version 3.2.25.0 Folder = C:UsersGeoffDesktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
6.00 Gb Total Physical Memory | 3.40 Gb Available Physical Memory | 56.63% Memory free
12.16 Gb Paging File | 10.04 Gb Available in Paging File | 82.58% Paging File free
Paging file location(s): ?:pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:Windows | %ProgramFiles% = C:Program Files (x86)
Drive C: | 586.40 Gb Total Space | 364.23 Gb Free Space | 62.11% Space Free | Partition Type: NTFS
Drive J: | 1397.26 Gb Total Space | 1384.55 Gb Free Space | 99.09% Space Free | Partition Type: NTFS
Computer Name: DESKTOP-PC | User Name: Geoff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:UsersGeoffDesktopOTL.exe (OldTimer Tools)
PRC - C:Program Files (x86)TomTom HOME 2TomTomHOMEService.exe (TomTom)
PRC - C:Program Files (x86)Norton 360Engine5.1.0.29ccSvcHst.exe (Symantec Corporation)
PRC - C:Program Files (x86)OpenOffice.org 3programsoffice.exe (OpenOffice.org)
PRC - C:Program Files (x86)OpenOffice.org 3programsoffice.bin (OpenOffice.org)
PRC - C:Program Files (x86)RosettaStoneLtdServicesRosettaStoneDaemon.exe (Rosetta Stone Ltd.)
PRC - C:Program Files (x86)Common FilesProtexisLicense ServicePsiService_2.exe (Protexis Inc.)
PRC - C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe (Intel Corporation)
PRC - C:Program Files (x86)Common FilesMAGIX ServicesDatabasebinFABS.exe (MAGIX AG)
PRC - C:WindowsmHotkey.exe ()
PRC - C:WindowsChiFuncExt.exe (Chicony)
PRC - C:Program Files (x86)IntelIntel Matrix Storage ManagerIAANTmon.exe (Intel Corporation)
PRC - C:Program Files (x86)IntelIntel Matrix Storage ManagerIAAnotif.exe (Intel Corporation)
========== Modules (SafeList) ==========
MOD - C:UsersGeoffDesktopOTL.exe (OldTimer Tools)
MOD - C:Windowswinsxsx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50
934f2ebcb7eb5
7msvcr90.dll (Microsoft Corporation)
MOD - C:Windowswinsxsx86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50
934f2ebcb7eb5
7msvcp90.dll (Microsoft Corporation)
MOD - C:Program Files (x86)Norton 360Engine5.1.0.29asOEHook.dll (Symantec Corporation)
MOD - C:Windowswinsxsx86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3comctl32.dll (Microsoft Corporation)
MOD - c:Program Files (x86)McAfeeSiteAdvisorsahook.dll (McAfee, Inc.)
========== Win32 Services (SafeList) ==========
SRV:64bit: - (ETService) – C:Program FilesGATEWAYGateway Recovery ManagementServiceETService.exe ()
SRV:64bit: - (WinDefend) – C:Program FilesWindows DefenderMpSvc.dll (Microsoft Corporation)
SRV:64bit: - (XAudioService) – C:WindowsSysNativeDRIVERSxaudio64.exe (Conexant Systems, Inc.)
SRV - (Akamai) – c:Program Files (x86)Common FilesAkamainetsession_win_e477fed.dll ()
SRV - (TomTomHOMEService) – C:Program Files (x86)TomTom HOME 2TomTomHOMEService.exe (TomTom)
SRV - (N360) – C:Program Files (x86)Norton 360Engine5.1.0.29ccSvcHst.exe (Symantec Corporation)
SRV - (FLEXnet Licensing Service) – C:Program Files (x86)Common FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe (Acresso Software Inc.)
SRV - (GameConsoleService) – C:Program Files (x86)Gateway GamesGateway Game ConsoleGameConsoleService.exe (WildTangent, Inc.)
SRV - (RosettaStoneDaemon) – C:Program Files (x86)RosettaStoneLtdServicesRosettaStoneDaemon.exe (Rosetta Stone Ltd.)
SRV - (clr_optimization_v4.0.30319_32) – C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe (Microsoft Corporation)
SRV - (PSI_SVC_2) – C:Program Files (x86)Common FilesProtexisLicense ServicePsiService_2.exe (Protexis Inc.)
SRV - (IAStorDataMgrSvc) Intel® – C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe (Intel Corporation)
SRV - (McAfee SiteAdvisor Service) – C:Program Files (x86)McAfeeSiteAdvisorMcSACore.exe (McAfee, Inc.)
SRV - (Fabs) – C:Program Files (x86)Common FilesMAGIX ServicesDatabasebinFABS.exe (MAGIX AG)
SRV - (clr_optimization_v2.0.50727_32) – C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe (Microsoft Corporation)
SRV - (FirebirdServerMAGIXInstance) – C:Program Files (x86)Common FilesMAGIX ServicesDatabasebinfbserver.exe (MAGIX®)
SRV - (ProtexisLicensing) – C:WindowsSysWOW64PSIService.exe ()
SRV - (WcesComm) – C:WindowsWindowsMobilewcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) – C:WindowsWindowsMobilerapimgr.dll (Microsoft Corporation)
SRV - (IAANTMON) Intel® – C:Program Files (x86)IntelIntel Matrix Storage ManagerIAANTmon.exe (Intel Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (SymEvent) – C:WindowsSysNativeDriversSYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (SRTSP) – C:WindowsSysNativeDriversN360x64\0501000.01DSRTSP64.SYS (Symantec Corporation)
DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:WindowsSysNativedriversN360x64\0501000.01DSRTSPX64.SYS (Symantec Corporation)
DRV:64bit: - (SYMTDIv) – C:WindowsSysNativedriversN360x64\0501000.01DSYMTDIV.SYS (Symantec Corporation)
DRV:64bit: - (SymEFA) – C:WindowsSysNativedriversN360x64\0501000.01DSYMEFA64.SYS (Symantec Corporation)
DRV:64bit: - (SymDS) – C:WindowsSysNativedriversN360x64\0501000.01DSYMDS64.SYS (Symantec Corporation)
DRV:64bit: - (SymIRON) – C:WindowsSysNativedriversN360x64\0501000.01DIronx64.SYS (Symantec Corporation)
DRV:64bit: - (NVHDA) – C:WindowsSysNativedriversnvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (GEARAspiWDM) – C:WindowsSysNativeDRIVERSGEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (iaStor) – C:WindowsSysNativeDRIVERSiaStor.sys (Intel Corporation)
DRV:64bit: - (WpdUsb) – C:WindowsSysNativeDRIVERSwpdusb.sys (Microsoft Corporation)
DRV:64bit: - (igfx) – C:WindowsSysNativeDRIVERSigdkmd64.sys (Intel Corporation)
DRV:64bit: - (RimVSerPort) – C:WindowsSysNativeDRIVERSRimSerial_AMD64.sys (Research in Motion Ltd)
DRV:64bit: - (USBModem) – C:WindowsSysNativeDRIVERSlgx64modem.sys (LG Electronics Inc.)
DRV:64bit: - (UsbDiag) – C:WindowsSysNativeDRIVERSlgx64diag.sys (LG Electronics Inc.)
DRV:64bit: - (usbbus) – C:WindowsSysNativeDRIVERSlgx64bus.sys (LG Electronics Inc.)
DRV:64bit: - (RTSTOR) – C:WindowsSysNativedriversRTSTOR64.SYS (Realtek Semiconductor Corp.)
DRV:64bit: - (ROOTMODEM) – C:WindowsSysNativeDriversRootMdm.sys (Microsoft Corporation)
DRV:64bit: - (XAudio) – C:WindowsSysNativeDRIVERSxaudio64.sys (Conexant Systems, Inc.)
DRV:64bit: - (HSF_DPV) – C:WindowsSysNativeDRIVERSCAX_DPV.sys (Conexant Systems, Inc.)
DRV:64bit: - (CAXHWBS2) – C:WindowsSysNativeDRIVERSCAXHWBS2.sys (Conexant Systems, Inc.)
DRV:64bit: - (winachsf) – C:WindowsSysNativeDRIVERSCAX_CNXT.sys (Conexant Systems, Inc.)
DRV:64bit: - (e1express) Intel® – C:WindowsSysNativeDRIVERSe1e6032e.sys (Intel Corporation)
DRV:64bit: - (Ntfs) – C:WindowsSysNativeWbemntfs.mof ()
DRV:64bit: - (HPZipr12) – C:WindowsSysNativeDRIVERSHPZipr12.sys (HP)
DRV:64bit: - (mdmxsdk) – C:WindowsSysNativeDRIVERSmdmxsdk.sys (Conexant)
DRV:64bit: - (HPZius12) – C:WindowsSysNativeDRIVERSHPZius12.sys (HP)
DRV:64bit: - (HPZid412) – C:WindowsSysNativeDRIVERSHPZid412.sys (HP)
DRV - (IDSVia64) – C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29DefinitionsIPSDefs20110701.051IDSviA64.sys (Symantec Corporation)
DRV - (NAVEX15) – C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29DefinitionsVirusDefs20110704.003EX64.SYS (Symantec Corporation)
DRV - (NAVENG) – C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29DefinitionsVirusDefs20110704.003ENG64.SYS (Symantec Corporation)
DRV - (BHDrvx64) – C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29DefinitionsBASHDefs20110616.003BHDrvx64.sys (Symantec Corporation)
DRV - (eeCtrl) – C:Program Files (x86)Common FilesSymantec SharedEENGINEeeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:Program Files (x86)Common FilesSymantec SharedEENGINEEraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (adfs) – C:WindowsSysWow64driversadfs.sys (Adobe Systems, Inc.)
DRV - (int15) – C:WindowsSysWOW64driversint15_64.sys (Acer, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…amp;m=dx4710-05
IE - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Local Page = C:WindowsSysWOW64blank.htm
IE - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…amp;m=dx4710-05
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,SearchDefaultBranded = 1
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://homepage.gateway.com/rdr.aspx?b=ACG…amp;m=dx4710-05
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,StartPageCache = 1
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/ig"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {a7c6cf7f-112c-4500-a7ea-39801a327e5f}:1.0.10
FF - prefs.js..extensions.enabledItems: {B7082FAA-CB62-4872-9106-E42DD88EDE45}:3.0
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:5.6
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - HKLMsoftwaremozillaFirefoxExtensions{B7082FAA-CB62-4872-9106-E42DD88EDE45}: C:Program Files (x86)McAfeeSiteAdvisor [2009/12/20 10:59:44 | 000,000,000 | —D | M]
FF - HKLMsoftwaremozillaFirefoxExtensions{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29IPSFFPlgn [2011/06/22 08:16:23 | 000,000,000 | —D | M]
FF - HKLMsoftwaremozillaFirefoxExtensions{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29coFFPlgn [2011/05/22 21:10:44 | 000,000,000 | —D | M]
FF - HKLMsoftwaremozillaMozilla Firefox 4.0.1extensionsComponents: C:Program Files (x86)Mozilla Firefoxcomponents [2011/06/07 21:46:21 | 000,000,000 | —D | M]
FF - HKLMsoftwaremozillaMozilla Firefox 4.0.1extensionsPlugins: C:Program Files (x86)Mozilla Firefoxplugins [2011/06/07 21:46:20 | 000,000,000 | —D | M]
FF - HKLMsoftwaremozillaMozilla Thunderbird 3.1.11extensionsComponents: C:Program Files (x86)Mozilla Thunderbirdcomponents [2011/06/24 17:03:52 | 000,000,000 | —D | M]
FF - HKLMsoftwaremozillaMozilla Thunderbird 3.1.11extensionsPlugins: C:Program Files (x86)Mozilla Thunderbirdplugins
[2011/05/10 19:35:08 | 000,000,000 | —D | M] (No name found) – C:UsersGeoffAppDataRoamingMozillaExtensions
[2010/06/16 21:37:12 | 000,000,000 | —D | M] (No name found) – C:UsersGeoffAppDataRoamingMozillaExtensions{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011/05/10 19:35:07 | 000,000,000 | —D | M] (No name found) – C:[removed]
[2011/06/07 21:46:53 | 000,000,000 | —D | M] (No name found) – C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
ons
[2010/07/23 14:07:12 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
ons{20a82645-c095-46ed-80e3-08825760534b}
[2011/02/08 12:32:27 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
ons{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/03/15 14:18:11 | 000,000,000 | —D | M] (20-20 3D Viewer) – C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
[removed]
[2011/06/07 21:43:07 | 000,000,000 | —D | M] (20-20 3D Viewer - IKEA) – C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
[removed]
[2011/06/16 09:15:30 | 000,000,000 | —D | M] (No name found) – C:Program Files (x86)Mozilla Firefoxextensions
[2010/06/11 16:14:53 | 000,000,000 | —D | M] (Java Console) – C:Program Files (x86)Mozilla Firefoxextensions{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/08/15 15:22:57 | 000,000,000 | —D | M] (Java Console) – C:Program Files (x86)Mozilla Firefoxextensions{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/10/24 15:11:00 | 000,000,000 | —D | M] (Java Console) – C:Program Files (x86)Mozilla Firefoxextensions{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/01/15 11:40:31 | 000,000,000 | —D | M] (Java Console) – C:Program Files (x86)Mozilla Firefoxextensions{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/03/15 14:38:16 | 000,000,000 | —D | M] (Java Console) – C:Program Files (x86)Mozilla Firefoxextensions{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/06/16 09:15:30 | 000,000,000 | —D | M] (Java Console) – C:Program Files (x86)Mozilla Firefoxextensions{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) –
[2011/05/22 21:10:44 | 000,000,000 | —D | M] (Norton Toolbar) – C:PROGRAMDATANORTON{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29COFFPLGN
[2011/06/22 08:16:23 | 000,000,000 | —D | M] (Symantec IPS) – C:PROGRAMDATANORTON{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29IPSFFPLGN
() (No name found) – C:USERSGEOFFAPPDATAROAMINGMOZILLAFIREFOXPROFILES72Z99KG5.DEFAULTEXTENSI
ONS{A7C6CF7F-112C-4500-A7EA-39801A327E5F}.XPI
[2011/04/14 11:26:02 | 000,142,296 | —- | M] (Mozilla Foundation) – C:Program Files (x86)mozilla firefoxcomponentsbrowsercomps.dll
[2009/03/31 22:47:26 | 000,324,976 | —- | M] (Symantec Corporation) – C:Program Files (x86)mozilla firefoxcomponentscoFFPlgn.dll
[2011/05/04 04:52:23 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:Program Files (x86)mozilla firefoxpluginsnpdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:Program Files (x86)mozilla firefoxsearchpluginsbing.xml
O1 HOSTS File: ([2006/09/18 16:37:24 | 000,000,761 | —- | M]) - C:WindowsSysNativedriversetcHosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:Program Files (x86)McAfeeSiteAdvisorx64McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program Files (x86)Common FilesAdobeAcrobatActiveXAcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:Program Files (x86)Norton 360Engine5.1.0.29CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:Program Files (x86)Norton 360Engine5.1.0.29IPSIPSBHO.dll (Symantec Corporation)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:Program Files (x86)McAfeeSiteAdvisorMcIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM..Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:Program Files (x86)McAfeeSiteAdvisorx64McIEPlg.dll (McAfee, Inc.)
O3:64bit: - HKLM..Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_64.dll (Google Inc.)
O3 - HKLM..Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:Program Files (x86)McAfeeSiteAdvisorMcIEPlg.dll (McAfee, Inc.)
O3 - HKLM..Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:Program Files (x86)Norton 360Engine5.1.0.29CoIEPlg.dll (Symantec Corporation)
O3:64bit: - HKCU..ToolbarWebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..Run: [IAAnotif] C:Program Files (X86)IntelIntel Matrix Storage ManagerIaanotif.exe (Intel Corporation)
O4:64bit: - HKLM..Run: [Windows Defender] C:Program FilesWindows DefenderMSASCui.exe (Microsoft Corporation)
O4 - HKLM..Run: [Corel File Shell Monitor] File not found
O4 - HKLM..Run: [eRecoveryService] File not found
O4 - HKLM..Run: [IAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe (Intel Corporation)
O4 - HKCU..Run: [HLBackupScheduler] File not found
O4 - HKCU..Run: [WMPNSCFG] File not found
O4 - Startup: C:UsersGeoffAppDataRoamingMicrosoftWindowsStart MenuProgramsStartupOpenOffice.org 3.3.lnk = C:Program Files (x86)OpenOffice.org 3programquickstart.exe ()
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoActiveDesktop = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Add to Evernote 4.0 - C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O8:64bit: - Extra context menu item: Google Sidewiki… - C:Program Files (x86)GoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll (Google Inc.)
O8 - Extra context menu item: Add to Evernote 4.0 - C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O8 - Extra context menu item: Google Sidewiki… - C:Program Files (x86)GoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll (Google Inc.)
O9 - Extra Button: @C:WindowsWindowsMobileINetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:WindowsWindowsMobileINetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:Program Files (x86)EvernoteEvernoteResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra 'Tools' menuitem : @C:Program Files (x86)EvernoteEvernoteResource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU..Trusted Domains: cmphotocenter.com ([www] https in Trusted sites)
O15 - HKCU..Trusted Domains: qwest.com ([ddc.qaccess] https in Local intranet)
O15 - HKCU..Trusted Domains: qwest.com ([odc.qaccess] https in Local intranet)
O15 - HKCU..Trusted Domains: qwest.com ([odc-web.qaccess] https in Local intranet)
O15 - HKCU..Trusted Domains: qwest.com ([qacess] https in Local intranet)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} https://lowes.2020.net/planner/Core/Player/…yerAX_Win32.cab (20-20 3D Viewer)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLMSystemCCSServicesTcpipParameters: DhcpNameServer = [removed] [removed]
O18:64bit: - ProtocolHandlerms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - ProtocolHandlerms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found
O18:64bit: - ProtocolHandlersacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:Program Files (x86)McAfeeSiteAdvisorx64McIEPlg.dll (McAfee, Inc.)
O18:64bit: - ProtocolHandlerskype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - ProtocolHandlerskype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18 - ProtocolHandlersacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:Program Files (x86)McAfeeSiteAdvisorMcIEPlg.dll (McAfee, Inc.)
O18 - ProtocolHandlerskype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dll (Skype Technologies)
O18 - ProtocolHandlerskype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:Windowsexplorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:WindowsSysWow64explorer.exe (Microsoft Corporation)
O20:64bit: - WinlogonNotifyigfxcui: DllName - Reg Error: Key error. - C:WindowsSysNativeigfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:UsersGeoffPicturesBackgroundsBarc Bark.bmp
O24 - Desktop BackupWallPaper: C:UsersGeoffPicturesBackgroundsBarc Bark.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/07/09 21:24:05 | 000,000,000 | RH-D | M] - J:autorun – [ NTFS ]
O32 - AutoRun File - [2002/10/16 07:56:50 | 000,000,036 | RH– | M] () - J:autorun.inf – [ NTFS ]
O33 - MountPoints2{0b4fb1bb-edf3-11df-be21-001fe259cb01}Shell - "" = AutoRun
O33 - MountPoints2{0b4fb1bb-edf3-11df-be21-001fe259cb01}ShellAutoRuncommand - "" = L:TL-Bootstrap.exe
O33 - MountPoints2{3e43367c-c25e-11de-a4b7-001fe259cb01}ShellAutoRuncommand - "" = N:JDSecureWindowsJDSecure31.exe
O33 - MountPoints2{4d7d2712-a4c9-11e0-9760-001fe259cb01}Shell - "" = AutoRun
O33 - MountPoints2{4d7d2712-a4c9-11e0-9760-001fe259cb01}ShellAutoRuncommand - "" = M:TL-Bootstrap.exe
O33 - MountPoints2{8e3073c8-d8e1-11dd-ba0c-001fe259cb01}ShellAutoRuncommand - "" = O:setupSNK.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM..comfile [open] – "%1" %*
O35:64bit: - HKLM..exefile [open] – "%1" %*
O35 - HKLM..comfile [open] – "%1" %*
O35 - HKLM..exefile [open] – "%1" %*
O37:64bit: - HKLM…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM…exe [@ = exefile] – "%1" %*
O37 - HKLM…com [@ = comfile] – "%1" %*
O37 - HKLM…exe [@ = exefile] – "%1" %*
Drivers32:64bit: msacm.l3acm - C:WindowsSystem32l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.clmp3enc - C:Program Files (x86)CyberLinkPower2GoCLMP3Enc.ACM (CyberLink Corp.)
Drivers32: msacm.dvacm - c:Program Files (x86)Common FilesUlead SystemsVIODVACM.acm (Corel TW Corp.)
Drivers32: msacm.l3acm - C:WindowsSysWOW64l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:WindowsSysWow64l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:WindowsSysWow64iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:WindowsSysWow64ff_vfw.dll ()
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2011/07/04 13:58:17 | 000,580,096 | —- | C] (OldTimer Tools) – C:UsersGeoffDesktopOTL.exe
[2011/07/03 09:27:14 | 000,000,000 | —D | C] – C:Program Files (x86)Trend Micro
[2011/07/03 09:27:14 | 000,000,000 | —D | C] – C:UsersGeoffAppDataRoamingMicrosoftWindowsStart MenuProgramsHiJackThis
[2011/06/17 13:31:19 | 000,000,000 | —D | C] – C:ProgramDataProtexis
[2011/06/17 13:31:17 | 000,000,000 | —D | C] – C:UsersGeoffAppDataRoamingUlead Systems
[2011/06/17 12:31:22 | 000,176,640 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64ieui.dll
[2011/06/17 12:31:22 | 000,096,256 | —- | C] (Microsoft Corporation) – C:WindowsSysNativemshtmled.dll
[2011/06/17 12:31:22 | 000,072,704 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64mshtmled.dll
[2011/06/17 12:31:21 | 002,303,488 | —- | C] (Microsoft Corporation) – C:WindowsSysNativejscript9.dll
[2011/06/17 12:31:21 | 001,797,632 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64jscript9.dll
[2011/06/17 12:31:21 | 000,818,176 | —- | C] (Microsoft Corporation) – C:WindowsSysNativejscript.dll
[2011/06/17 12:31:21 | 000,716,800 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64jscript.dll
[2011/06/17 12:31:21 | 000,248,320 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeieui.dll
[2011/06/17 07:44:08 | 000,847,360 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeoleaut32.dll
[2011/06/16 10:58:48 | 000,000,000 | —D | C] – C:UsersGeoffDocumentsOlivesAndThings
[2011/06/16 09:15:28 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:WindowsSysWow64javaws.exe
[2011/06/16 09:15:28 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:WindowsSysWow64javaw.exe
[2011/06/16 09:15:28 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:WindowsSysWow64java.exe
[2011/06/14 07:34:26 | 000,000,000 | —D | C] – C:UsersGeoffAppDataLocalLooksBuilder
[2011/06/13 14:16:18 | 000,000,000 | —D | C] – C:Program Files (x86)LooksBuilder
[2011/06/13 13:29:57 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsWinZip
[2011/06/13 13:29:15 | 000,000,000 | —D | C] – C:ProgramDataWinZip
[2011/06/13 13:29:12 | 000,000,000 | —D | C] – C:Program Files (x86)WinZip
[2011/06/13 13:24:58 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsCorel PaintShop Photo Pro X3
[2011/06/13 12:29:35 | 000,000,000 | —D | C] – C:UsersGeoffAppDataLocalEvernote
[2011/06/13 12:21:58 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsEvernote
[2011/06/13 12:21:55 | 000,000,000 | —D | C] – C:Program Files (x86)Evernote
[2011/06/13 12:00:56 | 000,000,000 | —D | C] – C:ProgramDataeSellerate
[2011/06/13 12:00:14 | 000,000,000 | —D | C] – C:Program Files (x86)SmartSound Software
[2011/06/13 12:00:12 | 000,000,000 | —D | C] – C:ProgramDataSmartSound Software Inc
[2011/06/13 11:59:33 | 000,000,000 | —D | C] – C:WindowsRegisteredPackages
[2011/06/13 11:59:24 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsWindows Media
[2011/06/13 11:59:03 | 000,000,000 | —D | C] – C:ProgramDataInterVideo
[2011/06/13 11:58:07 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsCorel VideoStudio Pro X4
[2011/06/13 11:57:43 | 000,000,000 | —D | C] – C:ProgramDataUlead Systems
[2011/06/13 11:54:56 | 000,000,000 | —D | C] – C:Program Files (x86)Common FilesUlead Systems
[2011/06/13 11:54:50 | 000,000,000 | —D | C] – C:Program Files (x86)Windows Media Components
[2011/06/13 11:54:33 | 000,411,656 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_10.dll
[2011/06/13 11:54:33 | 000,267,272 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_10.dll
[2011/06/13 11:54:32 | 005,081,608 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_36.dll
[2011/06/13 11:54:32 | 003,734,536 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_36.dll
[2011/06/13 11:54:32 | 002,006,552 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeD3DCompiler_36.dll
[2011/06/13 11:54:32 | 001,374,232 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64D3DCompiler_36.dll
[2011/06/13 11:54:32 | 000,508,264 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx10_36.dll
[2011/06/13 11:54:32 | 000,444,776 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx10_36.dll
[2011/06/13 11:54:32 | 000,411,496 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_9.dll
[2011/06/13 11:54:32 | 000,267,112 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_9.dll
[2011/06/13 11:54:31 | 005,073,256 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_35.dll
[2011/06/13 11:54:31 | 003,727,720 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_35.dll
[2011/06/13 11:54:31 | 001,985,904 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeD3DCompiler_35.dll
[2011/06/13 11:54:31 | 001,358,192 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64D3DCompiler_35.dll
[2011/06/13 11:54:31 | 000,508,264 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx10_35.dll
[2011/06/13 11:54:31 | 000,444,776 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx10_35.dll
[2011/06/13 11:54:30 | 001,401,200 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeD3DCompiler_34.dll
[2011/06/13 11:54:30 | 001,124,720 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64D3DCompiler_34.dll
[2011/06/13 11:54:30 | 000,506,728 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx10_34.dll
[2011/06/13 11:54:30 | 000,443,752 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx10_34.dll
[2011/06/13 11:54:30 | 000,409,960 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_8.dll
[2011/06/13 11:54:30 | 000,266,088 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_8.dll
[2011/06/13 11:54:30 | 000,021,000 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeX3DAudio1_2.dll
[2011/06/13 11:54:30 | 000,017,928 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64X3DAudio1_2.dll
[2011/06/13 11:54:29 | 000,403,304 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_7.dll
[2011/06/13 11:54:29 | 000,261,480 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_7.dll
[2011/06/13 11:54:29 | 000,107,368 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexinput1_3.dll
[2011/06/13 11:54:29 | 000,081,768 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xinput1_3.dll
[2011/06/13 11:54:28 | 004,494,184 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_33.dll
[2011/06/13 11:54:28 | 003,495,784 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_33.dll
[2011/06/13 11:54:28 | 001,400,176 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeD3DCompiler_33.dll
[2011/06/13 11:54:28 | 001,123,696 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64D3DCompiler_33.dll
[2011/06/13 11:54:28 | 000,506,728 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx10_33.dll
[2011/06/13 11:54:28 | 000,443,752 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx10_33.dll
[2011/06/13 11:54:28 | 000,393,576 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_6.dll
[2011/06/13 11:54:28 | 000,255,848 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_6.dll
[2011/06/13 11:54:27 | 004,398,360 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_32.dll
[2011/06/13 11:54:27 | 003,426,072 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_32.dll
[2011/06/13 11:54:27 | 000,469,264 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx10.dll
[2011/06/13 11:54:27 | 000,440,080 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx10.dll
[2011/06/13 11:54:27 | 000,390,424 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_5.dll
[2011/06/13 11:54:27 | 000,251,672 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_5.dll
[2011/06/13 11:54:26 | 003,977,496 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_31.dll
[2011/06/13 11:54:26 | 002,414,360 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_31.dll
[2011/06/13 11:54:26 | 000,364,824 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_4.dll
[2011/06/13 11:54:26 | 000,363,288 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_3.dll
[2011/06/13 11:54:26 | 000,237,848 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_4.dll
[2011/06/13 11:54:26 | 000,236,824 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_3.dll
[2011/06/13 11:54:26 | 000,083,736 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexinput1_2.dll
[2011/06/13 11:54:26 | 000,062,744 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xinput1_2.dll
[2011/06/13 11:54:26 | 000,017,688 | —- | C] (Microsoft Corporation) – C:WindowsSysNativex3daudio1_1.dll
[2011/06/13 11:54:26 | 000,015,128 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64x3daudio1_1.dll
[2011/06/13 11:54:25 | 000,354,072 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_2.dll
[2011/06/13 11:54:25 | 000,352,464 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_1.dll
[2011/06/13 11:54:25 | 000,230,168 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_2.dll
[2011/06/13 11:54:25 | 000,229,584 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_1.dll
[2011/06/13 11:54:25 | 000,083,664 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexinput1_1.dll
[2011/06/13 11:54:25 | 000,062,672 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xinput1_1.dll
[2011/06/13 11:54:19 | 003,927,248 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_30.dll
[2011/06/13 11:54:19 | 002,388,176 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_30.dll
[2011/06/13 11:54:14 | 000,355,536 | —- | C] (Microsoft Corporation) – C:WindowsSysNativexactengine2_0.dll
[2011/06/13 11:54:14 | 000,230,096 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64xactengine2_0.dll
[2011/06/13 11:54:14 | 000,016,592 | —- | C] (Microsoft Corporation) – C:WindowsSysNativex3daudio1_0.dll
[2011/06/13 11:54:14 | 000,014,032 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64x3daudio1_0.dll
[2011/06/13 11:54:08 | 003,830,992 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_29.dll
[2011/06/13 11:54:08 | 003,815,120 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_28.dll
[2011/06/13 11:54:08 | 002,332,368 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_29.dll
[2011/06/13 11:54:08 | 002,323,664 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_28.dll
[2011/06/13 11:54:07 | 003,807,440 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_27.dll
[2011/06/13 11:54:07 | 003,767,504 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_26.dll
[2011/06/13 11:54:07 | 002,319,568 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_27.dll
[2011/06/13 11:54:07 | 002,297,552 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_26.dll
[2011/06/13 11:54:06 | 003,823,312 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_25.dll
[2011/06/13 11:54:06 | 002,337,488 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_25.dll
[2011/06/13 11:54:05 | 003,544,272 | —- | C] (Microsoft Corporation) – C:WindowsSysNatived3dx9_24.dll
[2011/06/13 11:54:05 | 002,222,800 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64d3dx9_24.dll
[2011/06/13 09:29:28 | 000,000,000 | —D | C] – C:UsersGeoffAppDataRoamingMalwarebytes
[2011/06/13 09:29:23 | 000,039,984 | —- | C] (Malwarebytes Corporation) – C:WindowsSysWow64driversmbamswissarmy.sys
[2011/06/13 09:29:23 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsMalwarebytes' Anti-Malware
[2011/06/13 09:29:23 | 000,000,000 | —D | C] – C:ProgramDataMalwarebytes
[2011/06/13 09:29:20 | 000,025,912 | —- | C] (Malwarebytes Corporation) – C:WindowsSysNativedriversmbam.sys
[2011/06/13 09:29:20 | 000,000,000 | —D | C] – C:Program Files (x86)Malwarebytes' Anti-Malware
[1 C:Windows*.tmp files -> C:Windows*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/07/04 13:58:21 | 000,580,096 | —- | M] (OldTimer Tools) – C:UsersGeoffDesktopOTL.exe
[2011/07/04 13:55:10 | 000,000,880 | —- | M] () – C:WindowstasksGoogle Software Updater.job
[2011/07/04 13:48:52 | 000,003,216 | -H– | M] () – C:WindowsSysNative7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/07/04 13:48:52 | 000,003,216 | -H– | M] () – C:WindowsSysNative7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/07/04 13:25:50 | 000,002,559 | —- | M] () – C:UsersGeoffDesktopHiJackThis.lnk
[2011/07/04 13:16:00 | 000,000,896 | —- | M] () – C:WindowstasksGoogleUpdateTaskMachineUA.job
[2011/07/04 12:00:48 | 000,004,184 | -HS- | M] () – C:ProgramDataKGyGaAvL.sys
[2011/07/04 11:28:40 | 000,765,449 | —- | M] () – C:UsersGeoffAppDataLocalcensus.cache
[2011/07/04 11:28:06 | 000,183,567 | —- | M] () – C:UsersGeoffAppDataLocalars.cache
[2011/07/04 11:15:40 | 000,000,036 | —- | M] () – C:UsersGeoffAppDataLocalhousecall.guid.cache
[2011/07/04 09:49:00 | 000,067,584 | –S- | M] () – C:Windowsbootstat.dat
[2011/07/04 06:29:18 | 000,000,892 | —- | M] () – C:WindowstasksGoogleUpdateTaskMachineCore.job
[2011/07/02 23:09:56 | 000,703,388 | —- | M] () – C:WindowsSysNativePerfStringBackup.INI
[2011/07/02 23:09:56 | 000,604,264 | —- | M] () – C:WindowsSysNativeperfh009.dat
[2011/07/02 23:09:56 | 000,103,964 | —- | M] () – C:WindowsSysNativeperfc009.dat
[2011/07/02 16:23:54 | 000,033,792 | —- | M] () – C:UsersGeoffAppDataLocalDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/07/02 11:37:01 | 000,000,000 | —- | M] () – C:WindowsSysNativeLogConfigTemp.xml
[2011/07/02 11:36:19 | 2145,570,815 | -HS- | M] () – C:hiberfil.sys
[2011/06/30 03:28:27 | 000,433,368 | —- | M] () – C:WindowsSysNativeFNTCACHE.DAT
[2011/06/16 11:50:34 | 000,002,679 | —- | M] () – C:UsersGeoffApplication DataMicrosoftInternet ExplorerQuick LaunchCorelDRAW 12.lnk
[2011/06/13 14:07:05 | 000,000,008 | RHS- | M] () – C:ProgramDataB91AF05DA8.sys
[2011/06/13 14:06:58 | 000,001,241 | —- | M] () – C:UsersGeoffApplication DataMicrosoftInternet ExplorerQuick LaunchCorel PaintShop Photo Pro X3.lnk
[2011/06/07 21:51:48 | 000,001,079 | —- | M] () – C:UsersGeoffApplication DataMicrosoftInternet ExplorerQuick LaunchChrome.lnk
[2011/06/07 21:46:22 | 000,000,914 | —- | M] () – C:UsersGeoffApplication DataMicrosoftInternet ExplorerQuick LaunchMozilla Firefox.lnk
[1 C:Windows*.tmp files -> C:Windows*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/07/04 11:28:40 | 000,765,449 | —- | C] () – C:UsersGeoffAppDataLocalcensus.cache
[2011/07/04 11:28:06 | 000,183,567 | —- | C] () – C:UsersGeoffAppDataLocalars.cache
[2011/07/04 11:15:40 | 000,000,036 | —- | C] () – C:UsersGeoffAppDataLocalhousecall.guid.cache
[2011/07/03 09:27:14 | 000,002,559 | —- | C] () – C:UsersGeoffDesktopHiJackThis.lnk
[2011/06/16 11:52:54 | 000,148,195 | —- | C] () – C:Program Files (x86)Common FilesBookViewer.xap
[2011/06/16 10:45:49 | 000,055,808 | —- | C] () – C:UsersGeoffDocumentsBusiness credit application.dot
[2011/06/13 14:07:05 | 000,000,008 | RHS- | C] () – C:ProgramDataB91AF05DA8.sys
[2011/06/13 14:06:58 | 000,001,241 | —- | C] () – C:UsersGeoffApplication DataMicrosoftInternet ExplorerQuick LaunchCorel PaintShop Photo Pro X3.lnk
[2011/06/13 13:40:30 | 000,001,170 | —- | C] () – C:ProgramDataMicrosoftWindowsStart MenuProgramsCorel Painter Essentials 4.lnk
[2011/06/07 21:51:48 | 000,001,079 | —- | C] () – C:UsersGeoffApplication DataMicrosoftInternet ExplorerQuick LaunchChrome.lnk
[2011/06/07 21:46:22 | 000,000,902 | —- | C] () – C:ProgramDataMicrosoftWindowsStart MenuProgramsMozilla Firefox.lnk
[2011/05/18 17:53:22 | 000,001,940 | —- | C] () – C:UsersGeoffAppDataLocal{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2011/03/27 14:51:15 | 000,057,344 | —- | C] () – C:WindowsSysWow64ff_vfw.dll
[2010/10/24 15:11:03 | 000,000,680 | —- | C] () – C:UsersGeoffAppDataLocald3d9caps.dat
[2010/09/26 18:51:44 | 004,054,056 | —- | C] () – C:WindowsSysWow64PhotoLooksRenderer.dll
[2010/04/02 16:20:27 | 000,682,480 | —- | C] () – C:UsersGeoffAppDataLocalrx_image.Cache
[2010/04/02 16:20:26 | 001,214,208 | —- | C] () – C:UsersGeoffAppDataLocalrx_audio.Cache
[2010/02/02 11:31:28 | 000,001,330 | —- | C] () – C:WindowsWinInit.Ini
[2010/01/09 17:38:44 | 000,001,460 | —- | C] () – C:UsersGeoffAppDataLocald3d9caps64.dat
[2010/01/09 16:02:26 | 000,000,124 | —- | C] () – C:UsersGeoffAppDataRoamingwklnhst.dat
[2009/10/12 21:29:18 | 000,116,864 | —- | C] () – C:Windowshpqins00.dat
[2009/10/11 17:53:02 | 000,133,540 | —- | C] () – C:Windowshppins20.dat
[2009/10/11 17:52:45 | 000,016,655 | —- | C] () – C:Windowshppmdl20.dat
[2009/09/17 04:58:04 | 000,117,248 | —- | C] () – C:WindowsSysWow64EhStorAuthn.dll
[2009/09/17 04:57:45 | 000,107,612 | —- | C] () – C:WindowsSysWow64StructuredQuerySchema.bin
[2009/09/17 04:57:28 | 000,368,640 | —- | C] () – C:WindowsSysWow64msjetoledb40.dll
[2009/07/25 12:19:50 | 000,207,057 | —- | C] () – C:UsersGeoffAppDataRoamingUserTile.png
[2009/05/01 11:21:53 | 000,000,056 | -H– | C] () – C:ProgramDataezsidmv.dat
[2009/02/07 19:16:41 | 000,004,184 | -HS- | C] () – C:ProgramDataKGyGaAvL.sys
[2009/02/07 18:58:23 | 000,033,792 | —- | C] () – C:UsersGeoffAppDataLocalDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/02/07 18:58:12 | 000,001,628 | -HS- | C] () – C:WindowsSysWow64KGyGaAvL.sys
[2009/01/22 09:59:00 | 000,000,000 | —- | C] () – C:Windowsnsreg.dat
[2009/01/11 17:50:10 | 000,000,000 | —- | C] () – C:WindowsEEventManager.INI
[2009/01/10 20:30:55 | 000,073,220 | —- | C] () – C:WindowsSysWow64EPPICPrinterDB.dat
[2009/01/10 20:30:55 | 000,031,053 | —- | C] () – C:WindowsSysWow64EPPICPattern131.dat
[2009/01/10 20:30:55 | 000,029,114 | —- | C] () – C:WindowsSysWow64EPPICPattern1.dat
[2009/01/10 20:30:55 | 000,027,417 | —- | C] () – C:WindowsSysWow64EPPICPattern121.dat
[2009/01/10 20:30:55 | 000,021,021 | —- | C] () – C:WindowsSysWow64EPPICPattern3.dat
[2009/01/10 20:30:55 | 000,015,670 | —- | C] () – C:WindowsSysWow64EPPICPattern5.dat
[2009/01/10 20:30:55 | 000,013,280 | —- | C] () – C:WindowsSysWow64EPPICPattern2.dat
[2009/01/10 20:30:55 | 000,010,673 | —- | C] () – C:WindowsSysWow64EPPICPattern4.dat
[2009/01/10 20:30:55 | 000,004,943 | —- | C] () – C:WindowsSysWow64EPPICPattern6.dat
[2009/01/10 20:30:55 | 000,001,140 | —- | C] () – C:WindowsSysWow64EPPICPresetData_PT.dat
[2009/01/10 20:30:55 | 000,001,140 | —- | C] () – C:WindowsSysWow64EPPICPresetData_BP.dat
[2009/01/10 20:30:55 | 000,001,137 | —- | C] () – C:WindowsSysWow64EPPICPresetData_ES.dat
[2009/01/10 20:30:55 | 000,001,130 | —- | C] () – C:WindowsSysWow64EPPICPresetData_FR.dat
[2009/01/10 20:30:55 | 000,001,130 | —- | C] () – C:WindowsSysWow64EPPICPresetData_CF.dat
[2009/01/10 20:30:55 | 000,001,104 | —- | C] () – C:WindowsSysWow64EPPICPresetData_EN.dat
[2009/01/10 20:30:55 | 000,000,097 | —- | C] () – C:WindowsSysWow64PICSDK.ini
[2009/01/10 20:27:46 | 000,000,044 | —- | C] () – C:WindowsEPPV300.ini
[2009/01/10 10:01:21 | 000,000,029 | —- | C] () – C:WindowsDEBUGSM.INI
[2009/01/10 09:52:43 | 000,000,173 | —- | C] () – C:WindowsEPSON 1260_1660 Installer.ini
[2009/01/10 09:45:59 | 000,000,394 | —- | C] () – C:Windowscapture.ini
[2009/01/03 16:46:29 | 000,000,036 | —- | C] () – C:Windowswebica.ini
[2009/01/01 18:57:58 | 000,018,904 | —- | C] () – C:WindowsSysWow64StructuredQuerySchemaTrivial.bin
[2008/01/20 21:50:05 | 000,060,124 | —- | C] () – C:WindowsSysWow64tcpmon.ini
[2007/06/05 14:20:32 | 000,177,704 | —- | C] () – C:WindowsSysWow64PSIService.exe
[2007/04/27 09:43:58 | 000,120,200 | —- | C] () – C:WindowsSysWow64DLLDEV32i.dll
[2007/01/02 04:12:02 | 000,581,120 | —- | C] () – C:WindowsmHotkey.exe
[2007/01/02 04:12:02 | 000,294,912 | —- | C] () – C:WindowsPIC.dll
[2007/01/02 04:12:02 | 000,036,864 | —- | C] () – C:WindowsLchDrvKey.exe
[2007/01/02 04:12:02 | 000,000,870 | —- | C] () – C:Windowsmhotkey_reg.ini
[2007/01/02 03:26:58 | 002,215,364 | —- | C] () – C:WindowsSysWow64igklg400.bin
[2007/01/02 03:26:58 | 001,971,732 | —- | C] () – C:WindowsSysWow64igklg450.bin
[2007/01/02 03:26:58 | 000,029,932 | —- | C] () – C:WindowsSysWow64igmedcompkrn.bin
[2006/11/02 10:37:05 | 000,067,584 | –S- | C] () – C:Windowsbootstat.dat
[2006/11/02 07:37:14 | 000,215,943 | —- | C] () – C:WindowsSysWow64dssec.dat
[2006/11/02 07:24:17 | 000,000,741 | —- | C] () – C:WindowsSysWow64NOISE.DAT
[2006/11/02 07:18:17 | 000,673,088 | —- | C] () – C:WindowsSysWow64mlang.dat
[2006/11/02 04:47:54 | 000,043,131 | —- | C] () – C:Windowsmib.bin
========== LOP Check ==========
[2010/07/29 10:15:29 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingAudacity
[2010/08/09 02:02:19 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingBarnes & Noble
[2009/07/21 17:25:08 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingBNeReader
[2011/03/01 15:06:06 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingcalibre
[2009/02/02 19:54:36 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingEPSON
[2010/06/08 17:20:21 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingFacebook
[2009/10/14 11:15:37 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingGetRightToGo
[2009/10/08 16:11:57 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingICAClient
[2009/01/10 20:32:53 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingLeadertech
[2009/04/30 21:54:59 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingLudia
[2010/04/08 11:35:58 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingMAGIX
[2009/01/02 10:16:34 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingOpenOffice.org
[2010/08/25 14:00:17 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingOverDrive
[2009/01/01 19:28:35 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingPlayFirst
[2010/07/25 22:48:10 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingPublish Providers
[2009/07/25 10:04:18 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingSecondLife
[2010/07/24 13:35:44 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingSony
[2010/10/08 14:59:14 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingSystemRequirementsLab
[2010/01/09 16:02:27 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingTemplate
[2010/06/16 21:37:05 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingThunderbird
[2011/04/26 08:42:51 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingTific
[2011/05/10 19:35:05 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingTomTom
[2011/06/17 13:31:17 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingUlead Systems
[2009/01/01 19:24:42 | 000,000,000 | —D | M] – C:UsersGeoffAppDataRoamingWildTangent
[2011/07/02 11:34:19 | 000,032,646 | —- | M] () – C:WindowsTasksSCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%*.* >
[2009/04/11 01:36:36 | 000,333,257 | RHS- | M] () – C:bootmgr
[2007/01/02 03:28:48 | 000,008,192 | R-S- | M] () – C:BOOTSECT.BAK
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:eula.1028.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:eula.1031.txt
[2007/11/07 08:00:40 | 000,010,134 | —- | M] () – C:eula.1033.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:eula.1036.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:eula.1040.txt
[2007/11/07 08:00:40 | 000,000,118 | —- | M] () – C:eula.1041.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:eula.1042.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:eula.2052.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:eula.3082.txt
[2007/11/07 08:00:40 | 000,001,110 | —- | M] () – C:globdata.ini
[2011/07/02 11:36:19 | 2145,570,815 | -HS- | M] () – C:hiberfil.sys
[2007/11/07 08:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:install.exe
[2007/11/07 08:00:40 | 000,000,843 | —- | M] () – C:install.ini
[2007/11/07 08:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:install.res.1028.dll
[2007/11/07 08:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:install.res.1031.dll
[2007/11/07 08:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:install.res.1033.dll
[2007/11/07 08:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:install.res.1036.dll
[2007/11/07 08:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:install.res.1040.dll
[2007/11/07 08:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:install.res.1041.dll
[2007/11/07 08:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:install.res.1042.dll
[2007/11/07 08:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:install.res.2052.dll
[2007/11/07 08:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:install.res.3082.dll
[2007/01/02 04:21:10 | 000,000,165 | —- | M] () – C:Labelprint.log
[2009/02/07 19:16:01 | 000,000,086 | —- | M] () – C:Nik.log
[2011/07/02 11:36:18 | 2459,189,247 | -HS- | M] () – C:pagefile.sys
[2007/01/02 04:21:30 | 000,000,163 | —- | M] () – C:power2go.log
[2008/09/17 05:42:19 | 000,000,488 | —- | M] () – C:RHDSetup.log
[2007/11/07 08:00:40 | 000,005,686 | —- | M] () – C:vcredist.bmp
[2007/11/07 08:09:22 | 001,442,522 | —- | M] () – C:VC_RED.cab
[2007/11/07 08:12:28 | 000,232,960 | —- | M] () – C:VC_RED.MSI
< %systemroot%Fonts*.com >
[2006/11/02 10:06:41 | 000,026,040 | —- | M] () – C:WindowsFontsGlobalMonospace.CompositeFont
[2006/11/02 10:06:41 | 000,026,489 | —- | M] () – C:WindowsFontsGlobalSansSerif.CompositeFont
[2006/11/02 10:06:41 | 000,029,779 | —- | M] () – C:WindowsFontsGlobalSerif.CompositeFont
[2009/09/17 10:24:08 | 000,037,665 | —- | M] () – C:WindowsFontsGlobalUserInterface.CompositeFont
< %systemroot%Fonts*.dll >
< %systemroot%Fonts*.ini >
[2006/09/18 16:35:48 | 000,000,065 | —- | M] () – C:WindowsFontsdesktop.ini
< %systemroot%Fonts*.ini2 >
< %systemroot%Fonts*.exe >
< %systemroot%system32spoolprtprocsw32x86*.* >
< %systemroot%REPAIR*.bak1 >
< %systemroot%REPAIR*.ini >
< %systemroot%system32*.jpg >
< %systemroot%*.jpg >
< %systemroot%*.png >
< %systemroot%*.scr >
< %systemroot%*._sy >
< %APPDATA%AdobeUpdate*.* >
< %ALLUSERSPROFILE%Favorites*.* >
< %APPDATA%Microsoft*.* >
[2009/01/08 15:12:47 | 000,001,666 | -H– | M] () – C:UsersGeoffAppDataRoamingMicrosoftLastFlashConfig.WFC
< %PROGRAMFILES%*.* >
[2008/01/20 22:21:59 | 000,000,174 | -HS- | M] () – C:Program Files (x86)desktop.ini
< %APPDATA%Update*.* >
< %systemroot%*. /mp /s >
< %systemroot%System32config*.sav >
< %PROGRAMFILES%bak. /s >
< %systemroot%system32bak. /s >
< %ALLUSERSPROFILE%Start Menu*.lnk /x >
< %systemroot%system32configsystemprofile*.dat /x >
< %systemroot%*.config >
< %systemroot%system32*.db >
< %PROGRAMFILES%Internet Explorer*.dat >
< %APPDATA%MicrosoftInternet ExplorerQuick Launch*.lnk /x >
[2011/05/09 10:54:13 | 000,000,574 | -HS- | M] () – C:UsersGeoffAppDataRoamingMicrosoftInternet ExplorerQuick Launchdesktop.ini
< %USERPROFILE%Desktop*.exe >
[2011/07/04 13:58:21 | 000,580,096 | —- | M] (OldTimer Tools) – C:UsersGeoffDesktopOTL.exe
< %PROGRAMFILES%Common Files*.* >
[2010/11/16 12:49:24 | 000,148,195 | —- | M] () – C:Program Files (x86)Common FilesBookViewer.xap
< %systemroot%*.src >
< %systemroot%install*.* >
< %systemroot%system32DLL*.* >
< %systemroot%system32HelpFiles*.* >
< %systemroot%system32rundll*.* >
< %systemroot%winn32*.* >
< %systemroot%Java*.* >
< %systemroot%system32test*.* >
< %systemroot%system32Rundll32*.* >
< %systemroot%AppPatchCustom*.* >
< HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU >
< HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstall|LastSuccessTime /rs >
< End of report >
OTL Extras log
OTL Extras logfile created on: 7/4/2011 2:05:33 PM - Run 1
OTL by OldTimer - Version 3.2.25.0 Folder = C:UsersGeoffDesktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
6.00 Gb Total Physical Memory | 3.40 Gb Available Physical Memory | 56.63% Memory free
12.16 Gb Paging File | 10.04 Gb Available in Paging File | 82.58% Paging File free
Paging file location(s): ?:pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:Windows | %ProgramFiles% = C:Program Files (x86)
Drive C: | 586.40 Gb Total Space | 364.23 Gb Free Space | 62.11% Space Free | Partition Type: NTFS
Drive J: | 1397.26 Gb Total Space | 1384.55 Gb Free Space | 99.09% Space Free | Partition Type: NTFS
Computer Name: DESKTOP-PC | User Name: Geoff | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINESOFTWAREClasses]
.url[@ = InternetShortcut] – C:WindowsSysNativerundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINESOFTWAREClasses]
.cpl [@ = cplfile] – C:WindowsSysWow64control.exe (Microsoft Corporation)
[HKEY_CURRENT_USERSOFTWAREClasses]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINESOFTWAREClassesshell[command]command]
batfile [open] – "%1" %* File not found
cmdfile [open] – "%1" %* File not found
comfile [open] – "%1" %* File not found
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%System32InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:WindowsSystem32rundll32.exe" "C:WindowsSystem32ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:WindowsSystem32rundll32.exe" "C:WindowsSystem32mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1 File not found
Directory [Browse with Corel Paint Shop Pro Photo X2] – "C:Program Files (x86)CorelCorel Paint Shop Pro Photo X2Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [Browse with Corel PaintShop Photo Pro X3] – "c:Program Files (x86)CorelCorel PaintShop Photo ProX3PSPClassicCorel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINESOFTWAREClassesshell[command]command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%System32control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%System32InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [Browse with Corel Paint Shop Pro Photo X2] – "C:Program Files (x86)CorelCorel Paint Shop Pro Photo X2Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [Browse with Corel PaintShop Photo Pro X3] – "c:Program Files (x86)CorelCorel PaintShop Photo ProX3PSPClassicCorel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]
"VistaSp2" = D2 80 1C 19 AE 37 CA 01 [binary data]
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvcVol]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvc]
"oobe_av" = 1
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyDomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyPublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyFirewallRules]
"{14F53E45-D274-4574-B3EB-6CCEBCEF535B}" = rport=139 | protocol=6 | dir=out | app=system |
"{3B1C7EA7-92C2-421C-AD9F-215F9A5CE0EC}" = lport=445 | protocol=6 | dir=in | app=system |
"{3EB8219C-DE3D-43FE-8D84-A42724854A84}" = lport=139 | protocol=6 | dir=in | app=system |
"{432765B5-0042-4E44-AF65-004FE2653140}" = rport=138 | protocol=17 | dir=out | app=system |
"{7BE944A9-0F9A-4319-BF3A-5CAC56382301}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%system32spoolsv.exe |
"{8F32592F-117B-47FE-8A6F-8B50CAA76B8B}" = rport=137 | protocol=17 | dir=out | app=system |
"{A0B0A529-FAE2-4622-B8F6-C70A1C018452}" = lport=137 | protocol=17 | dir=in | app=system |
"{A322ACA5-981E-4404-82DA-4FCC6ECA9D88}" = rport=445 | protocol=6 | dir=out | app=system |
"{A882FCBC-7A0D-47E5-8401-120B2372F53A}" = lport=138 | protocol=17 | dir=in | app=system |
"{DF1A8533-302C-46E1-897C-ECD393C4217D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{EF02FF2F-8683-4810-AA64-D8DDE45A18A8}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyFirewallRules]
"{2089E37E-5005-4569-87E6-00E3A758FC71}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{31ABDF31-D81D-4BF8-9F61-5E77637F91D4}" = protocol=6 | dir=out | app=c:program files (x86)rosettastoneltdservicesrosettastoneltdservices.exe |
"{3943B931-41DA-4E06-BE26-CB1E0DA64660}" = protocol=6 | dir=in | app=c:program files (x86)microsoft officeoffice12onenote.exe |
"{3BEAEF4F-CCC5-4797-BF5B-02629578BEBB}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{3E3DB42C-A7D4-4D99-BA71-4C51E13C99F1}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{4087B916-8394-4E96-A67A-7E573D4106A9}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{520FEABB-E062-45F6-85C4-1ECFA901A7EC}" = protocol=17 | dir=in | app=c:program files (x86)common filesadobecs4servicemanagercs4servicemanager.exe |
"{55FE3965-CE74-4297-921D-FCFCE08026A6}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{58FFB86F-6E99-4FF9-B1A1-3878CB30A746}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{59073F29-5607-4C1E-A408-9E507CDC804A}" = dir=in | app=c:program files (x86)rosettastoneltdservicesrosettastonedaemon.exe |
"{7A32626E-2A78-4950-88A4-8E8545B64192}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{87C8A345-8AEE-4B06-ADE4-84CCC49ED083}" = dir=in | app=c:program files (x86)skypephoneskype.exe |
"{9A99C242-1D42-4CAC-A6CA-CB6570D3EC45}" = dir=in | app=c:program files (x86)rosettastoneltdservicesrosettastoneltdservices.exe |
"{9AD3825A-F75B-469E-AC97-B50AEE515E04}" = protocol=6 | dir=in | app=c:program files (x86)common filesadobecs4servicemanagercs4servicemanager.exe |
"{9B26D1BF-D0EE-4072-8DD4-A45FB59DA649}" = protocol=17 | dir=in | app=c:program files (x86)microsoft officeoffice12onenote.exe |
"{AB957B9A-120A-4141-B186-8674FB982B94}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{C7AF7DF2-55DB-4F3B-B624-76446AE58D2C}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{C8B439AC-DFE8-4861-90FC-0CFFF0FA52E5}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{CD9ED9A7-F01C-4F79-A29F-8E562182AFED}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%system32svchost.exe |
"{D4399932-56B6-4887-9221-2ACB47C99B35}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{DAC14CE4-E78D-4594-8F69-2450EC377594}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%system32svchost.exe |
"{E69E1CB8-7C61-4B5E-B11E-F4AEAF224F57}" = protocol=6 | dir=out | app=c:program files (x86)rosettastoneltdservicesrosettastonedaemon.exe |
"{F36935F7-F216-4257-81BE-CA2A7803B8A3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{090A4D4C-24B2-4248-BFF2-AC30D2E0676B}" = Marvell® Wireless Card Software Package
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}" = Windows Mobile Device Center
"{6CDA735E-D099-4ee8-94FC-2681BF33966C}" = SF_CDA_ToolboxIni64
"{78F697ED-EC97-4D8D-881D-838984EA9855}" = 64 Bit HP CIO Components Installer
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{8BB347A7-68B5-4E46-9FCC-17F6172BA9E1}" = Share64
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{981DE354-9301-440f-AAFC-025AA2354A93}" = HP Deskjet & Photosmart Printer Driver Software 8.0.A
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 260.89
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 267.24
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 267.24
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD Audio Driver [removed]
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CNXT_MODEM_PCI_HSF" = Soft Data Fax Modem with SmartCP
"HDMI" = Intel® Graphics Media Accelerator Driver
"HP Imaging Device Functions" = HP Imaging Device Functions 8.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"PROSet" = Intel® Network Connections Drivers
"Sigil_is1" = Sigil 0.3.4
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"_{707EB912-C597-49D8-9460-46CC9AB03EBE}" = Corel Painter Photo Essentials 4
"_{9C9078D1-FA30-4E1B-A194-983A4898F848}" = Corel KPT Collection
"_{A3CF662F-5DEF-46C0-BAF5-0E00E1B4C5B0}" = Corel Painter Essentials 4
"_{AA902C31-B49D-4608-BCCF-2519EB77722D}" = Corel VideoStudio Pro X4
"_{DEAEB5DB-04FA-489D-94EF-8600898B93EE}" = Corel PaintShop Photo Pro X3
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{004C349C-DC75-4F6F-9B8D-61E37DC323B6}" = Magic Bullet PhotoLooks for PaintShop Photo Pro
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{12D7CFCA-F231-4744-9FD0-6D80B3C68EFF}" = MAGIX Screenshare
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{20207CCE-A8FA-44A7-AA3D-1E43EB307B27}" = Sony Sound Forge Audio Studio 9.0
"{20c31435-2a0a-4580-be8b-ac06fc243ca4}" = Python 2.7
"{20DBD1FA-816D-4E5C-8D99-2AC44F129B8B}" = MAGIX PhotoStory on CD & DVD 9 deluxe (Slideshow maker styles)
"{2168245A-B5AD-40D8-A641-48E3E070B5B6}" = Adobe Flash CS4 STI-en
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{254BEB3E-1085-4D66-9CDC-0152C0DC2E93}" = EPSON TWAIN 5
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 26
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java™ 6 Update 22
"{2AF87BE7-01A4-4472-B0D4-4C9349148FE5}" = MAGIX PhotoStory on CD & DVD 9 deluxe (Design elements)
"{2EA45803-BEB7-46C4-9ADC-46A5F9E7BB77}" = GEAR driver installer for x86 and x64
"{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}" = SmartSound Quicktracks 5
"{3212AA30-4503-4D30-ADF3-F0DA00C3FDCC}" = Rosetta Stone Ltd Services
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{325CEECA-0C31-4BB3-B1A9-8032611FB991}" = MAGIX 3D Maker (embedded MSI)
"{335B1821-D274-4EFD-9EFE-3C0FD38EBE65}" = BN eReader
"{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}" = Firebird SQL Server - MAGIX Edition
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}" = McAfee SiteAdvisor
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{3990E632-42C3-4A25-ADFF-1101E3D6DD47}" = VSClassic
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3C569633-C8DE-46E2-BB8F-F65198681C2F}" = Corel MediaOne
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{4010ADCB-1347-D570-FCF1-3002CABEBD2F}" = Rosetta Stone TOTALe
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit
"{4408F169-2392-4C5A-B20C-8842EAE79510}" = MAGIX PhotoStory on CD & DVD 9 deluxe (Slideshow maker styles)
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{465692CB-7EF5-40A7-B07F-DC4DAB7416FC}" = MAGIX PhotoStory on CD & DVD 9 deluxe Download Version
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{505AFDC0-5E72-4928-8368-5DEA385E3647}" = CorelDRAW Graphics Suite 12
"{52CAA5E5-5C19-4E7A-85B7-50A484BCF69A}" = MAGIX PhotoStory on CD & DVD 9 deluxe (Menu templates)
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{5B955039-FDD1-497C-8522-5AD592F16131}" = MAGIX Xtreme Photo Designer 6
"{5F00DF7E-418B-4CD9-8EC5-781156BCC49E}" = Microsoft Money Shared Libraries
"{6009F2FC-EC56-4e28-B91C-0BA5104D6419}" = SF_CDA_Software
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{64E72FB1-2343-4977-B4A8-262CD53D0BD3}" = Corel Paint Shop Pro Photo X2
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67A681E8-0139-4CD6-B289-C36FF8987C03}" = MAGIX PhotoStory on CD & DVD 9 deluxe (Menu templates)
"{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{703FC30C-4435-4971-A296-9277ED5BFD22}" = calibre
"{707EB912-C597-49D8-9460-46CC9AB03EBE}" = Corel Painter Photo Essentials 4
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{793D1D88-6141-43DE-BE58-59BCE31B4090}" = Adobe Flash CS4 Extension - Flash Lite STI en
"{7DB5DE4B-0788-45CD-B67D-555C28744226}" = MAGIX PhotoStory on CD & DVD 9 deluxe (Design elements)
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Gateway Recovery Management
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{81A34902-9D0B-4920-A25C-4CDC5D14B328}" = Jasc Paint Shop Pro 8
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{84C34368-0C06-4880-9095-474609A8E770}" = Sony Preset Manager 2.0e
"{84C66F27-A1B2-4E4E-A8C4-AA8D78E05AB2}" = MAGIX PhotoStory on CD & DVD 9 deluxe (Slideshow maker styles)
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D03A164-B586-4318-AFE6-870A5E2739C1}" = PHOTORECOVERY LE
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{910D1ECD-39DE-496D-BF7C-45E07319BF99}" = EPSON Perfection V300 Photo Scanner Driver Update
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{929709C5-C179-4DC9-8FD7-757FC955EC2E}" = MAGIX Speed 2 (MSI)
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{9718521B-A345-4ad9-A52B-74D1435FB708}" = SF_CDA_ProductContext
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp
"{9C9078D1-FA30-4E1B-A194-983A4898F848}" = Corel KPT Collection
"{9F153AD3-3523-4542-818E-AE2F92249667}" = SAMSUNG USB Driver for Mobile Phones
"{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter
"{A3C7B70F-E60A-4429-B0EF-D5289EF89C5B}" = Creative Memories StoryBook Creator Plus
"{A3CF662F-5DEF-46C0-BAF5-0E00E1B4C5B0}" = Corel Painter Essentials 4
"{A567895C-1D23-48ED-BE83-FB3ED7D30442}" = IPM_VS_Pro
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA72FB28-73B4-49E5-B6B4-E78F44BBD0AD}" = Epson Copy Utility 3.4
"{AA902C31-B49D-4608-BCCF-2519EB77722D}" = ICA
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-A82000000003}" = Adobe Reader 8.2.6
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B0125BEB-6731-43FA-88DA-B64D7BD3AD2D}" = VSPro
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}" = Google Earth
"{B69CC1A5-0404-11D6-ABCB-005004C21D30}" = EPSON Copy Utility
"{B84ECBE1-6ED5-4E86-B4AB-DF46D342411F}" = Share
"{B87FAC24-973D-4A4F-AFC4-555FB95B32DB}" = PureHD
"{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}" = SmartSound Common Data
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm
"{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver
"{C4778408-3268-45CE-AE15-772D1739A1F1}" = VIO
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C6017EEA-9E51-4129-84BA-EFA9520E69D8}" = Common
"{C716522C-3731-4667-8579-40B098294500}" = Toolbox
"{CB84F0F2-927B-458D-9DC5-87832E3DC653}" = GearDrvs
"{CC4C7E9B-4B26-4D8D-8076-40CF708A9FA4}" = Contents
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}" = WinZip 14.5
"{D07F85DE-22F1-4FB4-B3D1-402FD22C4870}" = DeviceIO
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D4AFC7AD-F637-4EDD-BC76-767E4AF78CE1}" = OverDrive Media Console
"{D56D4A9A-B94D-4055-9FC1-B4E33A26C2B8}" = Rosetta Stone TOTALe
"{D68897FC-7E8D-4849-819A-726B2489713C}" = ISCOM
"{D8185007-3F98-413E-B22D-BA513517383A}" = D5100_Help
"{D8D9BCF5-0F5F-4D3F-8427-64B7632F93BE}" = Setup
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{DE4BF4BE-3CDC-43B5-BBDA-DDDA73103111}" = Corel PaintShop Photo Pro X3
"{DE612A3D-0DCC-4055-BB6A-0036F31158A0}" = Setup
"{DE8B9311-ADE7-4EDE-B121-326CAA3D225D}" = PSPPContent
"{DE99075E-7D25-4B96-B32E-BFE6FBFAA644}" = IPM_PSP_CL
"{DEAEB5DB-04FA-489D-94EF-8600898B93EE}" = ICA
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{DEF1928A-FC01-48E7-A7E6-4651D42EF6A1}" = PSPPRO_DCRAW
"{DEF8C145-CC4F-4DAA-AD5C-E707C07AEE50}" = IPM_PSP_COM
"{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E424255A-C125-400A-BE1E-182B8B1B4BCD}" = MAGIX PhotoStory on CD & DVD 9 deluxe (Design elements)
"{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
"{E5FCED12-3E77-4C0E-A305-5AEB38A52A70}" = AdobeColorCommonSetCMYK
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E89D78B8-28F7-412F-8B26-C684739CBBDC}" = Palm Desktop
"{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}" = ScanToWeb
"{ED5DCA6F-5FEA-47CB-83DB-210A468C298B}" = KB0817 Keyboard Driver
"{EED50C97-C79E-4149-BD82-7C5A22437708}" = Adobe Setup
"{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F6E99614-F042-4459-82B7-8B38B2601356}" = Adobe Flash CS4
"{F761359C-9CED-45AE-9A51-9D6605CD55C4}" = Evernote v. 4.3.1
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FD100EAE-33D2-420D-BCEB-361AC512B0BB}" = D5100
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_a68eec966ce913ddaa63251dc82ed31" = Adobe Flash CS4 Professional
"Akamai" = Akamai NetSession Interface
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.12 (Unicode)
"BN_DesktopReader" = Barnes & Noble Desktop Reader
"Color Efex Pro 3.0 Corel Sampler" = Color Efex Pro 3.0 Corel Sampler
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.rosettastone.rosettastonetotale.8F5798B43604FA41C65B6F3DA7D3E38B6B06564
3.1" = Rosetta Stone TOTALe
"EPSON Photo Print" = EPSON Photo Print
"EPSON Scanner" = EPSON Scan
"ffdshow_is1" = ffdshow [rev 2527] [2008-12-19]
"Google Chrome" = Google Chrome
"Google Updater" = Google Updater
"Guild Wars" = Guild Wars
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HTC_WModemDriver" = WModem Driver Installer
"ImageSkill Background Remover 3" = ImageSkill Background Remover 3
"InstallShield_{004C349C-DC75-4F6F-9B8D-61E37DC323B6}" = Magic Bullet PhotoLooks for PaintShop Photo Pro
"InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}" = SmartSound Quicktracks 5
"InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}" = SmartSound Common Data
"MAGIX_MSI_Fotos_auf_CD_DVD_9_dlx" = MAGIX PhotoStory on CD & DVD 9 deluxe Download Version
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.0.1200
"Money2007b" = Microsoft Money Essentials
"Mozilla Firefox 4.0.1 (x86 en-US)" = Mozilla Firefox 4.0.1 (x86 en-US)
"Mozilla Thunderbird (3.1.11)" = Mozilla Thunderbird (3.1.11)
"N360" = Norton 360
"SystemRequirementsLab" = System Requirements Lab
"TomTom HOME" = TomTom HOME 2.8.2.2264
"WildTangent gateway Master Uninstall" = Gateway Games
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"World of Warcraft" = World of Warcraft
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"Facebook Plug-In" = Facebook Plug-In
"pycrypto-py2.7" = Python 2.7 pycrypto-2.1.0
"World of Warcraft" = World of Warcraft
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 6/8/2011 4:26:56 PM | Computer Name = Desktop-PC | Source = Application Error | ID = 1000
Description = Faulting application Skype.exe, version 5.1.0.112, time stamp 0x4d4037c2,
faulting module kernel32.dll, version 6.0.6002.18005, time stamp 0x49e038c0, exception
code 0xe0fafafa, fault offset 0x0001e124, process id 0xba0, application start time
0x01cc261a3a3f49b3.
Error - 6/10/2011 8:04:29 PM | Computer Name = Desktop-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/12/2011 7:58:27 AM | Computer Name = Desktop-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/12/2011 6:47:21 PM | Computer Name = Desktop-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/12/2011 7:08:52 PM | Computer Name = Desktop-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/13/2011 12:54:33 PM | Computer Name = Desktop-PC | Source = System Restore | ID = 8193
Description =
Error - 6/13/2011 2:21:42 PM | Computer Name = Desktop-PC | Source = System Restore | ID = 8193
Description =
Error - 6/13/2011 6:21:21 PM | Computer Name = Desktop-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/13/2011 10:15:22 PM | Computer Name = Desktop-PC | Source = Application Error | ID = 1000
Description = Faulting application Explorer.EXE, version 6.0.6002.18005, time stamp
0x49e02a1e, faulting module msxml6.dll, version 6.20.5002.0, time stamp 0x4a81a53f,
exception code 0xc0000005, fault offset 0x00000000000536b7, process id 0xca4, application
start time 0x01cc2a18241ad5e1.
Error - 6/14/2011 10:29:26 PM | Computer Name = Desktop-PC | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 6/22/2011 9:16:10 AM | Computer Name = Desktop-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 8:13:42 AM on 6/22/2011 was unexpected.
Error - 6/22/2011 9:16:50 AM | Computer Name = Desktop-PC | Source = Service Control Manager | ID = 7000
Description =
Error - 6/22/2011 9:17:49 AM | Computer Name = Desktop-PC | Source = Service Control Manager | ID = 7022
Description =
Error - 6/22/2011 11:25:12 AM | Computer Name = Desktop-PC | Source = Service Control Manager | ID = 7011
Description =
Error - 6/30/2011 4:28:31 AM | Computer Name = Desktop-PC | Source = Microsoft-Windows-ResourcePublication | ID = 1002
Description =
Error - 6/30/2011 4:28:39 AM | Computer Name = Desktop-PC | Source = Service Control Manager | ID = 7000
Description =
Error - 6/30/2011 4:30:07 AM | Computer Name = Desktop-PC | Source = Service Control Manager | ID = 7022
Description =
Error - 7/2/2011 12:37:31 PM | Computer Name = Desktop-PC | Source = Service Control Manager | ID = 7000
Description =
Error - 7/2/2011 12:38:27 PM | Computer Name = Desktop-PC | Source = Service Control Manager | ID = 7022
Description =
Error - 7/2/2011 4:06:18 PM | Computer Name = Desktop-PC | Source = Service Control Manager | ID = 7011
Description =
< End of report >
DDS Log
.
DDS (Ver_11-03-05.01) - NTFS_AMD64
Run by [removed] at 14:21:39.72 on Mon 07/04/2011
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_26
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.6141.3311 [GMT -5:00]
.
AV: Norton 360 *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton 360 *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:Windowssystem32wininit.exe
C:Windowssystem32lsm.exe
C:Windowssystem32svchost.exe -k DcomLaunch
C:Windowssystem32nvvsvc.exe
C:Windowssystem32svchost.exe -k rpcss
C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted
C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted
C:Windowssystem32svchost.exe -k netsvcs
C:Windowssystem32svchost.exe -k GPSvcGroup
C:Windowssystem32SLsvc.exe
C:Windowssystem32svchost.exe -k LocalService
C:Program FilesNVIDIA CorporationDisplayNvXDSync.exe
C:Windowssystem32nvvsvc.exe
C:Windowssystem32svchost.exe -k NetworkService
C:WindowsSystem32spoolsv.exe
C:Windowssystem32svchost.exe -k LocalServiceNoNetwork
C:WindowsSysWOW64svchost.exe -k Akamai
C:Program FilesGATEWAYGateway Recovery ManagementServiceETService.exe
C:Program Files (x86)Common FilesMAGIX ServicesDatabasebinFABS.exe
C:WindowsSysWOW64svchost.exe -k hpdevmgmt
C:Program Files (X86)IntelIntel Matrix Storage ManagerIaantmon.exe
C:Program Files (x86)McAfeeSiteAdvisorMcSACore.exe
C:Program Files (x86)Norton 360Engine5.1.0.29ccSvcHst.exe
C:Windowssystem32rundll32.exe
C:WindowsSysWOW64rundll32.exe
C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted
C:Program Files (x86)Common FilesProtexisLicense ServicePsiService_2.exe
C:Program Files (x86)RosettaStoneLtdServicesRosettaStoneDaemon.exe
C:Windowssystem32svchost.exe -k imgsvc
C:Program Files (x86)TomTom HOME 2TomTomHOMEService.exe
C:WindowsSystem32svchost.exe -k WerSvcGroup
C:Windowssystem32SearchIndexer.exe
C:Windowssystem32DRIVERSxaudio64.exe
C:Windowssystem32WUDFHost.exe
C:Windowssystem32taskeng.exe
C:WindowsSysWOW64DllHost.exe
C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe
C:Windowssystem32svchost.exe -k WindowsMobile
C:Program Files (x86)Norton 360Engine5.1.0.29ccSvcHst.exe
C:Windowssystem32Dwm.exe
C:Windowssystem32taskeng.exe
C:WindowsExplorer.EXE
C:Windowssystem32taskeng.exe
C:WindowsMHotKey.exe
C:Program Files (x86)IntelIntel Matrix Storage ManagerIAAnotif.exe
C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe
C:Program Files (x86)Common FilesJavaJava Updatejusched.exe
C:Program Files (x86)OpenOffice.org 3programsoffice.exe
C:Program FilesWindows Media Playerwmpnscfg.exe
C:Program FilesWindows Media Playerwmpnetwk.exe
C:Windowssystem32wbemunsecapp.exe
C:Windowssystem32wbemwmiprvse.exe
C:Program Files (x86)OpenOffice.org 3programsoffice.bin
C:WindowsChiFuncExt.exe
C:Program FilesWindows Sidebarsidebar.exe
C:Windowssplwow64.exe
C:Windowssystem32igfxsrvc.exe
C:Windowssystem32SearchProtocolHost.exe
C:Windowssystem32SearchFilterHost.exe
C:Windowssystem32DllHost.exe
C:Windowssystem32DllHost.exe
C:UsersGeoffDesktopdds.scr
C:Windowssystem32wbemwmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l;=0409&s;=1&o;=vp64&d;=0908&m;=dx4710-05
mStart Page = hxxp://homepage.gateway.com/rdr.aspx?b=ACGW&l;=0409&s;=1&o;=vp64&d;=0908&m;=dx4710-05
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - C:Program Files (x86)Common FilesAdobeAcrobatActiveXAcroIEHelper.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:Program Files (x86)Norton 360Engine5.1.0.29coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:Program Files (x86)Norton 360Engine5.1.0.29IPSIPSBHO.DLL
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_32.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:PROGRA~2mcafeeSITEAD~1mcieplg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:Program Files (x86)Javajre6binjp2ssv.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:PROGRA~2mcafeeSITEAD~1mcieplg.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:Program Files (x86)Norton 360Engine5.1.0.29coIEPlg.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_32.dll
uRun: [swg] "C:Program Files (x86)GoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
uRun: [Sidebar] C:Program FilesWindows Sidebarsidebar.exe /autoRun
uRun: [HLBackupScheduler] C:Program FilesVerizon V CAST Media ManagerV CAST Backup Scheduler.exe
uRun: [WMPNSCFG] C:Program Files (x86)Windows Media PlayerWMPNSCFG.exe
mRun: [eRecoveryService]
mRun: [IAStorIcon] "C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe"
mRun: [Corel File Shell Monitor] c:Program Files (x86)CorelCorel PaintShop Photo ProX3PSPClassicCorelIOMonitor.exe
mRun: [SunJavaUpdateSched] "C:Program Files (x86)Common FilesJavaJava Updatejusched.exe"
StartupFolder: C:UsersGeoffAppDataRoamingMICROS~1WindowsSTARTM~1ProgramsStartupOPENOF
~1.LNK - C:Program Files (x86)OpenOffice.org 3programquickstart.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Add to Evernote 4.0 - C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll/204
IE: E&xport; to Microsoft Excel - C:PROGRA~2MICROS~2Office12EXCEL.EXE/3000
IE: Google Sidewiki… - C:Program Files (x86)GoogleGoogle ToolbarComponentGoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:Program Files (x86)EvernoteEvernoteEvernoteIE.dll/204
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:PROGRA~2MICROS~2Office12ONBttnIE.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - C:WindowsWindowsMobileINetRepl.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:PROGRA~2MICROS~2Office12REFIEBAR.DLL
Trusted Zone: cmphotocenter.comwww
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} - hxxps://lowes.2020.net/planner/Core/Player/2020PlayerAX_Win32.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:PROGRA~2McAfeeSITEAD~1McIEPlg.dll
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:Program Files (x86)SkypeToolbarsInternet Explorerskypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~2COMMON~1SkypeSKYPE4~1.DLL
BHO-X64: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_64.dll
BHO-X64: McAfee SiteAdvisor BHO: {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:PROGRA~2mcafeeSITEAD~1x64mcieplg.dll
TB-X64: McAfee SiteAdvisor Toolbar: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:PROGRA~2mcafeeSITEAD~1x64mcieplg.dll
TB-X64: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_64.dll
mRun-x64: [Windows Defender] %ProgramFiles%Windows DefenderMSASCui.exe -hide
mRun-x64: [IAAnotif] "C:Program Files (X86)IntelIntel Matrix Storage ManagerIaanotif.exe"
.
================= FIREFOX ===================
.
FF - ProfilePath - C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.default
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/ig
FF - component: C:Program Files (x86)McAfeeSiteAdvisorcomponentsMcFFPlg.dll
FF - component: C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29coFFPlgncomponentscoFFPlgn.dll
FF - component: C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29IPSFFPlgncomponentsIPSFFPl.dll
FF - component: C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
ons{3112ca9c-de6d-4884-a869-9855de68056c}componentsfrozen.dll
FF - component: C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
ons{3112ca9c-de6d-4884-a869-9855de68056c}componentsgoogletoolbar-ff3.dll
FF - component: C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
ons{a7c6cf7f-112c-4500-a7ea-39801a327e5f}platformWINNT_x86-msvccomponentsipc_fireftp.dll
FF - plugin: C:Program Files (x86)GoogleGoogle Earthpluginnpgeplugin.dll
FF - plugin: C:Program Files (x86)GoogleGoogle Updater2.4.1536.6592npCIDetect13.dll
FF - plugin: C:Program Files (x86)GoogleUpdate1.3.21.57npGoogleUpdate3.dll
FF - plugin: C:Program Files (x86)Javajre6binnew_pluginnpdeployJava1.dll
FF - plugin: c:Program Files (x86)Microsoft Silverlight4.0.60310.0npctrlui.dll
FF - plugin: C:Program Files (x86)Mozilla FirefoxpluginsnpdeployJava1.dll
FF - plugin: C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dv.dll
FF - plugin: C:Program Files (x86)NVIDIA Corporation3D Visionnpnv3dvstreaming.dll
FF - plugin: C:UsersGeoffAppDataRoamingFacebooknpfbplugin_1_0_3.dll
FF - plugin: C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
[removed]
FF - plugin: C:UsersGeoffAppDataRoamingMozillaFirefoxProfiles72z99kg5.defaultextensi
ons2020Player_IKEA@2020Technologies.compluginsNP_2020Player_IKEA.dll
.
============= SERVICES / DRIVERS ===============
.
R0 SymDS;Symantec Data Store;C:WindowsSystem32driversN360x64\0501000.01DSymDS64.sys [2011-5-22 450680]
R0 SymEFA;Symantec Extended File Attributes;C:WindowsSystem32driversN360x64\0501000.01DSymEFA64.sys [2011-5-22 912504]
R1 BHDrvx64;BHDrvx64;C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29DefinitionsBASHDefs20110616.003BHDrvx64.sys [2011-6-16 1143416]
R1 IDSVia64;IDSVia64;C:ProgramDataNorton{0C55C096-0F1D-4F28-AAA2-85EF591126E7}N360_5.1.0.29DefinitionsIPSDefs20110701.051IDSviA64.sys [2011-7-1 488056]
R1 SymIRON;Symantec Iron Driver;C:WindowsSystem32driversN360x64\0501000.01DIronx64.sys [2011-5-22 171128]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver;C:WindowsSystem32driversN360x64\0501000.01Dsymtdiv.sys [2011-5-22 432760]
R2 Akamai;Akamai NetSession Interface;C:WindowsSystem32svchost.exe -k Akamai [2008-1-20 27648]
R2 ETService;Empowering Technology Service;C:Program FilesGATEWAYGateway Recovery ManagementServiceETService.exe [2008-9-17 24576]
R2 Fabs;FABS - Helping agent for MAGIX media database;C:Program Files (x86)Common FilesMAGIX ServicesDatabasebinFABS.exe [2009-8-27 1253376]
R2 FontCache;Windows Font Cache Service;C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation [2008-1-20 27648]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe [2010-10-24 13336]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:Program Files (x86)McAfeeSiteAdvisormcsacore.exe [2009-1-2 110312]
R2 N360;Norton 360;C:Program Files (x86)Norton 360Engine5.1.0.29ccSvcHst.exe [2011-5-22 130008]
R2 RosettaStoneDaemon;RosettaStoneDaemon;C:Program Files (x86)RosettaStoneLtdServicesRosettaStoneDaemon.exe [2010-5-17 1615176]
R2 TomTomHOMEService;TomTomHOMEService;C:Program Files (x86)TomTom HOME 2TomTomHOMEService.exe [2011-4-22 92592]
R3 CAXHWBS2;CAXHWBS2;C:WindowsSystem32driversCAXHWBS2.sys [2007-6-20 409600]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;C:Program Files (x86)Common FilesSymantec SharedEENGINEEraserUtilRebootDrv.sys [2011-5-20 136824]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:WindowsSystem32driversnvhda64v.sys [2010-10-24 155752]
S2 0317701261168314mcinstcleanup;McAfee Application Installer Cleanup (0317701261168314);C:WindowsTEMP\031770~1.EXE C:PROGRA~2COMMON~1McAfeeINSTAL~1cleanup.ini -cleanup -nolog -service –> C:WindowsTEMP\031770~1.EXE C:PROGRA~2COMMON~1McAfeeINSTAL~1cleanup.ini -cleanup -nolog -service [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2010-3-18 138576]
S2 gupdate;Google Update Service (gupdate);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2009-10-24 133104]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:Program Files (x86)Common FilesMAGIX ServicesDatabasebinfbserver.exe [2008-8-7 3276800]
S3 gupdatem;Google Update Service (gupdatem);C:Program Files (x86)GoogleUpdateGoogleUpdate.exe [2009-10-24 133104]
S3 PerfHost;Performance Counter DLL Host;C:WindowsSysWOW64perfhost.exe [2008-1-20 19968]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;C:WindowsMicrosoft.NETFramework64v4.0.30319WPFWPFFontCache_v0400.e
xe [2010-3-18 1020768]
S4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;C:WindowsMicrosoft.NETFramework64v2.0.50727mscorsvw.exe [2009-9-17 89920]
.
=============== File Associations ===============
.
JSEFile=C:WindowsSysWOW64WScript.exe "%1" %*
.
=============== Created Last 30 ================
.
2011-07-03 14:27:14 388096 —-a-r- C:UsersGeoffAppDataRoamingMicrosoftInstaller{45A66726-69BC-466B-A7A4-12FCBA4883D7}HiJackThis.exe
2011-07-03 14:27:14 ——– d—–w- C:Program Files (x86)Trend Micro
2011-06-29 12:37:56 344576 —-a-w- C:WindowsSystem32schannel.dll
2011-06-29 12:37:56 276992 —-a-w- C:WindowsSysWow64schannel.dll
2011-06-17 18:31:19 ——– d—–w- C:PROGRA~3Protexis
2011-06-17 12:44:08 847360 —-a-w- C:WindowsSystem32oleaut32.dll
2011-06-17 12:44:08 563712 —-a-w- C:WindowsSysWow64oleaut32.dll
2011-06-17 12:43:38 176128 —-a-w- C:WindowsSystem32driverssrv2.sys
2011-06-17 12:43:38 145920 —-a-w- C:WindowsSystem32driverssrvnet.sys
2011-06-17 12:43:10 405504 —-a-w- C:WindowsSystem32driversafd.sys
2011-06-17 12:42:43 275456 —-a-w- C:WindowsSystem32driversmrxsmb10.sys
2011-06-17 12:42:42 135680 —-a-w- C:WindowsSystem32driversmrxsmb.sys
2011-06-17 12:42:42 107008 —-a-w- C:WindowsSystem32driversmrxsmb20.sys
2011-06-17 12:42:15 2762752 —-a-w- C:WindowsSystem32win32k.sys
2011-06-17 12:41:47 2409784 —-a-w- C:Program FilesWindows MailOESpamFilter.dat
2011-06-17 12:41:47 2409784 —-a-w- C:Program Files (x86)Windows MailOESpamFilter.dat
2011-06-17 12:41:09 97792 —-a-w- C:WindowsSystem32driversdfsc.sys
2011-06-17 12:40:42 975360 —-a-w- C:WindowsSystem32inetcomm.dll
2011-06-17 12:40:42 739328 —-a-w- C:WindowsSysWow64inetcomm.dll
2011-06-14 12:34:26 ——– d—–w- C:UsersGeoffAppDataLocalLooksBuilder
2011-06-13 19:16:18 ——– d—–w- C:Program Files (x86)LooksBuilder
2011-06-13 19:07:05 8 –sh–r- C:PROGRA~3B91AF05DA8.sys
2011-06-13 17:29:35 ——– d—–w- C:UsersGeoffAppDataLocalEvernote
2011-06-13 17:21:55 ——– d—–w- C:Program Files (x86)Evernote
2011-06-13 17:00:56 ——– d—–w- C:PROGRA~3eSellerate
2011-06-13 17:00:14 ——– d—–w- C:Program Files (x86)SmartSound Software
2011-06-13 17:00:12 ——– d—–w- C:PROGRA~3SmartSound Software Inc
2011-06-13 16:59:33 ——– d—–w- C:WindowsRegisteredPackages
2011-06-13 16:59:26 ——– d–h–w- C:Windowsmsdownld.tmp
2011-06-13 16:59:03 ——– d—–w- C:PROGRA~3InterVideo
2011-06-13 16:58:59 212992 —-a-w- C:Program Files (x86)Common FilesInstallShieldEngine6Intel 32ILog.dll
2011-06-13 14:29:28 ——– d—–w- C:UsersGeoffAppDataRoamingMalwarebytes
2011-06-13 14:29:23 39984 —-a-w- C:WindowsSysWow64driversmbamswissarmy.sys
2011-06-13 14:29:23 ——– d—–w- C:PROGRA~3Malwarebytes
2011-06-13 14:29:20 25912 —-a-w- C:WindowsSystem32driversmbam.sys
2011-06-13 14:29:20 ——– d—–w- C:Program Files (x86)Malwarebytes' Anti-Malware
2011-06-08 02:46:21 142296 —-a-w- C:Program Files (x86)Mozilla Firefoxcomponentsbrowsercomps.dll
2011-06-08 02:46:20 924632 —-a-w- C:Program Files (x86)Mozilla Firefoxfirefox.exe
2011-06-08 02:46:20 89048 —-a-w- C:Program Files (x86)Mozilla FirefoxlibEGL.dll
2011-06-08 02:46:20 781272 —-a-w- C:Program Files (x86)Mozilla Firefoxmozsqlite3.dll
2011-06-08 02:46:20 465880 —-a-w- C:Program Files (x86)Mozilla FirefoxlibGLESv2.dll
2011-06-08 02:46:20 269272 —-a-w- C:Program Files (x86)Mozilla Firefoxfreebl3.dll
2011-06-08 02:46:20 1974616 —-a-w- C:Program Files (x86)Mozilla FirefoxD3DCompiler_42.dll
2011-06-08 02:46:20 19416 —-a-w- C:Program Files (x86)Mozilla FirefoxAccessibleMarshal.dll
2011-06-08 02:46:20 1892184 —-a-w- C:Program Files (x86)Mozilla Firefoxd3dx9_42.dll
2011-06-08 02:46:20 1874904 —-a-w- C:Program Files (x86)Mozilla Firefoxmozjs.dll
2011-06-08 02:46:20 15832 —-a-w- C:Program Files (x86)Mozilla Firefoxmozalloc.dll
2011-06-08 02:46:20 125912 —-a-w- C:Program Files (x86)Mozilla Firefoxcrashreporter.exe
.
==================== Find3M ====================
.
2011-07-04 17:00:48 4184 –sha-w- C:PROGRA~3KGyGaAvL.sys
2011-05-23 02:11:28 174200 —-a-w- C:WindowsSystem32driversSYMEVENT64x86.SYS
2011-05-22 06:37:08 404640 —-a-w- C:WindowsSysWow64FlashPlayerCPLApp.cpl
2011-05-04 09:52:22 472808 —-a-w- C:WindowsSysWow64deployJava1.dll
2011-04-23 01:29:25 2303488 —-a-w- C:WindowsSystem32jscript9.dll
2011-04-23 01:19:19 2382848 —-a-w- C:WindowsSystem32mshtml.tlb
2011-04-22 23:35:56 1797632 —-a-w- C:WindowsSysWow64jscript9.dll
2011-04-22 23:25:54 2382848 —-a-w- C:WindowsSysWow64mshtml.tlb
.
============= FINISH: 14:22:06.89 ===============
DDS Attach log
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_11-03-05.01)
.
Microsoft® Windows Vista™ Home Premium
Boot Device: DeviceHarddiskVolume2
Install Date: 9/17/2008 5:43:33 AM
System Uptime: 7/3/2011 10:13:59 PM (16 hours ago)
.
Motherboard: Gateway | | G33M05G1
Processor: Intel® Core™2 Quad CPU Q6600 @ 2.40GHz | Socket 775 | 2400/266mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 586 GiB total, 363.056 GiB free.
D: is CDROM ()
E: is Removable
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is FIXED (NTFS) - 1397 GiB total, 1384.552 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP1085: 6/8/2011 5:20:48 PM - Scheduled Checkpoint
RP1086: 6/10/2011 12:00:01 AM - Scheduled Checkpoint
RP1087: 6/10/2011 7:31:22 PM - Windows Update
RP1088: 6/12/2011 12:57:11 AM - Scheduled Checkpoint
RP1089: 6/12/2011 9:50:23 PM - Scheduled Checkpoint
RP1090: 6/13/2011 11:53:31 AM - Installed DirectX
RP1091: 6/13/2011 11:59:51 AM - Installed SmartSound Common Data
RP1092: 6/13/2011 12:00:26 PM - Installed SmartSound Quicktracks 5
RP1093: 6/13/2011 12:21:34 PM - Installed Evernote v. 4.3.1
RP1094: 6/13/2011 1:20:51 PM - Installed DirectX
RP1095: 6/13/2011 1:28:58 PM - Installed WinZip 14.5
RP1096: 6/13/2011 1:40:04 PM - Installed Corel Painter Essentials 4.
RP1097: 6/13/2011 2:16:04 PM - Installed Magic Bullet PhotoLooks for PaintShop Photo Pro
RP1098: 6/14/2011 7:40:50 AM - Windows Update
RP1099: 6/16/2011 7:07:48 AM - Scheduled Checkpoint
RP1100: 6/16/2011 9:14:34 AM - Installed Java™ 6 Update 26
RP1101: 6/17/2011 12:29:57 PM - Windows Update
RP1102: 6/18/2011 12:59:55 PM - Scheduled Checkpoint
RP1103: 6/22/2011 9:22:41 PM - Scheduled Checkpoint
RP1104: 6/29/2011 8:09:40 AM - Scheduled Checkpoint
RP1105: 6/30/2011 3:00:25 AM - Windows Update
RP1106: 7/2/2011 9:46:32 AM - Installed HiJackThis
RP1107: 7/2/2011 2:15:05 PM - Windows Update
RP1108: 7/3/2011 9:27:04 AM - Installed HiJackThis
RP1109: 7/4/2011 6:58:46 AM - Scheduled Checkpoint
RP1110: 7/4/2011 2:07:00 PM - OTL Restore Point - 7/4/2011 2:07:00 PM
.
==== Installed Programs ======================
.
Update for Microsoft Office 2007 (KB2508958)
ABBYY FineReader 6.0 Sprint
Activation Assistant for the 2007 Microsoft Office suites
Adobe AIR
Adobe Anchor Service CS4
Adobe Bridge CS4
Adobe CMaps CS4
Adobe Color EU Extra Settings CS4
Adobe Color JA Extra Settings CS4
Adobe Color NA Recommended Settings CS4
Adobe CSI CS4
Adobe Default Language CS4
Adobe Device Central CS4
Adobe Drive CS4
Adobe Dynamiclink Support
Adobe ExtendScript Toolkit CS4
Adobe Extension Manager CS4
Adobe Flash CS4
Adobe Flash CS4 Extension - Flash Lite STI en
Adobe Flash CS4 Professional
Adobe Flash CS4 STI-en
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Linguistics CS4
Adobe Media Encoder CS4
Adobe Media Player
Adobe Output Module
Adobe PDF Library Files CS4
Adobe Reader 8.2.6
Adobe Search for Help
Adobe Service Manager Extension
Adobe Setup
Adobe Type Support CS4
Adobe Update Manager CS4
Adobe WinSoft Linguistics Plugin
Adobe XMP Panels CS4
AdobeColorCommonSetCMYK
AdobeColorCommonSetRGB
Akamai NetSession Interface
Apple Application Support
Apple Software Update
Audacity 1.3.12 (Unicode)
Barnes & Noble Desktop Reader
BN eReader
BufferChm
calibre
Color Efex Pro 3.0 Corel Sampler
Common
Compatibility Pack for the 2007 Office system
Connect
Contents
Corel KPT Collection
Corel MediaOne
Corel Paint Shop Pro Photo X2
Corel Painter Essentials 4
Corel Painter Photo Essentials 4
Corel PaintShop Photo Pro X3
Corel VideoStudio Pro X4
CorelDRAW Graphics Suite 12
Creative Memories StoryBook Creator Plus
CyberLink Power2Go
D5100
D5100_Help
Destination Component
DeviceDiscovery
DeviceIO
DeviceManagementQFolder
EPSON Copy Utility
Epson Copy Utility 3.4
Epson Event Manager
EPSON Perfection V300 Photo Scanner Driver Update
EPSON Photo Print
EPSON Scan
EPSON TWAIN 5
eSupportQFolder
Evernote v. 4.3.1
Facebook Plug-In
ffdshow [rev 2527] [2008-12-19]
Firebird SQL Server - MAGIX Edition
Gateway Games
Gateway Recovery Management
GEAR driver installer for x86 and x64
GearDrvs
Google Chrome
Google Earth
Google Toolbar for Internet Explorer
Google Update Helper
Google Updater
Guild Wars
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Product Assistant
HP Update
HPProductAssistant
ICA
ImageSkill Background Remover 3
Intel® Rapid Storage Technology
IPM_PSP_CL
IPM_PSP_COM
IPM_VS_Pro
ISCOM
Jasc Paint Shop Pro 8
Java Auto Updater
Java™ 6 Update 22
Java™ 6 Update 26
Java™ 6 Update 5
Java™ 6 Update 7
KB0817 Keyboard Driver
kuler
LabelPrint
LG USB Modem driver
Magic Bullet PhotoLooks for PaintShop Photo Pro
MAGIX 3D Maker (embedded MSI)
MAGIX PhotoStory on CD & DVD 9 deluxe (Design elements)
MAGIX PhotoStory on CD & DVD 9 deluxe (Menu templates)
MAGIX PhotoStory on CD & DVD 9 deluxe (Slideshow maker styles)
MAGIX PhotoStory on CD & DVD 9 deluxe Download Version
MAGIX Screenshare
MAGIX Speed 2 (MSI)
MAGIX Xtreme Photo Designer 6
Malwarebytes' Anti-Malware version 1.51.0.1200
McAfee SiteAdvisor
Microsoft Money Essentials
Microsoft Money Shared Libraries
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Excel MUI (English) 2007
Microsoft Office File Validation Add-In
Microsoft Office Home and Student 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Works
Mozilla Firefox 4.0.1 (x86 en-US)
Mozilla Thunderbird (3.1.11)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Norton 360
NVIDIA PhysX
OpenOffice.org 3.3
OverDrive Media Console
Palm Desktop
PDF Settings CS4
PHOTORECOVERY LE
Photoshop Camera Raw
Pixel Bender Toolkit
PSPPContent
PSPPRO_DCRAW
PureHD
Python 2.7
Python 2.7 pycrypto-2.1.0
QuickTime
Realtek USB 2.0 Card Reader
Rosetta Stone Ltd Services
Rosetta Stone TOTALe
SAMSUNG USB Driver for Mobile Phones
ScanToWeb
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB2509488)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft Office 2007 System (KB2541012)
Security Update for Microsoft Office Excel 2007 (KB2541007)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office PowerPoint 2007 (KB2535818)
Security Update for Microsoft Office PowerPoint Viewer 2007 (KB2464623)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Security Update for Windows Media Encoder (KB2447961)
Setup
SF_CDA_ProductContext
SF_CDA_Software
Share
Skype Toolbars
Skype™ 5.1
SmartSound Common Data
SmartSound Quicktracks 5
SolutionCenter
Sony Preset Manager 2.0e
Sony Sound Forge Audio Studio 9.0
Spelling Dictionaries Support For Adobe Reader 8
Status
Suite Shared Configuration CS4
System Requirements Lab
TomTom HOME 2.8.2.2264
TomTom HOME Visual Studio Merge Modules
Toolbox
TrayApp
UnloadSupport
Update for 2007 Microsoft Office System (KB2284654)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 System (KB2539530)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
VIO
VSClassic
VSPro
WebReg
Windows Media Encoder 9 Series
WinZip 14.5
WModem Driver Installer
World of Warcraft
.
==== Event Viewer Messages From Past Week ========
.
7/2/2011 3:06:18 PM, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service.
7/2/2011 11:38:27 AM, Error: Service Control Manager [7022] - The HP CUE DeviceDiscovery Service service hung on starting.
7/2/2011 11:37:31 AM, Error: Service Control Manager [7000] - The int15 service failed to start due to the following error: A device attached to the system is not functioning.
6/30/2011 3:28:31 AM, Error: Microsoft-Windows-ResourcePublication [1002] - Element ProviderMicrosoft.Base.Publication/Publication/Computer failed to publish. Ensure that both PKEY_PUBSVCS_METADATA and PKEY_PUBSVCS_TYPE are set properly on the function instance and there were no errors adding the function instance.
.
==== End Of File ===========================
Thank you so much folks!!
Hi again guys. Just reviewed a rather alarming entry in my Norton 360 log. Thought you might like to see it and offer some incite.
So the file was removed from my desktop and I am a little concerned about replacing it.File Insight
otl.exe (Trojan,Gen.2)
This threat has been removed.
No further action is needed.
Details
Few Users, Risk High
Origin
Downloaded from http://oldtimer.geekstogo.com/OTL.exe
Activity
File: c:usersgeoffdesktopotl.exe
Removed
Infected File: c:usersgeoffdesktopotl.exe
No fix attempted
File: c:usersgeoffdesktopotl.exe
No Action Required
Advice appreciated. Thanks a ton!
