100k searches

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:34:23 AM, on 8/8/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17098)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\SpyNoMore\SNM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DellSupport\DSAgnt.exe
C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe
C:\Program Files\FinePixViewerS\QuickDCF2.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\David.VICKIE\My Documents\Downloads\OTL.exe
C:\WINDOWS\notepad.exe
C:\Documents and Settings\David.VICKIE\My Documents\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client;=dell-usuk&channel;=us
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://downloads.yahoo.com/internetexplorer/welcome.php
O2 - BHO: &Yahoo;! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O2 - BHO: (no name) - {0E349C07-A53A-44A9-AA35-50EE7B2198CF} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll
O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Spybot-S&D; IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: (no name) - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - (no file)
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: (no name) - {6AFB6F98-289C-442E-B577-5E5125C742E2} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {79C401C6-251D-4358-8FA5-348CC59A8D80} - (no file)
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110515074214.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll
O3 - Toolbar: &Google; Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [DLCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCFtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Nikon Transfer Monitor] C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Ihufokofatahix] rundll32.exe "C:\WINDOWS\uyoyukejub.dll",Startup
O4 - HKLM\..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe /startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DellSupport] "C:\Program Files\DellSupport\DSAgnt.exe" /startup
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler
O4 - Global Startup: Exif Launcher S.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O8 - Extra context menu item: &Google; Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate; English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\npjpi160_20.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\npjpi160_20.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01016526-5E80-11D8-9E86-0007E96C65AE} (SmartAccess Ctl Class) - https://install.charter.com/diskless/bin/ssctlsma.dll
O16 - DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} (get_atlcom Class) - http://apps.corel.com/nos_dl_manager_dev/p…IEGetPlugin.ocx
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftu…b?1212865661296
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://l.yimg.com/jh/games/web_games/popca…aploader_v6.cab
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} (GpcContainer Class) - https://printwebinars.webex.com/client/T27L/nbr/ieatgpc.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: cocchs.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O20 - Winlogon Notify: ljJBtqpm - Invalid registry found
O20 - Winlogon Notify: nnnolmm - nnnolmm.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: dlcf_device - - C:\WINDOWS\system32\dlcfcoms.exe
O23 - Service: DSBrokerService - Unknown owner - C:\Program Files\DellSupport\brkrsvc.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\WildTangent\Apps\Dell Game Console\GameConsoleService.exe
O23 - Service: Google Update Service (gupdate1ca1a11faee1f5a) (gupdate1ca1a11faee1f5a) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intuit Update Service (IntuitUpdateService) - Intuit Inc. - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel® Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe

–
End of file - 15302 bytes
OTL logfile created on: 8/8/2011 11:21:17 AM - Run 2
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\David.VICKIE\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

510.07 Mb Total Physical Memory | 111.20 Mb Available Physical Memory | 21.80% Memory free
1.22 Gb Paging File | 0.55 Gb Available in Paging File | 45.47% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 145.65 Gb Total Space | 47.45 Gb Free Space | 32.58% Space Free | Partition Type: NTFS

Computer Name: VICKIE | User Name: David | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\David.VICKIE\My Documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
PRC - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\SpyNoMore\SNM.exe (Illysoft LLC)
PRC - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
PRC - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\DellSupport\DSAgnt.exe (Gteko Ltd.)
PRC - C:\Program Files\FinePixViewerS\QuickDCF2.exe (FUJIFILM Corporation)
PRC - C:\Program Files\Dell\Media Experience\DMXLauncher.exe ()
PRC - C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
PRC - C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\David.VICKIE\My Documents\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (AppMgmt) – File not found
SRV - (McComponentHostService) – C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (mfevtp) – C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe (McAfee, Inc.)
SRV - (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter) – C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (sdAuxService) – C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
SRV - (MSK80Service) – C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McProxy) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McNASvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McNaiAnn) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (mcmscsvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McMPFSvc) – C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (IntuitUpdateService) – C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
SRV - (McODS) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (mfefire) – C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.)
SRV - (McShield) – C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()
SRV - (sdCoreService) – C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)
SRV - (GameConsoleService) – C:\Program Files\WildTangent\Apps\Dell Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (DSBrokerService) – C:\Program Files\DellSupport\brkrsvc.exe ()
SRV - (dlcf_device) – C:\WINDOWS\System32\dlcfcoms.exe ( )
SRV - (KodakCCS) – C:\WINDOWS\system32\drivers\KodakCCS.exe (Eastman Kodak Company)


========== Driver Services (SafeList) ==========

DRV - (Cdfs) – C:\WINDOWS\System32\drivers\cdfs.sys ()
DRV - (mfehidk) – C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfefirek) – C:\WINDOWS\system32\drivers\mfefirek.sys (McAfee, Inc.)
DRV - (mfeapfk) – C:\WINDOWS\system32\drivers\mfeapfk.sys (McAfee, Inc.)
DRV - (mfendiskmp) – C:\WINDOWS\system32\drivers\mfendisk.sys (McAfee, Inc.)
DRV - (mfendisk) – C:\WINDOWS\system32\drivers\mfendisk.sys (McAfee, Inc.)
DRV - (mferkdet) – C:\WINDOWS\system32\drivers\mferkdet.sys (McAfee, Inc.)
DRV - (mfetdi2k) – C:\WINDOWS\system32\drivers\mfetdi2k.sys (McAfee, Inc.)
DRV - (cfwids) – C:\WINDOWS\system32\drivers\cfwids.sys (McAfee, Inc.)
DRV - (mfebopk) – C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (mfesmfk) – C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (mferkdk) – C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (IKFileSec) – C:\WINDOWS\system32\drivers\ikfilesec.sys (PCTools Research Pty Ltd.)
DRV - (IKSysSec) – C:\WINDOWS\system32\drivers\iksyssec.sys (PCTools Research Pty Ltd.)
DRV - (IKSysFlt) – C:\WINDOWS\system32\drivers\iksysflt.sys (PCTools Research Pty Ltd.)
DRV - (UsbDiag) – C:\WINDOWS\system32\drivers\lgusbdiag.sys (LG Electronics Inc.)
DRV - (USBModem) – C:\WINDOWS\system32\drivers\lgusbmodem.sys (LG Electronics Inc.)
DRV - (usbbus) – C:\WINDOWS\system32\drivers\lgusbbus.sys (LG Electronics Inc.)
DRV - (dsunidrv) – C:\WINDOWS\system32\drivers\dsunidrv.sys (Gteko Ltd.)
DRV - (DSproct) – C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys (Gteko Ltd.)
DRV - (ASCTRM) – C:\WINDOWS\System32\drivers\asctrm.sys (Windows ® 2000 DDK provider)
DRV - (STHDA) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (DLAUDFAM) – C:\WINDOWS\system32\DLA\DLAUDFAM.SYS (Sonic Solutions)
DRV - (DLAUDF_M) – C:\WINDOWS\system32\DLA\DLAUDF_M.SYS (Sonic Solutions)
DRV - (DLAIFS_M) – C:\WINDOWS\system32\DLA\DLAIFS_M.SYS (Sonic Solutions)
DRV - (DLABOIOM) – C:\WINDOWS\system32\DLA\DLABOIOM.SYS (Sonic Solutions)
DRV - (DLAOPIOM) – C:\WINDOWS\system32\DLA\DLAOPIOM.SYS (Sonic Solutions)
DRV - (DLAPoolM) – C:\WINDOWS\system32\DLA\DLAPoolM.SYS (Sonic Solutions)
DRV - (DLADResN) – C:\WINDOWS\system32\DLA\DLADResN.SYS (Sonic Solutions)
DRV - (DLACDBHM) – C:\WINDOWS\system32\drivers\DLACDBHM.SYS (Sonic Solutions)
DRV - (DLARTL_N) – C:\WINDOWS\system32\drivers\DLARTL_N.SYS (Sonic Solutions)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (DcCam) – C:\WINDOWS\system32\drivers\DcCam.sys (Eastman Kodak Company)
DRV - (Exportit) – C:\WINDOWS\system32\drivers\ExportIt.sys (Eastman Kodak Company)
DRV - (DcPTP) – C:\WINDOWS\system32\drivers\DcPtp.sys (Eastman Kodak Company)
DRV - (DcLps) – C:\WINDOWS\system32\drivers\DcLps.sys (Eastman Kodak Company)
DRV - (DCFS2K) – C:\WINDOWS\system32\drivers\DCFS2k.sys (Eastman Kodak Company)
DRV - (DcFpoint) – C:\WINDOWS\system32\drivers\DcFpoint.sys (Eastman Kodak Company)
DRV - (USBCM) – C:\WINDOWS\system32\drivers\Sacm2A.sys ( )
DRV - (HSFHWBS2) – C:\WINDOWS\system32\drivers\HSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) – C:\WINDOWS\system32\drivers\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (SbcpHid) – C:\WINDOWS\system32\drivers\SbcpHid.sys ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://news.yahoo.com [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://news.yahoo.com [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client;=dell-usuk&channel;=us
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/hws/sb/dell-usuk/en/…html?channel=us
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.com/ig/dell?hl=en&client;=dell-usuk&channel;=us

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://news.yahoo.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/hws/sb/dell-usuk/en/…html?channel=us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://news.yahoo.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/?ilc=1"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MVT: C:\Program Files\McAfee\Supportability\MVT\npmvtplugin.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.2: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.3: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011/02/23 10:28:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011/02/23 10:28:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{04A7224F-775C-4F64-91D2-A7C0917ED40C}: C:\Documents and Settings\David Medley\Local Settings\Application Data\{04A7224F-775C-4F64-91D2-A7C0917ED40C}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{8BC476E7-0C35-4975-9B95-EB28E64EFE8F}: C:\Documents and Settings\The Momma\Local Settings\Application Data\{8BC476E7-0C35-4975-9B95-EB28E64EFE8F}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{0D2687C0-7389-4620-9C71-0669E672296D}: C:\Documents and Settings\David.VICKIE\Local Settings\Application Data\{0D2687C0-7389-4620-9C71-0669E672296D} [2011/06/24 09:21:06 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/05/15 07:42:14 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/17 08:33:36 | 000,000,000 | —D | M]

[2011/06/24 09:22:35 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\David.VICKIE\Application Data\Mozilla\Extensions
[2011/03/24 09:55:29 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/05/26 07:46:46 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) –
[2011/06/24 09:21:06 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\DAVID.VICKIE\LOCAL SETTINGS\APPLICATION DATA\{0D2687C0-7389-4620-9C71-0669E672296D}
[2008/12/12 09:10:19 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/01/20 19:47:24 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/03/18 12:53:24 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/04/14 14:01:38 | 000,024,376 | —- | M] (McAfee, Inc.) – C:\Program Files\mozilla firefox\components\Scriptff.dll
[2010/04/12 17:29:19 | 000,411,368 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml

O1 HOSTS File: ([2004/08/04 05:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (Yahoo! Inc.)
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll ()
O2 - BHO: (no name) - {0E349C07-A53A-44A9-AA35-50EE7B2198CF} - No CLSID value found.
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Program Files\McAfee\MSK\mskapbho.dll ()
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (no name) - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - No CLSID value found.
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions)
O2 - BHO: (no name) - {6AFB6F98-289C-442E-B577-5E5125C742E2} - No CLSID value found.
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (no name) - {79C401C6-251D-4358-8FA5-348CC59A8D80} - No CLSID value found.
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110515074214.dll (McAfee, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll ()
O3 - HKLM\..\Toolbar: (&Google; Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Google; Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [DLCFCATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCFtime.DLL ()
O4 - HKLM..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe ()
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [Ihufokofatahix] C:\WINDOWS\uyoyukejub.dll (Creative)
O4 - HKLM..\Run: [ISTray] C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [Nikon Transfer Monitor] C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe (Illysoft LLC)
O4 - HKCU..\Run: [DellSupport] C:\Program Files\DellSupport\DSAgnt.exe (Gteko Ltd.)
O4 - HKLM..\RunOnceEx: [] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Exif Launcher S.lnk = C:\Program Files\FinePixViewerS\QuickDCF2.exe (FUJIFILM Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\npjpi160_20.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - File not found
O16 - DPF: {01016526-5E80-11D8-9E86-0007E96C65AE} https://install.charter.com/diskless/bin/ssctlsma.dll (SmartAccess Ctl Class)
O16 - DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} http://apps.corel.com/nos_dl_manager_dev/p…IEGetPlugin.ocx (get_atlcom Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1212865661296 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://l.yimg.com/jh/games/web_games/popca…aploader_v6.cab (PopCapLoader Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://printwebinars.webex.com/client/T27L/nbr/ieatgpc.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O18 - Protocol\Handler\siteadvisor {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll ()
O20 - AppInit_DLLs: (cocchs.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\ljJBtqpm: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O20 - Winlogon\Notify\nnnolmm: DllName - nnnolmm.dll - File not found
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O30 - LSA: Authentication Packages - (C:\WINDOWS\system32\pmnmlklL) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 13:04:08 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.VP60 - C:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: wave - C:\WINDOWS\System32\serwvdrv.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/08/08 09:48:08 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\McAfee
[2011/08/08 09:47:31 | 000,384,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\`
[2011/08/06 18:00:13 | 000,000,000 | —D | C] – C:\Program Files\SpyNoMore
[2011/08/06 18:00:13 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\Start Menu\Programs\SpyNoMore
[2011/08/06 17:59:06 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\Desktop\Downloads
[2011/08/06 17:58:52 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\Application Data\GetRightToGo
[2011/08/06 17:58:21 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\My Documents\Downloads
[2011/07/21 13:54:16 | 000,000,000 | R–D | C] – C:\Documents and Settings\David.VICKIE\My Documents\My Videos
[2011/07/12 19:46:03 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\Application Data\GARMIN
[2007/07/30 18:20:27 | 000,015,429 | R— | C] ( ) – C:\WINDOWS\System32\drivers\Sacm2A.sys
[2006/08/07 21:55:14 | 001,183,744 | —- | C] ( ) – C:\WINDOWS\System32\dlcfserv.dll
[2006/08/07 21:55:14 | 001,134,592 | —- | C] ( ) – C:\WINDOWS\System32\dlcfusb1.dll
[2006/08/07 21:55:14 | 000,770,048 | —- | C] ( ) – C:\WINDOWS\System32\dlcfhbn3.dll
[2006/08/07 21:55:14 | 000,704,512 | —- | C] ( ) – C:\WINDOWS\System32\dlcfcomc.dll
[2006/08/07 21:55:14 | 000,638,976 | —- | C] ( ) – C:\WINDOWS\System32\dlcfpmui.dll
[2006/08/07 21:55:14 | 000,491,520 | —- | C] ( ) – C:\WINDOWS\System32\dlcfcoms.exe
[2006/08/07 21:55:14 | 000,483,328 | —- | C] ( ) – C:\WINDOWS\System32\dlcflmpm.dll
[2006/08/07 21:55:14 | 000,413,696 | —- | C] ( ) – C:\WINDOWS\System32\dlcfcomm.dll
[2006/08/07 21:55:14 | 000,372,736 | —- | C] ( ) – C:\WINDOWS\System32\dlcfih.exe
[2006/08/07 21:55:14 | 000,368,640 | —- | C] ( ) – C:\WINDOWS\System32\dlcfcfg.exe
[2006/08/07 21:55:14 | 000,155,648 | —- | C] ( ) – C:\WINDOWS\System32\dlcfprox.dll
[2006/08/07 21:55:14 | 000,114,688 | —- | C] ( ) – C:\WINDOWS\System32\dlcfpplc.dll
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/08/08 11:07:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/08 09:50:41 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/08/08 09:48:27 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/08 09:47:47 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/08/08 09:47:45 | 534,925,312 | -HS- | M] () – C:\hiberfil.sys
[2011/08/08 09:47:35 | 000,384,768 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\`
[2011/08/07 20:23:30 | 000,000,120 | —- | M] () – C:\WINDOWS\Evaxuzagey.dat
[2011/08/07 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\vtscheduletask.job
[2011/08/06 18:00:25 | 000,001,152 | —- | M] () – C:\WINDOWS\System32\windrv.sys
[2011/08/06 18:00:14 | 000,000,658 | —- | M] () – C:\Documents and Settings\David.VICKIE\Desktop\SpyNoMore.lnk
[2011/08/06 17:51:11 | 000,054,016 | —- | M] () – C:\WINDOWS\System32\drivers\vqubvsw.sys
[2011/08/06 08:03:53 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/08/05 00:10:32 | 000,001,813 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2011/08/03 23:56:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/08/03 06:39:09 | 000,000,000 | —- | M] () – C:\WINDOWS\Wqadah.bin
[2011/07/21 13:52:36 | 000,000,800 | —- | M] () – C:\Documents and Settings\David.VICKIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/07/21 13:52:36 | 000,000,782 | —- | M] () – C:\Documents and Settings\David.VICKIE\Desktop\Windows Media Player.lnk
[2011/07/17 08:33:37 | 000,001,729 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/07/13 21:03:07 | 000,144,424 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/06 18:00:25 | 000,001,152 | —- | C] () – C:\WINDOWS\System32\windrv.sys
[2011/08/06 18:00:14 | 000,000,658 | —- | C] () – C:\Documents and Settings\David.VICKIE\Desktop\SpyNoMore.lnk
[2011/08/06 17:51:11 | 000,054,016 | —- | C] () – C:\WINDOWS\System32\drivers\vqubvsw.sys
[2011/07/21 13:52:36 | 000,000,800 | —- | C] () – C:\Documents and Settings\David.VICKIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/06/21 16:34:16 | 000,054,016 | —- | C] () – C:\WINDOWS\System32\drivers\rapjhmy.sys
[2011/03/31 09:44:13 | 000,000,000 | —- | C] () – C:\WINDOWS\Wqadah.bin
[2011/03/31 09:44:12 | 000,000,120 | —- | C] () – C:\WINDOWS\Evaxuzagey.dat
[2011/01/10 19:55:21 | 000,000,000 | —- | C] () – C:\WINDOWS\ViewNX.INI
[2011/01/05 17:32:26 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\URLs
[2011/01/05 17:32:25 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdw.DAT
[2011/01/05 17:32:25 | 000,000,012 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Woodwind
[2011/01/05 17:29:19 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Trumpet Section
[2011/01/05 17:29:19 | 000,000,012 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Vocal Transformer
[2011/01/05 17:29:18 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/11/17 20:11:31 | 000,026,400 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2010/03/04 09:26:17 | 000,000,330 | -HS- | C] () – C:\WINDOWS\WSYS049.SYS
[2010/03/04 09:26:17 | 000,000,049 | —- | C] () – C:\WINDOWS\Progs_.ini
[2008/09/13 18:14:08 | 001,066,915 | -HS- | C] () – C:\WINDOWS\System32\pinehwlp.ini
[2008/09/11 18:05:48 | 001,166,208 | -HS- | C] () – C:\WINDOWS\System32\uunrvtnd.ini
[2008/09/10 15:18:39 | 000,791,616 | -HS- | C] () – C:\WINDOWS\System32\Llklmnmp.ini2
[2008/09/10 15:18:39 | 000,791,616 | -HS- | C] () – C:\WINDOWS\System32\Llklmnmp.ini
[2008/07/23 11:50:52 | 003,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2008/05/26 21:59:42 | 000,018,904 | —- | C] () – C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | —- | C] () – C:\WINDOWS\System32\structuredqueryschema.bin
[2008/05/26 12:24:21 | 000,049,152 | —- | C] () – C:\WINDOWS\System32\VZWDLManager.dll
[2007/12/27 21:24:43 | 000,002,177 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2007/12/10 17:07:09 | 000,000,736 | —- | C] () – C:\WINDOWS\DigimaxMaster.INI
[2007/11/25 13:03:22 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2007/10/11 07:59:06 | 000,693,712 | -HS- | C] () – C:\WINDOWS\System32\xisyteuw.ini
[2007/10/09 16:09:57 | 000,693,592 | -HS- | C] () – C:\WINDOWS\System32\lfmfpayd.ini
[2007/10/08 13:49:49 | 000,693,688 | -HS- | C] () – C:\WINDOWS\System32\spklubgw.ini
[2007/10/07 13:45:03 | 000,693,550 | -HS- | C] () – C:\WINDOWS\System32\xojacwhe.ini
[2007/10/05 16:47:41 | 000,694,081 | -HS- | C] () – C:\WINDOWS\System32\ctnwifqo.ini
[2007/10/04 15:41:24 | 000,693,961 | -HS- | C] () – C:\WINDOWS\System32\qskckift.ini
[2007/10/03 15:34:14 | 000,693,832 | -HS- | C] () – C:\WINDOWS\System32\vskmlvmr.ini
[2007/10/02 15:38:42 | 000,693,715 | -HS- | C] () – C:\WINDOWS\System32\jvbqkucn.ini
[2007/10/01 15:40:28 | 000,693,481 | -HS- | C] () – C:\WINDOWS\System32\xogffygx.ini
[2007/09/30 12:24:24 | 000,693,901 | -HS- | C] () – C:\WINDOWS\System32\niovswch.ini
[2007/09/27 20:34:54 | 000,693,841 | -HS- | C] () – C:\WINDOWS\System32\jjaonpho.ini
[2007/09/26 20:33:26 | 000,693,652 | -HS- | C] () – C:\WINDOWS\System32\jolrfgvt.ini
[2007/09/25 18:42:43 | 000,693,541 | -HS- | C] () – C:\WINDOWS\System32\uewycxql.ini
[2007/09/24 15:59:31 | 000,693,481 | -HS- | C] () – C:\WINDOWS\System32\nxkyhkfq.ini
[2007/09/22 19:45:19 | 000,693,490 | -HS- | C] () – C:\WINDOWS\System32\osjnqlus.ini
[2007/09/21 17:08:57 | 000,693,550 | -HS- | C] () – C:\WINDOWS\System32\uwdodxhr.ini
[2007/07/30 18:20:27 | 000,135,168 | R— | C] () – C:\WINDOWS\UNDPX2A.exe
[2007/07/30 18:20:27 | 000,053,693 | R— | C] () – C:\WINDOWS\UNDPX2A.sys
[2007/06/11 20:20:39 | 000,000,059 | —- | C] () – C:\WINDOWS\VistaEmail.ini
[2007/03/23 23:11:07 | 000,000,000 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2007/01/05 14:07:11 | 000,076,288 | —- | C] () – C:\WINDOWS\System32\1psiG60XV55.dll
[2006/09/08 19:28:57 | 000,032,768 | —- | C] () – C:\WINDOWS\System32\instlsp.exe
[2006/08/13 14:36:33 | 000,003,350 | -HS- | C] () – C:\WINDOWS\System32\KGyGaAvL.sys
[2006/08/13 14:36:33 | 000,000,088 | RHS- | C] () – C:\WINDOWS\System32\2E3E9ADF88.sys
[2006/08/07 22:37:04 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2006/08/07 22:28:36 | 000,000,175 | —- | C] () – C:\WINDOWS\wininit.ini
[2006/08/07 22:24:52 | 000,149,504 | —- | C] () – C:\WINDOWS\UNWISE.EXE
[2006/08/07 22:20:30 | 000,000,335 | —- | C] () – C:\WINDOWS\nsreg.dat
[2006/08/07 22:18:28 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/08/07 21:55:14 | 000,430,080 | —- | C] () – C:\WINDOWS\System32\dlcfutil.dll
[2006/08/07 21:55:14 | 000,221,184 | —- | C] () – C:\WINDOWS\System32\dlcfinsb.dll
[2006/08/07 21:55:14 | 000,155,648 | —- | C] () – C:\WINDOWS\System32\dlcfins.dll
[2006/08/07 21:55:14 | 000,131,072 | —- | C] () – C:\WINDOWS\System32\dlcfjswr.dll
[2006/08/07 21:55:14 | 000,106,496 | —- | C] () – C:\WINDOWS\System32\dlcfinsr.dll
[2006/08/07 21:55:14 | 000,086,016 | —- | C] () – C:\WINDOWS\System32\dlcfcub.dll
[2006/08/07 21:55:14 | 000,073,728 | —- | C] () – C:\WINDOWS\System32\dlcfcu.dll
[2006/08/07 21:55:14 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\dlcfcfg.dll
[2006/08/07 21:55:14 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\dlcfvs.dll
[2006/08/07 21:55:14 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\dlcfcur.dll
[2006/08/07 21:55:02 | 000,049,152 | —- | C] () – C:\WINDOWS\setpwrcg.exe
[2006/08/07 21:54:58 | 000,095,617 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2006/08/07 21:54:34 | 000,000,392 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2005/11/10 08:56:34 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2005/08/31 12:11:14 | 000,000,442 | —- | C] () – C:\WINDOWS\System32\dlcfplc.ini
[2004/08/10 13:12:05 | 000,000,780 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/10 13:07:31 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2004/08/10 13:02:15 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2004/08/10 13:01:18 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/08/10 12:57:52 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2004/08/10 12:57:15 | 000,144,424 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2004/08/10 12:51:21 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/08/10 12:51:20 | 000,467,306 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2004/08/10 12:51:20 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004/08/10 12:51:20 | 000,080,138 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2004/08/10 12:51:20 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004/08/10 12:51:18 | 000,004,627 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2004/08/10 12:51:17 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2004/08/10 12:51:16 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2004/08/10 12:51:12 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004/08/10 12:51:11 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004/08/10 12:51:05 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004/08/10 12:50:56 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2004/08/10 12:50:55 | 000,127,488 | —- | C] () – C:\WINDOWS\System32\drivers\cdfs.sys
[2004/01/18 20:11:47 | 000,076,800 | R— | C] () – C:\WINDOWS\System32\1psi60X.dll
[2003/01/07 15:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2001/08/23 14:00:00 | 000,022,400 | —- | C] () – C:\WINDOWS\System32\drivers\SbcpHid.sys
[2000/09/08 17:53:50 | 000,073,839 | —- | C] () – C:\WINDOWS\System32\KodakOneTouch.dll

========== LOP Check ==========

[2011/01/05 17:32:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EnterNHelp
[2011/01/05 17:30:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nikon
[2009/09/23 23:10:23 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2008/01/31 19:39:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SupportSoft
[2010/03/21 13:43:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2011/01/05 17:32:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ultima_T15
[2006/08/07 22:21:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2007/02/24 20:30:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WildTangent
[2010/10/02 21:50:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011/07/12 19:46:04 | 000,000,000 | —D | M] – C:\Documents and Settings\David.VICKIE\Application Data\GARMIN
[2011/08/06 17:59:50 | 000,000,000 | —D | M] – C:\Documents and Settings\David.VICKIE\Application Data\GetRightToGo
[2011/06/24 18:58:39 | 000,000,000 | —D | M] – C:\Documents and Settings\David.VICKIE\Application Data\IObit
[2011/08/07 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\vtscheduletask.job

========== Purity Check ==========



========== Custom Scans ==========


< >

< %SYSTEMDRIVE%\*.* >
[2004/08/10 13:04:08 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2009/09/24 20:13:20 | 000,000,211 | RHS- | M] () – C:\boot.ini
[2007/10/12 20:24:49 | 000,032,956 | —- | M] () – C:\check_LSA7.txt
[2004/08/10 13:04:08 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2006/08/07 21:59:56 | 000,006,687 | RH– | M] () – C:\dell.sdr
[2011/08/06 17:51:51 | 000,008,526 | —- | M] () – C:\dlcf.log
[2011/03/31 21:16:48 | 000,000,045 | —- | M] () – C:\error.log
[2011/08/08 09:47:45 | 534,925,312 | -HS- | M] () – C:\hiberfil.sys
[2006/08/12 09:07:45 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2004/08/10 13:04:08 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2006/08/07 22:21:36 | 000,000,835 | -H– | M] () – C:\IPH.PH
[2004/08/10 13:04:08 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/08/04 05:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/09/02 10:18:49 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/08/08 09:47:42 | 805,306,368 | -HS- | M] () – C:\pagefile.sys
[2009/09/23 23:30:48 | 000,000,268 | -H– | M] () – C:\sqmdata00.sqm
[2009/09/24 19:27:08 | 000,000,268 | -H– | M] () – C:\sqmdata01.sqm
[2009/09/24 19:33:17 | 000,000,268 | -H– | M] () – C:\sqmdata02.sqm
[2009/09/24 22:09:52 | 000,000,268 | -H– | M] () – C:\sqmdata03.sqm
[2009/09/27 07:13:43 | 000,000,268 | -H– | M] () – C:\sqmdata04.sqm
[2009/09/27 20:36:37 | 000,000,268 | -H– | M] () – C:\sqmdata05.sqm
[2009/09/28 12:57:45 | 000,000,268 | -H– | M] () – C:\sqmdata06.sqm
[2009/09/28 22:30:51 | 000,000,268 | -H– | M] () – C:\sqmdata07.sqm
[2009/09/30 18:29:55 | 000,000,268 | -H– | M] () – C:\sqmdata08.sqm
[2009/09/30 18:31:01 | 000,000,268 | -H– | M] () – C:\sqmdata09.sqm
[2009/09/30 22:38:54 | 000,000,268 | -H– | M] () – C:\sqmdata10.sqm
[2009/10/05 08:58:52 | 000,000,268 | -H– | M] () – C:\sqmdata11.sqm
[2009/10/06 08:17:21 | 000,000,268 | -H– | M] () – C:\sqmdata12.sqm
[2009/10/09 21:17:59 | 000,000,268 | -H– | M] () – C:\sqmdata13.sqm
[2009/10/13 14:03:00 | 000,000,268 | -H– | M] () – C:\sqmdata14.sqm
[2009/09/20 15:06:36 | 000,000,268 | -H– | M] () – C:\sqmdata15.sqm
[2009/09/20 21:20:23 | 000,000,268 | -H– | M] () – C:\sqmdata16.sqm
[2009/09/21 19:55:49 | 000,000,268 | -H– | M] () – C:\sqmdata17.sqm
[2009/09/21 19:56:57 | 000,000,268 | -H– | M] () – C:\sqmdata18.sqm
[2009/09/23 23:29:46 | 000,000,268 | -H– | M] () – C:\sqmdata19.sqm
[2009/09/23 23:29:46 | 000,000,244 | -H– | M] () – C:\sqmnoopt00.sqm
[2009/09/23 23:30:48 | 000,000,244 | -H– | M] () – C:\sqmnoopt01.sqm
[2009/09/24 19:27:08 | 000,000,244 | -H– | M] () – C:\sqmnoopt02.sqm
[2009/09/24 19:33:17 | 000,000,244 | -H– | M] () – C:\sqmnoopt03.sqm
[2009/09/24 22:09:51 | 000,000,244 | -H– | M] () – C:\sqmnoopt04.sqm
[2009/09/27 07:13:43 | 000,000,244 | -H– | M] () – C:\sqmnoopt05.sqm
[2009/09/27 20:36:36 | 000,000,244 | -H– | M] () – C:\sqmnoopt06.sqm
[2009/09/28 12:57:45 | 000,000,244 | -H– | M] () – C:\sqmnoopt07.sqm
[2009/09/28 22:30:50 | 000,000,244 | -H– | M] () – C:\sqmnoopt08.sqm
[2009/09/30 18:29:54 | 000,000,244 | -H– | M] () – C:\sqmnoopt09.sqm
[2009/09/30 18:31:01 | 000,000,244 | -H– | M] () – C:\sqmnoopt10.sqm
[2009/09/30 22:38:54 | 000,000,244 | -H– | M] () – C:\sqmnoopt11.sqm
[2009/10/05 08:58:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt12.sqm
[2009/10/06 08:17:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt13.sqm
[2009/10/09 21:17:58 | 000,000,244 | -H– | M] () – C:\sqmnoopt14.sqm
[2009/10/13 14:02:59 | 000,000,244 | -H– | M] () – C:\sqmnoopt15.sqm
[2009/09/20 15:06:36 | 000,000,244 | -H– | M] () – C:\sqmnoopt16.sqm
[2009/09/20 21:20:23 | 000,000,244 | -H– | M] () – C:\sqmnoopt17.sqm
[2009/09/21 19:55:48 | 000,000,244 | -H– | M] () – C:\sqmnoopt18.sqm
[2009/09/21 19:56:56 | 000,000,244 | -H– | M] () – C:\sqmnoopt19.sqm
[2006/08/07 22:21:44 | 000,000,087 | —- | M] () – C:\SystemInfo.ini
[2008/12/18 21:17:40 | 000,006,799 | —- | M] () – C:\YServer.txt

< %systemroot%\Fonts\*.com >
[2006/04/18 16:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 15:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 16:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 15:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/08/10 13:03:42 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2005/09/29 18:28:54 | 000,073,728 | —- | M] (Dell, Inc.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\dlcfPP5C.DLL
[2008/07/06 07:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/04/09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 05:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2005/05/19 17:10:21 | 000,294,912 | —- | M] (Simple Star, Inc.) – C:\WINDOWS\Walgreens PhotoShow.scr
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004/08/10 12:56:48 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2004/08/10 12:56:46 | 000,634,880 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2004/08/10 12:56:46 | 000,872,448 | —- | M] () – C:\WINDOWS\System32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/09/02 10:30:07 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/06/24 09:20:12 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\David.VICKIE\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/08/10 13:08:38 | 000,000,079 | —- | M] () – C:\Documents and Settings\David.VICKIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-07-13 23:08:21

========== Alternate Data Streams ==========

@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1

< End of report >
OTL logfile created on: 8/8/2011 11:21:17 AM - Run 2
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Documents and Settings\David.VICKIE\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

510.07 Mb Total Physical Memory | 111.20 Mb Available Physical Memory | 21.80% Memory free
1.22 Gb Paging File | 0.55 Gb Available in Paging File | 45.47% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 145.65 Gb Total Space | 47.45 Gb Free Space | 32.58% Space Free | Partition Type: NTFS

Computer Name: VICKIE | User Name: David | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\David.VICKIE\My Documents\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
PRC - C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
PRC - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe (McAfee, Inc.)
PRC - C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\SpyNoMore\SNM.exe (Illysoft LLC)
PRC - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
PRC - C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\DellSupport\DSAgnt.exe (Gteko Ltd.)
PRC - C:\Program Files\FinePixViewerS\QuickDCF2.exe (FUJIFILM Corporation)
PRC - C:\Program Files\Dell\Media Experience\DMXLauncher.exe ()
PRC - C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
PRC - C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\David.VICKIE\My Documents\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (AppMgmt) – File not found
SRV - (McComponentHostService) – C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (mfevtp) – C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe (McAfee, Inc.)
SRV - (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter) – C:\Program Files\Dell Support Center\bin\sprtsvc.exe (SupportSoft, Inc.)
SRV - (sdAuxService) – C:\Program Files\Spyware Doctor\pctsAuxs.exe (PC Tools)
SRV - (MSK80Service) – C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McProxy) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McNASvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McNaiAnn) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (mcmscsvc) – C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (McMPFSvc) – C:\Program Files\Common Files\Mcafee\McSvcHost\McSvHost.exe (McAfee, Inc.)
SRV - (IntuitUpdateService) – C:\Program Files\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
SRV - (McODS) – C:\Program Files\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (mfefire) – C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (McAfee, Inc.)
SRV - (McShield) – C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe ()
SRV - (sdCoreService) – C:\Program Files\Spyware Doctor\pctsSvc.exe (PC Tools)
SRV - (GameConsoleService) – C:\Program Files\WildTangent\Apps\Dell Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (DSBrokerService) – C:\Program Files\DellSupport\brkrsvc.exe ()
SRV - (dlcf_device) – C:\WINDOWS\System32\dlcfcoms.exe ( )
SRV - (KodakCCS) – C:\WINDOWS\system32\drivers\KodakCCS.exe (Eastman Kodak Company)


========== Driver Services (SafeList) ==========

DRV - (Cdfs) – C:\WINDOWS\System32\drivers\cdfs.sys ()
DRV - (mfehidk) – C:\WINDOWS\system32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfefirek) – C:\WINDOWS\system32\drivers\mfefirek.sys (McAfee, Inc.)
DRV - (mfeapfk) – C:\WINDOWS\system32\drivers\mfeapfk.sys (McAfee, Inc.)
DRV - (mfendiskmp) – C:\WINDOWS\system32\drivers\mfendisk.sys (McAfee, Inc.)
DRV - (mfendisk) – C:\WINDOWS\system32\drivers\mfendisk.sys (McAfee, Inc.)
DRV - (mferkdet) – C:\WINDOWS\system32\drivers\mferkdet.sys (McAfee, Inc.)
DRV - (mfetdi2k) – C:\WINDOWS\system32\drivers\mfetdi2k.sys (McAfee, Inc.)
DRV - (cfwids) – C:\WINDOWS\system32\drivers\cfwids.sys (McAfee, Inc.)
DRV - (mfebopk) – C:\WINDOWS\system32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASENUM) – C:\Program Files\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (mfesmfk) – C:\WINDOWS\system32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (mferkdk) – C:\WINDOWS\system32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (IKFileSec) – C:\WINDOWS\system32\drivers\ikfilesec.sys (PCTools Research Pty Ltd.)
DRV - (IKSysSec) – C:\WINDOWS\system32\drivers\iksyssec.sys (PCTools Research Pty Ltd.)
DRV - (IKSysFlt) – C:\WINDOWS\system32\drivers\iksysflt.sys (PCTools Research Pty Ltd.)
DRV - (UsbDiag) – C:\WINDOWS\system32\drivers\lgusbdiag.sys (LG Electronics Inc.)
DRV - (USBModem) – C:\WINDOWS\system32\drivers\lgusbmodem.sys (LG Electronics Inc.)
DRV - (usbbus) – C:\WINDOWS\system32\drivers\lgusbbus.sys (LG Electronics Inc.)
DRV - (dsunidrv) – C:\WINDOWS\system32\drivers\dsunidrv.sys (Gteko Ltd.)
DRV - (DSproct) – C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys (Gteko Ltd.)
DRV - (ASCTRM) – C:\WINDOWS\System32\drivers\asctrm.sys (Windows ® 2000 DDK provider)
DRV - (STHDA) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (DLAUDFAM) – C:\WINDOWS\system32\DLA\DLAUDFAM.SYS (Sonic Solutions)
DRV - (DLAUDF_M) – C:\WINDOWS\system32\DLA\DLAUDF_M.SYS (Sonic Solutions)
DRV - (DLAIFS_M) – C:\WINDOWS\system32\DLA\DLAIFS_M.SYS (Sonic Solutions)
DRV - (DLABOIOM) – C:\WINDOWS\system32\DLA\DLABOIOM.SYS (Sonic Solutions)
DRV - (DLAOPIOM) – C:\WINDOWS\system32\DLA\DLAOPIOM.SYS (Sonic Solutions)
DRV - (DLAPoolM) – C:\WINDOWS\system32\DLA\DLAPoolM.SYS (Sonic Solutions)
DRV - (DLADResN) – C:\WINDOWS\system32\DLA\DLADResN.SYS (Sonic Solutions)
DRV - (DLACDBHM) – C:\WINDOWS\system32\drivers\DLACDBHM.SYS (Sonic Solutions)
DRV - (DLARTL_N) – C:\WINDOWS\system32\drivers\DLARTL_N.SYS (Sonic Solutions)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (DcCam) – C:\WINDOWS\system32\drivers\DcCam.sys (Eastman Kodak Company)
DRV - (Exportit) – C:\WINDOWS\system32\drivers\ExportIt.sys (Eastman Kodak Company)
DRV - (DcPTP) – C:\WINDOWS\system32\drivers\DcPtp.sys (Eastman Kodak Company)
DRV - (DcLps) – C:\WINDOWS\system32\drivers\DcLps.sys (Eastman Kodak Company)
DRV - (DCFS2K) – C:\WINDOWS\system32\drivers\DCFS2k.sys (Eastman Kodak Company)
DRV - (DcFpoint) – C:\WINDOWS\system32\drivers\DcFpoint.sys (Eastman Kodak Company)
DRV - (USBCM) – C:\WINDOWS\system32\drivers\Sacm2A.sys ( )
DRV - (HSFHWBS2) – C:\WINDOWS\system32\drivers\HSFHWBS2.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) – C:\WINDOWS\system32\drivers\HSF_DP.sys (Conexant Systems, Inc.)
DRV - (SbcpHid) – C:\WINDOWS\system32\drivers\SbcpHid.sys ()


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://news.yahoo.com [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://news.yahoo.com [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client;=dell-usuk&channel;=us
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/hws/sb/dell-usuk/en/…html?channel=us
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.com/ig/dell?hl=en&client;=dell-usuk&channel;=us

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://news.yahoo.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/hws/sb/dell-usuk/en/…html?channel=us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://news.yahoo.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/?ilc=1"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MVT: C:\Program Files\McAfee\Supportability\MVT\npmvtplugin.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.2: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.3: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011/02/23 10:28:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011/02/23 10:28:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{04A7224F-775C-4F64-91D2-A7C0917ED40C}: C:\Documents and Settings\David Medley\Local Settings\Application Data\{04A7224F-775C-4F64-91D2-A7C0917ED40C}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{8BC476E7-0C35-4975-9B95-EB28E64EFE8F}: C:\Documents and Settings\The Momma\Local Settings\Application Data\{8BC476E7-0C35-4975-9B95-EB28E64EFE8F}
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{0D2687C0-7389-4620-9C71-0669E672296D}: C:\Documents and Settings\David.VICKIE\Local Settings\Application Data\{0D2687C0-7389-4620-9C71-0669E672296D} [2011/06/24 09:21:06 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/05/15 07:42:14 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/17 08:33:36 | 000,000,000 | —D | M]

[2011/06/24 09:22:35 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\David.VICKIE\Application Data\Mozilla\Extensions
[2011/03/24 09:55:29 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/05/26 07:46:46 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) –
[2011/06/24 09:21:06 | 000,000,000 | —D | M] (XULRunner) – C:\DOCUMENTS AND SETTINGS\DAVID.VICKIE\LOCAL SETTINGS\APPLICATION DATA\{0D2687C0-7389-4620-9C71-0669E672296D}
[2008/12/12 09:10:19 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/01/20 19:47:24 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/03/18 12:53:24 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/04/14 14:01:38 | 000,024,376 | —- | M] (McAfee, Inc.) – C:\Program Files\mozilla firefox\components\Scriptff.dll
[2010/04/12 17:29:19 | 000,411,368 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml

O1 HOSTS File: ([2004/08/04 05:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo;! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\yt.dll (Yahoo! Inc.)
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll ()
O2 - BHO: (no name) - {0E349C07-A53A-44A9-AA35-50EE7B2198CF} - No CLSID value found.
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Program Files\McAfee\MSK\mskapbho.dll ()
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (no name) - {5A263CF7-56A6-4D68-A8CF-345BE45BC911} - No CLSID value found.
O2 - BHO: (Yahoo! IE Services Button) - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions)
O2 - BHO: (no name) - {6AFB6F98-289C-442E-B577-5E5125C742E2} - No CLSID value found.
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (no name) - {79C401C6-251D-4358-8FA5-348CC59A8D80} - No CLSID value found.
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110515074214.dll (McAfee, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll (Google Inc.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll (Dell Inc.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll ()
O3 - HKLM\..\Toolbar: (&Google; Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (&Google; Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll ()
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [DLCFCATS] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCFtime.DLL ()
O4 - HKLM..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe ()
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [Ihufokofatahix] C:\WINDOWS\uyoyukejub.dll (Creative)
O4 - HKLM..\Run: [ISTray] C:\Program Files\Spyware Doctor\pctsTray.exe (PC Tools)
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [Nikon Transfer Monitor] C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SNM] C:\Program Files\SpyNoMore\SNM.exe (Illysoft LLC)
O4 - HKCU..\Run: [DellSupport] C:\Program Files\DellSupport\DSAgnt.exe (Gteko Ltd.)
O4 - HKLM..\RunOnceEx: [] File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Exif Launcher S.lnk = C:\Program Files\FinePixViewerS\QuickDCF2.exe (FUJIFILM Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre6\bin\npjpi160_20.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - File not found
O16 - DPF: {01016526-5E80-11D8-9E86-0007E96C65AE} https://install.charter.com/diskless/bin/ssctlsma.dll (SmartAccess Ctl Class)
O16 - DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} http://apps.corel.com/nos_dl_manager_dev/p…IEGetPlugin.ocx (get_atlcom Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1212865661296 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Value error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…ro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://l.yimg.com/jh/games/web_games/popca…aploader_v6.cab (PopCapLoader Object)
O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} https://printwebinars.webex.com/client/T27L/nbr/ieatgpc.cab (GpcContainer Class)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Value error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O18 - Protocol\Handler\siteadvisor {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6261\SiteAdv.dll ()
O20 - AppInit_DLLs: (cocchs.dll) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\ljJBtqpm: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O20 - Winlogon\Notify\nnnolmm: DllName - nnnolmm.dll - File not found
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O30 - LSA: Authentication Packages - (C:\WINDOWS\system32\pmnmlklL) - File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/08/10 13:04:08 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.VP60 - C:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\WINDOWS\system32\vp6vfw.dll (On2.com)
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: wave - C:\WINDOWS\System32\serwvdrv.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/08/08 09:48:08 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\McAfee
[2011/08/08 09:47:31 | 000,384,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\`
[2011/08/06 18:00:13 | 000,000,000 | —D | C] – C:\Program Files\SpyNoMore
[2011/08/06 18:00:13 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\Start Menu\Programs\SpyNoMore
[2011/08/06 17:59:06 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\Desktop\Downloads
[2011/08/06 17:58:52 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\Application Data\GetRightToGo
[2011/08/06 17:58:21 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\My Documents\Downloads
[2011/07/21 13:54:16 | 000,000,000 | R–D | C] – C:\Documents and Settings\David.VICKIE\My Documents\My Videos
[2011/07/12 19:46:03 | 000,000,000 | —D | C] – C:\Documents and Settings\David.VICKIE\Application Data\GARMIN
[2007/07/30 18:20:27 | 000,015,429 | R— | C] ( ) – C:\WINDOWS\System32\drivers\Sacm2A.sys
[2006/08/07 21:55:14 | 001,183,744 | —- | C] ( ) – C:\WINDOWS\System32\dlcfserv.dll
[2006/08/07 21:55:14 | 001,134,592 | —- | C] ( ) – C:\WINDOWS\System32\dlcfusb1.dll
[2006/08/07 21:55:14 | 000,770,048 | —- | C] ( ) – C:\WINDOWS\System32\dlcfhbn3.dll
[2006/08/07 21:55:14 | 000,704,512 | —- | C] ( ) – C:\WINDOWS\System32\dlcfcomc.dll
[2006/08/07 21:55:14 | 000,638,976 | —- | C] ( ) – C:\WINDOWS\System32\dlcfpmui.dll
[2006/08/07 21:55:14 | 000,491,520 | —- | C] ( ) – C:\WINDOWS\System32\dlcfcoms.exe
[2006/08/07 21:55:14 | 000,483,328 | —- | C] ( ) – C:\WINDOWS\System32\dlcflmpm.dll
[2006/08/07 21:55:14 | 000,413,696 | —- | C] ( ) – C:\WINDOWS\System32\dlcfcomm.dll
[2006/08/07 21:55:14 | 000,372,736 | —- | C] ( ) – C:\WINDOWS\System32\dlcfih.exe
[2006/08/07 21:55:14 | 000,368,640 | —- | C] ( ) – C:\WINDOWS\System32\dlcfcfg.exe
[2006/08/07 21:55:14 | 000,155,648 | —- | C] ( ) – C:\WINDOWS\System32\dlcfprox.dll
[2006/08/07 21:55:14 | 000,114,688 | —- | C] ( ) – C:\WINDOWS\System32\dlcfpplc.dll
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/08/08 11:07:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/08 09:50:41 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/08/08 09:48:27 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/08 09:47:47 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/08/08 09:47:45 | 534,925,312 | -HS- | M] () – C:\hiberfil.sys
[2011/08/08 09:47:35 | 000,384,768 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\`
[2011/08/07 20:23:30 | 000,000,120 | —- | M] () – C:\WINDOWS\Evaxuzagey.dat
[2011/08/07 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\tasks\vtscheduletask.job
[2011/08/06 18:00:25 | 000,001,152 | —- | M] () – C:\WINDOWS\System32\windrv.sys
[2011/08/06 18:00:14 | 000,000,658 | —- | M] () – C:\Documents and Settings\David.VICKIE\Desktop\SpyNoMore.lnk
[2011/08/06 17:51:11 | 000,054,016 | —- | M] () – C:\WINDOWS\System32\drivers\vqubvsw.sys
[2011/08/06 08:03:53 | 000,000,784 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/08/05 00:10:32 | 000,001,813 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2011/08/03 23:56:00 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/08/03 06:39:09 | 000,000,000 | —- | M] () – C:\WINDOWS\Wqadah.bin
[2011/07/21 13:52:36 | 000,000,800 | —- | M] () – C:\Documents and Settings\David.VICKIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/07/21 13:52:36 | 000,000,782 | —- | M] () – C:\Documents and Settings\David.VICKIE\Desktop\Windows Media Player.lnk
[2011/07/17 08:33:37 | 000,001,729 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2011/07/13 21:03:07 | 000,144,424 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/06 18:00:25 | 000,001,152 | —- | C] () – C:\WINDOWS\System32\windrv.sys
[2011/08/06 18:00:14 | 000,000,658 | —- | C] () – C:\Documents and Settings\David.VICKIE\Desktop\SpyNoMore.lnk
[2011/08/06 17:51:11 | 000,054,016 | —- | C] () – C:\WINDOWS\System32\drivers\vqubvsw.sys
[2011/07/21 13:52:36 | 000,000,800 | —- | C] () – C:\Documents and Settings\David.VICKIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2011/06/21 16:34:16 | 000,054,016 | —- | C] () – C:\WINDOWS\System32\drivers\rapjhmy.sys
[2011/03/31 09:44:13 | 000,000,000 | —- | C] () – C:\WINDOWS\Wqadah.bin
[2011/03/31 09:44:12 | 000,000,120 | —- | C] () – C:\WINDOWS\Evaxuzagey.dat
[2011/01/10 19:55:21 | 000,000,000 | —- | C] () – C:\WINDOWS\ViewNX.INI
[2011/01/05 17:32:26 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\URLs
[2011/01/05 17:32:25 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdw.DAT
[2011/01/05 17:32:25 | 000,000,012 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Woodwind
[2011/01/05 17:29:19 | 000,000,268 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Trumpet Section
[2011/01/05 17:29:19 | 000,000,012 | RH– | C] () – C:\Documents and Settings\All Users\Application Data\Vocal Transformer
[2011/01/05 17:29:18 | 000,000,020 | -H– | C] () – C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2010/11/17 20:11:31 | 000,026,400 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2010/03/04 09:26:17 | 000,000,330 | -HS- | C] () – C:\WINDOWS\WSYS049.SYS
[2010/03/04 09:26:17 | 000,000,049 | —- | C] () – C:\WINDOWS\Progs_.ini
[2008/09/13 18:14:08 | 001,066,915 | -HS- | C] () – C:\WINDOWS\System32\pinehwlp.ini
[2008/09/11 18:05:48 | 001,166,208 | -HS- | C] () – C:\WINDOWS\System32\uunrvtnd.ini
[2008/09/10 15:18:39 | 000,791,616 | -HS- | C] () – C:\WINDOWS\System32\Llklmnmp.ini2
[2008/09/10 15:18:39 | 000,791,616 | -HS- | C] () – C:\WINDOWS\System32\Llklmnmp.ini
[2008/07/23 11:50:52 | 003,596,288 | —- | C] () – C:\WINDOWS\System32\qt-dx331.dll
[2008/05/26 21:59:42 | 000,018,904 | —- | C] () – C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | —- | C] () – C:\WINDOWS\System32\structuredqueryschema.bin
[2008/05/26 12:24:21 | 000,049,152 | —- | C] () – C:\WINDOWS\System32\VZWDLManager.dll
[2007/12/27 21:24:43 | 000,002,177 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2007/12/10 17:07:09 | 000,000,736 | —- | C] () – C:\WINDOWS\DigimaxMaster.INI
[2007/11/25 13:03:22 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2007/10/11 07:59:06 | 000,693,712 | -HS- | C] () – C:\WINDOWS\System32\xisyteuw.ini
[2007/10/09 16:09:57 | 000,693,592 | -HS- | C] () – C:\WINDOWS\System32\lfmfpayd.ini
[2007/10/08 13:49:49 | 000,693,688 | -HS- | C] () – C:\WINDOWS\System32\spklubgw.ini
[2007/10/07 13:45:03 | 000,693,550 | -HS- | C] () – C:\WINDOWS\System32\xojacwhe.ini
[2007/10/05 16:47:41 | 000,694,081 | -HS- | C] () – C:\WINDOWS\System32\ctnwifqo.ini
[2007/10/04 15:41:24 | 000,693,961 | -HS- | C] () – C:\WINDOWS\System32\qskckift.ini
[2007/10/03 15:34:14 | 000,693,832 | -HS- | C] () – C:\WINDOWS\System32\vskmlvmr.ini
[2007/10/02 15:38:42 | 000,693,715 | -HS- | C] () – C:\WINDOWS\System32\jvbqkucn.ini
[2007/10/01 15:40:28 | 000,693,481 | -HS- | C] () – C:\WINDOWS\System32\xogffygx.ini
[2007/09/30 12:24:24 | 000,693,901 | -HS- | C] () – C:\WINDOWS\System32\niovswch.ini
[2007/09/27 20:34:54 | 000,693,841 | -HS- | C] () – C:\WINDOWS\System32\jjaonpho.ini
[2007/09/26 20:33:26 | 000,693,652 | -HS- | C] () – C:\WINDOWS\System32\jolrfgvt.ini
[2007/09/25 18:42:43 | 000,693,541 | -HS- | C] () – C:\WINDOWS\System32\uewycxql.ini
[2007/09/24 15:59:31 | 000,693,481 | -HS- | C] () – C:\WINDOWS\System32\nxkyhkfq.ini
[2007/09/22 19:45:19 | 000,693,490 | -HS- | C] () – C:\WINDOWS\System32\osjnqlus.ini
[2007/09/21 17:08:57 | 000,693,550 | -HS- | C] () – C:\WINDOWS\System32\uwdodxhr.ini
[2007/07/30 18:20:27 | 000,135,168 | R— | C] () – C:\WINDOWS\UNDPX2A.exe
[2007/07/30 18:20:27 | 000,053,693 | R— | C] () – C:\WINDOWS\UNDPX2A.sys
[2007/06/11 20:20:39 | 000,000,059 | —- | C] () – C:\WINDOWS\VistaEmail.ini
[2007/03/23 23:11:07 | 000,000,000 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2007/01/05 14:07:11 | 000,076,288 | —- | C] () – C:\WINDOWS\System32\1psiG60XV55.dll
[2006/09/08 19:28:57 | 000,032,768 | —- | C] () – C:\WINDOWS\System32\instlsp.exe
[2006/08/13 14:36:33 | 000,003,350 | -HS- | C] () – C:\WINDOWS\System32\KGyGaAvL.sys
[2006/08/13 14:36:33 | 000,000,088 | RHS- | C] () – C:\WINDOWS\System32\2E3E9ADF88.sys
[2006/08/07 22:37:04 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2006/08/07 22:28:36 | 000,000,175 | —- | C] () – C:\WINDOWS\wininit.ini
[2006/08/07 22:24:52 | 000,149,504 | —- | C] () – C:\WINDOWS\UNWISE.EXE
[2006/08/07 22:20:30 | 000,000,335 | —- | C] () – C:\WINDOWS\nsreg.dat
[2006/08/07 22:18:28 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006/08/07 21:55:14 | 000,430,080 | —- | C] () – C:\WINDOWS\System32\dlcfutil.dll
[2006/08/07 21:55:14 | 000,221,184 | —- | C] () – C:\WINDOWS\System32\dlcfinsb.dll
[2006/08/07 21:55:14 | 000,155,648 | —- | C] () – C:\WINDOWS\System32\dlcfins.dll
[2006/08/07 21:55:14 | 000,131,072 | —- | C] () – C:\WINDOWS\System32\dlcfjswr.dll
[2006/08/07 21:55:14 | 000,106,496 | —- | C] () – C:\WINDOWS\System32\dlcfinsr.dll
[2006/08/07 21:55:14 | 000,086,016 | —- | C] () – C:\WINDOWS\System32\dlcfcub.dll
[2006/08/07 21:55:14 | 000,073,728 | —- | C] () – C:\WINDOWS\System32\dlcfcu.dll
[2006/08/07 21:55:14 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\dlcfcfg.dll
[2006/08/07 21:55:14 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\dlcfvs.dll
[2006/08/07 21:55:14 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\dlcfcur.dll
[2006/08/07 21:55:02 | 000,049,152 | —- | C] () – C:\WINDOWS\setpwrcg.exe
[2006/08/07 21:54:58 | 000,095,617 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2006/08/07 21:54:34 | 000,000,392 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2005/11/10 08:56:34 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2005/08/31 12:11:14 | 000,000,442 | —- | C] () – C:\WINDOWS\System32\dlcfplc.ini
[2004/08/10 13:12:05 | 000,000,780 | —- | C] () – C:\WINDOWS\orun32.ini
[2004/08/10 13:07:31 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2004/08/10 13:02:15 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2004/08/10 13:01:18 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2004/08/10 12:57:52 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2004/08/10 12:57:15 | 000,144,424 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2004/08/10 12:51:21 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/08/10 12:51:20 | 000,467,306 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2004/08/10 12:51:20 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004/08/10 12:51:20 | 000,080,138 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2004/08/10 12:51:20 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004/08/10 12:51:18 | 000,004,627 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2004/08/10 12:51:17 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2004/08/10 12:51:16 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2004/08/10 12:51:12 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004/08/10 12:51:11 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004/08/10 12:51:05 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004/08/10 12:50:56 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2004/08/10 12:50:55 | 000,127,488 | —- | C] () – C:\WINDOWS\System32\drivers\cdfs.sys
[2004/01/18 20:11:47 | 000,076,800 | R— | C] () – C:\WINDOWS\System32\1psi60X.dll
[2003/01/07 15:05:08 | 000,002,695 | —- | C] () – C:\WINDOWS\System32\OUTLPERF.INI
[2001/08/23 14:00:00 | 000,022,400 | —- | C] () – C:\WINDOWS\System32\drivers\SbcpHid.sys
[2000/09/08 17:53:50 | 000,073,839 | —- | C] () – C:\WINDOWS\System32\KodakOneTouch.dll

========== LOP Check ==========

[2011/01/05 17:32:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\EnterNHelp
[2011/01/05 17:30:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nikon
[2009/09/23 23:10:23 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2008/01/31 19:39:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SupportSoft
[2010/03/21 13:43:55 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2011/01/05 17:32:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ultima_T15
[2006/08/07 22:21:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2007/02/24 20:30:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WildTangent
[2010/10/02 21:50:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011/07/12 19:46:04 | 000,000,000 | —D | M] – C:\Documents and Settings\David.VICKIE\Application Data\GARMIN
[2011/08/06 17:59:50 | 000,000,000 | —D | M] – C:\Documents and Settings\David.VICKIE\Application Data\GetRightToGo
[2011/06/24 18:58:39 | 000,000,000 | —D | M] – C:\Documents and Settings\David.VICKIE\Application Data\IObit
[2011/08/07 16:00:00 | 000,000,416 | —- | M] () – C:\WINDOWS\Tasks\vtscheduletask.job

========== Purity Check ==========



========== Custom Scans ==========


< >

< %SYSTEMDRIVE%\*.* >
[2004/08/10 13:04:08 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2009/09/24 20:13:20 | 000,000,211 | RHS- | M] () – C:\boot.ini
[2007/10/12 20:24:49 | 000,032,956 | —- | M] () – C:\check_LSA7.txt
[2004/08/10 13:04:08 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2006/08/07 21:59:56 | 000,006,687 | RH– | M] () – C:\dell.sdr
[2011/08/06 17:51:51 | 000,008,526 | —- | M] () – C:\dlcf.log
[2011/03/31 21:16:48 | 000,000,045 | —- | M] () – C:\error.log
[2011/08/08 09:47:45 | 534,925,312 | -HS- | M] () – C:\hiberfil.sys
[2006/08/12 09:07:45 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2004/08/10 13:04:08 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2006/08/07 22:21:36 | 000,000,835 | -H– | M] () – C:\IPH.PH
[2004/08/10 13:04:08 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2004/08/04 05:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/09/02 10:18:49 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/08/08 09:47:42 | 805,306,368 | -HS- | M] () – C:\pagefile.sys
[2009/09/23 23:30:48 | 000,000,268 | -H– | M] () – C:\sqmdata00.sqm
[2009/09/24 19:27:08 | 000,000,268 | -H– | M] () – C:\sqmdata01.sqm
[2009/09/24 19:33:17 | 000,000,268 | -H– | M] () – C:\sqmdata02.sqm
[2009/09/24 22:09:52 | 000,000,268 | -H– | M] () – C:\sqmdata03.sqm
[2009/09/27 07:13:43 | 000,000,268 | -H– | M] () – C:\sqmdata04.sqm
[2009/09/27 20:36:37 | 000,000,268 | -H– | M] () – C:\sqmdata05.sqm
[2009/09/28 12:57:45 | 000,000,268 | -H– | M] () – C:\sqmdata06.sqm
[2009/09/28 22:30:51 | 000,000,268 | -H– | M] () – C:\sqmdata07.sqm
[2009/09/30 18:29:55 | 000,000,268 | -H– | M] () – C:\sqmdata08.sqm
[2009/09/30 18:31:01 | 000,000,268 | -H– | M] () – C:\sqmdata09.sqm
[2009/09/30 22:38:54 | 000,000,268 | -H– | M] () – C:\sqmdata10.sqm
[2009/10/05 08:58:52 | 000,000,268 | -H– | M] () – C:\sqmdata11.sqm
[2009/10/06 08:17:21 | 000,000,268 | -H– | M] () – C:\sqmdata12.sqm
[2009/10/09 21:17:59 | 000,000,268 | -H– | M] () – C:\sqmdata13.sqm
[2009/10/13 14:03:00 | 000,000,268 | -H– | M] () – C:\sqmdata14.sqm
[2009/09/20 15:06:36 | 000,000,268 | -H– | M] () – C:\sqmdata15.sqm
[2009/09/20 21:20:23 | 000,000,268 | -H– | M] () – C:\sqmdata16.sqm
[2009/09/21 19:55:49 | 000,000,268 | -H– | M] () – C:\sqmdata17.sqm
[2009/09/21 19:56:57 | 000,000,268 | -H– | M] () – C:\sqmdata18.sqm
[2009/09/23 23:29:46 | 000,000,268 | -H– | M] () – C:\sqmdata19.sqm
[2009/09/23 23:29:46 | 000,000,244 | -H– | M] () – C:\sqmnoopt00.sqm
[2009/09/23 23:30:48 | 000,000,244 | -H– | M] () – C:\sqmnoopt01.sqm
[2009/09/24 19:27:08 | 000,000,244 | -H– | M] () – C:\sqmnoopt02.sqm
[2009/09/24 19:33:17 | 000,000,244 | -H– | M] () – C:\sqmnoopt03.sqm
[2009/09/24 22:09:51 | 000,000,244 | -H– | M] () – C:\sqmnoopt04.sqm
[2009/09/27 07:13:43 | 000,000,244 | -H– | M] () – C:\sqmnoopt05.sqm
[2009/09/27 20:36:36 | 000,000,244 | -H– | M] () – C:\sqmnoopt06.sqm
[2009/09/28 12:57:45 | 000,000,244 | -H– | M] () – C:\sqmnoopt07.sqm
[2009/09/28 22:30:50 | 000,000,244 | -H– | M] () – C:\sqmnoopt08.sqm
[2009/09/30 18:29:54 | 000,000,244 | -H– | M] () – C:\sqmnoopt09.sqm
[2009/09/30 18:31:01 | 000,000,244 | -H– | M] () – C:\sqmnoopt10.sqm
[2009/09/30 22:38:54 | 000,000,244 | -H– | M] () – C:\sqmnoopt11.sqm
[2009/10/05 08:58:52 | 000,000,244 | -H– | M] () – C:\sqmnoopt12.sqm
[2009/10/06 08:17:21 | 000,000,244 | -H– | M] () – C:\sqmnoopt13.sqm
[2009/10/09 21:17:58 | 000,000,244 | -H– | M] () – C:\sqmnoopt14.sqm
[2009/10/13 14:02:59 | 000,000,244 | -H– | M] () – C:\sqmnoopt15.sqm
[2009/09/20 15:06:36 | 000,000,244 | -H– | M] () – C:\sqmnoopt16.sqm
[2009/09/20 21:20:23 | 000,000,244 | -H– | M] () – C:\sqmnoopt17.sqm
[2009/09/21 19:55:48 | 000,000,244 | -H– | M] () – C:\sqmnoopt18.sqm
[2009/09/21 19:56:56 | 000,000,244 | -H– | M] () – C:\sqmnoopt19.sqm
[2006/08/07 22:21:44 | 000,000,087 | —- | M] () – C:\SystemInfo.ini
[2008/12/18 21:17:40 | 000,006,799 | —- | M] () – C:\YServer.txt

< %systemroot%\Fonts\*.com >
[2006/04/18 16:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 15:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 16:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 15:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/08/10 13:03:42 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2005/09/29 18:28:54 | 000,073,728 | —- | M] (Dell, Inc.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\dlcfPP5C.DLL
[2008/07/06 07:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/04/09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 05:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2005/05/19 17:10:21 | 000,294,912 | —- | M] (Simple Star, Inc.) – C:\WINDOWS\Walgreens PhotoShow.scr
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004/08/10 12:56:48 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2004/08/10 12:56:46 | 000,634,880 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2004/08/10 12:56:46 | 000,872,448 | —- | M] () – C:\WINDOWS\System32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/09/02 10:30:07 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/06/24 09:20:12 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\David.VICKIE\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004/08/10 13:08:38 | 000,000,079 | —- | M] () – C:\Documents and Settings\David.VICKIE\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-07-13 23:08:21

========== Alternate Data Streams ==========

@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 116 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1

< End of report >
Thank you for your help

found combofix log ComboFix 11-08-09.02 - David 08/09/2011 14:38:04.1.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.510.258 [GMT -5:00] Running from: C:\Documents and Settings\[removed]\Desktop\ComboFix.exe AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83} FW: McAfee Firewall *Disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8} ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\check_LSA7.txt C:\WINDOWS\$NtUninstallKB57405$ C:\WINDOWS\$NtUninstallKB57405$\3621046294\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6} C:\WINDOWS\$NtUninstallKB57405$\3621046294\L\odetmngk C:\WINDOWS\$NtUninstallKB57405$\3621046294\loader.tlb C:\WINDOWS\$NtUninstallKB57405$\3621046294\U\@00000001 C:\WINDOWS\$NtUninstallKB57405$\3621046294\U\@000000c0 C:\WINDOWS\$NtUninstallKB57405$\3621046294\U\@000000cb C:\WINDOWS\$NtUninstallKB57405$\3621046294\U\@000000cf C:\WINDOWS\$NtUninstallKB57405$\3621046294\U\@80000000 C:\WINDOWS\$NtUninstallKB57405$\3621046294\U\@800000c0 C:\WINDOWS\$NtUninstallKB57405$\3621046294\U\@800000cb C:\WINDOWS\$NtUninstallKB57405$\3621046294\U\@800000cf C:\WINDOWS\$NtUninstallKB57405$\542724262 C:\WINDOWS\Downloaded Program Files\popcaploader.dll C:\WINDOWS\Downloaded Program Files\popcaploader.inf C:\WINDOWS\system32\c_99454.nls C:\WINDOWS\system32\config\odetmngk C:\WINDOWS\system32\drivers\` C:\WINDOWS\system32\xisyteuw.ini Infected copy of C:\WINDOWS\system32\drivers\netbt.sys was found and disinfected Restored copy from - The cat found it Infected copy of C:\WINDOWS\system32\wuauclt.exe was found and disinfected Restored copy from - C:\WINDOWS\system32\dllcache\wuauclt.exe ((((((((((((((((((((((((( Files Created from 2011-07-10 to 2011-08-10 ))))))))))))))))))))))))))))))) 2011-08-09 19:29:24 . 2008-04-13 19:21:00 162816 —-a-w- C:\WINDOWS\system32\drivers\netbt.sys 2011-08-09 14:47:04 . 2011-08-09 14:47:04 1152 —-a-w- C:\WINDOWS\system32\windrv.sys 2011-08-09 14:15:54 . 2011-08-09 14:15:54 ——– d—–w- C:\_OTL 2011-08-08 18:29:24 . 2011-08-08 18:29:25 ——– d—–w- C:\Documents and Settings\David.VICKIE\Local Settings\Application Data\{E584AFC8-0F2F-422F-84C7-EBB8F90B8345} 2011-08-08 18:25:45 . 2011-08-08 23:19:03 44560 –sha-w- C:\WINDOWS\system32\c_99454.nl_ 2011-08-06 22:58:52 . 2011-08-06 22:59:50 ——– d—–w- C:\Documents and Settings\David.VICKIE\Application Data\GetRightToGo 2011-07-13 00:46:03 . 2011-07-13 00:46:04 ——– d—–w- C:\Documents and Settings\David.VICKIE\Application Data\GARMIN . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2011-08-08 18:25:05 . 2004-08-10 17:51:39 384768 —-a-w- C:\WINDOWS\system32\drivers\update.sys 2011-07-07 00:52:42 . 2011-03-29 23:02:31 41272 —-a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys 2011-07-07 00:52:42 . 2011-03-29 23:02:26 22712 —-a-w- C:\WINDOWS\system32\drivers\mbam.sys 2011-06-25 00:14:13 . 2006-08-08 02:54:58 380928 —-a-w- C:\WINDOWS\system32\ati2evxx.exe 2011-06-23 14:45:58 . 2004-08-10 17:50:55 127488 —-a-w- C:\WINDOWS\system32\drivers\cdfs.sys 2011-06-21 21:34:16 . 2011-06-21 21:34:16 54016 —-a-w- C:\WINDOWS\system32\drivers\rapjhmy.sys 2011-06-21 14:55:45 . 2011-06-05 00:12:52 404640 —-a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2011-06-02 14:02:05 . 2004-08-10 17:51:28 1858944 —-a-w- C:\WINDOWS\system32\win32k.sys 2011-04-14 19:01:38 . 2010-09-05 08:41:45 24376 —-a-w- C:\Program Files\mozilla firefox\components\Scriptff.dll