Home Page Redirect

I haven't noticed any other symptoms. Below are the results from OTL
OTL logfile created on: 08/08/2011 7:01:54 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Jas\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.50 Gb Total Physical Memory | 1.76 Gb Available Physical Memory | 50.34% Memory free
8.63 Gb Paging File | 6.92 Gb Available in Paging File | 80.12% Paging File free
Paging file location(s): c:\pagefile.sys 5371 5371 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 220.29 Gb Total Space | 38.70 Gb Free Space | 17.57% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 5.34 Gb Free Space | 53.41% Space Free | Partition Type: NTFS
Drive H: | 7.46 Gb Total Space | 3.46 Gb Free Space | 46.45% Space Free | Partition Type: FAT32

Computer Name: JAS-PC | User Name: Jas | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Jas\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Trusteer\Rapport\bin\RapportService.exe (Trusteer Ltd.)
PRC - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
PRC - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files\Norton PC Checkup\Engine\2.0.4.131\SymcPCCULaunchSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Norton PC Checkup\Engine\2.0.4.131\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
PRC - C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe (Logitech, Inc.)
PRC - C:\Program Files\Protector Suite QL\upeksvr.exe (UPEK Inc.)
PRC - C:\Program Files\Protector Suite QL\psqltray.exe (UPEK Inc.)
PRC - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe (Creative Labs)
PRC - C:\Windows\OEM02Mon.exe (Creative Technology Ltd.)
PRC - C:\Program Files\Dell\QuickSet\quickset.exe (Dell Inc.)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\stacsv.exe (IDT, Inc.)
PRC - C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe (IDT, Inc.)
PRC - C:\Program Files\DellTPad\hidfind.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\ApMsgFwd.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\DellTPad\ApntEx.exe (Alps Electric Co., Ltd.)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\AEstSrv.exe (Andrea Electronics Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe (Creative Technology Ltd)


========== Modules (SafeList) ==========

MOD - C:\Users\Jas\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb5
7\msvcr90.dll (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb5
7\msvcp90.dll (Microsoft Corporation)
MOD - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\asoehook.dll (Symantec Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter) – File not found
SRV - (DAUpdaterSvc) – File not found
SRV - (RapportMgmtService) – C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
SRV - (NIS) – C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe (Symantec Corporation)
SRV - (Norton PC Checkup Application Launcher) – C:\Program Files\Norton PC Checkup\Engine\2.0.4.131\SymcPCCULaunchSvc.exe (Symantec Corporation)
SRV - (Steam Client Service) – C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (PCCUJobMgr) – C:\Program Files\Norton PC Checkup\Engine\2.0.4.131\ccSvcHst.exe (Symantec Corporation)
SRV - (LBTServ) – C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (GoToAssist) – C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe (Citrix Online, a division of Citrix Systems, Inc.)
SRV - (Creative Labs Licensing Service) – C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe (Creative Labs)
SRV - (STacSV) – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\stacsv.exe (IDT, Inc.)
SRV - (Symantec RemoteAssist) – C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe (Symantec, Inc.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AESTFilters) – C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\AEstSrv.exe (Andrea Electronics Corporation)
SRV - (IAANTMON) Intel® – C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)
SRV - (DSBrokerService) – C:\Program Files\DellSupport\brkrsvc.exe ()


========== Driver Services (SafeList) ==========

DRV - (SMR200) – C:\Windows\System32\drivers\SMR200.SYS (Symantec Corporation)
DRV - (RapportCerberus_29574) – C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\29574\RapportCerberus32_29574.sys ()
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110807.002\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110807.002\NAVENG.SYS (Symantec Corporation)
DRV - (IDSVix86) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110805.030\IDSvix86.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (BHDrvx86) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110723.001\BHDrvx86.sys (Symantec Corporation)
DRV - (RapportPG) – C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys (Trusteer Ltd.)
DRV - (RapportEI) – C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys (Trusteer Ltd.)
DRV - (RapportKELL) – C:\Windows\System32\Drivers\RapportKELL.sys (Trusteer Ltd.)
DRV - (SymEvent) – C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\System32\Drivers\NIS\1206000.01D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\system32\drivers\NIS\1206000.01D\SRTSPX.SYS (Symantec Corporation)
DRV - (SYMTDIv) – C:\Windows\System32\Drivers\NIS\1206000.01D\SYMTDIV.SYS (Symantec Corporation)
DRV - (SymEFA) – C:\Windows\system32\drivers\NIS\1206000.01D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymDS) – C:\Windows\system32\drivers\NIS\1206000.01D\SYMDS.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\Windows\system32\drivers\NIS\1206000.01D\Ironx86.SYS (Symantec Corporation)
DRV - (nvlddmkm) – C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (libusb0) – C:\Windows\System32\drivers\libusb0.sys (http://libusb-win32.sourceforge.net)
DRV - (LMouFilt) – C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) – C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (atksgt) – C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) – C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (WDC_SAM) – C:\Windows\System32\drivers\wdcsam.sys (Western Digital Technologies)
DRV - (OEM02Vfx) – C:\Windows\System32\drivers\OEM02Vfx.sys (EyePower Games Pte. Ltd.)
DRV - (OEM02Dev) – C:\Windows\System32\drivers\OEM02Dev.sys (Creative Technology Ltd.)
DRV - (STHDA) – C:\Windows\System32\drivers\stwrt.sys (IDT, Inc.)
DRV - (rimmptsk) – C:\Windows\System32\drivers\rimmptsk.sys (REDC)
DRV - (ApfiltrService) – C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (iaNvStor) Intel® – C:\Windows\system32\drivers\ianvstor.sys (Intel Corporation)
DRV - (rismxdp) – C:\Windows\System32\drivers\rixdptsk.sys (REDC)
DRV - (rimsptsk) – C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (dsunidrv) – C:\Windows\System32\drivers\dsunidrv.sys (Gteko Ltd.)
DRV - (DSproct) – C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys (Gteko Ltd.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q;=

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.ca/ig/dell?hl=en&cli;…amp;ibd=6080611
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q;=
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/413
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.ca/ig?hl=en
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Search Results"
FF - prefs.js..browser.search.order.1: "Search Results"
FF - prefs.js..browser.search.selectedEngine: "Search Results"
FF - prefs.js..browser.startup.homepage: "http://www.searchqu.com/413"
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:5.6
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.6
FF - prefs.js..extensions.enabledItems: [removed]:1.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "http://dts.search-results.com/sr?src=ffb&appid;=0&systemid;=413&q;="

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@palmsource.com/installer,version=1.0: C:\PROGRA~1\palmOne\PACKAG~1\NPInstal.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2011/07/09 11:34:19 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn_2011_7_0_8 [2011/08/08 16:16:31 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/06/29 09:58:36 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/06/25 11:51:09 | 000,000,000 | —D | M]

[2011/08/07 22:15:19 | 000,000,000 | —D | M] (No name found) – C:\Users\Jas\AppData\Roaming\Mozilla\Extensions
[2009/06/04 08:05:23 | 000,000,000 | —D | M] (No name found) – C:\Users\Jas\AppData\Roaming\Mozilla\Extensions\[removed]
[2011/08/07 22:15:05 | 000,000,000 | —D | M] (No name found) – C:\Users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\extensions
[2010/09/05 10:13:45 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/08/07 22:15:05 | 000,000,000 | —D | M] (Searchqu Toolbar) – C:\Users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2011/08/02 02:28:17 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010/09/14 20:27:38 | 000,000,000 | —D | M] (Search Toolbar) – C:\Users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\extensions\[removed]
[2010/09/14 20:27:38 | 000,001,919 | —- | M] () – C:\Users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\searchplugins\bing-zugo.xml
[2010/09/05 10:12:27 | 000,002,470 | —- | M] () – C:\Users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\searchplugins\safesearch.xml
[2011/08/07 22:14:50 | 000,002,497 | —- | M] () – C:\Users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\searchplugins\SearchResults.xml
[2011/08/07 22:15:19 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/04/03 22:03:22 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/04/03 23:44:14 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/06/13 17:46:27 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
File not found (No name found) –
[2011/08/08 16:16:31 | 000,000,000 | —D | M] (Norton Toolbar) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\COFFPLGN_2011_7_0_8
[2011/07/09 11:34:19 | 000,000,000 | —D | M] (Symantec IPS) – C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPLGN
[2011/06/29 09:58:36 | 000,142,296 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/05/04 04:52:23 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/05/13 00:16:11 | 000,001,538 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2011/05/13 00:16:11 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/05/13 00:16:11 | 000,000,947 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2011/05/13 00:16:11 | 000,001,180 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2011/08/07 22:14:50 | 000,002,497 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml
[2011/05/13 00:16:11 | 000,001,135 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2006/09/18 17:41:30 | 000,000,761 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O2 - BHO: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O2 - BHO: (Loader Class) - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\BrowserConnection.dll (Bandoo Media, inc)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Searchqu Toolbar) - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\Program Files\Windows Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll ()
O3 - HKLM\..\Toolbar: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.6.0.29\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O4 - HKLM..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [DATAMNGR] C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngrUI.exe (Bandoo Media, inc)
O4 - HKLM..\Run: [DELL Webcam Manager] C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [DellSupportCenter] File not found
O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [PSQLLauncher] C:\Program Files\Protector Suite QL\launcher.exe (UPEK Inc.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe (IDT, Inc.)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [DellSupportCenter] File not found
O4 - Startup: C:\Users\Jas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Table Of Contents.onetoc2 ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver; - C:\Windows\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_05)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/2.9.1.0…inAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\intu-tt2010 {97A0575E-2309-4e75-8509-B1F9390C4DE7} - C:\Program Files\TurboTax 2010\ic2010pp.dll (Intuit Canada, a general partnership/une société en nom collectif.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (C:\PROGRA~1\WI9130~1\Datamngr\datamngr.dll) - C:\Program Files\Windows Searchqu Toolbar\Datamngr\datamngr.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (C:\PROGRA~1\WI9130~1\Datamngr\IEBHO.dll) - C:\Program Files\Windows Searchqu Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL) - File not found
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (vrlogon.dll) - File not found
O20 - Winlogon\Notify\GoToAssist: DllName - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll - File not found
O20 - Winlogon\Notify\psfus: DllName - C:\Program Files\Protector Suite QL\psqlpwd.dll - C:\Program Files\Protector Suite QL\psqlpwd.dll (UPEK Inc.)
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper:
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{811e17fd-d2b1-11dd-aa5e-001d095bd1a2}\Shell - "" = AutoRun
O33 - MountPoints2\{811e17fd-d2b1-11dd-aa5e-001d095bd1a2}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - File not found
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/08/08 18:47:40 | 001,915,904 | —- | C] (AVAST Software) – C:\Users\Jas\Desktop\aswMBR.exe
[2011/08/08 18:44:54 | 000,579,584 | —- | C] (OldTimer Tools) – C:\Users\Jas\Desktop\OTL.exe
[2011/08/08 16:14:30 | 000,000,000 | —D | C] – C:\ProgramData\boost_interprocess
[2011/08/08 16:10:44 | 000,083,064 | —- | C] (Symantec Corporation) – C:\Windows\System32\drivers\SMR200.SYS
[2011/08/08 16:10:39 | 000,000,000 | —D | C] – C:\Users\Jas\AppData\Local\NPE
[2011/08/06 05:03:31 | 000,000,000 | —D | C] – C:\Program Files\Windows Searchqu Toolbar
[2011/07/15 11:50:02 | 000,000,000 | —D | C] – C:\Users\Jas\AppData\Local\Ubisoft
[2011/07/14 10:02:25 | 002,043,392 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2011/07/14 10:00:58 | 000,375,808 | —- | C] (Microsoft Corporation) – C:\Windows\System32\winsrv.dll
[2011/07/14 10:00:58 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\csrsrv.dll
[2011/07/14 09:41:53 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ubisoft

========== Files - Modified Within 30 Days ==========

[2011/08/08 19:02:00 | 000,000,506 | —- | M] () – C:\Windows\tasks\SystemToolsDailyTest.job
[2011/08/08 18:53:28 | 000,000,564 | —- | M] () – C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job
[2011/08/08 18:48:46 | 001,915,904 | —- | M] (AVAST Software) – C:\Users\Jas\Desktop\aswMBR.exe
[2011/08/08 18:44:56 | 000,579,584 | —- | M] (OldTimer Tools) – C:\Users\Jas\Desktop\OTL.exe
[2011/08/08 18:40:23 | 000,117,949 | —- | M] () – C:\ProgramData\nvModes.dat
[2011/08/08 18:40:23 | 000,117,949 | —- | M] () – C:\ProgramData\nvModes.001
[2011/08/08 18:40:16 | 000,000,880 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/08/08 18:40:13 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/08/08 18:40:05 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/08/08 18:40:05 | 000,003,616 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/08/08 16:14:06 | 000,000,876 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/08/08 16:13:39 | 3756,064,768 | -HS- | M] () – C:\hiberfil.sys
[2011/08/08 16:10:44 | 000,083,064 | —- | M] (Symantec Corporation) – C:\Windows\System32\drivers\SMR200.SYS
[2011/08/08 05:58:14 | 000,232,960 | —- | M] () – C:\Users\Jas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/08/07 14:27:41 | 000,086,161 | —- | M] () – C:\Users\Jas\Desktop\Passage_Contract.pdf
[2011/08/06 06:35:06 | 000,648,496 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/08/06 06:35:06 | 000,125,462 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/08/05 15:59:38 | 000,307,200 | —- | M] (FLV.com) – C:\Windows\System32\TubeFinder.exe
[2011/07/31 08:00:03 | 000,000,410 | —- | M] () – C:\Windows\tasks\DriverRobot.job
[2011/07/26 08:46:30 | 000,000,534 | —- | M] () – C:\Windows\tasks\Norton Internet Security - Run Full System Scan - Jas.job
[2011/07/23 11:03:57 | 000,000,812 | —- | M] () – C:\Users\Public\Desktop\Kobo.lnk
[2011/07/15 11:49:51 | 000,001,037 | —- | M] () – C:\Users\Public\Desktop\Tom Clancy's Splinter Cell Chaos Theory.lnk
[2011/07/15 03:28:27 | 000,279,216 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT

========== Files Created - No Company Name ==========

[2011/08/07 14:27:41 | 000,086,161 | —- | C] () – C:\Users\Jas\Desktop\Passage_Contract.pdf
[2011/07/15 11:49:51 | 000,001,037 | —- | C] () – C:\Users\Public\Desktop\Tom Clancy's Splinter Cell Chaos Theory.lnk
[2011/07/08 12:28:05 | 000,069,632 | R— | C] () – C:\Windows\System32\xmltok.dll
[2011/07/08 12:28:05 | 000,036,864 | R— | C] () – C:\Windows\System32\xmlparse.dll
[2010/10/31 20:49:03 | 000,000,003 | —- | C] () – C:\Windows\treeskp.sys
[2010/10/31 20:49:03 | 000,000,003 | —- | C] () – C:\Windows\sbacknt.bin
[2010/10/17 00:09:48 | 000,000,088 | —- | C] () – C:\Users\Jas\AppData\Roaming\usb.inf
[2010/07/06 17:13:57 | 000,484,352 | —- | C] () – C:\Windows\System32\lame_enc.dll
[2010/01/30 17:07:22 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2009/12/11 00:01:37 | 000,000,680 | —- | C] () – C:\Users\Jas\AppData\Local\d3d9caps.dat
[2009/09/19 21:35:04 | 000,232,960 | —- | C] () – C:\Users\Jas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/09/19 20:24:19 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/09/19 20:24:19 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2009/09/19 19:10:57 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009/09/19 17:51:54 | 000,117,949 | —- | C] () – C:\ProgramData\nvModes.001
[2009/09/19 17:51:36 | 000,117,949 | —- | C] () – C:\ProgramData\nvModes.dat
[2009/09/19 17:29:54 | 000,021,924 | —- | C] () – C:\Windows\System32\emptyregdb.dat
[2009/08/03 16:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009/08/03 16:07:42 | 000,230,768 | —- | C] () – C:\Windows\System32\OGAEXEC.exe
[2009/06/08 12:19:32 | 000,116,842 | —- | C] () – C:\Windows\hpqins00.dat
[2009/04/16 19:00:03 | 000,043,520 | —- | C] () – C:\Windows\System32\CmdLineExt03.dll
[2009/02/09 02:03:41 | 000,081,920 | —- | C] () – C:\Windows\System32\GkSui20.EXE
[2009/02/09 01:18:47 | 000,073,728 | —- | C] () – C:\Windows\System32\GkSui18.EXE
[2008/12/17 01:26:22 | 000,148,996 | —- | C] () – C:\Windows\hpoins19.dat
[2008/12/17 01:16:15 | 000,148,996 | —- | C] () – C:\Windows\hpoins19.dat.temp
[2008/12/17 01:16:15 | 000,026,952 | —- | C] () – C:\Windows\hpomdl19.dat.temp
[2008/12/01 18:05:39 | 000,000,118 | —- | C] () – C:\Windows\System32\MRT.INI
[2008/10/07 10:13:30 | 000,197,912 | —- | C] () – C:\Windows\System32\physxcudart_20.dll
[2008/10/07 10:13:22 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSwedish.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSpanish.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelPortugese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelKorean.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelJapanese.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelGerman.dll
[2008/10/07 10:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelFrench.dll
[2008/08/12 22:07:31 | 000,012,288 | —- | C] () – C:\Windows\impborl.dll
[2008/07/21 22:57:45 | 000,000,520 | —- | C] () – C:\Windows\_delis32.ini
[2008/07/21 22:26:53 | 000,000,094 | —- | C] () – C:\Windows\family.ini
[2008/06/27 12:55:51 | 000,271,360 | —- | C] () – C:\Windows\System32\drivers\atksgt.sys
[2008/06/27 12:55:51 | 000,018,048 | —- | C] () – C:\Windows\System32\drivers\lirsgt.sys
[2008/06/11 09:17:54 | 000,167,936 | —- | C] () – C:\Windows\System32\nvccoin.dll
[2008/06/11 06:40:04 | 000,000,074 | RHS- | C] () – C:\Windows\CT4CET.bin
[2008/06/11 06:36:08 | 000,054,784 | —- | C] () – C:\Windows\System32\bcmwlrmt.dll
[2008/06/11 06:36:07 | 000,024,064 | —- | C] () – C:\Windows\System32\WLTRYSVC.EXE
[2008/06/11 06:35:15 | 000,101,376 | —- | C] () – C:\Windows\System32\APOMngr.dll
[2008/06/11 06:35:15 | 000,066,560 | —- | C] () – C:\Windows\System32\CmdRtr.dll
[2008/06/11 06:35:15 | 000,000,628 | —- | C] () – C:\Windows\System32\PCI_VEN_1102&DEV;_FF05&SUBSYS;_00001102.ini
[2008/02/03 19:11:25 | 000,000,000 | —- | C] () – C:\Windows\System32\atiicdxx.dat
[2008/01/20 22:24:38 | 000,020,482 | —- | C] () – C:\Windows\System32\s3srged.dll
[2007/03/13 16:02:10 | 000,026,952 | —- | C] () – C:\Windows\hpomdl19.dat
[2006/11/02 08:57:28 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,279,216 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,648,496 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,125,462 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[1996/04/03 15:33:26 | 000,005,248 | —- | C] () – C:\Windows\System32\giveio.sys

========== LOP Check ==========

[2009/09/19 17:20:40 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Blitware
[2011/03/23 20:25:11 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\calibre
[2010/07/06 17:14:00 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\FreeAudioPack
[2010/12/25 01:24:01 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\FreeCDRipper
[2011/08/07 22:17:21 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\FreeFLVConverter
[2010/01/30 15:05:19 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\GARMIN
[2009/09/19 17:20:44 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\HotSync
[2009/09/19 17:20:44 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Image Zone Express
[2009/09/19 17:20:44 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Leadertech
[2009/09/19 17:20:54 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\NGRAIN
[2011/03/03 11:39:44 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\PCDr
[2009/09/19 17:20:54 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Printer Info Cache
[2011/05/24 19:30:33 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Protector Suite
[2010/09/09 09:49:55 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Tific
[2008/06/18 18:03:57 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\tmp
[2009/09/19 17:20:55 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Trusteer
[2011/04/23 15:27:08 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Ubisoft
[2010/11/01 00:19:58 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\vghd
[2010/10/31 17:59:17 | 000,000,000 | —D | M] – C:\Users\Jas\AppData\Roaming\Windows Live Writer
[2011/07/31 08:00:03 | 000,000,410 | —- | M] () – C:\Windows\Tasks\DriverRobot.job
[2011/08/08 18:53:28 | 000,000,564 | —- | M] () – C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
[2011/08/08 16:11:51 | 000,032,576 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2011/08/08 19:02:00 | 000,000,506 | —- | M] () – C:\Windows\Tasks\SystemToolsDailyTest.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2006/09/18 17:43:36 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/04/11 02:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2009/09/19 20:45:58 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2006/09/18 17:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2008/06/11 09:18:03 | 000,004,761 | RH– | M] () – C:\dell.sdr
[2011/08/08 16:13:39 | 3756,064,768 | -HS- | M] () – C:\hiberfil.sys
[2009/01/10 22:16:18 | 000,022,729 | —- | M] () – C:\newfile.enc
[2009/01/10 22:16:18 | 000,022,729 | —- | M] () – C:\newkey
[2011/08/08 16:13:38 | 1336,934,399 | -HS- | M] () – C:\pagefile.sys
[2011/05/20 14:00:54 | 000,687,648 | —- | M] () – C:\shared.log
[2009/07/29 22:47:08 | 000,000,909 | —- | M] () – C:\updatedatfix.log
[2011/04/18 20:45:11 | 000,002,640 | —- | M] () – C:\{419EFE3B-9DBE-4D0A-B8E1-EE5848932A20}
[2010/10/26 18:17:51 | 000,002,792 | —- | M] () – C:\{759B5F29-2E08-4219-8F52-9777C6065FE5}

< %systemroot%\Fonts\*.com >
[2006/11/02 08:37:12 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 08:37:12 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 08:37:12 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/09/19 20:32:46 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 17:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/01/20 22:23:14 | 000,089,600 | —- | M] (Hewlett-Packard Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\1_HPZPPLHN.DLL
[2008/01/20 22:23:14 | 000,089,600 | —- | M] (Hewlett-Packard Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\HPZPPLHN.DLL
[2006/11/02 08:35:48 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 20:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/01/07 10:04:24 | 000,192,000 | —- | M] (ScreenTime Media) – C:\Windows\saver2.scr
[2010/11/10 02:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/20 22:43:21 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2009/09/19 20:45:23 | 012,820,480 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2009/09/19 20:45:19 | 000,106,496 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2009/09/19 20:45:23 | 000,024,576 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2009/09/19 20:45:29 | 017,403,904 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2009/09/19 20:45:31 | 006,701,056 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2009/06/17 01:13:52 | 000,000,414 | -HS- | M] () – C:\Users\Jas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop (1).ini
[2011/04/26 00:22:37 | 000,000,344 | -HS- | M] () – C:\Users\Jas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/08/08 18:48:46 | 001,915,904 | —- | M] (AVAST Software) – C:\Users\Jas\Desktop\aswMBR.exe
[2011/08/08 18:44:56 | 000,579,584 | —- | M] (OldTimer Tools) – C:\Users\Jas\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-08-05 13:41:23

< End of report >
OTL Extras logfile created on: 08/08/2011 7:01:54 PM - Run 1
OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\Jas\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: dd/MM/yyyy

3.50 Gb Total Physical Memory | 1.76 Gb Available Physical Memory | 50.34% Memory free
8.63 Gb Paging File | 6.92 Gb Available in Paging File | 80.12% Paging File free
Paging file location(s): c:\pagefile.sys 5371 5371 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 220.29 Gb Total Space | 38.70 Gb Free Space | 17.57% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 5.34 Gb Free Space | 53.41% Space Free | Partition Type: NTFS
Drive H: | 7.46 Gb Total Space | 3.46 Gb Free Space | 46.45% Space Free | Partition Type: FAT32

Computer Name: JAS-PC | User Name: Jas | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] – "C:\Program Files\Google\Chrome\Application\chrome.exe" – "%1"
https [open] – "C:\Program Files\Google\Chrome\Application\chrome.exe" – "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{312B6ACF-95C8-4F71-8C7C-3E806D345C8E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{36833003-133D-4E2F-A1CB-FCCF5F1E5229}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{6A91EEBC-9997-4B88-A2EF-D439C078670B}" = lport=67 | protocol=17 | dir=in | name=dhcp discovery service |
"{B3B5384D-1F8E-4143-ADC4-5A35F539A45D}" = lport=67 | protocol=17 | dir=in | name=dhcp discovery service |
"{B3FF8C2F-1AEC-4B8D-89C4-70FCFBB31FB0}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{C3DDA3C4-FBE5-4D05-8B7E-C23932B4D8AF}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{F574F348-BBCA-4996-AF86-D387110A9B66}" = lport=2869 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05614008-2CD2-4D53-87EF-C41F22343BE4}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx9.exe |
"{05E9A591-7FE6-4199-97F8-5598A139979B}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx9.exe |
"{061E53FD-B147-4077-A433-535F37136375}" = protocol=6 | dir=in | app=c:\program files\games\neverwinter nights 2\nwupdate.exe |
"{065B7A85-321A-4DF2-81BB-D9C293832940}" = protocol=17 | dir=in | app=c:\program files\games\sierra\fear\fear.exe |
"{123A7834-F1EF-4F5E-A39C-3A745BFA4782}" = protocol=6 | dir=in | app=c:\program files\games\neverwinter nights 2\nwn2main.exe |
"{14A6505D-E932-4F17-8D28-41723A615DA0}" = protocol=17 | dir=in | app=c:\program files\mass effect 2\binaries\masseffect2.exe |
"{1C005C6D-6480-40A8-9808-A4B6C807B58F}" = protocol=17 | dir=in | app=c:\program files\windows searchqu toolbar\datamngr\toolbar\dtuser.exe |
"{28E4E121-11A1-4D4B-B726-72B3C71A4C3C}" = protocol=17 | dir=in | app=c:\program files\games\neverwinter nights 2\nwn2server.exe |
"{32366158-2491-4446-ACCF-23AD39A962A3}" = protocol=17 | dir=in | app=c:\program files\games\sierra\fear\fearmp.exe |
"{33E05737-52CA-4A10-87E6-AF6E060F7B3C}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_launcher.exe |
"{39476945-B5ED-4D8F-8314-E7392DC115C5}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{3EE31BD8-16F3-4CF2-958D-CC2605BE870F}" = protocol=6 | dir=in | app=c:\program files\games\sierra\fear\fearmp.exe |
"{45DAB50D-251A-4CD0-8573-4CAD9AC5BD2F}" = protocol=17 | dir=in | app=c:\program files\games\neverwinter nights 2\nwn2main_amdxp.exe |
"{482D972A-F3CE-424B-9D22-B8BA045782D1}" = protocol=17 | dir=in | app=c:\program files\mass effect\binaries\masseffect.exe |
"{483D3BF4-0928-4971-AB09-88526D2F91EB}" = protocol=6 | dir=in | app=c:\program files\mass effect 2\masseffect2launcher.exe |
"{4A17356E-CD29-4F25-8B41-743010F663B5}" = protocol=17 | dir=in | app=c:\program files\dragon age\bin_ship\daupdatersvc.service.exe |
"{4CD7EEC0-15DB-4F3C-9C39-22A396F402C9}" = dir=in | app=c:\program files\dell\mediadirect\mediadirect.exe |
"{4DC12FE2-8D7C-4D30-AF6D-E6E0FCC554B4}" = protocol=6 | dir=in | app=c:\program files\dragon age 2\bin_ship\dragonage2.exe |
"{4DD3E6A3-4648-4B21-A428-0242746EAE48}" = protocol=17 | dir=in | app=c:\program files\mass effect\masseffectlauncher.exe |
"{4FDBC1BA-58D1-4FA0-969F-7534B19015E3}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx10.exe |
"{549E9AA2-9FDC-4449-9503-38767248A8C9}" = protocol=17 | dir=in | app=c:\program files\pure networks\network magic\nmsrvc.exe |
"{5BE1B8CE-F75C-49A3-A9B9-B6A5A140A82C}" = protocol=6 | dir=in | app=c:\program files\mass effect 2\binaries\masseffect2.exe |
"{5F856C33-FD45-48F4-8101-7EFE3C61C020}" = protocol=17 | dir=in | app=c:\program files\games\sierra\fear\fear.exe |
"{6365D074-C9EE-437D-BF7F-B0062F62417A}" = protocol=6 | dir=in | app=c:\program files\windows searchqu toolbar\datamngr\toolbar\dtuser.exe |
"{680FCAFD-B191-40D8-9B1D-D05DAD72280B}" = protocol=17 | dir=in | app=c:\program files\common files\pure networks shared\platform\nmsrvc.exe |
"{6CA523A5-815A-49D9-B52F-00733C2C007B}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{707907F3-1923-4D59-A5C6-648737BE58BC}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{72CA6275-301E-4785-895E-779D3D92A54F}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{7962A9FC-E47B-4853-9D65-5D24B922684F}" = protocol=17 | dir=in | app=c:\program files\dragon age 2\dragonage2launcher.exe |
"{804744FC-9165-4F75-8808-C82EFC1A074B}" = dir=in | app=c:\program files\dell\mediadirect\pcmservice.exe |
"{8312D619-1AC4-48EE-BCD9-EA75089FA246}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{8DDCA4CE-9A36-4CB0-8100-69E5C3BEE7E6}" = protocol=6 | dir=in | app=c:\program files\dragon age\bin_ship\daorigins.exe |
"{8FF31775-1790-4631-840B-5AB70FDEAFAC}" = protocol=6 | dir=in | app=c:\program files\mass effect\binaries\masseffect.exe |
"{92BD1324-D9BC-40A2-A941-712574991DCC}" = protocol=6 | dir=in | app=c:\program files\dragon age\daoriginslauncher.exe |
"{92CB0B1F-4681-4E3B-BDD5-84E0D62937E8}" = protocol=6 | dir=in | app=c:\program files\games\sierra\fear\fear.exe |
"{93C3337C-CE0A-44BD-BB36-2178FF3BAEB1}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"{99226487-50FB-4605-BE5D-7F5CBD1AA9B1}" = protocol=6 | dir=in | app=c:\program files\games\neverwinter nights 2\nwn2server.exe |
"{994B1A7F-9480-4E71-93D9-380E11DC3B2C}" = protocol=17 | dir=in | app=c:\program files\games\neverwinter nights 2\nwn2main.exe |
"{9C545783-79D6-47EF-ACB4-3BA45C0AE47C}" = dir=in | app=c:\program files\dell\mediadirect\kernel\dms\clmsservice.exe |
"{A0BBFDB1-C77B-4A9A-B4B9-A7A7E041665A}" = protocol=17 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_dx10.exe |
"{A456AF03-6043-40AF-877D-4BF021FAA104}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{A6355A2A-63D8-473C-A2CB-947103737CC0}" = protocol=6 | dir=in | app=c:\program files\games\sierra entertainment\fear perseus mandate\fearxp2.exe |
"{A9D1FD34-CF60-4BC5-B556-E0139C209474}" = protocol=17 | dir=in | app=c:\program files\dragon age\bin_ship\daorigins.exe |
"{B2A37185-FAE9-4C24-B602-34CA7E0FC3A7}" = protocol=17 | dir=in | app=c:\program files\games\sierra entertainment\fear perseus mandate\fearxp2.exe |
"{B9759490-23B4-4362-8374-C8FC6981408C}" = protocol=6 | dir=in | app=c:\program files\common files\pure networks shared\platform\nmsrvc.exe |
"{BA76A4A7-62B2-40C6-8644-EFA305C4EEE6}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{BB55161D-50B1-4E15-8AA0-D40ADBAE65FE}" = protocol=6 | dir=in | app=c:\program files\pure networks\network magic\nmsrvc.exe |
"{C34A050B-30E8-4583-8B69-79792FDE026B}" = protocol=17 | dir=in | app=c:\program files\dragon age\daoriginslauncher.exe |
"{C84C4446-E162-48F8-902C-CD2F95261DBB}" = protocol=6 | dir=in | app=c:\program files\games\neverwinter nights 2\nwn2main_amdxp.exe |
"{C8E908F4-106F-4A1C-A68E-0443E1BA2A2C}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"{CAB3EA2D-1953-48EE-8280-67E5F7C2391C}" = protocol=6 | dir=in | app=c:\program files\dragon age 2\dragonage2launcher.exe |
"{D1852D5B-B318-41BE-B328-86F60B497761}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{DB6A4B54-125F-4F3B-8FD1-F687D4A0A27F}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\fear2\fear2.exe |
"{DD6E946F-1495-40BE-9B78-2686A3E85698}" = protocol=6 | dir=in | app=f:\limewire\limewire.exe |
"{DF5EB9AC-7EFE-40C4-B4E6-7B9D5A28CFAB}" = protocol=6 | dir=in | app=c:\program files\games\sierra\fear\fear.exe |
"{E11216B8-C141-4A79-9521-25D9D40B8C02}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{E75FB731-D09E-41B5-B188-A89B0517A0D7}" = protocol=6 | dir=in | app=c:\program files\dragon age\bin_ship\daupdatersvc.service.exe |
"{E76032BC-1DFC-46B7-8FD2-533841DBC7A3}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{E98332FA-869A-44E6-B309-C14DABD52217}" = protocol=17 | dir=in | app=f:\limewire\limewire.exe |
"{EB34D388-2A5E-412E-ADCB-06D97417C466}" = protocol=17 | dir=in | app=c:\program files\dragon age\bin_ship\daupdatersvc.service.exe |
"{EC6420E6-D0DD-475E-9467-49B25B94959D}" = protocol=6 | dir=in | app=c:\program files\mass effect\masseffectlauncher.exe |
"{F5B6FA69-886F-4FAB-A908-55D9E2CDB9D6}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\fear2\fear2.exe |
"{F8506DA1-9DF8-4A31-AD4F-EBA3858ECE9E}" = dir=in | app=c:\program files\dell\mediadirect\kernel\dmp\clbrowserengine.exe |
"{F8C3B37C-5849-40A1-94DF-D72577DE5F98}" = protocol=6 | dir=in | app=c:\program files\ubisoft\assassin's creed\assassinscreed_launcher.exe |
"{F972CD28-10E1-41DB-A46A-DC03F84245F3}" = protocol=17 | dir=in | app=c:\program files\games\neverwinter nights 2\nwupdate.exe |
"{FACE32FB-C55F-4798-8984-8399E1236F0D}" = protocol=17 | dir=in | app=c:\program files\dragon age 2\bin_ship\dragonage2.exe |
"{FB9AF604-FFC7-49CA-B3E4-882326454B04}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{FDA5A78D-8474-453B-B6D0-49083192D51E}" = protocol=17 | dir=in | app=c:\program files\mass effect 2\masseffect2launcher.exe |
"{FE3B052D-62A0-4EFC-AD02-842578E999E4}" = protocol=6 | dir=in | app=c:\program files\dragon age\bin_ship\daupdatersvc.service.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0090A87C-3E0E-43D4-AA71-A71B06563A4A}" = Dell Support Center
"{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status
"{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{084A9731-D05B-4ADA-B4A0-0ADD25FD7152}" = Splinter Cell Pandora Tomorrow
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0CB9668D-F979-4F31-B8B8-67FE90F929F8}" = Bonjour
"{0D2E9DCB-9938-475E-B4DD-8851738852FF}" = AIO_Scan
"{10CD824C-BA37-440E-8B5C-F6C0CB926347}" = CH-47D APU Training Aid
"{14C87AA7-08E6-419F-A165-998EBE5023D7}" = Oblivion - Knights of the Nine
"{16D919E6-F019-4E15-BFBE-4A85EF19DA57}" = Oblivion - Spell Tomes
"{17271AB7-D7EC-4a95-9861-FAFE5A4664AD}" = 6300Trb
"{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan
"{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1B0FBB9A-995D-47cd-87CD-13E68B676E4F}" = Mass Effect
"{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}" = Live! Cam Avatar v1.0
"{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}" = Rapport
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20C53FA2-4307-4671-A93F-9463B29DFCF1}" = Symantec Technical Support Web Controls
"{23B14BE4-5277-40B2-B602-3FCD456C27BC}" = Protector Suite QL 5.8
"{24AE6B5B-3D5A-488C-9224-1BEE11F75DD9}" = TurboTax 2010
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java™ 6 Update 26
"{26EF4BE5-867E-4C05-A3F1-47D74EBD204C}" = PPC CH-47
"{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1" = ConvertHelper 2.2
"{2B653229-9854-4989-B780-D978F5F13EAB}" = FEAR
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{2F2E3D62-8B8C-448F-8900-451325E50948}" = Oblivion - Wizard's Tower
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java™ 6 Update 5
"{324CEC09-007A-48eb-90E0-9D42D4D5EB0A}" = NetDeviceManager
"{326957C7-83FD-4550-A59A-849B7B4297DE}" = Microsoft Easy Assist v2
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{341201D4-4F61-4ADB-987E-9CCE4D83A58D}" = Windows Live Toolbar Extension (Windows Live Toolbar)
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{350FB27C-CF62-4EF3-AF9D-70FF313FE221}" = iTunes
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{39CB30DB-27F8-4dd4-A294-CB4AE3B584FD}" = Copy
"{3ABEBD00-299D-4DCA-967F-B912163AB5EA}" = Oblivion - Horse Armor Pack
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{446DE210-2833-43A3-9916-799DD0729C18}" = calibre
"{49F2B650-2D7B-4F59-B33D-346F63776BD3}" = DocProc
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B6AD248-D3BF-426A-8D64-847288154F13}" = QuickSet
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4D3C9F4B-4B7D-4E5D-99B9-0123AB0D51ED}" = Dell DataSafe Online
"{4E5386F5-C0F6-4532-A54A-374865AEAB71}" = Cisco PEAP Module
"{520F4B09-3A51-47A2-82B0-9FF1DC2D20FA}" = Oblivion - Vile Lair
"{5335DADB-34BA-4AE8-A519-648D78498846}" = Skype™ 5.3
"{53C6D09E-EAB6-49E5-BA4C-BA7FF13830FB}" = Sound Blaster Audigy ADVANCED MB
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.54.06
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6B7B6D4D-8F9B-4CB3-8CA4-BCA9CC4C1A22}" = EDocs
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}" = Mass Effect 2
"{76F9CF97-FC4B-4E20-B363-D127C888448F}" = Cisco LEAP Module
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7745B7A9-F323-4BB9-9811-01BF57A028DA}" = Map Button (Windows Live Toolbar)
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites for Windows Live Toolbar
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{7EFA5E6F-74F7-4AFB-8AEA-AA790BD3A76D}" = DellSupport
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8713CE86-5F4D-4A80-825E-AC1B2C777F85}" = honestech Audio Recorder 2.0 Deluxe
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{888DD888-82BE-4D85-BCB2-2E042CD3E844}" = Tom Clancy's Splinter Cell Chaos Theory
"{89CEAE14-DD0F-448E-9554-15781EC9DB24}" = Product Documentation Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed
"{8D0BB1D1-E9FB-49E9-A9C1-09C00F38DA0C}" = FEAR Perseus Mandate
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E7D7400-4F4F-409D-8F8A-43BF1DAC575A}" = TouchChip USB Driver 2.6
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_HOMESTUDENTR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_HOMESTUDENTR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch
"{98CB24AD-52FB-DB5F-FF1F-C8B3B9A1E18E}" = Visual C++ 8.0 CRT (x86) WinSXS MSM
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}" = OutlookAddinSetup
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp
"{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}" = MediaDirect
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad
"{A0BC5BCD-893F-47F4-8903-FDC7CAC2AFB1}" = honestech Audio Recorder 2.0 Deluxe
"{A174402A-2EE6-4B86-A930-7BC85A9933BD}" = Tom Clancy's Splinter Cell
"{A1EFAC47-885A-4E74-AAA4-8B56B71B706A}" = Garmin City Navigator North America NT 2010.40
"{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{A5C4AD72-25FE-4899-B6DF-6D8DF63C93CF}" = Highlight Viewer (Windows Live Toolbar)
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{A9F6CFB0-806D-11E0-8EA1-B8AC6F97B88E}" = Google Earth Plug-in
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.5
"{AEC81925-9C76-4707-84A9-40696C613ED3}" = Dragon Age: Origins
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{B7881B81-33DC-4114-A689-AFD664870770}" = NGRAIN® Mobilizer 3.2
"{BDEDBDD9-C97B-4333-B7BE-6979A34F6F74}" = 6300_Help
"{BDFE199D-E889-4BB6-BECB-C4BDF5700849}" = Documents To Go
"{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{BF53252E-4AB2-4C7F-A0FD-6100755745E3}" = Cisco EAP-FAST Module
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{C716522C-3731-4667-8579-40B098294500}" = Toolbox
"{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}" = HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}" = Apple Mobile Device Support
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D7769185-9A7C-48D4-8874-5388743A1DE2}" = Music, Photos & Videos Launcher
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport
"{E09575B2-498D-4C8B-A9D2-623F78574F29}" = AIO_CDB_Software
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2CB21A2-FD45-4353-888B-FFD071270F35}" = 6300
"{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply
"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime
"{EC425CFC-EE78-4A91-AA25-3BFA65B75364}" = Oblivion - Orrery
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{EEEB604C-C1A7-4f8c-B03F-56F9C1C9C45F}" = Fax
"{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery
"{EF295F5C-7B57-47AA-8889-6B3E8E214E89}" = Oblivion - Mehrunes Razor
"{F084395C-40FB-4DB3-981C-B51E74E1E83D}" = Smart Menus (Windows Live Toolbar)
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F20C1251-1D0A-4944-B2AE-678581B33B19}" = Neverwinter Nights 2
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F2E23139-3404-4E3C-9855-7724415D62A5}" = Dragon Age II
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{FD6034A3-655C-49F0-B496-D4CBFD74D7A7}" = Palm Desktop by ACCESS
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FFFFFD17-B460-41EB-93F1-C48ABAD63828}" = Oblivion - Thieves Den
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Advanced Video FX Engine" = Advanced Video FX Engine
"Broadcom 802.11b Network Adapter" = Dell Wireless WLAN Card
"C-Media CM102 Like Sound Driver" = C-Media CM102 Like Sound Driver
"Creative OEM002" = Laptop Integrated Webcam Driver (1.04.01.1011)
"Dell Support Center" = Dell Support Center
"Dell Webcam Center" = Dell Webcam Center
"Dell Webcam Manager" = Dell Webcam Manager
"Digital Editions" = Adobe Digital Editions
"FinePix Genie_is1" = FUJIFILM MyFinePix Studio 1.0
"FLV Player" = FLV Player 2.0 (build 25)
"Free FLV Converter_is1" = Free FLV Converter V 7.1.0
"Free Mp3 Wma Converter_is1" = Free Mp3 Wma Converter V 1.9
"GameSpy Arcade" = GameSpy Arcade
"Google Desktop" = Google Desktop
"GoToAssist" = GoToAssist 8.0.0.514
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Imaging Device Functions" = HP Imaging Device Functions 8.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0
"HPExtendedCapabilities" = HP Customer Participation Program 8.0
"HPOCR" = HP OCR Software 8.0
"InstallShield_{621C02EA-AAFF-4026-A903-165D59529A16}" = Driver Detective
"Kobo" = Kobo
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 5.0 (x86 en-GB)" = Mozilla Firefox 5.0 (x86 en-GB)
"NIS" = Norton Internet Security
"NortonPCCheckup" = Norton PC Checkup
"NVIDIA Drivers" = NVIDIA Drivers
"Picasa 3" = Picasa 3
"Rapport_msi" = Rapport
"saver2" = saver2
"Search Toolbar" = Search Toolbar
"Searchqu 0 MediaBar" = Windows Searchqu Toolbar
"Steam App 16450" = F.E.A.R. 2: Project Origin
"Thief2DeinstallKey" = Thief 2
"VLC media player" = VideoLAN VLC media player 0.8.6f
"WinLiveSuite" = Windows Live Essentials
"Xfire" = Xfire (remove only)

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 26/05/2010 9:11:37 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 26/05/2010 9:11:37 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1451

Error - 26/05/2010 9:11:37 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1451

Error - 26/05/2010 9:11:38 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 26/05/2010 9:11:38 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2450

Error - 26/05/2010 9:11:38 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2450

Error - 26/05/2010 9:11:39 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 26/05/2010 9:11:39 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 3542

Error - 26/05/2010 9:11:39 AM | Computer Name = Jas-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3542

Error - 27/05/2010 4:22:20 PM | Computer Name = Jas-PC | Source = WinMgmt | ID = 10
Description =

[ Broadcom Wireless LAN Events ]
Error - 17/02/2011 1:16:12 AM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 00:16:10, Thu, Feb 17, 11 Error - Unable to gain access to user store


Error - 19/02/2011 4:31:50 PM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 15:31:48, Sat, Feb 19, 11 Error - Unable to gain access to user store


Error - 24/03/2011 5:58:32 PM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 17:58:32, Thu, Mar 24, 11 Error - Unable to gain access to user store


Error - 04/04/2011 6:04:37 AM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 06:04:35, Mon, Apr 04, 11 Error - Unable to gain access to user store


Error - 04/04/2011 11:36:24 AM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 11:36:22, Mon, Apr 04, 11 Error - Unable to gain access to user store


Error - 01/05/2011 10:51:34 AM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 10:51:31, Sun, May 01, 11 Error - Unable to gain access to user store


Error - 10/05/2011 3:48:09 PM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 15:48:07, Tue, May 10, 11 Error - Unable to gain access to user store


Error - 10/05/2011 10:13:33 PM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 22:13:31, Tue, May 10, 11 Error - Unable to gain access to user store


Error - 16/05/2011 7:18:49 PM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 19:18:49, Mon, May 16, 11 Error - Unable to gain access to user store


Error - 20/05/2011 5:15:45 PM | Computer Name = Jas-PC | Source = WLAN-Tray | ID = 0
Description = 17:15:42, Fri, May 20, 11 Error - Unable to gain access to user store


[ Media Center Events ]
Error - 21/04/2009 6:04:37 PM | Computer Name = Jas-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 16/06/2009 9:30:39 PM | Computer Name = Jas-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

Error - 11/08/2009 11:34:16 PM | Computer Name = Jas-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule.

[ OSession Events ]
Error - 16/03/2011 4:55:46 PM | Computer Name = Jas-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 403
seconds with 360 seconds of active time. This session ended with a crash.

Error - 02/06/2011 2:11:27 PM | Computer Name = Jas-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 11
seconds with 0 seconds of active time. This session ended with a crash.

Error - 02/06/2011 2:44:17 PM | Computer Name = Jas-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 11
seconds with 0 seconds of active time. This session ended with a crash.

Error - 02/06/2011 2:46:50 PM | Computer Name = Jas-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 13
seconds with 0 seconds of active time. This session ended with a crash.

Error - 03/06/2011 2:00:33 PM | Computer Name = Jas-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 7
seconds with 0 seconds of active time. This session ended with a crash.

Error - 25/06/2011 10:12:07 AM | Computer Name = Jas-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 23
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 08/08/2011 4:21:49 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7022
Description =

Error - 08/08/2011 6:40:03 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7011
Description =

Error - 08/08/2011 6:40:09 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 08/08/2011 6:40:09 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 08/08/2011 6:40:09 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 08/08/2011 6:40:10 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 08/08/2011 6:40:11 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 08/08/2011 6:40:12 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 08/08/2011 6:40:13 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 08/08/2011 6:40:13 PM | Computer Name = Jas-PC | Source = Service Control Manager | ID = 7000
Description =


< End of report >

ComboFix 11-08-15.06 - Jas 14/08/2011 21:58:44.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.2.1033.18.3581.1940 [GMT -4:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\5830\Downloads\652c72d6-ea41-4060-96f7-060298329393.dll
c:\programdata\PCDr\5830\Downloads\ae67b364-b69e-471e-b177-2459120b84d4.dll
c:\programdata\PCDr\5830\Downloads\bbfa36b0-30b0-4e36-8d8c-69df1d87626b.dll
c:\programdata\PCDr\5830\Downloads\daf30858-49d8-434b-b4b1-068b5dc9267c.dll
c:\users\Jas\GoToAssistDownloadHelper.exe
.
.
((((((((((((((((((((((((( Files Created from 2011-07-15 to 2011-08-15 )))))))))))))))))))))))))))))))
.
.
2011-08-15 02:17 . 2011-08-15 02:18 ——– d—–w- c:\users\Jas\AppData\Local\temp
2011-08-15 02:17 . 2011-08-15 02:17 ——– d—–w- c:\users\Default\AppData\Local\temp
2011-08-12 02:47 . 2011-08-12 02:48 ——– d—–w- c:\program files\ERUNT
2011-08-10 19:20 . 2011-06-17 16:03 375808 —-a-w- c:\windows\system32\winsrv.dll
2011-08-10 19:20 . 2011-07-06 15:31 214016 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-08-10 19:19 . 2011-06-06 10:59 2409784 —-a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-08-10 19:19 . 2011-06-20 08:54 3602832 —-a-w- c:\windows\system32\ntkrnlpa.exe
2011-08-10 19:19 . 2011-06-20 08:54 3550096 —-a-w- c:\windows\system32\ntoskrnl.exe
2011-08-10 19:19 . 2011-06-17 20:13 905104 —-a-w- c:\windows\system32\drivers\tcpip.sys
2011-08-10 18:33 . 2011-08-10 18:33 ——– d—–w- c:\users\Jas\AppData\Roaming\thriXXX
2011-08-09 01:18 . 2011-08-09 01:18 ——– d—–w- c:\program files\Apple Software Update
2011-08-08 20:14 . 2011-08-08 20:14 ——– d—–w- c:\programdata\boost_interprocess
2011-08-08 20:10 . 2011-08-08 20:25 ——– d—–w- c:\users\Jas\AppData\Local\NPE
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-05 19:59 . 2009-08-04 13:23 307200 —-a-w- c:\windows\system32\TubeFinder.exe
2011-06-22 22:01 . 2011-06-22 22:01 53816 —-a-w- c:\windows\system32\drivers\RapportKELL.sys
2011-06-10 20:28 . 2011-05-18 14:51 404640 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-02 13:34 . 2011-07-14 14:02 2043392 —-a-w- c:\windows\system32\win32k.sys
2011-05-24 23:14 . 2010-10-07 18:52 222080 ——w- c:\windows\system32\MpSigStub.exe
2011-06-29 13:58 . 2011-05-13 04:16 142296 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2011-04-23 04:44 . 2011-04-23 04:44 119808 —-a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay]
@="{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}"
[HKEY_CLASSES_ROOT\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}]
2008-09-15 20:25 4233480 —-a-w- c:\program files\Protector Suite QL\farchns.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen]
@="{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}"
[HKEY_CLASSES_ROOT\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}]
2008-09-15 20:25 4233480 —-a-w- c:\program files\Protector Suite QL\farchns.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2008-01-25 167936]
"OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2008-03-04 36864]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-12-08 3444736]
"DELL Webcam Manager"="c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 118784]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2011-04-23 30192]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-11 49152]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"VolPanel"="c:\program files\Creative\SBAudigy\Volume Panel\VolPanlu.exe" [2006-11-27 180224]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-10-10 69632]
"SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2008-02-15 405504]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"PSQLLauncher"="c:\program files\Protector Suite QL\launcher.exe" [2008-09-15 49928]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-07-06 1047656]
.
c:\users\Jas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]
OneNote Table Of Contents.onetoc2 [2008-12-30 3656]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2009-1-10 809488]
QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2008-2-22 1193240]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2008-09-15 20:12 96520 —-a-w- c:\program files\Protector Suite QL\psqlpwd.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\Protector Suite QL\psqlpwd.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^DataViz Inc Messenger.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\DataViz Inc Messenger.lnk
backup=c:\windows\pss\DataViz Inc Messenger.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HotSync Manager.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\HotSync Manager.lnk
backup=c:\windows\pss\HotSync Manager.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2010-09-01 12:32 421160 —-a-w- c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
2007-12-21 15:58 184320 —-a-w- c:\program files\Dell\MediaDirect\PCMService.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-08-10 09:15 421888 —-a-w- c:\program files\QuickTime\QTTask.exe
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-10 136176]
R3 DAUpdaterSvc;Dragon Age: Origins - Content Updater;c:\program files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [x]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2011-04-23 30192]
R3 gupdatem;Google Update Service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-03-10 136176]
R3 libusb0;libusb-win32 - Kernel Driver, Version 1.2.4.0;c:\windows\system32\drivers\libusb0.sys [2010-06-24 21504]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-07-06 41272]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [2008-05-06 11520]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 iaNvStor;Intel® Turbo Memory Controller;c:\windows\system32\drivers\ianvstor.sys [2007-09-07 209408]
S0 RapportKELL;RapportKELL;c:\windows\System32\Drivers\RapportKELL.sys [2011-06-22 53816]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NIS\1206000.01D\SYMDS.SYS [2011-01-27 340088]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1206000.01D\SYMEFA.SYS [2011-03-15 744568]
S1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110723.001\BHDrvx86.sys [2011-07-23 815736]
S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110812.030\IDSvix86.sys [2011-08-02 367736]
S1 RapportCerberus_29574;RapportCerberus_29574;c:\programdata\Trusteer\Rapport\store\exts\RapportCerberus\29574\RapportCerberus32_29574.sys [2011-08-05 216912]
S1 RapportEI;RapportEI;c:\program files\Trusteer\Rapport\bin\RapportEI.sys [2011-06-22 66360]
S1 RapportPG;RapportPG;c:\program files\Trusteer\Rapport\bin\RapportPG.sys [2011-06-22 158904]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NIS\1206000.01D\Ironx86.SYS [2011-01-27 136312]
S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\NIS\1206000.01D\SYMTDIV.SYS [2011-03-22 331384]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\aestsrv.exe [2007-09-20 73728]
S2 NIS;Norton Internet Security;c:\program files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe [2011-04-17 130008]
S2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher;c:\program files\Norton PC Checkup\Engine\2.0.4.131\SymcPCCULaunchSvc.exe [2010-12-21 120248]
S2 PCCUJobMgr;Common Client Job Manager Service;c:\program files\Norton PC Checkup\Engine\2.0.4.131\ccSvcHst.exe [2009-08-24 126392]
S2 RapportMgmtService;Rapport Management Service;c:\program files\Trusteer\Rapport\bin\RapportMgmtService.exe [2011-06-22 870200]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-07-28 105592]
.
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - BHDRVX86
*NewlyCreated* - CCHP
*NewlyCreated* - SRTSP
*NewlyCreated* - SRTSPX
*NewlyCreated* - SYMIRON
*NewlyCreated* - SYMTDIV
*Deregistered* - ccHP
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
HPService REG_MULTI_SZ HPSLPSVC
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder
.
2011-08-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-10 17:08]
.
2011-08-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-03-10 17:08]
.
2011-08-09 c:\windows\Tasks\Norton Internet Security - Run Full System Scan - Jas.job
- c:\program files\Norton Internet Security\Engine\18.6.0.29\navw32.exe [2011-05-10 00:28]
.
2011-08-09 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\Dell Support Center\uaclauncher.exe [2011-06-21 18:08]
.
2011-08-15 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\Dell Support Center\uaclauncher.exe [2011-06-21 18:08]
.
.
——- Supplementary Scan ——-
.
uStart Page =
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 192.168.0.1
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.1.0/GarminAxControl.CAB
FF - ProfilePath - c:\users\Jas\AppData\Roaming\Mozilla\Firefox\Profiles\hlcd83w8.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - www.google.ca
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-DellSupportCenter - c:\program files\Dell Support Center\bin\sprtcmd.exe
HKLM-Run-DellSupportCenter - c:\program files\Dell Support Center\bin\sprtcmd.exe
Notify-GoToAssist - c:\program files\Citrix\GoToAssist\514\G2AWinLogon.dll
AddRemove-3DSexVilla2-114.001 - i:\3dvilla\thriXXX\3D SexVilla 2 - Everlust\Binaries\Uninstall-3DSexVilla2-Everlust-114.001.exe
AddRemove-C-Media CM102 Like Sound Driver - c:\windows\system32\CM102rm.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-14 22:18
Windows 6.0.6002 Service Pack 2 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\NIS]
"ImagePath"="\"c:\program files\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files\Norton Internet Security\Engine\18.6.0.29\diMaster.dll\" /prefetch:1"
–
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\PCCUJobMgr]
"ImagePath"="\"c:\program files\Norton PC Checkup\Engine\2.0.4.131\ccSvcHst.exe\" /s \"PCCUJobMgr\" /m \"c:\program files\Norton PC Checkup\Engine\2.0.4.131\diMaster.dll\" /prefetch:1"
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-2433036754-4184192211-1337042601-1000\Software\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC]
@Denied: (C D) (Everyone)
.
[HKEY_USERS\S-1-5-21-2433036754-4184192211-1337042601-1000\Software\SecuROM\License information*]
"datasecu"=hex:8f,ed,42,b2,ba,f9,84,a5,74,82,a5,5b,2e,43,3e,0f,d6,c1,d9,6e,59,
a1,15,5e,38,8b,0c,31,be,14,79,91,6e,c7,8d,cf,ef,ac,d3,bc,47,74,22,8a,3f,0f,\
"rkeysecu"=hex:a6,9a,16,cf,8d,49,22,9c,8d,4d,40,00,61,0f,85,ce
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC]
@Denied: (C D) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC\Channels]
@Denied: (C D) (Everyone)
"ccSvcHst_UserSession_7928"="{0E1E07D0-154D-40FB-9EE8-99085376DADE}"
"ccSvcHst_UserSession_4524"="{9301AD7D-25CF-484F-94A7-069BEBF762E5}"
"ccSvcHst_UserSession_408"="{F3340D61-3258-4668-8046-CB9E24596D38}"
"ccSvcHst_UserSession_1860"="{47C153E8-8402-472E-8F23-587382E94751}"
"ccSvcHst_UserSession_2128"="{B0BBFD4B-2C6D-496D-BE3B-0866B599A4F7}"
"ccSvcHst_UserSession_496"="{3CEBF2A6-5F99-4958-B511-2254ECB57497}"
"ccSvcHst_UserSession_2564"="{0A7016B0-B630-4ECD-8734-F0622908D382}"
"ccSvcHst_UserSession_3432"="{00FED740-F71D-4E13-BFDB-0A2DF9E06F39}"
"ccSvcHst_UserSession_3024"="{8C318366-5FF3-458C-9597-6EC5899402B6}"
"ccSvcHst_UserSession_2776"="{D51D6254-5CF4-42D2-AAD3-75C43567658C}"
"ccSvcHst_UserSession_2356"="{D3265DE2-0955-40F1-9503-0BB14533B633}"
"ccSvcHst_UserSession_3868"="{EFC6336C-EDDD-48F7-8F8F-C909B91E4C0B}"
"ccSvcHst_UserSession_3600"="{C06D3C4D-D130-40EF-AE9E-1066887A3E7E}"
"ccSvcHst_UserSession_3692"="{41078930-8D12-4621-9C9E-E6F7AC4AA272}"
"ccSvcHst_UserSession_672"="{4361210B-6686-46A5-8C1A-0B1BA30308CF}"
"ccSvcHst_UserSession_2424"="{812B743F-7C11-43F5-831A-78BD78817A48}"
"ccSvcHst_UserSession_3516"="{1DA28031-0969-472C-970D-5DF061164FAC}"
"ccSvcHst_UserSession_4268"="{687412B5-442B-4256-BDB5-2D96E0B36C09}"
"ccSvcHst_UserSession_1504"="{FD509181-30AF-4430-995B-EE0E5DF178D2}"
"ccSvcHst_UserSession_5336"="{0AA0C197-8928-4D8E-A60F-9E732D887BB8}"
"ccSvcHst_UserSession_1552"="{1E6811D1-51D7-4969-9567-877C9A9231DE}"
"ccSvcHst_UserSession_4072"="{A22813BF-6FFA-40D3-AB29-59A9979AFC87}"
"ccSvcHst_UserSession_5800"="{C66F50BE-4FCA-452B-8135-1D5AFB52446F}"
"ccSvcHst_UserSession_2212"="{33A005FA-A128-4A31-9234-37317622F799}"
"ccSvcHst_UserSession_3816"="{F9D30CCE-D055-43D7-AFA7-B48411282234}"
"ccSvcHst_UserSession_3452"="{4C52D2C2-BBF1-40EB-BA71-B97FD8C9AD2F}"
"ccSvcHst_UserSession_2056"="{90076733-E758-4C52-BC09-A4A88EE4F835}"
"ccSvcHst_UserSession_528"="{CDF5F42F-1B83-4C4F-819D-05DFB7378368}"
"ccSvcHst_UserSession_568"="{D298E936-40DA-48F7-A75D-EADFA0C5B458}"
"ccSvcHst_UserSession_3376"="{16F80961-8FAF-47A6-A4E7-C3D318081660}"
"ccSvcHst_UserSession_3180"="{C055F6E3-AC40-4452-ADB0-23D2E497E456}"
"ccSvcHst_UserSession_3980"="{D727EBED-564A-4B73-9434-313C97681D69}"
"ccSvcHst_UserSession_2516"="{04FA70CD-448B-48D3-8DBF-6F8AC326D262}"
"ccSvcHst_UserSession_4016"="{900961F8-BFE9-4B38-B6CA-6589E8FC84CB}"
"ccSvcHst_UserSession_2656"="{71BF0CC1-9209-4BD0-BC95-F44C6F32EBC8}"
"ccSvcHst_UserSession_3168"="{246E130F-155A-4D90-BAFF-C4EB8353A567}"
"ccSvcHst_UserSession_3676"="{4263C629-A4CD-40CD-BEFE-D2DC59D9E533}"
"ccSvcHst_UserSession_3064"="{37B56C8C-D63A-4F0F-AC08-3DE96CD85F7E}"
"ccSvcHst_UserSession_2148"="{7EC9DB62-0610-4497-8D49-A1822CDDF156}"
"ccSvcHst_UserSession_3804"="{1896A9EA-808A-45E2-B0AB-35A3614DBBD7}"
"ccSvcHst_UserSession_2664"="{C6BFDC5E-BA87-4A41-AB0A-956C94C86EB8}"
"ccSvcHst_UserSession_2176"="{CB44ABDB-6C0F-4668-BAA9-761512DCA595}"
"ccSvcHst_UserSession_3672"="{039C7F4B-66A0-4EC0-88BC-4DAF10839A99}"
"ccSvcHst_UserSession_2092"="{69ADD176-0E2E-4003-AC17-4A59C47D09E0}"
"ccSvcHst_UserSession_4112"="{19C6EA29-E6CB-449C-81EE-4F38CB85A84B}"
"ccSvcHst_UserSession_3540"="{D72D91D9-6CCA-42A7-ADC4-C25800B75251}"
"ccSvcHst_UserSession_2528"="{6F527929-C42F-4A49-A174-764C18E682B7}"
"ccSvcHst_UserSession_2808"="{8E23D5AD-6E2A-4D9F-A2F3-8D55A3557306}"
"ccSvcHst_UserSession_3884"="{92E129CD-8E13-48EB-BDF5-42C089F4B595}"
"ccSvcHst_UserSession_3696"="{C97B8608-A358-433E-93B9-37CB0E90BF58}"
"ccSvcHst_UserSession_5316"="{8F430045-8F43-4522-AE08-406C247C02ED}"
"ccSvcHst_UserSession_3820"="{5E2EA37D-0485-4DD6-B6AA-31E5E74FF7A4}"
"ccSvcHst_UserSession_2232"="{B1F8880E-85CB-4F55-B7D2-E38B49453B15}"
"ccSvcHst_UserSession_2816"="{88BD2213-8300-4F33-9A4D-14F82CCA8EFF}"
"ccSvcHst_UserSession_3808"="{52692F21-1FBF-4D50-8D30-DE5169E2A246}"
"ccSvcHst_UserSession_3572"="{EC26F2E8-576F-46B3-95E0-9F101351EBB4}"
"g_coUserCommandChannel"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"ccSvcHst_NIS"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"DING_{4467AB8F-68C8-4ab5-9B48-B3E6EB65F6A1}"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ccSettingsService"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ccGenericEvent_Global_EM"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ccGenericEvent_Global_LM"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ccGenericLog_Manager"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ccJobMgr_general_{ABD582DE-8F75-412d-81CF-6A180F1203DD}"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ccJobMgr_session_{ABD582DE-8F75-412d-81CF-6A180F1203DD}"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"{3F11C6A7-CEA8-40c9-88EE-E5461341AE97}_ccSubmissionEngineIPC"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"SNDServiceRequestChannel"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"SymRedirSvcRequestChannel"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"NortonNetServiceIPC"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"NetMapServiceIPC"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"SNDLocationChannel"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"{A2DE0E79-877C-485b-B604-78B170313E9E}_IronIPC"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"_isDataPrComm_"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ncw_performance_IPC"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"_NCWSvcComm_NortonCommunityWatchConfiguration"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"_ProcessDetection_"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"isError_Service_IPC"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"_AvProdSvcComm_"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"BashIPCChannel"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"_HSPlayerCommand_"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"{C4A09495-F6BC-4166-B717-F3F3250462BB}"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"IPS_COMMAND_CHANNEL"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"FWAlert"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ccSvcHst_UserSession_1804"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"{436E95FE-192E-469f-8F34-5038FBA89BF4}1"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"{B44E7D73-F081-414B-ADD2-CD66675A190D}1"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"{9BBA000F-092F-432f-B9DF-9D64FD1C2978}"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"AvProdSession_01"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"clt::AlertChannel2_01"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"AvProdSession_Options_01"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"AvProdSession_MessageCenter_01"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"AvProdSession_Scanless_01"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"AvProdSession_IPUA_01"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"AvProdSession_CanIRun_01"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"TRUSTCHANNEL"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"SDKCHANNEL1"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"ToasterNotify\\SessionID_1"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"AccountServices_1"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"FormHandler_1"="{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"
"g_coVistaProxyChannel"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ipcChannel_ShastaServer"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"_ReputationSvcComm_ReputationPublisher"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
"ncw_reputation_scan_server_IPC"="{355C0F4B-7A17-46A4-8A59-6F7C77770169}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Common Client\ccIPC\Endpoints]
@Denied: (C D) (Everyone)
"{0E1E07D0-154D-40FB-9EE8-99085376DADE}"=""
"{7051307E-A0C8-4E8F-8C20-921558D6F131}"=""
"{4CAB2D65-1473-4B64-8F19-915A20126AAC}"=""
"{8652364D-1C4D-46E9-83FD-0203B80CBBCE}"=""
"{83A0BDD0-307B-40C1-BFB3-DDE41468EACE}"=""
"{5EE6A797-343D-4C10-AA49-4BBA2B34ADE0}"=""
"{765154EA-D349-4B83-A8B8-1A4F6E94634C}"=""
"{F2933192-9CB2-41E5-9D5A-690B1F0DCB62}"=""
"{F3ECDB39-E5FB-41BF-BD55-4B8DE5B563EA}"=""
"{13478B7F-FABF-40EB-AA1E-D0F298B89E1E}"=""
"{D97A3433-C4E7-49B1-89BD-D8B5CFB41606}"=""
"{95DC3211-D1C0-471E-BADE-C33C8D5E7DC7}"=""
"{FBE52D5B-F9AB-4B09-942F-8C939F1FB930}"=""
"{F7E96364-93CD-4726-8F5A-6753F016A059}"=""
"{DAE0269A-BA41-4FD2-BC90-AEECBED9EB99}"=""
"{21944417-BBA8-439D-AA92-6B908D19A336}"=""
"{CB645B1A-2C88-4CA7-93E2-CFA726278618}"=""
"{AC49838D-5AE6-490D-B9F5-D23E8153D551}"=""
"{5976C35D-061B-4A57-93AA-93E9CBD8B170}"=""
"{3331C478-07D8-4D7A-B29A-DA94F7D0DE88}"=""
"{AC92EF23-673F-4A44-9167-AEE852602A8F}"=""
"{1E80F1CD-C4D6-4A84-816C-07FC5DA44D49}"=""
"{9301AD7D-25CF-484F-94A7-069BEBF762E5}"=""
"{833BBFC7-D588-4F3D-AC03-D39CB30F8314}"=""
"{F3340D61-3258-4668-8046-CB9E24596D38}"=""
"{D3E775F9-F5F0-4408-8A9D-BDEFA2238D39}"=""
"{8C0553C7-E8B6-4CA6-9002-D0407B357C51}"=""
"{96F38BC2-BB55-4B13-B58F-C0B5969997D2}"=""
"{7A8A6C4E-102C-44D9-B5B5-64CC6DC8DAB4}"=""
"{1C8E98AB-F117-4F66-942A-53EBF31FE431}"=""
"{47C153E8-8402-472E-8F23-587382E94751}"=""
"{0DB4D9A2-FB68-485E-86A7-8F22968CEC8D}"=""
"{3C91F6E5-4D7B-43F9-A419-74D37056A0A0}"=""
"{5C7E652E-8FC0-4BF2-8E56-1F597C4F9B3B}"=""
"{244D2FD6-135A-4DC3-BCB5-6215EA4010D4}"=""
"{300397E0-0C8B-4F12-B67E-F01A4558C98B}"=""
"{51E418BA-80B2-4A89-B698-8D8E953B0C44}"=""
"{31E707C6-046F-47AF-8A13-7333A952D250}"=""
"{D0F8E187-EBC7-4A35-87FE-4B27E74C061E}"=""
"{C506B88C-4966-4F82-93AE-D49D1A825142}"=""
"{F520FC9C-29F7-43CD-8020-785B9EC8EE10}"=""
"{A2E153DF-A0B5-42D5-95F9-80F31D885228}"=""
"{65373D77-F427-499E-A7CD-A075D477BBDA}"=""
"{D85EFB60-AA50-41F2-81CC-7160D60E2A4E}"=""
"{7414E5EC-052A-4E80-A42E-D959FE8DAAF6}"=""
"{3218D135-14D2-48A2-90A4-DFB22ADAE1A0}"=""
"{7A093622-4C35-4DC5-8606-2EAC9C4B3AD9}"=""
"{1CBC1997-B10B-4964-A0E1-BB5E8226C0FF}"=""
"{513656E1-2AEB-4ADA-A358-B8377F2539C7}"=""
"{B0BBFD4B-2C6D-496D-BE3B-0866B599A4F7}"=""
"{18D3D09D-695B-44CB-98DC-401928F49488}"=""
"{777B95FF-61BA-482D-9694-632626E813FF}"=""
"{E43CFF4D-0482-4E98-8529-AF886D4C3723}"=""
"{0B134880-8B41-43D0-8156-DEB25B5A925E}"=""
"{8F26F51F-44EE-4BA7-801A-5EBA36F3E302}"=""
"{AF23B26E-600B-432D-A0AE-C27C558D6C49}"=""
"{BCFD67E4-E89C-4A0D-9848-FCB3135AFF95}"=""
"{3CEBF2A6-5F99-4958-B511-2254ECB57497}"=""
"{4C050F04-2FC6-405B-8FB6-1A706823633A}"=""
"{9AD40710-7554-4DF9-AEBE-AB570610CF97}"=""
"{02E7B998-2698-451F-BE37-AB53A57E80E2}"=""
"{797FC801-3B0F-4C5E-B580-AEEA409284E0}"=""
"{05BB8320-ECA1-49D2-92DF-F18D5095374E}"=""
"{0A7016B0-B630-4ECD-8734-F0622908D382}"=""
"{B2407EEE-E31E-45D3-BD68-4445B5882E15}"=""
"{E2F86E85-A961-4236-998D-66939CBABF2B}"=""
"{2E5E05D7-7D81-4422-BC44-A7886895F532}"=""
"{00FED740-F71D-4E13-BFDB-0A2DF9E06F39}"=""
"{710D68BE-D717-4479-93F4-5F49728CF029}"=""
"{8C318366-5FF3-458C-9597-6EC5899402B6}"=""
"{EF6C15C7-814B-4933-B220-D7B0188FE5C1}"=""
"{FD12588C-F3C0-4359-A77E-46221C4EA743}"=""
"{DAC1305E-8DF0-4FF4-8BA9-D8043AEDC789}"=""
"{529B4A99-49E0-4E09-9579-669FE4D7C9AC}"=""
"{3B51A7FA-03EF-4C00-A493-30CAC694891E}"=""
"{73905EC2-BC28-419F-A30C-5CE29EB8F8D4}"=""
"{B9CDEB26-7759-4A0E-9B42-A466C1B88F24}"=""
"{D51D6254-5CF4-42D2-AAD3-75C43567658C}"=""
"{1D6A3C68-06DF-4B0E-BD69-57B4B0DA187E}"=""
"{69DB9B04-399B-4968-B84B-D59FA8EED262}"=""
"{C82EFA56-0CD0-4A45-B6C1-6B069C3BF503}"=""
"{D3265DE2-0955-40F1-9503-0BB14533B633}"=""
"{45986818-C529-4612-B57C-891F8FA70A34}"=""
"{EFC6336C-EDDD-48F7-8F8F-C909B91E4C0B}"=""
"{EF058C52-7195-4E34-86EC-49280A8BF68D}"=""
"{7142B3BD-B3B5-4C08-9970-3559BFFF814F}"=""
"{3FE3794E-64BE-406D-BF11-C6D22E723D72}"=""
"{40187450-5226-4274-B901-645D1C11EA8B}"=""
"{4E7800EE-8B2B-425D-982D-B49A7AA5CF17}"=""
"{C06D3C4D-D130-40EF-AE9E-1066887A3E7E}"=""
"{09E9F1FE-A0B2-4CC3-BB1C-B724218612FD}"=""
"{2DCE4063-9EAC-499E-9E46-7AD8A65E7058}"=""
"{97F505E7-326C-46CA-9C52-AF975FF1C434}"=""
"{BB32F1EA-8845-4A04-9FCA-680ABE5F3487}"=""
"{69D366F3-3E54-4AE7-AE91-E06AF3501AFC}"=""
"{15651C57-3D31-44DC-92C6-7264BE196B34}"=""
"{17FA27DD-B14A-4DEF-AE36-6C876385D905}"=""
"{AE9E9C07-9FFC-4748-947F-7F27D5DDECB4}"=""
"{0753117C-B59E-4A9A-96A8-DEBC01D0A67F}"=""
"{DCA5DDAD-D425-49C2-82FF-21CB96EF1176}"=""
"{8E5D66A9-93BF-4711-B313-F38231D7139E}"=""
"{F8E9764C-948D-45ED-A631-5B3FA9D67DC1}"=""
"{050F01D4-B40F-43AF-BECE-8213FC3AB1B1}"=""
"{08D0FD65-2086-40AF-9311-F9B86C2DBDD8}"=""
"{41078930-8D12-4621-9C9E-E6F7AC4AA272}"=""
"{D98C7AB9-D914-4B28-A858-BC837CBFCE33}"=""
"{99972678-1E9E-43A3-8BAC-5DF1C249E7DB}"=""
"{AFFC3F6C-9DAE-4706-8D09-4E677FF7302F}"=""
"{967551A5-1D03-4EF3-ABE4-CBBD00834948}"=""
"{4361210B-6686-46A5-8C1A-0B1BA30308CF}"=""
"{A52F05CC-176A-4557-B2CD-B7CBA6B1D491}"=""
"{5604DC11-C5F7-4BAE-B37A-DB7B5D872EBE}"=""
"{C5A5DF4A-E0AA-4ACD-8DB7-258FF81ECC2E}"=""
"{A1E17940-B115-4C53-AD4E-8A4C465A7E77}"=""
"{60C2B311-38C9-40CB-88F7-FCD438B732C3}"=""
"{B978BF5A-93FF-4DB4-98B5-78DF5BA92E04}"=""
"{812B743F-7C11-43F5-831A-78BD78817A48}"=""
"{87CE2137-D6EB-48EE-81DB-716DD0F1C2AE}"=""
"{DA14CF6B-B2A1-4841-B142-55B7D6974782}"=""
"{0786086A-952E-497A-A173-B282B5D4E955}"=""
"{0EA43AA1-91DB-4DA9-8845-E15333EDCABA}"=""
"{D7D4749F-6324-41C1-A385-7BFD06B06A84}"=""
"{1330AA44-9D5A-484A-BDF8-58671F0B8F1E}"=""
"{4008B49F-D839-4A27-9CB8-11525297DBE3}"=""
"{1DA28031-0969-472C-970D-5DF061164FAC}"=""
"{953EBA71-4C50-415C-B438-B9A045C24291}"=""
"{3932AF95-D20D-4836-915E-DFF1217E801A}"=""
"{E1E85287-D928-4AA4-87FF-38BFE0E289D9}"=""
"{7DDA7E11-12F5-491A-BFF4-A4EBFD6B0AC1}"=""
"{58289B7C-299B-48DD-9EEE-E3C24B799F1D}"=""
"{687412B5-442B-4256-BDB5-2D96E0B36C09}"=""
"{06C6D42D-172E-4800-BF66-CA2B4251A224}"=""
"{4254F643-D686-4F41-B39F-E507A33A0F4F}"=""
"{488F8448-F162-43D0-A4A2-4CFC2C8CBD15}"=""
"{A0CC4708-FEF3-4282-AE03-59ED8F1DC304}"=""
"{BC95B9D3-DB30-47BB-B893-0ACDF683F75D}"=""
"{FD509181-30AF-4430-995B-EE0E5DF178D2}"=""
"{21BA4231-1898-4CBE-8C5C-9313F446B664}"=""
"{2F51A061-4189-4B1B-B761-4EB2F54F1520}"=""
"{70F7925C-3961-4B53-AFB4-FFA93E4C45D7}"=""
"{ED9EAA44-08F3-4F8B-8269-C5BE44280668}"=""
"{0AA0C197-8928-4D8E-A60F-9E732D887BB8}"=""
"{B0CDED07-A377-4AD3-89B1-BABCCCE069BE}"=""
"{1E6811D1-51D7-4969-9567-877C9A9231DE}"=""
"{667E26CE-EF92-4BD0-B22B-26C2069336B7}"=""
"{32248FEA-B5FF-459B-9BE2-E5A88CD04EA5}"=""
"{1DE43244-1DF5-4DA2-8A48-DACD83655D35}"=""
"{5BFAD024-3598-44D4-A383-7D77E72E54BD}"=""
"{41AC969D-2533-49D3-882B-691A1F65919D}"=""
"{6A00DB17-A93C-411B-9470-5F34BF705750}"=""
"{87E66ECB-60E5-4A7A-88B2-F785394CD007}"=""
"{FF0E01DE-ACB4-414E-9489-8A1E78257BE5}"=""
"{EFBCC41C-8183-4C37-8B45-40203873A38E}"=""
"{8E937AED-0244-4DF8-8639-5D88E157D976}"=""
"{769B11F3-8EF9-4D0C-A270-70B990E68218}"=""
"{C66F50BE-4FCA-452B-8135-1D5AFB52446F}"=""
"{D62CC5F6-2496-49CF-86A8-5404C8386E10}"=""
"{575D1745-BCBC-4358-8EC9-245316865637}"=""
"{E48FB9C6-66FA-4A00-ABA9-7E1BA22552D7}"=""
"{33A005FA-A128-4A31-9234-37317622F799}"=""
"{7B940DA5-3CAE-4488-B82B-6FA6F178896D}"=""
"{0B9B119A-AB87-4C88-B8BE-9E87AF9C29F0}"=""
"{32FC0393-C504-479F-A3E2-E316154DD7AF}"=""
"{838BE22B-AB3F-4350-8570-685478299AD5}"=""
"{C53D5604-22A9-4501-B9AC-CDCD20C965D8}"=""
"{F98B6CE9-D627-44A8-BA91-8A9DF43D38DB}"=""
"{C700FF94-86F0-4B28-A22D-4E1FF75F9710}"=""
"{934239A5-9F02-430B-BA9E-BF078DC9184F}"=""
"{4D72D249-592D-44EB-9374-46D79CA7B3DF}"=""
"{4C52D2C2-BBF1-40EB-BA71-B97FD8C9AD2F}"=""
"{C4B24641-B616-4F0C-88D4-E3BC20D8075D}"=""
"{E249FB24-8D9A-424E-B3CC-F8F41BF0B318}"=""
"{E77DDA3F-C0D2-40ED-87C0-E52E3D2DC867}"=""
"{90076733-E758-4C52-BC09-A4A88EE4F835}"=""
"{C6DEA381-BF84-4AED-8F20-52B79242870F}"=""
"{9A8DE67B-B6AC-4618-9F65-E066AB896A62}"=""
"{CDF5F42F-1B83-4C4F-819D-05DFB7378368}"=""
"{EEFF3C27-E228-4C5A-829F-DDDCF5A9DCB1}"=""
"{D298E936-40DA-48F7-A75D-EADFA0C5B458}"=""
"{C0DE44A6-6A7D-469E-8C8E-8FB509467E15}"=""
"{96A1F5A7-90C3-4875-B132-C1C5007A0F8B}"=""
"{34E98015-F7EC-471F-AC18-F0E514794693}"=""
"{16F80961-8FAF-47A6-A4E7-C3D318081660}"=""
"{555BB382-84A8-483E-B8BE-9DCF92AAB2AE}"=""
"{1EB2D375-BE66-41F7-AA8F-701203958508}"=""
"{CD7FA8C1-7C24-4402-A30D-4AE557EAE31E}"=""
"{DC5DDBCC-3532-40EF-AF2A-7A59225F91B9}"=""
"{4FF00D89-F258-4754-849D-B98309C83CFE}"=""
"{2E03A12D-2BA8-45A2-B422-FCC35B8829B4}"=""
"{D84A010A-6ADD-420A-A665-5A217E6DF2CD}"=""
"{C055F6E3-AC40-4452-ADB0-23D2E497E456}"=""
"{9583E60C-6E81-4667-B729-AB3797D4D4CB}"=""
"{D727EBED-564A-4B73-9434-313C97681D69}"=""
"{5AB817A9-1708-40F8-B517-143F1B02EF12}"=""
"{82707FB3-CFBA-4FD4-8A7C-2A4CEF4FB552}"=""
"{D41F3006-B325-47B4-B844-3E448F0516DD}"=""
"{04FA70CD-448B-48D3-8DBF-6F8AC326D262}"=""
"{AFA65823-E809-431B-B1C8-D37EC70D4837}"=""
"{930E4C36-82F5-4CCF-A948-AEDFFB2EB10F}"=""
"{1EE59DBF-0F7E-4312-880A-2D2DF77310B4}"=""
"{4D67EA5E-9D61-4385-A046-3FF9A57E6C87}"=""
"{900961F8-BFE9-4B38-B6CA-6589E8FC84CB}"=""
"{B63AD2B0-8DFE-4E23-AD36-DCD1640278D7}"=""
"{D8D6140E-BB95-474A-8C9E-821A94B9C8D9}"=""
"{3A71ADAF-6DA9-4878-B6DA-1A51FF9E4ABD}"=""
"{50C8CFAC-82AA-40F9-9F97-508F9A746A18}"=""
"{D14CA032-BA3F-498A-9195-90665431A28F}"=""
"{B4AECE8B-6DC8-4C7B-AE38-DDE3EF079B9A}"=""
"{199B2A5F-FC0F-411C-9B08-DA15170C69D8}"=""
"{71BF0CC1-9209-4BD0-BC95-F44C6F32EBC8}"=""
"{860487DC-3F15-407B-B80B-B7D962EF216E}"=""
"{95B6317B-668B-4C7F-866F-8BBFD6F9EFDF}"=""
"{2F3485C0-B27A-49DF-867A-7720944399A4}"=""
"{246E130F-155A-4D90-BAFF-C4EB8353A567}"=""
"{99E7AEFB-9795-4BA8-BD5D-B628CD59AA16}"=""
"{4263C629-A4CD-40CD-BEFE-D2DC59D9E533}"=""
"{04D3BDDD-F2B4-4FBA-A9CD-0D706065F109}"=""
"{0B4D0EED-9A5D-4B72-85B3-B496459A29F5}"=""
"{94F83EFB-C349-41D4-AFA0-C01CC2DD6A8C}"=""
"{F86BEC59-D7F7-41A4-93CE-09FE6933A5CB}"=""
"{58E5C55F-C54C-4664-8AA7-A2C77F6F8209}"=""
"{D784E940-7F10-4E0D-97FA-AA0BA09C1C22}"=""
"{37B56C8C-D63A-4F0F-AC08-3DE96CD85F7E}"=""
"{BA5BD50A-E38A-4D8E-9A84-4D3107997F6F}"=""
"{AE61CDFF-B865-4F0D-9992-2F9938518099}"=""
"{5A60D0E5-B209-4361-BFAE-98CE3A0A1926}"=""
"{10472E05-D189-4104-94C0-4FC719B6883F}"=""
"{7EC9DB62-0610-4497-8D49-A1822CDDF156}"=""
"{ABD4842B-0B5E-4C47-B86A-C450A6FABE52}"=""
"{442D53CF-42AE-46BE-8125-8985BEF3A687}"=""
"{F1AE7667-C8B7-4825-964C-BD92EE9FAA2C}"=""
"{289EF1AF-8CC7-479D-9CBD-D8172EDB196B}"=""
"{F764C8F6-E60D-4741-B772-B84A800734FA}"=""
"{8371EA42-13B4-423A-93A7-255121E32875}"=""
"{3B085377-588E-4768-9051-35E67B1221C6}"=""
"{4B4A79F8-4939-4C75-AF0B-EBB6B5584842}"=""
"{B6D7B5FB-EB05-4321-B3CD-4503462B428D}"=""
"{1896A9EA-808A-45E2-B0AB-35A3614DBBD7}"=""
"{1B0B974D-7C59-41C0-8EAB-E48900CA9426}"=""
"{D9D58950-8719-44FD-AA62-C06F4FC90B10}"=""
"{C6BFDC5E-BA87-4A41-AB0A-956C94C86EB8}"=""
"{C83091DB-DE29-42ED-82A2-6BF54D3BAD81}"=""
"{7E94F970-9D7E-4B4E-87BE-93CFCD782DF4}"=""
"{BB8E5AA5-5B13-4D45-B500-BF0D5E44CA9E}"=""
"{3EB15089-5353-4D67-8EC7-5D711A6D698B}"=""
"{D46D2D51-E000-4445-920E-04E0BB02FBB0}"=""
"{99FD4B67-CBE8-4C1C-AA00-1A0D68B41F80}"=""
"{53918F23-A974-4E18-9C18-154AE26A1D9F}"=""
"{C0C66B61-D961-40CB-9135-262CFADF387A}"=""
"{5DC16A73-69B3-43C6-82A4-8AF5C7361410}"=""
"{EBCF2CF0-CE68-4AAD-B91F-5DA67200B22C}"=""
"{4F4413E2-CE57-4CDD-B6A9-BA764378E1E9}"=""
"{55273310-0AB5-4EC5-981A-FC3413285EE0}"=""
"{FB25C904-12AA-4981-9957-47AD2A818FA1}"=""
"{52BE34E0-CF1E-4EEF-8667-81BA10CB207A}"=""
"{706D4DD7-886B-4A60-8CEC-DCC9FA83E14F}"=""
"{EC3317A6-9421-4B94-930A-F9DCB3088933}"=""
"{73317B31-4301-4F4D-836F-F59F0D8197B8}"=""
"{A791A347-0D53-493F-B17F-B39C62EC110A}"=""
"{6CEC44C9-2DCB-4B03-9C2A-E6AC826B76BE}"=""
"{CB44ABDB-6C0F-4668-BAA9-761512DCA595}"=""
"{E6FB9819-816E-4FFF-BA53-806D2CFB7E53}"=""
"{B21F6F12-825B-4CEE-8919-F7CB335374E5}"=""
"{28D271D8-7B87-429A-BAAE-996BCAEB7C63}"=""
"{40314BA0-0476-4631-968F-6F860406FA7F}"=""
"{AA28F835-D455-4C9A-AB96-DB831649BC69}"=""
"{49F14F9E-09E9-487D-B3FA-6474E1B3AF55}"=""
"{49550196-8C36-4A97-92A9-C85A08E29580}"=""
"{AFBE98DD-7562-4321-823D-6A8E6B3AA7CF}"=""
"{6EBFE520-885E-415D-B6E1-DA7A322808FC}"=""
"{957697B8-63AA-4004-816F-F21DD7293074}"=""
"{B08FEAE9-E75D-43AB-8927-778098C4ACB2}"=""
"{039C7F4B-66A0-4EC0-88BC-4DAF10839A99}"=""
"{34914661-1195-4BA8-B039-D7F7985E398F}"=""
"{87940285-2B88-4A4B-8101-51DFEAB8D777}"=""
"{D8142839-DA7E-4216-A33F-746915483A86}"=""
"{69ADD176-0E2E-4003-AC17-4A59C47D09E0}"=""
"{5107CE83-19AB-41D5-B8CD-2271C36FFA90}"=""
"{19C6EA29-E6CB-449C-81EE-4F38CB85A84B}"=""
"{0A5B43D3-FDA8-44A8-830F-0DE0B20E4576}"=""
"{D72D91D9-6CCA-42A7-ADC4-C25800B75251}"=""
"{50943293-4DD6-44E7-8AE2-736FC489EF30}"=""
"{F9F528A8-B7DE-4BA6-9015-2CE3D099CCC2}"=""
"{A57568B3-49F7-46EB-8F54-3098F8467740}"=""
"{91FA6EE9-CF6A-4BFC-9FD9-8976407A5927}"=""
"{171F1E17-7823-4A7B-99D6-35D35829595A}"=""
"{979A9BE0-4360-4F13-81BC-5EF784A4AA27}"=""
"{CAD85673-0628-45E3-AE17-AA0CB20B4C2F}"=""
"{312BE741-2A34-4575-9BAD-F6F4B76B5C08}"=""
"{951014E2-A6E2-4A67-B92D-C21D11A26267}"=""
"{A2860B39-F07C-45C5-8FB2-7503A64D4806}"=""
"{D020A955-8D2D-491D-882E-B45975BD1AA9}"=""
"{AD0A4448-7F16-4EBC-B857-CD9F6F3F1C7D}"=""
"{D1EFBA2F-EDFC-47AC-8E7D-D84B5FE932E0}"=""
"{5759A5B1-D737-4F63-91C7-4C39834D503A}"=""
"{37D22EFF-A531-47CE-8D13-B844B7FE2346}"=""
"{E2DFD9EB-27C9-4645-AF70-DBD8872F022E}"=""
"{929D1595-3581-4E07-AF6A-CFAB527F35D6}"=""
"{0B441E57-DEBE-49C2-B088-09DBB2B754FA}"=""
"{B185D01C-ABEC-4F31-907E-6C2BED8901E2}"=""
"{C9081132-61BF-43B7-BB24-5D87848734DA}"=""
"{53E09BA1-4BD4-4E4F-AD1B-759DFE9C3006}"=""
"{2782284B-5252-4FAF-B2B4-4193A3D820FE}"=""
"{A2C25DD7-1369-41AD-AB0A-79A83C95E42F}"=""
"{55598129-1B95-499B-B5B5-716B14C36EE1}"=""
"{6F527929-C42F-4A49-A174-764C18E682B7}"=""
"{37324576-19CD-48D8-9BD8-4ECAFFA38632}"=""
"{8E23D5AD-6E2A-4D9F-A2F3-8D55A3557306}"=""
"{0D78CA05-98BD-4121-AC74-35DA02D5B658}"=""
"{94C5802C-2222-4716-9744-27C62DCD3951}"=""
"{DB836893-1A12-42A7-82CD-DBA85FB04C33}"=""
"{92E566E5-91BA-41B5-A12B-A918EA8A8F2F}"=""
"{6CA7E540-9354-4A16-AE37-D9FD0D400AE8}"=""
"{0523C67B-1497-42B7-95F6-F713C0EBDDB5}"=""
"{7133B6F6-5127-49E0-9228-087CDBDA073F}"=""
"{10C8F4FD-6DD1-4E15-BC38-D2A29685B675}"=""
"{8854ACF2-50BC-4CFD-8FA0-5A8CEA066BBF}"=""
"{8FC1B0A3-63D8-4254-8C91-B1DBF4693986}"=""
"{9CB89BFF-1CF7-493F-B76D-572F836EA48E}"=""
"{B605EFB4-3C4C-42AB-B37C-9843C4586216}"=""
"{13F4B159-3F22-4B9B-8D7E-C2C4DD485DF9}"=""
"{3F900DB3-A07D-499D-9AF8-691301CC1D15}"=""
"{03781753-C1F5-4E46-B355-1FCC8DCE147B}"=""
"{98D975C5-E135-441B-8C95-EA2F9567B9A7}"=""
"{DD90A29B-B851-496E-8527-DCB5A64D2884}"=""
"{6D76E2C5-9DFA-4AA5-93F3-A5577A684311}"=""
"{BBDF52FC-5A4E-4783-B2BB-96B05BBB69BE}"=""
"{D944880C-442F-4936-81A1-F4723F0B631D}"=""
"{799990C9-08C1-4DDA-9B02-A4E76576A1BC}"=""
"{B7A9A7F3-37E5-490C-81EE-451DF87C902E}"=""
"{26BDC270-E5DA-4BD2-A819-DC127A6D532D}"=""
"{615F107D-6B2A-43B0-A858-1E78DEADB3E2}"=""
"{18735280-BA62-4E8F-BC8C-55EE26D88299}"=""
"{34FF5246-A4F7-4913-8217-FF783E5835A2}"=""
"{ABA8D221-87B2-40B5-93E5-2201C42FEF1B}"=""
"{1B39B934-7E48-4743-B08D-2583B2EDCDCF}"=""
"{EC9C2289-54B2-4978-B12C-042B16D5EE65}"=""
"{00B9B242-4EE8-42A5-BACA-87EC587A338C}"=""
"{12F08E78-585C-4F18-8C33-4331AEA58649}"=""
"{45DD7D87-7483-4E22-BB86-E6BDE6243C43}"=""
"{49E91230-03DF-415C-8C59-7EAF2CB8506B}"=""
"{1DE309F4-F4B5-4A49-8107-BE9A341C86A6}"=""
"{DEFE5EC7-38A9-49D8-A348-CC51B4EC0249}"=""
"{C7A4A001-56E9-4D13-A67F-2DE3FA81BC8F}"=""
"{E6DF1F48-7815-4E51-93DD-19DF80377BE4}"=""
"{2A0BE77F-CEAF-44E5-BCBB-CD93C7DF161A}"=""
"{982C347D-605F-4A10-84D4-131A7DD7F42D}"=""
"{6DE8421B-E74D-4063-9A69-EACEFC6D5392}"=""
"{D5F7EDB3-5A17-487F-9A1C-C236EB9B3EA2}"=""
"{B3B6B774-9BD8-48E8-8352-6E0F0947E7EF}"=""
"{47C82DEE-BBAF-40FA-BF37-0D578787D289}"=""
"{8F2FF45D-B46C-4AC0-B1C2-036793EC0FBA}"=""
"{92E129CD-8E13-48EB-BDF5-42C089F4B595}"=""
"{4794535E-840E-4E32-A742-36BA2BDC1DCF}"=""
"{9305C986-1D9E-4DB4-90C0-BA49F7992F08}"=""
"{100864B6-2762-4E8B-A7A9-65C43388BB8A}"=""
"{C97B8608-A358-433E-93B9-37CB0E90BF58}"=""
"{E8710388-AD20-4551-8635-DC388FB6A423}"=""
"{B0C7D029-0558-4BC0-8DA9-3254ADECCE47}"=""
"{D5CBE73E-2C86-47AE-B2EA-9F8D4A1550A5}"=""
"{8DC53491-EFA9-4353-85DB-DE5F0ABBE552}"=""
"{DE3C7C95-AFF2-47C6-8FBF-1C8024B92C39}"=""
"{08B86C8B-74B0-4237-A2FA-C82B6E408CB0}"=""
"{68DAE0D0-C95F-4C10-96F8-4AD9CE5DD944}"=""
"{9C101EFF-CB9F-4FE5-BF1B-8153D72B64F9}"=""
"{E0A7CC5F-8C69-4591-99E6-4BDA46BE72B0}"=""
"{85881E3E-B58F-4AD3-8A67-8AEB0F1E09AA}"=""
"{617477C7-5B66-4BFD-B827-15EE747AC239}"=""
"{EF196731-74E7-42C1-B6A8-5A2B0C89C1B2}"=""
"{EEC196B0-7860-434F-8005-7FFAF1EE4112}"=""
"{5B710556-6043-46A3-8618-51AB6F89811A}"=""
"{1995CC31-F984-4B7E-A3F8-B1DAEB0C7C4F}"=""
"{C2A2608C-E24D-464F-92E0-04D725EBE029}"=""
"{7A65F212-6840-4689-8C76-28E735061EE1}"=""
"{3E238054-AD86-433C-B39F-C3916B0B018B}"=""
"{A2CA5B39-35B5-47C7-8DAC-B3B7E07BB94A}"=""
"{5E6F2343-3AEB-496F-88AF-C8E624117E78}"=""
"{83B82479-42DD-484B-902E-7C7D47CBD06C}"=""
"{8EA0D14C-771B-4283-8980-27C6A4F4BA75}"=""
"{31DCFE0B-DC15-4856-A8D5-C21773BFB381}"=""
"{F9D30CCE-D055-43D7-AFA7-B48411282234}"=""
"{7972B5EB-6779-439C-9BF3-C78A07543211}"=""
"{7F8C0B26-FD56-44EA-9EFB-E31CA4E3202D}"=""
"{3BB9F692-06E1-4C51-8740-B0C95ED4856A}"=""
"{A20FE2FA-A773-4AF1-986F-4E4A1F7097AA}"=""
"{9AA57586-73DC-4ECA-B8A2-03A94C48966E}"=""
"{B6B682A1-0B76-47D2-8873-6495CACAB50B}"=""
"{58EC926B-DC0B-4E42-A6A2-5751379938CA}"=""
"{F59BCE8B-3852-4E07-A19B-7C843ADE55F1}"=""
"{80C62EF5-698A-4C7F-ACF5-31C5A0CF9C62}"=""
"{5495F2E4-639C-44B5-BDA0-44360BCDA07D}"=""
"{F91DC632-3079-44DD-B25E-4926B4254E0C}"=""
"{2EC7D38D-EA07-4DEF-B70E-E6C36F72C87F}"=""
"{4CCECD6A-D1E5-4511-96D0-4C685500313E}"=""
"{6E328A9F-657F-47B0-9AFE-B2FAB1CBA39C}"=""
"{0B2F6057-E17E-48E8-9BE6-C8DBAACA9AD3}"=""
"{96EE8CF0-9BF9-4C1B-A778-94122ECD7896}"=""
"{C833399B-CBAA-43F2-99D8-BA635DB2BD28}"=""
"{8F430045-8F43-4522-AE08-406C247C02ED}"=""
"{DA148F21-E914-4B50-9001-EA7BD5EADDA0}"=""
"{4079033D-7035-4C38-A8A3-AD3BDCA9E158}"=""
"{5522DD0C-9D67-465D-85DF-81C551E8B5D2}"=""
"{6E136E12-77A5-4516-A40F-0DA413D744ED}"=""
"{DC672838-AB59-4C9B-A13E-0481F620F44D}"=""
"{207AF644-BBF3-43A8-BF98-DCF4E78C9604}"=""
"{4176CC13-CC04-4F37-A8F8-01CE7F56B041}"=""
"{E5205A1B-D2A6-4764-AC88-10B582E415F1}"=""
"{6C7D1586-83FE-463B-9084-3D761B2BF9C2}"=""
"{A2A44E3F-54FA-4845-9218-25E6E459F4A9}"=""
"{162685D2-D1F7-4D39-88AE-31545044876B}"=""
"{4D050741-D6A9-44B2-A1C4-7FFB3E394912}"=""
"{1B41966D-940E-4EE9-9B60-89C24A6580E7}"=""
"{92886373-A3D2-4E50-BD88-2733C768A45D}"=""
"{5EFE99B6-C3A3-4B31-A2F9-6B393E08C65C}"=""
"{088550A5-E4AA-4DB5-B3BF-C7473E287462}"=""
"{B63DBFC8-70F9-4103-9ADE-ACF81D38201D}"=""
"{CFAFE6E5-7E44-4B33-AFB1-BE2999C209F2}"=""
"{30F52527-F15C-4067-996E-D52571A7A8D7}"=""
"{48BFBB37-30A5-45A0-86E4-9D5DFE3AAE53}"=""
"{41E7B929-81F9-4F90-BE06-153FB38FBEC9}"=""
"{15830D7F-6058-4D86-8022-EC3CBE011C26}"=""
"{DB206934-E55B-450A-B869-B1671E14D749}"=""
"{92844B32-053E-4ADC-881E-7F903BA6BC60}"=""
"{8547A6B8-C8DE-4922-8DA3-9E0FCDD72924}"=""
"{A61C842D-A5E0-43C0-9DC4-B3A9865539CA}"=""
"{1591FA93-60C5-4B06-BA90-9B2C8E839EAF}"=""
"{0B2217A1-FCDD-419A-A26D-E6F8CF0505BA}"=""
"{21FDF4CC-F365-4437-B6F1-C03704D9FBFD}"=""
"{7C312EB1-70A9-4FDB-B13C-337B22CE37F2}"=""
"{9FBECD9E-F9AF-4590-B2F0-D0EED5BE6BE4}"=""
"{3D836766-08D8-4F50-BDE5-D24B9489FE79}"=""
"{5E2EA37D-0485-4DD6-B6AA-31E5E74FF7A4}"=""
"{58D0D9AF-4502-4128-B3AD-A9CF268333DD}"=""
"{D53E71FD-5910-48D7-83A6-E3EB28208501}"=""
"{69EB4527-C49A-4AF2-BD19-76B9DCB7B212}"=""
"{1B5727A8-F7FF-42B0-A0CB-FB95DBFB9C24}"=""
"{C0B136A2-A97E-4CEC-8C04-0EBA15B51DA9}"=""
"{BFDB5DAF-2159-411A-B539-84E3E142B640}"=""
"{B1F8880E-85CB-4F55-B7D2-E38B49453B15}"=""
"{186B3ED9-3E5F-43FD-96A5-EEE300F7A890}"=""
"{882632BC-CA14-4041-A2D6-BA23845F69EB}"=""
"{2DD204F1-66A0-42B8-95E3-721C65ABC2D1}"=""
"{B926EFDC-53A3-4C83-A561-FEB3372E593A}"=""
"{6AF64C26-0BB8-4294-8B8E-B12705AD2DB1}"=""
"{CCEDF838-61CD-4A14-84F3-E16B1779B2DF}"=""
"{D6500428-9771-41CA-AFF2-FE11EAB83578}"=""
"{88BD2213-8300-4F33-9A4D-14F82CCA8EFF}"=""
"{FB049398-3685-48D7-8606-B9F0A0073CF5}"=""
"{4F54A4D2-8558-486D-8328-4DF472C550B6}"=""
"{E636399E-C8CA-407E-AA89-1C3AF225C3C2}"=""
"{ADAF066D-B029-41E7-BEBF-9A08D39A0194}"=""
"{8D9548AF-6221-457A-AC35-06683C696242}"=""
"{52692F21-1FBF-4D50-8D30-DE5169E2A246}"=""
"{94C45BEE-593B-459E-A404-6872B8FBD998}"=""
"{2240A32C-6E6B-4331-9960-A90B233F9BB1}"=""
"{86720995-2CB6-4B25-A51C-3AE881D12062}"=""
"{98ECAF0F-C1D0-4F8B-A4E8-73F047D9BB66}"=""
"{F511A725-C914-400E-A75F-5C92321FF223}"=""
"{EAF97621-ABC2-41A3-A652-C74793ABFB21}"=""
"{3D0A538B-B9B9-4A5E-986C-C316AB9D6349}"=""
"{EC26F2E8-576F-46B3-95E0-9F101351EBB4}"=""
"{11AF4D12-9EF7-46D8-9E84-6A457037D353}"=""
"{ECE29552-35BA-425D-9EB4-EB9A0E2E82A2}"=""
"{C14335B4-936B-4720-8F33-1F748D49017F}"=""
"{77374A50-0A1E-4F6B-9E69-35410EC4A8BA}"=""
"{E0E32B85-60FD-46E2-A6F0-F0ABF3DBA62E}"=""
"{71F9CE05-509E-4EC0-869C-E87619317160}"=""
"{5178F222-95E0-49B9-8311-B5540DB08E22}"=""
"{BB701A94-66BE-42F1-BD12-922AAD3DC08A}"=""
"{ADF94D2F-34B8-4423-BCA7-C669BBB563C5}"=""
"{8200DAD6-57AF-4842-86FF-90E54FDCE42B}"=""
"{90591DA0-9792-49C3-8440-C833554A92EC}"=""
"{00A9543F-8E56-492E-ACE9-7743988C1C98}"=""
"{653AEB8C-FF74-47AC-BAC8-85FC535BF93F}"=""
"{B32879C9-26DF-4057-ACD0-9DDBCE3FD5C4}"=""
"{D328EC89-1B9F-4E6E-94A6-4EA9E7CD1BD3}"=""
"{A22813BF-6FFA-40D3-AB29-59A9979AFC87}"=""
"{4522BEF0-F271-4B7E-A924-E0FA78EEEAB9}"=""
"{47B56065-9C04-468F-8A3C-3CBFCD9FD205}"=""
"{0C653265-6A22-412E-88E4-37D4BB6472D5}"=""
"{D5E3DAB3-32B9-4B75-A73B-8F0730F8CFB5}"=""
"{45ACA074-DE1C-40F3-90C3-70C02BA9FF5F}"=""
"{D7629E34-C9CF-4923-93AF-B2FB1D501AE2}"=""
"{84719168-A4A2-4C48-A78F-64DA0B4F2AEC}"=""
"{59B114F1-3297-48E2-9005-263BAB002693}"=""
"{AB08DC50-4AEA-415D-9B6E-7BE74E676DD0}"=""
"{AA11DBD8-9854-4C10-AB7A-848F2E17BEE0}"=""
"{B48A0B38-E5D6-43F0-8210-D450F55EC68B}"=""
"{034FA909-9DEC-48FB-8C01-0DD0E2C20BE2}"=""
"{1245A275-A4C1-4454-B50C-7B425806D4BB}"=""
"{F21E0A20-DC5A-49F0-B34B-75A3719D7B04}"=""
"{C4C1DFAC-48F5-4951-A551-BE34E1FC9404}"=""
"{D08C14D5-47CA-483A-9BD0-55F9758F8AAD}"=""
"{55A5651A-48D5-4B4A-B7BD-A1048E9C9D06}"=""
"{216E326C-E71D-4B64-AA4F-20C47A28B132}"=""
"{2BC90452-1EE9-4B35-9D28-382FB7809599}"=""
"{C1BAA1C6-8C9B-43BF-9479-F1E04FE2F039}"=""
"{2CC0E7B5-612F-4671-B355-108CB9E9A53C}"=""
"{355C0F4B-7A17-46A4-8A59-6F7C77770169}"=""
"{8C2ED7D6-6C3D-4BE6-819E-4D5DCD7F9E98}"=""
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'lsass.exe'(700)
c:\program files\Protector Suite QL\psqlpwd.dll
c:\program files\Protector Suite QL\homefus2.dll
c:\program files\Protector Suite QL\infql2.dll
.
Completion time: 2011-08-14 22:54:39
ComboFix-quarantined-files.txt 2011-08-15 02:54
.
Pre-Run: 35,314,900,992 bytes free
Post-Run: 37,150,597,120 bytes free
.
Current=1 Default=1 Failed=0 LastKnownGood=95 Sets=1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,
29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,
56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,
83,84,85,86,87,88,89,90,91,92,93,94,95
- - End Of File - - BCC83B9FDA6D9D2F744A68B29C9F1250


No issues that I can detect so far.