Random IE Script Errors after trojan

Hello Everyone, I know this topic has been posted before but I will give my story on what has happened as briefly as possible. I have the following programs on my computer: Malwarebytes(paid for), MS Essentials, SUPER Antispyware(paid for). I got a virus sometimes earlier this year from a guy who teaches guitar on youtube. When I typed in his website I got a trojan(cant remember the name but it was a popular one. Also included the coolwebsearch trojan as well) I think if I am correct the only thing I was running was the MS Essentials. Well, after paying for the other two and doing so many cleanups, I thought I was in the clear until recently. I have been getting IE Script errors when my IE is not running. I have only gotten the sound byte thing once, sometime last week and it scared me, but like everyone else, there wasnt anything other than IE running along with the other regular processes I have. I have just run an updated version of TDSSKiller and here is what was found(as nothing was found before until I reran it now) ——————————————————————————————————————————————- \device\Harddisk0\DR0 which came up suspiscious, so I had it deleted. Rootkit Buster presented this: File or MBR C:\TDSSKiller.2.6.9.0_22.10.2011_06.48.36_log.txt Registry Entry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data Registry Entry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data 2 Operating System Hook ZwTerminateProcess; hooked by C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS I am about to restart my computer but I am running XP. Every other time I have run my other protection software, no threats come up. Any ideas or other info I can possibly provide?

Hello,
Welcome to WhatTheTech. My name is mowman, and I will be helping you fix your problems.

If you do not make a reply in 3 days, we will have to close your topic.

You may want to keep the link to this topic in your favorites. Alternatively, you can click the Options button at the top bar of this topic and Track this topic. The topics you are tracking can be found by clicking on My Topics at the top of any page.

Please take note of some guidelines for this fix:

•Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
•If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
•Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
•Please reply using the button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply.
Only attach them if requested or if they do not fit into the post



Please post the TDSSKiller log found here. C:\TDSSKiller.2.6.9.0_22.10.2011_06.48.36_log.txt

• Download OTL to your desktop.
• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• When the window appears, underneath Output at the top change it to Minimal Output.
• Check the boxes beside LOP Check and Purity Check.
• Under Custom Scan paste this in
  
  netsvcs
  drivers32
  %SYSTEMDRIVE%\*.*
  %systemroot%\Fonts\*.com
  %systemroot%\Fonts\*.dll
  %systemroot%\Fonts\*.ini
  %systemroot%\Fonts\*.ini2
  %systemroot%\Fonts\*.exe
  %systemroot%\system32\spool\prtprocs\w32x86\*.*
  %systemroot%\REPAIR\*.bak1
  %systemroot%\REPAIR\*.ini
  %systemroot%\system32\*.jpg
  %systemroot%\*.jpg
  %systemroot%\*.png
  %systemroot%\*.scr
  %systemroot%\*._sy
  %APPDATA%\Adobe\Update\*.*
  %ALLUSERSPROFILE%\Favorites\*.*
  %APPDATA%\Microsoft\*.*
  %PROGRAMFILES%\*.*
  %APPDATA%\Update\*.*
  %systemroot%\*. /mp /s
  CREATERESTOREPOINT
  %systemroot%\System32\config\*.sav
  %PROGRAMFILES%\bak. /s
  %systemroot%\system32\bak. /s
  %ALLUSERSPROFILE%\Start Menu\*.lnk /x
  %systemroot%\system32\config\systemprofile\*.dat /x
  %systemroot%\*.config
  %systemroot%\system32\*.db
  %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
  %USERPROFILE%\Desktop\*.exe
  %PROGRAMFILES%\Common Files\*.*
  %systemroot%\*.src
  %systemroot%\install\*.*
  %systemroot%\system32\DLL\*.*
  %systemroot%\system32\HelpFiles\*.*
  %systemroot%\system32\rundll\*.*
  %systemroot%\winn32\*.*
  %systemroot%\Java\*.*
  %systemroot%\system32\test\*.*
  %systemroot%\system32\Rundll32\*.*
  %systemroot%\AppPatch\Custom\*.*
  %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x
  %PROGRAMFILES%\PC-Doctor\Downloads\*.*
  %PROGRAMFILES%\Internet Explorer\*.tmp
  %PROGRAMFILES%\Internet Explorer\*.dat
  %USERPROFILE%\My Documents\*.exe
  %USERPROFILE%\*.exe
  %systemroot%\ADDINS\*.*
  %systemroot%\assembly\*.bak2
  %systemroot%\Config\*.*
  %systemroot%\REPAIR\*.bak2
  %systemroot%\SECURITY\Database\*.sdb /x
  %systemroot%\SYSTEM\*.bak2
  %systemroot%\Web\*.bak2
  %systemroot%\Driver Cache\*.*
  %PROGRAMFILES%\Mozilla Firefox\0*.exe
  %ProgramFiles%\Microsoft Common\*.*
  %ProgramFiles%\TinyProxy.
  %USERPROFILE%\Favorites\*.url /x
  %systemroot%\system32\*.bk
  %systemroot%\*.te
  %systemroot%\system32\system32\*.*
  %ALLUSERSPROFILE%\*.dat /x
  %systemroot%\system32\drivers\*.rmv
  dir /b "%systemroot%\system32\*.exe" | find /i " " /c
  dir /b "%systemroot%\*.exe" | find /i " " /c
  %PROGRAMFILES%\Microsoft\*.*
  %systemroot%\System32\Wbem\proquota.exe
  %PROGRAMFILES%\Mozilla Firefox\*.dat
  %USERPROFILE%\Cookies\*.txt /x
  %SystemRoot%\system32\fonts\*.*
  HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
  
  
• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
• You may need two posts to fit them both in.

Here is the OTL.Txt results log:
OTL logfile created on: 10.25.11 02:35:28 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Jennifer Law\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M.d.yy

1.99 Gb Total Physical Memory | 1.12 Gb Available Physical Memory | 56.03% Memory free
3.17 Gb Paging File | 2.07 Gb Available in Paging File | 65.33% Paging File free
Paging file location(s): C:\pagefile.sys 1356 1912 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 34.20 Gb Total Space | 5.06 Gb Free Space | 14.79% Space Free | Partition Type: NTFS

Computer Name: JENNIFER | User Name: Jennifer Law | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Jennifer Law\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
PRC - C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com)
PRC - C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
PRC - c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\Jennifer Law\Local Settings\Temp\vcheck.exe ()
PRC - C:\Documents and Settings\Jennifer Law\Local Settings\TempImg\VerControl.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
PRC - C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe (Intel® Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\1XConfig.exe (Intel)
PRC - C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)


========== Modules (No Company Name) ==========

MOD - C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll ()
MOD - C:\Documents and Settings\Jennifer Law\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL ()
MOD - C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll ()
MOD - C:\Documents and Settings\Jennifer Law\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll ()
MOD - C:\Documents and Settings\Jennifer Law\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL ()
MOD - C:\Documents and Settings\Jennifer Law\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll ()
MOD - C:\Documents and Settings\Jennifer Law\Local Settings\Temp\vcheck.exe ()
MOD - C:\Documents and Settings\Jennifer Law\Local Settings\TempImg\VerControl.exe ()
MOD - C:\WINDOWS\system32\quartz.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\WINDOWS\system32\devenum.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\D8021Xps.DLL ()


========== Win32 Services (SafeList) ==========

SRV - (RoxLiveShare9) – File not found
SRV - (HidServ) – File not found
SRV - (AppMgmt) – File not found
SRV - (MBAMService) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE.EXE (SUPERAntiSpyware.com)
SRV - (MsMpSvc) – c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SRV - (AOL ACS) – C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe (AOL LLC)
SRV - (WLANKEEPER) – C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe (Intel® Corporation)
SRV - (WANMiniportService) WAN Miniport (ATW) – C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)


========== Driver Services (SafeList) ==========

DRV - (MpKsl1d84b78c) – File not found
DRV - (MpKsl7d77665b) – c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A2B740BD-03AB-40A0-BA96-8528A002252F}\MpKsl7d77665b.sys (Microsoft Corporation)
DRV - (MBAMProtector) – C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (DellBIOS) – C:\WINDOWS\DellBIOS.Sys ()
DRV - (WsAudio_DeviceS(5)) WsAudio_DeviceS(5) – C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys (Wondershare)
DRV - (WsAudio_DeviceS(4)) WsAudio_DeviceS(4) – C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys (Wondershare)
DRV - (WsAudio_DeviceS(3)) WsAudio_DeviceS(3) – C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys (Wondershare)
DRV - (WsAudio_DeviceS(2)) WsAudio_DeviceS(2) – C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys (Wondershare)
DRV - (WsAudio_DeviceS(1)) WsAudio_DeviceS(1) – C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys (Wondershare)
DRV - (STHDA) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (bcm4sbxp) – C:\WINDOWS\system32\drivers\bcm4sbxp.sys (Broadcom Corporation)
DRV - (HSF_DPV) – C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) – C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (w29n51) Intel® – C:\WINDOWS\system32\drivers\w29n51.sys (Intel® Corporation)
DRV - (bvrp_pci) – C:\WINDOWS\system32\drivers\bvrp_pci.sys ()
DRV - (s24trans) – C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (IWCA) – C:\WINDOWS\system32\drivers\iwca.sys (Intel Corporation)
DRV - (PID_08A0) QuickCam IM(PID_08A0) – C:\WINDOWS\system32\drivers\LV302AV.SYS ()
DRV - (wanatw) WAN Miniport (ATW) – C:\WINDOWS\system32\drivers\wanatw4.sys (America Online, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.com/ig/dell?hl=en&client;=dell-usuk&channel;=us
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = www.google.com/ig/dell?hl=en&client;=dell-usuk&channel;=us

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerm…tf8&oe;=utf8
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E2 BE 48 B7 D0 AD CA 01 [binary data]
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "My Web Search"
FF - prefs.js..keyword.URL: "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZNxpt73477US&ptb;=aTQd_hlIdngL4Y2X..V3zg&ind;=2011051102&ptnrS;=ZNxpt73477US&si;=35482&n;=77de345e&psa;=&st;=kwd&searchfor;="
FF - prefs.js..network.proxy.autoconfig_url: "http://localhost:9000/proxy.pac"
FF - prefs.js..network.proxy.type: 2

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@mywebsearch.com/Plugin: C:\Program Files\MyWebSearch\bar\1.bin\NPMyWebS.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.669: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.669: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.669: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.669: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files\Object\cartoonly
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\MyWebSearch\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.10.01 22:17:33 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.10.03 20:44:59 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.10.21 21:04:17 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{EB132DB0-A4CA-11DF-9732-0E29E0D72085}: C:\Program Files\Object\cartoonly

[2011.03.11 12:25:12 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Jennifer Law\Application Data\Mozilla\Extensions
[2009.03.13 14:12:19 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Jennifer Law\Application Data\Mozilla\Extensions\[removed]
[2011.10.19 11:34:58 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011.06.07 18:05:53 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011.10.19 11:35:01 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011.10.01 22:17:33 | 000,000,000 | —D | M] (RealPlayer Browser Record Plugin) – C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT
[2011.04.05 13:19:51 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2009.09.05 03:00:50 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011.10.03 20:44:58 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.03 05:06:04 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.07.11 16:48:12 | 000,012,800 | —- | M] (Nullsoft, Inc.) – C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2011.10.03 20:44:52 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml

O1 HOSTS File: ([2011.04.05 10:46:34 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (FrostWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O2 - BHO: (FBLayouts Plugin) - {FF4E1D1D-705B-4379-AB33-22D98C1ABF55} - C:\Program Files\FBLayouts\fblayouts.dll File not found
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (FrostWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {00000000-0000-0000-0000-000000000000} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {5854FAC4-5BF0-47DD-B5A9-A5EA8CFF3CF4} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (FrostWire Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll File not found
O4 - HKLM..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe (America Online)
O4 - HKLM..\Run: [HostManager] C:\Program Files\Common Files\AOL\1163232286\EE\aolsoftware.exe (AOL Inc.)
O4 - HKLM..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\imekrmig.exe (Microsoft Corporation)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe (McAfee, Inc.)
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [AOL Dialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe (America Online)
O4 - HKCU..\Run: [drem] "C:\Program Files\home plan software\Date Reminder\drem.exe" /autorun File not found
O4 - HKCU..\Run: [DW6] "C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe" File not found
O4 - HKCU..\Run: [EasyDVDMon] File not found
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - HKCU..\Run: [vcheck] C:\Documents and Settings\Jennifer Law\Local Settings\Temp\vcheck.exe ()
O4 - HKCU..\Run: [VerControl] C:\Documents and Settings\Jennifer Law\Local Settings\TempImg\VerControl.exe ()
O4 - Startup: C:\Documents and Settings\Jennifer Law\Start Menu\Programs\Startup\AOL Desktop.lnk = C:\Program Files\Common Files\AOL\Launch\aollaunch.exe (AOL Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html File not found
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Jennifer Law\Start Menu\Programs\IMVU\Run IMVU.lnk File not found
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O16 - DPF: {00000055-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/fhg.CAB (Reg Error: Key error.)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net/co…ex/qtplugin.cab (Reg Error: Key error.)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://download.microsoft.com/download/e/4…/OGAControl.cab (Office Genuine Advantage Validation Tool)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} http://asp.mathxl.com/wizmodules/testgen/i…GenXInstall.cab (TTestGenXInstallObject)
O16 - DPF: {7A0D1738-10EA-47FF-92BE-4E137B5BE1A4} https://ci-mpsnare.iovation.com/StmOCX.cab (Stm Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {95D88B35-A521-472B-A182-BB1A98356421} http://asp.mathxl.com/books/_Players/PearsonInstallAsst2.cab (Pearson Installation Assistant 2)
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} http://aolsvc.aol.com/onlinegames/free-tri…zylomplayer.cab (Zylom Games Player)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {D8AA889B-2C65-47C3-8C16-3DCD4EF76A47} http://rms2.invokesolutions.com/events/bin…1437/MILive.cab (Reg Error: Key error.)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E6D23284-0E9B-417D-A782-03E4487FC947} http://asp.mathxl.com/books/_Players/MathPlayer.cab (Pearson MathXL Player)
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} http://pdl.stream.aol.com/downloads/aol/unagi/ampx_en_dl.cab (IWinAmpActiveX Class)
O16 - DPF: ActiveGS.cab http://www.virtualapple.org/gs.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DAFF3FB3-90EA-451A-B695-5D04E49BE529}: DhcpNameServer = 10.0.0.1
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\IntelWireless: DllName - (C:\Program Files\Intel\Wireless\Bin\LgNotify.dll) - C:\Program Files\Intel\Wireless\Bin\LgNotify.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Jennifer Law\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jennifer Law\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004.08.10 13:04:08 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3filter - C:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.alf2cd - C:\WINDOWS\System32\alf2cd.acm (NCT Company)
Drivers32: msacm.enc - C:\WINDOWS\System32\ITIG726.acm (Ingenient Technologies, Inc.)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.scg726 - C:\WINDOWS\System32\Scg726.acm (SHARP Corporation)
Drivers32: msacm.voxacm160 - C:\WINDOWS\System32\vct3216.acm (Voxware, Inc.)
Drivers32: MSVideo - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.dvsd - C:\WINDOWS\System32\mcdvd_32.dll (MainConcept)
Drivers32: VIDC.IV41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011.10.25 14:31:17 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Jennifer Law\Desktop\OTL.exe
[2011.10.22 23:24:41 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer Law\My Documents\hps
[2011.10.22 06:47:42 | 000,205,072 | —- | C] (Trend Micro Inc.) – C:\WINDOWS\System32\drivers\tmcomm.sys
[2011.10.22 00:47:49 | 015,293,896 | —- | C] (Microsoft Corporation) – C:\windows-kb890830-v4.1.exe
[2011.10.19 11:35:51 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2011.10.19 11:34:42 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011.10.19 11:34:42 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011.10.19 11:34:42 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011.10.15 23:10:12 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2011.10.15 22:38:07 | 000,000,000 | —D | C] – C:\Adobe Acrobat X
[2011.10.15 22:09:37 | 487,666,616 | —- | C] (Adobe Systems Incorporated) – C:\AcrobatPro_10_Web_WWEFD.exe
[2011.10.14 21:40:59 | 000,000,000 | —D | C] – C:\tdsskiller
[2011.10.13 14:24:19 | 000,000,000 | —D | C] – C:\Program Files\AOL Desktop 9.6
[2011.10.13 14:23:43 | 000,000,000 | —D | C] – C:\Program Files\Common Files\aolshare
[2011.10.12 15:40:40 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer Law\My Documents\RBC Ministries_files
[2011.10.07 22:32:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer Law\My Documents\BB.com Articles
[2011.10.07 22:10:22 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer Law\My Documents\BB.com Fitness 360
[2011.10.01 22:17:39 | 000,000,000 | —D | C] – C:\Program Files\Common Files\xing shared
[2011.10.01 22:17:19 | 000,198,832 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2011.10.01 22:17:04 | 000,006,656 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2011.10.01 22:17:04 | 000,005,632 | —- | C] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2011.10.01 22:17:03 | 000,272,896 | —- | C] (Progressive Networks) – C:\WINDOWS\System32\pncrt.dll
[2011.10.01 22:17:03 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Real
[2011.10.01 21:54:26 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Winamp
[2011.10.01 21:54:25 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer Law\Start Menu\Programs\Winamp Detector Plug-in
[2011.10.01 21:54:25 | 000,000,000 | —D | C] – C:\Program Files\Winamp Detect
[2011.10.01 21:53:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer Law\Application Data\Winamp
[2011.10.01 21:28:43 | 000,000,000 | —D | C] – C:\Documents and Settings\Jennifer Law\Application Data\Media Player Classic
[2011.10.01 09:38:01 | 000,017,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2011.10.01 09:35:38 | 012,381,800 | —- | C] (Nullsoft, Inc.) – C:\winamp5621_full_emusic-7plus_en-us.exe
[2011.10.01 09:34:29 | 001,184,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wvc1dmod.dll
[2011.09.26 11:41:20 | 000,220,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oleacc.dll
[2008.11.29 00:04:23 | 000,047,360 | —- | C] (VSO Software) – C:\Documents and Settings\Jennifer Law\Application Data\pcouffin.sys
[9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Jennifer Law\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\Jennifer Law\Local Settings\Application Data\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.10.25 14:31:25 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer Law\Desktop\OTL.exe
[2011.10.25 14:25:56 | 000,000,436 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{28BC42C3-2A12-4841-BEF3-8A9EC1B8C20A}.job
[2011.10.25 06:54:46 | 000,000,292 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1879541575-3255683778-2761792344-1006.job
[2011.10.25 06:54:45 | 000,000,300 | —- | M] () – C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1879541575-3255683778-2761792344-1006.job
[2011.10.25 06:24:14 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011.10.25 02:16:00 | 000,000,524 | —- | M] () – C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task 67c7bc88-4134-4556-a87a-307b10c7c7ab.job
[2011.10.24 19:46:34 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011.10.24 19:38:29 | 000,000,424 | -H– | M] () – C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011.10.24 19:32:43 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011.10.24 19:32:42 | 2138,505,216 | -HS- | M] () – C:\hiberfil.sys
[2011.10.24 10:19:28 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011.10.22 21:53:55 | 000,104,945 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\Favorite Places.pfc
[2011.10.22 06:49:05 | 001,542,471 | —- | M] () – C:\tdsskiller.zip
[2011.10.22 06:47:33 | 000,205,072 | —- | M] (Trend Micro Inc.) – C:\WINDOWS\System32\drivers\tmcomm.sys
[2011.10.22 06:47:15 | 004,104,900 | —- | M] () – C:\RootkitBuster_5.00.1041.zip
[2011.10.22 00:48:04 | 015,293,896 | —- | M] (Microsoft Corporation) – C:\windows-kb890830-v4.1.exe
[2011.10.21 21:12:17 | 000,222,432 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011.10.15 22:09:37 | 487,666,616 | —- | M] (Adobe Systems Incorporated) – C:\AcrobatPro_10_Web_WWEFD.exe
[2011.10.15 21:30:10 | 000,002,515 | —- | M] () – C:\Documents and Settings\Jennifer Law\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Word 2003.lnk
[2011.10.15 07:09:36 | 000,446,478 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011.10.15 07:09:36 | 000,073,518 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011.10.15 06:57:10 | 000,001,393 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011.10.14 21:48:22 | 000,302,592 | —- | M] () – C:\lluvrtzg.exe
[2011.10.13 17:32:55 | 000,283,238 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\www.bodybuilding.com-ask-the-macro-manager-should-i-consume-simple-carbs-post-workout-.pdf
[2011.10.13 14:30:35 | 000,000,756 | —- | M] () – C:\Documents and Settings\All Users\Desktop\AOL Desktop 9.6.lnk
[2011.10.13 14:30:35 | 000,000,736 | —- | M] () – C:\Documents and Settings\Jennifer Law\Application Data\Microsoft\Internet Explorer\Quick Launch\AOL Desktop 9.6.lnk
[2011.10.13 13:53:19 | 000,001,030 | —- | M] () – C:\Documents and Settings\Jennifer Law\Start Menu\Programs\Startup\AOL Desktop.lnk
[2011.10.13 13:39:47 | 000,058,696 | —- | M] (AOL Inc.) – C:\WINDOWS\System32\AOLParconLink.exe
[2011.10.13 10:09:51 | 000,000,510 | —- | M] () – C:\Documents and Settings\Jennifer Law\Desktop\AOL Saved Files.lnk
[2011.10.13 10:09:50 | 000,000,042 | —- | M] () – C:\WINDOWS\msoffice.ini
[2011.10.13 06:36:44 | 000,484,903 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\bodybuilding.com-Bodybuildingcom__Train_Like_A_Man__Look_Like_A_Goddess.pdf
[2011.10.13 05:52:35 | 031,570,613 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\Kim_Oddos_The_Perfect_Figure__Bikini_Stage_Physique_Training.mp4
[2011.10.12 15:40:42 | 000,024,134 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\RBC Ministries.htm
[2011.10.11 06:54:12 | 002,312,694 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\Wallpaper1.bmp
[2011.10.09 23:44:26 | 099,371,055 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\On_The_Go_With_Jennifer_Nicole_Lee_Shape_Up_Fusion_Style.mp4
[2011.10.09 21:08:31 | 000,259,636 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\bodybuilding.com-Bodybuildingcom__Women_Strength_Training_Your_Guide_To_A_Sexy_amp_Fit_Body.pdf
[2011.10.07 19:08:00 | 000,004,829 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 6.htm
[2011.10.07 14:53:34 | 000,004,829 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 7.htm
[2011.10.07 12:19:52 | 000,006,352 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\running worlkout 5.htm
[2011.10.07 12:17:20 | 000,008,726 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 4.htm
[2011.10.07 12:11:46 | 000,008,376 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 3.htm
[2011.10.07 12:11:03 | 000,005,774 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 2.htm
[2011.10.07 12:10:19 | 000,007,086 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\Running Workout.htm
[2011.10.05 20:29:48 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2011.10.05 20:29:48 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2011.10.05 20:22:24 | 000,000,782 | —- | M] () – C:\Documents and Settings\Jennifer Law\Desktop\Windows Media Player.lnk
[2011.10.05 19:39:27 | 000,002,497 | —- | M] () – C:\Documents and Settings\Jennifer Law\Desktop\Microsoft Office Word 2003.lnk
[2011.10.04 05:03:41 | 000,006,712 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\5ay split bb.com.htm
[2011.10.03 05:06:16 | 000,157,472 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011.10.03 05:06:15 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011.10.03 05:06:14 | 000,145,184 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011.10.03 05:06:03 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\deployJava1.dll
[2011.10.03 03:35:11 | 005,971,456 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2011.10.03 02:37:52 | 000,073,728 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javacpl.cpl
[2011.10.01 22:49:54 | 000,000,882 | —- | M] () – C:\WINDOWS\orun32.ini
[2011.10.01 22:18:05 | 000,000,929 | —- | M] () – C:\Documents and Settings\All Users\Desktop\RealPlayer.lnk
[2011.10.01 22:17:19 | 000,198,832 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\rmoc3260.dll
[2011.10.01 22:17:04 | 000,006,656 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5016.dll
[2011.10.01 22:17:04 | 000,005,632 | —- | M] (RealNetworks, Inc.) – C:\WINDOWS\System32\pndx5032.dll
[2011.10.01 22:17:03 | 000,272,896 | —- | M] (Progressive Networks) – C:\WINDOWS\System32\pncrt.dll
[2011.10.01 21:54:26 | 000,000,672 | —- | M] () – C:\Documents and Settings\Jennifer Law\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2011.10.01 21:54:26 | 000,000,654 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Winamp.lnk
[2011.10.01 20:25:33 | 000,013,585 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\5day split 2.htm
[2011.10.01 20:24:59 | 000,013,172 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\5day split 1.htm
[2011.10.01 09:35:38 | 012,381,800 | —- | M] (Nullsoft, Inc.) – C:\winamp5621_full_emusic-7plus_en-us.exe
[2011.10.01 09:02:06 | 000,103,809 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\A Year of Slow Cooking Slow Cooker Caribbean Jerk Chicken Recipe.htm
[2011.10.01 09:01:42 | 000,055,864 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\Philippians 19-10 NIV - And this is my prayer that your love - Bible Gateway.htm
[2011.09.26 11:41:20 | 000,611,328 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\uiautomationcore.dll
[2011.09.26 11:41:20 | 000,220,160 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oleacc.dll
[2011.09.26 11:41:14 | 000,020,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\oleaccrc.dll
[2011.09.26 11:41:14 | 000,020,480 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\oleaccrc.dll
[2011.09.25 22:21:23 | 044,357,556 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\Ava_Cowan_Naturally_Driven__Training_Philosophy.mp4
[9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\Documents and Settings\Jennifer Law\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\Jennifer Law\Local Settings\Application Data\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.10.22 21:53:55 | 000,104,945 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\Favorite Places.pfc
[2011.10.22 06:47:08 | 004,104,900 | —- | C] () – C:\RootkitBuster_5.00.1041.zip
[2011.10.17 06:42:34 | 000,000,524 | —- | C] () – C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task 67c7bc88-4134-4556-a87a-307b10c7c7ab.job
[2011.10.14 21:48:14 | 000,302,592 | —- | C] () – C:\lluvrtzg.exe
[2011.10.14 21:40:18 | 001,542,471 | —- | C] () – C:\tdsskiller.zip
[2011.10.13 17:32:54 | 000,283,238 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\www.bodybuilding.com-ask-the-macro-manager-should-i-consume-simple-carbs-post-workout-.pdf
[2011.10.13 14:30:35 | 000,000,756 | —- | C] () – C:\Documents and Settings\All Users\Desktop\AOL Desktop 9.6.lnk
[2011.10.13 14:30:35 | 000,000,736 | —- | C] () – C:\Documents and Settings\Jennifer Law\Application Data\Microsoft\Internet Explorer\Quick Launch\AOL Desktop 9.6.lnk
[2011.10.13 06:36:40 | 000,484,903 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\bodybuilding.com-Bodybuildingcom__Train_Like_A_Man__Look_Like_A_Goddess.pdf
[2011.10.13 05:52:35 | 031,570,613 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\Kim_Oddos_The_Perfect_Figure__Bikini_Stage_Physique_Training.mp4
[2011.10.12 15:40:39 | 000,024,134 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\RBC Ministries.htm
[2011.10.09 23:35:55 | 099,371,055 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\On_The_Go_With_Jennifer_Nicole_Lee_Shape_Up_Fusion_Style.mp4
[2011.10.09 21:08:31 | 000,259,636 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\bodybuilding.com-Bodybuildingcom__Women_Strength_Training_Your_Guide_To_A_Sexy_amp_Fit_Body.pdf
[2011.10.07 19:07:59 | 000,004,829 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 6.htm
[2011.10.07 14:53:34 | 000,004,829 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 7.htm
[2011.10.07 12:19:52 | 000,006,352 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\running worlkout 5.htm
[2011.10.07 12:17:20 | 000,008,726 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 4.htm
[2011.10.07 12:11:45 | 000,008,376 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 3.htm
[2011.10.07 12:11:02 | 000,005,774 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\running workout 2.htm
[2011.10.07 12:10:19 | 000,007,086 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\Running Workout.htm
[2011.10.05 20:20:56 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2011.10.05 20:20:56 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2011.10.04 05:03:41 | 000,006,712 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\5ay split bb.com.htm
[2011.10.01 22:51:12 | 000,005,652 | —- | C] () – C:\WINDOWS\System32\drivers\bvrp_pci.sys
[2011.10.01 22:18:05 | 000,000,929 | —- | C] () – C:\Documents and Settings\All Users\Desktop\RealPlayer.lnk
[2011.10.01 21:54:26 | 000,000,672 | —- | C] () – C:\Documents and Settings\Jennifer Law\Application Data\Microsoft\Internet Explorer\Quick Launch\Winamp.lnk
[2011.10.01 21:54:26 | 000,000,654 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Winamp.lnk
[2011.10.01 20:25:33 | 000,013,585 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\5day split 2.htm
[2011.10.01 20:24:59 | 000,013,172 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\5day split 1.htm
[2011.10.01 09:02:00 | 000,103,809 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\A Year of Slow Cooking Slow Cooker Caribbean Jerk Chicken Recipe.htm
[2011.10.01 09:01:37 | 000,055,864 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\Philippians 19-10 NIV - And this is my prayer that your love - Bible Gateway.htm
[2011.09.25 22:17:34 | 044,357,556 | —- | C] () – C:\Documents and Settings\Jennifer Law\My Documents\Ava_Cowan_Naturally_Driven__Training_Philosophy.mp4
[2011.04.30 21:12:45 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011.04.14 20:10:14 | 000,000,066 | —- | C] () – C:\WINDOWS\Raining.ini
[2011.04.14 06:19:59 | 000,000,036 | -H– | C] () – C:\WINDOWS\System32\swk.ini
[2011.04.13 23:28:48 | 000,005,120 | —- | C] () – C:\WINDOWS\DellBIOS.Sys
[2011.04.13 16:46:12 | 000,175,616 | —- | C] () – C:\WINDOWS\System32\unrar.dll
[2011.04.11 13:46:49 | 000,122,208 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2011.04.05 10:34:51 | 000,256,512 | —- | C] () – C:\WINDOWS\PEV.exe
[2011.04.05 10:34:51 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2011.04.05 10:34:51 | 000,089,088 | —- | C] () – C:\WINDOWS\MBR.exe
[2011.04.05 10:34:51 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2011.04.05 10:34:51 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2011.01.02 19:26:14 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\MSVolumeAP.dll
[2009.09.12 11:18:28 | 000,000,760 | —- | C] () – C:\Documents and Settings\Jennifer Law\Application Data\setup_ldm.iss
[2009.03.13 23:26:35 | 000,000,256 | —- | C] () – C:\WINDOWS\System32\pool.bin
[2009.01.17 12:35:05 | 000,000,240 | —- | C] () – C:\WINDOWS\lexstat.ini
[2008.11.29 00:04:23 | 000,007,887 | —- | C] () – C:\Documents and Settings\Jennifer Law\Application Data\pcouffin.cat
[2008.11.29 00:04:23 | 000,001,144 | —- | C] () – C:\Documents and Settings\Jennifer Law\Application Data\pcouffin.inf
[2008.02.04 18:23:10 | 000,693,792 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.DLL
[2007.10.21 15:41:01 | 000,000,023 | —- | C] () – C:\WINDOWS\System32\sysmwwod.dll
[2007.04.26 16:40:19 | 000,053,248 | R— | C] () – C:\WINDOWS\System32\InstMed.exe
[2007.04.26 16:40:05 | 000,201,728 | —- | C] () – C:\WINDOWS\System32\drivers\LV302AV.SYS
[2007.03.01 22:23:10 | 000,001,360 | —- | C] () – C:\WINDOWS\_delis32.ini
[2006.12.14 22:17:15 | 000,000,000 | —- | C] () – C:\WINDOWS\iPlayer.INI
[2006.11.29 02:00:20 | 000,001,100 | —- | C] () – C:\WINDOWS\System32\d3d8caps.dat
[2006.11.15 11:04:53 | 000,010,977 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2006.11.13 19:24:03 | 000,032,768 | —- | C] () – C:\Documents and Settings\Jennifer Law\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.11.11 04:43:11 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2006.11.11 04:05:40 | 000,000,042 | —- | C] () – C:\WINDOWS\msoffice.ini
[2006.11.11 01:48:15 | 000,000,101 | —- | C] () – C:\WINDOWS\upst.ini
[2006.11.11 01:48:15 | 000,000,029 | —- | C] () – C:\WINDOWS\atid.ini
[2006.07.20 17:24:22 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2006.07.20 17:11:41 | 000,149,504 | —- | C] () – C:\WINDOWS\UNWISE.EXE
[2006.07.20 17:06:07 | 000,000,880 | —- | C] () – C:\WINDOWS\wininit.ini
[2006.07.20 17:04:19 | 000,000,335 | —- | C] () – C:\WINDOWS\nsreg.dat
[2006.07.20 16:36:56 | 000,049,152 | —- | C] () – C:\WINDOWS\setpwrcg.exe
[2006.07.20 16:36:28 | 000,000,391 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2004.08.12 08:44:10 | 000,016,384 | —- | C] () – C:\WINDOWS\System32\iwca.dll
[2004.08.10 13:12:05 | 000,000,882 | —- | C] () – C:\WINDOWS\orun32.ini
[2004.08.10 13:07:31 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2004.08.10 13:02:15 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2004.08.10 12:57:52 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2004.08.10 12:57:15 | 000,222,432 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2004.08.10 12:51:21 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004.08.10 12:51:20 | 000,446,478 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2004.08.10 12:51:20 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004.08.10 12:51:20 | 000,073,518 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2004.08.10 12:51:20 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004.08.10 12:51:18 | 000,004,627 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2004.08.10 12:51:17 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2004.08.10 12:51:16 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2004.08.10 12:51:12 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004.08.10 12:51:11 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004.08.10 12:51:05 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004.08.10 12:50:56 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[1999.01.27 14:39:06 | 000,065,024 | —- | C] () – C:\WINDOWS\System32\indounin.dll
[1997.06.13 08:56:08 | 000,056,832 | —- | C] () – C:\WINDOWS\System32\Iyvu9_32.dll

========== LOP Check ==========

[2011.08.03 22:34:14 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\!SASCORE
[2011.04.22 09:54:22 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\163A9
[2011.09.03 21:28:40 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Amazon
[2011.04.08 15:59:04 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG10
[2011.04.05 11:22:19 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\Common Files
[2009.06.28 12:56:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DriverScanner
[2011.04.05 11:19:57 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MFAData
[2011.10.15 23:10:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2011.05.02 17:35:35 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Speedbit
[2009.08.07 18:35:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SupportSoft
[2011.09.08 06:04:37 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2010.02.07 17:56:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2011.04.05 13:34:49 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009.07.25 15:35:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2008.07.19 17:22:27 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\acccore
[2011.05.12 18:02:40 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\Amazon
[2011.04.05 11:23:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\AVG10
[2011.05.03 03:49:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\com.amazon.music.uploader
[2011.07.31 18:12:09 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\FrostWire
[2011.09.11 12:28:55 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\GetRightToGo
[2011.04.20 13:09:24 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\gtk-2.0
[2006.12.02 12:10:41 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\Leadertech
[2006.11.11 05:17:56 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\OfficeUpdate12
[2011.04.19 09:36:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\SoftGrid Client
[2007.08.31 15:35:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\Viewpoint
[2008.12.22 11:05:22 | 000,000,000 | —D | M] – C:\Documents and Settings\Jennifer Law\Application Data\Vso
[2011.10.24 19:38:29 | 000,000,424 | -H– | M] () – C:\WINDOWS\Tasks\MP Scheduled Scan.job
[2011.10.25 02:16:00 | 000,000,524 | —- | M] () – C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 67c7bc88-4134-4556-a87a-307b10c7c7ab.job
[2011.10.25 14:25:56 | 000,000,436 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{28BC42C3-2A12-4841-BEF3-8A9EC1B8C20A}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011.04.24 20:38:27 | 001,110,476 | —- | M] () – C:\7z920.exe
[2011.01.02 19:03:22 | 038,357,320 | —- | M] (PC Tools ) – C:\8.0.0.623j-SDAFFsetup_en-RevenueWire(207).exe
[2007.08.18 19:46:13 | 000,000,934 | —- | M] () – C:\ac3filter.reg
[2011.10.15 22:09:37 | 487,666,616 | —- | M] (Adobe Systems Incorporated) – C:\AcrobatPro_10_Web_WWEFD.exe
[2007.08.17 10:53:56 | 023,402,288 | —- | M] ( ) – C:\AdbeRdr810_en_US.exe
[2008.07.13 09:38:37 | 013,505,768 | —- | M] () – C:\AdobeAIRInstaller.exe
[2011.09.15 19:20:37 | 000,055,672 | —- | M] () – C:\Affidavit[1].pdf
[2011.05.03 03:22:56 | 007,399,056 | —- | M] () – C:\AmazonMP3UploaderInstaller-1.0.1._V184514748_.exe
[2006.12.21 00:22:12 | 000,010,920 | —- | M] () – C:\aolconnfix.exe
[2006.12.21 00:22:12 | 000,001,039 | —- | M] () – C:\aolconnfix.txt
[2004.08.10 13:04:08 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2006.11.11 01:19:19 | 000,000,211 | —- | M] () – C:\Boot.bak
[2011.04.05 10:37:32 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2009.01.17 12:24:55 | 016,092,160 | —- | M] () – C:\CJB700EN.exe
[2011.05.04 20:07:23 | 003,024,384 | —- | M] () – C:\Client.msi
[2004.08.03 23:00:00 | 000,260,272 | RHS- | M] () – C:\cmldr
[2006.11.22 15:09:54 | 000,009,218 | —- | M] () – C:\colors.dat
[2011.04.05 11:15:55 | 000,013,219 | —- | M] () – C:\ComboFix.txt
[2004.08.10 13:04:08 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2006.07.20 16:40:34 | 000,005,465 | RH– | M] () – C:\dell.sdr
[2007.10.28 16:08:40 | 000,636,192 | —- | M] (McAfee, Inc.) – C:\DMSetup-Serial.exe
[2008.09.05 21:56:12 | 000,000,076 | —- | M] () – C:\DVDPATH.TXT
[2010.07.09 12:20:52 | 003,414,996 | —- | M] () – C:\get_down.mp3
[2007.08.18 19:46:13 | 000,001,622 | —- | M] () – C:\gspot.reg
[2011.10.24 19:32:42 | 2138,505,216 | -HS- | M] () – C:\hiberfil.sys
[2006.11.11 12:51:54 | 000,004,128 | —- | M] () – C:\INFCACHE.1
[2011.10.13 14:30:20 | 000,060,748 | —- | M] () – C:\install.log
[2004.08.10 13:04:08 | 000,000,000 | -H– | M] () – C:\IO.SYS
[2011.05.02 17:14:12 | 004,937,143 | —- | M] () – C:\Jarrid Mendelsson-UFC Theme-Ultimate Warrior.mp3
[2006.11.22 15:14:39 | 000,002,292 | —- | M] () – C:\lib4.dat
[2011.10.14 21:48:22 | 000,302,592 | —- | M] () – C:\lluvrtzg.exe
[2007.04.26 16:37:44 | 000,000,183 | —- | M] () – C:\LogiSetup.log
[2004.08.10 13:04:08 | 000,000,000 | -H– | M] () – C:\MSDOS.SYS
[2011.04.08 16:04:32 | 009,920,304 | —- | M] (Microsoft Corporation) – C:\mseinstall.exe
[2007.04.26 18:41:43 | 000,459,068 | —- | M] () – C:\MSIInstall.log
[2009.02.13 18:24:54 | 114,340,136 | —- | M] () – C:\My_Downloads_List171413.zip
[2004.08.04 05:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008.07.19 18:20:47 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011.05.19 01:44:30 | 000,007,065 | —- | M] () – C:\optoutemps2.php.htm
[2011.05.19 01:41:35 | 000,014,924 | —- | M] () – C:\opt_form.cgi.htm
[2011.10.24 19:32:40 | 1421,869,056 | -HS- | M] () – C:\pagefile.sys
[2011.10.22 06:47:15 | 004,104,900 | —- | M] () – C:\RootkitBuster_5.00.1041.zip
[2006.11.22 15:14:39 | 000,003,808 | —- | M] () – C:\settings.dat
[2011.06.23 17:29:14 | 000,000,516 | —- | M] () – C:\Settings.ini
[2011.05.11 07:58:52 | 011,104,928 | —- | M] (SUPERAntiSpyware.com) – C:\SUPERAntiSpywarePro.exe
[2006.07.20 17:06:02 | 000,000,071 | —- | M] () – C:\SystemInfo.ini
[2011.09.11 08:26:50 | 000,052,398 | —- | M] () – C:\TDSSKiller.2.5.21.0_11.09.2011_08.26.08_log.txt
[2011.10.22 06:53:44 | 000,127,310 | —- | M] () – C:\TDSSKiller.2.6.12.0_22.10.2011_06.52.01_log.txt
[2011.10.22 06:56:03 | 000,064,312 | —- | M] () – C:\TDSSKiller.2.6.12.0_22.10.2011_06.53.50_log.txt
[2011.10.14 21:42:56 | 000,063,590 | —- | M] () – C:\TDSSKiller.2.6.9.0_14.10.2011_21.41.54_log.txt
[2011.10.14 21:43:51 | 000,001,828 | —- | M] () – C:\TDSSKiller.2.6.9.0_14.10.2011_21.43.28_log.txt
[2011.10.22 06:49:05 | 001,542,471 | —- | M] () – C:\tdsskiller.zip
[2008.01.18 13:30:15 | 000,136,528 | —- | M] (AOL LLC.) – C:\unagi_patch.exe
[2010.01.31 21:38:16 | 000,071,792 | —- | M] () – C:\VETlog.dmp
[2010.01.31 21:38:16 | 012,323,495 | —- | M] () – C:\VETlog.txt
[2007.08.18 19:46:13 | 000,000,588 | —- | M] () – C:\vsfilter.reg
[2011.05.11 21:03:40 | 000,206,775 | —- | M] () – C:\WebAdvisor.pdf
[2011.10.01 09:35:38 | 012,381,800 | —- | M] (Nullsoft, Inc.) – C:\winamp5621_full_emusic-7plus_en-us.exe
[2011.10.22 00:48:04 | 015,293,896 | —- | M] (Microsoft Corporation) – C:\windows-kb890830-v4.1.exe
[2009.02.15 10:20:01 | 000,003,059 | —- | M] () – C:\WirelessDiagLog.csv
[2008.01.24 19:30:41 | 000,000,328 | —- | M] () – C:\xinstall.log
[2007.08.18 19:46:13 | 000,000,294 | —- | M] () – C:\xvid.reg

< %systemroot%\Fonts\*.com >
[2006.04.18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006.06.29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006.04.18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006.06.29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004.08.10 13:03:42 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008.07.06 07:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007.04.09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
[2008.07.06 05:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >
[2006.11.26 03:51:43 | 000,001,610 | -H– | M] () – C:\Documents and Settings\Jennifer Law\Application Data\Microsoft\LastFlashConfig.WFC

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004.08.10 12:56:48 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2004.08.10 12:56:46 | 000,634,880 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2004.08.10 12:56:46 | 000,872,448 | —- | M] () – C:\WINDOWS\System32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008.07.19 18:29:47 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2006.11.11 01:19:56 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Jennifer Law\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2004.08.10 13:08:38 | 000,000,079 | —- | M] () – C:\Documents and Settings\Jennifer Law\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2011.10.25 14:31:25 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jennifer Law\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< %APPDATA%\Roaming\Microsoft\Windows\Recent\*.lnk /x >

< %PROGRAMFILES%\PC-Doctor\Downloads\*.* >

< %PROGRAMFILES%\Internet Explorer\*.tmp >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %USERPROFILE%\My Documents\*.exe >
[2011.04.16 20:16:25 | 012,580,112 | —- | M] (Mozilla) – C:\Documents and Settings\Jennifer Law\My Documents\Firefox Setup 4.0.exe
[2010.05.09 18:24:50 | 011,862,896 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\Jennifer Law\My Documents\mssefullinstall-x86fre-en-us-xp.exe
[2011.04.15 19:14:36 | 018,340,336 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\pal_install_r17725.exe
[2011.04.14 20:52:40 | 000,708,608 | —- | M] () – C:\Documents and Settings\Jennifer Law\My Documents\rainy-st-setup.exe
[2011.09.22 20:51:44 | 000,684,288 | —- | M] (RealNetworks, Inc.) – C:\Documents and Settings\Jennifer Law\My Documents\RealPlayer.exe
[2011.07.17 11:28:41 | 000,570,612 | —- | M] (The GO Button, Inc. ) – C:\Documents and Settings\Jennifer Law\My Documents\setup.exe

< %USERPROFILE%\*.exe >
[2011.05.04 17:34:31 | 000,000,000 | —- | M] () – C:\Documents and Settings\Jennifer Law\FCM.exe

< %systemroot%\ADDINS\*.* >

< %systemroot%\assembly\*.bak2 >

< %systemroot%\Config\*.* >

< %systemroot%\REPAIR\*.bak2 >

< %systemroot%\SECURITY\Database\*.sdb /x >

< %systemroot%\SYSTEM\*.bak2 >

< %systemroot%\Web\*.bak2 >

< %systemroot%\Driver Cache\*.* >

< %PROGRAMFILES%\Mozilla Firefox\0*.exe >

< %ProgramFiles%\Microsoft Common\*.* >

< %ProgramFiles%\TinyProxy. >

< %USERPROFILE%\Favorites\*.url /x >
[2006.11.11 01:19:55 | 000,000,122 | -HS- | M] () – C:\Documents and Settings\Jennifer Law\Favorites\Desktop.ini

< %systemroot%\system32\*.bk >

< %systemroot%\*.te >

< %systemroot%\system32\system32\*.* >

< %ALLUSERSPROFILE%\*.dat /x >

< %systemroot%\system32\drivers\*.rmv >

< dir /b "%systemroot%\system32\*.exe" | find /i " " /c >

< dir /b "%systemroot%\*.exe" | find /i " " /c >

< %PROGRAMFILES%\Microsoft\*.* >

< %systemroot%\System32\Wbem\proquota.exe >

< %PROGRAMFILES%\Mozilla Firefox\*.dat >

< %USERPROFILE%\Cookies\*.txt /x >
[2010.02.14 18:50:48 | 000,000,067 | -HS- | M] () – C:\Documents and Settings\Jennifer Law\Cookies\desktop.ini
[2011.10.25 14:35:55 | 000,278,528 | —- | M] () – C:\Documents and Settings\Jennifer Law\Cookies\index.dat

< %SystemRoot%\system32\fonts\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-10-15 12:12:52

========== Alternate Data Streams ==========

@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8

< End of report >

Here is the extras.Txt log results:
OTL Extras logfile created on: 10.25.11 02:35:28 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Jennifer Law\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M.d.yy

1.99 Gb Total Physical Memory | 1.12 Gb Available Physical Memory | 56.03% Memory free
3.17 Gb Paging File | 2.07 Gb Available in Paging File | 65.33% Paging File free
Paging file location(s): C:\pagefile.sys 1356 1912 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 34.20 Gb Total Space | 5.06 Gb Free Space | 14.79% Space Free | Partition Type: NTFS

Computer Name: JENNIFER | User Name: Jennifer Law | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] – "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] – "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] – "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" = C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL – (America Online)
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" = C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL – (AOL LLC)
"C:\Program Files\America Online 9.0\waol.exe" = C:\Program Files\America Online 9.0\waol.exe:*:Enabled:America Online 9.0
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare
"C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe" = C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe:*:Enabled:Shareaza
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Common Files\AOL\ACS\AOLDial.exe" = C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL – (America Online)
"C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" = C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL – (AOL LLC)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Application Loader – (AOL Inc.)
"C:\Program Files\Common Files\AOL\1163232286\EE\AOLServiceHost.exe" = C:\Program Files\Common Files\AOL\1163232286\EE\AOLServiceHost.exe:*:Enabled:AOL – (America Online, Inc.)
"C:\Program Files\Common Files\AOL\System Information\sinf.exe" = C:\Program Files\Common Files\AOL\System Information\sinf.exe:*:Enabled:AOL – (AOL Inc.)
"C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe" = C:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:*:Enabled:AOL TopSpeed – (AOL Inc.)
"C:\Program Files\Common Files\AOL\1163232286\EE\aolsoftware.exe" = C:\Program Files\Common Files\AOL\1163232286\EE\aolsoftware.exe:*:Enabled:AOL Services – (AOL Inc.)
"C:\Program Files\Common Files\AOL\1163232286\EE\AOLDesktop.exe" = C:\Program Files\Common Files\AOL\1163232286\EE\AOLDesktop.exe:*:Enabled:AOL Desktop – (AOL LLC)
"C:\Program Files\AOL Desktop 9.6b\waol.exe" = C:\Program Files\AOL Desktop 9.6b\waol.exe:*:Enabled:AOL Desktop 9.6b
"C:\Program Files\AVG\AVG10\avgmfapx.exe" = C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:AVG Installer
"C:\Program Files\FrostWire\FrostWire.exe" = C:\Program Files\FrostWire\FrostWire.exe:*:Enabled:FrostWire
"C:\Program Files\AOL Desktop 9.6\waol.exe" = C:\Program Files\AOL Desktop 9.6\waol.exe:*:Enabled:AOL – (AOL Inc.)
"C:\Program Files\AOL Desktop 9.6\AOLBrowser\aolbrowser.exe" = C:\Program Files\AOL Desktop 9.6\AOLBrowser\aolbrowser.exe:*:Enabled:AOL Browser – (AOL Inc.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test – (Microsoft Corporation)
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh
"C:\Program Files\Bywifi\bywifi.exe" = C:\Program Files\Bywifi\bywifi.exe:*:Enabled:Bywifi: Video Streaming Accelerator
"C:\Documents and Settings\Jennifer Law\My Documents\FrostWire\Saved\AoE-RoR\AOE\AOE\EMPIRESX.EXE" = C:\Documents and Settings\Jennifer Law\My Documents\FrostWire\Saved\AoE-RoR\AOE\AOE\EMPIRESX.EXE:*:Enabled:Age of Empires, the Rise of Rome
"C:\Program Files\FrostWire 5\FrostWire.exe" = C:\Program Files\FrostWire 5\FrostWire.exe:*:Enabled:FrostWire
"C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" = C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:*:Enabled:Veoh Web Player
"C:\Program Files\Giraffic\Giraffic.exe" = C:\Program Files\Giraffic\Giraffic.exe:*:Enabled:Giraffic (Agent)
"C:\Program Files\AOL Desktop 9.6a\waol.exe" = C:\Program Files\AOL Desktop 9.6a\waol.exe:*:Enabled:AOL
"C:\Program Files\AOL Desktop 9.6a\AOLBrowser\aolbrowser.exe" = C:\Program Files\AOL Desktop 9.6a\AOLBrowser\aolbrowser.exe:*:Enabled:AOL Browser
"C:\Program Files\Real\RealPlayer\realplay.exe" = C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer – (RealNetworks, Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{05BFB060-4F22-4710-B0A2-2801A1B606C5}" = Microsoft Antimalware
"{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}" = mSSO
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java™ 6 Update 29
"{26E1BFB0-E87E-4696-9F89-B467F01F81E5}" = Broadcom Management Programs
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{33BB4982-DC52-4886-A03B-F4C5C80BEE89}" = Windows Media Player 10
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{4667B940-BB01-428B-986E-A0CC46497BF7}" = ELIcon
"{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}" = mHlpDell
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{54B6DC7D-8C5B-4DFB-BC15-C010A3326B2B}" = Microsoft Security Client
"{62BD0AE0-4EB1-4BBB-8F43-B6400C8FEB2C}" = AOLIcon
"{6D5FCA42-1486-4E32-AFE8-1B7E2AA59D33}" = Digital Content Portal
"{6DE14BE4-6F04-4935-8ABD-A0A19FE2E55A}" = mCore
"{6FFFE74E-3FBD-4E2E-97F9-5E9A2A077626}" = mIWCA
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74F7662C-B1DB-489E-A8AC-07A06B24978B}" = Dell System Restore
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{797EE0CA-8165-405C-B5CE-F11EC20F1BB0}" = Microsoft VC9 runtime libraries
"{7F142D56-3326-11D5-B229-002078017FBF}" = Modem Helper
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel® Graphics Media Accelerator Driver for Mobile
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CC89556-3578-48DD-8408-04E66EBEF401}" = mXML
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AA027AE9-DD20-4677-AA72-D760A358320B}" = Microsoft VC9 runtime libraries
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CA9BAADB-C262-4E05-B2E2-CEE8CE9809EC}" = mToolkit
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2988E9B-C73F-422C-AD4B-A66EBE257120}" = MCU
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}" = mDrWiFi
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.12
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3" = Conexant HDA D110 MDC V.92 Modem
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 7.0.1 (x86 en-US)" = Mozilla Firefox 7.0.1 (x86 en-US)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"ProInst" = Intel® PROSet/Wireless Software
"RealPlayer 12.0" = RealPlayer
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"ViewpointMediaPlayer" = Viewpoint Media Player
"Winamp" = Winamp
"Windows XP Service Pack" = Windows XP Service Pack 3
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Winamp Detector Plug-in

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 9.22.11 11:17:18 PM | Computer Name = JENNIFER | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 9.22.11 11:17:19 PM | Computer Name = JENNIFER | Source = crypt32 | ID = 131080
Description = Failed auto update retrieval of third-party root list sequence number
from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
with error: A connection with the server could not be established

Error - 9.23.11 10:34:36 PM | Computer Name = JENNIFER | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 3.0.8402.0,
P5 mpsigdwn.dll, P6 3.0.8402.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P8 NIL, P9 NIL, P10 NIL.

Error - 9.23.11 10:39:34 PM | Computer Name = JENNIFER | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 8024402c, P2 endsearch, P3 search, P4 3.0.8402.0,
P5 mpsigdwn.dll, P6 3.0.8402.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P8 NIL, P9 NIL, P10 NIL.

Error - 9.24.11 08:35:27 AM | Computer Name = JENNIFER | Source = Application Hang | ID = 1002
Description = Hanging application realplay.exe, version 12.0.1.666, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 9.24.11 08:35:28 AM | Computer Name = JENNIFER | Source = Application Hang | ID = 1002
Description = Hanging application realplay.exe, version 12.0.1.666, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 9.24.11 08:35:45 AM | Computer Name = JENNIFER | Source = Application Hang | ID = 1001
Description = Fault bucket -1728151708.

Error - 9.26.11 01:33:25 PM | Computer Name = JENNIFER | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module unknown, version 0.0.0.0, fault address 0x00000000.

Error - 9.27.11 07:26:36 AM | Computer Name = JENNIFER | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

Error - 9.27.11 07:26:37 AM | Computer Name = JENNIFER | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.

[ System Events ]
Error - 10.21.11 10:11:02 PM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 10.21.11 10:11:02 PM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 10.21.11 10:11:02 PM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 10.21.11 10:11:02 PM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7023
Description = The Application Management service terminated with the following error:
%%126

Error - 10.21.11 10:22:32 PM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the Windows Image Acquisition
(WIA) service to connect.

Error - 10.21.11 10:22:32 PM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7000
Description = The Windows Image Acquisition (WIA) service failed to start due to
the following error: %%1053

Error - 10.23.11 12:29:37 AM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7034
Description = The AOL Connectivity Service service terminated unexpectedly. It
has done this 1 time(s).

Error - 10.23.11 05:06:48 PM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7034
Description = The AOL Connectivity Service service terminated unexpectedly. It
has done this 1 time(s).

Error - 10.24.11 08:43:36 PM | Computer Name = JENNIFER | Source = Microsoft Antimalware | ID = 2001
Description = %%860 has encountered an error trying to update signatures. New Signature
Version: Previous Signature Version: 1.115.380.0 Update Source: %%859 Update Stage:
%%852 Source Path: http://www.microsoft.com Signature Type: %%800 Update Type: %%803

User:
NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.7801.0 Error
code: 0x8024402c Error description: An unexpected problem occurred while checking
for updates. For information on installing or troubleshooting updates, see Help
and Support.

Error - 10.24.11 08:48:41 PM | Computer Name = JENNIFER | Source = Service Control Manager | ID = 7034
Description = The AOL Connectivity Service service terminated unexpectedly. It
has done this 1 time(s).


< End of report >

Here is the TDSSKiller log the first time I posted on this site and it had the warning of the infected file, I clicked delete if I can remember correctly: 06:52:01.0093 5776 TDSS rootkit removing tool [removed] Oct 21 2011 11:23:48 06:52:01.0546 5776 ============================================================ 06:52:01.0546 5776 Current date / time: 2011/10/22 06:52:01.0546 06:52:01.0546 5776 SystemInfo: 06:52:01.0546 5776 06:52:01.0546 5776 OS Version: 5.1.2600 ServicePack: 3.0 06:52:01.0546 5776 Product type: Workstation 06:52:01.0546 5776 ComputerName: JENNIFER 06:52:01.0546 5776 UserName: Jennifer Law 06:52:01.0546 5776 Windows directory: C:\WINDOWS 06:52:01.0546 5776 System windows directory: C:\WINDOWS 06:52:01.0546 5776 Processor architecture: Intel x86 06:52:01.0546 5776 Number of processors: 1 06:52:01.0546 5776 Page size: 0x1000 06:52:01.0546 5776 Boot type: Normal boot 06:52:01.0546 5776 ============================================================ 06:52:05.0328 5776 Initialize success 06:52:10.0015 4432 ============================================================ 06:52:10.0015 4432 Scan started 06:52:10.0015 4432 Mode: Manual; 06:52:10.0015 4432 ============================================================ 06:52:11.0343 4432 Abiosdsk - ok 06:52:11.0406 4432 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS 06:52:11.0421 4432 abp480n5 - ok 06:52:11.0500 4432 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 06:52:11.0500 4432 ACPI - ok 06:52:11.0546 4432 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 06:52:11.0546 4432 ACPIEC - ok 06:52:11.0625 4432 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys 06:52:11.0640 4432 adpu160m - ok 06:52:11.0703 4432 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 06:52:11.0703 4432 aec - ok 06:52:11.0781 4432 AegisP (076394a345ee5e9e3911fc0f058f4f38) C:\WINDOWS\system32\DRIVERS\AegisP.sys 06:52:11.0781 4432 AegisP - ok 06:52:11.0859 4432 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys 06:52:11.0875 4432 AFD - ok 06:52:11.0921 4432 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys 06:52:11.0921 4432 agp440 - ok 06:52:11.0968 4432 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys 06:52:11.0968 4432 agpCPQ - ok 06:52:12.0171 4432 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys 06:52:12.0171 4432 Aha154x - ok 06:52:12.0234 4432 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys 06:52:12.0234 4432 aic78u2 - ok 06:52:12.0281 4432 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys 06:52:12.0281 4432 aic78xx - ok 06:52:12.0343 4432 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys 06:52:12.0359 4432 AliIde - ok 06:52:12.0437 4432 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys 06:52:12.0437 4432 alim1541 - ok 06:52:12.0484 4432 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys 06:52:12.0484 4432 amdagp - ok 06:52:12.0515 4432 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys 06:52:12.0515 4432 amsint - ok 06:52:12.0656 4432 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys 06:52:12.0671 4432 asc - ok 06:52:12.0718 4432 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys 06:52:12.0718 4432 asc3350p - ok 06:52:12.0750 4432 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys 06:52:12.0765 4432 asc3550 - ok 06:52:12.0875 4432 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 06:52:12.0890 4432 AsyncMac - ok 06:52:12.0921 4432 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 06:52:12.0921 4432 atapi - ok 06:52:13.0046 4432 Atdisk - ok 06:52:13.0093 4432 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 06:52:13.0093 4432 Atmarpc - ok 06:52:13.0187 4432 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 06:52:13.0187 4432 audstub - ok 06:52:13.0265 4432 bcm4sbxp (c768c8a463d32c219ce291645a0621a4) C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys 06:52:13.0265 4432 bcm4sbxp - ok 06:52:13.0296 4432 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 06:52:13.0312 4432 Beep - ok 06:52:13.0390 4432 bvrp_pci (647c1626114e789c5b8ab8e9c33c04bc) C:\WINDOWS\system32\drivers\bvrp_pci.sys 06:52:13.0390 4432 bvrp_pci - ok 06:52:13.0593 4432 catchme - ok 06:52:13.0859 4432 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys 06:52:13.0859 4432 cbidf - ok 06:52:13.0906 4432 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 06:52:13.0906 4432 cbidf2k - ok 06:52:13.0984 4432 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 06:52:13.0984 4432 CCDECODE - ok 06:52:14.0062 4432 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys 06:52:14.0062 4432 cd20xrnt - ok 06:52:14.0109 4432 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 06:52:14.0125 4432 Cdaudio - ok 06:52:14.0171 4432 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 06:52:14.0171 4432 Cdfs - ok 06:52:14.0218 4432 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 06:52:14.0218 4432 Cdrom - ok 06:52:14.0250 4432 Changer - ok 06:52:14.0328 4432 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys 06:52:14.0328 4432 CmBatt - ok 06:52:14.0359 4432 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys 06:52:14.0359 4432 CmdIde - ok 06:52:14.0390 4432 cnqkkocc - ok 06:52:14.0437 4432 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys 06:52:14.0437 4432 Compbatt - ok 06:52:14.0515 4432 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys 06:52:14.0515 4432 Cpqarray - ok 06:52:14.0578 4432 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys 06:52:14.0593 4432 dac2w2k - ok 06:52:14.0718 4432 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys 06:52:14.0718 4432 dac960nt - ok 06:52:14.0828 4432 DellBIOS (637cf50b06bc53deae846b252d56bbdc) C:\WINDOWS\DellBIOS.Sys 06:52:14.0828 4432 DellBIOS - ok 06:52:14.0984 4432 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\DISK.SYS 06:52:14.0984 4432 Disk - ok 06:52:15.0109 4432 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 06:52:15.0125 4432 dmboot - ok 06:52:15.0218 4432 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 06:52:15.0218 4432 dmio - ok 06:52:15.0265 4432 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 06:52:15.0265 4432 dmload - ok 06:52:15.0328 4432 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 06:52:15.0328 4432 DMusic - ok 06:52:15.0375 4432 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys 06:52:15.0390 4432 dpti2o - ok 06:52:15.0421 4432 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 06:52:15.0421 4432 drmkaud - ok 06:52:15.0531 4432 E100B (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys 06:52:15.0531 4432 E100B - ok 06:52:15.0687 4432 efbd - ok 06:52:15.0812 4432 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 06:52:15.0828 4432 Fastfat - ok 06:52:15.0890 4432 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 06:52:15.0890 4432 Fdc - ok 06:52:15.0921 4432 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 06:52:15.0937 4432 Fips - ok 06:52:15.0968 4432 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 06:52:15.0968 4432 Flpydisk - ok 06:52:16.0015 4432 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 06:52:16.0031 4432 FltMgr - ok 06:52:16.0093 4432 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 06:52:16.0093 4432 Fs_Rec - ok 06:52:16.0125 4432 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 06:52:16.0125 4432 Ftdisk - ok 06:52:16.0171 4432 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 06:52:16.0171 4432 Gpc - ok 06:52:16.0234 4432 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 06:52:16.0234 4432 HDAudBus - ok 06:52:16.0343 4432 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys 06:52:16.0343 4432 hpn - ok 06:52:16.0468 4432 HSFHWAZL (1c8caa80e91fb71864e9426f9eed048d) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys 06:52:16.0484 4432 HSFHWAZL - ok 06:52:16.0578 4432 HSF_DPV (698204d9c2832e53633e53a30a53fc3d) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys 06:52:16.0593 4432 HSF_DPV - ok 06:52:16.0703 4432 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 06:52:16.0718 4432 HTTP - ok 06:52:16.0796 4432 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys 06:52:16.0796 4432 i2omgmt - ok 06:52:16.0875 4432 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys 06:52:16.0875 4432 i2omp - ok 06:52:16.0921 4432 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 06:52:16.0921 4432 i8042prt - ok 06:52:17.0109 4432 ialm (5a8e05f1d5c36abd58cffa111eb325ea) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys 06:52:17.0156 4432 ialm - ok 06:52:17.0218 4432 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 06:52:17.0218 4432 Imapi - ok 06:52:17.0312 4432 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys 06:52:17.0328 4432 ini910u - ok 06:52:17.0406 4432 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys 06:52:17.0406 4432 IntelIde - ok 06:52:17.0500 4432 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 06:52:17.0500 4432 intelppm - ok 06:52:17.0578 4432 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 06:52:17.0578 4432 Ip6Fw - ok 06:52:17.0656 4432 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 06:52:17.0656 4432 IpFilterDriver - ok 06:52:17.0718 4432 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 06:52:17.0718 4432 IpInIp - ok 06:52:17.0765 4432 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 06:52:17.0781 4432 IpNat - ok 06:52:17.0828 4432 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 06:52:17.0828 4432 IPSec - ok 06:52:17.0890 4432 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 06:52:17.0890 4432 IRENUM - ok 06:52:17.0937 4432 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 06:52:17.0937 4432 isapnp - ok 06:52:18.0015 4432 IWCA (872d090ca5c306f62d1982bce6302376) C:\WINDOWS\system32\DRIVERS\iwca.sys 06:52:18.0015 4432 IWCA - ok 06:52:18.0078 4432 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 06:52:18.0078 4432 Kbdclass - ok 06:52:18.0125 4432 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 06:52:18.0125 4432 kmixer - ok 06:52:18.0218 4432 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 06:52:18.0218 4432 KSecDD - ok 06:52:18.0296 4432 lbrtfdc - ok 06:52:18.0359 4432 LVUSBSta - ok 06:52:18.0406 4432 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys 06:52:18.0406 4432 MBAMProtector - ok 06:52:18.0531 4432 mdmxsdk (3c318b9cd391371bed62126581ee9961) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 06:52:18.0531 4432 mdmxsdk - ok 06:52:18.0609 4432 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 06:52:18.0609 4432 mnmdd - ok 06:52:18.0765 4432 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 06:52:18.0765 4432 Modem - ok 06:52:18.0843 4432 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 06:52:18.0843 4432 Mouclass - ok 06:52:18.0890 4432 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 06:52:18.0890 4432 MountMgr - ok 06:52:18.0953 4432 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\WINDOWS\system32\DRIVERS\MpFilter.sys 06:52:18.0953 4432 MpFilter - ok 06:52:19.0140 4432 MpKsl00564b84 (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl00564b84.sys 06:52:19.0140 4432 MpKsl00564b84 - ok 06:52:19.0156 4432 MpKsl0b2fe426 - ok 06:52:19.0187 4432 MpKsl188a8c91 - ok 06:52:19.0203 4432 MpKsl20778404 - ok 06:52:19.0234 4432 MpKsl38b595f3 - ok 06:52:19.0250 4432 MpKsl38daaf7a - ok 06:52:19.0265 4432 MpKsl399e5db0 - ok 06:52:19.0296 4432 MpKsl4630e800 - ok 06:52:19.0312 4432 MpKsl5df9e208 - ok 06:52:19.0328 4432 MpKsl5f1a4c80 - ok 06:52:19.0343 4432 MpKsl61edc714 - ok 06:52:19.0359 4432 MpKsl709631e1 - ok 06:52:19.0359 4432 MpKsl710f2a17 - ok 06:52:19.0375 4432 MpKsl723a7154 - ok 06:52:19.0390 4432 MpKsl88778d8d - ok 06:52:19.0406 4432 MpKsl9c673aac - ok 06:52:19.0406 4432 MpKsla2f4cf59 - ok 06:52:19.0421 4432 MpKsla6eadf62 - ok 06:52:19.0437 4432 MpKsla907f1e5 - ok 06:52:19.0453 4432 MpKslb69fa993 - ok 06:52:19.0453 4432 MpKslc7d0bba0 - ok 06:52:19.0468 4432 MpKsld026eb3a - ok 06:52:19.0484 4432 MpKsld3421bb9 - ok 06:52:19.0500 4432 MpKsld6496207 - ok 06:52:19.0500 4432 MpKsle10658c6 - ok 06:52:19.0515 4432 MpKslec1a3cc2 - ok 06:52:19.0578 4432 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys 06:52:19.0578 4432 mraid35x - ok 06:52:19.0781 4432 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 06:52:19.0781 4432 MRxDAV - ok 06:52:19.0875 4432 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 06:52:19.0890 4432 MRxSmb - ok 06:52:19.0937 4432 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 06:52:19.0937 4432 Msfs - ok 06:52:19.0984 4432 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 06:52:19.0984 4432 MSKSSRV - ok 06:52:20.0015 4432 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 06:52:20.0031 4432 MSPCLOCK - ok 06:52:20.0062 4432 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 06:52:20.0062 4432 MSPQM - ok 06:52:20.0093 4432 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 06:52:20.0093 4432 mssmbios - ok 06:52:20.0125 4432 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 06:52:20.0125 4432 MSTEE - ok 06:52:20.0187 4432 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 06:52:20.0187 4432 Mup - ok 06:52:20.0265 4432 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 06:52:20.0265 4432 NABTSFEC - ok 06:52:20.0406 4432 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 06:52:20.0406 4432 NDIS - ok 06:52:20.0453 4432 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 06:52:20.0453 4432 NdisIP - ok 06:52:20.0531 4432 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 06:52:20.0531 4432 NdisTapi - ok 06:52:20.0578 4432 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 06:52:20.0578 4432 Ndisuio - ok 06:52:20.0656 4432 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 06:52:20.0671 4432 NdisWan - ok 06:52:20.0734 4432 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 06:52:20.0734 4432 NDProxy - ok 06:52:20.0796 4432 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 06:52:20.0796 4432 NetBIOS - ok 06:52:20.0859 4432 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 06:52:20.0859 4432 NetBT - ok 06:52:20.0968 4432 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 06:52:20.0968 4432 Npfs - ok 06:52:21.0031 4432 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 06:52:21.0046 4432 Ntfs - ok 06:52:21.0234 4432 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 06:52:21.0234 4432 Null - ok 06:52:21.0421 4432 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 06:52:21.0484 4432 nv - ok 06:52:21.0546 4432 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 06:52:21.0562 4432 NwlnkFlt - ok 06:52:21.0656 4432 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 06:52:21.0671 4432 NwlnkFwd - ok 06:52:21.0781 4432 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 06:52:21.0781 4432 Parport - ok 06:52:21.0890 4432 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 06:52:21.0890 4432 PartMgr - ok 06:52:21.0921 4432 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 06:52:21.0937 4432 ParVdm - ok 06:52:21.0984 4432 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 06:52:21.0984 4432 PCI - ok 06:52:22.0015 4432 PCIDump - ok 06:52:22.0062 4432 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 06:52:22.0062 4432 PCIIde - ok 06:52:22.0125 4432 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 06:52:22.0125 4432 Pcmcia - ok 06:52:22.0203 4432 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\pcouffin.sys 06:52:22.0203 4432 pcouffin - ok 06:52:22.0234 4432 PDCOMP - ok 06:52:22.0265 4432 PDFRAME - ok 06:52:22.0296 4432 PDRELI - ok 06:52:22.0328 4432 PDRFRAME - ok 06:52:22.0359 4432 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys 06:52:22.0375 4432 perc2 - ok 06:52:22.0406 4432 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys 06:52:22.0406 4432 perc2hib - ok 06:52:22.0531 4432 PID_08A0 (9070ed08873a70da3b1ba0b281363a79) C:\WINDOWS\system32\DRIVERS\LV302AV.SYS 06:52:22.0531 4432 PID_08A0 - ok 06:52:22.0671 4432 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 06:52:22.0671 4432 PptpMiniport - ok 06:52:22.0765 4432 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 06:52:22.0765 4432 PSched - ok 06:52:22.0859 4432 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 06:52:22.0875 4432 Ptilink - ok 06:52:22.0953 4432 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys 06:52:22.0953 4432 PxHelp20 - ok 06:52:23.0015 4432 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys 06:52:23.0015 4432 ql1080 - ok 06:52:23.0078 4432 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys 06:52:23.0078 4432 Ql10wnt - ok 06:52:23.0125 4432 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys 06:52:23.0125 4432 ql12160 - ok 06:52:23.0171 4432 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys 06:52:23.0187 4432 ql1240 - ok 06:52:23.0218 4432 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys 06:52:23.0234 4432 ql1280 - ok 06:52:23.0281 4432 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 06:52:23.0281 4432 RasAcd - ok 06:52:23.0328 4432 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 06:52:23.0328 4432 Rasl2tp - ok 06:52:23.0406 4432 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 06:52:23.0406 4432 RasPppoe - ok 06:52:23.0437 4432 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 06:52:23.0437 4432 Raspti - ok 06:52:23.0484 4432 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 06:52:23.0484 4432 Rdbss - ok 06:52:23.0531 4432 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 06:52:23.0531 4432 RDPCDD - ok 06:52:23.0671 4432 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 06:52:23.0671 4432 rdpdr - ok 06:52:23.0828 4432 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 06:52:23.0828 4432 RDPWD - ok 06:52:23.0906 4432 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 06:52:23.0906 4432 redbook - ok 06:52:23.0953 4432 RimUsb - ok 06:52:24.0031 4432 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\WINDOWS\system32\DRIVERS\RimSerial.sys 06:52:24.0031 4432 RimVSerPort - ok 06:52:24.0078 4432 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys 06:52:24.0078 4432 ROOTMODEM - ok 06:52:24.0187 4432 s24trans (81aa6f0d6a2be1c550f814b036215888) C:\WINDOWS\system32\DRIVERS\s24trans.sys 06:52:24.0203 4432 s24trans - ok 06:52:24.0343 4432 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS 06:52:24.0343 4432 SASDIFSV - ok 06:52:24.0406 4432 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS 06:52:24.0406 4432 SASKUTIL - ok 06:52:24.0531 4432 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 06:52:24.0531 4432 Secdrv - ok 06:52:24.0656 4432 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 06:52:24.0656 4432 serenum - ok 06:52:24.0843 4432 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 06:52:24.0843 4432 Serial - ok 06:52:24.0921 4432 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 06:52:24.0921 4432 Sfloppy - ok 06:52:24.0968 4432 Simbad - ok 06:52:25.0031 4432 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys 06:52:25.0031 4432 sisagp - ok 06:52:25.0078 4432 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 06:52:25.0093 4432 SLIP - ok 06:52:25.0187 4432 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys 06:52:25.0187 4432 Sparrow - ok 06:52:25.0234 4432 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 06:52:25.0234 4432 splitter - ok 06:52:25.0296 4432 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 06:52:25.0296 4432 sr - ok 06:52:25.0390 4432 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 06:52:25.0406 4432 Srv - ok 06:52:25.0562 4432 STHDA (3ad78e22210d3fbd9f76de84a8df19b5) C:\WINDOWS\system32\drivers\sthda.sys 06:52:25.0609 4432 STHDA - ok 06:52:25.0781 4432 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 06:52:25.0781 4432 streamip - ok 06:52:25.0828 4432 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 06:52:25.0828 4432 swenum - ok 06:52:25.0875 4432 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 06:52:25.0875 4432 swmidi - ok 06:52:25.0968 4432 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys 06:52:25.0968 4432 symc810 - ok 06:52:26.0031 4432 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys 06:52:26.0031 4432 symc8xx - ok 06:52:26.0078 4432 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys 06:52:26.0093 4432 sym_hi - ok 06:52:26.0156 4432 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys 06:52:26.0156 4432 sym_u3 - ok 06:52:26.0250 4432 SynTP (fa2daa32bed908023272a0f77d625dae) C:\WINDOWS\system32\DRIVERS\SynTP.sys 06:52:26.0250 4432 SynTP - ok 06:52:26.0281 4432 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 06:52:26.0296 4432 sysaudio - ok 06:52:26.0421 4432 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 06:52:26.0437 4432 Tcpip - ok 06:52:26.0546 4432 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 06:52:26.0546 4432 TDPIPE - ok 06:52:26.0625 4432 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 06:52:26.0640 4432 TDTCP - ok 06:52:26.0703 4432 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 06:52:26.0718 4432 TermDD - ok 06:52:26.0828 4432 tmcomm (ad866d83b4f0391aecceb4e507011831) C:\WINDOWS\system32\drivers\tmcomm.sys 06:52:26.0828 4432 tmcomm - ok 06:52:26.0906 4432 tmrkb (7e2887341a3164dedc9b89082c24aeca) C:\WINDOWS\system32\drivers\tmrkb.sys 06:52:26.0906 4432 tmrkb - ok 06:52:26.0968 4432 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys 06:52:26.0968 4432 TosIde - ok 06:52:27.0046 4432 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 06:52:27.0046 4432 Udfs - ok 06:52:27.0093 4432 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys 06:52:27.0093 4432 ultra - ok 06:52:27.0171 4432 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 06:52:27.0171 4432 Update - ok 06:52:27.0312 4432 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 06:52:27.0328 4432 usbccgp - ok 06:52:27.0359 4432 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 06:52:27.0359 4432 usbehci - ok 06:52:27.0437 4432 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 06:52:27.0437 4432 usbhub - ok 06:52:27.0515 4432 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 06:52:27.0531 4432 usbprint - ok 06:52:27.0578 4432 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 06:52:27.0578 4432 USBSTOR - ok 06:52:27.0656 4432 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 06:52:27.0656 4432 usbuhci - ok 06:52:27.0718 4432 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 06:52:27.0718 4432 VgaSave - ok 06:52:27.0750 4432 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys 06:52:27.0765 4432 viaagp - ok 06:52:27.0796 4432 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys 06:52:27.0812 4432 ViaIde - ok 06:52:27.0859 4432 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 06:52:27.0859 4432 VolSnap - ok 06:52:28.0140 4432 w29n51 (f0f902220910c4fbe42a51964bd33599) C:\WINDOWS\system32\DRIVERS\w29n51.sys 06:52:28.0203 4432 w29n51 - ok 06:52:28.0421 4432 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 06:52:28.0421 4432 Wanarp - ok 06:52:28.0500 4432 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\WINDOWS\system32\DRIVERS\wanatw4.sys 06:52:28.0500 4432 wanatw - ok 06:52:28.0531 4432 WDICA - ok 06:52:28.0562 4432 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 06:52:28.0562 4432 wdmaud - ok 06:52:28.0703 4432 winachsf (74cf3f2e4e40c4a2e18d39d6300a5c24) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 06:52:28.0718 4432 winachsf - ok 06:52:28.0843 4432 WpdUsb (1385e5aa9c9821790d33a9563b8d2dd0) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 06:52:28.0843 4432 WpdUsb - ok 06:52:28.0875 4432 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 06:52:28.0875 4432 WS2IFSL - ok 06:52:29.0046 4432 WsAudio_DeviceS(1) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys 06:52:29.0046 4432 WsAudio_DeviceS(1) - ok 06:52:29.0109 4432 WsAudio_DeviceS(2) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys 06:52:29.0109 4432 WsAudio_DeviceS(2) - ok 06:52:29.0171 4432 WsAudio_DeviceS(3) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys 06:52:29.0171 4432 WsAudio_DeviceS(3) - ok 06:52:29.0218 4432 WsAudio_DeviceS(4) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys 06:52:29.0218 4432 WsAudio_DeviceS(4) - ok 06:52:29.0265 4432 WsAudio_DeviceS(5) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys 06:52:29.0265 4432 WsAudio_DeviceS(5) - ok 06:52:29.0343 4432 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 06:52:29.0343 4432 WSTCODEC - ok 06:52:29.0421 4432 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 06:52:29.0421 4432 WudfPf - ok 06:52:29.0468 4432 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 06:52:29.0484 4432 WudfRd - ok 06:52:29.0593 4432 MBR (0x1B8) (91722e6bc3a2b40ff00222dca4a3db3e) \Device\Harddisk0\DR0 06:52:29.0609 4432 \Device\Harddisk0\DR0 - ok 06:52:29.0703 4432 Boot (0x1200) (2c1a31df5fb57b9e0584c0fdf6546368) \Device\Harddisk0\DR0\Partition0 06:52:29.0703 4432 \Device\Harddisk0\DR0\Partition0 - ok 06:52:29.0718 4432 ============================================================ 06:52:29.0718 4432 Scan finished 06:52:29.0718 4432 ============================================================ 06:52:29.0750 0272 Detected object count: 0 06:52:29.0750 0272 Actual detected object count: 0 06:52:39.0281 5812 ============================================================ 06:52:39.0281 5812 Scan started 06:52:39.0281 5812 Mode: Manual; TDLFS; 06:52:39.0281 5812 ============================================================ 06:52:39.0968 5812 Abiosdsk - ok 06:52:40.0046 5812 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS 06:52:40.0046 5812 abp480n5 - ok 06:52:40.0125 5812 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 06:52:40.0125 5812 ACPI - ok 06:52:40.0171 5812 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 06:52:40.0171 5812 ACPIEC - ok 06:52:40.0218 5812 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys 06:52:40.0218 5812 adpu160m - ok 06:52:40.0250 5812 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 06:52:40.0250 5812 aec - ok 06:52:40.0343 5812 AegisP (076394a345ee5e9e3911fc0f058f4f38) C:\WINDOWS\system32\DRIVERS\AegisP.sys 06:52:40.0343 5812 AegisP - ok 06:52:40.0421 5812 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys 06:52:40.0421 5812 AFD - ok 06:52:40.0468 5812 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys 06:52:40.0468 5812 agp440 - ok 06:52:40.0515 5812 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys 06:52:40.0515 5812 agpCPQ - ok 06:52:40.0562 5812 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys 06:52:40.0562 5812 Aha154x - ok 06:52:40.0765 5812 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys 06:52:40.0765 5812 aic78u2 - ok 06:52:40.0812 5812 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys 06:52:40.0812 5812 aic78xx - ok 06:52:40.0859 5812 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys 06:52:40.0875 5812 AliIde - ok 06:52:40.0953 5812 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys 06:52:40.0953 5812 alim1541 - ok 06:52:41.0000 5812 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys 06:52:41.0000 5812 amdagp - ok 06:52:41.0031 5812 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys 06:52:41.0046 5812 amsint - ok 06:52:41.0093 5812 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys 06:52:41.0093 5812 asc - ok 06:52:41.0156 5812 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys 06:52:41.0156 5812 asc3350p - ok 06:52:41.0203 5812 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys 06:52:41.0203 5812 asc3550 - ok 06:52:41.0312 5812 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 06:52:41.0312 5812 AsyncMac - ok 06:52:41.0359 5812 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 06:52:41.0359 5812 atapi - ok 06:52:41.0390 5812 Atdisk - ok 06:52:41.0437 5812 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 06:52:41.0437 5812 Atmarpc - ok 06:52:41.0500 5812 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 06:52:41.0500 5812 audstub - ok 06:52:41.0609 5812 bcm4sbxp (c768c8a463d32c219ce291645a0621a4) C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys 06:52:41.0609 5812 bcm4sbxp - ok 06:52:41.0703 5812 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 06:52:41.0703 5812 Beep - ok 06:52:41.0781 5812 bvrp_pci (647c1626114e789c5b8ab8e9c33c04bc) C:\WINDOWS\system32\drivers\bvrp_pci.sys 06:52:41.0781 5812 bvrp_pci - ok 06:52:41.0984 5812 catchme - ok 06:52:42.0015 5812 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys 06:52:42.0015 5812 cbidf - ok 06:52:42.0046 5812 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 06:52:42.0046 5812 cbidf2k - ok 06:52:42.0140 5812 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 06:52:42.0140 5812 CCDECODE - ok 06:52:42.0218 5812 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys 06:52:42.0218 5812 cd20xrnt - ok 06:52:42.0296 5812 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 06:52:42.0296 5812 Cdaudio - ok 06:52:42.0359 5812 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 06:52:42.0359 5812 Cdfs - ok 06:52:42.0390 5812 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 06:52:42.0406 5812 Cdrom - ok 06:52:42.0437 5812 Changer - ok 06:52:42.0500 5812 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys 06:52:42.0500 5812 CmBatt - ok 06:52:42.0546 5812 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys 06:52:42.0546 5812 CmdIde - ok 06:52:42.0562 5812 cnqkkocc - ok 06:52:42.0625 5812 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys 06:52:42.0625 5812 Compbatt - ok 06:52:42.0687 5812 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys 06:52:42.0703 5812 Cpqarray - ok 06:52:42.0750 5812 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys 06:52:42.0765 5812 dac2w2k - ok 06:52:42.0812 5812 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys 06:52:42.0812 5812 dac960nt - ok 06:52:42.0859 5812 DellBIOS (637cf50b06bc53deae846b252d56bbdc) C:\WINDOWS\DellBIOS.Sys 06:52:42.0859 5812 DellBIOS - ok 06:52:42.0921 5812 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\DISK.SYS 06:52:42.0921 5812 Disk - ok 06:52:43.0046 5812 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 06:52:43.0062 5812 dmboot - ok 06:52:43.0234 5812 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 06:52:43.0250 5812 dmio - ok 06:52:43.0296 5812 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 06:52:43.0296 5812 dmload - ok 06:52:43.0359 5812 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 06:52:43.0359 5812 DMusic - ok 06:52:43.0437 5812 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys 06:52:43.0453 5812 dpti2o - ok 06:52:43.0484 5812 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 06:52:43.0484 5812 drmkaud - ok 06:52:43.0562 5812 E100B (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys 06:52:43.0562 5812 E100B - ok 06:52:43.0593 5812 efbd - ok 06:52:43.0687 5812 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 06:52:43.0687 5812 Fastfat - ok 06:52:43.0781 5812 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 06:52:43.0781 5812 Fdc - ok 06:52:43.0828 5812 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 06:52:43.0828 5812 Fips - ok 06:52:43.0875 5812 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 06:52:43.0875 5812 Flpydisk - ok 06:52:43.0921 5812 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 06:52:43.0921 5812 FltMgr - ok 06:52:43.0968 5812 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 06:52:43.0968 5812 Fs_Rec - ok 06:52:44.0015 5812 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 06:52:44.0015 5812 Ftdisk - ok 06:52:44.0062 5812 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 06:52:44.0062 5812 Gpc - ok 06:52:44.0218 5812 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 06:52:44.0218 5812 HDAudBus - ok 06:52:44.0328 5812 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys 06:52:44.0328 5812 hpn - ok 06:52:44.0421 5812 HSFHWAZL (1c8caa80e91fb71864e9426f9eed048d) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys 06:52:44.0421 5812 HSFHWAZL - ok 06:52:44.0515 5812 HSF_DPV (698204d9c2832e53633e53a30a53fc3d) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys 06:52:44.0531 5812 HSF_DPV - ok 06:52:44.0656 5812 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 06:52:44.0656 5812 HTTP - ok 06:52:44.0875 5812 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys 06:52:44.0875 5812 i2omgmt - ok 06:52:44.0906 5812 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys 06:52:44.0921 5812 i2omp - ok 06:52:44.0953 5812 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 06:52:44.0968 5812 i8042prt - ok 06:52:45.0109 5812 ialm (5a8e05f1d5c36abd58cffa111eb325ea) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys 06:52:45.0140 5812 ialm - ok 06:52:45.0218 5812 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 06:52:45.0218 5812 Imapi - ok 06:52:45.0328 5812 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys 06:52:45.0328 5812 ini910u - ok 06:52:45.0484 5812 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys 06:52:45.0500 5812 IntelIde - ok 06:52:45.0562 5812 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 06:52:45.0562 5812 intelppm - ok 06:52:45.0656 5812 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 06:52:45.0656 5812 Ip6Fw - ok 06:52:45.0703 5812 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 06:52:45.0703 5812 IpFilterDriver - ok 06:52:45.0750 5812 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 06:52:45.0750 5812 IpInIp - ok 06:52:45.0796 5812 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 06:52:45.0796 5812 IpNat - ok 06:52:45.0859 5812 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 06:52:45.0859 5812 IPSec - ok 06:52:45.0921 5812 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 06:52:45.0921 5812 IRENUM - ok 06:52:45.0968 5812 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 06:52:45.0968 5812 isapnp - ok 06:52:46.0046 5812 IWCA (872d090ca5c306f62d1982bce6302376) C:\WINDOWS\system32\DRIVERS\iwca.sys 06:52:46.0062 5812 IWCA - ok 06:52:46.0109 5812 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 06:52:46.0109 5812 Kbdclass - ok 06:52:46.0203 5812 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 06:52:46.0203 5812 kmixer - ok 06:52:46.0281 5812 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 06:52:46.0281 5812 KSecDD - ok 06:52:46.0437 5812 lbrtfdc - ok 06:52:46.0484 5812 LVUSBSta - ok 06:52:46.0531 5812 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys 06:52:46.0531 5812 MBAMProtector - ok 06:52:46.0578 5812 mdmxsdk (3c318b9cd391371bed62126581ee9961) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 06:52:46.0578 5812 mdmxsdk - ok 06:52:46.0640 5812 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 06:52:46.0640 5812 mnmdd - ok 06:52:46.0718 5812 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 06:52:46.0718 5812 Modem - ok 06:52:46.0750 5812 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 06:52:46.0750 5812 Mouclass - ok 06:52:46.0781 5812 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 06:52:46.0781 5812 MountMgr - ok 06:52:46.0843 5812 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\WINDOWS\system32\DRIVERS\MpFilter.sys 06:52:46.0843 5812 MpFilter - ok 06:52:47.0015 5812 MpKsl00564b84 (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl00564b84.sys 06:52:47.0031 5812 MpKsl00564b84 - ok 06:52:47.0046 5812 MpKsl0b2fe426 - ok 06:52:47.0062 5812 MpKsl188a8c91 - ok 06:52:47.0093 5812 MpKsl20778404 - ok 06:52:47.0109 5812 MpKsl38b595f3 - ok 06:52:47.0125 5812 MpKsl38daaf7a - ok 06:52:47.0140 5812 MpKsl399e5db0 - ok 06:52:47.0156 5812 MpKsl4630e800 - ok 06:52:47.0171 5812 MpKsl5df9e208 - ok 06:52:47.0203 5812 MpKsl5f1a4c80 - ok 06:52:47.0218 5812 MpKsl61edc714 - ok 06:52:47.0234 5812 MpKsl709631e1 - ok 06:52:47.0250 5812 MpKsl710f2a17 - ok 06:52:47.0265 5812 MpKsl723a7154 - ok 06:52:47.0281 5812 MpKsl88778d8d - ok 06:52:47.0296 5812 MpKsl9c673aac - ok 06:52:47.0328 5812 MpKsla2f4cf59 - ok 06:52:47.0343 5812 MpKsla6eadf62 - ok 06:52:47.0359 5812 MpKsla907f1e5 - ok 06:52:47.0375 5812 MpKslb69fa993 - ok 06:52:47.0390 5812 MpKslc7d0bba0 - ok 06:52:47.0406 5812 MpKsld026eb3a - ok 06:52:47.0421 5812 MpKsld3421bb9 - ok 06:52:47.0437 5812 MpKsld6496207 - ok 06:52:47.0453 5812 MpKsle10658c6 - ok 06:52:47.0468 5812 MpKslec1a3cc2 - ok 06:52:47.0515 5812 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys 06:52:47.0531 5812 mraid35x - ok 06:52:47.0718 5812 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 06:52:47.0718 5812 MRxDAV - ok 06:52:47.0812 5812 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 06:52:47.0812 5812 MRxSmb - ok 06:52:47.0859 5812 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 06:52:47.0859 5812 Msfs - ok 06:52:47.0906 5812 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 06:52:47.0906 5812 MSKSSRV - ok 06:52:47.0937 5812 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 06:52:47.0937 5812 MSPCLOCK - ok 06:52:47.0984 5812 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 06:52:47.0984 5812 MSPQM - ok 06:52:48.0031 5812 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 06:52:48.0031 5812 mssmbios - ok 06:52:48.0062 5812 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 06:52:48.0078 5812 MSTEE - ok 06:52:48.0125 5812 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 06:52:48.0125 5812 Mup - ok 06:52:48.0171 5812 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 06:52:48.0171 5812 NABTSFEC - ok 06:52:48.0218 5812 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 06:52:48.0218 5812 NDIS - ok 06:52:48.0265 5812 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 06:52:48.0265 5812 NdisIP - ok 06:52:48.0453 5812 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 06:52:48.0453 5812 NdisTapi - ok 06:52:48.0515 5812 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 06:52:48.0531 5812 Ndisuio - ok 06:52:48.0578 5812 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 06:52:48.0578 5812 NdisWan - ok 06:52:48.0640 5812 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 06:52:48.0640 5812 NDProxy - ok 06:52:48.0703 5812 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 06:52:48.0703 5812 NetBIOS - ok 06:52:48.0750 5812 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 06:52:48.0750 5812 NetBT - ok 06:52:48.0859 5812 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 06:52:48.0875 5812 Npfs - ok 06:52:48.0937 5812 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 06:52:48.0953 5812 Ntfs - ok 06:52:49.0140 5812 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 06:52:49.0140 5812 Null - ok 06:52:49.0328 5812 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 06:52:49.0375 5812 nv - ok 06:52:49.0421 5812 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 06:52:49.0421 5812 NwlnkFlt - ok 06:52:49.0468 5812 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 06:52:49.0468 5812 NwlnkFwd - ok 06:52:49.0562 5812 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 06:52:49.0578 5812 Parport - ok 06:52:49.0609 5812 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 06:52:49.0625 5812 PartMgr - ok 06:52:49.0765 5812 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 06:52:49.0765 5812 ParVdm - ok 06:52:49.0796 5812 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 06:52:49.0812 5812 PCI - ok 06:52:49.0843 5812 PCIDump - ok 06:52:49.0906 5812 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 06:52:49.0906 5812 PCIIde - ok 06:52:49.0953 5812 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 06:52:49.0953 5812 Pcmcia - ok 06:52:50.0031 5812 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\pcouffin.sys 06:52:50.0031 5812 pcouffin - ok 06:52:50.0062 5812 PDCOMP - ok 06:52:50.0093 5812 PDFRAME - ok 06:52:50.0125 5812 PDRELI - ok 06:52:50.0156 5812 PDRFRAME - ok 06:52:50.0234 5812 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys 06:52:50.0234 5812 perc2 - ok 06:52:50.0281 5812 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys 06:52:50.0281 5812 perc2hib - ok 06:52:50.0406 5812 PID_08A0 (9070ed08873a70da3b1ba0b281363a79) C:\WINDOWS\system32\DRIVERS\LV302AV.SYS 06:52:50.0406 5812 PID_08A0 - ok 06:52:50.0484 5812 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 06:52:50.0484 5812 PptpMiniport - ok 06:52:50.0546 5812 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 06:52:50.0546 5812 PSched - ok 06:52:50.0609 5812 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 06:52:50.0609 5812 Ptilink - ok 06:52:50.0687 5812 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys 06:52:50.0687 5812 PxHelp20 - ok 06:52:50.0843 5812 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys 06:52:50.0843 5812 ql1080 - ok 06:52:50.0921 5812 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys 06:52:50.0921 5812 Ql10wnt - ok 06:52:50.0968 5812 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys 06:52:50.0968 5812 ql12160 - ok 06:52:51.0015 5812 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys 06:52:51.0015 5812 ql1240 - ok 06:52:51.0046 5812 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys 06:52:51.0062 5812 ql1280 - ok 06:52:51.0093 5812 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 06:52:51.0093 5812 RasAcd - ok 06:52:51.0156 5812 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 06:52:51.0171 5812 Rasl2tp - ok 06:52:51.0234 5812 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 06:52:51.0234 5812 RasPppoe - ok 06:52:51.0281 5812 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 06:52:51.0281 5812 Raspti - ok 06:52:51.0328 5812 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 06:52:51.0343 5812 Rdbss - ok 06:52:51.0484 5812 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 06:52:51.0484 5812 RDPCDD - ok 06:52:51.0781 5812 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 06:52:51.0796 5812 rdpdr - ok 06:52:51.0875 5812 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 06:52:51.0890 5812 RDPWD - ok 06:52:52.0031 5812 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 06:52:52.0031 5812 redbook - ok 06:52:52.0093 5812 RimUsb - ok 06:52:52.0171 5812 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\WINDOWS\system32\DRIVERS\RimSerial.sys 06:52:52.0171 5812 RimVSerPort - ok 06:52:52.0234 5812 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys 06:52:52.0234 5812 ROOTMODEM - ok 06:52:52.0343 5812 s24trans (81aa6f0d6a2be1c550f814b036215888) C:\WINDOWS\system32\DRIVERS\s24trans.sys 06:52:52.0343 5812 s24trans - ok 06:52:52.0500 5812 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS 06:52:52.0500 5812 SASDIFSV - ok 06:52:52.0562 5812 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS 06:52:52.0562 5812 SASKUTIL - ok 06:52:52.0687 5812 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 06:52:52.0687 5812 Secdrv - ok 06:52:52.0781 5812 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 06:52:52.0796 5812 serenum - ok 06:52:52.0921 5812 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 06:52:52.0937 5812 Serial - ok 06:52:53.0015 5812 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 06:52:53.0015 5812 Sfloppy - ok 06:52:53.0062 5812 Simbad - ok 06:52:53.0109 5812 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys 06:52:53.0109 5812 sisagp - ok 06:52:53.0171 5812 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 06:52:53.0171 5812 SLIP - ok 06:52:53.0218 5812 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys 06:52:53.0218 5812 Sparrow - ok 06:52:53.0281 5812 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 06:52:53.0281 5812 splitter - ok 06:52:53.0343 5812 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 06:52:53.0343 5812 sr - ok 06:52:53.0453 5812 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 06:52:53.0453 5812 Srv - ok 06:52:53.0609 5812 STHDA (3ad78e22210d3fbd9f76de84a8df19b5) C:\WINDOWS\system32\drivers\sthda.sys 06:52:53.0640 5812 STHDA - ok 06:52:53.0859 5812 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 06:52:53.0859 5812 streamip - ok 06:52:53.0906 5812 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 06:52:53.0906 5812 swenum - ok 06:52:53.0953 5812 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 06:52:53.0953 5812 swmidi - ok 06:52:54.0046 5812 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys 06:52:54.0046 5812 symc810 - ok 06:52:54.0093 5812 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys 06:52:54.0093 5812 symc8xx - ok 06:52:54.0140 5812 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys 06:52:54.0140 5812 sym_hi - ok 06:52:54.0187 5812 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys 06:52:54.0187 5812 sym_u3 - ok 06:52:54.0296 5812 SynTP (fa2daa32bed908023272a0f77d625dae) C:\WINDOWS\system32\DRIVERS\SynTP.sys 06:52:54.0296 5812 SynTP - ok 06:52:54.0343 5812 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 06:52:54.0343 5812 sysaudio - ok 06:52:54.0468 5812 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 06:52:54.0468 5812 Tcpip - ok 06:52:54.0515 5812 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 06:52:54.0515 5812 TDPIPE - ok 06:52:54.0718 5812 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 06:52:54.0734 5812 TDTCP - ok 06:52:54.0781 5812 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 06:52:54.0781 5812 TermDD - ok 06:52:54.0890 5812 tmcomm (ad866d83b4f0391aecceb4e507011831) C:\WINDOWS\system32\drivers\tmcomm.sys 06:52:54.0906 5812 tmcomm - ok 06:52:54.0953 5812 tmrkb (7e2887341a3164dedc9b89082c24aeca) C:\WINDOWS\system32\drivers\tmrkb.sys 06:52:54.0953 5812 tmrkb - ok 06:52:55.0015 5812 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys 06:52:55.0015 5812 TosIde - ok 06:52:55.0109 5812 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 06:52:55.0109 5812 Udfs - ok 06:52:55.0156 5812 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys 06:52:55.0156 5812 ultra - ok 06:52:55.0265 5812 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 06:52:55.0281 5812 Update - ok 06:52:55.0375 5812 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 06:52:55.0375 5812 usbccgp - ok 06:52:55.0515 5812 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 06:52:55.0515 5812 usbehci - ok 06:52:55.0593 5812 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 06:52:55.0593 5812 usbhub - ok 06:52:55.0687 5812 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 06:52:55.0687 5812 usbprint - ok 06:52:55.0734 5812 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 06:52:55.0734 5812 USBSTOR - ok 06:52:55.0796 5812 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 06:52:55.0796 5812 usbuhci - ok 06:52:55.0828 5812 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 06:52:55.0828 5812 VgaSave - ok 06:52:55.0875 5812 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys 06:52:55.0875 5812 viaagp - ok 06:52:55.0937 5812 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys 06:52:55.0937 5812 ViaIde - ok 06:52:55.0984 5812 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 06:52:55.0984 5812 VolSnap - ok 06:52:56.0250 5812 w29n51 (f0f902220910c4fbe42a51964bd33599) C:\WINDOWS\system32\DRIVERS\w29n51.sys 06:52:56.0312 5812 w29n51 - ok 06:52:56.0531 5812 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 06:52:56.0531 5812 Wanarp - ok 06:52:56.0609 5812 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\WINDOWS\system32\DRIVERS\wanatw4.sys 06:52:56.0609 5812 wanatw - ok 06:52:56.0640 5812 WDICA - ok 06:52:56.0687 5812 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 06:52:56.0687 5812 wdmaud - ok 06:52:56.0796 5812 winachsf (74cf3f2e4e40c4a2e18d39d6300a5c24) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 06:52:56.0796 5812 winachsf - ok 06:52:56.0921 5812 WpdUsb (1385e5aa9c9821790d33a9563b8d2dd0) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 06:52:56.0921 5812 WpdUsb - ok 06:52:56.0984 5812 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 06:52:56.0984 5812 WS2IFSL - ok 06:52:57.0031 5812 WsAudio_DeviceS(1) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys 06:52:57.0031 5812 WsAudio_DeviceS(1) - ok 06:52:57.0156 5812 WsAudio_DeviceS(2) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys 06:52:57.0156 5812 WsAudio_DeviceS(2) - ok 06:52:57.0218 5812 WsAudio_DeviceS(3) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys 06:52:57.0218 5812 WsAudio_DeviceS(3) - ok 06:52:57.0265 5812 WsAudio_DeviceS(4) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys 06:52:57.0265 5812 WsAudio_DeviceS(4) - ok 06:52:57.0328 5812 WsAudio_DeviceS(5) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys 06:52:57.0328 5812 WsAudio_DeviceS(5) - ok 06:52:57.0390 5812 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 06:52:57.0390 5812 WSTCODEC - ok 06:52:57.0468 5812 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 06:52:57.0484 5812 WudfPf - ok 06:52:57.0531 5812 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 06:52:57.0546 5812 WudfRd - ok 06:52:57.0656 5812 MBR (0x1B8) (91722e6bc3a2b40ff00222dca4a3db3e) \Device\Harddisk0\DR0 06:52:57.0718 5812 \Device\Harddisk0\DR0 ( TDSS File System ) - warning 06:52:57.0718 5812 \Device\Harddisk0\DR0 - detected TDSS File System (1) 06:52:57.0765 5812 Boot (0x1200) (2c1a31df5fb57b9e0584c0fdf6546368) \Device\Harddisk0\DR0\Partition0 06:52:57.0765 5812 \Device\Harddisk0\DR0\Partition0 - ok 06:52:57.0781 5812 ============================================================ 06:52:57.0781 5812 Scan finished 06:52:57.0781 5812 ============================================================ 06:52:57.0812 4356 Detected object count: 1 06:52:57.0812 4356 Actual detected object count: 1 06:53:24.0937 4356 \Device\Harddisk0\DR0\TDLFS - deleted 06:53:24.0937 4356 \Device\Harddisk0\DR0 ( TDSS File System ) - User select action: Delete 06:53:44.0718 4564 Deinitialize success —————————————————————————————— Here is the log after I restarted my computer and ran TDSSKiller after deleting the file: 06:53:50.0984 4384 TDSS rootkit removing tool [removed] Oct 21 2011 11:23:48 06:53:51.0421 4384 ============================================================ 06:53:51.0421 4384 Current date / time: 2011/10/22 06:53:51.0421 06:53:51.0421 4384 SystemInfo: 06:53:51.0421 4384 06:53:51.0421 4384 OS Version: 5.1.2600 ServicePack: 3.0 06:53:51.0421 4384 Product type: Workstation 06:53:51.0421 4384 ComputerName: JENNIFER 06:53:51.0421 4384 UserName: Jennifer Law 06:53:51.0421 4384 Windows directory: C:\WINDOWS 06:53:51.0421 4384 System windows directory: C:\WINDOWS 06:53:51.0421 4384 Processor architecture: Intel x86 06:53:51.0421 4384 Number of processors: 1 06:53:51.0421 4384 Page size: 0x1000 06:53:51.0421 4384 Boot type: Normal boot 06:53:51.0421 4384 ============================================================ 06:53:54.0312 4384 Initialize success 06:53:57.0562 4412 ============================================================ 06:53:57.0562 4412 Scan started 06:53:57.0562 4412 Mode: Manual; 06:53:57.0562 4412 ============================================================ 06:53:59.0140 4412 Abiosdsk - ok 06:53:59.0359 4412 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS 06:53:59.0359 4412 abp480n5 - ok 06:53:59.0437 4412 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 06:53:59.0437 4412 ACPI - ok 06:53:59.0500 4412 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 06:53:59.0500 4412 ACPIEC - ok 06:53:59.0562 4412 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys 06:53:59.0562 4412 adpu160m - ok 06:53:59.0625 4412 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 06:53:59.0625 4412 aec - ok 06:53:59.0703 4412 AegisP (076394a345ee5e9e3911fc0f058f4f38) C:\WINDOWS\system32\DRIVERS\AegisP.sys 06:53:59.0703 4412 AegisP - ok 06:53:59.0859 4412 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys 06:53:59.0859 4412 AFD - ok 06:53:59.0906 4412 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys 06:53:59.0906 4412 agp440 - ok 06:53:59.0984 4412 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys 06:53:59.0984 4412 agpCPQ - ok 06:54:00.0031 4412 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys 06:54:00.0031 4412 Aha154x - ok 06:54:00.0062 4412 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys 06:54:00.0062 4412 aic78u2 - ok 06:54:00.0140 4412 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys 06:54:00.0140 4412 aic78xx - ok 06:54:00.0187 4412 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys 06:54:00.0187 4412 AliIde - ok 06:54:00.0265 4412 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys 06:54:00.0265 4412 alim1541 - ok 06:54:00.0312 4412 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys 06:54:00.0312 4412 amdagp - ok 06:54:00.0343 4412 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys 06:54:00.0343 4412 amsint - ok 06:54:00.0406 4412 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys 06:54:00.0406 4412 asc - ok 06:54:00.0453 4412 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys 06:54:00.0453 4412 asc3350p - ok 06:54:00.0500 4412 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys 06:54:00.0500 4412 asc3550 - ok 06:54:00.0625 4412 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 06:54:00.0625 4412 AsyncMac - ok 06:54:00.0718 4412 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 06:54:00.0734 4412 atapi - ok 06:54:00.0765 4412 Atdisk - ok 06:54:00.0796 4412 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 06:54:00.0796 4412 Atmarpc - ok 06:54:00.0843 4412 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 06:54:00.0843 4412 audstub - ok 06:54:00.0890 4412 bcm4sbxp (c768c8a463d32c219ce291645a0621a4) C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys 06:54:00.0890 4412 bcm4sbxp - ok 06:54:00.0921 4412 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 06:54:00.0921 4412 Beep - ok 06:54:01.0015 4412 bvrp_pci (647c1626114e789c5b8ab8e9c33c04bc) C:\WINDOWS\system32\drivers\bvrp_pci.sys 06:54:01.0015 4412 bvrp_pci - ok 06:54:01.0187 4412 catchme - ok 06:54:01.0671 4412 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys 06:54:01.0687 4412 cbidf - ok 06:54:01.0718 4412 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 06:54:01.0734 4412 cbidf2k - ok 06:54:01.0796 4412 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys 06:54:01.0796 4412 CCDECODE - ok 06:54:01.0843 4412 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys 06:54:01.0843 4412 cd20xrnt - ok 06:54:01.0984 4412 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 06:54:01.0984 4412 Cdaudio - ok 06:54:02.0015 4412 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 06:54:02.0015 4412 Cdfs - ok 06:54:02.0046 4412 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 06:54:02.0046 4412 Cdrom - ok 06:54:02.0078 4412 Changer - ok 06:54:02.0109 4412 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys 06:54:02.0109 4412 CmBatt - ok 06:54:02.0125 4412 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys 06:54:02.0125 4412 CmdIde - ok 06:54:02.0140 4412 cnqkkocc - ok 06:54:02.0187 4412 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys 06:54:02.0187 4412 Compbatt - ok 06:54:02.0234 4412 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys 06:54:02.0234 4412 Cpqarray - ok 06:54:02.0281 4412 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys 06:54:02.0281 4412 dac2w2k - ok 06:54:02.0312 4412 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys 06:54:02.0312 4412 dac960nt - ok 06:54:02.0343 4412 DellBIOS (637cf50b06bc53deae846b252d56bbdc) C:\WINDOWS\DellBIOS.Sys 06:54:02.0343 4412 DellBIOS - ok 06:54:02.0390 4412 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\DISK.SYS 06:54:02.0390 4412 Disk - ok 06:54:02.0484 4412 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 06:54:02.0500 4412 dmboot - ok 06:54:02.0687 4412 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 06:54:02.0687 4412 dmio - ok 06:54:02.0734 4412 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 06:54:02.0734 4412 dmload - ok 06:54:02.0765 4412 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 06:54:02.0765 4412 DMusic - ok 06:54:02.0859 4412 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys 06:54:02.0859 4412 dpti2o - ok 06:54:02.0890 4412 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 06:54:02.0890 4412 drmkaud - ok 06:54:02.0968 4412 E100B (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys 06:54:02.0968 4412 E100B - ok 06:54:03.0000 4412 efbd - ok 06:54:03.0062 4412 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 06:54:03.0078 4412 Fastfat - ok 06:54:03.0125 4412 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 06:54:03.0125 4412 Fdc - ok 06:54:03.0171 4412 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 06:54:03.0171 4412 Fips - ok 06:54:03.0218 4412 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 06:54:03.0218 4412 Flpydisk - ok 06:54:03.0265 4412 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 06:54:03.0265 4412 FltMgr - ok 06:54:03.0312 4412 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 06:54:03.0312 4412 Fs_Rec - ok 06:54:03.0359 4412 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 06:54:03.0359 4412 Ftdisk - ok 06:54:03.0390 4412 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 06:54:03.0390 4412 Gpc - ok 06:54:03.0546 4412 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 06:54:03.0562 4412 HDAudBus - ok 06:54:03.0609 4412 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys 06:54:03.0609 4412 hpn - ok 06:54:03.0687 4412 HSFHWAZL (1c8caa80e91fb71864e9426f9eed048d) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys 06:54:03.0703 4412 HSFHWAZL - ok 06:54:03.0843 4412 HSF_DPV (698204d9c2832e53633e53a30a53fc3d) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys 06:54:03.0859 4412 HSF_DPV - ok 06:54:03.0953 4412 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 06:54:03.0953 4412 HTTP - ok 06:54:04.0093 4412 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys 06:54:04.0093 4412 i2omgmt - ok 06:54:04.0140 4412 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys 06:54:04.0140 4412 i2omp - ok 06:54:04.0187 4412 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 06:54:04.0187 4412 i8042prt - ok 06:54:04.0328 4412 ialm (5a8e05f1d5c36abd58cffa111eb325ea) C:\WINDOWS\system32\DRIVERS\ialmnt5.sys 06:54:04.0359 4412 ialm - ok 06:54:04.0453 4412 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 06:54:04.0453 4412 Imapi - ok 06:54:04.0531 4412 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys 06:54:04.0531 4412 ini910u - ok 06:54:04.0750 4412 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys 06:54:04.0750 4412 IntelIde - ok 06:54:04.0812 4412 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 06:54:04.0812 4412 intelppm - ok 06:54:04.0890 4412 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 06:54:04.0890 4412 Ip6Fw - ok 06:54:04.0937 4412 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 06:54:04.0937 4412 IpFilterDriver - ok 06:54:05.0000 4412 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 06:54:05.0000 4412 IpInIp - ok 06:54:05.0171 4412 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 06:54:05.0187 4412 IpNat - ok 06:54:05.0234 4412 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 06:54:05.0234 4412 IPSec - ok 06:54:05.0312 4412 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 06:54:05.0312 4412 IRENUM - ok 06:54:05.0343 4412 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 06:54:05.0343 4412 isapnp - ok 06:54:05.0421 4412 IWCA (872d090ca5c306f62d1982bce6302376) C:\WINDOWS\system32\DRIVERS\iwca.sys 06:54:05.0421 4412 IWCA - ok 06:54:05.0468 4412 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 06:54:05.0468 4412 Kbdclass - ok 06:54:05.0515 4412 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 06:54:05.0515 4412 kmixer - ok 06:54:07.0093 4412 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 06:54:07.0093 4412 KSecDD - ok 06:54:07.0109 4412 lbrtfdc - ok 06:54:07.0140 4412 LVUSBSta - ok 06:54:07.0171 4412 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys 06:54:07.0171 4412 MBAMProtector - ok 06:54:07.0203 4412 mdmxsdk (3c318b9cd391371bed62126581ee9961) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 06:54:07.0203 4412 mdmxsdk - ok 06:54:07.0250 4412 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 06:54:07.0250 4412 mnmdd - ok 06:54:07.0328 4412 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 06:54:07.0328 4412 Modem - ok 06:54:07.0343 4412 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 06:54:07.0343 4412 Mouclass - ok 06:54:07.0421 4412 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 06:54:07.0421 4412 MountMgr - ok 06:54:07.0500 4412 MpFilter (fee0baded54222e9f1dae9541212aab1) C:\WINDOWS\system32\DRIVERS\MpFilter.sys 06:54:07.0500 4412 MpFilter - ok 06:54:07.0765 4412 MpKsl00564b84 (5f53edfead46fa7adb78eee9ecce8fdf) c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl00564b84.sys 06:54:07.0781 4412 MpKsl00564b84 - ok 06:54:07.0796 4412 MpKsl0b2fe426 - ok 06:54:07.0828 4412 MpKsl188a8c91 - ok 06:54:07.0843 4412 MpKsl20778404 - ok 06:54:07.0859 4412 MpKsl38b595f3 - ok 06:54:07.0875 4412 MpKsl38daaf7a - ok 06:54:07.0890 4412 MpKsl399e5db0 - ok 06:54:07.0906 4412 MpKsl4630e800 - ok 06:54:07.0937 4412 MpKsl5df9e208 - ok 06:54:07.0953 4412 MpKsl5f1a4c80 - ok 06:54:07.0968 4412 MpKsl61edc714 - ok 06:54:07.0984 4412 MpKsl709631e1 - ok 06:54:08.0000 4412 MpKsl710f2a17 - ok 06:54:08.0015 4412 MpKsl723a7154 - ok 06:54:08.0031 4412 MpKsl88778d8d - ok 06:54:08.0031 4412 MpKsl9c673aac - ok 06:54:08.0046 4412 MpKsla2f4cf59 - ok 06:54:08.0046 4412 MpKsla6eadf62 - ok 06:54:08.0062 4412 MpKsla907f1e5 - ok 06:54:08.0078 4412 MpKslb69fa993 - ok 06:54:08.0078 4412 MpKslc7d0bba0 - ok 06:54:08.0093 4412 MpKsld026eb3a - ok 06:54:08.0109 4412 MpKsld3421bb9 - ok 06:54:08.0109 4412 MpKsld6496207 - ok 06:54:08.0125 4412 MpKsle10658c6 - ok 06:54:08.0125 4412 MpKslec1a3cc2 - ok 06:54:08.0234 4412 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys 06:54:08.0234 4412 mraid35x - ok 06:54:08.0312 4412 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 06:54:08.0312 4412 MRxDAV - ok 06:54:08.0468 4412 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 06:54:08.0468 4412 MRxSmb - ok 06:54:08.0500 4412 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 06:54:08.0500 4412 Msfs - ok 06:54:08.0531 4412 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 06:54:08.0531 4412 MSKSSRV - ok 06:54:08.0562 4412 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 06:54:08.0562 4412 MSPCLOCK - ok 06:54:08.0593 4412 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 06:54:08.0593 4412 MSPQM - ok 06:54:08.0656 4412 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 06:54:08.0656 4412 mssmbios - ok 06:54:08.0687 4412 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys 06:54:08.0687 4412 MSTEE - ok 06:54:08.0718 4412 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 06:54:08.0718 4412 Mup - ok 06:54:08.0781 4412 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys 06:54:08.0781 4412 NABTSFEC - ok 06:54:08.0875 4412 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 06:54:08.0875 4412 NDIS - ok 06:54:09.0000 4412 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys 06:54:09.0000 4412 NdisIP - ok 06:54:09.0062 4412 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 06:54:09.0062 4412 NdisTapi - ok 06:54:09.0093 4412 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 06:54:09.0093 4412 Ndisuio - ok 06:54:09.0125 4412 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 06:54:09.0140 4412 NdisWan - ok 06:54:09.0203 4412 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 06:54:09.0203 4412 NDProxy - ok 06:54:09.0234 4412 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 06:54:09.0234 4412 NetBIOS - ok 06:54:09.0281 4412 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 06:54:09.0281 4412 NetBT - ok 06:54:09.0484 4412 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 06:54:09.0484 4412 Npfs - ok 06:54:09.0531 4412 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 06:54:09.0531 4412 Ntfs - ok 06:54:09.0734 4412 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 06:54:09.0734 4412 Null - ok 06:54:09.0921 4412 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 06:54:09.0953 4412 nv - ok 06:54:10.0015 4412 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 06:54:10.0015 4412 NwlnkFlt - ok 06:54:10.0171 4412 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 06:54:10.0171 4412 NwlnkFwd - ok 06:54:10.0250 4412 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 06:54:10.0250 4412 Parport - ok 06:54:10.0296 4412 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 06:54:10.0296 4412 PartMgr - ok 06:54:10.0468 4412 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 06:54:10.0468 4412 ParVdm - ok 06:54:10.0515 4412 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 06:54:10.0515 4412 PCI - ok 06:54:10.0671 4412 PCIDump - ok 06:54:10.0703 4412 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 06:54:10.0703 4412 PCIIde - ok 06:54:10.0750 4412 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 06:54:10.0750 4412 Pcmcia - ok 06:54:11.0109 4412 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\pcouffin.sys 06:54:11.0109 4412 pcouffin - ok 06:54:11.0187 4412 PDCOMP - ok 06:54:11.0203 4412 PDFRAME - ok 06:54:11.0218 4412 PDRELI - ok 06:54:11.0234 4412 PDRFRAME - ok 06:54:11.0296 4412 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys 06:54:11.0296 4412 perc2 - ok 06:54:11.0328 4412 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys 06:54:11.0328 4412 perc2hib - ok 06:54:11.0468 4412 PID_08A0 (9070ed08873a70da3b1ba0b281363a79) C:\WINDOWS\system32\DRIVERS\LV302AV.SYS 06:54:11.0468 4412 PID_08A0 - ok 06:54:11.0593 4412 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 06:54:11.0593 4412 PptpMiniport - ok 06:54:11.0671 4412 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 06:54:11.0671 4412 PSched - ok 06:54:11.0765 4412 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 06:54:11.0765 4412 Ptilink - ok 06:54:11.0843 4412 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys 06:54:11.0843 4412 PxHelp20 - ok 06:54:11.0890 4412 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys 06:54:11.0890 4412 ql1080 - ok 06:54:12.0000 4412 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys 06:54:12.0000 4412 Ql10wnt - ok 06:54:12.0156 4412 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys 06:54:12.0171 4412 ql12160 - ok 06:54:12.0203 4412 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys 06:54:12.0203 4412 ql1240 - ok 06:54:12.0234 4412 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys 06:54:12.0234 4412 ql1280 - ok 06:54:12.0250 4412 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 06:54:12.0265 4412 RasAcd - ok 06:54:12.0281 4412 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 06:54:12.0281 4412 Rasl2tp - ok 06:54:12.0328 4412 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 06:54:12.0328 4412 RasPppoe - ok 06:54:12.0546 4412 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 06:54:12.0546 4412 Raspti - ok 06:54:12.0593 4412 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 06:54:12.0593 4412 Rdbss - ok 06:54:12.0812 4412 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 06:54:12.0812 4412 RDPCDD - ok 06:54:12.0890 4412 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 06:54:12.0890 4412 rdpdr - ok 06:54:13.0078 4412 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 06:54:13.0078 4412 RDPWD - ok 06:54:13.0296 4412 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 06:54:13.0296 4412 redbook - ok 06:54:13.0343 4412 RimUsb - ok 06:54:13.0671 4412 RimVSerPort (2c4fb2e9f039287767c384e46ee91030) C:\WINDOWS\system32\DRIVERS\RimSerial.sys 06:54:13.0671 4412 RimVSerPort - ok 06:54:13.0703 4412 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys 06:54:13.0703 4412 ROOTMODEM - ok 06:54:13.0765 4412 s24trans (81aa6f0d6a2be1c550f814b036215888) C:\WINDOWS\system32\DRIVERS\s24trans.sys 06:54:13.0765 4412 s24trans - ok 06:54:13.0937 4412 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS 06:54:13.0937 4412 SASDIFSV - ok 06:54:14.0015 4412 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS 06:54:14.0015 4412 SASKUTIL - ok 06:54:14.0171 4412 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 06:54:14.0171 4412 Secdrv - ok 06:54:14.0328 4412 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 06:54:14.0328 4412 serenum - ok 06:54:14.0421 4412 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 06:54:14.0421 4412 Serial - ok 06:54:14.0484 4412 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 06:54:14.0484 4412 Sfloppy - ok 06:54:14.0578 4412 Simbad - ok 06:54:14.0656 4412 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys 06:54:14.0656 4412 sisagp - ok 06:54:14.0703 4412 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys 06:54:14.0703 4412 SLIP - ok 06:54:14.0765 4412 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys 06:54:14.0765 4412 Sparrow - ok 06:54:14.0812 4412 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 06:54:14.0812 4412 splitter - ok 06:54:14.0984 4412 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 06:54:15.0000 4412 sr - ok 06:54:15.0078 4412 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 06:54:15.0078 4412 Srv - ok 06:54:15.0296 4412 STHDA (3ad78e22210d3fbd9f76de84a8df19b5) C:\WINDOWS\system32\drivers\sthda.sys 06:54:15.0312 4412 STHDA - ok 06:54:15.0468 4412 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys 06:54:15.0468 4412 streamip - ok 06:54:15.0500 4412 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 06:54:15.0500 4412 swenum - ok 06:54:15.0531 4412 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 06:54:15.0531 4412 swmidi - ok 06:54:15.0687 4412 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys 06:54:15.0687 4412 symc810 - ok 06:54:15.0718 4412 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys 06:54:15.0718 4412 symc8xx - ok 06:54:15.0750 4412 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys 06:54:15.0750 4412 sym_hi - ok 06:54:15.0828 4412 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys 06:54:15.0828 4412 sym_u3 - ok 06:54:15.0906 4412 SynTP (fa2daa32bed908023272a0f77d625dae) C:\WINDOWS\system32\DRIVERS\SynTP.sys 06:54:15.0906 4412 SynTP - ok 06:54:15.0937 4412 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 06:54:15.0937 4412 sysaudio - ok 06:54:16.0031 4412 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 06:54:16.0031 4412 Tcpip - ok 06:54:16.0296 4412 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 06:54:16.0296 4412 TDPIPE - ok 06:54:16.0375 4412 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 06:54:16.0375 4412 TDTCP - ok 06:54:16.0421 4412 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 06:54:16.0421 4412 TermDD - ok 06:54:16.0484 4412 tmcomm (ad866d83b4f0391aecceb4e507011831) C:\WINDOWS\system32\drivers\tmcomm.sys 06:54:16.0500 4412 tmcomm - ok 06:54:16.0593 4412 tmrkb (7e2887341a3164dedc9b89082c24aeca) C:\WINDOWS\system32\drivers\tmrkb.sys 06:54:16.0593 4412 tmrkb - ok 06:54:16.0734 4412 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys 06:54:16.0734 4412 TosIde - ok 06:54:16.0812 4412 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 06:54:16.0812 4412 Udfs - ok 06:54:16.0843 4412 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys 06:54:16.0843 4412 ultra - ok 06:54:16.0968 4412 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 06:54:16.0968 4412 Update - ok 06:54:17.0328 4412 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 06:54:17.0328 4412 usbccgp - ok 06:54:17.0453 4412 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 06:54:17.0468 4412 usbehci - ok 06:54:17.0515 4412 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 06:54:17.0515 4412 usbhub - ok 06:54:17.0843 4412 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 06:54:17.0843 4412 usbprint - ok 06:54:17.0984 4412 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 06:54:17.0984 4412 USBSTOR - ok 06:54:18.0078 4412 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 06:54:18.0078 4412 usbuhci - ok 06:54:18.0171 4412 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 06:54:18.0187 4412 VgaSave - ok 06:54:18.0281 4412 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys 06:54:18.0281 4412 viaagp - ok 06:54:18.0578 4412 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys 06:54:18.0578 4412 ViaIde - ok 06:54:18.0703 4412 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 06:54:18.0703 4412 VolSnap - ok 06:54:19.0140 4412 w29n51 (f0f902220910c4fbe42a51964bd33599) C:\WINDOWS\system32\DRIVERS\w29n51.sys 06:54:19.0203 4412 w29n51 - ok 06:54:19.0390 4412 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 06:54:19.0406 4412 Wanarp - ok 06:54:19.0500 4412 wanatw (0a716c08cb13c3a8f4f51e882dbf7416) C:\WINDOWS\system32\DRIVERS\wanatw4.sys 06:54:19.0500 4412 wanatw - ok 06:54:19.0812 4412 WDICA - ok 06:54:19.0875 4412 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 06:54:19.0875 4412 wdmaud - ok 06:54:20.0000 4412 winachsf (74cf3f2e4e40c4a2e18d39d6300a5c24) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 06:54:20.0000 4412 winachsf - ok 06:54:20.0187 4412 WpdUsb (1385e5aa9c9821790d33a9563b8d2dd0) C:\WINDOWS\system32\DRIVERS\wpdusb.sys 06:54:20.0187 4412 WpdUsb - ok 06:54:20.0234 4412 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys 06:54:20.0234 4412 WS2IFSL - ok 06:54:20.0296 4412 WsAudio_DeviceS(1) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys 06:54:20.0296 4412 WsAudio_DeviceS(1) - ok 06:54:20.0390 4412 WsAudio_DeviceS(2) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys 06:54:20.0406 4412 WsAudio_DeviceS(2) - ok 06:54:20.0515 4412 WsAudio_DeviceS(3) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys 06:54:20.0515 4412 WsAudio_DeviceS(3) - ok 06:54:20.0562 4412 WsAudio_DeviceS(4) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys 06:54:20.0562 4412 WsAudio_DeviceS(4) - ok 06:54:20.0687 4412 WsAudio_DeviceS(5) (4160cbe59d9b5be22e4c3897e8db9d56) C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys 06:54:20.0687 4412 WsAudio_DeviceS(5) - ok 06:54:20.0734 4412 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS 06:54:20.0734 4412 WSTCODEC - ok 06:54:20.0796 4412 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 06:54:20.0796 4412 WudfPf - ok 06:54:20.0843 4412 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 06:54:20.0859 4412 WudfRd - ok 06:54:20.0937 4412 MBR (0x1B8) (91722e6bc3a2b40ff00222dca4a3db3e) \Device\Harddisk0\DR0 06:54:20.0937 4412 \Device\Harddisk0\DR0 - ok 06:54:20.0968 4412 Boot (0x1200) (2c1a31df5fb57b9e0584c0fdf6546368) \Device\Harddisk0\DR0\Partition0 06:54:20.0968 4412 \Device\Harddisk0\DR0\Partition0 - ok 06:54:20.0968 4412 ============================================================ 06:54:20.0968 4412 Scan finished 06:54:20.0968 4412 ============================================================ 06:54:21.0000 6092 Detected object count: 0 06:54:21.0000 6092 Actual detected object count: 0 06:56:03.0031 6000 Deinitialize success

Here is the log:
ComboFix 11-10-26.03 - Jennifer Law d 10.26.11 10:59:34.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2039.1379 [GMT -5:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\0c7b8270-98a8-08b9-5bfd-0fb8e521bfda
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\1d269e8a-9c75-994d-3371-8dd133704523
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\38316886-7739-4511-3a42-5bb323de07b2
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\505766e4-a33b-22e7-14f9-841bea52f79b
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\56def4fd-d250-f732-d55b-fc27776b6750
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\5b752e5f-c8de-3f28-ac0d-9d439a8a9d44
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\5b752e5f-c8de-3f28-ac0d-9d439a8a9d44c37889648
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\b06ff680-a6bd-dcd5-4d5b-6b775fef7ac7
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\dcd74296-66a6-ffd9-a4c4-7c37a84795a4
c:\documents and settings\Jennifer Law\Local Settings\Temporary Internet Files\f4ef8304-1084-630a-c045-4456002f6a68
c:\windows\help\tours\htmltour\unlock_playing.htm
c:\windows\system32\d3d9caps.dat
c:\windows\system32\ijl11.dll
.
.
((((((((((((((((((((((((( Files Created from 2011-09-26 to 2011-10-26 )))))))))))))))))))))))))))))))
.
.
2011-10-25 19:00 . 2011-10-25 19:00 28752 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A2B740BD-03AB-40A0-BA96-8528A002252F}\MpKsl7d77665b.sys
2011-10-25 18:59 . 2011-10-25 18:59 56200 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A2B740BD-03AB-40A0-BA96-8528A002252F}\offreg.dll
2011-10-25 18:59 . 2011-10-07 03:48 6668624 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A2B740BD-03AB-40A0-BA96-8528A002252F}\mpengine.dll
2011-10-22 11:47 . 2011-10-22 11:47 205072 —-a-w- c:\windows\system32\drivers\tmcomm.sys
2011-10-22 05:47 . 2011-10-22 05:48 15293896 —-a-w- C:\windows-kb890830-v4.1.exe
2011-10-19 16:35 . 2011-10-19 16:35 ——– d—–w- c:\program files\Common Files\Java
2011-10-16 04:10 . 2011-10-16 04:10 ——– d—–w- c:\documents and settings\All Users\Application Data\regid.1986-12.com.adobe
2011-10-16 03:38 . 2011-10-16 03:42 ——– d—–w- C:\Adobe Acrobat X
2011-10-16 03:09 . 2011-10-16 03:09 487666616 —-a-w- C:\AcrobatPro_10_Web_WWEFD.exe
2011-10-15 02:48 . 2011-10-15 02:48 302592 —-a-w- C:\lluvrtzg.exe
2011-10-15 02:40 . 2011-10-15 02:41 ——– d—–w- C:\tdsskiller
2011-10-13 19:24 . 2011-10-13 21:34 ——– d—–w- c:\program files\AOL Desktop 9.6
2011-10-13 19:23 . 2011-10-13 19:29 ——– d—–w- c:\program files\Common Files\aolshare
2011-10-02 03:51 . 2004-09-20 17:44 5652 —-a-w- c:\windows\system32\drivers\bvrp_pci.sys
2011-10-02 03:18 . 2011-10-02 03:18 11776 —-a-w- c:\program files\Mozilla Firefox\plugins\nprjplug.dll
2011-10-02 03:17 . 2011-10-02 03:17 ——– d—–w- c:\program files\Common Files\xing shared
2011-10-02 03:17 . 2011-10-02 03:17 150696 —-a-w- c:\program files\Mozilla Firefox\plugins\nppl3260.dll
2011-10-02 03:17 . 2011-10-02 03:17 107008 —-a-w- c:\program files\Mozilla Firefox\plugins\nprpjplug.dll
2011-10-02 02:54 . 2011-10-02 02:54 ——– d—–w- c:\program files\Winamp Detect
2011-10-02 02:53 . 2011-10-02 03:12 ——– d—–w- c:\documents and settings\Jennifer Law\Application Data\Winamp
2011-10-02 02:28 . 2011-10-02 02:29 ——– d—–w- c:\documents and settings\Jennifer Law\Application Data\Media Player Classic
2011-10-01 14:35 . 2011-10-01 14:35 12381800 —-a-w- C:\winamp5621_full_emusic-7plus_en-us.exe
2011-10-01 14:34 . 2010-09-13 16:46 1184984 —-a-w- c:\windows\system32\wvc1dmod.dll
2011-09-26 16:41 . 2011-09-26 16:41 220160 ——w- c:\windows\system32\dllcache\oleacc.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-24 15:19 . 2011-08-21 12:43 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-22 11:49 . 2011-10-15 02:40 1542471 —-a-w- C:\tdsskiller.zip
2011-10-22 11:47 . 2011-10-22 11:47 4104900 —-a-w- C:\RootkitBuster_5.00.1041.zip
2011-10-13 18:39 . 2010-08-06 18:13 58696 —-a-w- c:\windows\system32\AOLParconLink.exe
2011-10-07 03:48 . 2011-04-09 13:50 6668624 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-10-03 10:06 . 2011-04-05 18:20 472808 —-a-w- c:\windows\system32\deployJava1.dll
2011-10-03 07:37 . 2011-04-05 18:20 73728 —-a-w- c:\windows\system32\javacpl.cpl
2011-09-26 16:41 . 2008-07-30 00:59 611328 —-a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 16:41 . 2004-08-10 17:51 220160 —-a-w- c:\windows\system32\oleacc.dll
2011-09-26 16:41 . 2004-08-10 17:51 20480 —-a-w- c:\windows\system32\oleaccrc.dll
2011-09-09 09:12 . 2004-08-10 17:50 599040 —-a-w- c:\windows\system32\crypt32.dll
2011-09-06 13:20 . 2004-08-10 17:51 1858944 —-a-w- c:\windows\system32\win32k.sys
2011-08-31 22:00 . 2011-04-05 18:37 22216 —-a-w- c:\windows\system32\drivers\mbam.sys
2011-08-22 23:48 . 2004-08-10 17:51 916480 —-a-w- c:\windows\system32\wininet.dll
2011-08-22 23:48 . 2004-08-10 17:51 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-08-22 23:48 . 2004-08-10 17:51 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2011-08-22 11:56 . 2004-08-10 17:51 385024 —-a-w- c:\windows\system32\html.iec
2011-08-17 13:49 . 2004-08-10 17:50 138496 —-a-w- c:\windows\system32\drivers\afd.sys
2011-10-04 01:44 . 2011-04-17 01:18 134104 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2006-09-11 218032]
"AOL Dialer"="c:\program files\Common Files\AOL\ACS\AOlDial.exe" [2010-07-13 70720]
"VerControl"="c:\docume~1\JENNIF~1\LOCALS~1\TempImg\VerControl.exe" [2010-10-04 339968]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-10-18 4615552]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-10-15 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-10-15 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-10-15 114688]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 385024]
"SigmatelSysTrayApp"="stsystra.exe" [2006-03-25 282624]
"ISUSPM Startup"="c:\program files\Common Files\InstallShield\UpdateService\isuspm.exe" [2006-09-11 218032]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2006-09-11 86960]
"HostManager"="c:\program files\Common Files\AOL\1163232286\ee\AOLSoftware.exe" [2010-03-08 41800]
"AOLDialer"="c:\program files\Common Files\AOL\ACS\AOLDial.exe" [2010-07-13 70720]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
"IMEKRMIG6.1"="c:\windows\ime\imkr6_1\IMEKRMIG.EXE" [2004-08-04 44032]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2004-08-04 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-04 455168]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]
"TkBellExe"="c:\program files\Real\RealPlayer\update\realsched.exe" [2011-10-02 273528]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2010-02-28 519584]
.
c:\documents and settings\Jennifer Law\Start Menu\Programs\Startup\
AOL Desktop.lnk - c:\program files\Common Files\AOL\Launch\aollaunch.exe [2010-3-8 41800]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2006-7-20 24576]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-08-04 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 —-a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
2004-09-07 21:08 110592 —-a-w- c:\program files\Intel\Wireless\Bin\LgNotify.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLDial.exe"=
"c:\\Program Files\\Common Files\\AOL\\ACS\\AOLacsd.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Common Files\\AOL\\Loader\\aolload.exe"=
"c:\\Program Files\\Common Files\\AOL\\1163232286\\EE\\AOLServiceHost.exe"=
"c:\\Program Files\\Common Files\\AOL\\System Information\\sinf.exe"=
"c:\\Program Files\\Common Files\\AOL\\TopSpeed\\3.0\\aoltpsd3.exe"=
"c:\\Program Files\\Common Files\\AOL\\1163232286\\EE\\aolsoftware.exe"=
"c:\\Program Files\\Common Files\\AOL\\1163232286\\EE\\AOLDesktop.exe"=
"c:\\Program Files\\AOL Desktop 9.6\\waol.exe"=
"c:\\Program Files\\AOL Desktop 9.6\\AOLBrowser\\aolbrowser.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
.
R1 MpKsl1d84b78c;MpKsl1d84b78c;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3BD8F7F8-9653-4D64-99A9-A0A2AFE2BFD6}\MpKsl1d84b78c.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{3BD8F7F8-9653-4D64-99A9-A0A2AFE2BFD6}\MpKsl1d84b78c.sys [?]
R1 MpKsl7d77665b;MpKsl7d77665b;c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A2B740BD-03AB-40A0-BA96-8528A002252F}\MpKsl7d77665b.sys [10.25.11 02:00 PM 28752]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2.17.10 01:25 PM 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [5.10.10 01:41 PM 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [5.4.11 12:54 PM 116608]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [4.5.11 01:37 PM 366152]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [4.5.11 01:37 PM 22216]
S1 cnqkkocc;cnqkkocc;\??\c:\windows\system32\drivers\cnqkkocc.sys –> c:\windows\system32\drivers\cnqkkocc.sys [?]
S1 efbd;efbd;\??\c:\windows\system32\efbd.sys –> c:\windows\system32\efbd.sys [?]
S1 MpKsl0b2fe426;MpKsl0b2fe426;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A41817E5-2016-4A77-90DF-9CF11B72672F}\MpKsl0b2fe426.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A41817E5-2016-4A77-90DF-9CF11B72672F}\MpKsl0b2fe426.sys [?]
S1 MpKsl188a8c91;MpKsl188a8c91;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9F11273E-D28B-498C-BD8E-7882C2B444B2}\MpKsl188a8c91.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9F11273E-D28B-498C-BD8E-7882C2B444B2}\MpKsl188a8c91.sys [?]
S1 MpKsl20778404;MpKsl20778404;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9F11273E-D28B-498C-BD8E-7882C2B444B2}\MpKsl20778404.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{9F11273E-D28B-498C-BD8E-7882C2B444B2}\MpKsl20778404.sys [?]
S1 MpKsl38b595f3;MpKsl38b595f3;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsl38b595f3.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsl38b595f3.sys [?]
S1 MpKsl38daaf7a;MpKsl38daaf7a;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{67724EFC-0508-401B-A3F2-3792B98AECC2}\MpKsl38daaf7a.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{67724EFC-0508-401B-A3F2-3792B98AECC2}\MpKsl38daaf7a.sys [?]
S1 MpKsl399e5db0;MpKsl399e5db0;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E7F69F64-D488-450E-B9E9-7967F12FCAC0}\MpKsl399e5db0.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{E7F69F64-D488-450E-B9E9-7967F12FCAC0}\MpKsl399e5db0.sys [?]
S1 MpKsl4630e800;MpKsl4630e800;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{67724EFC-0508-401B-A3F2-3792B98AECC2}\MpKsl4630e800.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{67724EFC-0508-401B-A3F2-3792B98AECC2}\MpKsl4630e800.sys [?]
S1 MpKsl55266d52;MpKsl55266d52;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl55266d52.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl55266d52.sys [?]
S1 MpKsl5df9e208;MpKsl5df9e208;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4EE5F5FA-71E9-41F1-ACF2-DCA4E21731D8}\MpKsl5df9e208.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4EE5F5FA-71E9-41F1-ACF2-DCA4E21731D8}\MpKsl5df9e208.sys [?]
S1 MpKsl5f1a4c80;MpKsl5f1a4c80;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D5AF42A5-F308-4D13-932A-366A35A74E81}\MpKsl5f1a4c80.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D5AF42A5-F308-4D13-932A-366A35A74E81}\MpKsl5f1a4c80.sys [?]
S1 MpKsl61edc714;MpKsl61edc714;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{098642F9-DE72-4E0C-8479-0252D2369DBB}\MpKsl61edc714.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{098642F9-DE72-4E0C-8479-0252D2369DBB}\MpKsl61edc714.sys [?]
S1 MpKsl634b8194;MpKsl634b8194;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl634b8194.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl634b8194.sys [?]
S1 MpKsl709631e1;MpKsl709631e1;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{5814C6D8-A0B3-42FF-923E-C01AF9D694CC}\MpKsl709631e1.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{5814C6D8-A0B3-42FF-923E-C01AF9D694CC}\MpKsl709631e1.sys [?]
S1 MpKsl710f2a17;MpKsl710f2a17;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsl710f2a17.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsl710f2a17.sys [?]
S1 MpKsl723a7154;MpKsl723a7154;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsl723a7154.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsl723a7154.sys [?]
S1 MpKsl78f66b5b;MpKsl78f66b5b;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl78f66b5b.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl78f66b5b.sys [?]
S1 MpKsl88778d8d;MpKsl88778d8d;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsl88778d8d.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsl88778d8d.sys [?]
S1 MpKsl9b9f7fa5;MpKsl9b9f7fa5;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl9b9f7fa5.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKsl9b9f7fa5.sys [?]
S1 MpKsla2f4cf59;MpKsla2f4cf59;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{CC671A34-5197-4276-89EA-917EC0A30DC5}\MpKsla2f4cf59.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{CC671A34-5197-4276-89EA-917EC0A30DC5}\MpKsla2f4cf59.sys [?]
S1 MpKsla6eadf62;MpKsla6eadf62;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{142404C7-ABEA-49FC-98C8-7565370698D9}\MpKsla6eadf62.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{142404C7-ABEA-49FC-98C8-7565370698D9}\MpKsla6eadf62.sys [?]
S1 MpKsla907f1e5;MpKsla907f1e5;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D5AF42A5-F308-4D13-932A-366A35A74E81}\MpKsla907f1e5.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D5AF42A5-F308-4D13-932A-366A35A74E81}\MpKsla907f1e5.sys [?]
S1 MpKslae256914;MpKslae256914;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKslae256914.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{2106E5C3-D824-4000-A286-DDFE3B120DFA}\MpKslae256914.sys [?]
S1 MpKslb69fa993;MpKslb69fa993;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A41817E5-2016-4A77-90DF-9CF11B72672F}\MpKslb69fa993.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A41817E5-2016-4A77-90DF-9CF11B72672F}\MpKslb69fa993.sys [?]
S1 MpKslc7d0bba0;MpKslc7d0bba0;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D5AF42A5-F308-4D13-932A-366A35A74E81}\MpKslc7d0bba0.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D5AF42A5-F308-4D13-932A-366A35A74E81}\MpKslc7d0bba0.sys [?]
S1 MpKsld026eb3a;MpKsld026eb3a;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{31CA325E-5A1C-4B0E-8D3C-752B0538FB6A}\MpKsld026eb3a.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{31CA325E-5A1C-4B0E-8D3C-752B0538FB6A}\MpKsld026eb3a.sys [?]
S1 MpKsld3421bb9;MpKsld3421bb9;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8EED4938-DB8D-4CE9-A566-B9994E65B546}\MpKsld3421bb9.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8EED4938-DB8D-4CE9-A566-B9994E65B546}\MpKsld3421bb9.sys [?]
S1 MpKsld6496207;MpKsld6496207;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsld6496207.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D955C382-7188-493E-997E-BA9B1F6911E6}\MpKsld6496207.sys [?]
S1 MpKsle10658c6;MpKsle10658c6;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{142404C7-ABEA-49FC-98C8-7565370698D9}\MpKsle10658c6.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{142404C7-ABEA-49FC-98C8-7565370698D9}\MpKsle10658c6.sys [?]
S1 MpKslec1a3cc2;MpKslec1a3cc2;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{CC671A34-5197-4276-89EA-917EC0A30DC5}\MpKslec1a3cc2.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{CC671A34-5197-4276-89EA-917EC0A30DC5}\MpKslec1a3cc2.sys [?]
S3 DellBIOS;DellBIOS;c:\windows\DellBIOS.Sys [4.13.11 11:28 PM 5120]
S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [11.29.08 12:04 AM 47360]
S3 WsAudio_DeviceS(1);WsAudio_DeviceS(1);c:\windows\system32\drivers\WsAudio_DeviceS(1).sys [10.8.10 08:42 PM 25704]
S3 WsAudio_DeviceS(2);WsAudio_DeviceS(2);c:\windows\system32\drivers\WsAudio_DeviceS(2).sys [10.8.10 08:44 PM 25704]
S3 WsAudio_DeviceS(3);WsAudio_DeviceS(3);c:\windows\system32\drivers\WsAudio_DeviceS(3).sys [10.8.10 08:44 PM 25704]
S3 WsAudio_DeviceS(4);WsAudio_DeviceS(4);c:\windows\system32\drivers\WsAudio_DeviceS(4).sys [10.8.10 08:44 PM 25704]
S3 WsAudio_DeviceS(5);WsAudio_DeviceS(5);c:\windows\system32\drivers\WsAudio_DeviceS(5).sys [10.8.10 08:45 PM 25704]
.
— Other Services/Drivers In Memory —
.
*NewlyCreated* - MPKSL7D77665B
*NewlyCreated* - MPKSLF1221E6F
*Deregistered* - MpKslf1221e6f
.
Contents of the 'Scheduled Tasks' folder
.
2011-10-25 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 20:39]
.
2011-10-26 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-1879541575-3255683778-2761792344-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-09-27 18:40]
.
2011-10-26 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1879541575-3255683778-2761792344-1006.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2011-09-27 18:40]
.
2011-10-25 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task 67c7bc88-4134-4556-a87a-307b10c7c7ab.job
- c:\program files\SUPERAntiSpyware\SASTask.exe [2011-08-04 03:34]
.
2011-10-26 c:\windows\Tasks\User_Feed_Synchronization-{28BC42C3-2A12-4841-BEF3-8A9EC1B8C20A}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 09:31]
.
.
——- Supplementary Scan ——-
.
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uStart Page = about:blank
uInternet Settings,ProxyOverride = local
uSearchURL,(Default) = hxxp://my.netzero.net/s/search?r=minisearch
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: {{09E90109-A9AA-4980-BCEF-76F8D924E902}
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Jennifer Law\Start Menu\Programs\IMVU\Run IMVU.lnk
TCP: DhcpNameServer = 10.0.0.1
DPF: ActiveGS.cab - hxxp://www.virtualapple.org/gs.cab
DPF: {7A0D1738-10EA-47FF-92BE-4E137B5BE1A4} - hxxps://ci-mpsnare.iovation.com/StmOCX.cab
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://aolsvc.aol.com/onlinegames/free-trial-yahtzee/zylomplayer.cab
FF - ProfilePath - c:\documents and settings\Jennifer Law\Application Data\Mozilla\Firefox\Profiles\skjw8a0u.default\
FF - prefs.js: browser.search.selectedEngine - My Web Search
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZNxpt73477US&ptb=aTQd_hlIdngL4Y2X..V3zg&ind=2011051102&ptnrS=ZNxpt73477US&si=35482&n=77de345e&psa=&st=kwd&searchfor=
FF - prefs.js: network.proxy.type - 2
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - (no file)
BHO-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
Toolbar-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - c:\program files\Ask.com\GenericAskToolbar.dll
HKCU-Run-DW6 - c:\program files\The Weather Channel FW\Desktop\DesktopWeather.exe
HKCU-Run-EasyDVDMon - (no file)
HKCU-Run-drem - c:\program files\home plan software\Date Reminder\drem.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-26 11:14
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(932)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
c:\documents and settings\Jennifer Law\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
c:\documents and settings\Jennifer Law\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
c:\documents and settings\Jennifer Law\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
c:\documents and settings\Jennifer Law\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
c:\program files\Intel\Wireless\Bin\LgNotify.dll
.
Completion time: 2011-10-26 11:17:10
ComboFix-quarantined-files.txt 2011-10-26 16:16
ComboFix2.txt 2011-04-05 16:15
.
Pre-Run: 5,456,019,456 bytes free
Post-Run: 5,742,059,520 bytes free
.
- - End Of File - - 12BA911D20182943DEB9C7B0D5E24432