What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Need some help

55 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Hi z0ne,

Yes you did it just fine. :)

  • Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below:
    Folder::
c:\users\Benton\AppData\Roaming\gItyDFmQdKf9jIN
c:\users\Benton\AppData\Roaming\oIIBBtzzPNyA1vD
c:\users\Benton\AppData\Roaming\dzzPPNyyc
c:\users\Benton\AppData\Roaming\wycA1uvD2b
c:\users\Benton\AppData\Roaming\n222obbF3pmG
  • Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop.

    [external image: Posted Image]
  • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  • Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
  • ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
  • When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.
CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall.
———-
Post #17
here you go ComboFix 11-11-11.06 - Benton 11/12/2011 17:38:20.4.4 - x64 NETWORK Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.5942.4996 [GMT -5:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe.exe Command switches used :: c:\users\Benton\Desktop\CFScript.txt AV: Webroot Internet Security Complete *Disabled/Updated* {53211D91-0C31-95F2-E3A5-7661FB22889E} FW: Webroot Internet Security Complete *Enabled* {6B1A9CB4-465E-94AA-C8FA-DF5405F1CFE5} SP: Webroot Internet Security Complete *Disabled/Updated* {E840FC75-2A0B-9A7C-D915-4D1380A5C223} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Created a new restore point . . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Benton\AppData\Roaming\dzzPPNyyc c:\users\Benton\AppData\Roaming\gItyDFmQdKf9jIN c:\users\Benton\AppData\Roaming\n222obbF3pmG c:\users\Benton\AppData\Roaming\oIIBBtzzPNyA1vD c:\users\Benton\AppData\Roaming\wycA1uvD2b . . ((((((((((((((((((((((((( Files Created from 2011-10-12 to 2011-11-12 ))))))))))))))))))))))))))))))) . . 2011-11-12 22:46 . 2011-11-12 22:46 ——– d—–w- c:\users\Default\AppData\Local\temp 2011-11-12 01:15 . 2011-11-12 17:17 69000 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C93AC8C4-1A36-4349-83A5-C4B9CF274266}\offreg.dll 2011-11-11 22:28 . 2011-11-11 22:28 ——– d—–w- C:\TDSSKiller_Quarantine 2011-11-11 22:22 . 2011-10-07 04:16 8570192 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C93AC8C4-1A36-4349-83A5-C4B9CF274266}\mpengine.dll 2011-11-11 22:21 . 2011-11-11 22:21 ——– d—–w- c:\users\Benton\AppData\Local\WinZip 2011-11-10 12:22 . 2011-10-01 05:45 886784 —-a-w- c:\program files\Common Files\System\wab32.dll 2011-11-10 12:22 . 2011-10-01 04:37 708608 —-a-w- c:\program files (x86)\Common Files\System\wab32.dll 2011-11-10 12:22 . 2011-09-29 16:29 1923952 —-a-w- c:\windows\system32\drivers\tcpip.sys 2011-11-10 12:22 . 2011-09-29 04:03 3144704 —-a-w- c:\windows\system32\win32k.sys 2011-11-10 01:15 . 2011-11-10 01:15 ——– d—–w- c:\users\Benton\AppData\Local\Norman Malware Cleaner 2011-11-09 03:54 . 2011-11-09 03:54 ——– d—–w- c:\programdata\Kaspersky Lab 2011-11-08 12:07 . 2011-11-08 12:07 ——– d—–w- c:\program files (x86)\Common Files\Java 2011-11-07 02:21 . 2011-11-07 02:21 ——– d—–w- c:\users\Benton\AppData\Local\Kobo 2011-11-07 02:20 . 2011-11-07 02:21 ——– d—–w- c:\program files (x86)\Kobo 2011-11-06 22:39 . 2011-11-06 22:39 ——– d—–w- c:\users\Benton\AppData\Roaming\n1ibD3onG 2011-11-06 22:36 . 2011-11-06 22:36 ——– d—–w- c:\users\Benton\AppData\Roaming\KNNNyxxA1uv2oF3 2011-11-06 22:35 . 2011-11-06 22:35 ——– d—–w- c:\users\Benton\AppData\Roaming\SXXwwkUUVelBtP0 2011-11-06 22:34 . 2011-11-06 22:34 ——– d—–w- c:\users\Benton\AppData\Roaming\y4G5sQJ6dKfZhX 2011-11-06 22:33 . 2011-11-06 22:33 ——– d—–w- c:\users\Benton\AppData\Roaming\PHHH6ddWK7f 2011-11-03 11:15 . 2011-11-03 11:15 ——– d—–w- c:\users\Benton\AppData\Local\SCE 2011-10-26 22:35 . 2011-10-26 22:35 ——– d—–w- c:\users\Mcx1-CUDA-LAPTOP . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-11-10 22:14 . 2011-06-01 07:49 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore-2\Microsoft.MediaCenter.Sports.UI.dll 2011-11-10 22:13 . 2011-04-03 22:14 4283672 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll 2011-11-10 22:12 . 2011-04-03 22:14 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll 2011-11-10 22:12 . 2011-04-03 22:13 539968 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2011-11-08 07:25 . 2011-04-03 22:15 737072 —-a-w- c:\programdata\Microsoft\eHome\Packages\SportsV2\SportsTemplateCore\Microsoft.MediaCenter.Sports.UI.dll 2011-11-08 07:24 . 2011-04-12 22:37 4283672 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll 2011-11-08 07:23 . 2011-04-12 22:36 42776 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll 2011-11-03 11:15 . 2011-05-25 22:50 404640 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2011-10-07 17:52 . 2011-10-07 17:52 37376 —-a-w- c:\windows\SysWow64\libusb0.dll 2011-10-07 17:52 . 2011-10-07 17:52 21504 —-a-w- c:\windows\SysWow64\drivers\libusb0.sys 2011-10-03 10:06 . 2010-10-16 19:37 472808 —-a-w- c:\windows\SysWow64\deployJava1.dll 2011-09-13 02:48 . 2011-08-15 22:13 6285008 —-a-w- c:\program files (x86)\Common Files\wruninstall.exe 2011-09-04 18:27 . 2011-09-04 18:27 178800 —-a-w- c:\windows\SysWow64\CmdLineExt_x64.dll 2011-09-01 05:24 . 2011-10-12 23:07 2309120 —-a-w- c:\windows\system32\jscript9.dll 2011-09-01 05:17 . 2011-10-12 23:07 1389056 —-a-w- c:\windows\system32\wininet.dll 2011-09-01 05:12 . 2011-10-12 23:07 2382848 —-a-w- c:\windows\system32\mshtml.tlb 2011-09-01 02:35 . 2011-10-12 23:07 1798144 —-a-w- c:\windows\SysWow64\jscript9.dll 2011-09-01 02:28 . 2011-10-12 23:07 1126912 —-a-w- c:\windows\SysWow64\wininet.dll 2011-09-01 02:22 . 2011-10-12 23:07 2382848 —-a-w- c:\windows\SysWow64\mshtml.tlb 2011-08-31 21:00 . 2011-09-06 17:10 25416 —-a-w- c:\windows\system32\drivers\mbam.sys 2011-08-27 05:37 . 2011-10-12 21:23 861696 —-a-w- c:\windows\system32\oleaut32.dll 2011-08-27 05:37 . 2011-10-12 21:23 331776 —-a-w- c:\windows\system32\oleacc.dll 2011-08-27 04:26 . 2011-10-12 21:23 571904 —-a-w- c:\windows\SysWow64\oleaut32.dll 2011-08-27 04:26 . 2011-10-12 21:23 233472 —-a-w- c:\windows\SysWow64\oleacc.dll 2011-08-17 05:26 . 2011-10-12 21:24 613888 —-a-w- c:\windows\system32\psisdecd.dll 2011-08-17 05:25 . 2011-10-12 21:24 108032 —-a-w- c:\windows\system32\psisrndr.ax 2011-08-17 04:24 . 2011-10-12 21:24 465408 —-a-w- c:\windows\SysWow64\psisdecd.dll 2011-08-17 04:19 . 2011-10-12 21:24 75776 —-a-w- c:\windows\SysWow64\psisrndr.ax 2011-08-16 00:19 . 2011-08-16 00:19 72280 —-a-w- c:\windows\system32\drivers\sbapifs.sys 2011-08-16 00:16 . 2011-08-16 00:16 55384 —-a-w- c:\windows\system32\drivers\SBREDrv.sys . . ((((((((((((((((((((((((((((( SnapShot@2011-11-12_01.04.27 ))))))))))))))))))))))))))))))))))))))))) . - 2009-07-14 05:10 . 2011-11-12 01:07 39448 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2009-07-14 05:10 . 2011-11-12 01:36 39448 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2011-02-04 14:30 . 2011-11-12 01:36 11590 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-637982829-1949637309-3597935670-1000_UserData.bin + 2010-12-15 08:42 . 2011-11-12 17:09 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-12-15 08:42 . 2011-11-12 01:01 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-12-15 08:42 . 2011-11-12 17:09 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2010-12-15 08:42 . 2011-11-12 01:01 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2011-11-12 17:09 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2011-11-12 01:01 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2011-11-12 17:08 . 2011-11-12 17:12 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2011-11-12 01:00 . 2011-11-12 01:00 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2011-11-12 17:08 . 2011-11-12 17:12 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2011-11-12 01:00 . 2011-11-12 01:00 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2009-07-14 04:54 . 2011-11-12 01:00 589824 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2011-11-12 17:11 589824 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-14 02:36 . 2011-11-11 22:19 663472 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2011-11-12 01:51 663472 c:\windows\system32\perfh009.dat + 2009-07-14 02:36 . 2011-11-12 01:51 122308 c:\windows\system32\perfc009.dat - 2009-07-14 02:36 . 2011-11-11 22:19 122308 c:\windows\system32\perfc009.dat - 2009-07-14 04:54 . 2011-11-12 01:00 4734976 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2011-11-12 17:11 4734976 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2011-11-12 01:00 16187392 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2011-11-12 17:11 16187392 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2010-11-22 2736128] "igndlm.exe"="c:\program files (x86)\Download Manager\DLM.exe" [2009-10-27 1103216] "ISUSPM"="c:\programdata\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2008-10-20 210208] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-09-09 98304] "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840] "WebrootTrayApp"="c:\program files (x86)\Webroot\Security\Current\Framework\WRTray.exe" [2011-11-08 1382984] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Notification Packages REG_MULTI_SZ DPPassFilter scecli Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService] @="Service" . R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x] R1 CbFs;CbFs;c:\windows\system32\drivers\cbfs64.sys [x] R2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe [2009-03-04 89600] R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 DMAgent;Intel® PROSet/Wireless WiMAX Red Bend Device Management Service;c:\program files\Intel\WiMAX\Bin\DMAgent.exe [2010-06-07 408576] R2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-07-21 103992] R2 HPClientSvc;HP Client Services;c:\program files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-08-06 291896] R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-07-05 227384] R2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [x] R2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2011-06-14 26680] R2 MotoConnect Service;MotoConnect Service;c:\program files (x86)\Motorola\MotoConnectService\MotoConnectService.exe [2010-06-24 91456] R2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080] R2 RoxioNow Service;RoxioNow Service;c:\program files (x86)\Roxio\RoxioNow Player\RNowSvc.exe [2010-09-11 399344] R2 ssfmonm;ssfmonm;c:\windows\system32\DRIVERS\ssfmonm.sys [x] R2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-05-01 2533400] R2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe [2010-02-23 2192176] R2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX Service;c:\program files\Intel\WiMAX\Bin\AppSrv.exe [2010-06-07 911872] R2 WRConsumerService;Webroot Client Service;c:\program files (x86)\Webroot\Security\Current\Framework\WRConsumerService.exe [2011-11-08 3386840] R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x] R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x] R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x] R3 bpenum;bpenum;c:\windows\system32\DRIVERS\bpenum.sys [x] R3 bpmp;Intel® Centrino® WiMAX 6050 Series;c:\windows\system32\DRIVERS\bpmp.sys [x] R3 bpusb;bpusb;c:\windows\system32\Drivers\bpusb.sys [x] R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys [x] R3 clwvd;HP Webcam Splitter;c:\windows\system32\DRIVERS\clwvd.sys [x] R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-09-01 1431888] R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x] R3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys [x] R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys [x] R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys [x] R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys [x] R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys [x] R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-07-20 340240] R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x] R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x] R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x] R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x] R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [x] R3 wdkmd;Intel WiDi KMD;c:\windows\system32\DRIVERS\WDKMD.sys [x] R3 wrssweep;Webroots Volume Access Driver;c:\progra~2\Webroot\Security\Current\plugins\cleanup\wrssweep.sys [2011-07-21 26040] R3 WSDPrintDevice;WSD Print Support via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [x] R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x] S1 pwipf6;Privacyware Filter Driver;c:\windows\system32\DRIVERS\pwipf6.sys [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 NETwNs64;___ Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x] S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2010-11-22 18:18 451872 —-a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe . Contents of the 'Scheduled Tasks' folder . 2011-11-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000Core.job - c:\users\Benton\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-08-19 23:03] . 2011-11-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000UA.job - c:\users\Benton\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-08-19 23:03] . 2011-10-14 c:\windows\Tasks\HPCeeScheduleForBenton.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15] . 2011-11-05 c:\windows\Tasks\HPCeeScheduleForCUDA-LAPTOP$.job - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14 05:15] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00Zecter] @="{D25B32FE-CB96-491A-98FF-AD59DA382D69}" [HKEY_CLASSES_ROOT\CLSID\{D25B32FE-CB96-491A-98FF-AD59DA382D69}] 2010-09-23 04:53 2210304 —-a-w- c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\01Zecter] @="{EB24CA6D-F315-4A81-AC1A-C79CFD77F3F5}" [HKEY_CLASSES_ROOT\CLSID\{EB24CA6D-F315-4A81-AC1A-C79CFD77F3F5}] 2010-09-23 04:53 2210304 —-a-w- c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\02Zecter] @="{B3C78E40-6B64-47C3-AE34-60B770881EB8}" [HKEY_CLASSES_ROOT\CLSID\{B3C78E40-6B64-47C3-AE34-60B770881EB8}] 2010-09-23 04:53 2210304 —-a-w- c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\03Zecter] @="{622AFE52-33F6-4D9F-9966-E0BC52D7D69D}" [HKEY_CLASSES_ROOT\CLSID\{622AFE52-33F6-4D9F-9966-E0BC52D7D69D}] 2010-09-23 04:53 2210304 —-a-w- c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\04Zecter] @="{855156F0-2A0F-11DE-8C30-0800200C9A66}" [HKEY_CLASSES_ROOT\CLSID\{855156F0-2A0F-11DE-8C30-0800200C9A66}] 2010-09-23 04:53 2210304 —-a-w- c:\program files (x86)\Hewlett-Packard\HP CloudDrive\ShellExt64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncBackedUp] @="{6B78A880-15CA-468f-8422-A7960AD6FBB9}" [HKEY_CLASSES_ROOT\CLSID\{6B78A880-15CA-468f-8422-A7960AD6FBB9}] 2011-10-29 04:16 404792 —-a-w- c:\program files (x86)\Webroot\Security\Current\plugins\sync\WebRootShellExt_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncPending] @="{4EE7A346-5845-471e-9FAB-002EAF83F8B0}" [HKEY_CLASSES_ROOT\CLSID\{4EE7A346-5845-471e-9FAB-002EAF83F8B0}] 2011-10-29 04:16 404792 —-a-w- c:\program files (x86)\Webroot\Security\Current\plugins\sync\WebRootShellExt_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncRoot] @="{53DABC15-4F29-44ad-B09A-E0D0F9A3D075}" [HKEY_CLASSES_ROOT\CLSID\{53DABC15-4F29-44ad-B09A-E0D0F9A3D075}] 2011-10-29 04:16 404792 —-a-w- c:\program files (x86)\Webroot\Security\Current\plugins\sync\WebRootShellExt_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\SugarSyncShared] @="{493FC96E-B938-4924-9B38-C4088E9B8AC2}" [HKEY_CLASSES_ROOT\CLSID\{493FC96E-B938-4924-9B38-C4088E9B8AC2}] 2011-10-29 04:16 404792 —-a-w- c:\program files (x86)\Webroot\Security\Current\plugins\sync\WebRootShellExt_x64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-07-23 487424] "IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-07-20 1931024] "IntelWirelessWiMAX"="c:\program files\Intel\WiMAX\Bin\WiMAXCU.exe" [2010-06-08 1441792] "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2010-09-01 611896] "HPWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe" [2010-07-21 8192] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2010-07-21 2327952] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-07-28 161304] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-07-28 386584] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-07-28 415256] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler] "{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files\Stardock\Fences Pro\FencesMenu64.dll" [2010-09-16 464744] . ——- Supplementary Scan ——- . uStart Page = hxxp://www.google.com/ uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://www.bigseekpro.com/hypercam/{08F5E82F-7002-4FDF-BD31-99AB2DD58CA0} mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - c:\users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\ FF - prefs.js: network.proxy.type - 0 . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration] @Denied: (2) (LocalSystem) "Timestamp"=hex:41,5f,ea,cf,75,0b,cc,01 . [HKEY_USERS\S-1-5-21-637982829-1949637309-3597935670-1000\Software\SecuROM\License information*] "datasecu"=hex:0b,b8,5b,dd,91,30,93,ef,26,ae,ac,83,d9,b8,92,1b,41,e2,c0,18,74, 45,fb,77,57,bb,3f,17,30,75,91,0a,cb,7f,87,a1,86,fb,dd,8c,35,34,66,96,bf,a8,\ "rkeysecu"=hex:86,09,40,0a,49,e7,71,52,20,94,10,c5,16,02,15,0c . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2011-11-12 17:48:50 ComboFix-quarantined-files.txt 2011-11-12 22:48 ComboFix2.txt 2011-11-12 04:25 ComboFix3.txt 2011-11-12 01:16 . Pre-Run: 373,285,134,336 bytes free Post-Run: 373,228,568,576 bytes free . - - End Of File - - B3634E28C99FE248E435DDBA9C022DDB
Post #18
Hi z0ne,

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2
  • Right-click and Run as Administrator SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    :filefind
consrv.dll

:dir
c:\users\Benton\AppData\Local\SCE /s
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Post #19
SystemLook 30.07.11 by jpshortstuff Log created at 21:32 on 12/11/2011 by Benton Administrator - Elevation successful WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results. ========== filefind ========== Searching for "consrv.dll" No files found. ========== dir ========== c:\users\Benton\AppData\Local\SCE - Parameters: "/s" —Files— None found. c:\users\Benton\AppData\Local\SCE\CrashReport d—— [11:15 03/11/2011] -= EOF =-
Post #20
Hi z0ne,

========== filefind ==========

Searching for "consrv.dll"
No files found.

This is good. :)

————-

  • Download OTL to your desktop.
  • Right-click and Run as Administrator on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • When the window appears, underneath Output at the top change it to Minimal Output.
  • Check the boxes beside LOP Check and Purity Check.
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt.
    Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically.
  • Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in.
Post #21
otl.txt

OTL logfile created on: 11/12/2011 22:20:57 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benton\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.80 Gb Total Physical Memory | 4.56 Gb Available Physical Memory | 78.54% Memory free
11.60 Gb Paging File | 10.56 Gb Available in Paging File | 90.99% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 566.37 Gb Total Space | 347.58 Gb Free Space | 61.37% Space Free | Partition Type: NTFS
Drive D: | 29.50 Gb Total Space | 4.33 Gb Free Space | 14.68% Space Free | Partition Type: NTFS
Drive G: | 99.34 Mb Total Space | 88.70 Mb Free Space | 89.29% Space Free | Partition Type: FAT32

Computer Name: CUDA-LAPTOP | User Name: Benton | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Benton\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Webroot\Security\Current\Framework\WRConsumerService.exe (Webroot Software, Inc. )
PRC - C:\Program Files (x86)\Webroot\Security\Current\plugins\antimalware\AEI.exe (Webroot Software, Inc. (www.webroot.com))
PRC - C:\Program Files (x86)\Webroot\Security\Current\plugins\sync\WRSyncManager.exe (Sharpcast, Inc.)
PRC - C:\Program Files (x86)\Webroot\Security\Current\plugins\cleanup\WRCleanupEngine.exe (Webroot Software, Inc.)


========== Modules (No Company Name) ==========

MOD - C:\Program Files (x86)\Webroot\Security\Current\plugins\sync\QtGui4.dll ()
MOD - C:\Program Files (x86)\Webroot\Security\Current\plugins\sync\QtCore4.dll ()
MOD - C:\Program Files (x86)\Webroot\Security\Current\plugins\sync\QtNetwork4.dll ()
MOD - C:\Program Files (x86)\Webroot\Security\Current\plugins\sync\QtXml4.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (FLEXnet Licensing Service 64) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Flexera Software, Inc.)
SRV:64bit: - (DpHost) – C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (HPClientSvc) – C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Hewlett-Packard Company)
SRV:64bit: - (STacSV) – C:\Program Files\IDT\WDM\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (HP Wireless Assistant Service) – C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Hewlett-Packard Company)
SRV:64bit: - (EvtEng) – C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation)
SRV:64bit: - (MyWiFiDHCPDNS) – C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV:64bit: - (RegSrvc) – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation)
SRV:64bit: - (hpsrv) – C:\Windows\SysNative\hpservice.exe (Hewlett-Packard Company)
SRV:64bit: - (WiMAXAppSrv) – C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe (Intel® Corporation)
SRV:64bit: - (DMAgent) – C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe (Red Bend Ltd.)
SRV:64bit: - (vcsFPService) – C:\Windows\SysNative\vcsFPService.exe (Validity Sensors, Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AESTFilters) – C:\Program Files\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)
SRV - (WRConsumerService) – C:\Program Files (x86)\Webroot\Security\Current\Framework\WRConsumerService.exe (Webroot Software, Inc. )
SRV - (WebrootSpySweeperService) – C:\Program Files (x86)\Webroot\Security\current\plugins\antimalware\AEI.exe (Webroot Software, Inc. (www.webroot.com))
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (HPDrvMntSvc.exe) – C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company)
SRV - (HPWMISVC) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (RoxioNow Service) – C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe (Roxio)
SRV - (IntuitUpdateService) – C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
SRV - (MotoConnect Service) – C:\Program Files (x86)\Motorola\MotoConnectService\MotoConnectService.exe ()
SRV - (GameConsoleService) – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (NAUpdate) – C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (UNS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (PSI_SVC_2) – c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
SRV - (vcsFPService) – C:\Windows\SysWOW64\vcsFPService.exe (Validity Sensors, Inc.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (pwipf6) – C:\Windows\SysNative\drivers\pwipf6.sys (Privacyware/PWI, Inc.)
DRV:64bit: - (ssidrv) – C:\Windows\SysNative\drivers\ssidrv.sys (Webroot Software, Inc. (www.webroot.com))
DRV:64bit: - (ssfmonm) – C:\Windows\SysNative\drivers\ssfmonm.sys (Webroot Software, Inc. (www.webroot.com))
DRV:64bit: - (NETwNs64) ___ Intel® – C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (sptd) – C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (AtiHDAudioService) – C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)
DRV:64bit: - (CbFs) – C:\Windows\SysNative\drivers\cbfs64.sys (EldoS Corporation)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (clwvd) – C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation)
DRV:64bit: - (wdkmd) – C:\Windows\SysNative\drivers\WDKMD.sys (Intel Corporation)
DRV:64bit: - (intelkmd) – C:\Windows\SysNative\drivers\igdpmd64.sys (Intel Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (Point64) – C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (hpdskflt) – C:\Windows\SysNative\drivers\hpdskflt.sys (Hewlett-Packard Company)
DRV:64bit: - (Accelerometer) – C:\Windows\SysNative\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (motmodem) – C:\Windows\SysNative\drivers\motmodem.sys (Motorola)
DRV:64bit: - (motccgp) – C:\Windows\SysNative\drivers\motccgp.sys (Motorola)
DRV:64bit: - (bpmp) Intel® Centrino® – C:\Windows\SysNative\drivers\bpmp.sys (Intel Corporation)
DRV:64bit: - (bpusb) – C:\Windows\SysNative\drivers\bpusb.sys (Intel Corporation)
DRV:64bit: - (bpenum) – C:\Windows\SysNative\drivers\bpenum.sys (Intel Corporation)
DRV:64bit: - (AtiHdmiService) – C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (HECIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (Motousbnet) – C:\Windows\SysNative\drivers\Motousbnet.sys (Motorola)
DRV:64bit: - (motusbdevice) – C:\Windows\SysNative\drivers\motusbdevice.sys (Motorola Inc)
DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (Impcd) – C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (WSDPrintDevice) – C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (SrvHsfV92) – C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) – C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) – C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) Intel® – C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (motccgpfl) – C:\Windows\SysNative\drivers\motccgpfl.sys (Motorola)
DRV:64bit: - (BTCFilterService) – C:\Windows\SysNative\drivers\motfilt.sys (Motorola Inc)
DRV:64bit: - (Ser2pl) – C:\Windows\SysNative\drivers\ser2pl64.sys (Prolific Technology Inc.)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV:64bit: - (MotoSwitchService) – C:\Windows\SysNative\drivers\motswch.sys (Motorola)
DRV - (libusb0) – C:\Windows\SysWOW64\drivers\libusb0.sys (http://libusb-win32.sourceforge.net)
DRV - (wrssweep) – C:\Program Files (x86)\Webroot\Security\Current\plugins\cleanup\wrssweep.sys (Webroot Software Inc (www.webroot.com))
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypercam/{08F5E8…1-99AB2DD58CA0}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [removed]:5.0.0.4490
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..network.proxy.type: 0

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@fileplanet.com/fpdlm: C:\Program Files (x86)\Download Manager\npfpdlm.dll (IGN Entertainment)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@photoproduct.rocketlife.com/RocketLife App Viewer;version=0.8: File not found
FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Users\Benton\AppData\Local\HuluDesktop\instances\0.9.14.1\nphdplg.dll (Hulu LLC)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Benton\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ [2010/12/15 04:11:54 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3DF533F5-FB3C-4c4c-A1D7-99717F8C3038}: C:\Program Files (x86)\Webroot\Security\current\plugins\browserextension\ff_ptc\ [2011/08/15 17:15:02 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/11/03 19:17:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/11/08 17:20:43 | 000,000,000 | —D | M]

[2011/02/04 22:40:34 | 000,000,000 | —D | M] (No name found) – C:\Users\Benton\AppData\Roaming\Mozilla\Extensions
[2011/09/12 21:48:02 | 000,000,000 | —D | M] (No name found) – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\extensions
[2011/09/12 21:48:02 | 000,000,000 | —D | M] (Webroot) – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\extensions\{8ac62a8b-8b3f-43ba-9b1a-90c299b9dfda}
[2011/07/23 08:45:09 | 000,002,374 | —- | M] () – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\searchplugins\search.xml
[2011/11/07 23:45:48 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/03/22 21:11:37 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/09/06 11:25:16 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/11/07 23:45:48 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011/08/15 17:15:02 | 000,000,000 | —D | M] (Webroot malicious URL filtering) – C:\PROGRAM FILES (X86)\WEBROOT\SECURITY\CURRENT\PLUGINS\BROWSEREXTENSION\FF_PTC
[2011/09/30 16:30:22 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/05/16 21:46:34 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\mozilla firefox\plugins\NPcol400.dll
[2011/10/03 05:06:04 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

========== Chrome ==========


O1 HOSTS File: ([2011/11/11 23:24:11 | 000,000,027 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Webroot Browser Helper Object) - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\Program Files (x86)\Webroot\Security\install\products\WISC\toolbar\LPBar.dll (Webroot Software, Inc.)
O2 - BHO: (WebrootBHO Class) - {D93EC24D-8741-4D41-B83D-A5793B998416} - C:\Program Files (x86)\Webroot\Security\Current\plugins\browserextension\WebrootBHO.dll (Webroot Software, Inc.)
O3 - HKLM\..\Toolbar: (Webroot Toolbar) - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\Program Files (x86)\Webroot\Security\install\products\WISC\toolbar\LPBar.dll (Webroot Software, Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe ()
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [IntelWirelessWiMAX] C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [WebrootTrayApp] C:\Program Files (x86)\Webroot\Security\Current\Framework\WRTray.exe (Webroot Software, Inc. )
O4 - HKCU..\Run: [igndlm.exe] C:\Program Files (x86)\Download Manager\DLM.exe (IGN Entertainment)
O4 - HKCU..\Run: [ISUSPM] C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Acresso Corporation)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10x_ActiveX.exe (Adobe Systems, Inc.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EBA12C3E-2801-40F4-A02A-5F372C411AA6}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences Pro\FencesMenu64.dll (Stardock)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/11/12 22:18:13 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Benton\Desktop\OTL.exe
[2011/11/12 17:57:05 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2011/11/11 18:33:59 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2011/11/11 18:33:59 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2011/11/11 18:33:59 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2011/11/11 18:33:50 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2011/11/11 18:33:43 | 000,000,000 | —D | C] – C:\Qoobox
[2011/11/11 17:28:00 | 000,000,000 | —D | C] – C:\TDSSKiller_Quarantine
[2011/11/11 17:21:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\WinZip
[2011/11/11 17:21:01 | 004,290,913 | R— | C] (Swearware) – C:\Users\Benton\Desktop\ComboFix.exe.exe
[2011/11/11 15:48:16 | 001,564,976 | —- | C] (Kaspersky Lab ZAO) – C:\Users\Benton\Desktop\TDSSKiller.exe
[2011/11/10 21:10:52 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2011/11/10 21:10:44 | 000,000,000 | —D | C] – C:\Program Files\WinZip
[2011/11/10 20:49:31 | 001,916,416 | —- | C] (AVAST Software) – C:\Users\Benton\Desktop\aswMBR.exe
[2011/11/10 20:46:54 | 000,607,260 | R— | C] (Swearware) – C:\Users\Benton\Desktop\dds.com
[2011/11/10 18:09:56 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Real
[2011/11/09 20:15:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\Norman Malware Cleaner
[2011/11/08 22:54:58 | 000,000,000 | —D | C] – C:\ProgramData\Kaspersky Lab
[2011/11/08 17:17:34 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2011/11/08 07:07:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/11/07 23:45:41 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/11/07 23:45:41 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/11/07 23:45:41 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/11/07 23:10:28 | 000,000,000 | —D | C] – C:\Windows\TEMP
[2011/11/06 21:41:30 | 000,000,000 | —D | C] – C:\Users\Benton\Documents\My Digital Editions
[2011/11/06 21:21:07 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\Kobo
[2011/11/06 21:21:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo
[2011/11/06 21:20:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Kobo
[2011/11/06 17:40:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\WHsWELRYk
[2011/11/06 17:40:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\z1voFm5JEg9XjeB
[2011/11/06 17:40:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DDb4Gs6E8ZTjeyS
[2011/11/06 17:40:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GVtyvF5EZj
[2011/11/06 17:40:26 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\SkUeBPycAv
[2011/11/06 17:40:24 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\qbF3pnG5aHdKfLg
[2011/11/06 17:40:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\OkrOtxAuc2bpGaH
[2011/11/06 17:40:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GpnG4aQH6W7LgZj
[2011/11/06 17:40:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fbHf9YkrzxciD
[2011/11/06 17:40:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\BS5f9YkrzxciD
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\YLgqYkrOtAuSi
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wpnG5HdKLgqYkrO
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wnaH6dWf9XYkrOt
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wFH6dKf9XYkrOtA
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\vONx0SbFHd
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KLTjekIBNAFnaHd
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KH6dWf9XYkrOtAu
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\INx0SbFH6Kf9
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AnaH6dWf9XYkrOt
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AbFpnG5Hd7LgqYk
[2011/11/06 17:40:17 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\k1vo4HQd8ZYjeB
[2011/11/06 17:40:17 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fnH7gXezAoG6fhU
[2011/11/06 17:40:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ZN0vbGdLqCIN
[2011/11/06 17:40:13 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\dKhVP2mKTCNoa8h
[2011/11/06 17:40:12 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\oXkVOz0ciDn45Jd
[2011/11/06 17:40:11 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\N2p6Eqrx1nJZV03
[2011/11/06 17:40:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\pRXINvn6RXkO
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\qwUrBPyi3n4Hs7E
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\jwUrBPyi3n4Hs7E
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\CPc1Dnms7LTqrP
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cHdWK7fRLgXjCkV
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cHdK7fRL9TqYeIr
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cdWK7fRL9TqYeIr
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\yRhqUCkzNAv
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\p8LTjUCIz
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\HLTjUCIzy0S
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\gJ6dWK8fR9TqUIz
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\CIzNxu2bpGa6WRh
[2011/11/06 17:40:03 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Wu2Fms6dER9XUlB
[2011/11/06 17:40:03 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\SdEK8fRZ9XUlz
[2011/11/06 17:40:03 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\HER9XUeIzNx
[2011/11/06 17:40:03 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GUeIzNxu2bpGa6W
[2011/11/06 17:40:02 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\VRqwUlt0A
[2011/11/06 17:40:02 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\TWdLgRqwUlt0Avo
[2011/11/06 17:40:01 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fCkrNPci3Gms7LT
[2011/11/06 17:40:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\T9COvpd9kxi4KqI
[2011/11/06 17:40:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hSbp4HsKEgqCkrN
[2011/11/06 17:39:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\n1ibD3onG
[2011/11/06 17:39:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lZqjYCwkIrOt
[2011/11/06 17:39:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ZNtxA0ucS
[2011/11/06 17:39:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ku2bF3pnGQ6KR9
[2011/11/06 17:39:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\IVrzONtxAuSiDpG
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\OeIzNc1DoFm5dRh
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\npGQ6ER9hUeI
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hhXjelIBr
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DlIBrzPNyAuSoF
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\d3pmG5aQJ
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\R1omsd8ZYwV
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ksgYUltNcuDbpGQ
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\JXUltNcu2Fps
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cDH8wB1FsEg9XUl
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\c2npHs7Kg9YweIz
[2011/11/06 17:39:44 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\BosRjIyv3Q8jzuF
[2011/11/06 17:39:41 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Tu1ib34HsJEgZCU
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\tYkIVOtAuSiDnaH
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\tjekIVrOtAuSb4Q
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GH6dWK7fR9TqYkV
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\E9gTXqjYCkVzN
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\E9gTXqjekVOtA
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\E9gqCVtciDGQ6
[2011/11/06 17:39:39 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\PBzNy1Sob3m
[2011/11/06 17:39:39 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\FjUlBzy1v
[2011/11/06 17:39:39 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Du2bFp5QJdKfLhX
[2011/11/06 17:39:38 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\vo4ms6E8ZT
[2011/11/06 17:39:38 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KlItNc1Do4ms6E8
[2011/11/06 17:39:38 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\H5Jd8RhXUeItNcv
[2011/11/06 17:39:36 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\jzNxc2pQs7EgqYw
[2011/11/06 17:39:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mYwUltNAv2bpGs6
[2011/11/06 17:39:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\jtzP0ycA1v2n4Hs
[2011/11/06 17:39:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\J6sWJ7fEL
[2011/11/06 17:39:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hvD3oFas7EgZ
[2011/11/06 17:39:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hvD3oFaHs7E8
[2011/11/06 17:39:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hvD3o4msJEgZ
[2011/11/06 17:39:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wUkBzyAv2b3n5
[2011/11/06 17:39:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ju2F3pnG5Q6W7R9
[2011/11/06 17:39:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\JnG4aQH6s
[2011/11/06 17:39:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\FF3pnG5aQ6W7
[2011/11/06 17:39:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Ko4GQ6KRhwUlrNA
[2011/11/06 17:39:28 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\aLRqXUltPc1Dn4H
[2011/11/06 17:39:27 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\JgZYwVOt0Sb3n4H
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\x2obF3pmGaJ
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\x2obF3pG5Q6
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\x2obF3mG5Q6
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\NK8fRL9hTqUeIrO
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fkIBrzONyAuSi
[2011/11/06 17:39:22 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\TIVrlONtx0c1b3n
[2011/11/06 17:39:21 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\tnG5aQH6dKfLgXj
[2011/11/06 17:39:21 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\A5aQH6dWK
[2011/11/06 17:36:55 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KNNNyxxA1uv2oF3
[2011/11/06 17:36:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wcccA11uvD2oFpG
[2011/11/06 17:36:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\oAAA1iivD2o
[2011/11/06 17:36:45 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\VNNNyccA1uvDob4
[2011/11/06 17:36:44 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AA11iivD2onF
[2011/11/06 17:36:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hwjUUVeelItz
[2011/11/06 17:36:39 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\CqqhhYXXwkUelB
[2011/11/06 17:36:35 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wJJ77dEKK8RZ9Yw
[2011/11/06 17:36:34 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ChhhYXXwkUV
[2011/11/06 17:36:30 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cQJJ7ddEK8gR
[2011/11/06 17:36:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\emmmH55sWJ7EL8
[2011/11/06 17:36:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\qzPPP0ycA1iv
[2011/11/06 17:36:24 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\UlllOBBtxP0yS1
[2011/11/06 17:36:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DqqqhYYXwkUVlOt
[2011/11/06 17:36:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\errllOBttP0
[2011/11/06 17:36:15 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\tssJJ7ddEL8RZhY
[2011/11/06 17:36:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\WJJJ77fEL8gT
[2011/11/06 17:36:10 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lBttzzP0ycA1vDo
[2011/11/06 17:36:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lS11iivD3onFam5
[2011/11/06 17:36:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\T33oonF44aH5sJ7
[2011/11/06 17:36:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\eoonnF44pmH
[2011/11/06 17:36:01 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\asssQJJ7dEKgR
[2011/11/06 17:36:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\p888gRRZqhYXkUe
[2011/11/06 17:35:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\SXXwwkUUVelBtP0
[2011/11/06 17:35:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mjUUVVelIBtzNyA
[2011/11/06 17:35:46 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\nFF44pmmH5sJ7EK
[2011/11/06 17:35:46 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\FJJJ7ddEL
[2011/11/06 17:35:41 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mvvDD2oonFpmH
[2011/11/06 17:35:41 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\BDDD2obbF4
[2011/11/06 17:35:36 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\pJJJ77dEK8gR9hX
[2011/11/06 17:35:36 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mmHH55sWJ7dE8gZ
[2011/11/06 17:35:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GhhYYXwwkU
[2011/11/06 17:35:30 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cZZqqhYCwkUV
[2011/11/06 17:35:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DfEEL99gTZq
[2011/11/06 17:35:24 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DHH66dWWK7f
[2011/11/06 17:35:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\E55aaQH66dK7fLg
[2011/11/06 17:35:18 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\V2oobbF3pmG5QJd
[2011/11/06 17:35:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hjjUCeekIBrzNyA
[2011/11/06 17:35:13 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ijUUCCelIBrzNyA
[2011/11/06 17:35:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\j9hhTTXqjUCeIBz
[2011/11/06 17:35:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\EffRRL9gTX
[2011/11/06 17:35:01 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AhYCwkUVrOtPySi
[2011/11/06 17:35:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\QaQH6dWK7R9TqY
[2011/11/06 17:34:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\y4G5sQJ6dKfZhX
[2011/11/06 17:34:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\TXwkUVelOtPyAiD
[2011/11/06 17:34:43 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\WVelOBtzPyAiDoF
[2011/11/06 17:34:42 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fH6sWJ7fE8
[2011/11/06 17:34:37 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\f5sWJ7dELgZhXkV
[2011/11/06 17:34:36 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\TG4amH6sW
[2011/11/06 17:34:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KS1D3onG4m6W7E8
[2011/11/06 17:34:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\S7fRL9gTXjCkVzN
[2011/11/06 17:34:26 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\O9gTXqjYCkVzNx0
[2011/11/06 17:34:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fyxA1uvS2b3m5Q6
[2011/11/06 17:34:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\s9hTXqjUCkBzNx0
[2011/11/06 17:34:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mNycA1uvDoFpGsJ
[2011/11/06 17:34:15 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\OyxA1uvS2b3m5Q6
[2011/11/06 17:34:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GEEEK88gZ9YXwUV
[2011/11/06 17:34:10 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\amGG55sQJ6
[2011/11/06 17:34:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\kGG55sQJ6dEK8R
[2011/11/06 17:34:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\R666dEEK8fR9hX
[2011/11/06 17:34:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\B88ffRL9hTXqU
[2011/11/06 17:34:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\vZZ99hTXXwUCeIr
[2011/11/06 17:34:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\s555aaQJ6dfRLhX
[2011/11/06 17:33:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\PHHH6ddWK7f
[2011/11/06 17:33:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GbFF33pmG5
[2011/11/06 17:33:47 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\XyyxxA0uuv2ib
[2011/11/06 17:33:46 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lAA11uvSSobF3m5
[2011/11/06 17:33:42 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\B33ppnGG5aQ6dK7
[2011/11/06 17:33:41 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\H3ppmmG5aQJ6WKf
[2011/11/06 17:33:38 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\qwwwkIIVrlON
[2011/11/06 17:33:37 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\FVVrrzOONtx0uS2
[2011/11/06 17:33:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\OHH66sWWJ7
[2011/11/06 17:33:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lfffELL9gTZjYwk
[2011/11/06 17:33:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ZkkUVVrlOBtxPyS
[2011/11/06 17:33:28 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ZZZqqjYCCwIVrOt
[2011/11/06 17:33:24 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\JgTTZZqhY
[2011/11/06 17:33:23 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\QYYYCwwkIVrONtP
[2011/11/06 17:33:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\gSS11ivDDonF4m5
[2011/11/06 17:33:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fnnnGG4amH6sJ
[2011/11/06 17:33:15 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ndddELL8gRZq
[2011/11/06 17:33:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\EgggTTZqhYCwUVl
[2011/11/06 17:33:10 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\EwwkkUVeelBtz0y
[2011/11/06 17:33:10 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AkkUUVrrlOBxPyc
[2011/11/06 17:33:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\r22oobF4p
[2011/11/06 17:33:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hvvDD2oonF4m
[2011/11/06 17:33:01 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\peeelIIBtzPN
[2011/11/06 17:33:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AiivvD2on
[2011/11/03 06:15:55 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\SCE
[2011/11/03 06:15:29 | 000,527,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_7.dll
[2011/11/03 06:15:29 | 000,518,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_7.dll
[2011/11/03 06:15:29 | 000,077,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_5.dll
[2011/11/03 06:15:29 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_5.dll
[2011/11/03 06:15:27 | 000,239,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_7.dll
[2011/11/03 06:15:27 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_7.dll
[2011/11/03 06:15:26 | 002,526,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_43.dll
[2011/11/03 06:15:26 | 002,106,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_43.dll
[2011/11/03 06:15:26 | 001,907,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dcsx_43.dll
[2011/11/03 06:15:26 | 001,868,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dcsx_43.dll
[2011/11/03 06:15:25 | 000,511,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_43.dll
[2011/11/03 06:15:25 | 000,470,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_43.dll
[2011/11/03 06:15:25 | 000,276,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx11_43.dll
[2011/11/03 06:15:25 | 000,248,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx11_43.dll
[2011/11/03 06:15:24 | 002,401,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_43.dll
[2011/11/03 06:15:24 | 001,998,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_43.dll
[2011/11/03 06:15:23 | 000,530,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_6.dll
[2011/11/03 06:15:23 | 000,528,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_6.dll
[2011/11/03 06:15:23 | 000,078,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_4.dll
[2011/11/03 06:15:23 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_4.dll
[2011/11/03 06:15:21 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_6.dll
[2011/11/03 06:15:21 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_6.dll
[2011/11/03 06:15:21 | 000,024,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_7.dll
[2011/11/03 06:15:21 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_7.dll
[2011/10/15 08:47:13 | 000,000,000 | —D | C] – C:\Users\Benton\Documents\Call of Juarez - Bound in Blood
[2011/08/15 17:13:58 | 006,285,008 | —- | C] (Webroot Software, Inc.) – C:\Program Files (x86)\Common Files\wruninstall.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/11/12 22:18:13 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Benton\Desktop\OTL.exe
[2011/11/12 21:31:47 | 000,139,264 | —- | M] () – C:\Users\Benton\Desktop\SystemLook.exe
[2011/11/12 17:58:43 | 000,783,354 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/11/12 17:58:43 | 000,663,472 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/11/12 17:58:43 | 000,122,308 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/11/12 17:53:24 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/11/12 17:53:15 | 377,901,055 | -HS- | M] () – C:\hiberfil.sys
[2011/11/12 17:37:15 | 000,007,612 | —- | M] () – C:\Users\Benton\AppData\Local\Resmon.ResmonCfg
[2011/11/11 23:24:11 | 000,000,027 | —- | M] () – C:\Windows\SysNative\drivers\etc\hosts
[2011/11/11 20:19:30 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/11 20:19:30 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/11 19:08:05 | 000,000,932 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000UA.job
[2011/11/11 19:08:00 | 000,000,910 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000Core.job
[2011/11/11 17:21:05 | 004,290,913 | R— | M] (Swearware) – C:\Users\Benton\Desktop\ComboFix.exe.exe
[2011/11/11 17:20:20 | 001,545,878 | —- | M] () – C:\Users\Benton\Desktop\tdsskiller.zip
[2011/11/11 17:16:31 | 000,426,696 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/11/11 15:48:16 | 001,564,976 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Benton\Desktop\TDSSKiller.exe
[2011/11/10 21:28:32 | 000,000,512 | —- | M] () – C:\Users\Benton\Desktop\MBR.dat
[2011/11/10 21:14:43 | 000,005,933 | —- | M] () – C:\Users\Benton\Desktop\attach.zip
[2011/11/10 21:10:52 | 000,002,205 | —- | M] () – C:\Users\Public\Desktop\WinZip.lnk
[2011/11/10 20:49:32 | 001,916,416 | —- | M] (AVAST Software) – C:\Users\Benton\Desktop\aswMBR.exe
[2011/11/10 20:47:38 | 000,294,216 | —- | M] () – C:\Users\Benton\Desktop\gmer.zip
[2011/11/10 20:46:57 | 000,607,260 | R— | M] (Swearware) – C:\Users\Benton\Desktop\dds.com
[2011/11/08 23:51:57 | 305,063,108 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/11/08 17:17:35 | 000,001,264 | —- | M] () – C:\Users\Benton\Desktop\Revo Uninstaller.lnk
[2011/11/06 21:22:48 | 000,001,011 | —- | M] () – C:\Users\Public\Desktop\Kobo.lnk
[2011/11/05 14:34:12 | 000,000,222 | —- | M] () – C:\Users\Benton\Desktop\Dark Messiah Might and Magic Single Player.url
[2011/11/04 22:00:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForCUDA-LAPTOP$.job
[2011/11/03 16:53:42 | 000,000,822 | —- | M] () – C:\Users\Public\Desktop\CCleaner.lnk
[2011/11/03 06:15:41 | 000,404,640 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/11/02 18:45:00 | 000,000,221 | —- | M] () – C:\Users\Benton\Desktop\DC Universe Online.url
[2011/10/26 17:35:19 | 000,000,258 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2011/10/26 17:25:42 | 000,004,608 | —- | M] () – C:\Users\Benton\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/10/19 11:22:52 | 000,030,424 | —- | M] () – C:\Windows\SysWow64\wrLZMA.dll
[2011/10/19 11:22:34 | 000,019,576 | —- | M] (Webroot Software, Inc. (www.webroot.com)) – C:\Windows\SysNative\SsiEfr.exe
[2011/10/14 16:50:14 | 000,000,336 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForBenton.job
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/11/12 21:31:47 | 000,139,264 | —- | C] () – C:\Users\Benton\Desktop\SystemLook.exe
[2011/11/11 18:33:59 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2011/11/11 18:33:59 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2011/11/11 18:33:59 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2011/11/11 18:33:59 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2011/11/11 18:33:59 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2011/11/11 17:20:19 | 001,545,878 | —- | C] () – C:\Users\Benton\Desktop\tdsskiller.zip
[2011/11/10 21:28:32 | 000,000,512 | —- | C] () – C:\Users\Benton\Desktop\MBR.dat
[2011/11/10 21:14:43 | 000,005,933 | —- | C] () – C:\Users\Benton\Desktop\attach.zip
[2011/11/10 21:10:52 | 000,002,205 | —- | C] () – C:\Users\Public\Desktop\WinZip.lnk
[2011/11/10 20:47:37 | 000,294,216 | —- | C] () – C:\Users\Benton\Desktop\gmer.zip
[2011/11/08 23:51:57 | 305,063,108 | —- | C] () – C:\Windows\MEMORY.DMP
[2011/11/08 17:14:12 | 000,007,612 | —- | C] () – C:\Users\Benton\AppData\Local\Resmon.ResmonCfg
[2011/11/06 21:21:02 | 000,001,011 | —- | C] () – C:\Users\Public\Desktop\Kobo.lnk
[2011/11/05 14:34:12 | 000,000,222 | —- | C] () – C:\Users\Benton\Desktop\Dark Messiah Might and Magic Single Player.url
[2011/11/02 18:45:00 | 000,000,221 | —- | C] () – C:\Users\Benton\Desktop\DC Universe Online.url
[2011/08/31 22:10:50 | 000,000,153 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2011/08/31 21:56:51 | 000,796,360 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/08/17 13:15:48 | 000,000,064 | —- | C] () – C:\Windows\SysWow64\rp_stats.dat
[2011/08/17 13:15:48 | 000,000,044 | —- | C] () – C:\Windows\SysWow64\rp_rules.dat
[2011/08/15 17:15:00 | 000,030,424 | —- | C] () – C:\Windows\SysWow64\wrLZMA.dll
[2011/05/26 19:47:35 | 000,001,854 | —- | C] () – C:\Users\Benton\AppData\Roaming\GhostObjGAFix.xml
[2011/04/03 17:10:21 | 000,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2011/03/30 19:24:35 | 000,000,333 | —- | C] () – C:\Windows\game.ini
[2011/02/13 23:20:13 | 000,000,040 | —- | C] () – C:\ProgramData\ra3.ini
[2011/02/08 19:57:26 | 000,222,804 | —- | C] () – C:\Windows\hpwins24.dat
[2011/02/04 22:34:15 | 000,004,608 | —- | C] () – C:\Users\Benton\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/02/04 22:33:57 | 000,000,848 | -HS- | C] () – C:\ProgramData\KGyGaAvL.sys
[2010/12/15 03:49:28 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/12/15 03:39:40 | 000,002,857 | —- | C] () – C:\Windows\SysWow64\atipblup.dat
[2010/12/15 03:38:19 | 000,000,299 | —- | C] () – C:\Windows\SysWow64\RStoneLog2.ini
[2010/12/15 03:38:19 | 000,000,240 | —- | C] () – C:\Windows\SysWow64\RStoneLog.ini
[2010/10/16 14:42:34 | 000,000,188 | —- | C] () – C:\Windows\SysWow64\HPWA.ini
[2010/09/21 13:30:44 | 000,007,736 | —- | C] () – C:\Windows\hpDSTRES.DLL
[2010/07/28 17:08:46 | 000,127,868 | —- | C] () – C:\Windows\SysWow64\igcompkrng575.bin
[2010/07/28 17:08:44 | 000,104,796 | —- | C] () – C:\Windows\SysWow64\igfcg575m.bin
[2010/07/28 17:08:42 | 000,870,560 | —- | C] () – C:\Windows\SysWow64\igkrng575.bin
[2010/07/28 16:14:38 | 000,208,896 | —- | C] () – C:\Windows\SysWow64\iglhsip32.dll
[2010/07/28 16:14:38 | 000,143,360 | —- | C] () – C:\Windows\SysWow64\iglhcp32.dll
[2010/06/15 21:28:54 | 000,002,857 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2009/11/06 04:53:13 | 000,001,832 | —- | C] () – C:\Windows\hpwmdl24.dat
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:59:36 | 001,498,564 | —- | C] () – C:\Windows\SysWow64\igkrng400.bin
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat

========== LOP Check ==========

[2011/11/06 17:39:21 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\A5aQH6dWK
[2011/11/06 17:36:44 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\AA11iivD2onF
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\AbFpnG5Hd7LgqYk
[2011/11/06 17:35:01 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\AhYCwkUVrOtPySi
[2011/11/06 17:33:00 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\AiivvD2on
[2011/11/06 17:33:10 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\AkkUUVrrlOBxPyc
[2011/11/06 17:39:28 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\aLRqXUltPc1Dn4H
[2011/11/06 17:34:10 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\amGG55sQJ6
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\AnaH6dWf9XYkrOt
[2011/11/06 17:36:01 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\asssQJJ7dEKgR
[2011/09/01 00:30:35 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Autodesk
[2011/11/06 17:33:42 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\B33ppnGG5aQ6dK7
[2011/11/06 17:34:05 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\B88ffRL9hTXqU
[2011/11/06 17:35:41 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\BDDD2obbF4
[2011/02/04 22:36:13 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Blio
[2011/11/06 17:39:44 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\BosRjIyv3Q8jzuF
[2011/11/06 17:40:20 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\BS5f9YkrzxciD
[2011/11/06 17:39:48 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\c2npHs7Kg9YweIz
[2011/05/16 21:46:36 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Catalina Marketing Corp
[2011/11/06 17:39:48 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\cDH8wB1FsEg9XUl
[2011/11/06 17:40:06 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\cdWK7fRL9TqYeIr
[2011/11/06 17:40:06 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\cHdK7fRL9TqYeIr
[2011/11/06 17:40:06 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\cHdWK7fRLgXjCkV
[2011/11/06 17:36:34 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ChhhYXXwkUV
[2011/11/06 17:40:04 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\CIzNxu2bpGa6WRh
[2011/02/08 22:12:34 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1
[2011/11/06 17:40:06 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\CPc1Dnms7LTqrP
[2011/11/06 17:36:30 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\cQJJ7ddEK8gR
[2011/11/06 17:36:39 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\CqqhhYXXwkUelB
[2011/11/06 17:35:30 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\cZZqqhYCwkUV
[2011/11/06 17:39:49 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\d3pmG5aQJ
[2011/11/06 17:40:34 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\DDb4Gs6E8ZTjeyS
[2011/11/06 17:35:25 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\DfEEL99gTZq
[2011/11/06 17:35:24 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\DHH66dWWK7f
[2011/02/04 09:29:30 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\DigitalPersona
[2011/11/06 17:49:21 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\dKhVP2mKTCNoa8h
[2011/11/06 17:39:49 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\DlIBrzPNyAuSoF
[2011/11/06 17:36:20 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\DqqqhYYXwkUVlOt
[2011/11/06 17:39:39 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Du2bFp5QJdKfLhX
[2011/11/06 17:35:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\E55aaQH66dK7fLg
[2011/11/06 17:39:40 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\E9gqCVtciDGQ6
[2011/11/06 17:39:40 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\E9gTXqjekVOtA
[2011/11/06 17:39:40 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\E9gTXqjYCkVzN
[2011/11/06 17:35:09 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\EffRRL9gTX
[2011/11/06 17:33:14 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\EgggTTZqhYCwUVl
[2011/11/06 17:36:29 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\emmmH55sWJ7EL8
[2011/11/06 17:36:05 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\eoonnF44pmH
[2011/11/06 17:36:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\errllOBttP0
[2011/11/06 17:33:10 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\EwwkkUVeelBtz0y
[2011/11/06 17:34:37 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\f5sWJ7dELgZhXkV
[2011/11/06 17:40:20 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\fbHf9YkrzxciD
[2011/11/06 17:40:01 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\fCkrNPci3Gms7LT
[2011/11/06 17:39:31 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\FF3pnG5aQ6W7
[2011/11/06 17:34:42 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\fH6sWJ7fE8
[2011/11/06 17:35:46 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\FJJJ7ddEL
[2011/11/06 17:39:39 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\FjUlBzy1v
[2011/11/06 17:39:25 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\fkIBrzONyAuSi
[2011/11/06 17:40:17 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\fnH7gXezAoG6fhU
[2011/11/06 17:33:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\fnnnGG4amH6sJ
[2011/11/06 17:33:37 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\FVVrrzOONtx0uS2
[2011/11/06 17:34:25 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\fyxA1uvS2b3m5Q6
[2011/11/06 17:33:51 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\GbFF33pmG5
[2011/11/06 17:34:14 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\GEEEK88gZ9YXwUV
[2011/11/06 17:39:40 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\GH6dWK7fR9TqYkV
[2011/11/06 17:35:31 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\GhhYYXwwkU
[2011/11/06 17:40:04 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\gJ6dWK8fR9TqUIz
[2011/11/06 17:40:20 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\GpnG4aQH6W7LgZj
[2011/11/06 17:33:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\gSS11ivDDonF4m5
[2011/11/06 17:40:03 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\GUeIzNxu2bpGa6W
[2011/11/06 17:40:31 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\GVtyvF5EZj
[2011/11/06 17:33:41 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\H3ppmmG5aQJ6WKf
[2011/11/06 17:39:38 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\H5Jd8RhXUeItNcv
[2011/11/06 17:40:03 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\HER9XUeIzNx
[2011/11/06 17:39:49 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\hhXjelIBr
[2011/11/06 17:35:14 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\hjjUCeekIBrzNyA
[2011/11/06 17:40:04 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\HLTjUCIzy0S
[2011/11/06 17:40:00 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\hSbp4HsKEgqCkrN
[2011/11/06 17:39:32 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\hvD3o4msJEgZ
[2011/11/06 17:39:32 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\hvD3oFaHs7E8
[2011/11/06 17:39:32 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\hvD3oFas7EgZ
[2011/11/06 17:33:05 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\hvvDD2oonF4m
[2011/11/06 17:36:40 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\hwjUUVeelItz
[2011/11/06 17:35:13 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ijUUCCelIBrzNyA
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\INx0SbFH6Kf9
[2011/11/06 17:39:50 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\IVrzONtxAuSiDpG
[2011/11/06 17:39:32 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\J6sWJ7fEL
[2011/11/06 17:35:09 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\j9hhTTXqjUCeIBz
[2011/11/06 17:33:24 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\JgTTZZqhY
[2011/11/06 17:39:27 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\JgZYwVOt0Sb3n4H
[2011/11/06 17:39:31 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\JnG4aQH6s
[2011/11/06 17:39:33 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\jtzP0ycA1v2n4Hs
[2011/11/06 17:39:31 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ju2F3pnG5Q6W7R9
[2011/11/06 17:40:06 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\jwUrBPyi3n4Hs7E
[2011/11/06 17:39:48 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\JXUltNcu2Fps
[2011/11/06 17:39:36 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\jzNxc2pQs7EgqYw
[2011/11/06 17:40:17 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\k1vo4HQd8ZYjeB
[2011/11/06 17:34:09 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\kGG55sQJ6dEK8R
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\KH6dWf9XYkrOtAu
[2011/11/06 17:39:38 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\KlItNc1Do4ms6E8
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\KLTjekIBNAFnaHd
[2011/11/06 17:36:55 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\KNNNyxxA1uv2oF3
[2011/11/06 17:39:29 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Ko4GQ6KRhwUlrNA
[2011/11/06 17:34:32 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\KS1D3onG4m6W7E8
[2011/11/06 17:39:48 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ksgYUltNcuDbpGQ
[2011/11/06 17:39:50 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ku2bF3pnGQ6KR9
[2011/11/06 17:33:46 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\lAA11uvSSobF3m5
[2011/11/06 17:36:10 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\lBttzzP0ycA1vDo
[2011/11/06 17:33:33 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\lfffELL9gTZjYwk
[2011/11/06 17:36:09 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\lS11iivD3onFam5
[2011/11/06 17:39:51 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\lZqjYCwkIrOt
[2011/11/06 17:35:51 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\mjUUVVelIBtzNyA
[2011/11/06 17:35:36 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\mmHH55sWJ7dE8gZ
[2011/11/06 17:34:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\mNycA1uvDoFpGsJ
[2011/11/06 17:35:41 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\mvvDD2oonFpmH
[2011/11/06 17:39:33 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\mYwUltNAv2bpGs6
[2011/11/06 17:39:51 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\n1ibD3onG
[2011/11/06 17:40:11 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\N2p6Eqrx1nJZV03
[2011/11/06 17:33:15 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ndddELL8gRZq
[2011/11/06 17:35:46 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\nFF44pmmH5sJ7EK
[2011/11/06 17:39:25 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\NK8fRL9hTqUeIrO
[2011/11/06 17:39:49 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\npGQ6ER9hUeI
[2011/11/06 17:34:26 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\O9gTXqjYCkVzNx0
[2011/11/06 17:36:49 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\oAAA1iivD2o
[2011/11/06 17:39:49 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\OeIzNc1DoFm5dRh
[2011/11/06 17:33:33 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\OHH66sWWJ7
[2011/11/06 17:40:20 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\OkrOtxAuc2bpGaH
[2011/11/06 17:40:12 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\oXkVOz0ciDn45Jd
[2011/11/06 17:34:15 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\OyxA1uvS2b3m5Q6
[2011/11/06 17:36:00 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\p888gRRZqhYXkUe
[2011/11/06 17:40:04 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\p8LTjUCIz
[2011/11/06 17:39:39 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\PBzNy1Sob3m
[2011/11/06 17:33:01 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\peeelIIBtzPN
[2011/11/06 17:33:51 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\PHHH6ddWK7f
[2011/02/04 21:37:46 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\PictureMover
[2011/11/06 17:35:36 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\pJJJ77dEK8gR9hX
[2011/08/29 21:02:18 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\PlayFirst
[2011/11/06 17:40:09 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\pRXINvn6RXkO
[2011/11/06 17:35:00 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\QaQH6dWK7R9TqY
[2011/11/06 17:40:24 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\qbF3pnG5aHdKfLg
[2011/11/06 17:40:06 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\qwUrBPyi3n4Hs7E
[2011/11/06 17:33:38 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\qwwwkIIVrlON
[2011/11/06 17:33:23 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\QYYYCwwkIVrONtP
[2011/11/06 17:36:25 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\qzPPP0ycA1iv
[2011/11/06 17:39:48 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\R1omsd8ZYwV
[2011/11/06 17:33:06 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\r22oobF4p
[2011/11/06 17:34:05 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\R666dEEK8fR9hX
[2011/02/13 22:14:46 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Red Alert 3
[2011/03/06 11:18:35 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Red Alert 3 Uprising
[2011/11/06 17:34:00 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\s555aaQJ6dfRLhX
[2011/11/06 17:34:31 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\S7fRL9gTXjCkVzN
[2011/11/06 17:34:20 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\s9hTXqjUCkBzNx0
[2011/11/06 17:40:03 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\SdEK8fRZ9XUlz
[2011/11/06 17:40:26 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\SkUeBPycAv
[2011/02/04 21:36:45 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Stardock
[2011/11/06 17:35:51 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\SXXwwkUUVelBtP0
[2011/11/06 17:36:05 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\T33oonF44aH5sJ7
[2011/11/06 17:40:00 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\T9COvpd9kxi4KqI
[2011/11/06 17:34:36 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\TG4amH6sW
[2011/11/06 17:39:22 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\TIVrlONtx0c1b3n
[2011/11/06 17:39:40 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\tjekIVrOtAuSb4Q
[2011/11/06 17:39:21 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\tnG5aQH6dKfLgXj
[2011/11/06 17:36:15 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\tssJJ7ddEL8RZhY
[2011/11/06 17:39:41 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Tu1ib34HsJEgZCU
[2011/11/06 17:40:02 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\TWdLgRqwUlt0Avo
[2011/11/06 17:34:48 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\TXwkUVelOtPyAiD
[2011/11/06 17:39:40 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\tYkIVOtAuSiDnaH
[2011/11/06 17:36:24 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\UlllOBBtxP0yS1
[2011/11/03 19:10:53 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\uTorrent
[2011/11/06 17:35:18 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\V2oobbF3pmG5QJd
[2011/11/06 17:36:45 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\VNNNyccA1uvDob4
[2011/11/06 17:39:38 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\vo4ms6E8ZT
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\vONx0SbFHd
[2011/11/06 17:40:02 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\VRqwUlt0A
[2011/11/06 17:34:00 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\vZZ99hTXXwUCeIr
[2011/11/06 17:36:50 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\wcccA11uvD2oFpG
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\wFH6dKf9XYkrOtA
[2011/11/06 17:40:50 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\WHsWELRYk
[2011/09/06 23:39:09 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Windows Live Writer
[2011/09/07 13:33:12 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\WinPatrol
[2011/11/06 17:36:35 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\wJJ77dEKK8RZ9Yw
[2011/11/06 17:36:14 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\WJJJ77fEL8gT
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\wnaH6dWf9XYkrOt
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\wpnG5HdKLgqYkrO
[2011/11/06 17:40:03 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\Wu2Fms6dER9XUlB
[2011/11/06 17:39:31 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\wUkBzyAv2b3n5
[2011/11/06 17:34:43 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\WVelOBtzPyAiDoF
[2011/11/06 17:39:25 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\x2obF3mG5Q6
[2011/11/06 17:39:25 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\x2obF3pG5Q6
[2011/11/06 17:39:25 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\x2obF3pmGaJ
[2011/11/06 17:33:47 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\XyyxxA0uuv2ib
[2011/11/06 17:34:49 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\y4G5sQJ6dKfZhX
[2011/11/06 17:40:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\YLgqYkrOtAuSi
[2011/11/06 17:40:04 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\yRhqUCkzNAv
[2011/11/06 17:40:32 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\z1voFm5JEg9XjeB
[2011/11/06 17:33:29 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ZkkUVVrlOBtxPyS
[2011/11/06 17:40:14 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ZN0vbGdLqCIN
[2011/11/06 17:39:50 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ZNtxA0ucS
[2011/09/29 20:16:19 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ZumoDrive
[2011/11/06 17:33:28 | 000,000,000 | —D | M] – C:\Users\Benton\AppData\Roaming\ZZZqqjYCCwIVrOt
[2011/11/11 19:08:00 | 000,000,910 | —- | M] () – C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000Core.job
[2011/11/11 19:08:05 | 000,000,932 | —- | M] () – C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000UA.job
[2011/09/28 18:10:05 | 000,031,198 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



< End of report >
Post #22
extras.txt

OTL Extras logfile created on: 11/12/2011 22:20:57 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benton\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.80 Gb Total Physical Memory | 4.56 Gb Available Physical Memory | 78.54% Memory free
11.60 Gb Paging File | 10.56 Gb Available in Paging File | 90.99% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 566.37 Gb Total Space | 347.58 Gb Free Space | 61.37% Space Free | Partition Type: NTFS
Drive D: | 29.50 Gb Total Space | 4.33 Gb Free Space | 14.68% Space Free | Partition Type: NTFS
Drive G: | 99.34 Mb Total Space | 88.70 Mb Free Space | 89.29% Space Free | Partition Type: FAT32

Computer Name: CUDA-LAPTOP | User Name: Benton | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.scr [@ = scrfile] – Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile [print] – rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with Corel PaintShop Photo Pro X3] – "c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with Corel PaintShop Photo Pro X3] – "c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{007811BF-E310-4285-BFC6-55DB29B3EDDE}" = WinPatrol
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{09BDCC02-80F2-4EFB-8F1B-A807D2C38E31}" = HP MediaSmart Movies and TV
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences Pro
"{13DCC2C7-454D-42F0-A892-E0E9A5DE4E67}" = HP Wireless Assistant
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{22441735-5983-AD2A-5CC5-FA2CCD7EF732}" = ATI Stream SDK v2 Developer
"{2677AAE2-D8F8-40AE-9149-67618ED43EFD}_is1" = Trinity USB Drivers 1.1.1.1
"{26A24AE4-039D-4CA4-87B4-2F86416021FF}" = Java™ 6 Update 21 (64-bit)
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{426FAE9F-7373-496E-A215-9DB7EF4398CF}" = Validity Sensors DDK
"{4327107B-E95E-415C-9194-458FCED6BF12}" = Intel® PROSet/Wireless WiFi Software
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4F26C164-9373-4974-8F43-E0F2176AF937}" = Intel WiMAX Tutorial
"{563F041C-DFDB-437B-A1E8-E141E0906076}" = Microsoft IntelliPoint 8.0
"{5783F2D7-A001-0409-0102-0060B0CE6BBA}" = AutoCAD 2012 - English
"{5783F2D7-A001-0409-1102-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - English
"{5BF97E02-2F6A-412A-BB4D-B6E2DC65FCA7}" = HP SimplePass Identity Protection
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6548B189-BEA4-4041-80E0-AEB60548E046}" = Intel® PROSet/Wireless WiMAX Software
"{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}" = Network64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{82ED9FB2-55AF-4A61-A6F3-506CEE112779}" = Motorola Mobile Drivers Installation 4.7.1
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{91DDAB49-487B-4649-93CE-81F6B3423051}" = HP Officejet 6000 E609 Series
"{929685C0-FC01-45E1-8B39-2948E8FF861E}" = Intel® Wireless Display
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{AE57C044-8912-A181-A0E4-BC2DAB3A092A}" = ATI Catalyst Install Manager
"{BE6725F2-6D15-477C-86C6-4522B8569D62}" = HP MediaSmart SmartMenu
"{C84FFB07-C687-45CF-91C8-868DB8D8C8CD}" = HP 3D DriveGuard
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C7}" = WinZip 16.0
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{E552C39C-C70E-464F-9733-8311331BDD90}" = Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012
"{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6246243-CF06-4E40-8A37-C3B537695C36}" = Share64
"{FED4086D-51A8-E88C-1CF9-BA21A50470EE}" = ccc-utility64
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"B1A8F7E99596998546E45BBBFC8B527A13989809" = Windows Driver Package - DIABLO (usbser) Ports (01/30/2009 1.1.1.1)
"CCleaner" = CCleaner
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"ProInst" = Intel PROSet Wireless
"Shop for HP Supplies" = Shop for HP Supplies
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{D1AEB5DB-04FA-489D-94EF-8600898B93EE}" = Corel PaintShop Photo Pro X3
"_{F072CA07-A781-45E4-9975-C033A73019CF}" = Corel VideoStudio Pro X3
"{003E4AFB-085E-4599-B53E-A15736948F2A}" = Hot Rod American Street Drag
"{00FB9AA8-5FFF-DDCE-DA2E-530994B59217}" = CCC Help Finnish
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"{045C16AD-B2E5-43D0-BB51-2F1987D91038}" = HP Documentation
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05BDC796-3451-4F81-B91D-E98F7ADA76C2}" = TurboTax 2010 WinPerTaxSupport
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D471171-70BF-459B-AF06-9C34329295E7}" = 6000E609_Help
"{0EDEB615-1A60-425E-8306-0E10519C7B55}" = RoxioNow Player
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{120262A6-7A4B-4889-AE85-F5E5688D3683}" = HP MovieStore
"{12A98725-C278-32D9-11CA-ADCFF8D58FEB}" = PX Profile Update
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1991D8C3-8354-2228-401C-D3D105CA2AC4}" = CCC Help Chinese Traditional
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1E6E990A-728D-4700-9B0A-2CA541C93A12}" = Catalyst Control Center - Branding
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{264FE20A-757B-492a-B0C3-4009E2997D8A}" = PictureMover
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java™ 6 Update 29
"{296D8550-CB06-48E4-9A8B-E5034FB64715}" = Command & Conquer™ Red Alert™ 3
"{2D8539EE-3F50-94DB-2605-047B33558C70}" = CCC Help Thai
"{2EA3D6B2-157E-4112-A3AB-BF17E16661C3}" = HP MediaSmart/TouchSmart Netflix
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FF2BBBA-341C-4F36-AB55-7398184733CE}" = CCC Help Italian
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"{31EEA563-3544-4EA1-8773-BCBF83F9627A}" = HP Software Framework
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3782EC09-4000-475E-8A59-9CABD6F03B4C}" = TurboTax 2010 WinPerFedFormset
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3B834B54-EC4B-48E2-BFC6-03FF5DA06F62}" = Adobe Shockwave Player 11.5
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{45F8CDEE-7F2D-4601-B300-EB83DEE8F156}" = TurboTax 2010 wnciper
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{491ADA37-04EE-2ECE-9F86-DDC0106047AC}" = Times Reader
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4F2FCCCF-29F3-44B9-886F-6D16F8417522}" = TurboTax 2010 wrapper
"{4F57C27B-EDF4-4009-BEBA-EA7AA5C7A02D}" = ProductContext
"{504CC891-B140-4E1B-860B-5E4C1DFBA9E3}" = Blio
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{5410C77F-B22F-61FE-7D93-0BEDBC959FF3}" = PX Profile Update
"{551845DB-2D33-474E-B591-0831F0F2FAF6}" = BPDSoftware_Ini
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5719D840-C30E-7DD3-C746-00B3A5C9BD6B}" = CCC Help Korean
"{5EDE7E1A-E386-BB8B-CD77-3B5AF9A8D80B}" = CCC Help Greek
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{670E7FFC-95FF-C425-BD00-91C120352C4B}" = CCC Help Turkish
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{691FCAD9-4A3F-43B9-8EC6-F7EE608D3772}" = 6000E609_eDocs
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6A396792-1CA6-E9E5-9844-512238F70C95}" = CCC Help Swedish
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"{6DC6392C-4D8C-D21E-A0DD-750BD76627F6}" = CCC Help Chinese Standard
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.1.0
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{722CD933-F4A3-4b3b-95D2-2A325BA693DA}" = 6000E609a
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74796D37-75F9-C430-CC1D-FCE8371D5EB3}" = CCC Help English
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7FBDEEDA-ECDB-A348-0FBC-41AD5D852B36}" = Catalyst Control Center Localization All
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{872B1C80-38EC-4A31-A25C-980820593900}" = HP Power Manager
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8AC3E7BB-F819-379B-3F81-255904B67A8A}" = CCC Help Czech
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8B287B75-DF8D-40C8-9620-8E4492C38EF1}" = Webroot Software
"{8C696008-029B-BBA7-9CD3-45596A069D96}" = CCC Help Polish
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{9008D736-35CA-40DB-A2BE-5F32D954E5AA}" = HP MovieStore
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_STANDARDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_STANDARDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_STANDARDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_STANDARDR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91892B48-4503-D842-59A0-842F70503843}" = CCC Help Portuguese
"{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{946B0558-3E7B-D27B-2E95-3A2E99BCB826}" = Catalyst Control Center Graphics Previews Common
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9902DD1A-58CD-EE2D-1401-EF1D07D3D353}" = CCC Help Japanese
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A525E00B-6609-442E-9DCD-64453C233E8D}" = TurboTax 2010 WinPerReleaseEngine
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAD4E5A4-68CD-7957-81EF-8B50DBA5E939}" = CCC Help Danish
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AE8289AB-E18C-36E6-BF9B-99557D9F7517}" = Catalyst Control Center Graphics Previews Vista
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{B719C82F-A3AC-ED37-3E2A-947E5A7BA214}" = CCC Help Hungarian
"{BB1C717E-376C-4AA1-8940-81BFC38D9778}" = HP Quick Launch
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C7AAB32A-AA73-ECFD-4F43-F41CFA2CD540}" = ccc-core-static
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CBE7EB3D-FBD9-4c74-8156-082D055C0354}" = BPDSoftware
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"{D1612A3D-0DCC-4055-BB6A-0036F31158A0}" = Setup
"{D1AEB5DB-04FA-489D-94EF-8600898B93EE}" = ICA
"{D1F80EFD-A032-4E8E-A367-70C44AD4DCE0}" = ISCOM
"{D22002ED-EE2A-4CB1-A63D-430E62A2E8D8}" = Google SketchUp 8
"{D3538C4C-8DAF-88CD-55B0-CBF12DECF5A6}" = CCC Help Spanish
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D57588F6-2D35-42B5-5C96-4FC3EB3EF7CE}" = CCC Help Russian
"{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel® Turbo Boost Technology Driver
"{DA4BF4BE-3CDC-43B5-BBDA-DDDA73103111}" = Corel PaintShop Photo Pro X3
"{DBE31207-21B1-5688-450E-9B958643FD2C}" = CCC Help Norwegian
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DCD941B6-F2E7-4FAF-B102-F7D4DE5FF99A}" = IPM_PSP_Pro
"{DCF1928A-FC01-48E7-A7E6-4651D42EF6A1}" = PSPPRO_DCRAW
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DDE59617-F59A-473B-BC4E-C2B81F6CD38D}" = Command & Conquer™ Red Alert™ 3 Uprising
"{DE311B9A-4C1D-C746-264E-DB2A5C6DD2ED}" = CCC Help French
"{DF8B9311-ADE7-4EDE-B121-326CAA3D225D}" = PSPPContent
"{DFC63A26-1EF4-A666-BE94-1DF7351DA7BE}" = CCC Help Dutch
"{E0724276-6980-47E2-8FF2-88F473805773}_is1" = WinUndelete 3.50
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{F069C491-69E6-4D9B-9A0C-B7894A1FA97C}" = Setup
"{F072CA07-A781-45E4-9975-C033A73019CF}" = ICA
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F206FEC3-F5DD-43FD-A8CF-9C46B8A6A92C}" = VSPro
"{F4E9851F-765E-40B7-9859-237C2724E62C}" = DeviceIO
"{F6A76E9C-C299-4CFA-AD2A-57FE9DD68B70}" = Contents
"{F82C1FF3-4B7A-49B2-ACF7-5AE402C4C0CB}" = Call of Duty® 4 - Modern Warfare™
"{F8423392-2296-4748-9B66-344432459632}" = PureHD
"{F909BD3C-8684-4ACF-B7C3-33F4F9F901B7}" = Share
"{F95C8C1F-25BB-44EC-A7E6-5C17ABC6BC71}" = VIO
"{FB0B6DDD-DF3E-4CD6-927C-724AB854E322}" = VSClassic
"{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"{FBBCD35F-930F-9B68-7A80-A668A68FE86A}" = CCC Help German
"{FD67D9F3-FED6-4A2E-9D6C-8C8C44DEF8FF}" = IPM_VS_Pro
"{FD7F0DB8-0E96-4D64-AD4D-9B5A936AF2A8}" = LightScribe System Software
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE661711-E392-4B3F-A4A7-02C747C09134}" = ISCOM
"{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}" = Nero Burning ROM 10
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1" = Times Reader
"Data Viewer_is1" = Data Viewer [removed]
"Download Manager" = Download Manager 2.3.10
"DSDownloader_is1" = DSDownloader 2.2.2.6
"DVDFab 8 Qt_is1" = DVDFab 8.1.1.2 (08/08/2011) Qt
"DVDFab 8_is1" = DVDFab 8.0.8.5 (19/03/2011)
"Fences Pro" = Fences Pro
"HP DVB-T TV Tuner" = HP DVB-T TV Tuner 8.0.64.43
"HP Photo Creations" = HP Photo Creations
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{F82C1FF3-4B7A-49B2-ACF7-5AE402C4C0CB}" = Call of Duty® 4 - Modern Warfare™
"InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"Kobo" = Kobo
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"MotoConnect" = MotoConnect 1.1.31
"Mozilla Firefox 7.0.1 (x86 en-US)" = Mozilla Firefox 7.0.1 (x86 en-US)
"My HP Game Console" = HP Game Console
"Revo Uninstaller" = Revo Uninstaller 1.93
"STANDARDR" = Microsoft Office Standard 2007
"Steam App 12170" = Grand Theft Auto
"Steam App 1510" = Uplink
"Steam App 2100" = Dark Messiah Might and Magic Single Player
"Steam App 21980" = Call of Juarez: Bound in Blood
"Steam App 240" = Counter-Strike: Source
"Steam App 2420" = The Ship Single Player
"Steam App 24200" = DC Universe Online
"Steam App 300" = Day of Defeat: Source
"Steam App 400" = Portal
"Steam App 440" = Team Fortress 2
"Steam App 5" = Dedicated Server
"Steam App 80" = Counter-Strike: Condition Zero
"Steam App 9880" = Champions Online: Free For All
"TurboTax 2010" = TurboTax 2010
"Webroot Software" = Webroot Software
"WildTangent hp Master Uninstall" = HP Games
"WinAce Archiver" = WinAce Archiver
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinLiveSuite" = Windows Live Essentials
"WT087328" = Blackhawk Striker 2
"WT087330" = Bounce Symphony
"WT087335" = Build-a-lot 2
"WT087343" = Dora's World Adventure
"WT087360" = Escape Rosecliff Island
"WT087361" = FATE
"WT087362" = Final Drive Nitro
"WT087372" = Heroes of Hellas 2 - Olympia
"WT087379" = Jewel Quest Solitaire 2
"WT087394" = Penguins!
"WT087395" = Poker Superstars III
"WT087396" = Polar Bowler
"WT087397" = Polar Golfer
"WT087414" = Virtual Families
"WT087415" = Wheel of Fortune 2
"WT087428" = Bejeweled 2 Deluxe
"WT087453" = Chuzzle Deluxe
"WT087501" = Plants vs. Zombies
"WT087533" = Zuma Deluxe
"WT087536" = Diner Dash 2 Restaurant Rescue
"WT089299" = Mystery P.I. - The London Caper
"WT089307" = Virtual Villagers 4 - The Tree of Life
"WT089308" = Blasterball 3
"WT089328" = Farm Frenzy
"WT089359" = Cake Mania
"WT089362" = Agatha Christie - Peril at End House
"ZumoDrive" = HP CloudDrive

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"HuluDesktop" = Hulu Desktop

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/22/2011 15:35:29 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68b4f069 Faulting
process id: 0x468 Faulting application start time: 0x01cc90eecdb873fb Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: ff53eece-fce4-11e0-9260-f01a70ba97d0

Error - 10/22/2011 18:17:12 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68b4f069 Faulting
process id: 0x428 Faulting application start time: 0x01cc90f9297211f4 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 96cb2917-fcfb-11e0-9260-f01a70ba97d0

Error - 10/23/2011 01:50:25 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68a7f069 Faulting
process id: 0x1e94 Faulting application start time: 0x01cc9133b0d61088 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: e706aaac-fd3a-11e0-9260-f01a70ba97d0

Error - 10/23/2011 13:04:37 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x13a8 Faulting application start time: 0x01cc9199228eb806 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 16527435-fd99-11e0-9260-f01a70ba97d0

Error - 10/23/2011 17:47:44 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x23a0 Faulting application start time: 0x01cc91b9419bd773 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: a3287423-fdc0-11e0-9260-f01a70ba97d0

Error - 10/23/2011 19:02:15 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68a7f069 Faulting
process id: 0x198 Faulting application start time: 0x01cc91d12f1eae2d Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 0beebea8-fdcb-11e0-9260-f01a70ba97d0

Error - 10/23/2011 23:19:02 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x2308 Faulting application start time: 0x01cc91de51a457e7 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: eb384e90-fdee-11e0-9260-f01a70ba97d0

Error - 10/24/2011 20:01:55 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x6875f069 Faulting
process id: 0x16a4 Faulting application start time: 0x01cc92a6a2f4dabe Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 8c968a2e-fe9c-11e0-9650-817a995772dc

Error - 10/24/2011 20:20:53 | Computer Name = cuda-laptop | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\diablosport\trinity
drivers\DPInst\DPInst_MultiLin_ia64.exe". Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 10/25/2011 19:25:26 | Computer Name = cuda-laptop | Source = Application Hang | ID = 1002
Description = The program HPDVDSmart.exe version 4.2.1.4521 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 117c Start
Time: 01cc936d492292ae Termination Time: 15 Application Path: C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe

Report
Id: 9b3a39a9-ff60-11e0-ae64-dc5c72d87de7

[ Hewlett-Packard Events ]
Error - 3/19/2011 22:46:36 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = en-US Object reference not set to an instance of an object. HP.ActiveSupportLibrary

at HP.ActiveSupportLibrary.Issues.HPSFSession.?()

Error - 5/26/2011 20:47:30 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\051126084726.xml
File not created by asset agent

Error - 6/9/2011 17:10:34 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\061109051029.xml
File not created by asset agent

Error - 8/18/2011 12:38:11 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\081118123807.xml
File not created by asset agent

[ HP Wireless Assistant Events ]
Error - 2/4/2011 23:55:13 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:55:41 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:57:10 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:57:39 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:59:08 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:59:37 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 8/24/2011 20:29:54 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Exception GetDeviceInfo() failed : 597 at HP_Common.CaslWrapper.GetDeviceInfo(List`1&
radioList) at HPPA_Service.CurrentConfiguration.ReloadRadioList()

Error - 11/11/2011 19:41:15 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


Error - 11/11/2011 20:33:45 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


Error - 11/11/2011 20:34:15 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


[ Media Center Events ]
Error - 6/1/2011 02:48:49 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 2:48:27 AM - Failed to retrieve SportsV2 (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 10/26/2011 18:30:50 | Computer Name = cuda-laptop | Source = Microsoft-Windows-Media Center Extender | ID = 538
Description =

Error - 10/27/2011 19:02:27 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:02:27 PM - Failed to retrieve Directory (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 11/8/2011 02:20:59 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:20:59 AM - Failed to retrieve NetTV (Error: The operation has timed
out)

Error - 11/8/2011 02:21:20 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:21:20 AM - Failed to retrieve MCEClientUX (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:21:41 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:21:41 AM - Failed to retrieve SportsSchedule (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:22:23 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:22:02 AM - Failed to retrieve SportsV2 (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:22:49 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:22:44 AM - Failed to retrieve Broadband (Error: Unable to connect
to the remote server)

Error - 11/10/2011 08:15:54 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:15:54 AM - Error connecting to the internet. 7:15:54 AM - Unable
to contact server..

Error - 11/10/2011 08:16:16 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:16:01 AM - Error connecting to the internet. 7:16:01 AM - Unable
to contact server..

[ System Events ]
Error - 11/12/2011 22:08:28 | Computer Name = cuda-laptop | Source = DCOM | ID = 10005
Description =

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068


< End of report >
Post #23
extras.txt

OTL Extras logfile created on: 11/12/2011 22:20:57 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benton\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.80 Gb Total Physical Memory | 4.56 Gb Available Physical Memory | 78.54% Memory free
11.60 Gb Paging File | 10.56 Gb Available in Paging File | 90.99% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 566.37 Gb Total Space | 347.58 Gb Free Space | 61.37% Space Free | Partition Type: NTFS
Drive D: | 29.50 Gb Total Space | 4.33 Gb Free Space | 14.68% Space Free | Partition Type: NTFS
Drive G: | 99.34 Mb Total Space | 88.70 Mb Free Space | 89.29% Space Free | Partition Type: FAT32

Computer Name: CUDA-LAPTOP | User Name: Benton | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.scr [@ = scrfile] – Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile [print] – rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with Corel PaintShop Photo Pro X3] – "c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with Corel PaintShop Photo Pro X3] – "c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{007811BF-E310-4285-BFC6-55DB29B3EDDE}" = WinPatrol
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{09BDCC02-80F2-4EFB-8F1B-A807D2C38E31}" = HP MediaSmart Movies and TV
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences Pro
"{13DCC2C7-454D-42F0-A892-E0E9A5DE4E67}" = HP Wireless Assistant
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{22441735-5983-AD2A-5CC5-FA2CCD7EF732}" = ATI Stream SDK v2 Developer
"{2677AAE2-D8F8-40AE-9149-67618ED43EFD}_is1" = Trinity USB Drivers 1.1.1.1
"{26A24AE4-039D-4CA4-87B4-2F86416021FF}" = Java™ 6 Update 21 (64-bit)
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{426FAE9F-7373-496E-A215-9DB7EF4398CF}" = Validity Sensors DDK
"{4327107B-E95E-415C-9194-458FCED6BF12}" = Intel® PROSet/Wireless WiFi Software
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4F26C164-9373-4974-8F43-E0F2176AF937}" = Intel WiMAX Tutorial
"{563F041C-DFDB-437B-A1E8-E141E0906076}" = Microsoft IntelliPoint 8.0
"{5783F2D7-A001-0409-0102-0060B0CE6BBA}" = AutoCAD 2012 - English
"{5783F2D7-A001-0409-1102-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - English
"{5BF97E02-2F6A-412A-BB4D-B6E2DC65FCA7}" = HP SimplePass Identity Protection
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6548B189-BEA4-4041-80E0-AEB60548E046}" = Intel® PROSet/Wireless WiMAX Software
"{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}" = Network64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{82ED9FB2-55AF-4A61-A6F3-506CEE112779}" = Motorola Mobile Drivers Installation 4.7.1
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{91DDAB49-487B-4649-93CE-81F6B3423051}" = HP Officejet 6000 E609 Series
"{929685C0-FC01-45E1-8B39-2948E8FF861E}" = Intel® Wireless Display
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{AE57C044-8912-A181-A0E4-BC2DAB3A092A}" = ATI Catalyst Install Manager
"{BE6725F2-6D15-477C-86C6-4522B8569D62}" = HP MediaSmart SmartMenu
"{C84FFB07-C687-45CF-91C8-868DB8D8C8CD}" = HP 3D DriveGuard
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C7}" = WinZip 16.0
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{E552C39C-C70E-464F-9733-8311331BDD90}" = Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012
"{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6246243-CF06-4E40-8A37-C3B537695C36}" = Share64
"{FED4086D-51A8-E88C-1CF9-BA21A50470EE}" = ccc-utility64
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"B1A8F7E99596998546E45BBBFC8B527A13989809" = Windows Driver Package - DIABLO (usbser) Ports (01/30/2009 1.1.1.1)
"CCleaner" = CCleaner
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"ProInst" = Intel PROSet Wireless
"Shop for HP Supplies" = Shop for HP Supplies
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{D1AEB5DB-04FA-489D-94EF-8600898B93EE}" = Corel PaintShop Photo Pro X3
"_{F072CA07-A781-45E4-9975-C033A73019CF}" = Corel VideoStudio Pro X3
"{003E4AFB-085E-4599-B53E-A15736948F2A}" = Hot Rod American Street Drag
"{00FB9AA8-5FFF-DDCE-DA2E-530994B59217}" = CCC Help Finnish
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"{045C16AD-B2E5-43D0-BB51-2F1987D91038}" = HP Documentation
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05BDC796-3451-4F81-B91D-E98F7ADA76C2}" = TurboTax 2010 WinPerTaxSupport
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D471171-70BF-459B-AF06-9C34329295E7}" = 6000E609_Help
"{0EDEB615-1A60-425E-8306-0E10519C7B55}" = RoxioNow Player
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{120262A6-7A4B-4889-AE85-F5E5688D3683}" = HP MovieStore
"{12A98725-C278-32D9-11CA-ADCFF8D58FEB}" = PX Profile Update
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1991D8C3-8354-2228-401C-D3D105CA2AC4}" = CCC Help Chinese Traditional
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1E6E990A-728D-4700-9B0A-2CA541C93A12}" = Catalyst Control Center - Branding
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{264FE20A-757B-492a-B0C3-4009E2997D8A}" = PictureMover
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java™ 6 Update 29
"{296D8550-CB06-48E4-9A8B-E5034FB64715}" = Command & Conquer™ Red Alert™ 3
"{2D8539EE-3F50-94DB-2605-047B33558C70}" = CCC Help Thai
"{2EA3D6B2-157E-4112-A3AB-BF17E16661C3}" = HP MediaSmart/TouchSmart Netflix
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FF2BBBA-341C-4F36-AB55-7398184733CE}" = CCC Help Italian
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"{31EEA563-3544-4EA1-8773-BCBF83F9627A}" = HP Software Framework
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3782EC09-4000-475E-8A59-9CABD6F03B4C}" = TurboTax 2010 WinPerFedFormset
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3B834B54-EC4B-48E2-BFC6-03FF5DA06F62}" = Adobe Shockwave Player 11.5
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{45F8CDEE-7F2D-4601-B300-EB83DEE8F156}" = TurboTax 2010 wnciper
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{491ADA37-04EE-2ECE-9F86-DDC0106047AC}" = Times Reader
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4F2FCCCF-29F3-44B9-886F-6D16F8417522}" = TurboTax 2010 wrapper
"{4F57C27B-EDF4-4009-BEBA-EA7AA5C7A02D}" = ProductContext
"{504CC891-B140-4E1B-860B-5E4C1DFBA9E3}" = Blio
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{5410C77F-B22F-61FE-7D93-0BEDBC959FF3}" = PX Profile Update
"{551845DB-2D33-474E-B591-0831F0F2FAF6}" = BPDSoftware_Ini
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5719D840-C30E-7DD3-C746-00B3A5C9BD6B}" = CCC Help Korean
"{5EDE7E1A-E386-BB8B-CD77-3B5AF9A8D80B}" = CCC Help Greek
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{670E7FFC-95FF-C425-BD00-91C120352C4B}" = CCC Help Turkish
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{691FCAD9-4A3F-43B9-8EC6-F7EE608D3772}" = 6000E609_eDocs
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6A396792-1CA6-E9E5-9844-512238F70C95}" = CCC Help Swedish
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"{6DC6392C-4D8C-D21E-A0DD-750BD76627F6}" = CCC Help Chinese Standard
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.1.0
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{722CD933-F4A3-4b3b-95D2-2A325BA693DA}" = 6000E609a
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74796D37-75F9-C430-CC1D-FCE8371D5EB3}" = CCC Help English
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7FBDEEDA-ECDB-A348-0FBC-41AD5D852B36}" = Catalyst Control Center Localization All
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{872B1C80-38EC-4A31-A25C-980820593900}" = HP Power Manager
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8AC3E7BB-F819-379B-3F81-255904B67A8A}" = CCC Help Czech
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8B287B75-DF8D-40C8-9620-8E4492C38EF1}" = Webroot Software
"{8C696008-029B-BBA7-9CD3-45596A069D96}" = CCC Help Polish
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{9008D736-35CA-40DB-A2BE-5F32D954E5AA}" = HP MovieStore
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_STANDARDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_STANDARDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_STANDARDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_STANDARDR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91892B48-4503-D842-59A0-842F70503843}" = CCC Help Portuguese
"{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{946B0558-3E7B-D27B-2E95-3A2E99BCB826}" = Catalyst Control Center Graphics Previews Common
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9902DD1A-58CD-EE2D-1401-EF1D07D3D353}" = CCC Help Japanese
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A525E00B-6609-442E-9DCD-64453C233E8D}" = TurboTax 2010 WinPerReleaseEngine
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAD4E5A4-68CD-7957-81EF-8B50DBA5E939}" = CCC Help Danish
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AE8289AB-E18C-36E6-BF9B-99557D9F7517}" = Catalyst Control Center Graphics Previews Vista
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{B719C82F-A3AC-ED37-3E2A-947E5A7BA214}" = CCC Help Hungarian
"{BB1C717E-376C-4AA1-8940-81BFC38D9778}" = HP Quick Launch
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C7AAB32A-AA73-ECFD-4F43-F41CFA2CD540}" = ccc-core-static
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CBE7EB3D-FBD9-4c74-8156-082D055C0354}" = BPDSoftware
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"{D1612A3D-0DCC-4055-BB6A-0036F31158A0}" = Setup
"{D1AEB5DB-04FA-489D-94EF-8600898B93EE}" = ICA
"{D1F80EFD-A032-4E8E-A367-70C44AD4DCE0}" = ISCOM
"{D22002ED-EE2A-4CB1-A63D-430E62A2E8D8}" = Google SketchUp 8
"{D3538C4C-8DAF-88CD-55B0-CBF12DECF5A6}" = CCC Help Spanish
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D57588F6-2D35-42B5-5C96-4FC3EB3EF7CE}" = CCC Help Russian
"{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel® Turbo Boost Technology Driver
"{DA4BF4BE-3CDC-43B5-BBDA-DDDA73103111}" = Corel PaintShop Photo Pro X3
"{DBE31207-21B1-5688-450E-9B958643FD2C}" = CCC Help Norwegian
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DCD941B6-F2E7-4FAF-B102-F7D4DE5FF99A}" = IPM_PSP_Pro
"{DCF1928A-FC01-48E7-A7E6-4651D42EF6A1}" = PSPPRO_DCRAW
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DDE59617-F59A-473B-BC4E-C2B81F6CD38D}" = Command & Conquer™ Red Alert™ 3 Uprising
"{DE311B9A-4C1D-C746-264E-DB2A5C6DD2ED}" = CCC Help French
"{DF8B9311-ADE7-4EDE-B121-326CAA3D225D}" = PSPPContent
"{DFC63A26-1EF4-A666-BE94-1DF7351DA7BE}" = CCC Help Dutch
"{E0724276-6980-47E2-8FF2-88F473805773}_is1" = WinUndelete 3.50
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{F069C491-69E6-4D9B-9A0C-B7894A1FA97C}" = Setup
"{F072CA07-A781-45E4-9975-C033A73019CF}" = ICA
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F206FEC3-F5DD-43FD-A8CF-9C46B8A6A92C}" = VSPro
"{F4E9851F-765E-40B7-9859-237C2724E62C}" = DeviceIO
"{F6A76E9C-C299-4CFA-AD2A-57FE9DD68B70}" = Contents
"{F82C1FF3-4B7A-49B2-ACF7-5AE402C4C0CB}" = Call of Duty® 4 - Modern Warfare™
"{F8423392-2296-4748-9B66-344432459632}" = PureHD
"{F909BD3C-8684-4ACF-B7C3-33F4F9F901B7}" = Share
"{F95C8C1F-25BB-44EC-A7E6-5C17ABC6BC71}" = VIO
"{FB0B6DDD-DF3E-4CD6-927C-724AB854E322}" = VSClassic
"{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"{FBBCD35F-930F-9B68-7A80-A668A68FE86A}" = CCC Help German
"{FD67D9F3-FED6-4A2E-9D6C-8C8C44DEF8FF}" = IPM_VS_Pro
"{FD7F0DB8-0E96-4D64-AD4D-9B5A936AF2A8}" = LightScribe System Software
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE661711-E392-4B3F-A4A7-02C747C09134}" = ISCOM
"{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}" = Nero Burning ROM 10
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1" = Times Reader
"Data Viewer_is1" = Data Viewer [removed]
"Download Manager" = Download Manager 2.3.10
"DSDownloader_is1" = DSDownloader 2.2.2.6
"DVDFab 8 Qt_is1" = DVDFab 8.1.1.2 (08/08/2011) Qt
"DVDFab 8_is1" = DVDFab 8.0.8.5 (19/03/2011)
"Fences Pro" = Fences Pro
"HP DVB-T TV Tuner" = HP DVB-T TV Tuner 8.0.64.43
"HP Photo Creations" = HP Photo Creations
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{F82C1FF3-4B7A-49B2-ACF7-5AE402C4C0CB}" = Call of Duty® 4 - Modern Warfare™
"InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"Kobo" = Kobo
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"MotoConnect" = MotoConnect 1.1.31
"Mozilla Firefox 7.0.1 (x86 en-US)" = Mozilla Firefox 7.0.1 (x86 en-US)
"My HP Game Console" = HP Game Console
"Revo Uninstaller" = Revo Uninstaller 1.93
"STANDARDR" = Microsoft Office Standard 2007
"Steam App 12170" = Grand Theft Auto
"Steam App 1510" = Uplink
"Steam App 2100" = Dark Messiah Might and Magic Single Player
"Steam App 21980" = Call of Juarez: Bound in Blood
"Steam App 240" = Counter-Strike: Source
"Steam App 2420" = The Ship Single Player
"Steam App 24200" = DC Universe Online
"Steam App 300" = Day of Defeat: Source
"Steam App 400" = Portal
"Steam App 440" = Team Fortress 2
"Steam App 5" = Dedicated Server
"Steam App 80" = Counter-Strike: Condition Zero
"Steam App 9880" = Champions Online: Free For All
"TurboTax 2010" = TurboTax 2010
"Webroot Software" = Webroot Software
"WildTangent hp Master Uninstall" = HP Games
"WinAce Archiver" = WinAce Archiver
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinLiveSuite" = Windows Live Essentials
"WT087328" = Blackhawk Striker 2
"WT087330" = Bounce Symphony
"WT087335" = Build-a-lot 2
"WT087343" = Dora's World Adventure
"WT087360" = Escape Rosecliff Island
"WT087361" = FATE
"WT087362" = Final Drive Nitro
"WT087372" = Heroes of Hellas 2 - Olympia
"WT087379" = Jewel Quest Solitaire 2
"WT087394" = Penguins!
"WT087395" = Poker Superstars III
"WT087396" = Polar Bowler
"WT087397" = Polar Golfer
"WT087414" = Virtual Families
"WT087415" = Wheel of Fortune 2
"WT087428" = Bejeweled 2 Deluxe
"WT087453" = Chuzzle Deluxe
"WT087501" = Plants vs. Zombies
"WT087533" = Zuma Deluxe
"WT087536" = Diner Dash 2 Restaurant Rescue
"WT089299" = Mystery P.I. - The London Caper
"WT089307" = Virtual Villagers 4 - The Tree of Life
"WT089308" = Blasterball 3
"WT089328" = Farm Frenzy
"WT089359" = Cake Mania
"WT089362" = Agatha Christie - Peril at End House
"ZumoDrive" = HP CloudDrive

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"HuluDesktop" = Hulu Desktop

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/22/2011 15:35:29 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68b4f069 Faulting
process id: 0x468 Faulting application start time: 0x01cc90eecdb873fb Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: ff53eece-fce4-11e0-9260-f01a70ba97d0

Error - 10/22/2011 18:17:12 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68b4f069 Faulting
process id: 0x428 Faulting application start time: 0x01cc90f9297211f4 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 96cb2917-fcfb-11e0-9260-f01a70ba97d0

Error - 10/23/2011 01:50:25 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68a7f069 Faulting
process id: 0x1e94 Faulting application start time: 0x01cc9133b0d61088 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: e706aaac-fd3a-11e0-9260-f01a70ba97d0

Error - 10/23/2011 13:04:37 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x13a8 Faulting application start time: 0x01cc9199228eb806 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 16527435-fd99-11e0-9260-f01a70ba97d0

Error - 10/23/2011 17:47:44 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x23a0 Faulting application start time: 0x01cc91b9419bd773 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: a3287423-fdc0-11e0-9260-f01a70ba97d0

Error - 10/23/2011 19:02:15 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68a7f069 Faulting
process id: 0x198 Faulting application start time: 0x01cc91d12f1eae2d Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 0beebea8-fdcb-11e0-9260-f01a70ba97d0

Error - 10/23/2011 23:19:02 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x2308 Faulting application start time: 0x01cc91de51a457e7 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: eb384e90-fdee-11e0-9260-f01a70ba97d0

Error - 10/24/2011 20:01:55 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x6875f069 Faulting
process id: 0x16a4 Faulting application start time: 0x01cc92a6a2f4dabe Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 8c968a2e-fe9c-11e0-9650-817a995772dc

Error - 10/24/2011 20:20:53 | Computer Name = cuda-laptop | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\diablosport\trinity
drivers\DPInst\DPInst_MultiLin_ia64.exe". Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 10/25/2011 19:25:26 | Computer Name = cuda-laptop | Source = Application Hang | ID = 1002
Description = The program HPDVDSmart.exe version 4.2.1.4521 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 117c Start
Time: 01cc936d492292ae Termination Time: 15 Application Path: C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe

Report
Id: 9b3a39a9-ff60-11e0-ae64-dc5c72d87de7

[ Hewlett-Packard Events ]
Error - 3/19/2011 22:46:36 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = en-US Object reference not set to an instance of an object. HP.ActiveSupportLibrary

at HP.ActiveSupportLibrary.Issues.HPSFSession.?()

Error - 5/26/2011 20:47:30 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\051126084726.xml
File not created by asset agent

Error - 6/9/2011 17:10:34 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\061109051029.xml
File not created by asset agent

Error - 8/18/2011 12:38:11 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\081118123807.xml
File not created by asset agent

[ HP Wireless Assistant Events ]
Error - 2/4/2011 23:55:13 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:55:41 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:57:10 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:57:39 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:59:08 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:59:37 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 8/24/2011 20:29:54 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Exception GetDeviceInfo() failed : 597 at HP_Common.CaslWrapper.GetDeviceInfo(List`1&
radioList) at HPPA_Service.CurrentConfiguration.ReloadRadioList()

Error - 11/11/2011 19:41:15 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


Error - 11/11/2011 20:33:45 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


Error - 11/11/2011 20:34:15 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


[ Media Center Events ]
Error - 6/1/2011 02:48:49 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 2:48:27 AM - Failed to retrieve SportsV2 (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 10/26/2011 18:30:50 | Computer Name = cuda-laptop | Source = Microsoft-Windows-Media Center Extender | ID = 538
Description =

Error - 10/27/2011 19:02:27 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:02:27 PM - Failed to retrieve Directory (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 11/8/2011 02:20:59 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:20:59 AM - Failed to retrieve NetTV (Error: The operation has timed
out)

Error - 11/8/2011 02:21:20 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:21:20 AM - Failed to retrieve MCEClientUX (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:21:41 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:21:41 AM - Failed to retrieve SportsSchedule (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:22:23 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:22:02 AM - Failed to retrieve SportsV2 (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:22:49 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:22:44 AM - Failed to retrieve Broadband (Error: Unable to connect
to the remote server)

Error - 11/10/2011 08:15:54 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:15:54 AM - Error connecting to the internet. 7:15:54 AM - Unable
to contact server..

Error - 11/10/2011 08:16:16 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:16:01 AM - Error connecting to the internet. 7:16:01 AM - Unable
to contact server..

[ System Events ]
Error - 11/12/2011 22:08:28 | Computer Name = cuda-laptop | Source = DCOM | ID = 10005
Description =

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068


< End of report >
Post #24
extras.txt

OTL Extras logfile created on: 11/12/2011 22:20:57 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benton\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.80 Gb Total Physical Memory | 4.56 Gb Available Physical Memory | 78.54% Memory free
11.60 Gb Paging File | 10.56 Gb Available in Paging File | 90.99% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 566.37 Gb Total Space | 347.58 Gb Free Space | 61.37% Space Free | Partition Type: NTFS
Drive D: | 29.50 Gb Total Space | 4.33 Gb Free Space | 14.68% Space Free | Partition Type: NTFS
Drive G: | 99.34 Mb Total Space | 88.70 Mb Free Space | 89.29% Space Free | Partition Type: FAT32

Computer Name: CUDA-LAPTOP | User Name: Benton | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.scr [@ = scrfile] – Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile [print] – rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with Corel PaintShop Photo Pro X3] – "c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with Corel PaintShop Photo Pro X3] – "c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\Corel Paint Shop Pro Photo.exe" "%L" (Corel, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{007811BF-E310-4285-BFC6-55DB29B3EDDE}" = WinPatrol
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{09BDCC02-80F2-4EFB-8F1B-A807D2C38E31}" = HP MediaSmart Movies and TV
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences Pro
"{13DCC2C7-454D-42F0-A892-E0E9A5DE4E67}" = HP Wireless Assistant
"{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant
"{22441735-5983-AD2A-5CC5-FA2CCD7EF732}" = ATI Stream SDK v2 Developer
"{2677AAE2-D8F8-40AE-9149-67618ED43EFD}_is1" = Trinity USB Drivers 1.1.1.1
"{26A24AE4-039D-4CA4-87B4-2F86416021FF}" = Java™ 6 Update 21 (64-bit)
"{2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2}" = HP Client Services
"{426FAE9F-7373-496E-A215-9DB7EF4398CF}" = Validity Sensors DDK
"{4327107B-E95E-415C-9194-458FCED6BF12}" = Intel® PROSet/Wireless WiFi Software
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4F26C164-9373-4974-8F43-E0F2176AF937}" = Intel WiMAX Tutorial
"{563F041C-DFDB-437B-A1E8-E141E0906076}" = Microsoft IntelliPoint 8.0
"{5783F2D7-A001-0409-0102-0060B0CE6BBA}" = AutoCAD 2012 - English
"{5783F2D7-A001-0409-1102-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - English
"{5BF97E02-2F6A-412A-BB4D-B6E2DC65FCA7}" = HP SimplePass Identity Protection
"{5EB6F3CB-46F4-451F-A028-7F6D8D35D7D0}" = Windows Live Language Selector
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6548B189-BEA4-4041-80E0-AEB60548E046}" = Intel® PROSet/Wireless WiMAX Software
"{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}" = Network64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{82ED9FB2-55AF-4A61-A6F3-506CEE112779}" = Motorola Mobile Drivers Installation 4.7.1
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2007
"{90120000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007
"{91DDAB49-487B-4649-93CE-81F6B3423051}" = HP Officejet 6000 E609 Series
"{929685C0-FC01-45E1-8B39-2948E8FF861E}" = Intel® Wireless Display
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{AE57C044-8912-A181-A0E4-BC2DAB3A092A}" = ATI Catalyst Install Manager
"{BE6725F2-6D15-477C-86C6-4522B8569D62}" = HP MediaSmart SmartMenu
"{C84FFB07-C687-45CF-91C8-868DB8D8C8CD}" = HP 3D DriveGuard
"{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C7}" = WinZip 16.0
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{E552C39C-C70E-464F-9733-8311331BDD90}" = Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012
"{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6246243-CF06-4E40-8A37-C3B537695C36}" = Share64
"{FED4086D-51A8-E88C-1CF9-BA21A50470EE}" = ccc-utility64
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"B1A8F7E99596998546E45BBBFC8B527A13989809" = Windows Driver Package - DIABLO (usbser) Ports (01/30/2009 1.1.1.1)
"CCleaner" = CCleaner
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"ProInst" = Intel PROSet Wireless
"Shop for HP Supplies" = Shop for HP Supplies
"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{D1AEB5DB-04FA-489D-94EF-8600898B93EE}" = Corel PaintShop Photo Pro X3
"_{F072CA07-A781-45E4-9975-C033A73019CF}" = Corel VideoStudio Pro X3
"{003E4AFB-085E-4599-B53E-A15736948F2A}" = Hot Rod American Street Drag
"{00FB9AA8-5FFF-DDCE-DA2E-530994B59217}" = CCC Help Finnish
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"{045C16AD-B2E5-43D0-BB51-2F1987D91038}" = HP Documentation
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05BDC796-3451-4F81-B91D-E98F7ADA76C2}" = TurboTax 2010 WinPerTaxSupport
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D471171-70BF-459B-AF06-9C34329295E7}" = 6000E609_Help
"{0EDEB615-1A60-425E-8306-0E10519C7B55}" = RoxioNow Player
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{120262A6-7A4B-4889-AE85-F5E5688D3683}" = HP MovieStore
"{12A98725-C278-32D9-11CA-ADCFF8D58FEB}" = PX Profile Update
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1991D8C3-8354-2228-401C-D3D105CA2AC4}" = CCC Help Chinese Traditional
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1E6E990A-728D-4700-9B0A-2CA541C93A12}" = Catalyst Control Center - Branding
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{264FE20A-757B-492a-B0C3-4009E2997D8A}" = PictureMover
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java™ 6 Update 29
"{296D8550-CB06-48E4-9A8B-E5034FB64715}" = Command & Conquer™ Red Alert™ 3
"{2D8539EE-3F50-94DB-2605-047B33558C70}" = CCC Help Thai
"{2EA3D6B2-157E-4112-A3AB-BF17E16661C3}" = HP MediaSmart/TouchSmart Netflix
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2FF2BBBA-341C-4F36-AB55-7398184733CE}" = CCC Help Italian
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"{31EEA563-3544-4EA1-8773-BCBF83F9627A}" = HP Software Framework
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3782EC09-4000-475E-8A59-9CABD6F03B4C}" = TurboTax 2010 WinPerFedFormset
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3B834B54-EC4B-48E2-BFC6-03FF5DA06F62}" = Adobe Shockwave Player 11.5
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{45F8CDEE-7F2D-4601-B300-EB83DEE8F156}" = TurboTax 2010 wnciper
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{491ADA37-04EE-2ECE-9F86-DDC0106047AC}" = Times Reader
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4F2FCCCF-29F3-44B9-886F-6D16F8417522}" = TurboTax 2010 wrapper
"{4F57C27B-EDF4-4009-BEBA-EA7AA5C7A02D}" = ProductContext
"{504CC891-B140-4E1B-860B-5E4C1DFBA9E3}" = Blio
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{5410C77F-B22F-61FE-7D93-0BEDBC959FF3}" = PX Profile Update
"{551845DB-2D33-474E-B591-0831F0F2FAF6}" = BPDSoftware_Ini
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5719D840-C30E-7DD3-C746-00B3A5C9BD6B}" = CCC Help Korean
"{5EDE7E1A-E386-BB8B-CD77-3B5AF9A8D80B}" = CCC Help Greek
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{670E7FFC-95FF-C425-BD00-91C120352C4B}" = CCC Help Turkish
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{691FCAD9-4A3F-43B9-8EC6-F7EE608D3772}" = 6000E609_eDocs
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6A396792-1CA6-E9E5-9844-512238F70C95}" = CCC Help Swedish
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"{6DC6392C-4D8C-D21E-A0DD-750BD76627F6}" = CCC Help Chinese Standard
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.1.0
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{722CD933-F4A3-4b3b-95D2-2A325BA693DA}" = 6000E609a
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74796D37-75F9-C430-CC1D-FCE8371D5EB3}" = CCC Help English
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7FBDEEDA-ECDB-A348-0FBC-41AD5D852B36}" = Catalyst Control Center Localization All
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{872B1C80-38EC-4A31-A25C-980820593900}" = HP Power Manager
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8AC3E7BB-F819-379B-3F81-255904B67A8A}" = CCC Help Czech
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8B287B75-DF8D-40C8-9620-8E4492C38EF1}" = Webroot Software
"{8C696008-029B-BBA7-9CD3-45596A069D96}" = CCC Help Polish
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{9008D736-35CA-40DB-A2BE-5F32D954E5AA}" = HP MovieStore
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_STANDARDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_STANDARDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_STANDARDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_STANDARDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_STANDARDR_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0409-1000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0116-0409-1000-0000000FF1CE}_STANDARDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0012-0000-0000-0000000FF1CE}_STANDARDR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{91892B48-4503-D842-59A0-842F70503843}" = CCC Help Portuguese
"{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{946B0558-3E7B-D27B-2E95-3A2E99BCB826}" = Catalyst Control Center Graphics Previews Common
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9902DD1A-58CD-EE2D-1401-EF1D07D3D353}" = CCC Help Japanese
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A525E00B-6609-442E-9DCD-64453C233E8D}" = TurboTax 2010 WinPerReleaseEngine
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAD4E5A4-68CD-7957-81EF-8B50DBA5E939}" = CCC Help Danish
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AE8289AB-E18C-36E6-BF9B-99557D9F7517}" = Catalyst Control Center Graphics Previews Vista
"{AE856388-AFAD-4753-81DF-D96B19D0A17C}" = HP Setup Manager
"{B719C82F-A3AC-ED37-3E2A-947E5A7BA214}" = CCC Help Hungarian
"{BB1C717E-376C-4AA1-8940-81BFC38D9778}" = HP Quick Launch
"{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}" = Energy Star Digital Logo
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C7AAB32A-AA73-ECFD-4F43-F41CFA2CD540}" = ccc-core-static
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CBE7EB3D-FBD9-4c74-8156-082D055C0354}" = BPDSoftware
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"{D1612A3D-0DCC-4055-BB6A-0036F31158A0}" = Setup
"{D1AEB5DB-04FA-489D-94EF-8600898B93EE}" = ICA
"{D1F80EFD-A032-4E8E-A367-70C44AD4DCE0}" = ISCOM
"{D22002ED-EE2A-4CB1-A63D-430E62A2E8D8}" = Google SketchUp 8
"{D3538C4C-8DAF-88CD-55B0-CBF12DECF5A6}" = CCC Help Spanish
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D57588F6-2D35-42B5-5C96-4FC3EB3EF7CE}" = CCC Help Russian
"{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel® Turbo Boost Technology Driver
"{DA4BF4BE-3CDC-43B5-BBDA-DDDA73103111}" = Corel PaintShop Photo Pro X3
"{DBE31207-21B1-5688-450E-9B958643FD2C}" = CCC Help Norwegian
"{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"{DCD941B6-F2E7-4FAF-B102-F7D4DE5FF99A}" = IPM_PSP_Pro
"{DCF1928A-FC01-48E7-A7E6-4651D42EF6A1}" = PSPPRO_DCRAW
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DDE59617-F59A-473B-BC4E-C2B81F6CD38D}" = Command & Conquer™ Red Alert™ 3 Uprising
"{DE311B9A-4C1D-C746-264E-DB2A5C6DD2ED}" = CCC Help French
"{DF8B9311-ADE7-4EDE-B121-326CAA3D225D}" = PSPPContent
"{DFC63A26-1EF4-A666-BE94-1DF7351DA7BE}" = CCC Help Dutch
"{E0724276-6980-47E2-8FF2-88F473805773}_is1" = WinUndelete 3.50
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{F069C491-69E6-4D9B-9A0C-B7894A1FA97C}" = Setup
"{F072CA07-A781-45E4-9975-C033A73019CF}" = ICA
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F206FEC3-F5DD-43FD-A8CF-9C46B8A6A92C}" = VSPro
"{F4E9851F-765E-40B7-9859-237C2724E62C}" = DeviceIO
"{F6A76E9C-C299-4CFA-AD2A-57FE9DD68B70}" = Contents
"{F82C1FF3-4B7A-49B2-ACF7-5AE402C4C0CB}" = Call of Duty® 4 - Modern Warfare™
"{F8423392-2296-4748-9B66-344432459632}" = PureHD
"{F909BD3C-8684-4ACF-B7C3-33F4F9F901B7}" = Share
"{F95C8C1F-25BB-44EC-A7E6-5C17ABC6BC71}" = VIO
"{FB0B6DDD-DF3E-4CD6-927C-724AB854E322}" = VSClassic
"{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"{FBBCD35F-930F-9B68-7A80-A668A68FE86A}" = CCC Help German
"{FD67D9F3-FED6-4A2E-9D6C-8C8C44DEF8FF}" = IPM_VS_Pro
"{FD7F0DB8-0E96-4D64-AD4D-9B5A936AF2A8}" = LightScribe System Software
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE661711-E392-4B3F-A4A7-02C747C09134}" = ISCOM
"{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}" = Nero Burning ROM 10
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1" = Times Reader
"Data Viewer_is1" = Data Viewer [removed]
"Download Manager" = Download Manager 2.3.10
"DSDownloader_is1" = DSDownloader 2.2.2.6
"DVDFab 8 Qt_is1" = DVDFab 8.1.1.2 (08/08/2011) Qt
"DVDFab 8_is1" = DVDFab 8.0.8.5 (19/03/2011)
"Fences Pro" = Fences Pro
"HP DVB-T TV Tuner" = HP DVB-T TV Tuner 8.0.64.43
"HP Photo Creations" = HP Photo Creations
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = HP MediaSmart Webcam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}" = Movie Theme Pack for HP MediaSmart Video
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}" = HP MediaSmart Photo
"InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}" = HP MediaSmart Music
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}" = HP MediaSmart Video
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}" = HP MediaSmart DVD
"InstallShield_{F82C1FF3-4B7A-49B2-ACF7-5AE402C4C0CB}" = Call of Duty® 4 - Modern Warfare™
"InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}" = DVD Menu Pack for HP MediaSmart Video
"Kobo" = Kobo
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"MotoConnect" = MotoConnect 1.1.31
"Mozilla Firefox 7.0.1 (x86 en-US)" = Mozilla Firefox 7.0.1 (x86 en-US)
"My HP Game Console" = HP Game Console
"Revo Uninstaller" = Revo Uninstaller 1.93
"STANDARDR" = Microsoft Office Standard 2007
"Steam App 12170" = Grand Theft Auto
"Steam App 1510" = Uplink
"Steam App 2100" = Dark Messiah Might and Magic Single Player
"Steam App 21980" = Call of Juarez: Bound in Blood
"Steam App 240" = Counter-Strike: Source
"Steam App 2420" = The Ship Single Player
"Steam App 24200" = DC Universe Online
"Steam App 300" = Day of Defeat: Source
"Steam App 400" = Portal
"Steam App 440" = Team Fortress 2
"Steam App 5" = Dedicated Server
"Steam App 80" = Counter-Strike: Condition Zero
"Steam App 9880" = Champions Online: Free For All
"TurboTax 2010" = TurboTax 2010
"Webroot Software" = Webroot Software
"WildTangent hp Master Uninstall" = HP Games
"WinAce Archiver" = WinAce Archiver
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinLiveSuite" = Windows Live Essentials
"WT087328" = Blackhawk Striker 2
"WT087330" = Bounce Symphony
"WT087335" = Build-a-lot 2
"WT087343" = Dora's World Adventure
"WT087360" = Escape Rosecliff Island
"WT087361" = FATE
"WT087362" = Final Drive Nitro
"WT087372" = Heroes of Hellas 2 - Olympia
"WT087379" = Jewel Quest Solitaire 2
"WT087394" = Penguins!
"WT087395" = Poker Superstars III
"WT087396" = Polar Bowler
"WT087397" = Polar Golfer
"WT087414" = Virtual Families
"WT087415" = Wheel of Fortune 2
"WT087428" = Bejeweled 2 Deluxe
"WT087453" = Chuzzle Deluxe
"WT087501" = Plants vs. Zombies
"WT087533" = Zuma Deluxe
"WT087536" = Diner Dash 2 Restaurant Rescue
"WT089299" = Mystery P.I. - The London Caper
"WT089307" = Virtual Villagers 4 - The Tree of Life
"WT089308" = Blasterball 3
"WT089328" = Farm Frenzy
"WT089359" = Cake Mania
"WT089362" = Agatha Christie - Peril at End House
"ZumoDrive" = HP CloudDrive

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"HuluDesktop" = Hulu Desktop

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10/22/2011 15:35:29 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68b4f069 Faulting
process id: 0x468 Faulting application start time: 0x01cc90eecdb873fb Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: ff53eece-fce4-11e0-9260-f01a70ba97d0

Error - 10/22/2011 18:17:12 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68b4f069 Faulting
process id: 0x428 Faulting application start time: 0x01cc90f9297211f4 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 96cb2917-fcfb-11e0-9260-f01a70ba97d0

Error - 10/23/2011 01:50:25 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68a7f069 Faulting
process id: 0x1e94 Faulting application start time: 0x01cc9133b0d61088 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: e706aaac-fd3a-11e0-9260-f01a70ba97d0

Error - 10/23/2011 13:04:37 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x13a8 Faulting application start time: 0x01cc9199228eb806 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 16527435-fd99-11e0-9260-f01a70ba97d0

Error - 10/23/2011 17:47:44 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x23a0 Faulting application start time: 0x01cc91b9419bd773 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: a3287423-fdc0-11e0-9260-f01a70ba97d0

Error - 10/23/2011 19:02:15 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68a7f069 Faulting
process id: 0x198 Faulting application start time: 0x01cc91d12f1eae2d Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 0beebea8-fdcb-11e0-9260-f01a70ba97d0

Error - 10/23/2011 23:19:02 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x68aff069 Faulting
process id: 0x2308 Faulting application start time: 0x01cc91de51a457e7 Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: eb384e90-fdee-11e0-9260-f01a70ba97d0

Error - 10/24/2011 20:01:55 | Computer Name = cuda-laptop | Source = Application Error | ID = 1000
Description = Faulting application name: hl2.exe, version: 0.0.0.0, time stamp:
0x4e989cd3 Faulting module name: filesystem_steam.dll_unloaded, version: 0.0.0.0,
time stamp: 0x4e98ad0c Exception code: 0xc0000005 Fault offset: 0x6875f069 Faulting
process id: 0x16a4 Faulting application start time: 0x01cc92a6a2f4dabe Faulting application
path: c:\program files (x86)\steam\steamapps\[removed]\counter-strike
source\hl2.exe Faulting module path: filesystem_steam.dll Report Id: 8c968a2e-fe9c-11e0-9650-817a995772dc

Error - 10/24/2011 20:20:53 | Computer Name = cuda-laptop | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "c:\program files\diablosport\trinity
drivers\DPInst\DPInst_MultiLin_ia64.exe". Dependent Assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="ia64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 10/25/2011 19:25:26 | Computer Name = cuda-laptop | Source = Application Hang | ID = 1002
Description = The program HPDVDSmart.exe version 4.2.1.4521 stopped interacting
with Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 117c Start
Time: 01cc936d492292ae Termination Time: 15 Application Path: C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe

Report
Id: 9b3a39a9-ff60-11e0-ae64-dc5c72d87de7

[ Hewlett-Packard Events ]
Error - 3/19/2011 22:46:36 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = en-US Object reference not set to an instance of an object. HP.ActiveSupportLibrary

at HP.ActiveSupportLibrary.Issues.HPSFSession.?()

Error - 5/26/2011 20:47:30 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\051126084726.xml
File not created by asset agent

Error - 6/9/2011 17:10:34 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\061109051029.xml
File not created by asset agent

Error - 8/18/2011 12:38:11 | Computer Name = cuda-laptop | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\081118123807.xml
File not created by asset agent

[ HP Wireless Assistant Events ]
Error - 2/4/2011 23:55:13 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:55:41 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:57:10 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:57:39 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:59:08 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 2/4/2011 23:59:37 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Runtime.InteropServices.COMException The RPC server is unavailable.
(Exception from HRESULT: 0x800706BA) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32
errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object
o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObject.Initialize(Boolean
getObject) at System.Management.ManagementBaseObject.get_Properties() at System.Management.ManagementBaseObject.GetPropertyValue(String
propertyName) at HPPA_Service.CurrentConfiguration.b__c()

Error - 8/24/2011 20:29:54 | Computer Name = cuda-laptop | Source = HP WA Service | ID = 0
Description = System.Exception GetDeviceInfo() failed : 597 at HP_Common.CaslWrapper.GetDeviceInfo(List`1&
radioList) at HPPA_Service.CurrentConfiguration.ReloadRadioList()

Error - 11/11/2011 19:41:15 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


Error - 11/11/2011 20:33:45 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


Error - 11/11/2011 20:34:15 | Computer Name = cuda-laptop | Source = HP WA Application | ID = 0
Description = System.Exception SendDesktopNotification() failed : e_GENERAL_EXCEPTION


[ Media Center Events ]
Error - 6/1/2011 02:48:49 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 2:48:27 AM - Failed to retrieve SportsV2 (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 10/26/2011 18:30:50 | Computer Name = cuda-laptop | Source = Microsoft-Windows-Media Center Extender | ID = 538
Description =

Error - 10/27/2011 19:02:27 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:02:27 PM - Failed to retrieve Directory (Error: The underlying connection
was closed: Could not establish trust relationship for the SSL/TLS secure channel.)


Error - 11/8/2011 02:20:59 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:20:59 AM - Failed to retrieve NetTV (Error: The operation has timed
out)

Error - 11/8/2011 02:21:20 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:21:20 AM - Failed to retrieve MCEClientUX (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:21:41 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:21:41 AM - Failed to retrieve SportsSchedule (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:22:23 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:22:02 AM - Failed to retrieve SportsV2 (Error: Unable to connect
to the remote server)

Error - 11/8/2011 02:22:49 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 1:22:44 AM - Failed to retrieve Broadband (Error: Unable to connect
to the remote server)

Error - 11/10/2011 08:15:54 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:15:54 AM - Error connecting to the internet. 7:15:54 AM - Unable
to contact server..

Error - 11/10/2011 08:16:16 | Computer Name = cuda-laptop | Source = MCUpdate | ID = 0
Description = 7:16:01 AM - Error connecting to the internet. 7:16:01 AM - Unable
to contact server..

[ System Events ]
Error - 11/12/2011 22:08:28 | Computer Name = cuda-laptop | Source = DCOM | ID = 10005
Description =

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:49 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068

Error - 11/12/2011 23:21:50 | Computer Name = cuda-laptop | Source = Service Control Manager | ID = 7001
Description = The Computer Browser service depends on the Server service which failed
to start because of the following error: %%1068


< End of report >
Post #25
Hi z0ne,

Please remove your copy of SystemLook by using right-click > delete on the icon. Then download a new copy from either of the following two links
Link 1
Link 2

  • Right-click and Run as Administrator SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    :filefind
consrv.dll

:dir
c:\users\Benton\AppData\Local\SCE /s
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Post #26
SystemLook 30.07.11 by jpshortstuff Log created at 13:30 on 13/11/2011 by Benton Administrator - Elevation successful ========== filefind ========== Searching for "consrv.dll" No files found. ========== dir ========== c:\users\Benton\AppData\Local\SCE - Parameters: "/s" —Files— None found. c:\users\Benton\AppData\Local\SCE\CrashReport d—— [11:15 03/11/2011] -= EOF =-
Post #27
Hi z0ne,

Please download and run ERUNT (Emergency Recovery Utility NT). This program allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed. **Remember if you are using Windows Vista as your operating system right-click the executable and Run as Administrator.
———-

Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :Services

:OTL
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - mmswsock.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - mmswsock.dll File not found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
[2011/11/06 17:40:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\WHsWELRYk
[2011/11/06 17:40:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\z1voFm5JEg9XjeB
[2011/11/06 17:40:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DDb4Gs6E8ZTjeyS
[2011/11/06 17:40:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GVtyvF5EZj
[2011/11/06 17:40:26 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\SkUeBPycAv
[2011/11/06 17:40:24 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\qbF3pnG5aHdKfLg
[2011/11/06 17:40:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\OkrOtxAuc2bpGaH
[2011/11/06 17:40:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GpnG4aQH6W7LgZj
[2011/11/06 17:40:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fbHf9YkrzxciD
[2011/11/06 17:40:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\BS5f9YkrzxciD
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\YLgqYkrOtAuSi
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wpnG5HdKLgqYkrO
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wnaH6dWf9XYkrOt
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wFH6dKf9XYkrOtA
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\vONx0SbFHd
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KLTjekIBNAFnaHd
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KH6dWf9XYkrOtAu
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\INx0SbFH6Kf9
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AnaH6dWf9XYkrOt
[2011/11/06 17:40:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AbFpnG5Hd7LgqYk
[2011/11/06 17:40:17 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\k1vo4HQd8ZYjeB
[2011/11/06 17:40:17 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fnH7gXezAoG6fhU
[2011/11/06 17:40:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ZN0vbGdLqCIN
[2011/11/06 17:40:13 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\dKhVP2mKTCNoa8h
[2011/11/06 17:40:12 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\oXkVOz0ciDn45Jd
[2011/11/06 17:40:11 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\N2p6Eqrx1nJZV03
[2011/11/06 17:40:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\pRXINvn6RXkO
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\qwUrBPyi3n4Hs7E
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\jwUrBPyi3n4Hs7E
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\CPc1Dnms7LTqrP
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cHdWK7fRLgXjCkV
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cHdK7fRL9TqYeIr
[2011/11/06 17:40:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cdWK7fRL9TqYeIr
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\yRhqUCkzNAv
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\p8LTjUCIz
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\HLTjUCIzy0S
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\gJ6dWK8fR9TqUIz
[2011/11/06 17:40:04 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\CIzNxu2bpGa6WRh
[2011/11/06 17:40:03 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Wu2Fms6dER9XUlB
[2011/11/06 17:40:03 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\SdEK8fRZ9XUlz
[2011/11/06 17:40:03 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\HER9XUeIzNx
[2011/11/06 17:40:03 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GUeIzNxu2bpGa6W
[2011/11/06 17:40:02 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\VRqwUlt0A
[2011/11/06 17:40:02 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\TWdLgRqwUlt0Avo
[2011/11/06 17:40:01 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fCkrNPci3Gms7LT
[2011/11/06 17:40:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\T9COvpd9kxi4KqI
[2011/11/06 17:40:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hSbp4HsKEgqCkrN
[2011/11/06 17:39:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\n1ibD3onG
[2011/11/06 17:39:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lZqjYCwkIrOt
[2011/11/06 17:39:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ZNtxA0ucS
[2011/11/06 17:39:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ku2bF3pnGQ6KR9
[2011/11/06 17:39:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\IVrzONtxAuSiDpG
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\OeIzNc1DoFm5dRh
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\npGQ6ER9hUeI
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hhXjelIBr
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DlIBrzPNyAuSoF
[2011/11/06 17:39:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\d3pmG5aQJ
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\R1omsd8ZYwV
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ksgYUltNcuDbpGQ
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\JXUltNcu2Fps
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cDH8wB1FsEg9XUl
[2011/11/06 17:39:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\c2npHs7Kg9YweIz
[2011/11/06 17:39:44 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\BosRjIyv3Q8jzuF
[2011/11/06 17:39:41 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Tu1ib34HsJEgZCU
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\tYkIVOtAuSiDnaH
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\tjekIVrOtAuSb4Q
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GH6dWK7fR9TqYkV
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\E9gTXqjYCkVzN
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\E9gTXqjekVOtA
[2011/11/06 17:39:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\E9gqCVtciDGQ6
[2011/11/06 17:39:39 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\PBzNy1Sob3m
[2011/11/06 17:39:39 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\FjUlBzy1v
[2011/11/06 17:39:39 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Du2bFp5QJdKfLhX
[2011/11/06 17:39:38 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\vo4ms6E8ZT
[2011/11/06 17:39:38 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KlItNc1Do4ms6E8
[2011/11/06 17:39:38 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\H5Jd8RhXUeItNcv
[2011/11/06 17:39:36 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\jzNxc2pQs7EgqYw
[2011/11/06 17:39:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mYwUltNAv2bpGs6
[2011/11/06 17:39:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\jtzP0ycA1v2n4Hs
[2011/11/06 17:39:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\J6sWJ7fEL
[2011/11/06 17:39:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hvD3oFas7EgZ
[2011/11/06 17:39:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hvD3oFaHs7E8
[2011/11/06 17:39:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hvD3o4msJEgZ
[2011/11/06 17:39:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wUkBzyAv2b3n5
[2011/11/06 17:39:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ju2F3pnG5Q6W7R9
[2011/11/06 17:39:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\JnG4aQH6s
[2011/11/06 17:39:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\FF3pnG5aQ6W7
[2011/11/06 17:39:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Ko4GQ6KRhwUlrNA
[2011/11/06 17:39:28 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\aLRqXUltPc1Dn4H
[2011/11/06 17:39:27 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\JgZYwVOt0Sb3n4H
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\x2obF3pmGaJ
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\x2obF3pG5Q6
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\x2obF3mG5Q6
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\NK8fRL9hTqUeIrO
[2011/11/06 17:39:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fkIBrzONyAuSi
[2011/11/06 17:39:22 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\TIVrlONtx0c1b3n
[2011/11/06 17:39:21 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\tnG5aQH6dKfLgXj
[2011/11/06 17:39:21 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\A5aQH6dWK
[2011/11/06 17:36:55 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KNNNyxxA1uv2oF3
[2011/11/06 17:36:50 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wcccA11uvD2oFpG
[2011/11/06 17:36:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\oAAA1iivD2o
[2011/11/06 17:36:45 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\VNNNyccA1uvDob4
[2011/11/06 17:36:44 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AA11iivD2onF
[2011/11/06 17:36:40 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hwjUUVeelItz
[2011/11/06 17:36:39 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\CqqhhYXXwkUelB
[2011/11/06 17:36:35 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\wJJ77dEKK8RZ9Yw
[2011/11/06 17:36:34 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ChhhYXXwkUV
[2011/11/06 17:36:30 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cQJJ7ddEK8gR
[2011/11/06 17:36:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\emmmH55sWJ7EL8
[2011/11/06 17:36:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\qzPPP0ycA1iv
[2011/11/06 17:36:24 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\UlllOBBtxP0yS1
[2011/11/06 17:36:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DqqqhYYXwkUVlOt
[2011/11/06 17:36:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\errllOBttP0
[2011/11/06 17:36:15 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\tssJJ7ddEL8RZhY
[2011/11/06 17:36:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\WJJJ77fEL8gT
[2011/11/06 17:36:10 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lBttzzP0ycA1vDo
[2011/11/06 17:36:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lS11iivD3onFam5
[2011/11/06 17:36:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\T33oonF44aH5sJ7
[2011/11/06 17:36:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\eoonnF44pmH
[2011/11/06 17:36:01 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\asssQJJ7dEKgR
[2011/11/06 17:36:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\p888gRRZqhYXkUe
[2011/11/06 17:35:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\SXXwwkUUVelBtP0
[2011/11/06 17:35:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mjUUVVelIBtzNyA
[2011/11/06 17:35:46 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\nFF44pmmH5sJ7EK
[2011/11/06 17:35:46 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\FJJJ7ddEL
[2011/11/06 17:35:41 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mvvDD2oonFpmH
[2011/11/06 17:35:41 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\BDDD2obbF4
[2011/11/06 17:35:36 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\pJJJ77dEK8gR9hX
[2011/11/06 17:35:36 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mmHH55sWJ7dE8gZ
[2011/11/06 17:35:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GhhYYXwwkU
[2011/11/06 17:35:30 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\cZZqqhYCwkUV
[2011/11/06 17:35:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DfEEL99gTZq
[2011/11/06 17:35:24 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\DHH66dWWK7f
[2011/11/06 17:35:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\E55aaQH66dK7fLg
[2011/11/06 17:35:18 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\V2oobbF3pmG5QJd
[2011/11/06 17:35:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hjjUCeekIBrzNyA
[2011/11/06 17:35:13 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ijUUCCelIBrzNyA
[2011/11/06 17:35:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\j9hhTTXqjUCeIBz
[2011/11/06 17:35:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\EffRRL9gTX
[2011/11/06 17:35:01 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AhYCwkUVrOtPySi
[2011/11/06 17:35:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\QaQH6dWK7R9TqY
[2011/11/06 17:34:49 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\y4G5sQJ6dKfZhX
[2011/11/06 17:34:48 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\TXwkUVelOtPyAiD
[2011/11/06 17:34:43 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\WVelOBtzPyAiDoF
[2011/11/06 17:34:42 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fH6sWJ7fE8
[2011/11/06 17:34:37 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\f5sWJ7dELgZhXkV
[2011/11/06 17:34:36 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\TG4amH6sW
[2011/11/06 17:34:32 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\KS1D3onG4m6W7E8
[2011/11/06 17:34:31 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\S7fRL9gTXjCkVzN
[2011/11/06 17:34:26 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\O9gTXqjYCkVzNx0
[2011/11/06 17:34:25 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fyxA1uvS2b3m5Q6
[2011/11/06 17:34:20 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\s9hTXqjUCkBzNx0
[2011/11/06 17:34:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\mNycA1uvDoFpGsJ
[2011/11/06 17:34:15 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\OyxA1uvS2b3m5Q6
[2011/11/06 17:34:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GEEEK88gZ9YXwUV
[2011/11/06 17:34:10 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\amGG55sQJ6
[2011/11/06 17:34:09 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\kGG55sQJ6dEK8R
[2011/11/06 17:34:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\R666dEEK8fR9hX
[2011/11/06 17:34:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\B88ffRL9hTXqU
[2011/11/06 17:34:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\vZZ99hTXXwUCeIr
[2011/11/06 17:34:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\s555aaQJ6dfRLhX
[2011/11/06 17:33:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\PHHH6ddWK7f
[2011/11/06 17:33:51 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\GbFF33pmG5
[2011/11/06 17:33:47 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\XyyxxA0uuv2ib
[2011/11/06 17:33:46 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lAA11uvSSobF3m5
[2011/11/06 17:33:42 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\B33ppnGG5aQ6dK7
[2011/11/06 17:33:41 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\H3ppmmG5aQJ6WKf
[2011/11/06 17:33:38 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\qwwwkIIVrlON
[2011/11/06 17:33:37 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\FVVrrzOONtx0uS2
[2011/11/06 17:33:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\OHH66sWWJ7
[2011/11/06 17:33:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\lfffELL9gTZjYwk
[2011/11/06 17:33:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ZkkUVVrlOBtxPyS
[2011/11/06 17:33:28 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ZZZqqjYCCwIVrOt
[2011/11/06 17:33:24 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\JgTTZZqhY
[2011/11/06 17:33:23 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\QYYYCwwkIVrONtP
[2011/11/06 17:33:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\gSS11ivDDonF4m5
[2011/11/06 17:33:19 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\fnnnGG4amH6sJ
[2011/11/06 17:33:15 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\ndddELL8gRZq
[2011/11/06 17:33:14 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\EgggTTZqhYCwUVl
[2011/11/06 17:33:10 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\EwwkkUVeelBtz0y
[2011/11/06 17:33:10 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AkkUUVrrlOBxPyc
[2011/11/06 17:33:06 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\r22oobF4p
[2011/11/06 17:33:05 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\hvvDD2oonF4m
[2011/11/06 17:33:01 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\peeelIIBtzPN
[2011/11/06 17:33:00 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\AiivvD2on
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[2011/10/26 17:25:42 | 000,004,608 | —- | M] () – C:\Users\Benton\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/11/03 06:15:55 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\SCE

:Files
ipconfig /flushdns /c

:Commands
[purity]
[clearallrestorepoints]
[resethosts]
[emptytemp]
[start explorer]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then run a new scan and post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )

In your next reply please post the log created after the fix was ran and also the newly created OTL log. :)
Post #28
OTL logfile created on: 11/13/2011 15:26:57 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Benton\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.80 Gb Total Physical Memory | 4.77 Gb Available Physical Memory | 82.19% Memory free
11.60 Gb Paging File | 10.60 Gb Available in Paging File | 91.39% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 566.37 Gb Total Space | 347.56 Gb Free Space | 61.37% Space Free | Partition Type: NTFS
Drive D: | 29.50 Gb Total Space | 4.33 Gb Free Space | 14.68% Space Free | Partition Type: NTFS
Drive G: | 99.34 Mb Total Space | 88.70 Mb Free Space | 89.29% Space Free | Partition Type: FAT32

Computer Name: CUDA-LAPTOP | User Name: Benton | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Benton\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Webroot\Security\Current\Framework\WRConsumerService.exe (Webroot Software, Inc. )
PRC - C:\Program Files (x86)\Webroot\Security\Current\plugins\antimalware\AEI.exe (Webroot Software, Inc. (www.webroot.com))
PRC - C:\Program Files (x86)\Webroot\Security\Current\plugins\cleanup\WRCleanupEngine.exe (Webroot Software, Inc.)


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV:64bit: - (FLEXnet Licensing Service 64) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Flexera Software, Inc.)
SRV:64bit: - (DpHost) – C:\Program Files\DigitalPersona\Bin\DpHostW.exe (DigitalPersona, Inc.)
SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (HPClientSvc) – C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Hewlett-Packard Company)
SRV:64bit: - (STacSV) – C:\Program Files\IDT\WDM\stacsv64.exe (IDT, Inc.)
SRV:64bit: - (HP Wireless Assistant Service) – C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Hewlett-Packard Company)
SRV:64bit: - (EvtEng) – C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel® Corporation)
SRV:64bit: - (MyWiFiDHCPDNS) – C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe ()
SRV:64bit: - (RegSrvc) – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation)
SRV:64bit: - (hpsrv) – C:\Windows\SysNative\hpservice.exe (Hewlett-Packard Company)
SRV:64bit: - (WiMAXAppSrv) – C:\Program Files\Intel\WiMAX\Bin\AppSrv.exe (Intel® Corporation)
SRV:64bit: - (DMAgent) – C:\Program Files\Intel\WiMAX\Bin\DMAgent.exe (Red Bend Ltd.)
SRV:64bit: - (vcsFPService) – C:\Windows\SysNative\vcsFPService.exe (Validity Sensors, Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AESTFilters) – C:\Program Files\IDT\WDM\AESTSr64.exe (Andrea Electronics Corporation)
SRV - (WRConsumerService) – C:\Program Files (x86)\Webroot\Security\Current\Framework\WRConsumerService.exe (Webroot Software, Inc. )
SRV - (WebrootSpySweeperService) – C:\Program Files (x86)\Webroot\Security\current\plugins\antimalware\AEI.exe (Webroot Software, Inc. (www.webroot.com))
SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (HPDrvMntSvc.exe) – C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company)
SRV - (HPWMISVC) – C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Development Company, L.P.)
SRV - (HPSLPSVC) – C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
SRV - (RoxioNow Service) – C:\Program Files (x86)\Roxio\RoxioNow Player\RNowSvc.exe (Roxio)
SRV - (IntuitUpdateService) – C:\Program Files (x86)\Common Files\Intuit\Update Service\IntuitUpdateService.exe (Intuit Inc.)
SRV - (MotoConnect Service) – C:\Program Files (x86)\Motorola\MotoConnectService\MotoConnectService.exe ()
SRV - (GameConsoleService) – C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (NAUpdate) – C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (UNS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (PSI_SVC_2) – c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
SRV - (vcsFPService) – C:\Windows\SysWOW64\vcsFPService.exe (Validity Sensors, Inc.)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (pwipf6) – C:\Windows\SysNative\drivers\pwipf6.sys (Privacyware/PWI, Inc.)
DRV:64bit: - (ssidrv) – C:\Windows\SysNative\drivers\ssidrv.sys (Webroot Software, Inc. (www.webroot.com))
DRV:64bit: - (ssfmonm) – C:\Windows\SysNative\drivers\ssfmonm.sys (Webroot Software, Inc. (www.webroot.com))
DRV:64bit: - (NETwNs64) ___ Intel® – C:\Windows\SysNative\drivers\NETwNs64.sys (Intel Corporation)
DRV:64bit: - (sptd) – C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (AtiHDAudioService) – C:\Windows\SysNative\drivers\AtihdW76.sys (Advanced Micro Devices)
DRV:64bit: - (CbFs) – C:\Windows\SysNative\drivers\cbfs64.sys (EldoS Corporation)
DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (clwvd) – C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation)
DRV:64bit: - (wdkmd) – C:\Windows\SysNative\drivers\WDKMD.sys (Intel Corporation)
DRV:64bit: - (intelkmd) – C:\Windows\SysNative\drivers\igdpmd64.sys (Intel Corporation)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (STHDA) – C:\Windows\SysNative\drivers\stwrt64.sys (IDT, Inc.)
DRV:64bit: - (Point64) – C:\Windows\SysNative\drivers\point64.sys (Microsoft Corporation)
DRV:64bit: - (hpdskflt) – C:\Windows\SysNative\drivers\hpdskflt.sys (Hewlett-Packard Company)
DRV:64bit: - (Accelerometer) – C:\Windows\SysNative\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (motmodem) – C:\Windows\SysNative\drivers\motmodem.sys (Motorola)
DRV:64bit: - (motccgp) – C:\Windows\SysNative\drivers\motccgp.sys (Motorola)
DRV:64bit: - (bpmp) Intel® Centrino® – C:\Windows\SysNative\drivers\bpmp.sys (Intel Corporation)
DRV:64bit: - (bpusb) – C:\Windows\SysNative\drivers\bpusb.sys (Intel Corporation)
DRV:64bit: - (bpenum) – C:\Windows\SysNative\drivers\bpenum.sys (Intel Corporation)
DRV:64bit: - (AtiHdmiService) – C:\Windows\SysNative\drivers\AtiHdmi.sys (ATI Technologies, Inc.)
DRV:64bit: - (HECIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (Motousbnet) – C:\Windows\SysNative\drivers\Motousbnet.sys (Motorola)
DRV:64bit: - (motusbdevice) – C:\Windows\SysNative\drivers\motusbdevice.sys (Motorola Inc)
DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (Impcd) – C:\Windows\SysNative\drivers\Impcd.sys (Intel Corporation)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (WSDPrintDevice) – C:\Windows\SysNative\drivers\WSDPrint.sys (Microsoft Corporation)
DRV:64bit: - (SrvHsfV92) – C:\Windows\SysNative\drivers\VSTDPV6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfWinac) – C:\Windows\SysNative\drivers\VSTCNXT6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (SrvHsfHDA) – C:\Windows\SysNative\drivers\VSTAZL6.SYS (Conexant Systems, Inc.)
DRV:64bit: - (yukonw7) – C:\Windows\SysNative\drivers\yk62x64.sys (Marvell)
DRV:64bit: - (netw5v64) Intel® – C:\Windows\SysNative\drivers\netw5v64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (motccgpfl) – C:\Windows\SysNative\drivers\motccgpfl.sys (Motorola)
DRV:64bit: - (BTCFilterService) – C:\Windows\SysNative\drivers\motfilt.sys (Motorola Inc)
DRV:64bit: - (Ser2pl) – C:\Windows\SysNative\drivers\ser2pl64.sys (Prolific Technology Inc.)
DRV:64bit: - (WDC_SAM) – C:\Windows\SysNative\drivers\wdcsam64.sys (Western Digital Technologies)
DRV:64bit: - (MotoSwitchService) – C:\Windows\SysNative\drivers\motswch.sys (Motorola)
DRV - (libusb0) – C:\Windows\SysWOW64\drivers\libusb0.sys (http://libusb-win32.sourceforge.net)
DRV - (wrssweep) – C:\Program Files (x86)\Webroot\Security\Current\plugins\cleanup\wrssweep.sys (Webroot Software Inc (www.webroot.com))
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://g.msn.com/HPNOT/1
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/hypercam/{08F5E8…1-99AB2DD58CA0}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledItems: [removed]:5.0.0.4490
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..network.proxy.type: 0

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@fileplanet.com/fpdlm: C:\Program Files (x86)\Download Manager\npfpdlm.dll (IGN Entertainment)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@photoproduct.rocketlife.com/RocketLife App Viewer;version=0.8: File not found
FF - HKCU\Software\MozillaPlugins\@hulu.com/Hulu Desktop: C:\Users\Benton\AppData\Local\HuluDesktop\instances\0.9.14.1\nphdplg.dll (Hulu LLC)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Benton\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ [2010/12/15 04:11:54 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{3DF533F5-FB3C-4c4c-A1D7-99717F8C3038}: C:\Program Files (x86)\Webroot\Security\current\plugins\browserextension\ff_ptc\ [2011/08/15 17:15:02 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011/11/03 19:17:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/11/08 17:20:43 | 000,000,000 | —D | M]

[2011/02/04 22:40:34 | 000,000,000 | —D | M] (No name found) – C:\Users\Benton\AppData\Roaming\Mozilla\Extensions
[2011/09/12 21:48:02 | 000,000,000 | —D | M] (No name found) – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\extensions
[2011/09/12 21:48:02 | 000,000,000 | —D | M] (Webroot) – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\extensions\{8ac62a8b-8b3f-43ba-9b1a-90c299b9dfda}
[2011/07/23 08:45:09 | 000,002,374 | —- | M] () – C:\Users\Benton\AppData\Roaming\Mozilla\Firefox\Profiles\dh9p4v9x.default\searchplugins\search.xml
[2011/11/07 23:45:48 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/03/22 21:11:37 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2011/09/06 11:25:16 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/11/07 23:45:48 | 000,000,000 | —D | M] (Java Console) – C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011/08/15 17:15:02 | 000,000,000 | —D | M] (Webroot malicious URL filtering) – C:\PROGRAM FILES (X86)\WEBROOT\SECURITY\CURRENT\PLUGINS\BROWSEREXTENSION\FF_PTC
[2011/09/30 16:30:22 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011/05/16 21:46:34 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\mozilla firefox\plugins\NPcol400.dll
[2011/10/03 05:06:04 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 03:00:00 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

========== Chrome ==========


O1 HOSTS File: ([2011/11/13 15:18:23 | 000,000,098 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Webroot Browser Helper Object) - {c8d5d964-2be8-4c5b-8cf5-6e975aa88504} - C:\Program Files (x86)\Webroot\Security\install\products\WISC\toolbar\LPBar.dll (Webroot Software, Inc.)
O2 - BHO: (WebrootBHO Class) - {D93EC24D-8741-4D41-B83D-A5793B998416} - C:\Program Files (x86)\Webroot\Security\Current\plugins\browserextension\WebrootBHO.dll (Webroot Software, Inc.)
O3 - HKLM\..\Toolbar: (Webroot Toolbar) - {97ab88ef-346b-4179-a0b1-7445896547a5} - C:\Program Files (x86)\Webroot\Security\install\products\WISC\toolbar\LPBar.dll (Webroot Software, Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe ()
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [IntelWirelessWiMAX] C:\Program Files\Intel\WiMAX\Bin\WiMAXCU.exe (Intel® Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [SmartMenu] C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe ()
O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe (IDT, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [WebrootTrayApp] C:\Program Files (x86)\Webroot\Security\Current\Framework\WRTray.exe (Webroot Software, Inc. )
O4 - HKCU..\Run: [igndlm.exe] C:\Program Files (x86)\Download Manager\DLM.exe (IGN Entertainment)
O4 - HKCU..\Run: [ISUSPM] C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Acresso Corporation)
O4 - Startup: C:\Users\Benton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files (x86)\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EBA12C3E-2801-40F4-A02A-5F372C411AA6}: DhcpNameServer = 192.168.0.1
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (systempropertiesperformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O22:64bit: - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences Pro\FencesMenu64.dll (Stardock)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/11/13 15:18:18 | 000,000,000 | —D | C] – C:\_OTL
[2011/11/13 15:08:37 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2011/11/13 15:08:37 | 000,000,000 | —D | C] – C:\Program Files (x86)\ERUNT
[2011/11/13 15:07:48 | 000,791,393 | —- | C] (Lars Hederer ) – C:\Users\Benton\Desktop\erunt-setup.exe
[2011/11/12 22:18:13 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Benton\Desktop\OTL.exe
[2011/11/12 17:57:05 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2011/11/11 18:33:59 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2011/11/11 18:33:59 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2011/11/11 18:33:59 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2011/11/11 18:33:50 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2011/11/11 18:33:43 | 000,000,000 | —D | C] – C:\Qoobox
[2011/11/11 17:28:00 | 000,000,000 | —D | C] – C:\TDSSKiller_Quarantine
[2011/11/11 17:21:29 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\WinZip
[2011/11/11 17:21:01 | 004,290,913 | R— | C] (Swearware) – C:\Users\Benton\Desktop\ComboFix.exe.exe
[2011/11/11 15:48:16 | 001,564,976 | —- | C] (Kaspersky Lab ZAO) – C:\Users\Benton\Desktop\TDSSKiller.exe
[2011/11/10 21:10:52 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2011/11/10 21:10:44 | 000,000,000 | —D | C] – C:\Program Files\WinZip
[2011/11/10 20:49:31 | 001,916,416 | —- | C] (AVAST Software) – C:\Users\Benton\Desktop\aswMBR.exe
[2011/11/10 20:46:54 | 000,607,260 | R— | C] (Swearware) – C:\Users\Benton\Desktop\dds.com
[2011/11/10 18:09:56 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Real
[2011/11/09 20:15:33 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\Norman Malware Cleaner
[2011/11/08 22:54:58 | 000,000,000 | —D | C] – C:\ProgramData\Kaspersky Lab
[2011/11/08 17:17:34 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2011/11/08 07:07:54 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\Java
[2011/11/07 23:45:41 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaws.exe
[2011/11/07 23:45:41 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\javaw.exe
[2011/11/07 23:45:41 | 000,145,184 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\SysWow64\java.exe
[2011/11/07 23:10:28 | 000,000,000 | —D | C] – C:\Windows\TEMP
[2011/11/06 21:41:30 | 000,000,000 | —D | C] – C:\Users\Benton\Documents\My Digital Editions
[2011/11/06 21:21:07 | 000,000,000 | —D | C] – C:\Users\Benton\AppData\Local\Kobo
[2011/11/06 21:21:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kobo
[2011/11/06 21:20:21 | 000,000,000 | —D | C] – C:\Program Files (x86)\Kobo
[2011/11/03 06:15:29 | 000,527,192 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_7.dll
[2011/11/03 06:15:29 | 000,518,488 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_7.dll
[2011/11/03 06:15:29 | 000,077,656 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_5.dll
[2011/11/03 06:15:29 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_5.dll
[2011/11/03 06:15:27 | 000,239,960 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_7.dll
[2011/11/03 06:15:27 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_7.dll
[2011/11/03 06:15:26 | 002,526,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DCompiler_43.dll
[2011/11/03 06:15:26 | 002,106,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DCompiler_43.dll
[2011/11/03 06:15:26 | 001,907,552 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dcsx_43.dll
[2011/11/03 06:15:26 | 001,868,128 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dcsx_43.dll
[2011/11/03 06:15:25 | 000,511,328 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx10_43.dll
[2011/11/03 06:15:25 | 000,470,880 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx10_43.dll
[2011/11/03 06:15:25 | 000,276,832 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3dx11_43.dll
[2011/11/03 06:15:25 | 000,248,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3dx11_43.dll
[2011/11/03 06:15:24 | 002,401,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\D3DX9_43.dll
[2011/11/03 06:15:24 | 001,998,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\D3DX9_43.dll
[2011/11/03 06:15:23 | 000,530,776 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAudio2_6.dll
[2011/11/03 06:15:23 | 000,528,216 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAudio2_6.dll
[2011/11/03 06:15:23 | 000,078,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\XAPOFX1_4.dll
[2011/11/03 06:15:23 | 000,074,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\XAPOFX1_4.dll
[2011/11/03 06:15:21 | 000,238,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\xactengine3_6.dll
[2011/11/03 06:15:21 | 000,176,984 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\xactengine3_6.dll
[2011/11/03 06:15:21 | 000,024,920 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\X3DAudio1_7.dll
[2011/11/03 06:15:21 | 000,022,360 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\X3DAudio1_7.dll
[2011/10/15 08:47:13 | 000,000,000 | —D | C] – C:\Users\Benton\Documents\Call of Juarez - Bound in Blood
[2011/08/15 17:13:58 | 006,285,008 | —- | C] (Webroot Software, Inc.) – C:\Program Files (x86)\Common Files\wruninstall.exe

========== Files - Modified Within 30 Days ==========

[2011/11/13 15:23:03 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/11/13 15:22:59 | 377,901,055 | -HS- | M] () – C:\hiberfil.sys
[2011/11/13 15:18:23 | 000,000,098 | —- | M] () – C:\Windows\SysNative\drivers\etc\Hosts
[2011/11/13 15:10:50 | 000,007,612 | —- | M] () – C:\Users\Benton\AppData\Local\Resmon.ResmonCfg
[2011/11/13 15:08:41 | 000,001,104 | —- | M] () – C:\Users\Benton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2011/11/13 15:08:37 | 000,000,924 | —- | M] () – C:\Users\Benton\Desktop\NTREGOPT.lnk
[2011/11/13 15:08:37 | 000,000,905 | —- | M] () – C:\Users\Benton\Desktop\ERUNT.lnk
[2011/11/13 15:07:48 | 000,791,393 | —- | M] (Lars Hederer ) – C:\Users\Benton\Desktop\erunt-setup.exe
[2011/11/13 13:30:08 | 000,165,376 | —- | M] () – C:\Users\Benton\Desktop\SystemLook_x64.exe
[2011/11/13 13:08:01 | 000,000,932 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000UA.job
[2011/11/13 10:03:04 | 000,000,336 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForBenton.job
[2011/11/13 09:42:49 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/13 09:42:49 | 000,023,248 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/13 09:40:42 | 000,783,354 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2011/11/13 09:40:42 | 000,663,472 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2011/11/13 09:40:42 | 000,122,308 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2011/11/13 09:35:49 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011/11/12 22:18:13 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Benton\Desktop\OTL.exe
[2011/11/11 19:08:00 | 000,000,910 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-637982829-1949637309-3597935670-1000Core.job
[2011/11/11 17:21:05 | 004,290,913 | R— | M] (Swearware) – C:\Users\Benton\Desktop\ComboFix.exe.exe
[2011/11/11 17:20:20 | 001,545,878 | —- | M] () – C:\Users\Benton\Desktop\tdsskiller.zip
[2011/11/11 17:16:31 | 000,426,696 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2011/11/11 15:48:16 | 001,564,976 | —- | M] (Kaspersky Lab ZAO) – C:\Users\Benton\Desktop\TDSSKiller.exe
[2011/11/10 21:28:32 | 000,000,512 | —- | M] () – C:\Users\Benton\Desktop\MBR.dat
[2011/11/10 21:14:43 | 000,005,933 | —- | M] () – C:\Users\Benton\Desktop\attach.zip
[2011/11/10 21:10:52 | 000,002,205 | —- | M] () – C:\Users\Public\Desktop\WinZip.lnk
[2011/11/10 20:49:32 | 001,916,416 | —- | M] (AVAST Software) – C:\Users\Benton\Desktop\aswMBR.exe
[2011/11/10 20:47:38 | 000,294,216 | —- | M] () – C:\Users\Benton\Desktop\gmer.zip
[2011/11/10 20:46:57 | 000,607,260 | R— | M] (Swearware) – C:\Users\Benton\Desktop\dds.com
[2011/11/08 23:51:57 | 305,063,108 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/11/08 17:17:35 | 000,001,264 | —- | M] () – C:\Users\Benton\Desktop\Revo Uninstaller.lnk
[2011/11/06 21:22:48 | 000,001,011 | —- | M] () – C:\Users\Public\Desktop\Kobo.lnk
[2011/11/05 14:34:12 | 000,000,222 | —- | M] () – C:\Users\Benton\Desktop\Dark Messiah Might and Magic Single Player.url
[2011/11/04 22:00:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForCUDA-LAPTOP$.job
[2011/11/03 16:53:42 | 000,000,822 | —- | M] () – C:\Users\Public\Desktop\CCleaner.lnk
[2011/11/02 18:45:00 | 000,000,221 | —- | M] () – C:\Users\Benton\Desktop\DC Universe Online.url
[2011/10/26 17:35:19 | 000,000,258 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2011/10/19 11:22:52 | 000,030,424 | —- | M] () – C:\Windows\SysWow64\wrLZMA.dll
[2011/10/19 11:22:34 | 000,019,576 | —- | M] (Webroot Software, Inc. (www.webroot.com)) – C:\Windows\SysNative\SsiEfr.exe

========== Files Created - No Company Name ==========

[2011/11/13 15:08:41 | 000,001,104 | —- | C] () – C:\Users\Benton\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2011/11/13 15:08:37 | 000,000,924 | —- | C] () – C:\Users\Benton\Desktop\NTREGOPT.lnk
[2011/11/13 15:08:37 | 000,000,905 | —- | C] () – C:\Users\Benton\Desktop\ERUNT.lnk
[2011/11/13 13:30:08 | 000,165,376 | —- | C] () – C:\Users\Benton\Desktop\SystemLook_x64.exe
[2011/11/11 18:33:59 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2011/11/11 18:33:59 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2011/11/11 18:33:59 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2011/11/11 18:33:59 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2011/11/11 18:33:59 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2011/11/11 17:20:19 | 001,545,878 | —- | C] () – C:\Users\Benton\Desktop\tdsskiller.zip
[2011/11/10 21:28:32 | 000,000,512 | —- | C] () – C:\Users\Benton\Desktop\MBR.dat
[2011/11/10 21:14:43 | 000,005,933 | —- | C] () – C:\Users\Benton\Desktop\attach.zip
[2011/11/10 21:10:52 | 000,002,205 | —- | C] () – C:\Users\Public\Desktop\WinZip.lnk
[2011/11/10 20:47:37 | 000,294,216 | —- | C] () – C:\Users\Benton\Desktop\gmer.zip
[2011/11/08 23:51:57 | 305,063,108 | —- | C] () – C:\Windows\MEMORY.DMP
[2011/11/08 17:14:12 | 000,007,612 | —- | C] () – C:\Users\Benton\AppData\Local\Resmon.ResmonCfg
[2011/11/06 21:21:02 | 000,001,011 | —- | C] () – C:\Users\Public\Desktop\Kobo.lnk
[2011/11/05 14:34:12 | 000,000,222 | —- | C] () – C:\Users\Benton\Desktop\Dark Messiah Might and Magic Single Player.url
[2011/11/02 18:45:00 | 000,000,221 | —- | C] () – C:\Users\Benton\Desktop\DC Universe Online.url
[2011/08/31 22:10:50 | 000,000,153 | —- | C] () – C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2011/08/31 21:56:51 | 000,796,360 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2011/08/17 13:15:48 | 000,000,064 | —- | C] () – C:\Windows\SysWow64\rp_stats.dat
[2011/08/17 13:15:48 | 000,000,044 | —- | C] () – C:\Windows\SysWow64\rp_rules.dat
[2011/08/15 17:15:00 | 000,030,424 | —- | C] () – C:\Windows\SysWow64\wrLZMA.dll
[2011/05/26 19:47:35 | 000,001,854 | —- | C] () – C:\Users\Benton\AppData\Roaming\GhostObjGAFix.xml
[2011/04/03 17:10:21 | 000,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2011/03/30 19:24:35 | 000,000,333 | —- | C] () – C:\Windows\game.ini
[2011/02/13 23:20:13 | 000,000,040 | —- | C] () – C:\ProgramData\ra3.ini
[2011/02/08 19:57:26 | 000,222,804 | —- | C] () – C:\Windows\hpwins24.dat
[2011/02/04 22:33:57 | 000,000,848 | -HS- | C] () – C:\ProgramData\KGyGaAvL.sys
[2010/12/15 03:49:28 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin
[2010/12/15 03:39:40 | 000,002,857 | —- | C] () – C:\Windows\SysWow64\atipblup.dat
[2010/12/15 03:38:19 | 000,000,299 | —- | C] () – C:\Windows\SysWow64\RStoneLog2.ini
[2010/12/15 03:38:19 | 000,000,240 | —- | C] () – C:\Windows\SysWow64\RStoneLog.ini
[2010/10/16 14:42:34 | 000,000,188 | —- | C] () – C:\Windows\SysWow64\HPWA.ini
[2010/09/21 13:30:44 | 000,007,736 | —- | C] () – C:\Windows\hpDSTRES.DLL
[2010/07/28 17:08:46 | 000,127,868 | —- | C] () – C:\Windows\SysWow64\igcompkrng575.bin
[2010/07/28 17:08:44 | 000,104,796 | —- | C] () – C:\Windows\SysWow64\igfcg575m.bin
[2010/07/28 17:08:42 | 000,870,560 | —- | C] () – C:\Windows\SysWow64\igkrng575.bin
[2010/07/28 16:14:38 | 000,208,896 | —- | C] () – C:\Windows\SysWow64\iglhsip32.dll
[2010/07/28 16:14:38 | 000,143,360 | —- | C] () – C:\Windows\SysWow64\iglhcp32.dll
[2010/06/15 21:28:54 | 000,002,857 | —- | C] () – C:\Windows\SysWow64\atipblag.dat
[2009/11/06 04:53:13 | 000,001,832 | —- | C] () – C:\Windows\hpwmdl24.dat
[2009/07/14 00:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/13 21:35:51 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/13 21:34:42 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/13 19:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/13 18:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/13 16:59:36 | 001,498,564 | —- | C] () – C:\Windows\SysWow64\igkrng400.bin
[2009/07/13 16:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/10 16:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat

< End of report >
Post #29
Hi z0ne,

Was there another log that was created that showed what was deleted? If so could you post that into your next reply please? :)
———-

I see that you have Malwarebytes on your system. Please open Malwarebytes, update it and then run a Quick Scan. Please save the log that is created for your next reply.
———-

I'd like us to scan your machine with ESET Online Scan

Note: It is recommended to disable on-board anti-virus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your anti-virus along with your anti-spyware programs.


As a Vista/Win7 user you will need to right click your browser icon and select "Run as Administrator" in order to run this scan.
  • Do not use this instance of your browser for anything besides doing this scan
  • When the scan is complete and the results saved, close that instance of your browser
  • Open a new one the usual way and post the results in this topic.


  • Right-click and Run as Administartor on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the [external image: Posted Image] button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on [external image: Posted Image] to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the [external image: Posted Image] icon on your desktop.
  • Check [external image: Posted Image]
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Check [external image: Posted Image]
  • Make sure that the option "Remove found threats" is Unchecked
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin
    scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push [external image: Posted Image]
  • Push [external image: Posted Image], and save the file to your desktop using a unique name, such as
    ESETScan. Include the contents of this report in your next reply.
  • Push the Back button.
  • Push Finish
http://www.eset.com/onlinescan/
———-

In your next reply please post the logs created by OTL (if you have it), Malwarebytes and ESET online scanner.
Post #30
Is this it?

All processes killed
========== SERVICES/DRIVERS ==========
========== OTL ==========
64bit-Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000005\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000006\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000007\ deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall\ deleted successfully.
File Protocol\Handler\livecall - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help\ deleted successfully.
File Protocol\Handler\ms-help - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim\ deleted successfully.
File Protocol\Handler\msnim - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlmailhtml\ deleted successfully.
File Protocol\Handler\wlmailhtml - No CLSID value found not found.
64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\wlpg\ deleted successfully.
File Protocol\Handler\wlpg - No CLSID value found not found.
64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\VMApplet:/pagefile deleted successfully.
C:\Users\Benton\AppData\Roaming\WHsWELRYk folder moved successfully.
C:\Users\Benton\AppData\Roaming\z1voFm5JEg9XjeB folder moved successfully.
C:\Users\Benton\AppData\Roaming\DDb4Gs6E8ZTjeyS folder moved successfully.
C:\Users\Benton\AppData\Roaming\GVtyvF5EZj folder moved successfully.
C:\Users\Benton\AppData\Roaming\SkUeBPycAv folder moved successfully.
C:\Users\Benton\AppData\Roaming\qbF3pnG5aHdKfLg folder moved successfully.
C:\Users\Benton\AppData\Roaming\OkrOtxAuc2bpGaH folder moved successfully.
C:\Users\Benton\AppData\Roaming\GpnG4aQH6W7LgZj folder moved successfully.
C:\Users\Benton\AppData\Roaming\fbHf9YkrzxciD folder moved successfully.
C:\Users\Benton\AppData\Roaming\BS5f9YkrzxciD folder moved successfully.
C:\Users\Benton\AppData\Roaming\YLgqYkrOtAuSi folder moved successfully.
C:\Users\Benton\AppData\Roaming\wpnG5HdKLgqYkrO folder moved successfully.
C:\Users\Benton\AppData\Roaming\wnaH6dWf9XYkrOt folder moved successfully.
C:\Users\Benton\AppData\Roaming\wFH6dKf9XYkrOtA folder moved successfully.
C:\Users\Benton\AppData\Roaming\vONx0SbFHd folder moved successfully.
C:\Users\Benton\AppData\Roaming\KLTjekIBNAFnaHd folder moved successfully.
C:\Users\Benton\AppData\Roaming\KH6dWf9XYkrOtAu folder moved successfully.
C:\Users\Benton\AppData\Roaming\INx0SbFH6Kf9 folder moved successfully.
C:\Users\Benton\AppData\Roaming\AnaH6dWf9XYkrOt folder moved successfully.
C:\Users\Benton\AppData\Roaming\AbFpnG5Hd7LgqYk folder moved successfully.
C:\Users\Benton\AppData\Roaming\k1vo4HQd8ZYjeB folder moved successfully.
C:\Users\Benton\AppData\Roaming\fnH7gXezAoG6fhU folder moved successfully.
C:\Users\Benton\AppData\Roaming\ZN0vbGdLqCIN folder moved successfully.
C:\Users\Benton\AppData\Roaming\dKhVP2mKTCNoa8h folder moved successfully.
C:\Users\Benton\AppData\Roaming\oXkVOz0ciDn45Jd folder moved successfully.
C:\Users\Benton\AppData\Roaming\N2p6Eqrx1nJZV03 folder moved successfully.
C:\Users\Benton\AppData\Roaming\pRXINvn6RXkO folder moved successfully.
C:\Users\Benton\AppData\Roaming\qwUrBPyi3n4Hs7E folder moved successfully.
C:\Users\Benton\AppData\Roaming\jwUrBPyi3n4Hs7E folder moved successfully.
C:\Users\Benton\AppData\Roaming\CPc1Dnms7LTqrP folder moved successfully.
C:\Users\Benton\AppData\Roaming\cHdWK7fRLgXjCkV folder moved successfully.
C:\Users\Benton\AppData\Roaming\cHdK7fRL9TqYeIr folder moved successfully.
C:\Users\Benton\AppData\Roaming\cdWK7fRL9TqYeIr folder moved successfully.
C:\Users\Benton\AppData\Roaming\yRhqUCkzNAv folder moved successfully.
C:\Users\Benton\AppData\Roaming\p8LTjUCIz folder moved successfully.
C:\Users\Benton\AppData\Roaming\HLTjUCIzy0S folder moved successfully.
C:\Users\Benton\AppData\Roaming\gJ6dWK8fR9TqUIz folder moved successfully.
C:\Users\Benton\AppData\Roaming\CIzNxu2bpGa6WRh folder moved successfully.
C:\Users\Benton\AppData\Roaming\Wu2Fms6dER9XUlB folder moved successfully.
C:\Users\Benton\AppData\Roaming\SdEK8fRZ9XUlz folder moved successfully.
C:\Users\Benton\AppData\Roaming\HER9XUeIzNx folder moved successfully.
C:\Users\Benton\AppData\Roaming\GUeIzNxu2bpGa6W folder moved successfully.
C:\Users\Benton\AppData\Roaming\VRqwUlt0A folder moved successfully.
C:\Users\Benton\AppData\Roaming\TWdLgRqwUlt0Avo folder moved successfully.
C:\Users\Benton\AppData\Roaming\fCkrNPci3Gms7LT folder moved successfully.
C:\Users\Benton\AppData\Roaming\T9COvpd9kxi4KqI folder moved successfully.
C:\Users\Benton\AppData\Roaming\hSbp4HsKEgqCkrN folder moved successfully.
C:\Users\Benton\AppData\Roaming\n1ibD3onG folder moved successfully.
C:\Users\Benton\AppData\Roaming\lZqjYCwkIrOt folder moved successfully.
C:\Users\Benton\AppData\Roaming\ZNtxA0ucS folder moved successfully.
C:\Users\Benton\AppData\Roaming\ku2bF3pnGQ6KR9 folder moved successfully.
C:\Users\Benton\AppData\Roaming\IVrzONtxAuSiDpG folder moved successfully.
C:\Users\Benton\AppData\Roaming\OeIzNc1DoFm5dRh folder moved successfully.
C:\Users\Benton\AppData\Roaming\npGQ6ER9hUeI folder moved successfully.
C:\Users\Benton\AppData\Roaming\hhXjelIBr folder moved successfully.
C:\Users\Benton\AppData\Roaming\DlIBrzPNyAuSoF folder moved successfully.
C:\Users\Benton\AppData\Roaming\d3pmG5aQJ folder moved successfully.
C:\Users\Benton\AppData\Roaming\R1omsd8ZYwV folder moved successfully.
C:\Users\Benton\AppData\Roaming\ksgYUltNcuDbpGQ folder moved successfully.
C:\Users\Benton\AppData\Roaming\JXUltNcu2Fps folder moved successfully.
C:\Users\Benton\AppData\Roaming\cDH8wB1FsEg9XUl folder moved successfully.
C:\Users\Benton\AppData\Roaming\c2npHs7Kg9YweIz folder moved successfully.
C:\Users\Benton\AppData\Roaming\BosRjIyv3Q8jzuF folder moved successfully.
C:\Users\Benton\AppData\Roaming\Tu1ib34HsJEgZCU folder moved successfully.
C:\Users\Benton\AppData\Roaming\tYkIVOtAuSiDnaH folder moved successfully.
C:\Users\Benton\AppData\Roaming\tjekIVrOtAuSb4Q folder moved successfully.
C:\Users\Benton\AppData\Roaming\GH6dWK7fR9TqYkV folder moved successfully.
C:\Users\Benton\AppData\Roaming\E9gTXqjYCkVzN folder moved successfully.
C:\Users\Benton\AppData\Roaming\E9gTXqjekVOtA folder moved successfully.
C:\Users\Benton\AppData\Roaming\E9gqCVtciDGQ6 folder moved successfully.
C:\Users\Benton\AppData\Roaming\PBzNy1Sob3m folder moved successfully.
C:\Users\Benton\AppData\Roaming\FjUlBzy1v folder moved successfully.
C:\Users\Benton\AppData\Roaming\Du2bFp5QJdKfLhX folder moved successfully.
C:\Users\Benton\AppData\Roaming\vo4ms6E8ZT folder moved successfully.
C:\Users\Benton\AppData\Roaming\KlItNc1Do4ms6E8 folder moved successfully.
C:\Users\Benton\AppData\Roaming\H5Jd8RhXUeItNcv folder moved successfully.
C:\Users\Benton\AppData\Roaming\jzNxc2pQs7EgqYw folder moved successfully.
C:\Users\Benton\AppData\Roaming\mYwUltNAv2bpGs6 folder moved successfully.
C:\Users\Benton\AppData\Roaming\jtzP0ycA1v2n4Hs folder moved successfully.
C:\Users\Benton\AppData\Roaming\J6sWJ7fEL folder moved successfully.
C:\Users\Benton\AppData\Roaming\hvD3oFas7EgZ folder moved successfully.
C:\Users\Benton\AppData\Roaming\hvD3oFaHs7E8 folder moved successfully.
C:\Users\Benton\AppData\Roaming\hvD3o4msJEgZ folder moved successfully.
C:\Users\Benton\AppData\Roaming\wUkBzyAv2b3n5 folder moved successfully.
C:\Users\Benton\AppData\Roaming\ju2F3pnG5Q6W7R9 folder moved successfully.
C:\Users\Benton\AppData\Roaming\JnG4aQH6s folder moved successfully.
C:\Users\Benton\AppData\Roaming\FF3pnG5aQ6W7 folder moved successfully.
C:\Users\Benton\AppData\Roaming\Ko4GQ6KRhwUlrNA folder moved successfully.
C:\Users\Benton\AppData\Roaming\aLRqXUltPc1Dn4H folder moved successfully.
C:\Users\Benton\AppData\Roaming\JgZYwVOt0Sb3n4H folder moved successfully.
C:\Users\Benton\AppData\Roaming\x2obF3pmGaJ folder moved successfully.
C:\Users\Benton\AppData\Roaming\x2obF3pG5Q6 folder moved successfully.
C:\Users\Benton\AppData\Roaming\x2obF3mG5Q6 folder moved successfully.
C:\Users\Benton\AppData\Roaming\NK8fRL9hTqUeIrO folder moved successfully.
C:\Users\Benton\AppData\Roaming\fkIBrzONyAuSi folder moved successfully.
C:\Users\Benton\AppData\Roaming\TIVrlONtx0c1b3n folder moved successfully.
C:\Users\Benton\AppData\Roaming\tnG5aQH6dKfLgXj folder moved successfully.
C:\Users\Benton\AppData\Roaming\A5aQH6dWK folder moved successfully.
C:\Users\Benton\AppData\Roaming\KNNNyxxA1uv2oF3 folder moved successfully.
C:\Users\Benton\AppData\Roaming\wcccA11uvD2oFpG folder moved successfully.
C:\Users\Benton\AppData\Roaming\oAAA1iivD2o folder moved successfully.
C:\Users\Benton\AppData\Roaming\VNNNyccA1uvDob4 folder moved successfully.
C:\Users\Benton\AppData\Roaming\AA11iivD2onF folder moved successfully.
C:\Users\Benton\AppData\Roaming\hwjUUVeelItz folder moved successfully.
C:\Users\Benton\AppData\Roaming\CqqhhYXXwkUelB folder moved successfully.
C:\Users\Benton\AppData\Roaming\wJJ77dEKK8RZ9Yw folder moved successfully.
C:\Users\Benton\AppData\Roaming\ChhhYXXwkUV folder moved successfully.
C:\Users\Benton\AppData\Roaming\cQJJ7ddEK8gR folder moved successfully.
C:\Users\Benton\AppData\Roaming\emmmH55sWJ7EL8 folder moved successfully.
C:\Users\Benton\AppData\Roaming\qzPPP0ycA1iv folder moved successfully.
C:\Users\Benton\AppData\Roaming\UlllOBBtxP0yS1 folder moved successfully.
C:\Users\Benton\AppData\Roaming\DqqqhYYXwkUVlOt folder moved successfully.
C:\Users\Benton\AppData\Roaming\errllOBttP0 folder moved successfully.
C:\Users\Benton\AppData\Roaming\tssJJ7ddEL8RZhY folder moved successfully.
C:\Users\Benton\AppData\Roaming\WJJJ77fEL8gT folder moved successfully.
C:\Users\Benton\AppData\Roaming\lBttzzP0ycA1vDo folder moved successfully.
C:\Users\Benton\AppData\Roaming\lS11iivD3onFam5 folder moved successfully.
C:\Users\Benton\AppData\Roaming\T33oonF44aH5sJ7 folder moved successfully.
C:\Users\Benton\AppData\Roaming\eoonnF44pmH folder moved successfully.
C:\Users\Benton\AppData\Roaming\asssQJJ7dEKgR folder moved successfully.
C:\Users\Benton\AppData\Roaming\p888gRRZqhYXkUe folder moved successfully.
C:\Users\Benton\AppData\Roaming\SXXwwkUUVelBtP0 folder moved successfully.
C:\Users\Benton\AppData\Roaming\mjUUVVelIBtzNyA folder moved successfully.
C:\Users\Benton\AppData\Roaming\nFF44pmmH5sJ7EK folder moved successfully.
C:\Users\Benton\AppData\Roaming\FJJJ7ddEL folder moved successfully.
C:\Users\Benton\AppData\Roaming\mvvDD2oonFpmH folder moved successfully.
C:\Users\Benton\AppData\Roaming\BDDD2obbF4 folder moved successfully.
C:\Users\Benton\AppData\Roaming\pJJJ77dEK8gR9hX folder moved successfully.
C:\Users\Benton\AppData\Roaming\mmHH55sWJ7dE8gZ folder moved successfully.
C:\Users\Benton\AppData\Roaming\GhhYYXwwkU folder moved successfully.
C:\Users\Benton\AppData\Roaming\cZZqqhYCwkUV folder moved successfully.
C:\Users\Benton\AppData\Roaming\DfEEL99gTZq folder moved successfully.
C:\Users\Benton\AppData\Roaming\DHH66dWWK7f folder moved successfully.
C:\Users\Benton\AppData\Roaming\E55aaQH66dK7fLg folder moved successfully.
C:\Users\Benton\AppData\Roaming\V2oobbF3pmG5QJd folder moved successfully.
C:\Users\Benton\AppData\Roaming\hjjUCeekIBrzNyA folder moved successfully.
C:\Users\Benton\AppData\Roaming\ijUUCCelIBrzNyA folder moved successfully.
C:\Users\Benton\AppData\Roaming\j9hhTTXqjUCeIBz folder moved successfully.
C:\Users\Benton\AppData\Roaming\EffRRL9gTX folder moved successfully.
C:\Users\Benton\AppData\Roaming\AhYCwkUVrOtPySi folder moved successfully.
C:\Users\Benton\AppData\Roaming\QaQH6dWK7R9TqY folder moved successfully.
C:\Users\Benton\AppData\Roaming\y4G5sQJ6dKfZhX folder moved successfully.
C:\Users\Benton\AppData\Roaming\TXwkUVelOtPyAiD folder moved successfully.
C:\Users\Benton\AppData\Roaming\WVelOBtzPyAiDoF folder moved successfully.
C:\Users\Benton\AppData\Roaming\fH6sWJ7fE8 folder moved successfully.
C:\Users\Benton\AppData\Roaming\f5sWJ7dELgZhXkV folder moved successfully.
C:\Users\Benton\AppData\Roaming\TG4amH6sW folder moved successfully.
C:\Users\Benton\AppData\Roaming\KS1D3onG4m6W7E8 folder moved successfully.
C:\Users\Benton\AppData\Roaming\S7fRL9gTXjCkVzN folder moved successfully.
C:\Users\Benton\AppData\Roaming\O9gTXqjYCkVzNx0 folder moved successfully.
C:\Users\Benton\AppData\Roaming\fyxA1uvS2b3m5Q6 folder moved successfully.
C:\Users\Benton\AppData\Roaming\s9hTXqjUCkBzNx0 folder moved successfully.
C:\Users\Benton\AppData\Roaming\mNycA1uvDoFpGsJ folder moved successfully.
C:\Users\Benton\AppData\Roaming\OyxA1uvS2b3m5Q6 folder moved successfully.
C:\Users\Benton\AppData\Roaming\GEEEK88gZ9YXwUV folder moved successfully.
C:\Users\Benton\AppData\Roaming\amGG55sQJ6 folder moved successfully.
C:\Users\Benton\AppData\Roaming\kGG55sQJ6dEK8R folder moved successfully.
C:\Users\Benton\AppData\Roaming\R666dEEK8fR9hX folder moved successfully.
C:\Users\Benton\AppData\Roaming\B88ffRL9hTXqU folder moved successfully.
C:\Users\Benton\AppData\Roaming\vZZ99hTXXwUCeIr folder moved successfully.
C:\Users\Benton\AppData\Roaming\s555aaQJ6dfRLhX folder moved successfully.
C:\Users\Benton\AppData\Roaming\PHHH6ddWK7f folder moved successfully.
C:\Users\Benton\AppData\Roaming\GbFF33pmG5 folder moved successfully.
C:\Users\Benton\AppData\Roaming\XyyxxA0uuv2ib folder moved successfully.
C:\Users\Benton\AppData\Roaming\lAA11uvSSobF3m5 folder moved successfully.
C:\Users\Benton\AppData\Roaming\B33ppnGG5aQ6dK7 folder moved successfully.
C:\Users\Benton\AppData\Roaming\H3ppmmG5aQJ6WKf folder moved successfully.
C:\Users\Benton\AppData\Roaming\qwwwkIIVrlON folder moved successfully.
C:\Users\Benton\AppData\Roaming\FVVrrzOONtx0uS2 folder moved successfully.
C:\Users\Benton\AppData\Roaming\OHH66sWWJ7 folder moved successfully.
C:\Users\Benton\AppData\Roaming\lfffELL9gTZjYwk folder moved successfully.
C:\Users\Benton\AppData\Roaming\ZkkUVVrlOBtxPyS folder moved successfully.
C:\Users\Benton\AppData\Roaming\ZZZqqjYCCwIVrOt folder moved successfully.
C:\Users\Benton\AppData\Roaming\JgTTZZqhY folder moved successfully.
C:\Users\Benton\AppData\Roaming\QYYYCwwkIVrONtP folder moved successfully.
C:\Users\Benton\AppData\Roaming\gSS11ivDDonF4m5 folder moved successfully.
C:\Users\Benton\AppData\Roaming\fnnnGG4amH6sJ folder moved successfully.
C:\Users\Benton\AppData\Roaming\ndddELL8gRZq folder moved successfully.
C:\Users\Benton\AppData\Roaming\EgggTTZqhYCwUVl folder moved successfully.
C:\Users\Benton\AppData\Roaming\EwwkkUVeelBtz0y folder moved successfully.
C:\Users\Benton\AppData\Roaming\AkkUUVrrlOBxPyc folder moved successfully.
C:\Users\Benton\AppData\Roaming\r22oobF4p folder moved successfully.
C:\Users\Benton\AppData\Roaming\hvvDD2oonF4m folder moved successfully.
C:\Users\Benton\AppData\Roaming\peeelIIBtzPN folder moved successfully.
C:\Users\Benton\AppData\Roaming\AiivvD2on folder moved successfully.
C:\Windows\msdownld.tmp folder deleted successfully.
C:\Users\Benton\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini moved successfully.
C:\Users\Benton\AppData\Local\SCE\CrashReport folder moved successfully.
C:\Users\Benton\AppData\Local\SCE folder moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Benton\Desktop\cmd.bat deleted successfully.
C:\Users\Benton\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
Error creating restore point.
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Benton
->Temp folder emptied: 3823890 bytes
->Temporary Internet Files folder emptied: 239911726 bytes
->Java cache emptied: 1295798 bytes
->FireFox cache emptied: 195238247 bytes
->Flash cache emptied: 59887 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56502 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Mcx1-CUDA-LAPTOP
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56502 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 841649 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67496 bytes
RecycleBin emptied: 139264 bytes

Total Files Cleaned = 421.00 mb

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\: LSP stack updated.

OTL by OldTimer - Version 3.2.31.0 log created on 11132011_151818

Files\Folders moved on Reboot…
File move failed. C:\Users\Benton\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot.
C:\Users\Benton\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MGGPRROV\index[3].htm moved successfully.
C:\Users\Benton\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\198FGZ8J\iframe[5].htm moved successfully.

Registry entries deleted on Reboot…

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI