OTL logfile created on: 11/20/2011 1:50:54 AM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Henry\Desktop
Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 1.40 Gb Available Physical Memory | 46.56% Memory free
6.00 Gb Paging File | 4.04 Gb Available in Paging File | 67.34% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 258.24 Gb Total Space | 126.07 Gb Free Space | 48.82% Space Free | Partition Type: NTFS
Computer Name: HENRY-PC | User Name: Henry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/11/20 01:42:44 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Henry\Desktop\OTL.exe
PRC - [2011/11/18 21:11:13 | 000,196,608 | —- | M] (Lenovo Corporation) – C:\Windows\System32\svdhalp.exe
PRC - [2011/11/17 20:15:12 | 000,031,744 | -H– | M] (Microsoft) – C:\Program Files\Common Files\lsmass.exe
PRC - [2011/11/16 16:55:32 | 000,076,288 | —- | M] () – C:\Windows\System32\config\systemprofile\AppData\Local\NVIDIA Corporation\Update\daemonupd.exe
PRC - [2011/09/02 09:56:36 | 001,479,408 | —- | M] (Funshion Online Technologies Ltd.) – C:\Program Files\Funshion Online\Funshion\FunshionService.exe
PRC - [2011/08/09 16:56:40 | 000,417,112 | —- | M] (IObit) – C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe
PRC - [2011/08/09 16:40:34 | 000,763,224 | —- | M] (IObit) – C:\Program Files\IObit\Advanced SystemCare 4\PMonitor.exe
PRC - [2011/08/09 16:38:38 | 000,328,536 | —- | M] (IObit) – C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
PRC - [2011/06/24 12:22:20 | 000,271,360 | —- | M] (Microsoft Corporation) – C:\Windows\System32\conhost.exe
PRC - [2011/05/26 04:07:14 | 024,176,560 | —- | M] (Dropbox, Inc.) – C:\Users\Henry\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2011/02/25 13:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
PRC - [2011/02/16 15:26:04 | 000,188,272 | —- | M] (Trend Micro Inc.) – C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
PRC - [2011/02/10 22:00:24 | 000,116,752 | —- | M] (Trend Micro Inc.) – C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
PRC - [2011/02/10 21:57:40 | 001,035,512 | —- | M] (Trend Micro Inc.) – C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
PRC - [2010/11/20 20:17:47 | 000,049,152 | —- | M] (Microsoft Corporation) – C:\Windows\System32\taskhost.exe
PRC - [2010/08/08 18:35:32 | 000,138,640 | —- | M] (Trend Micro Inc.) – C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
PRC - [2010/03/05 10:15:12 | 000,235,752 | —- | M] (DeviceVM, Inc.) – C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
PRC - [2010/03/05 10:15:04 | 000,411,864 | —- | M] (DeviceVM, Inc.) – C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe
PRC - [2010/02/10 14:52:20 | 001,713,152 | R— | M] (VIA) – C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
PRC - [2010/02/03 16:17:18 | 005,756,544 | —- | M] (ASUSTeK Computer Inc.) – C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
PRC - [2009/12/28 21:33:02 | 000,096,896 | R— | M] (ASUSTeK Computer Inc.) – C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
PRC - [2009/11/24 15:25:28 | 001,874,432 | —- | M] (ASUSTeK Computer Inc.) – C:\Program Files\ASUS\Turbo Key\TurboKey.exe
PRC - [2009/10/16 10:42:48 | 000,319,488 | -H– | M] (DeviceVM, Inc.) – C:\ASUS.SYS\config\DVMExportService.exe
PRC - [2009/10/05 18:05:12 | 002,158,592 | —- | M] () – C:\Program Files\Vtune\TBPANEL.exe
PRC - [2009/08/10 15:59:50 | 000,178,720 | —- | M] () – C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
PRC - [2009/08/10 15:59:48 | 000,387,616 | —- | M] () – C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
PRC - [2009/07/14 09:14:28 | 000,015,360 | —- | M] (Microsoft Corporation) – C:\Windows\System32\PING.EXE
PRC - [2009/05/14 17:07:14 | 000,759,048 | —- | M] (ABBYY) – C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
========== Modules (No Company Name) ==========
MOD - [2011/11/15 13:39:54 | 000,420,920 | —- | M] () – C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\ppgooglenaclpluginchrome.dll
MOD - [2011/11/15 13:39:53 | 003,702,840 | —- | M] () – C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\pdf.dll
MOD - [2011/11/15 13:38:16 | 000,122,952 | —- | M] () – C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\avutil-51.dll
MOD - [2011/11/15 13:38:15 | 000,222,280 | —- | M] () – C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\avformat-53.dll
MOD - [2011/11/15 13:38:14 | 001,746,504 | —- | M] () – C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\avcodec-53.dll
MOD - [2011/11/15 10:36:18 | 008,593,056 | —- | M] () – C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll
MOD - [2011/10/13 23:31:30 | 001,051,136 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\1049a76b3de293df726d380932215c91\System.Management.ni.dll
MOD - [2011/10/13 23:17:16 | 005,453,312 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll
MOD - [2011/10/13 23:17:14 | 000,971,264 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll
MOD - [2011/10/13 23:17:11 | 007,963,648 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll
MOD - [2011/10/13 23:17:05 | 011,490,304 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2011/09/02 10:04:04 | 000,230,128 | —- | M] () – C:\Program Files\Funshion Online\Funshion\fptassrv.dll
MOD - [2011/09/02 10:04:02 | 000,140,016 | —- | M] () – C:\Program Files\Funshion Online\Funshion\fpsrv.dll
MOD - [2011/09/02 09:54:18 | 000,160,496 | —- | M] () – C:\Program Files\Funshion Online\Funshion\GetMACAddress.dll
MOD - [2011/09/02 09:54:02 | 000,299,760 | —- | M] () – C:\Program Files\Funshion Online\Funshion\Dump.dll
MOD - [2010/11/20 20:19:56 | 000,232,448 | —- | M] () – \\?\globalroot\systemroot\system32\mswsock.DLL
MOD - [2010/11/20 20:19:56 | 000,232,448 | —- | M] () – \\.\globalroot\systemroot\system32\mswsock.dll
MOD - [2010/08/10 00:01:06 | 000,067,872 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2010/08/08 18:35:32 | 000,057,344 | —- | M] () – C:\Program Files\Trend Micro\AMSP\boost_date_time-vc80-mt-1_36.dll
MOD - [2010/08/08 18:35:32 | 000,049,152 | —- | M] () – C:\Program Files\Trend Micro\AMSP\boost_thread-vc80-mt-1_36.dll
MOD - [2009/11/03 11:11:50 | 047,628,288 | R— | M] () – C:\Program Files\VIA\VIAudioi\VDeck\skin.dll
MOD - [2009/10/05 18:05:12 | 002,158,592 | —- | M] () – C:\Program Files\Vtune\TBPANEL.exe
MOD - [2009/09/30 11:33:08 | 000,024,576 | R— | M] () – C:\Windows\System32\AsIO.dll
MOD - [2009/07/31 21:39:08 | 000,503,202 | —- | M] () – C:\Program Files\DeviceVM\Browser Configuration Utility\sqlite3.dll
MOD - [2009/05/07 16:53:18 | 000,106,496 | R— | M] () – C:\Program Files\VIA\VIAudioi\VDeck\Dts2ApoApi.dll
MOD - [2009/05/07 16:50:46 | 000,073,728 | R— | M] () – C:\Program Files\VIA\VIAudioi\VDeck\QsApoApi.dll
MOD - [2009/04/29 14:24:44 | 000,253,952 | —- | M] () – C:\Program Files\ASUS\Turbo Key\pngio.dll
MOD - [2009/04/29 14:24:44 | 000,208,896 | —- | M] () – C:\Program Files\ASUS\Turbo Key\AiNap.dll
MOD - [2009/04/29 14:24:44 | 000,008,704 | —- | M] () – C:\Program Files\ASUS\Turbo Key\vvc.dll
MOD - [2009/03/25 16:53:14 | 000,053,248 | —- | M] () – C:\Program Files\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
MOD - [2009/03/19 22:35:52 | 000,208,896 | —- | M] () – C:\Program Files\ASUS\EPU-4 Engine\AiNap.dll
MOD - [2009/03/19 22:35:50 | 000,008,704 | —- | M] () – C:\Program Files\ASUS\EPU-4 Engine\vvc.dll
MOD - [2009/01/15 14:55:10 | 000,565,248 | —- | M] () – C:\Program Files\ASUS\EPU-4 Engine\pngio.dll
MOD - [2008/02/14 13:57:00 | 000,094,208 | R— | M] () – C:\Program Files\VIA\VIAudioi\VDeck\VMicApi.dll
MOD - [1998/10/31 04:55:56 | 000,005,120 | —- | M] () – C:\Program Files\Vtune\TBMANAGE.DLL
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] – – (wvchatts)
SRV - [2011/11/16 16:55:32 | 000,076,288 | —- | M] () [Auto | Running] – C:\Windows\System32\config\systemprofile\AppData\Local\NVIDIA Corporation\Update\daemonupd.exe – (ONETWO)
SRV - [2011/11/14 01:01:53 | 000,419,624 | —- | M] (Valve Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Steam\SteamService.exe – (Steam Client Service)
SRV - [2011/08/09 16:38:38 | 000,328,536 | —- | M] (IObit) [Auto | Running] – C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe – (AdvancedSystemCareService)
SRV - [2011/02/16 15:26:04 | 000,188,272 | —- | M] (Trend Micro Inc.) [Auto | Running] – C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe – (Amsp)
SRV - [2010/09/11 21:45:42 | 001,343,400 | —- | M] (Microsoft Corporation) [Unknown | Stopped] – C:\Windows\System32\Wat\WatAdminSvc.exe – (WatAdminSvc)
SRV - [2010/03/05 10:15:12 | 000,235,752 | —- | M] (DeviceVM, Inc.) [Auto | Running] – C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe – (BCUService)
SRV - [2010/02/25 04:01:00 | 003,432,444 | —- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] – C:\Windows\System32\GameMon.des – (npggsvc)
SRV - [2009/12/28 21:33:02 | 000,096,896 | R— | M] (ASUSTeK Computer Inc.) [Auto | Running] – C:\Program Files\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe – (AsSysCtrlService)
SRV - [2009/10/16 10:42:48 | 000,319,488 | -H– | M] (DeviceVM, Inc.) [Auto | Running] – C:\ASUS.SYS\config\DVMExportService.exe – (DvmMDES)
SRV - [2009/08/10 15:59:50 | 000,178,720 | —- | M] () [Auto | Running] – C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe – (nSvcIp)
SRV - [2009/08/10 15:59:48 | 000,387,616 | —- | M] () [Auto | Running] – C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe – (ForceWare Intelligent Application Manager (IAM)) ForceWare Intelligent Application Manager (IAM)
SRV - [2009/07/14 09:16:15 | 000,016,384 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\StorSvc.dll – (StorSvc)
SRV - [2009/07/14 09:16:13 | 000,025,088 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Windows\System32\sensrsvc.dll – (SensrSvc)
SRV - [2009/07/14 09:16:12 | 001,004,544 | —- | M] (Microsoft Corporation) [Disabled | Stopped] – C:\Windows\System32\PeerDistSvc.dll – (PeerDistSvc)
SRV - [2009/07/14 09:15:41 | 000,680,960 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2009/05/14 17:07:14 | 000,759,048 | —- | M] (ABBYY) [Auto | Running] – C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe – (ABBYY.Licensing.FineReader.Sprint.9.0)
========== Driver Services (SafeList) ==========
DRV - [2011/02/23 08:27:00 | 010,468,360 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\nvlddmkm.sys – (nvlddmkm)
DRV - [2010/11/20 20:30:17 | 000,296,064 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\vpcvmm.sys – (vpcvmm)
DRV - [2010/11/20 20:30:17 | 000,172,416 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\vpchbus.sys – (vpcbus)
DRV - [2010/11/20 20:30:15 | 000,175,360 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\system32\drivers\vmbus.sys – (vmbus)
DRV - [2010/11/20 20:30:15 | 000,040,704 | —- | M] (Microsoft Corporation) [Kernel | Boot | Running] – C:\Windows\system32\drivers\vmstorfl.sys – (storflt)
DRV - [2010/11/20 20:30:15 | 000,028,032 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\drivers\storvsc.sys – (storvsc)
DRV - [2010/11/20 18:50:38 | 000,078,336 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\vpcusb.sys – (vpcusb)
DRV - [2010/11/20 18:50:37 | 000,048,128 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\vpcnfltr.sys – (vpcnfltr)
DRV - [2010/11/20 18:24:41 | 000,052,224 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\TsUsbFlt.sys – (TsUsbFlt)
DRV - [2010/11/20 17:59:44 | 000,035,968 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\winusb.sys – (WinUsb)
DRV - [2010/11/20 17:14:45 | 000,017,920 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\drivers\VMBusHID.sys – (VMBusHID)
DRV - [2010/11/20 17:14:41 | 000,005,632 | —- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\system32\drivers\vms3cap.sys – (s3cap)
DRV - [2010/11/20 16:39:17 | 000,074,752 | —- | M] () [Kernel | System | Running] – C:\Windows\System32\drivers\tdx.sys – (tdx)
DRV - [2010/09/19 09:38:10 | 000,691,696 | —- | M] () [Kernel | Boot | Running] – C:\Windows\System32\Drivers\sptd.sys – (sptd)
DRV - [2010/08/12 12:07:48 | 000,298,216 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\nvmf6232.sys – (NVNET)
DRV - [2010/08/08 18:35:34 | 000,189,520 | —- | M] (Trend Micro Inc.) [Kernel | Auto | Running] – C:\Windows\System32\drivers\tmcomm.sys – (tmcomm)
DRV - [2010/08/08 18:35:34 | 000,092,112 | —- | M] (Trend Micro Inc.) [Kernel | System | Running] – C:\Windows\System32\drivers\tmtdi.sys – (tmtdi)
DRV - [2010/08/08 18:35:34 | 000,080,464 | —- | M] (Trend Micro Inc.) [Kernel | Auto | Running] – C:\Windows\System32\drivers\tmactmon.sys – (tmactmon)
DRV - [2010/08/08 18:35:34 | 000,064,080 | —- | M] (Trend Micro Inc.) [Kernel | Auto | Running] – C:\Windows\System32\drivers\tmevtmgr.sys – (tmevtmgr)
DRV - [2010/01/11 18:02:44 | 001,119,232 | —- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\viahduaa.sys – (VIAHdAudAddService)
DRV - [2009/08/22 04:24:03 | 000,066,592 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\nvhda32v.sys – (NVHDA)
DRV - [2009/08/04 17:43:40 | 000,213,024 | —- | M] (NVIDIA Corporation) [Kernel | Boot | Running] – C:\Windows\system32\DRIVERS\nvstor32.sys – (nvstor32)
DRV - [2009/08/04 10:28:18 | 000,011,296 | R— | M] () [Kernel | System | Running] – C:\Windows\System32\drivers\AsIO.sys – (AsIO)
DRV - [2009/07/16 11:36:30 | 000,013,216 | —- | M] () [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\ASACPI.sys – (MTsensor)
DRV - [2009/07/14 06:02:52 | 000,347,264 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\nvm62x32.sys – (NVENETFD)
DRV - [2009/07/06 10:48:02 | 000,011,448 | R— | M] () [Kernel | System | Running] – C:\Windows\System32\drivers\AsUpIO.sys – (AsUpIO)
DRV - [2007/03/16 10:11:38 | 000,012,256 | —- | M] (Windows ® 2000 DDK provider) [Kernel | Auto | Running] – C:\Windows\System32\drivers\TBPanel.sys – (TBPanel)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3206610663-922923999-279685787-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/
IE - HKU\S-1-5-21-3206610663-922923999-279685787-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-3206610663-922923999-279685787-1000\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKU\S-1-5-21-3206610663-922923999-279685787-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3206610663-922923999-279685787-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\Program Files\TVUPlayer\npTVUAx.dll (TVU networks)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Henry\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Henry\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22181a4d-af90-4ca3-a569-faed9118d6bc}: C:\Program Files\Trend Micro\Titanium\UIFramework\Toolbar\firefoxextension [2011/08/07 23:12:54 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1504\6.6.1088\firefoxextension\ [2011/11/14 01:00:40 | 000,000,000 | —D | M]
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = B:\PFiles\Plugins\np-mswmp.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Henry\AppData\Local\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Henry\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: TVU Web Player for FireFox (Enabled) = C:\Program Files\TVUPlayer\npTVUAx.dll
CHR - plugin: Veetle TV Player (Enabled) = C:\Program Files\Veetle\Player\npvlc.dll
CHR - plugin: Veetle TV Core (Enabled) = C:\Program Files\Veetle\plugins\npVeetle.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Angry Birds = C:\Users\Henry\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.1.2.1_0\
CHR - Extension: Metal Slug 3 = C:\Users\Henry\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoohaidjoleeifhoeiipjofgjhkmhppk\4.0_0\
Hosts file not found
O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1504\6.6.1088\TmIEPlg.dll (Trend Micro Inc.)
O2 - BHO: (TSToolbarBHO) - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\module\20002\6.6.1010\6.6.1010\TmBpIe32.dll (Trend Micro Inc.)
O2 - BHO: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (E5C717B8-A0FF-B310-A1A9-466308D906EA Class) - {E5C717B8-A0FF-B310-A1A9-466308D906EA} - C:\Program Files\Funshion Online\Funshion\FunshionAddr\funshionAddr.dll ()
O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Trend Micro Toolbar) - {CCAC5586-44D7-4c43-B64A-F042461A97D2} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O3 - HKLM\..\Toolbar: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-3206610663-922923999-279685787-1000\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O3 - HKU\S-1-5-21-3206610663-922923999-279685787-1000\..\Toolbar\WebBrowser: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [BCU] C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [Cpu Level Up help] C:\Program Files\ASUS\AI Suite\CpuLevelUpHelp.exe ()
O4 - HKLM..\Run: [Funshion] C:\Program Files\Funshion Online\Funshion\Funshion.exe (Funshion Online Technologies Ltd.)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [Turbo Key] C:\Program Files\ASUS\Turbo Key\TurboKey.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [Windows-Audio Driver] C:\ProgramData\wscntfy.exe (Microsoft)
O4 - HKU\.DEFAULT..\Run: [Google Update] C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\gupdate.exe ()
O4 - HKU\S-1-5-18..\Run: [Google Update] C:\Windows\System32\config\systemprofile\AppData\Local\Google\Update\gupdate.exe ()
O4 - HKU\S-1-5-21-3206610663-922923999-279685787-1000..\Run: [Advanced SystemCare 4] C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe (IObit)
O4 - HKU\S-1-5-21-3206610663-922923999-279685787-1000..\Run: [EPSON K200 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_TATIG3P.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\S-1-5-21-3206610663-922923999-279685787-1000..\Run: [Funshion] C:\Program Files\Funshion Online\Funshion\Funshion.exe (Funshion Online Technologies Ltd.)
O4 - HKU\S-1-5-21-3206610663-922923999-279685787-1000..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKU\S-1-5-21-3206610663-922923999-279685787-1000..\Run: [TBPanel] C:\Program Files\Vtune\TBPanel.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Henry\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: Windows-Network Component = C:\Program Files\Common Files\lsmass.exe (Microsoft)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8 - Extra context menu item: Google Sidewiki… - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}
http://download.microsoft.com/download/E/5…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{60CEA890-C36F-4408-AE02-53796F7E145C}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\KuGoo - No CLSID value found
O18 - Protocol\Handler\KuGoo3 - No CLSID value found
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\module\20002\6.6.1010\6.6.1010\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\module\20004\1.5.1504\6.6.1088\TmIEPlg.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmtb {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} - C:\Program Files\Trend Micro\Titanium\UIFramework\ToolbarIE.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmtbim {0B37915C-8B98-4B9E-80D4-464D2C830D10} - C:\Program Files\Trend Micro\Titanium\UIFramework\ProToolbarIMRatingActiveX.dll (Trend Micro Inc.)
O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (svdhalp.exe) -C:\Windows\System32\svdhalp.exe (Lenovo Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 05:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{b8f7dc09-c38e-11df-8236-485b39f40826}\Shell - "" = AutoRun
O33 - MountPoints2\{b8f7dc09-c38e-11df-8236-485b39f40826}\Shell\AutoRun\command - "" = E:\Setup.exe
O33 - MountPoints2\{edb04788-d734-11df-b1fd-485b39f40826}\Shell - "" = AutoRun
O33 - MountPoints2\{edb04788-d734-11df-b1fd-485b39f40826}\Shell\AutoRun\command - "" = F:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2011/11/20 01:42:42 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Henry\Desktop\OTL.exe
[2011/11/20 01:42:30 | 001,916,416 | —- | C] (AVAST Software) – C:\Users\Henry\Desktop\aswMBR.exe
[2011/11/20 01:13:24 | 000,031,744 | -H– | C] (Microsoft) – C:\ProgramData\wscntfy.exe
[2011/11/18 02:20:41 | 000,000,000 | —D | C] – C:\Users\Henry\Desktop\Bowling For Soup - Fishin' For Woos MP3 VBR BLOWA TLS
[2011/11/17 20:15:39 | 000,031,744 | -H– | C] (Microsoft) – C:\Program Files\Common Files\lsmass.exe
[2011/11/15 23:51:52 | 000,000,000 | —D | C] – C:\ProgramData\IObit
[2011/11/13 00:35:10 | 000,000,000 | —D | C] – C:\Users\Henry\Desktop\download at superseeds.org The.Big.Bang.Theory.S05E09.720p.HDTV.x264-ORENJI[ss]
[2011/11/11 23:02:36 | 000,000,000 | —D | C] – C:\Users\Henry\Desktop\The Secret Circle S01E09 HDTV By Johnnyboy187
[2011/11/11 01:14:01 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 4
[2011/11/11 01:13:51 | 000,000,000 | —D | C] – C:\Users\Henry\AppData\Roaming\IObit
[2011/11/11 01:13:49 | 000,000,000 | —D | C] – C:\Program Files\IObit
[2011/11/11 01:07:22 | 000,000,000 | —D | C] – C:\Users\Henry\Desktop\The Christian Classics Library (re-seeding)
[2011/11/07 21:07:39 | 000,000,000 | —D | C] – C:\Users\Henry\Desktop\Tutorials
[2011/11/06 00:06:03 | 000,000,000 | —D | C] – C:\Users\Henry\Desktop\Computing Tutorial Solutions
[2011/11/04 10:20:24 | 000,000,000 | —D | C] – C:\Users\Henry\AppData\Local\Chromium
[2011/11/04 10:11:20 | 000,000,000 | —D | C] – C:\Users\Henry\AppData\Local\SKIDROW
[2011/11/04 10:06:27 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SEGA
[2011/11/04 01:11:36 | 000,000,000 | —D | C] – C:\Users\Henry\Desktop\Football Manager 2012.v12.0.3 Update CrackFix-SKIDROW
[2011/11/02 00:28:28 | 000,000,000 | —D | C] – C:\Users\Henry\Desktop\download at superseeds.org Football.Manager.2012-SKIDROW[ss]
[2011/11/01 04:36:47 | 000,000,000 | —D | C] – C:\Users\Henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Haunted - Hells Reach
[1 C:\Users\Henry\Desktop\*.tmp files -> C:\Users\Henry\Desktop\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/11/20 01:46:40 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3206610663-922923999-279685787-1000UA.job
[2011/11/20 01:45:12 | 000,000,512 | —- | M] () – C:\Users\Henry\Desktop\MBR.dat
[2011/11/20 01:44:43 | 000,003,554 | —- | M] () – C:\Users\Henry\funshion.ini
[2011/11/20 01:42:44 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Henry\Desktop\OTL.exe
[2011/11/20 01:42:29 | 001,916,416 | —- | M] (AVAST Software) – C:\Users\Henry\Desktop\aswMBR.exe
[2011/11/20 01:18:22 | 000,000,260 | -H– | M] () – C:\dvmexp.idx
[2011/11/20 01:11:01 | 000,000,000 | —- | M] () – C:\Windows\System32\FunshionService.timestamp
[2011/11/20 01:07:49 | 000,000,880 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011/11/20 01:07:38 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2011/11/20 01:07:36 | 2415,308,800 | -HS- | M] () – C:\hiberfil.sys
[2011/11/19 15:15:35 | 000,014,336 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011/11/19 15:15:35 | 000,014,336 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011/11/19 15:07:04 | 000,000,884 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011/11/19 09:57:47 | 000,002,397 | —- | M] () – C:\Users\Henry\Desktop\Google Chrome.lnk
[2011/11/19 00:46:01 | 000,000,856 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3206610663-922923999-279685787-1000Core.job
[2011/11/18 21:11:13 | 000,000,017 | —- | M] () – C:\Windows\syskey2i.drv
[2011/11/18 20:54:28 | 000,000,911 | —- | M] () – C:\Users\Henry\AppData\Roaming\coreavc.ini
[2011/11/18 03:16:32 | 009,291,190 | —- | M] () – C:\Users\Henry\Desktop\Kelly Clarkson - Mr Know It All.mp3
[2011/11/18 03:00:06 | 009,629,736 | —- | M] () – C:\Users\Henry\Desktop\Dappy - No Regrets.mp3
[2011/11/18 02:22:25 | 000,064,000 | —- | M] () – C:\Users\Henry\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/11/18 01:38:46 | 002,041,806 | —- | M] () – C:\Users\Henry\Desktop\One Way Drive - Intercept.mp3
[2011/11/17 20:21:37 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/11/17 20:21:37 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/11/16 23:05:47 | 004,013,230 | —- | M] () – C:\Users\Henry\Desktop\Depths of Your Love.mp3
[2011/11/15 00:57:48 | 000,048,045 | —- | M] () – C:\Users\Henry\Desktop\Nov 14 - Nov 20.pdf
[2011/11/11 01:14:01 | 000,001,179 | —- | M] () – C:\Users\Public\Desktop\Advanced SystemCare 4.lnk
[2011/11/10 15:30:24 | 000,364,976 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/11/10 02:39:53 | 000,102,400 | —- | M] () – C:\Windows\RegBootClean.exe
[2011/11/04 11:32:38 | 000,000,937 | —- | M] () – C:\Users\Henry\Desktop\fm.exe - Shortcut.lnk
[2011/11/04 10:19:48 | 000,000,017 | —- | M] () – C:\Windows\keys.ini
[2011/11/01 12:35:21 | 000,044,475 | —- | M] () – C:\Users\Henry\Desktop\318650_10150342424120810_171254060809_8702774_128857764_n.jpg
[1 C:\Users\Henry\Desktop\*.tmp files -> C:\Users\Henry\Desktop\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/11/20 01:45:12 | 000,000,512 | —- | C] () – C:\Users\Henry\Desktop\MBR.dat
[2011/11/18 21:11:13 | 000,000,017 | —- | C] () – C:\Windows\syskey2i.drv
[2011/11/18 03:20:34 | 009,629,736 | —- | C] () – C:\Users\Henry\Desktop\Dappy - No Regrets.mp3
[2011/11/18 03:20:34 | 009,291,190 | —- | C] () – C:\Users\Henry\Desktop\Kelly Clarkson - Mr Know It All.mp3
[2011/11/18 01:38:32 | 002,041,806 | —- | C] () – C:\Users\Henry\Desktop\One Way Drive - Intercept.mp3
[2011/11/17 20:21:37 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2011/11/17 20:21:37 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2011/11/16 23:05:26 | 004,013,230 | —- | C] () – C:\Users\Henry\Desktop\Depths of Your Love.mp3
[2011/11/15 00:57:48 | 000,048,045 | —- | C] () – C:\Users\Henry\Desktop\Nov 14 - Nov 20.pdf
[2011/11/11 01:14:01 | 000,001,179 | —- | C] () – C:\Users\Public\Desktop\Advanced SystemCare 4.lnk
[2011/11/10 02:39:23 | 000,102,400 | —- | C] () – C:\Windows\RegBootClean.exe
[2011/11/04 10:19:48 | 000,000,017 | —- | C] () – C:\Windows\keys.ini
[2011/11/04 10:08:01 | 000,000,937 | —- | C] () – C:\Users\Henry\Desktop\fm.exe - Shortcut.lnk
[2011/11/01 12:35:23 | 000,044,475 | —- | C] () – C:\Users\Henry\Desktop\318650_10150342424120810_171254060809_8702774_128857764_n.jpg
[2011/09/12 02:08:14 | 000,000,288 | —- | C] () – C:\Users\Henry\AppData\Roaming\.backup.dm
[2011/08/31 23:52:52 | 000,000,911 | —- | C] () – C:\Users\Henry\AppData\Roaming\coreavc.ini
[2011/08/25 12:37:23 | 000,000,167 | —- | C] () – C:\Windows\ODBCINST.INI
[2011/08/25 01:54:22 | 000,006,550 | —- | C] () – C:\Windows\jautoexp.dat
[2011/05/26 01:27:04 | 000,051,270 | —- | C] () – C:\Users\Henry\AppData\Roaming\room_v3.dat
[2011/04/24 00:22:26 | 000,000,064 | —- | C] () – C:\Windows\System32\rp_stats.dat
[2011/04/24 00:22:26 | 000,000,044 | —- | C] () – C:\Windows\System32\rp_rules.dat
[2011/04/18 00:57:59 | 000,074,752 | —- | C] () – C:\Windows\System32\drivers\tdx.sys
[2011/04/18 00:57:44 | 000,066,048 | —- | C] () – C:\Windows\System32\PrintBrmUi.exe
[2011/03/23 22:08:23 | 000,046,742 | —- | C] () – C:\Users\Henry\AppData\Roaming\room.dat
[2010/12/22 21:44:52 | 000,001,492 | —- | C] () – C:\ProgramData\ss.ini
[2010/12/21 23:05:14 | 000,000,034 | —- | C] () – C:\Users\Henry\AppData\Roaming\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
[2010/12/21 23:04:55 | 000,000,033 | —- | C] () – C:\ProgramData\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
[2010/10/14 21:41:22 | 000,044,561 | —- | C] () – C:\Windows\War3Unin.dat
[2010/10/14 15:54:34 | 000,064,000 | —- | C] () – C:\Users\Henry\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/09/28 23:39:13 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/09/16 23:10:10 | 000,001,015 | —- | C] () – C:\Windows\FOE2.ini
[2010/09/12 01:54:17 | 000,165,376 | —- | C] () – C:\Windows\System32\unrar.dll
[2010/09/12 01:54:17 | 000,000,038 | —- | C] () – C:\Windows\avisplitter.ini
[2010/09/12 01:54:16 | 000,790,528 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2010/09/12 01:54:16 | 000,134,144 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2010/09/12 01:54:15 | 000,108,032 | —- | C] () – C:\Windows\System32\ff_vfw.dll
[2010/09/11 21:06:49 | 000,024,576 | R— | C] () – C:\Windows\System32\AsIO.dll
[2010/09/11 21:06:49 | 000,011,296 | R— | C] () – C:\Windows\System32\drivers\AsIO.sys
[2010/09/11 21:06:46 | 000,011,832 | —- | C] () – C:\Windows\System32\drivers\AsInsHelp64.sys
[2010/09/11 21:06:46 | 000,010,216 | —- | C] () – C:\Windows\System32\drivers\AsInsHelp32.sys
[2010/09/11 21:04:33 | 000,006,136 | R— | C] () – C:\Windows\System32\drivers\nvphy.bin
[2010/09/11 21:02:34 | 000,001,769 | —- | C] () – C:\Windows\Language_trs.ini
[2010/09/11 21:02:32 | 000,022,982 | —- | C] () – C:\Windows\Ascd_tmp.ini
[2010/07/29 12:57:02 | 000,000,992 | —- | C] () – C:\Windows\System32\funshion.ini
[2009/07/16 11:36:30 | 000,013,216 | —- | C] () – C:\Windows\System32\drivers\ASACPI.sys
[2009/07/14 12:57:37 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/14 12:33:53 | 000,364,976 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2009/07/14 10:05:48 | 000,672,584 | —- | C] () – C:\Windows\System32\perfh009.dat
[2009/07/14 10:05:48 | 000,291,294 | —- | C] () – C:\Windows\System32\perfi009.dat
[2009/07/14 10:05:48 | 000,124,842 | —- | C] () – C:\Windows\System32\perfc009.dat
[2009/07/14 10:05:48 | 000,031,548 | —- | C] () – C:\Windows\System32\perfd009.dat
[2009/07/14 10:05:05 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2009/07/14 10:04:11 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2009/07/14 07:55:01 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/14 07:51:43 | 000,073,728 | —- | C] () – C:\Windows\System32\BthpanContextHandler.dll
[2009/07/14 07:42:10 | 000,064,000 | —- | C] () – C:\Windows\System32\BWContextHandler.dll
[2009/07/06 10:48:02 | 000,011,448 | R— | C] () – C:\Windows\System32\drivers\AsUpIO.sys
[2009/06/11 05:26:10 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2009/04/02 20:30:14 | 000,010,296 | —- | C] () – C:\Windows\System32\drivers\ASUSHWIO.SYS
[2008/12/01 18:32:32 | 000,362,029 | —- | C] () – C:\Windows\System32\sqlite3.dll
[2008/10/07 09:13:30 | 000,197,912 | —- | C] () – C:\Windows\System32\physxcudart_20.dll
[2008/10/07 09:13:22 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSwedish.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSpanish.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelPortugese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelKorean.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelJapanese.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelGerman.dll
[2008/10/07 09:13:20 | 000,058,648 | —- | C] () – C:\Windows\System32\AgCPanelFrench.dll
========== LOP Check ==========
[2011/09/22 00:19:55 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\ActiveState
[2010/10/01 15:18:08 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\CometPlayer
[2010/09/19 19:33:04 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\DAEMON Tools Lite
[2011/09/20 01:46:27 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\Dev-Cpp
[2010/09/11 21:07:37 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\DeviceVm
[2011/11/20 01:16:27 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\Dropbox
[2011/08/14 02:40:33 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\go
[2011/11/11 01:13:51 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\IObit
[2010/10/18 21:42:06 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\Jubler
[2011/06/28 23:34:40 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\KuGou
[2010/09/21 20:54:38 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\OpenOffice.org
[2011/04/27 22:33:36 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\Rovio
[2011/11/04 10:11:14 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\Sports Interactive
[2011/05/08 00:27:28 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\tigerplayer
[2010/09/11 21:49:02 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\URSoft
[2011/11/19 15:15:10 | 000,000,000 | —D | M] – C:\Users\Henry\AppData\Roaming\uTorrent
[2011/08/07 23:03:42 | 000,000,384 | —- | M] () – C:\Windows\Tasks\Ad-Aware Update (Weekly).job
[2011/11/02 22:21:57 | 000,032,590 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.exe >
< MD5 for: EXPLORER.EXE >
[2011/02/26 13:19:21 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009/07/14 09:14:20 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011/02/26 13:51:13 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009/10/31 13:45:39 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011/02/26 13:33:07 | 002,614,784 | —- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010/11/20 20:17:09 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011/02/25 13:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\explorer.exe
[2011/02/25 13:30:54 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009/08/03 13:49:47 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 13:35:50 | 002,613,248 | —- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 14:00:51 | 002,614,272 | —- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
< MD5 for: SVCHOST.EXE >
[2009/07/14 09:14:41 | 000,020,992 | —- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 – C:\Windows\System32\svchost.exe
[2009/07/14 09:14:41 | 000,020,992 | —- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 – C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
< MD5 for: USERINIT.EXE >
[2010/11/20 20:17:48 | 000,026,624 | —- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 – C:\Windows\System32\userinit.exe
[2010/11/20 20:17:48 | 000,026,624 | —- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 – C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009/07/14 09:14:43 | 000,026,112 | —- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 – C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
< MD5 for: WINLOGON.EXE >
[2009/10/28 14:17:59 | 000,285,696 | —- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009/10/28 13:52:08 | 000,285,696 | —- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010/11/20 20:17:54 | 000,286,720 | —- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 – C:\Windows\System32\winlogon.exe
[2010/11/20 20:17:54 | 000,286,720 | —- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009/07/14 09:14:45 | 000,285,696 | —- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
< C:\Windows\assembly\tmp\U\*.* /s >
========== Files - Unicode (All) ==========
[2011/06/05 01:10:08 | 000,000,000 | —D | M](C:\Users\Henry\Desktop\?????) – C:\Users\Henry\Desktop\追风筝的人
[2010/10/28 08:03:14 | 000,000,000 | —D | M](C:\Users\Henry\Documents\?? ???) – C:\Users\Henry\Documents\넥슨 플러그
[2010/10/28 08:03:14 | 000,000,000 | —D | C](C:\Users\Henry\Documents\?? ???) – C:\Users\Henry\Documents\넥슨 플러그
[2010/01/21 00:31:50 | 000,000,000 | —D | C](C:\Users\Henry\Desktop\?????) – C:\Users\Henry\Desktop\追风筝的人
========== Alternate Data Streams ==========
@Alternate Data Stream - 168 bytes -> C:\ProgramData\TEMP:1CE11B51
< End of report >
