This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Slow data transfer rate [Closed]

8 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Had my last post closed off, accessing the internet via this machine has been difficult. I would like to finish off the work Black Pegasus started.
OTL logfile created on: 4/12/2011 11:08:09 AM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Competition\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

1023.20 Mb Total Physical Memory | 115.98 Mb Available Physical Memory | 11.33% Memory free
2.40 Gb Paging File | 1.36 Gb Available in Paging File | 56.71% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 44.70 Gb Total Space | 25.51 Gb Free Space | 57.07% Space Free | Partition Type: FAT32
Drive D: | 27.94 Gb Total Space | 27.91 Gb Free Space | 99.88% Space Free | Partition Type: FAT32

Computer Name: TTGSC | User Name: Competition | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/11/28 07:27:20 | 000,924,632 | —- | M] (Mozilla Corporation) – C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011/11/24 18:18:06 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Competition\My Documents\Downloads\OTL.exe
PRC - [2011/10/24 21:31:54 | 000,055,144 | —- | M] (Apple Inc.) – C:\Program Files\Common Files\Apple\Mobile Device Support\ATH.exe
PRC - [2011/10/18 20:17:02 | 002,042,208 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG8\avgtray.exe
PRC - [2011/10/11 10:10:56 | 000,136,584 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\ramaint.exe
PRC - [2011/10/11 10:10:36 | 000,374,152 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
PRC - [2011/10/09 11:54:58 | 000,055,144 | —- | M] (Apple Inc.) – C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exe
PRC - [2011/08/09 16:40:34 | 000,763,224 | —- | M] (IObit) – C:\Program Files\IObit\Advanced SystemCare 4\PMonitor.exe
PRC - [2011/06/22 19:32:46 | 001,407,248 | —- | M] (Intel® Corporation) – C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
PRC - [2011/06/22 19:32:36 | 000,882,960 | —- | M] (Intel® Corporation) – C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
PRC - [2011/06/22 18:49:24 | 000,866,576 | —- | M] (Intel® Corporation) – C:\Program Files\Intel\WiFi\bin\EvtEng.exe
PRC - [2011/06/22 18:33:14 | 001,210,640 | —- | M] (Intel® Corporation) – C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
PRC - [2011/06/22 18:30:38 | 000,481,552 | —- | M] (Intel® Corporation) – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
PRC - [2011/04/19 16:14:40 | 000,993,848 | —- | M] (Secunia) – C:\Program Files\Secunia\PSI\PSIA.exe
PRC - [2011/04/19 16:14:40 | 000,399,416 | —- | M] (Secunia) – C:\Program Files\Secunia\PSI\sua.exe
PRC - [2010/11/08 12:04:20 | 000,390,528 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\LogMeIn.exe
PRC - [2010/09/17 15:40:06 | 000,063,048 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
PRC - [2010/06/11 16:08:44 | 000,693,016 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG8\avgcsrvx.exe
PRC - [2010/06/11 16:08:32 | 000,297,752 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG8\avgwdsvc.exe
PRC - [2010/04/07 22:27:42 | 000,099,896 | —- | M] (HP) – C:\WINDOWS\system32\HPSIsvc.exe
PRC - [2009/09/09 22:45:14 | 000,595,736 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG8\avgnsx.exe
PRC - [2009/09/09 22:45:14 | 000,486,680 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG8\avgrsx.exe
PRC - [2009/08/04 17:21:58 | 000,030,264 | —- | M] (Hewlett-Packard Company) – C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe
PRC - [2009/06/24 10:57:04 | 000,136,704 | —- | M] (HP) – C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe
PRC - [2008/04/14 10:42:30 | 000,420,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\ntvdm.exe
PRC - [2008/04/14 10:42:20 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2007/07/05 16:53:44 | 001,040,384 | —- | M] () – C:\Program Files\Wireless Console 2\wcourier.exe
PRC - [2006/08/15 15:48:14 | 001,696,256 | —- | M] (ASUSTeK COMPUTER INC.) – C:\Program Files\Asus\WLAN Card Utilities\Center.exe
PRC - [2006/08/07 01:11:00 | 000,573,440 | R— | M] (Motorola Inc.) – C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
PRC - [2006/06/29 14:40:52 | 000,774,144 | —- | M] () – C:\Program Files\Asus\PowerForPhone\PowerForPhone.exe
PRC - [2006/06/08 20:33:02 | 000,053,248 | —- | M] (ASUSTeK Computer INC.) – C:\Program Files\Asus\ATK Media\DMedia.exe
PRC - [2006/05/03 06:05:00 | 000,055,808 | R— | M] (Cognizance Corporation) – c:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\asghost.exe
PRC - [2006/04/17 05:24:30 | 000,110,592 | —- | M] () – C:\WINDOWS\ATK0100\HControl.exe
PRC - [2006/04/01 03:37:00 | 002,170,880 | —- | M] () – C:\WINDOWS\ATK0100\ATKOSD.exe
PRC - [2006/03/14 17:46:00 | 000,090,112 | —- | M] (ASUSTeK Computer Inc.) – C:\Program Files\Asus\Power4 Gear\BatteryLife.exe
PRC - [2006/01/02 17:41:22 | 000,045,056 | —- | M] (ATI Technologies Inc.) – C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
PRC - [2005/01/12 03:01:32 | 000,032,768 | —- | M] (Cyberlink Corp.) – C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe


========== Modules (No Company Name) ==========

MOD - [2011/11/28 07:27:16 | 001,989,592 | —- | M] () – C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011/10/17 13:28:44 | 000,771,584 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\36bf3d5f05a40c9e3cadca5789c8a469\System.Runtime.Remoting.ni.dll
MOD - [2011/10/14 12:53:48 | 011,800,576 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\60df958ca96c9b8945f836759b6abd34\System.Web.ni.dll
MOD - [2011/10/14 12:53:36 | 000,212,992 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e\System.ServiceProcess.ni.dll
MOD - [2011/10/14 12:52:52 | 000,311,296 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\81096bfe85eb0da5f05e8a127ffa43b2\System.Runtime.Serialization.Formatters.Soap.ni.dll
MOD - [2011/10/14 12:51:00 | 001,712,128 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\24331b719aa25ac2b21099e32232840c\Microsoft.VisualBasic.ni.dll
MOD - [2011/10/14 12:49:46 | 000,971,264 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\bce0720436dc6cb76006377f295ea365\System.Configuration.ni.dll
MOD - [2011/10/14 12:24:44 | 005,450,752 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\70cacc44f0b4257f6037eda7a59a0aeb\System.Xml.ni.dll
MOD - [2011/10/14 12:24:36 | 012,430,848 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll
MOD - [2011/10/14 12:24:18 | 001,587,200 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll
MOD - [2011/10/14 12:21:18 | 007,950,848 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll
MOD - [2011/10/14 12:21:06 | 011,490,816 | —- | M] () – C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll
MOD - [2011/10/14 12:20:04 | 000,372,736 | —- | M] () – C:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2010/03/04 16:55:34 | 000,147,456 | —- | M] () – C:\WINDOWS\system32\HP1100LM.DLL
MOD - [2010/03/04 16:55:14 | 000,069,632 | —- | M] () – C:\WINDOWS\system32\spool\prtprocs\w32x86\HP1100PP.dll
MOD - [2009/11/05 08:39:40 | 000,087,552 | —- | M] () – C:\WINDOWS\system32\cpwmon2k.dll
MOD - [2009/08/04 17:23:16 | 000,063,032 | —- | M] () – C:\Program Files\HP\HP UT LEDM\bin\HPTools.dll
MOD - [2009/08/04 17:23:02 | 000,075,320 | —- | M] () – C:\Program Files\HP\HP UT LEDM\bin\HPToolkit.dll
MOD - [2009/08/04 17:22:32 | 000,678,968 | —- | M] () – C:\Program Files\HP\HP UT LEDM\bin\LEDMXMLObjects.dll
MOD - [2009/08/04 17:22:16 | 000,136,248 | —- | M] () – C:\Program Files\HP\HP UT LEDM\bin\DMBaseObjects.dll
MOD - [2009/02/14 05:04:38 | 000,756,040 | —- | M] () – C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
MOD - [2008/10/26 05:42:14 | 000,065,376 | —- | M] () – C:\Program Files\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
MOD - [2008/04/14 10:42:00 | 000,014,336 | —- | M] () – C:\WINDOWS\system32\msdmo.dll
MOD - [2007/07/05 16:53:44 | 001,040,384 | —- | M] () – C:\Program Files\Wireless Console 2\wcourier.exe
MOD - [2006/10/27 15:35:18 | 000,436,512 | —- | M] () – C:\Program Files\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
MOD - [2006/07/28 16:36:26 | 000,167,936 | —- | M] () – C:\Program Files\Asus\WLAN Card Utilities\AsAuthen.dll
MOD - [2006/06/29 14:40:52 | 000,774,144 | —- | M] () – C:\Program Files\Asus\PowerForPhone\PowerForPhone.exe
MOD - [2006/04/17 05:24:30 | 000,110,592 | —- | M] () – C:\WINDOWS\ATK0100\HControl.exe
MOD - [2006/04/01 03:37:00 | 002,170,880 | —- | M] () – C:\WINDOWS\ATK0100\ATKOSD.exe
MOD - [2006/02/02 17:42:22 | 000,040,960 | —- | M] () – C:\WINDOWS\system32\LXPRMON.DLL
MOD - [2006/01/12 23:50:04 | 000,114,688 | —- | M] () – C:\WINDOWS\system32\spool\prtprocs\w32x86\LXCRPP5C.DLL
MOD - [2004/07/20 17:04:02 | 000,094,208 | —- | M] () – C:\WINDOWS\system32\TosBtHcrpAPI.dll
MOD - [2004/05/27 22:13:10 | 000,057,344 | —- | M] () – C:\WINDOWS\ATK0100\CMSSC.dll


========== Win32 Services (SafeList) ==========

SRV - [2011/10/11 10:10:56 | 000,136,584 | —- | M] (LogMeIn, Inc.) [Auto | Running] – C:\Program Files\LogMeIn\x86\RaMaint.exe – (LMIMaint)
SRV - [2011/10/11 10:10:36 | 000,374,152 | —- | M] (LogMeIn, Inc.) [Auto | Running] – C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe – (LMIGuardianSvc)
SRV - [2011/06/22 19:32:36 | 000,882,960 | —- | M] (Intel® Corporation) [Auto | Running] – C:\Program Files\Intel\WiFi\bin\S24EvMon.exe – (S24EventMonitor) Intel®
SRV - [2011/06/22 18:49:24 | 000,866,576 | —- | M] (Intel® Corporation) [Auto | Running] – C:\Program Files\Intel\WiFi\bin\EvtEng.exe – (EvtEng) Intel®
SRV - [2011/06/22 18:30:38 | 000,481,552 | —- | M] (Intel® Corporation) [Auto | Running] – C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe – (RegSrvc) Intel®
SRV - [2011/04/19 16:14:40 | 000,993,848 | —- | M] (Secunia) [Auto | Running] – C:\Program Files\Secunia\PSI\PSIA.exe – (Secunia PSI Agent)
SRV - [2011/04/19 16:14:40 | 000,399,416 | —- | M] (Secunia) [Auto | Running] – C:\Program Files\Secunia\PSI\sua.exe – (Secunia Update Agent)
SRV - [2010/11/08 12:04:20 | 000,390,528 | —- | M] (LogMeIn, Inc.) [Auto | Running] – C:\Program Files\LogMeIn\x86\LogMeIn.exe – (LogMeIn)
SRV - [2010/06/11 16:08:32 | 000,297,752 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] – C:\Program Files\AVG\AVG8\avgwdsvc.exe – (avg8wd)
SRV - [2010/04/07 22:27:42 | 000,099,896 | —- | M] (HP) [Auto | Running] – C:\WINDOWS\system32\HPSIsvc.exe – (HPSIService)
SRV - [2009/09/03 11:51:46 | 000,048,368 | —- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] – C:\Program Files\NOS\BIN\getPlus_Helper.dll – (getPlusHelper) getPlus®
SRV - [2009/06/24 10:57:04 | 000,136,704 | —- | M] (HP) [Auto | Running] – C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe – (HP LaserJet Service)
SRV - [2006/03/05 20:36:00 | 000,132,096 | R— | M] (Cognizance Corporation) [Auto | Running] – c:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASChnl.dll – (ASChannel)
SRV - [2006/02/21 04:53:08 | 000,495,616 | —- | M] ( ) [On_Demand | Stopped] – C:\WINDOWS\System32\lxcrcoms.exe – (lxcr_device)
SRV - [2004/05/06 12:21:04 | 000,496,640 | —- | M] () [Auto | Stopped] – C:\WINDOWS\system32\ASWLSVC.exe – (ASWLSVC)


========== Driver Services (SafeList) ==========

DRV - [2011/10/11 10:10:38 | 000,083,360 | —- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] – C:\WINDOWS\System32\LMIRfsClientNP.dll – (LMIRfsClientNP)
DRV - [2011/02/23 17:04:32 | 000,013,496 | —- | M] () [Kernel | Boot | Stopped] – C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys – (SmartDefragDriver)
DRV - [2010/10/07 05:11:38 | 006,609,920 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\NETwLx32.sys – (NETwLx32) Intel®
DRV - [2010/09/17 15:40:06 | 000,047,640 | —- | M] (LogMeIn, Inc.) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\LMIRfsDriver.sys – (LMIRfsDriver)
DRV - [2010/09/17 15:40:06 | 000,012,856 | —- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] – C:\Program Files\LogMeIn\x86\rainfo.sys – (LMIInfo)
DRV - [2010/09/01 18:00:58 | 000,015,544 | —- | M] (Secunia) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\psi_mf.sys – (PSI)
DRV - [2010/05/19 22:15:04 | 000,013,952 | —- | M] (Intel Corporation) [Kernel | Auto | Running] – C:\WINDOWS\system32\drivers\s24trans.sys – (s24trans)
DRV - [2010/03/06 09:10:58 | 000,017,408 | —- | M] (Marvell Semiconductor, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\mvusbews.sys – (mvusbews)
DRV - [2009/12/18 11:58:52 | 000,011,336 | —- | M] () [Kernel | On_Demand | Stopped] – C:\Program Files\SystemRequirementsLab\cpudrv.sys – (cpudrv)
DRV - [2009/09/09 22:45:38 | 000,108,552 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\WINDOWS\System32\Drivers\avgtdix.sys – (AvgTdiX)
DRV - [2009/09/09 22:45:34 | 000,335,240 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\WINDOWS\System32\Drivers\avgldx86.sys – (AvgLdx86)
DRV - [2009/09/09 22:45:32 | 000,027,784 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] – C:\WINDOWS\System32\Drivers\avgmfx86.sys – (AvgMfx86)
DRV - [2008/04/14 05:26:06 | 000,088,320 | —- | M] (Microsoft Corporation) [Kernel | Auto | Running] – C:\WINDOWS\system32\drivers\nwlnkipx.sys – (NwlnkIpx)
DRV - [2007/02/07 06:32:00 | 000,123,939 | —- | M] () [Kernel | Auto | Running] – C:\WINDOWS\system32\drivers\kqemu.sys – (kqemu)
DRV - [2006/08/09 02:15:14 | 001,116,544 | R— | M] () [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\SynMini.sys – (SynMini)
DRV - [2006/08/09 02:15:14 | 000,007,808 | R— | M] () [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\SynScan.sys – (SynScan)
DRV - [2006/08/07 01:13:50 | 000,980,608 | R— | M] (Motorola Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\smserial.sys – (smserial)
DRV - [2006/08/02 06:07:52 | 001,681,920 | —- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag)
DRV - [2006/07/24 04:15:04 | 004,353,024 | R— | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.Sys – (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/06/08 10:49:50 | 000,344,064 | —- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\rt73.sys – (RT73)
DRV - [2006/05/18 21:46:16 | 000,110,976 | —- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\tosrfbd.sys – (Tosrfbd)
DRV - [2006/05/16 14:14:00 | 000,017,840 | R— | M] (Cognizance Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\itsdisk.sys – (ItSDisk)
DRV - [2006/05/09 11:21:54 | 000,040,192 | —- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\tosrfusb.sys – (Tosrfusb)
DRV - [2006/05/09 10:33:54 | 000,062,848 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\tosrfhid.sys – (Tosrfhid)
DRV - [2006/04/19 13:57:44 | 000,047,488 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\tosporte.sys – (tosporte)
DRV - [2006/03/16 10:45:12 | 000,037,632 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\tosrfbnp.sys – (Tosrfbnp)
DRV - [2006/03/15 10:52:40 | 000,052,864 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\tosrfsnd.sys – (TosRfSnd) Bluetooth Audio Device (WDM)
DRV - [2006/01/24 10:45:56 | 000,034,944 | —- | M] (Windows ® 2000 DDK provider) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\ipswuio.sys – (ipswuio)
DRV - [2005/11/16 20:28:32 | 000,028,928 | —- | M] (REDC) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\rimmptsk.sys – (rimmptsk)
DRV - [2005/11/16 03:08:16 | 000,078,976 | —- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\Rtenicxp.sys – (RTL8023xp)
DRV - [2005/11/01 17:54:50 | 000,051,584 | —- | M] (REDC) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\rimsptsk.sys – (rimsptsk)
DRV - [2005/10/20 23:19:34 | 000,036,352 | R— | M] (Infineon Technologies AG) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ifxtpm.sys – (IFXTPM)
DRV - [2005/08/01 16:45:08 | 000,064,896 | —- | M] (TOSHIBA Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\tosrfcom.sys – (Tosrfcom)
DRV - [2005/07/11 18:58:56 | 000,003,712 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\toshidpt.sys – (toshidpt)
DRV - [2005/02/17 10:07:48 | 000,005,632 | —- | M] () [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ATKACPI.sys – (MTsensor)
DRV - [2005/01/06 13:42:42 | 000,018,612 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\tosrfnds.sys – (tosrfnds)
DRV - [2004/08/20 19:09:14 | 000,062,865 | —- | M] (Funk Software, Inc.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\odysseyIM3.sys – (odysseyIM3)
DRV - [2004/08/20 19:09:14 | 000,016,292 | —- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\PCANDIS5.SYS – (PCANDIS5)
DRV - [2004/08/04 20:00:00 | 000,063,232 | —- | M] (Microsoft Corporation) [Kernel | Auto | Running] – C:\WINDOWS\system32\drivers\nwlnknb.sys – (NwlnkNb)
DRV - [2004/08/04 20:00:00 | 000,055,936 | —- | M] (Microsoft Corporation) [Kernel | Auto | Running] – C:\WINDOWS\system32\drivers\nwlnkspx.sys – (NwlnkSpx)
DRV - [2004/07/26 14:36:08 | 000,316,192 | —- | M] (Jungo) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\windrvr6.sys – (WinDriver6)
DRV - [2003/09/19 15:45:48 | 000,021,248 | —- | M] (Padus, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\pfc.sys – (pfc)
DRV - [2002/09/16 17:14:32 | 000,004,228 | —- | M] (PowerQuest Corporation) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\PQNTDRV.sys – (PQNTDrv)
DRV - [2002/09/09 19:54:06 | 000,016,269 | —- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\ASNDIS5.sys – (ASNDIS5)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://au.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://au.yahoo.com


IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.asus.com
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-4001236980-1652061964-1848561122-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKU\S-1-5-21-4001236980-1652061964-1848561122-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4001236980-1652061964-1848561122-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = ;*.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "iMesh Web Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: "iMesh Web Search"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=685749"
FF - prefs.js..browser.search.selectedEngine: "iMesh Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com.au/"
FF - prefs.js..keyword.URL: "http://search.imesh.com/web?src=ffb&appid=20&systemid=1&sr=0&q="
FF - prefs.js..network.proxy.no_proxies_on: "localhost,127.0.0.1"
FF - prefs.js..network.proxy.type: 0
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: "Yahoo"
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.google.com.au/"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.imesh.com/web?src=ffb&appid=20&systemid=1&sr=0&q="

FF - HKLM\Software\MozillaPlugins\@abr.gov.au/KeyMgmtPlugin: C:\Program Files\ABR\Plug-In\bin\npAUSkeyPlugin.dll (Commonwealth Government of Australia)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/05/30 17:11:04 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2010/08/29 09:40:46 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Competition\Application Data\Mozilla\Extensions
[2010/08/29 09:40:46 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions
[2011/05/04 10:59:24 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/10/22 20:35:26 | 000,000,000 | —D | M] (MediaBar) – C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
[2011/06/09 08:26:08 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/10/24 09:05:42 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011/11/28 07:27:20 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/10/13 12:51:58 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/10/22 20:35:16 | 000,002,512 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml
[2011/11/28 07:27:20 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2004/08/04 20:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (ASUS Security Protect Manager) - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll (Infineon Technologies AG)
O3 - HKLM\..\Toolbar: (no name) - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - No CLSID value found.
O3 - HKU\S-1-5-21-4001236980-1652061964-1848561122-1005\..\Toolbar\WebBrowser: (no name) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - No CLSID value found.
O3 - HKU\S-1-5-21-4001236980-1652061964-1848561122-1005\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [ABLKSR] C:\WINDOWS\ABLKSR\ABLKSR.EXE (ASYSTeK Computer INC.)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe File not found
O4 - HKLM..\Run: [ATICCC] C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe ()
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\Asus\ATK Media\DMedia.exe (ASUSTeK Computer INC.)
O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CognizanceTS] c:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASTSVCC.dll (Cognizance Corporation)
O4 - HKLM..\Run: [Control Center] C:\Program Files\Asus\WLAN Card Utilities\Center.exe (ASUSTeK COMPUTER INC.)
O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe ()
O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel® Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe (Intel® Corporation)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe (ASUSTeK Computer Inc.)
O4 - HKLM..\Run: [PowerForPhone] C:\Program Files\Asus\PowerForPhone\PowerForPhone.exe ()
O4 - HKLM..\Run: [RemoteControl] C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe (Cyberlink Corp.)
O4 - HKLM..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-4001236980-1652061964-1848561122-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/microsoftu…b?1191532247943 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1191532195505 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4DE8FEEF-015B-40FC-8421-F05F32E9386A}: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\itss.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (APSHook.dll) -C:\WINDOWS\System32\APSHook.dll (Cognizance Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\avgrsstarter: DllName - (avgrsstx.dll) - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\LMIinit: DllName - (LMIinit.dll) - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O20 - Winlogon\Notify\OneCard: DllName - (c:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll) - c:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll (Cognizance Corporation)
O24 - Desktop WallPaper: C:\Documents and Settings\Competition\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Competition\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (nwprovau) -C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007/03/21 14:08:40 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ FAT32 ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/11/29 18:04:42 | 000,000,000 | —D | C] – C:\Documents and Settings\Competition\Application Data\IObit
[2011/11/26 22:03:05 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\QuickTime
[2011/11/26 22:02:48 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2011/11/25 19:40:23 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2011/11/25 19:39:16 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2011/11/25 19:38:58 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2011/11/24 18:19:18 | 000,000,000 | —D | C] – C:\Documents and Settings\Competition\Desktop\index.php_files
[2011/11/22 20:39:11 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Game Booster
[2011/11/22 20:39:10 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Garmin
[2011/11/22 20:39:07 | 000,000,000 | —D | C] – C:\Program Files\etax2011
[2011/11/22 20:39:07 | 000,000,000 | —D | C] – C:\Documents and Settings\Competition\Start Menu\Programs\e-tax 2011
[2011/11/22 20:39:06 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/11/22 20:39:03 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\EPSON PRINT Image Framer
[2011/11/22 20:39:02 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/11/17 08:47:28 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband
[2011/11/17 08:45:24 | 000,000,000 | —D | C] – C:\Program Files\Optus Mobile Broadband
[2011/11/17 08:44:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\DatacardService
[2006/02/21 05:14:44 | 001,183,744 | —- | C] ( ) – C:\WINDOWS\System32\LXCRSERV.DLL
[2006/02/21 05:06:06 | 000,421,888 | —- | C] ( ) – C:\WINDOWS\System32\lxcrcomm.dll
[2006/02/21 04:54:42 | 000,380,928 | —- | C] ( ) – C:\WINDOWS\System32\lxcrih.exe
[2006/02/21 04:54:30 | 000,536,576 | —- | C] ( ) – C:\WINDOWS\System32\LXCRLMPM.DLL
[2006/02/21 04:53:16 | 000,114,688 | —- | C] ( ) – C:\WINDOWS\System32\LXCRPPLC.DLL
[2006/02/21 04:53:08 | 000,495,616 | —- | C] ( ) – C:\WINDOWS\System32\LXCRCOMS.EXE
[2006/02/21 04:52:16 | 000,610,304 | —- | C] ( ) – C:\WINDOWS\System32\LXCRCOMC.DLL
[2006/02/21 04:51:22 | 000,163,840 | —- | C] ( ) – C:\WINDOWS\System32\LXCRPROX.DLL
[2006/02/21 04:45:16 | 000,995,328 | —- | C] ( ) – C:\WINDOWS\System32\LXCRUSB1.DLL
[2006/02/21 04:36:52 | 000,393,216 | —- | C] ( ) – C:\WINDOWS\System32\LXCRIESC.DLL
[2006/02/21 04:33:02 | 000,409,600 | —- | C] ( ) – C:\WINDOWS\System32\LXCRINPA.DLL
[1996/11/17 16:00:00 | 000,018,944 | —- | C] ( ) – C:\WINDOWS\IMPLODE.DLL

========== Files - Modified Within 30 Days ==========

[2011/12/04 10:54:20 | 000,001,158 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/12/04 10:54:14 | 000,000,282 | —- | M] () – C:\WINDOWS\tasks\ASC4_PerformanceMonitor.job
[2011/12/04 10:54:12 | 000,000,292 | —- | M] () – C:\WINDOWS\tasks\SmartDefrag_Startup.job
[2011/12/03 20:50:00 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/12/03 20:49:58 | 1072,975,872 | -HS- | M] () – C:\hiberfil.sys
[2011/12/02 14:19:38 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/11/30 16:58:54 | 000,002,369 | —- | M] () – C:\Documents and Settings\Competition\Application Data\Microsoft\Internet Explorer\Quick Launch\Cashflow Manager 7.7.lnk
[2011/11/28 07:24:04 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/11/26 22:03:06 | 000,001,508 | —- | M] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2011/11/25 19:40:24 | 000,001,446 | —- | M] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/11/25 19:38:56 | 000,000,512 | —- | M] () – C:\Documents and Settings\Competition\My Documents\MBR.dat
[2011/11/24 18:19:22 | 000,080,712 | —- | M] () – C:\Documents and Settings\Competition\Desktop\index.php.htm
[2011/11/24 17:10:48 | 000,001,393 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/11/23 15:30:58 | 000,001,852 | —- | M] () – C:\Documents and Settings\Competition\My Documents\Firefox Sync Key.html
[2011/11/23 11:45:50 | 000,001,408 | —- | M] () – C:\Documents and Settings\Competition\Application Data\Microsoft\Internet Explorer\Quick Launch\Calculator.lnk
[2011/11/17 08:47:14 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2011/11/06 18:20:10 | 000,056,532 | -H– | M] () – C:\WINDOWS\System32\mlfcache.dat

========== Files Created - No Company Name ==========

[2011/11/26 22:03:05 | 000,001,508 | —- | C] () – C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2011/11/25 19:40:23 | 000,001,446 | —- | C] () – C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/11/25 19:38:54 | 000,000,512 | —- | C] () – C:\Documents and Settings\Competition\My Documents\MBR.dat
[2011/11/24 20:44:51 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/11/24 18:19:17 | 000,080,712 | —- | C] () – C:\Documents and Settings\Competition\Desktop\index.php.htm
[2011/11/24 17:10:44 | 000,001,393 | —- | C] () – C:\WINDOWS\imsins.BAK
[2011/11/23 15:30:39 | 000,001,852 | —- | C] () – C:\Documents and Settings\Competition\My Documents\Firefox Sync Key.html
[2011/11/17 08:47:12 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2011/11/06 18:20:08 | 000,056,532 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2011/08/26 18:38:39 | 001,511,424 | —- | C] () – C:\WINDOWS\System32\HP1100SM.EXE
[2011/08/26 18:38:38 | 000,147,456 | —- | C] () – C:\WINDOWS\System32\HP1100LM.DLL
[2011/07/01 11:35:51 | 000,081,920 | —- | C] () – C:\WINDOWS\System32\mvusbews.dll
[2011/07/01 11:33:35 | 000,284,160 | —- | C] () – C:\WINDOWS\System32\mvhlewsi.DLL
[2011/07/01 11:33:30 | 000,047,104 | —- | C] () – C:\WINDOWS\System32\HP1100SMs.dll
[2011/06/29 20:22:17 | 000,087,552 | —- | C] () – C:\WINDOWS\System32\cpwmon2k.dll
[2011/06/26 12:05:09 | 000,111,932 | —- | C] () – C:\WINDOWS\System32\EPPICPrinterDB.dat
[2011/06/26 12:05:09 | 000,031,053 | —- | C] () – C:\WINDOWS\System32\EPPICPattern131.dat
[2011/06/26 12:05:09 | 000,027,417 | —- | C] () – C:\WINDOWS\System32\EPPICPattern121.dat
[2011/06/26 12:05:09 | 000,026,154 | —- | C] () – C:\WINDOWS\System32\EPPICPattern1.dat
[2011/06/26 12:05:09 | 000,024,903 | —- | C] () – C:\WINDOWS\System32\EPPICPattern3.dat
[2011/06/26 12:05:09 | 000,021,390 | —- | C] () – C:\WINDOWS\System32\EPPICPattern5.dat
[2011/06/26 12:05:09 | 000,020,148 | —- | C] () – C:\WINDOWS\System32\EPPICPattern2.dat
[2011/06/26 12:05:09 | 000,011,811 | —- | C] () – C:\WINDOWS\System32\EPPICPattern4.dat
[2011/06/26 12:05:09 | 000,004,943 | —- | C] () – C:\WINDOWS\System32\EPPICPattern6.dat
[2011/06/26 12:05:09 | 000,001,146 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_DU.dat
[2011/06/26 12:05:09 | 000,001,139 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_PT.dat
[2011/06/26 12:05:09 | 000,001,139 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_BP.dat
[2011/06/26 12:05:09 | 000,001,136 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_ES.dat
[2011/06/26 12:05:09 | 000,001,129 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_FR.dat
[2011/06/26 12:05:09 | 000,001,129 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_CF.dat
[2011/06/26 12:05:09 | 000,001,120 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_IT.dat
[2011/06/26 12:05:09 | 000,001,107 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_GE.dat
[2011/06/26 12:05:09 | 000,001,104 | —- | C] () – C:\WINDOWS\System32\EPPICPresetData_EN.dat
[2011/06/26 12:05:09 | 000,000,097 | —- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2011/06/26 12:03:42 | 000,000,027 | —- | C] () – C:\WINDOWS\CDE RX650EC.ini
[2011/06/09 08:27:29 | 000,029,520 | —- | C] () – C:\WINDOWS\System32\SmartDefragBootTime.exe
[2011/06/09 08:27:28 | 000,013,496 | —- | C] () – C:\WINDOWS\System32\drivers\SmartDefragDriver.sys
[2011/05/18 07:38:42 | 000,038,403 | —- | C] () – C:\Documents and Settings\Competition\Application Data\Comma Separated Values (Windows).ADR
[2010/08/29 09:39:34 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2009/10/10 13:37:34 | 000,157,361 | —- | C] () – C:\WINDOWS\hpoins27.dat.temp
[2009/10/10 13:37:33 | 000,000,932 | —- | C] () – C:\WINDOWS\hpomdl27.dat.temp
[2009/10/09 22:14:42 | 000,157,415 | —- | C] () – C:\WINDOWS\hpoins27.dat
[2009/10/09 22:14:42 | 000,000,932 | —- | C] () – C:\WINDOWS\hpomdl27.dat
[2009/09/24 11:54:22 | 000,084,644 | —- | C] () – C:\WINDOWS\System32\drivers\FwRad17.bin
[2009/09/19 15:48:40 | 000,038,442 | —- | C] () – C:\Documents and Settings\Competition\Application Data\Comma Separated Values (DOS).ADR
[2009/09/19 15:48:27 | 000,024,899 | —- | C] () – C:\Documents and Settings\Competition\Application Data\Comma Separated Values (DOS).CAL
[2009/05/13 10:28:44 | 000,000,419 | —- | C] () – C:\WINDOWS\BRWMARK.INI
[2009/05/13 10:28:44 | 000,000,027 | —- | C] () – C:\WINDOWS\BRPP2KA.INI
[2009/04/01 10:48:16 | 000,053,478 | —- | C] () – C:\WINDOWS\mvtcpui.ini
[2008/10/15 17:18:52 | 000,000,255 | —- | C] () – C:\WINDOWS\lexstat.ini
[2008/08/23 17:44:37 | 000,159,827 | —- | C] () – C:\WINDOWS\System32\RemSvc.exe
[2008/08/23 17:44:36 | 000,537,600 | —- | C] () – C:\WINDOWS\System32\ASWL2K.exe
[2008/08/23 17:44:36 | 000,496,640 | —- | C] () – C:\WINDOWS\System32\ASWLSVC.exe
[2008/06/29 16:19:58 | 000,000,024 | —- | C] () – C:\WINDOWS\ATKPF.ini
[2008/05/26 21:59:42 | 000,018,904 | —- | C] () – C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | —- | C] () – C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/15 09:44:08 | 000,000,016 | —- | C] () – C:\WINDOWS\popcinfo.dat
[2008/04/10 20:30:18 | 000,000,552 | —- | C] () – C:\WINDOWS\System32\d3d8caps.dat
[2008/03/01 11:55:12 | 000,076,800 | —- | C] () – C:\WINDOWS\System32\ExpP.dll
[2008/02/26 12:28:17 | 000,000,023 | —- | C] () – C:\WINDOWS\BlendSettings.ini
[2007/11/03 12:07:16 | 000,000,128 | —- | C] () – C:\WINDOWS\LIBENMP3.INI
[2007/11/03 12:07:16 | 000,000,075 | —- | C] () – C:\WINDOWS\LIBENACM.INI
[2007/11/03 12:07:16 | 000,000,048 | —- | C] () – C:\WINDOWS\LIBENVRS.INI
[2007/11/03 12:07:16 | 000,000,029 | —- | C] () – C:\WINDOWS\LIBENWMA.INI
[2007/11/03 12:01:09 | 000,001,758 | —- | C] () – C:\WINDOWS\smp3m45j.ini
[2007/09/27 10:51:02 | 000,020,698 | —- | C] () – C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | —- | C] () – C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | —- | C] () – C:\WINDOWS\System32\gthrctr.ini
[2007/09/02 09:26:58 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\LXPRMON.DLL
[2007/09/02 09:26:58 | 000,032,768 | —- | C] () – C:\WINDOWS\System32\LXPMONUI.DLL
[2007/09/02 09:24:45 | 000,233,472 | —- | C] () – C:\WINDOWS\System32\LXCRinst.dll
[2007/09/02 09:24:05 | 000,303,104 | R— | C] () – C:\WINDOWS\System32\lxcrcoin.dll
[2007/08/04 07:19:01 | 000,000,098 | —- | C] () – C:\WINDOWS\WirelessFTP.INI
[2007/05/27 12:07:27 | 000,029,696 | —- | C] () – C:\Documents and Settings\Competition\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/05/21 20:37:57 | 000,000,116 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2007/05/11 09:45:33 | 000,000,000 | —- | C] () – C:\WINDOWS\tosOBEX.INI
[2007/05/11 09:23:56 | 000,000,546 | —- | C] () – C:\WINDOWS\System32\ABF3JP.DAT
[2007/03/21 14:43:53 | 001,116,544 | R— | C] () – C:\WINDOWS\System32\drivers\SynMini.sys
[2007/03/21 14:43:53 | 000,498,688 | R— | C] () – C:\WINDOWS\System32\drivers\SynPin.sys
[2007/03/21 14:43:53 | 000,045,056 | R— | C] () – C:\WINDOWS\StkUnist.exe
[2007/03/21 14:43:53 | 000,028,800 | R— | C] () – C:\WINDOWS\System32\drivers\SynCamd.sys
[2007/03/21 14:43:53 | 000,024,576 | R— | C] () – C:\WINDOWS\System32\SynSvc_.exe
[2007/03/21 14:43:53 | 000,014,848 | R— | C] () – C:\WINDOWS\System32\drivers\SynSam.sys
[2007/03/21 14:43:53 | 000,007,808 | R— | C] () – C:\WINDOWS\System32\drivers\SynScan.sys
[2007/03/21 14:30:51 | 000,987,136 | —- | C] () – C:\WINDOWS\System32\wcourier.exe
[2007/03/21 14:22:27 | 000,143,360 | R— | C] () – C:\WINDOWS\System32\RtlCPAPI.dll
[2007/03/21 14:22:27 | 000,040,960 | R— | C] () – C:\WINDOWS\System32\ChCfg.exe
[2007/03/21 14:15:38 | 000,133,246 | R— | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2007/03/21 14:12:29 | 000,000,882 | —- | C] () – C:\WINDOWS\orun32.ini
[2007/03/21 14:11:37 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2007/03/21 14:06:53 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2007/03/21 14:03:02 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2007/03/21 14:02:29 | 000,267,800 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2007/03/20 22:59:50 | 000,000,061 | —- | C] () – C:\WINDOWS\smscfg.ini
[2007/02/07 06:32:00 | 000,123,939 | —- | C] () – C:\WINDOWS\System32\drivers\kqemu.sys
[2006/01/02 21:16:32 | 000,000,010 | —- | C] () – C:\WINDOWS\System32\ABLKSR.ini
[2005/09/02 14:44:08 | 000,110,592 | —- | C] () – C:\WINDOWS\System32\TosBtAcc.dll
[2005/07/22 21:30:20 | 000,065,536 | —- | C] () – C:\WINDOWS\System32\TosCommAPI.dll
[2005/07/08 17:41:22 | 000,040,960 | —- | C] () – C:\WINDOWS\System32\lxcrvs.dll
[2005/04/03 10:30:00 | 000,110,592 | R— | C] () – C:\WINDOWS\System32\scardsyn.dll
[2005/02/17 10:07:48 | 000,005,632 | —- | C] () – C:\WINDOWS\System32\drivers\ATKACPI.sys
[2004/08/20 15:18:51 | 000,007,424 | —- | C] () – C:\WINDOWS\System32\drivers\MMIOPORT.SYS
[2004/08/20 15:18:51 | 000,002,538 | —- | C] () – C:\WINDOWS\System32\OEMINFO.INI
[2004/08/20 15:18:21 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/08/20 15:18:19 | 000,488,774 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2004/08/20 15:18:19 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004/08/20 15:18:19 | 000,089,284 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2004/08/20 15:18:19 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004/08/20 15:18:17 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2004/08/20 15:18:17 | 000,004,487 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2004/08/20 15:18:15 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2004/08/20 15:18:10 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004/08/20 15:18:10 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004/08/20 15:18:03 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004/08/20 15:17:54 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\Dcache.bin
[2004/07/20 17:04:02 | 000,094,208 | —- | C] () – C:\WINDOWS\System32\TosBtHcrpAPI.dll
[2004/01/15 14:43:28 | 000,114,688 | —- | C] () – C:\WINDOWS\System32\TBTMonUI.dll
[1998/05/06 15:10:00 | 000,069,632 | R— | C] () – C:\WINDOWS\System32\ODMA32.dll

========== LOP Check ==========

[2007/03/21 14:52:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Default User\Application Data\Infineon
[2007/03/21 14:52:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Infineon
[2008/01/27 10:15:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2009/12/29 18:54:10 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\GARMIN
[2011/05/23 12:09:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LogMeIn
[2011/05/29 17:31:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\TEMP
[2011/06/03 11:38:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Driver Mender
[2011/06/26 12:08:10 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\UDL
[2011/07/08 10:09:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011/10/17 13:29:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Driver Whiz
[2011/10/22 19:38:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\InstallMate
[2011/10/22 19:38:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Premium
[2011/10/23 08:24:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\boost_interprocess
[2011/11/17 08:45:00 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DatacardService
[2011/11/17 08:47:30 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Optus Mobile Broadband
[2007/03/21 14:52:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Administrator\Application Data\Infineon
[2007/03/21 14:52:48 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\Infineon
[2007/05/13 11:36:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\Toshiba
[2009/09/10 16:59:54 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\Asus
[2009/09/10 18:05:24 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\Windows Desktop Search
[2009/09/10 18:08:08 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\Windows Search
[2011/05/19 16:54:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\MSNInstaller
[2011/05/31 08:44:58 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\ASUS Security Protect Manager
[2011/06/01 12:30:20 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\AUSkey
[2011/06/26 12:20:52 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\EPSON
[2011/10/11 10:18:50 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\SystemRequirementsLab
[2011/10/22 20:35:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\mediabarim
[2011/11/29 18:04:44 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\IObit
[2011/05/30 17:15:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Treasurer\Application Data\NCH Swift Sound
[2011/05/30 17:15:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Treasurer\Application Data\Toshiba
[2011/05/30 17:15:28 | 000,000,000 | —D | M] – C:\Documents and Settings\Treasurer\Application Data\Infineon
[2007/03/21 14:52:48 | 000,000,000 | —D | M] – C:\Documents and Settings\LogMeInRemoteUser.TTGSC\Application Data\Infineon
[2011/12/04 10:54:14 | 000,000,282 | —- | M] () – C:\WINDOWS\Tasks\ASC4_PerformanceMonitor.job
[2011/12/04 10:54:12 | 000,000,292 | —- | M] () – C:\WINDOWS\Tasks\SmartDefrag_Startup.job

========== Purity Check ==========



< End of report >


OTL Extras logfile created on: 4/12/2011 11:08:09 AM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Competition\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

1023.20 Mb Total Physical Memory | 115.98 Mb Available Physical Memory | 11.33% Memory free
2.40 Gb Paging File | 1.36 Gb Available in Paging File | 56.71% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 44.70 Gb Total Space | 25.51 Gb Free Space | 57.07% Space Free | Partition Type: FAT32
Drive D: | 27.94 Gb Total Space | 27.91 Gb Free Space | 99.88% Space Free | Partition Type: FAT32

Computer Name: TTGSC | User Name: Competition | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-4001236980-1652061964-1848561122-1005\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
http [open] – "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] – "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5985:TCP" = 5985:TCP:*:Disabled:Windows Remote Management
"80:TCP" = 80:TCP:*:Disabled:Windows Remote Management - Compatibility Mode (HTTP-In)
"9100:TCP" = 9100:TCP:*:Enabled:Advanced TCP/IP Printer Port
"427:TCP" = 427:TCP:*:Enabled:Advanced TCP/IP SLP Port
"161:TCP" = 161:TCP:*:Enabled:Advanced TCP/IP SNMP Port

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" = C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe:*:Enabled:Windows Live Messenger
"C:\Program Files\Windows Live\Messenger\livecall.exe" = C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\AVG\AVG8\avgupd.exe" = C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG8\avgnsx.exe" = C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\hp\Digital Imaging\bin\hpqtra08.exe" = C:\Program Files\hp\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe
"C:\Program Files\hp\Digital Imaging\bin\hpqste08.exe" = C:\Program Files\hp\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe
"C:\Program Files\hp\Digital Imaging\bin\hposid01.exe" = C:\Program Files\hp\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe – (Hewlett-Packard Co.)
"C:\Program Files\hp\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\hp\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe – (Hewlett-Packard)
"C:\Program Files\HP\HP LaserJet P1100 Series\wificonfig.exe" = C:\Program Files\HP\HP LaserJet P1100 Series\wificonfig.exe:*:Enabled:Advanced TCP/IP Port Installer – (Hewlett Packard)
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit – (Apple Inc.)
"C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox – (Mozilla Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0221176E-9BDE-4F51-91EA-406CED5B3D0F}" = Cashflow Manager 2004
"{083CBC43-57A9-4DC8-8BE7-AF9CB5899953}" = Cashflow Manager
"{0E448256-D515-4C3E-A5BE-0A7B76CED5D4}" = hppP1100P1560P1600SeriesLaserJetService
"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox
"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{17E2F183-BAC4-4D01-BD7A-59F781E17EFA}" = REALTEK PCIE NIC Driver
"{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService
"{1976B721-8F15-4B86-92D2-725364AF8CE0}" = AUSkey software 1.4.0.3
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = LifeFrame2
"{208232B9-98B0-40CD-96B5-1362534D3830}" = Cashflow Manager [removed]
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java™ 6 Update 29
"{2792F12C-3515-4D69-8083-B557AF35F06F}" = LightScribe [removed]
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{2E5F8579-12A8-4169-A3EC-688EC7004A00}" = AuthenTec Fingerprint Sensor Minimum Install
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{3127F76D-5335-4AC7-BD1E-2F5247A23C24}" = iTunes
"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{36FDBE6E-6684-462b-AE98-9A39A1B200CC}" = HPProductAssistant
"{3FE3D6A5-2F5E-4870-A3AC-D1D88E0B2797}" = Intel® PROSet/Wireless WiFi Software
"{4462AD13-F2AA-4CBD-9F95-293C38EED870}" = Power4 Gear
"{4859F8D6-D994-4927-93CF-BB0DAA814DDB}" = Cashflow Manager Gold 7.7
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50A0893D-47D8-48E0-A7E8-44BCD7E4422E}" = Microsoft SQL Server Native Client
"{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{57B15AD4-8C9D-4164-82BB-E33D8644E757}" = ASUS InstantFun
"{5C474A83-A45F-470C-9AC8-2BD1C251BF9A}" = Skype™ 4.2
"{65179FD8-04C0-40A7-87FC-007F2CD5BF1E}" = LogMeIn
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = ASUSDVD
"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm
"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7736FD0A-9BF4-40F3-AF12-2E95D65D964F}" = TEAM MANAGER 5.0 for Swimming
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7988ba74-4a27-4685-991a-53f072f22808}" = F2200_Help
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7CE480FF-5B49-490E-BC18-1C663ECC0B61}" = MEET MANAGER 2.0 for Swimming
"{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2
"{853F464A-B2B8-404E-BA3E-B98FF6862C41}" = hppusgP1100P1560P1600Series
"{89DDBCD4-B326-4545-9A05-26C7B16C1DEB}" = PowerForPhone
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport
"{8F722FA9-B994-4C9B-B292-FD32D6206EDF}" = ASUS WLAN Card Utilities/Driver
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0014-0000-0000-0000000FF1CE}_PROR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{9650DF15-A909-4FE3-AE28-F1909356AD27}" = TEAM MANAGER 6.0 for Swimming
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = Asus MultiFrame
"{9D6D7811-43B3-463C-BC79-5D1755269989}" = Net4Switch
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}" = SolutionCenter
"{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1)
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AEC544CF-5D36-4F0A-86BD-DF3065258A5B}" = Fingerprint Sensor Minimum Install
"{AF1EA239-9F8A-475B-91BE-3DA009599D73}" = Acer My Start-up Screen
"{B59C861D-B9AC-4601-A304-668D9B7C244D}" = Cashflow Manager Gold 7.7
"{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply
"{B90450DF-E781-46FD-B1F1-0C86DA40E443}" = PIF DESIGNER
"{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5
"{C078C299-C2C2-4110-A6EF-8D5E66C228DA}" = e-tax 2011
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C6579A65-9CAE-4B31-8B6B-3306E0630A66}" = Apple Software Update
"{c6922d7f-c698-4d9e-9671-8b3de04d1511}" = DJ_AIO_03_F2200_Software_Min
"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg
"{CD41B576-4787-4D5C-95EE-24A4ABD89CD3}" = System Requirements Lab for Intel
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows
"{D371F551-0DB9-4CEC-844B-4C90CE91EA0B}" = hppLaserJetService
"{D433ABC3-0CD8-4BB0-B6A9-84501B4B47B7}" = ArcSoft PhotoImpression 5
"{D77D43B5-ED55-426b-B67B-E21F804F6102}" = HP Deskjet F2200 All-In-One Driver Software 10.0 Rel .3
"{D83899AB-9964-4CFC-A246-F1BD430A455F}" = ASUS Security Protect Manager
"{db18dc72-cd20-4801-be82-f5d2caeec4d7}" = DJ_AIO_03_F2200_Software
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{DE659AC8-EEF0-4115-AA0C-6500D194FB10}" = Garmin Training Center v5
"{DE730F37-A198-4112-A3B6-97786F34354A}" = ECI Client v6.0
"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01
"{E161E7E7-9875-4F7F-AFC7-72D40B45B5F3}" = ATI Catalyst Control Center
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{e97a9fd7-2fa1-4474-820d-3f8893a5b78a}" = F2200
"{eca3039b-e429-420f-bd5e-7dec0683fc32}" = DJ_AIO_03_F2200_ProductContext
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Advanced SystemCare 4_is1" = Advanced SystemCare 4
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"AVG8Uninstall" = AVG Free 8.5
"CutePDF Writer Installation" = CutePDF Writer 2.8
"Defcon_is1" = Defcon v1.43
"Elasto Mania" = Elasto Mania
"EPSON Scanner" = EPSON Scan
"Game Booster_is1" = Game Booster
"HControl" = ATK0100 ACPI UTILITY
"HP LaserJet Professional P1100-P1560-P1600 Series" = HP LaserJet Professional P1100-P1560-P1600 Series
"HP Photosmart Essential" = HP Photosmart Essential 2.5
"HP Smart Web Printing" = HP Smart Web Printing
"HP Solution Center & Imaging Support Tools" = HP Solution Center 10.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"iMesh 1 MediaBar" = MediaBar
"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0
"Lexmark 2400 Series" = Lexmark 2400 Series
"M3" = Asus MiVo Messenger
"Magic ISO Maker v5.4 (build 0256)" = Magic ISO Maker v5.4 (build 0256)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Media Converter SA Edition" = Media Converter SA Edition 0.8
"Micro Flight" = Micro Flight
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 8.0.1 (x86 en-US)" = Mozilla Firefox 8.0.1 (x86 en-US)
"MSNINST" = MSN
"Nero - Burning Rom!UninstallKey" = Nero OEM
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"ProInst" = Intel PROSet Wireless
"PROR" = Microsoft Office Professional 2007
"Secunia PSI" = Secunia PSI (2.0.0.3003)
"Shop for HP Supplies" = Shop for HP Supplies
"Smart Defrag 2_is1" = Smart Defrag 2
"SMSERIAL" = Motorola SM56 Speakerphone Modem
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"USB2.0 1.3M WebCam" = USB2.0 1.3M WebCam
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WebRipper" = WebRipper 1.31
"WIC" = Windows Imaging Component
"Windows XP Service Pack" = Windows XP Service Pack 3

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 30/11/2011 3:21:14 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 30/11/2011 3:21:14 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 336282

Error - 30/11/2011 3:21:14 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 336282

Error - 30/11/2011 3:21:19 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 30/11/2011 3:21:19 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 341328

Error - 30/11/2011 3:21:19 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 341328

Error - 2/12/2011 5:26:52 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2/12/2011 5:26:53 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1953

Error - 2/12/2011 5:26:53 AM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1953

Error - 3/12/2011 8:27:43 PM | Computer Name = TTGSC | Source = Bonjour Service | ID = 100
Description = Client application bug: DNSServiceResolve(5c:59:48:6c:5a:e9@fe80::5e59:48ff:fe6c:5ae9._apple-mobdev._tcp.local.)
active for over two minutes. This places considerable burden on the network.

[ ASUS Security Protect Manager Events ]
Error - 10/05/2007 10:47:48 PM | Computer Name = TTGSC | Source = AuthServer | ID = 100811779
Description = The system failed to authenticate the submitted user credentials. User:
Competition@TTGSC Client GUID: {Password} Error: 0xC516020B Client Host: localhost

Client
Address: 127.0.0.1 Authority: ASUS Server Host: localhost Protocol: HTTP

Error - 10/05/2007 10:48:05 PM | Computer Name = TTGSC | Source = AuthServer | ID = 100811779
Description = The system failed to authenticate the submitted user credentials. User:
Competition@TTGSC Client GUID: {Password} Error: 0xC516020B Client Host: localhost

Client
Address: 127.0.0.1 Authority: ASUS Server Host: localhost Protocol: HTTP

[ OSession Events ]
Error - 14/09/2009 4:29:32 AM | Computer Name = TTGSC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6316.5000, Microsoft Office Version: 12.0.6215.1000. This session lasted 1389
seconds with 60 seconds of active time. This session ended with a crash.

Error - 13/06/2011 6:43:27 PM | Computer Name = TTGSC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 67942
seconds with 360 seconds of active time. This session ended with a crash.

Error - 26/06/2011 12:11:24 AM | Computer Name = TTGSC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 132
seconds with 120 seconds of active time. This session ended with a crash.

Error - 26/06/2011 12:18:20 AM | Computer Name = TTGSC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 107
seconds with 60 seconds of active time. This session ended with a crash.

Error - 26/06/2011 1:27:13 AM | Computer Name = TTGSC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 99
seconds with 60 seconds of active time. This session ended with a crash.

Error - 26/06/2011 3:30:34 AM | Computer Name = TTGSC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 107
seconds with 60 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 29/11/2011 3:24:37 AM | Computer Name = TTGSC | Source = Service Control Manager | ID = 7034
Description = The Intel® PROSet/Wireless Registry Service service terminated unexpectedly.
It has done this 1 time(s).

Error - 29/11/2011 3:24:37 AM | Computer Name = TTGSC | Source = Service Control Manager | ID = 7034
Description = The Secunia Update Agent service terminated unexpectedly. It has
done this 1 time(s).

Error - 29/11/2011 3:24:37 AM | Computer Name = TTGSC | Source = Service Control Manager | ID = 7034
Description = The Secunia PSI Agent service terminated unexpectedly. It has done
this 1 time(s).

Error - 29/11/2011 3:24:40 AM | Computer Name = TTGSC | Source = Service Control Manager | ID = 7034
Description = The iPod Service service terminated unexpectedly. It has done this
1 time(s).

Error - 29/11/2011 3:24:41 AM | Computer Name = TTGSC | Source = Service Control Manager | ID = 7034
Description = The HP LaserJet Service service terminated unexpectedly. It has done
this 1 time(s).

Error - 29/11/2011 6:50:57 PM | Computer Name = TTGSC | Source = Service Control Manager | ID = 7011
Description = Timeout (30000 milliseconds) waiting for a transaction response from
the EvtEng service.

Error - 3/12/2011 6:20:45 AM | Computer Name = TTGSC | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)

Error - 3/12/2011 6:20:45 AM | Computer Name = TTGSC | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.

Error - 3/12/2011 6:21:00 AM | Computer Name = TTGSC | Source = W32Time | ID = 39452689
Description = Time Provider NtpClient: An error occurred during DNS lookup of the
manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
again in 15 minutes. The error was: A socket operation was attempted to an unreachable
host. (0x80072751)

Error - 3/12/2011 6:21:00 AM | Computer Name = TTGSC | Source = W32Time | ID = 39452701
Description = The time provider NtpClient is configured to acquire time from one
or more time sources, however none of the sources are currently accessible. No attempt
to contact a source will be made for 14 minutes. NtpClient has no source of accurate
time.


< End of report >
Welcome back TTGSC, :wavey:

Going though your log now, in the mean time please run SystemLook

Please download SystemLook from one of the links below and save it to your Desktop.
Download Mirror #1
Download Mirror #2

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    :filefind
    iMesh
    MediaBar
    :folderfind
     iMesh
    MediaBar
    :regfind
    iMesh
    MediaBar
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt


Summary of the logs I need from you in your next post:
SystemLook log
Black Pegasus - have connected from wireless to cable connection so that i can talk to you and speeds are better. Thats great except i want the wireless capability. SystemLook 30.07.11 by jpshortstuff Log created at 21:01 on 06/12/2011 by Competition Administrator - Elevation successful ========== filefind ========== Searching for "iMesh" No files found. Searching for "MediaBar" No files found. ========== folderfind ========== Searching for "iMesh" No folders found. Searching for "MediaBar" No folders found. ========== regfind ========== Searching for "iMesh" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}] "URL"="http://search.imesh.com/web?src=ieb&appid=20&systemid=1&sr=0&q={searchTerms}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Competition\My Documents\Downloads\iMeshV11.exe"="iMesh " [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\DOCUME~1\COMPET~1\LOCALS~1\Temp\mia913.tmp\iMesh_V11_en_Setup.exe"="iMesh " [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\iMesh] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28387537-e3f9-4ed7-860c-11e69af4a8a0}] "AppPath"="C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{672762CF-86FC-49E3-B68D-7AB4F1FECCE0}] "AppPath"="C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}] "URL"="http://search.imesh.com/web?src=ieb&appid=20&systemid=1&sr=0&q={searchTerms}" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\iMesh 1 MediaBar] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C608B2EF460440145A785B01993FD415] "00000000000000000000000000000000"="C:\DOCUME~1\COMPET~1\LOCALS~1\Temp\SetupDataMngr_iMesh.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iMesh 1 MediaBar] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iMesh 1 MediaBar] "Contact"="iMesh Inc." [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iMesh 1 MediaBar] "Publisher"="iMesh Inc." [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\iMesh Applications\iMesh\iMesh.exe"="C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh" [HKEY_USERS\S-1-5-21-4001236980-1652061964-1848561122-1005\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}] "URL"="http://search.imesh.com/web?src=ieb&appid=20&systemid=1&sr=0&q={searchTerms}" [HKEY_USERS\S-1-5-21-4001236980-1652061964-1848561122-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\Documents and Settings\Competition\My Documents\Downloads\iMeshV11.exe"="iMesh " [HKEY_USERS\S-1-5-21-4001236980-1652061964-1848561122-1005\Software\Microsoft\Windows\ShellNoRoam\MUICache] "C:\DOCUME~1\COMPET~1\LOCALS~1\Temp\mia913.tmp\iMesh_V11_en_Setup.exe"="iMesh " Searching for "MediaBar" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28387537-e3f9-4ed7-860c-11e69af4a8a0}] "AppPath"="C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{672762CF-86FC-49E3-B68D-7AB4F1FECCE0}] "AppPath"="C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{28387537-e3f9-4ed7-860c-11e69af4a8a0}"="MediaBar" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\iMesh 1 MediaBar] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iMesh 1 MediaBar] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iMesh 1 MediaBar] "DisplayName"="MediaBar" -= EOF =-
Hello TTGSC,


Please make a backup of your Registry


  • The following fix requires altering your Windows Registry. Therefore we need to back it up in case we run into problems:
  • Download ERUNT to your Desktop (Right click the link, select "Save Link/Target As"…, select your Desktop and press Save).
  • Right click erunt.zip, choose "Extract All…" and follow the prompts to unzip the program.
  • Open the ERUNT folder on your Desktop and double click ERUNT.exe to start the program.
  • Click OK for all the prompts to back up your registry to the default location.
  • Note: if it becomes necessary to restore the registry, open the backup folder and start ERDNT.exe.


Run OTL.exe
  • Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL

    :OTL
    PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
    FF - prefs.js..browser.search.defaultenginename: "iMesh Web Search"
    FF - prefs.js..browser.search.order.1: "iMesh Web Search"
    FF - prefs.js..browser.search.selectedEngine: "iMesh Web Search"
    FF - prefs.js..keyword.URL: "http://search.imesh.com/web?src=ffb&appid=20&systemid=1&sr=0&q="
    FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.imesh.com/web?src=ffb&appid=20&systemid=1&sr=0&q="
    [2011/10/22 20:35:26 | 000,000,000 | —D | M] (MediaBar) – C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}
    [2011/10/22 20:35:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Competition\Application Data\mediabarim
    
    :Reg
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
    "C:\Program Files\iMesh Applications\iMesh\iMesh.exe"=-
    
    :Commands
    [purity]
    [emptytemp]
    [emptyflash]
    [start explorer]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot when it is done
  • Then post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )




Use Revo Uninstaller to remove any leftover imesh


  • You can dowwnload Revo Uninstaller from here.
  • Information about how to use this program is provided on the download page.

Summary of the logs I need from you in your next post:

OTL log
Can you describe exactly what problems remain with the machine.
All processes killed ========== OTL ========== No active process named explorer.exe was found! Prefs.js: "iMesh Web Search" removed from browser.search.defaultenginename Prefs.js: "iMesh Web Search" removed from browser.search.order.1 Prefs.js: "iMesh Web Search" removed from browser.search.selectedEngine Prefs.js: "http://search.imesh.com/web?src=ffb&appid=20&systemid=1&sr=0&q=" removed from keyword.URL Prefs.js: "http://search.imesh.com/web?src=ffb&appid=20&systemid=1&sr=0&q=" removed from sweetim.toolbar.previous.keyword.URL C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\searchbar folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\options folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\weatherbutton\panels\images folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\weatherbutton\panels folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\weatherbutton\icons folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\weatherbutton folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\uwa folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\radio\images folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\radio\css folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\radio folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\panels\images folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\panels\default\scripts folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\panels\default\images folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\panels\default\css folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\panels\default folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\panels\css folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib\panels folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin\lib folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\skin folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content\widgets\net.vmn.www.PPCBully folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content\widgets\com.djboxservice.dj.DJBox\thumbs folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content\widgets\com.djboxservice.dj.DJBox folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content\widgets folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content\modules folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content\lib folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content\data\search folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content\data folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome\content folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\chrome folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}\components folder moved successfully. C:\Documents and Settings\Competition\Application Data\Mozilla\Firefox\Profiles\0fngczbi.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0} folder moved successfully. C:\Documents and Settings\Competition\Application Data\mediabarim folder moved successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List\\C:\Program Files\iMesh Applications\iMesh\iMesh.exe deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: All Users User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Competition ->Temp folder emptied: 648484 bytes ->Temporary Internet Files folder emptied: 808942 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 52915305 bytes ->Flash cache emptied: 0 bytes User: LogMeInRemoteUser ->Temporary Internet Files folder emptied: 0 bytes User: Treasurer ->Flash cache emptied: 0 bytes User: LogMeInRemoteUser.TTGSC ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 691132 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes RecycleBin emptied: 27111568 bytes Total Files Cleaned = 78.00 mb [EMPTYFLASH] User: Default User User: All Users User: NetworkService User: LocalService User: Administrator User: Competition ->Flash cache emptied: 0 bytes User: LogMeInRemoteUser User: Treasurer ->Flash cache emptied: 0 bytes User: LogMeInRemoteUser.TTGSC Total Flash Files Cleaned = 0.00 mb OTL by OldTimer - Version 3.2.31.0 log created on 12082011_174110 Files\Folders moved on Reboot… C:\Documents and Settings\Competition\Local Settings\Temporary Internet Files\Content.Word\~WRS{88D0F5BE-F4D3-4E67-9735-4091CFD15D14}.tmp moved successfully. C:\Documents and Settings\Competition\Local Settings\Temporary Internet Files\Content.Word\~WRS{B47B52EA-9506-42A4-AE7E-81664CFB5CA5}.tmp moved successfully. C:\Documents and Settings\Competition\Local Settings\Temporary Internet Files\Content.Word\~WRS{76E4981F-D2A6-4FE3-BFE7-432D72D81160}.tmp moved successfully. Registry entries deleted on Reboot… Still an unreliable data transfer rate - still having server not found problems,
Black Pegasus Looks like you have cleared all of the rubbish from my PC, as for the speed issue, i may have accidentally fixed that by placing a new filter on the line.
Hello TTGSC,

Just a couple of scans left then we are done. I will send you over to our Networking fourm so they can help you
with the server not found problem.


You have this program installed, Malwarebytes' Anti-Malware (MBAM). Please update it and run a scan.

Open MBAM

  • Click the Update tab
  • Click Check for Updates
  • If an update is found, it will download and install the latest version.
  • The program will close to update and reopen.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.

Please post back with the mbam log. Any remaining issues?
============
NEXT
As a Vista or Windows 7 user you will need to right click your browser icon and select "Run as Administrator" in order to run this scan.
  • Do not use this instance of your browser for anything besides doing this scan
  • When the scan is complete and the results saved, close that instance of your browser
  • Open a new one the usual way and post the results in this topic.

*Note
It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.
Please don't go surfing while your resident protection is disabled!
Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.





Go here to run an online scannner from
ESET

(Note: You can use Internet Explorer or FireFox for this scan. If you use FireFox you will be asked to install an additional component. Please allow this.)

  • Tick the box next to YES, I accept the Terms of Use.
  • Click Start
  • When asked, allow the activex control to install
  • Disable your Antivirus software. You can usually do this with its Notfication Tray icon near the clock
  • Click Start
  • Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is Checked.
  • Click Scan.
  • Wait for the scan to finish.
  • Re-enable your Antivirus software.
  • A logfile is created and located at C:\Program Files\EsetOnlineScanner\log.txt. or C:\Program Files\ESET\log.txtWe will need this later.
Please post back with the ESET log.


Summary of the logs I need from you in your next post:
Malwarebytes' log
ESET log

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI