my pc is infected

My pc has been hyjacked. I am unable to log in to my account, and my email contacts have been recieving msgs to send money.
I am very frustrated, and not computer literate.

OTL logfile created on: 12/9/2011 6:21:11 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Owner\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

509.80 Mb Total Physical Memory | 150.99 Mb Available Physical Memory | 29.62% Memory free
1.22 Gb Paging File | 0.75 Gb Available in Paging File | 61.23% Paging File free
Paging file location(s): c:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINNT | %ProgramFiles% = C:\Program Files
Drive C: | 76.33 Gb Total Space | 52.04 Gb Free Space | 68.18% Space Free | Partition Type: NTFS

Computer Name: S0028835721 | User Name: Owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Owner\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
PRC - C:\WINNT\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
PRC - C:\WINNT\system32\HPZipm12.exe (HP)
PRC - C:\WINNT\system32\NMSSvc.Exe (Intel Corporation)
PRC - C:\WINNT\wanmpsvc.exe (America Online, Inc.)


========== Modules (No Company Name) ==========

MOD - C:\WINNT\system32\msdmo.dll ()
MOD - C:\WINNT\system32\devenum.dll ()
MOD - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll ()


========== Win32 Services (SafeList) ==========

SRV - (SpywareCleanerService) – File not found
SRV - (HidServ) – File not found
SRV - (AppMgmt) – File not found
SRV - (UTSCSI) – C:\WINNT\system32\UTSCSI.EXE ()
SRV - (LVPrcSrv) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation)
SRV - (Pml Driver HPZ12) – C:\WINNT\system32\HPZipm12.exe (HP)
SRV - (NMSSvc) Intel® – C:\WINNT\system32\NMSSvc.Exe (Intel Corporation)
SRV - (WANMiniportService) WAN Miniport (ATW) – C:\WINNT\wanmpsvc.exe (America Online, Inc.)


========== Driver Services (SafeList) ==========

DRV - (LVPr2Mon) – C:\WINNT\system32\drivers\LVPr2Mon.sys ()
DRV - (LVUSBSta) – C:\WINNT\system32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) – C:\WINNT\system32\drivers\LV302V32.SYS (Logitech Inc.)
DRV - (Cdralw2k) – C:\WINNT\System32\drivers\cdralw2k.sys (Sonic Solutions)
DRV - (Cdr4_xp) – C:\WINNT\System32\drivers\cdr4_xp.sys (Sonic Solutions)
DRV - (PID_0928) Logitech QuickCam Express(PID_0928) – C:\WINNT\system32\drivers\LV561AV.SYS (Logitech Inc.)
DRV - (GTWModem) – C:\WINNT\system32\drivers\GWMDM.sys (GTW)
DRV - (ha10kx2k) – C:\WINNT\system32\drivers\ha10kx2k.sys (Creative Technology Ltd)
DRV - (emupia) – C:\WINNT\system32\drivers\emupia2k.sys (Creative Technology Ltd)
DRV - (ctsfm2k) – C:\WINNT\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV - (ctprxy2k) – C:\WINNT\system32\drivers\ctprxy2k.sys (Creative Technology Ltd)
DRV - (ossrv) – C:\WINNT\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV - (ctaud2k) Creative Audio Driver (WDM) – C:\WINNT\system32\drivers\ctaud2k.sys (Creative Technology Ltd)
DRV - (ctac32k) – C:\WINNT\system32\drivers\ctac32k.sys (Creative Technology Ltd)
DRV - (NMSCFG) – C:\WINNT\system32\drivers\NMSCFG.SYS (Intel Corporation)
DRV - (wanatw) WAN Miniport (ATW) – C:\WINNT\system32\drivers\wanatw4.sys (America Online, Inc.)
DRV - (SbcpHid) – C:\WINNT\system32\drivers\SbcpHid.sys ()
DRV - (BCMModem) – C:\WINNT\system32\drivers\BCMDM.sys (BCM)
DRV - (Sk9920nt) – C:\WINNT\system32\drivers\Sk9920nt.sys (Silitek Corp.)
DRV - (Sk99202k) – C:\WINNT\system32\drivers\sk99202k.sys (Silitek Corp.)
DRV - (RioPNP) – C:\WINNT\System32\drivers\RioPnP.sys (RioPort.com)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomSearch = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&am…amp;affID=19637
IE - HKLM\..\URLSearchHook: {707E6F76-9FFB-4920-A976-EA101271BC25} - No CLSID value found
IE - HKLM\..\URLSearchHook: {9368D063-44BE-49B9-BD14-BB9663FD38FC} - No CLSID value found

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTe…-8&fr=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
IE - HKCU\..\URLSearchHook: {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files\Minibar\Froggy.dll (TODO: <название компании>)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = localhost
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=proxy-server:8080;https=proxy-server:8080

========== FireFox ==========

FF - prefs.js..network.proxy.http: "proxy-server"
FF - prefs.js..network.proxy.http_port: 8080
FF - prefs.js..network.proxy.no_proxies_on: "localhost"
FF - prefs.js..network.proxy.ssl: "proxy-server"
FF - prefs.js..network.proxy.ssl_port: 8080

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINNT\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\2.0.40115.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINNT\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files\Viewpoint\Viewpoint Media Player\npViewpoint.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)


[2011/04/30 14:51:05 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Owner\Application Data\Mozilla\Extensions
[2011/07/10 18:30:53 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\7pd3kjez.default\extensions
[2011/07/10 18:30:54 | 000,000,000 | —D | M] (Babylon) – C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\7pd3kjez.default\extensions\[removed]
[2011/07/10 18:30:55 | 000,002,423 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\babylon.xml

========== Chrome ==========

CHR - default_search_provider: ()
CHR - default_search_provider: search_url =
CHR - default_search_provider: suggest_url =

O1 HOSTS File: ([2006/01/10 21:12:27 | 000,000,734 | —- | M]) - C:\WINNT\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Gamevance) - {0ED403E8-470A-4a8a-85A4-D7688CFE39A3} - C:\Program Files\Gamevance\gamevancelib32.dll File not found
O2 - BHO: (eBay Toolbar Helper) - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll ()
O2 - BHO: (MrFroggy Class) - {856E12B5-22D7-4E22-9ACA-EA9A008DD65B} - C:\Program Files\Minibar\Froggy.dll (TODO: <название компании>)
O2 - BHO: (MinibarBHO) - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files\Minibar\Kango.dll (KangoExtensions)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (AIMSite Class) - {D70E6A20-7060-4829-B3D7-B6624A1DE7C6} - C:\Program Files\AIM Toolbar\aimhelper.dll File not found
O3 - HKLM\..\Toolbar: (no name) - {69135BDE-5FDC-4B61-98AA-82AD2091BCCC} - No CLSID value found.
O3 - HKLM\..\Toolbar: (eBay Toolbar) - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No CLSID value found.
O4 - HKLM..\Run: [AASecuUFD] File not found
O4 - HKLM..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe (eBay)
O4 - HKLM..\Run: [GWMDMMSG] C:\WINNT\GWMDMMSG.exe (GTW)
O4 - HKLM..\Run: [GWMDMpi] C:\WINNT\GWMDMpi.exe ()
O4 - HKLM..\Run: [Hot Key Kbd 9910 Daemon] C:\WINNT\System32\SK9910DM.EXE (Silitek Corporation)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe (Logitech Inc.)
O4 - HKLM..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE (Logitech Inc.)
O4 - HKLM..\Run: [wcmdmgr] C:\WINNT\wt\updater\wcmdmgrl.exe (WildTangent, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Logitech Vid] C:\Program Files\Logitech\Logitech Vid\vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [LogitechSoftwareUpdate] C:\Program Files\Logitech\Video\ManifestEngine.exe (Logitech Inc.)
O4 - HKCU..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 File not found
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\WINNT\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; {DBA7EAED-B854-4BD4-8E75-C32D34A21180}; .NET CLR 1.0.3705; .NET CLR 1.1.4322; SpamBlockerUtility 4.8.4; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; BO1IE8_v1;ENUS)" -"http://www.y8.com/games/Street_Sesh" File not found
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = _ [binary data]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: _NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm File not found
O8 - Extra context menu item: &eBay Search - C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll ()
O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O9 - Extra Button: Sidesearch - {000007C6-17DF-4438-92A4-DE5537471BA3} - Reg Error: Key error. File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Layouts Express - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - C:\Program Files\Minibar\MinibarButton.dll (TODO: )
O15 - HKCU\..Trusted Domains: ([]msn in My Computer)
O16 - DPF: {0000000A-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/d/4…0367/wmavax.CAB (Reg Error: Key error.)
O16 - DPF: {00000161-0000-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/msaudio.cab (Reg Error: Key error.)
O16 - DPF: {00000162-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/wma9dmo.cab (Reg Error: Key error.)
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O16 - DPF: {0837121A-6472-43BD-8A40-D9221FF1C4CE} http://www.sidestep.com/get/k42037/sb026.cab (Reg Error: Key error.)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/2008.1…toUploader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/8/b…heckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} https://am.serviceportal.hp.com/MSWeb/Custo…DataManager.CAB (Hewlett-Packard Online Support Services)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfarm.com/images/nocache/f…p1.0.0.15-3.cab (Reg Error: Key error.)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6…922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/wmv9dmo.cab (Reg Error: Key error.)
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab55579.cab (MSN Games – Buddy Invite)
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} http://office.microsoft.com/officeupdate/content/opuc3.cab (Office Update Installation Engine)
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} http://a1540.g.akamai.net/7/1540/52/200305…meInstaller.exe (Reg Error: Key error.)
O16 - DPF: {4855C21B-E452-4661-A702-ED3493CE74DF} http://sp.ask.com/docs/toolbar/download/askbar-inst.cab (Reg Error: Value error.)
O16 - DPF: {4B1A4A31-8845-11D5-9769-00B0D071D434} http://iowacniceweb01.ic.ncs.com/icm/caller.cab (Avaya ICM Client)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {511073AD-BE56-4D43-AE68-93390514385E} hcp://system/TechTools.CAB (TechToolsActivex.TechTools)
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} http://zone.msn.com/binframework/v10/ZPAChat.cab55579.cab (MSN Games – Game Chat)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://update.microsoft.com/microsoftupdat…b?1219589214343 (MUWebControl Class)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.0…oUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {8C279F4E-917E-4CD2-8DF0-D9C73C0CE763} http://zone.msn.com/bingame/zpagames/zpa_wof.cab55579.cab (ZPA_WheelOfFortune Object)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…r/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {99CDFD87-F97A-42E1-9C13-D18220D90AD1} hcp://system/StartFirstControl.CAB (StartFirstControl.CheckFirst)
O16 - DPF: {9DBAFCCF-592F-FFFF-FFFF-00608CEC297C} http://download.weatherbug.com/minibug/tri…uginstaller.cab (Reg Error: Key error.)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupdate.microsoft.com/CAB/…37646.329212963 (Reg Error: Key error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/…k.cab102118.cab (MSN Games - Installer)
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_12)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shockwa…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} http://zone.msn.com/binframework/v10/StProxy.cab55579.cab (MSN Games – Game Communicator)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://zone.msn.com/bingame/popcaploader_v10.cab (PopCapLoader Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {EF0DBA6F-43CE-4B26-9808-2AB38FA0DB29} http://fdl.msn.com/public/investor/v13/ticker.cab (MSN Money Ticker)
O16 - DPF: {F773E7B2-62A9-4524-9109-87D2F0BEFAA4} http://zone.msn.com/bingame/zpagames/zpa_kqrp.cab56961.cab (ChessControl Class)
O16 - DPF: {FF3C5A9F-5A91-4930-80E8-4709194C2AD3} http://zone.msn.com/bingame/zpagames/Check…PA.cab55579.cab (CheckersZPA Object)
O16 - DPF: DirectAnimation Java Classes file://C:\WINNT\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINNT\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0334AC1B-ED28-4058-AA79-B98D33930547}: DhcpNameServer = [removed] [removed] [removed]
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINNT\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINNT\system32\userinit.exe) -C:\WINNT\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\accsys: DllName - (C:\DOCUME~1\Owner\LOCALS~1\Temp\syscca.dat) - File not found
O20 - Winlogon\Notify\igfxcui: DllName - (igfxsrvc.dll) - C:\WINNT\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\uncmd: DllName - (C:\DOCUME~1\Owner\LOCALS~1\Temp\dmcnu.dat) - File not found
O24 - Desktop Components:0 () - http://65.55.136.124/cgi-bin/getmsg/MIFAMI…c1726581e2ea8d4
O24 - Desktop Components:1 (My Current Home Page) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004/06/30 17:46:55 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2\{8ee1fff4-107b-11e0-9e98-00038a000015}\Shell\AutoRun\command - "" = F:\Setup_FlipShare.exe
O33 - MountPoints2\{8ee1fff4-107b-11e0-9e98-00038a000015}\Shell\Setup FlipShare\command - "" = F:\Setup_FlipShare.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\WINNT\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINNT\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINNT\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo - C:\WINNT\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\WINNT\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINNT\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.I420 - C:\WINNT\System32\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.iv31 - C:\WINNT\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINNT\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINNT\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINNT\System32\ir50_32.dll (Intel Corporation)
Drivers32: vidc.LEAD - LCODCCMP.DLL File not found
Drivers32: VIDC.WMV3 - C:\WINNT\System32\wmv9vcm.dll (Microsoft Corporation)
Drivers32: wave1 - C:\WINNT\System32\serwvdrv.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/12/09 15:03:24 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\Owner\Desktop\HiJackThis.exe
[2011/12/09 15:01:53 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Owner\Desktop\OTL.exe
[2011/12/08 20:11:24 | 000,000,000 | —D | C] – C:\Program Files\File Type Assistant
[2011/12/08 20:10:52 | 000,000,000 | —D | C] – C:\Program Files\FreeFileViewer
[2011/12/08 20:09:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\RebateRobot for Online Shopping
[2011/12/08 20:09:23 | 000,000,000 | —D | C] – C:\skin
[2011/12/08 20:09:23 | 000,000,000 | —D | C] – C:\defaults
[2011/12/08 20:09:23 | 000,000,000 | —D | C] – C:\content
[2011/12/08 20:09:20 | 000,000,000 | —D | C] – C:\Program Files\RebateRobot
[2011/12/08 20:09:12 | 000,000,000 | —D | C] – C:\Program Files\Freeze.com
[2011/12/06 17:11:06 | 000,414,368 | —- | C] (Adobe Systems Incorporated) – C:\WINNT\System32\FlashPlayerCPLApp.cpl
[2005/08/28 00:49:42 | 000,090,112 | R— | C] ( ) – C:\WINNT\System32\SCCD3X02.DLL
[2004/01/25 15:41:48 | 000,036,963 | R— | C] (Cypress Semiconductor) – C:\Program Files\Common Files\SM1updtr.dll
[2002/11/10 12:19:38 | 000,528,384 | —- | C] ( ) – C:\WINNT\System32\BDErastMMX3.dll
[2001/10/12 10:45:02 | 000,065,536 | R— | C] ( ) – C:\WINNT\System32\a3d.dll
[8 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]
[33 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[1 C:\WINNT\System32\drivers\*.tmp files -> C:\WINNT\System32\drivers\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2026/12/04 21:52:44 | 001,841,225 | —- | M] () – C:\Documents and Settings\Owner\My Documents\S7300358.JPG
[2026/09/30 15:46:58 | 001,761,771 | —- | M] () – C:\Documents and Settings\Owner\My Documents\S7300209.JPG
[2011/12/09 18:25:00 | 000,000,418 | -H– | M] () – C:\WINNT\tasks\User_Feed_Synchronization-{3E727B9B-0C91-448D-84AE-60C22F090D69}.job
[2011/12/09 17:55:00 | 000,000,978 | —- | M] () – C:\WINNT\tasks\GoogleUpdateTaskUserS-1-5-21-3309289771-2985716079-31591532-1003UA.job
[2011/12/09 17:52:00 | 000,000,254 | —- | M] () – C:\WINNT\tasks\Check Updates for Windows Live Toolbar.job
[2011/12/09 17:50:00 | 000,000,884 | —- | M] () – C:\WINNT\tasks\GoogleUpdateTaskMachineUA.job
[2011/12/09 17:00:00 | 000,000,390 | —- | M] () – C:\WINNT\tasks\RegCure Program Check.job
[2011/12/09 15:03:27 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\Owner\Desktop\HiJackThis.exe
[2011/12/09 15:01:53 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Owner\Desktop\OTL.exe
[2011/12/09 08:27:32 | 000,000,330 | -H– | M] () – C:\WINNT\tasks\MP Scheduled Scan.job
[2011/12/09 08:24:27 | 000,012,690 | —- | M] () – C:\WINNT\System32\wpa.dbl
[2011/12/09 08:24:16 | 000,000,880 | —- | M] () – C:\WINNT\tasks\GoogleUpdateTaskMachineCore.job
[2011/12/09 08:24:16 | 000,000,378 | —- | M] () – C:\WINNT\tasks\FreeFileViewerUpdateChecker.job
[2011/12/09 08:24:05 | 000,002,048 | –S- | M] () – C:\WINNT\bootstat.dat
[2011/12/09 08:24:04 | 534,630,400 | -HS- | M] () – C:\hiberfil.sys
[2011/12/09 08:23:22 | 000,023,304 | —- | M] () – C:\WINNT\System32\BMXCtrlState-{00000001-00000000-00000002-00001102-00000004-00581102}.rfx
[2011/12/09 08:23:22 | 000,023,304 | —- | M] () – C:\WINNT\System32\BMXBkpCtrlState-{00000001-00000000-00000002-00001102-00000004-00581102}.rfx
[2011/12/09 08:23:22 | 000,018,648 | —- | M] () – C:\WINNT\System32\BMXStateBkp-{00000001-00000000-00000002-00001102-00000004-00581102}.rfx
[2011/12/09 08:23:22 | 000,018,648 | —- | M] () – C:\WINNT\System32\BMXState-{00000001-00000000-00000002-00001102-00000004-00581102}.rfx
[2011/12/09 08:23:22 | 000,001,080 | —- | M] () – C:\WINNT\System32\settingsbkup.sfm
[2011/12/09 08:23:22 | 000,001,080 | —- | M] () – C:\WINNT\System32\settings.sfm
[2011/12/09 08:23:22 | 000,000,024 | —- | M] () – C:\WINNT\System32\DVCStateBkp-{00000001-00000000-00000002-00001102-00000004-00581102}.dat
[2011/12/09 08:23:22 | 000,000,024 | —- | M] () – C:\WINNT\System32\DVCState-{00000001-00000000-00000002-00001102-00000004-00581102}.dat
[2011/12/09 08:19:53 | 000,002,052 | —- | M] () – C:\WINNT\epplauncher.mif
[2011/12/08 19:18:48 | 000,618,362 | —- | M] () – C:\WINNT\System32\perfh009.dat
[2011/12/08 19:18:48 | 000,141,448 | —- | M] () – C:\WINNT\System32\perfc009.dat
[2011/12/08 18:55:00 | 000,000,926 | —- | M] () – C:\WINNT\tasks\GoogleUpdateTaskUserS-1-5-21-3309289771-2985716079-31591532-1003Core.job
[2011/12/08 03:08:00 | 000,000,372 | —- | M] () – C:\WINNT\tasks\RegCure.job
[2011/12/06 17:11:06 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\WINNT\System32\FlashPlayerCPLApp.cpl
[2011/12/03 17:49:40 | 000,001,420 | —- | M] () – C:\install.rdf
[2011/11/24 18:59:58 | 000,000,792 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Microsoft Office Outlook.lnk
[2011/11/21 20:20:54 | 000,002,261 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2011/11/14 03:08:36 | 000,001,393 | —- | M] () – C:\WINNT\imsins.BAK
[8 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]
[33 C:\WINNT\System32\*.tmp files -> C:\WINNT\System32\*.tmp -> ]
[1 C:\WINNT\System32\drivers\*.tmp files -> C:\WINNT\System32\drivers\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/12/09 08:19:53 | 000,002,052 | —- | C] () – C:\WINNT\epplauncher.mif
[2011/12/08 20:11:07 | 000,000,378 | —- | C] () – C:\WINNT\tasks\FreeFileViewerUpdateChecker.job
[2011/12/08 20:09:22 | 000,001,420 | —- | C] () – C:\install.rdf
[2011/04/22 10:30:05 | 000,000,015 | —- | C] () – C:\WINNT\wgedit.ini
[2010/12/22 11:47:33 | 000,000,000 | —- | C] () – C:\WINNT\System32\UTSCSI.EXE
[2010/07/11 17:51:43 | 000,000,036 | —- | C] () – C:\Documents and Settings\Owner\Local Settings\Application Data\housecall.guid.cache
[2009/10/07 01:46:36 | 000,025,752 | —- | C] () – C:\WINNT\System32\drivers\LVPr2Mon.sys
[2009/10/07 01:23:08 | 000,013,584 | —- | C] () – C:\WINNT\System32\drivers\iKeyLFT2.dll
[2009/07/09 14:29:44 | 000,000,056 | -H– | C] () – C:\WINNT\System32\ezsidmv.dat
[2008/10/18 11:49:43 | 000,018,526 | —- | C] () – C:\Program Files\Common Files\anoqipemis.sys
[2008/10/18 11:49:43 | 000,017,032 | —- | C] () – C:\Documents and Settings\All Users\Application Data\italygede.scr
[2008/10/18 11:49:43 | 000,016,511 | —- | C] () – C:\Program Files\Common Files\juxyku.dl
[2008/10/18 11:49:43 | 000,015,221 | —- | C] () – C:\WINNT\System32\nyjevyjo.exe
[2008/10/18 11:49:43 | 000,014,182 | —- | C] () – C:\Documents and Settings\Owner\Application Data\edanet.bin
[2008/10/18 11:49:43 | 000,010,132 | —- | C] () – C:\Documents and Settings\Owner\Local Settings\Application Data\yzef.bin
[2008/10/18 11:49:42 | 000,019,487 | —- | C] () – C:\Documents and Settings\Owner\Local Settings\Application Data\xedocehyre.lib
[2008/10/18 11:49:42 | 000,013,245 | —- | C] () – C:\Documents and Settings\All Users\Application Data\zidasup.dll
[2008/10/18 11:49:42 | 000,012,957 | —- | C] () – C:\Documents and Settings\Owner\Application Data\uzysumipo._dl
[2008/10/18 11:49:42 | 000,012,450 | —- | C] () – C:\WINNT\System32\ekofywukuh.bin
[2008/05/26 21:59:42 | 000,018,904 | —- | C] () – C:\WINNT\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | —- | C] () – C:\WINNT\System32\structuredqueryschema.bin
[2008/01/14 15:47:06 | 000,099,712 | —- | C] () – C:\WINNT\HPBroker.dll
[2007/12/04 08:38:09 | 000,018,432 | —- | C] () – C:\WINNT\ss3unstl.exe
[2007/09/27 10:51:02 | 000,020,698 | —- | C] () – C:\WINNT\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | —- | C] () – C:\WINNT\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | —- | C] () – C:\WINNT\System32\gthrctr.ini
[2007/03/23 14:24:58 | 000,000,000 | —- | C] () – C:\WINNT\SETUP32.INI
[2007/02/11 16:01:25 | 000,000,214 | —- | C] () – C:\WINNT\HP_48BitScanUpdatePatch.ini
[2007/01/14 20:35:32 | 000,000,335 | —- | C] () – C:\WINNT\nsreg.dat
[2007/01/14 20:34:25 | 000,000,029 | —- | C] () – C:\WINNT\atid.ini
[2006/10/18 17:29:06 | 000,001,359 | —- | C] () – C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache
[2005/11/12 17:10:09 | 000,066,482 | R— | C] () – C:\WINNT\System32\lvcoinst.ini
[2005/11/12 17:06:09 | 000,053,248 | R— | C] () – C:\WINNT\System32\InstMed.exe
[2005/11/12 17:04:09 | 000,081,920 | R— | C] () – C:\WINNT\bwUnin-6.1.4.68-8876480L.exe
[2005/09/05 10:36:43 | 000,053,024 | R— | C] () – C:\WINNT\System32\UPDDRV9X.DLL
[2005/09/05 10:36:32 | 000,184,320 | R— | C] () – C:\WINNT\psconv.exe
[2005/09/05 10:35:44 | 000,209,987 | R— | C] () – C:\WINNT\System32\ctp0095w.dat
[2005/09/05 10:35:36 | 000,211,126 | R— | C] () – C:\WINNT\System32\ctsbas2w.dat
[2005/09/05 10:35:35 | 000,113,273 | R— | C] () – C:\WINNT\System32\ctbas2w.dat
[2005/09/05 10:35:30 | 000,049,152 | R— | C] () – C:\WINNT\System32\killapps.exe
[2005/09/05 10:35:30 | 000,000,180 | R— | C] () – C:\WINNT\System32\kill.ini
[2005/09/05 10:35:29 | 000,024,576 | R— | C] () – C:\WINNT\System32\editinf.exe
[2005/09/05 10:35:29 | 000,000,092 | R— | C] () – C:\WINNT\System32\editinf.ini
[2005/09/05 10:35:23 | 000,179,669 | R— | C] () – C:\WINNT\System32\ctstatic.dat
[2005/09/05 10:35:22 | 000,164,044 | R— | C] () – C:\WINNT\System32\ctdlang.dat
[2005/09/05 10:35:20 | 000,044,055 | R— | C] () – C:\WINNT\System32\ctdaught.dat
[2005/09/05 10:32:59 | 000,000,024 | —- | C] () – C:\WINNT\System32\DVCStateBkp-{00000001-00000000-00000002-00001102-00000004-00581102}.dat
[2005/09/05 10:32:59 | 000,000,024 | —- | C] () – C:\WINNT\System32\DVCState-{00000001-00000000-00000002-00001102-00000004-00581102}.dat
[2005/09/05 10:31:50 | 000,037,727 | R— | C] () – C:\WINNT\System32\Emu10kx.ini
[2005/09/05 10:31:50 | 000,000,029 | R— | C] () – C:\WINNT\System32\ctzapxx.ini
[2005/08/28 00:49:40 | 000,131,072 | R— | C] () – C:\WINNT\System32\SCCD3X01.DLL
[2005/08/26 13:28:34 | 000,143,360 | —- | C] () – C:\WINNT\unzip.exe
[2005/08/26 13:28:20 | 000,024,576 | —- | C] () – C:\WINNT\shortcut.exe
[2005/08/26 13:27:58 | 000,045,056 | —- | C] () – C:\WINNT\devenum.exe
[2005/08/18 17:50:56 | 000,100,724 | —- | C] () – C:\WINNT\cpeins04.dat.temp
[2005/06/16 07:38:43 | 000,001,275 | —- | C] () – C:\WINNT\checkip.dat
[2005/06/16 07:35:34 | 000,001,276 | —- | C] () – C:\WINNT\ipconfig.dat
[2005/06/03 09:05:52 | 000,000,020 | —- | C] () – C:\WINNT\InfModM.ini
[2005/04/18 08:24:06 | 000,104,253 | —- | C] () – C:\WINNT\hpoins04.dat.temp
[2005/04/18 08:22:10 | 001,228,984 | —- | C] () – C:\WINNT\msbbau_update.dat
[2005/04/18 08:22:09 | 000,921,754 | —- | C] () – C:\WINNT\msbb_kyf_update.dat
[2005/04/10 20:26:20 | 000,100,724 | —- | C] () – C:\WINNT\cpeins04.dat
[2005/04/10 20:26:20 | 000,017,176 | —- | C] () – C:\WINNT\hpomdl04.dat.temp
[2005/03/06 07:25:46 | 000,738,338 | -HS- | C] () – C:\WINNT\gerlru.ini
[2005/02/26 14:40:02 | 000,000,128 | —- | C] () – C:\Documents and Settings\Owner\Local Settings\Application Data\fusioncache.dat
[2005/02/26 13:37:27 | 000,104,253 | —- | C] () – C:\WINNT\hpoins04.dat
[2005/02/26 13:37:27 | 000,017,176 | —- | C] () – C:\WINNT\hpomdl04.dat
[2005/02/17 15:35:34 | 000,061,460 | —- | C] () – C:\WINNT\System32\ctts.exe
[2005/02/14 14:35:21 | 000,000,552 | —- | C] () – C:\WINNT\System32\d3d8caps.dat
[2005/02/09 20:54:08 | 002,171,201 | —- | C] () – C:\WINNT\msbbau.dat
[2005/02/09 20:54:05 | 000,005,757 | —- | C] () – C:\WINNT\msbb_gdf.dat
[2004/10/29 12:54:25 | 000,004,569 | —- | C] () – C:\WINNT\System32\secupd.dat
[2004/10/25 10:36:03 | 000,006,550 | —- | C] () – C:\WINNT\jautoexp.dat
[2004/06/25 10:25:48 | 000,140,647 | —- | C] () – C:\WINNT\lycos.exe
[2004/06/25 10:25:46 | 000,001,370 | —- | C] () – C:\WINNT\sysinfo.dat
[2004/06/17 22:32:01 | 000,000,042 | —- | C] () – C:\WINNT\popcinfo.dat
[2004/05/31 14:50:35 | 000,000,227 | —- | C] () – C:\WINNT\cdPlayer.ini
[2004/05/19 11:33:44 | 000,053,248 | —- | C] () – C:\WINNT\System32\pxhpinst.exe
[2004/05/11 15:02:00 | 000,002,994 | —- | C] () – C:\WINNT\System32\wincheck32.dats
[2004/05/11 15:02:00 | 000,001,559 | —- | C] () – C:\WINNT\System32\winexpoder.dats
[2004/05/11 15:02:00 | 000,000,152 | —- | C] () – C:\WINNT\System32\winzweier.dats
[2004/04/04 20:20:17 | 000,000,485 | —- | C] () – C:\WINNT\System32\syst32win.dll
[2004/03/27 14:19:19 | 003,969,184 | —- | C] () – C:\WINNT\System32\setup_mdart.exe
[2004/03/26 12:18:56 | 000,000,006 | —- | C] () – C:\WINNT\System32\configfromdb.dat
[2004/03/17 17:39:39 | 000,167,936 | —- | C] () – C:\WINNT\System32\dmgrax2.dll
[2004/03/07 20:44:56 | 000,000,026 | —- | C] () – C:\WINNT\System32\MSrev21.dll
[2004/03/07 20:44:54 | 000,000,093 | —- | C] () – C:\WINNT\System32\MSrev41.dll
[2004/03/07 20:44:34 | 003,080,844 | -H– | C] () – C:\WINNT\System32\kyf.dat
[2004/03/07 20:44:08 | 000,146,480 | —- | C] () – C:\WINNT\System32\BO2802040128.exe
[2004/03/05 16:40:32 | 000,003,103 | —- | C] () – C:\WINNT\www.blazefind.com
[2004/02/18 14:04:07 | 000,000,001 | —- | C] () – C:\WINNT\System32\updaterinstall.dat
[2004/01/25 15:42:06 | 000,000,064 | —- | C] () – C:\WINNT\System32\BurnData.bin
[2003/12/20 13:15:14 | 000,000,045 | —- | C] () – C:\WINNT\KA.INI
[2003/12/10 23:54:23 | 000,000,000 | —- | C] () – C:\WINNT\iPlayer.INI
[2003/12/01 16:42:06 | 000,121,222 | —- | C] () – C:\WINNT\cnbabeie.exe
[2003/10/23 08:41:42 | 000,210,944 | —- | C] () – C:\WINNT\System32\jv0pt1np.dll
[2003/08/28 19:11:29 | 000,123,989 | —- | C] () – C:\WINNT\RSEDNClientUninstaller.exe
[2003/05/23 21:54:08 | 000,000,000 | —- | C] () – C:\WINNT\PROTOCOL.INI
[2003/03/13 19:50:22 | 000,006,699 | —- | C] () – C:\WINNT\System32\winfgnet_1.dat
[2003/02/03 05:26:18 | 000,012,288 | —- | C] () – C:\WINNT\System32\e100bmsg.dll
[2003/01/07 15:05:08 | 000,002,695 | —- | C] () – C:\WINNT\System32\OUTLPERF.INI
[2002/12/05 22:14:58 | 000,045,056 | —- | C] () – C:\Documents and Settings\Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2002/11/10 09:19:38 | 000,000,801 | —- | C] () – C:\WINNT\PowerReg.dat
[2002/11/10 09:18:28 | 000,000,045 | —- | C] () – C:\WINNT\EPSC62.ini
[2002/11/10 09:18:03 | 000,000,145 | —- | C] () – C:\WINNT\System32\EBPPORT3.DAT
[2002/11/09 09:54:30 | 000,000,498 | —- | C] () – C:\WINNT\eReg.dat
[2002/11/07 06:31:49 | 000,000,061 | —- | C] () – C:\WINNT\smscfg.ini
[2002/11/07 01:03:24 | 000,164,864 | —- | C] () – C:\WINNT\System32\UNWISE.EXE
[2002/11/07 01:02:48 | 000,007,406 | —- | C] () – C:\WINNT\ICOADB32.DAT
[2002/11/07 01:02:48 | 000,000,637 | —- | C] () – C:\WINNT\QUICKEN.INI
[2002/11/07 01:02:48 | 000,000,052 | —- | C] () – C:\WINNT\intuprof.ini
[2002/11/07 01:02:02 | 000,000,370 | —- | C] () – C:\WINNT\ODBC.INI
[2002/11/07 00:59:43 | 000,022,528 | —- | C] () – C:\WINNT\Hpreg.exe
[2002/11/07 00:59:23 | 000,000,011 | —- | C] () – C:\WINNT\SBWIN.INI
[2002/11/07 00:58:47 | 000,069,632 | —- | C] () – C:\WINNT\System32\PROInst.dll
[2002/11/07 00:58:47 | 000,065,536 | —- | C] () – C:\WINNT\System32\NMSInst.dll
[2002/11/06 23:57:54 | 000,053,248 | —- | C] () – C:\WINNT\GWMDMpi.exe
[2002/11/06 23:57:49 | 000,000,256 | —- | C] () – C:\WINNT\System32\UPDATE.INI
[2002/11/06 23:57:48 | 000,000,659 | —- | C] () – C:\WINNT\System32\OEMINFO.INI
[2002/11/06 23:57:31 | 000,262,144 | —- | C] () – C:\WINNT\System32\SHPSHFTR.DLL
[2002/11/06 23:57:31 | 000,009,785 | —- | C] () – C:\WINNT\System32\drivers\a312.sys
[2002/09/03 13:00:31 | 000,000,770 | —- | C] () – C:\WINNT\orun32.ini
[2002/09/03 12:38:22 | 000,002,048 | –S- | C] () – C:\WINNT\bootstat.dat
[2002/09/03 12:30:33 | 000,023,348 | —- | C] () – C:\WINNT\System32\emptyregdb.dat
[2002/09/03 12:23:28 | 000,004,073 | —- | C] () – C:\WINNT\ODBCINST.INI
[2002/09/03 12:22:19 | 000,248,696 | —- | C] () – C:\WINNT\System32\FNTCACHE.DAT
[2002/09/03 07:00:00 | 013,107,200 | —- | C] () – C:\WINNT\System32\oembios.bin
[2002/09/03 07:00:00 | 001,142,784 | —- | C] () – C:\WINNT\System32\quartz(3).dll
[2002/09/03 07:00:00 | 000,673,088 | —- | C] () – C:\WINNT\System32\mlang.dat
[2002/09/03 07:00:00 | 000,272,128 | —- | C] () – C:\WINNT\System32\perfi009.dat
[2002/09/03 07:00:00 | 000,218,003 | —- | C] () – C:\WINNT\System32\dssec.dat
[2002/09/03 07:00:00 | 000,046,258 | —- | C] () – C:\WINNT\System32\mib.bin
[2002/09/03 07:00:00 | 000,028,626 | —- | C] () – C:\WINNT\System32\perfd009.dat
[2002/09/03 07:00:00 | 000,005,114 | —- | C] () – C:\WINNT\System32\oembios.dat
[2002/09/03 07:00:00 | 000,001,804 | —- | C] () – C:\WINNT\System32\dcache.bin
[2001/08/23 13:00:00 | 000,022,400 | —- | C] () – C:\WINNT\System32\drivers\SbcpHid.sys
[1999/01/27 13:39:06 | 000,065,024 | —- | C] () – C:\WINNT\System32\indounin.dll
[1997/06/13 07:56:08 | 000,056,832 | —- | C] () – C:\WINNT\System32\Iyvu9_32.dll
[1994/09/02 17:01:28 | 000,032,596 | —- | C] () – C:\WINNT\System32\instsrv.exe
[1980/01/01 00:00:00 | 001,142,784 | —- | C] () – C:\WINNT\System32\quartz(2).dll
[1980/01/01 00:00:00 | 000,618,362 | —- | C] () – C:\WINNT\System32\perfh009.dat
[1980/01/01 00:00:00 | 000,141,448 | —- | C] () – C:\WINNT\System32\perfc009.dat
[1980/01/01 00:00:00 | 000,001,024 | —- | C] () – C:\WINNT\ONETW.DRV
[1980/01/01 00:00:00 | 000,000,741 | —- | C] () – C:\WINNT\System32\noise.dat

========== LOP Check ==========

[2007/01/29 12:36:10 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MSScanAppDataDir
[2004/08/17 08:14:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Napster
[2010/06/20 10:50:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2007/11/02 18:08:03 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PopCap
[2010/06/20 17:39:49 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RegCure
[2008/09/06 14:19:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SSScanAppDataDir
[2007/04/25 08:57:18 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/12/22 20:39:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Zylom
[2009/03/19 10:48:54 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2009/09/11 12:52:51 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2008/03/31 10:53:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Aim
[2011/07/10 18:31:02 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\BabylonToolbar
[2008/10/18 11:28:41 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\GetModule
[2007/02/20 09:50:01 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\ICAClient
[2004/05/22 13:51:08 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\InterVideo
[2010/01/11 11:46:40 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Leadertech
[2004/08/17 08:14:43 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Lycos
[2011/07/10 18:31:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Minibar
[2010/12/11 21:44:31 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\MSNInstaller
[2010/12/22 11:47:33 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\PLAux
[2006/01/07 08:58:22 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\SmartDraw
[2008/10/18 17:49:05 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Smilebox
[2007/12/15 15:38:25 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\SpamBlocker
[2007/12/15 15:41:22 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\SpamBlockerUtility_Icons
[2009/12/13 17:14:14 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Unity
[2007/04/25 08:57:19 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Viewpoint
[2005/04/22 17:53:37 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\WeatherBug
[2007/06/29 15:05:54 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\WholeSecurity
[2009/02/01 17:19:54 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Windows Desktop Search
[2009/02/02 09:27:06 | 000,000,000 | —D | M] – C:\Documents and Settings\Owner\Application Data\Windows Search
[2011/12/09 17:52:00 | 000,000,254 | —- | M] () – C:\WINNT\Tasks\Check Updates for Windows Live Toolbar.job
[2011/12/09 08:24:16 | 000,000,378 | —- | M] () – C:\WINNT\Tasks\FreeFileViewerUpdateChecker.job
[2011/12/09 08:27:32 | 000,000,330 | -H– | M] () – C:\WINNT\Tasks\MP Scheduled Scan.job
[2011/12/09 17:00:00 | 000,000,390 | —- | M] () – C:\WINNT\Tasks\RegCure Program Check.job
[2011/12/08 03:08:00 | 000,000,372 | —- | M] () – C:\WINNT\Tasks\RegCure.job
[2011/12/09 18:25:00 | 000,000,418 | -H– | M] () – C:\WINNT\Tasks\User_Feed_Synchronization-{3E727B9B-0C91-448D-84AE-60C22F090D69}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2004/06/30 17:46:55 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2004/11/01 12:10:11 | 000,000,302 | RHS- | M] () – C:\boot.ini
[2002/09/03 12:08:02 | 000,000,112 | -HS- | M] () – C:\BOOTLOG.TXT
[2002/09/03 12:08:04 | 000,000,512 | -HS- | M] () – C:\BOOTSECT.DOS
[2004/06/30 17:46:55 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2005/11/11 18:01:35 | 000,528,384 | —- | M] () – C:\crash.txt
[2006/07/09 20:19:27 | 000,095,326 | —- | M] () – C:\devicetable.log
[1999/04/23 22:22:00 | 000,068,871 | RHS- | M] () – C:\DRVSPACE.BIN
[2003/03/30 18:23:58 | 000,000,346 | —- | M] () – C:\ffl.txt
[2003/08/07 18:41:44 | 000,012,296 | —- | M] () – C:\GatorPatch.log
[2011/12/09 08:24:04 | 534,630,400 | -HS- | M] () – C:\hiberfil.sys
[2003/12/08 13:15:56 | 000,028,672 | R— | M] ( ) – C:\hpqimgrc.resources.dll
[2011/12/03 17:49:40 | 000,001,420 | —- | M] () – C:\install.rdf
[2003/08/28 19:11:34 | 000,003,053 | —- | M] () – C:\installer.txt
[2002/09/03 12:34:22 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2007/02/26 17:20:46 | 000,004,660 | -H– | M] () – C:\IPH.PH
[2005/11/12 17:04:19 | 000,000,183 | —- | M] () – C:\LogiSetup.log
[2002/09/03 12:34:22 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/11/01 12:02:30 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/08/21 09:54:50 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011/12/09 08:24:01 | 805,306,368 | -HS- | M] () – C:\pagefile.sys
[2002/11/06 23:57:46 | 000,000,199 | —- | M] () – C:\setup.log
[2005/10/31 09:56:00 | 000,700,416 | —- | M] (LimeWire) – C:\StubInstaller.exe
[2005/11/30 08:03:26 | 000,034,304 | —- | M] () – C:\Susan Resume.doc
[2007/12/16 12:59:17 | 000,000,150 | —- | M] () – C:\YServer.txt
[2005/02/26 14:39:56 | 000,001,306 | —- | M] () – C:\_Sid.txt

< %systemroot%\Fonts\*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINNT\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINNT\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINNT\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINNT\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2004/06/30 17:46:17 | 000,000,067 | -HS- | M] () – C:\WINNT\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 06:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2007/04/09 12:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\mdippr.dll
[2008/07/06 04:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINNT\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >
[2005/02/10 22:26:30 | 000,705,098 | -HS- | M] () – C:\WINNT\REPAIR\xafcp.bak1

< %systemroot%\REPAIR\*.ini >
[2005/03/06 07:21:09 | 000,705,152 | -HS- | M] () – C:\WINNT\REPAIR\xafcp.ini

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2004/06/15 14:35:21 | 000,321,032 | —- | M] (MacSourcery) – C:\WINNT\Fight Club.scr
[8 C:\WINNT\*.tmp files -> C:\WINNT\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >
[2011/07/02 10:58:37 | 000,001,674 | -H– | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\LastFlashConfig.WFC

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2004/06/30 07:44:16 | 000,524,288 | —- | M] () – C:\WINNT\System32\config\default.sav
[2004/06/30 12:38:54 | 000,262,144 | —- | M] () – C:\WINNT\System32\config\security.sav
[2004/06/30 07:44:16 | 023,330,816 | —- | M] () – C:\WINNT\System32\config\software.sav
[2004/06/30 07:44:17 | 003,670,016 | —- | M] () – C:\WINNT\System32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/08/21 10:01:35 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2004/11/01 12:16:21 | 000,000,175 | -HS- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2002/09/03 12:40:36 | 000,000,079 | —- | M] () – C:\Documents and Settings\Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2011/12/09 15:03:27 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\Owner\Desktop\HiJackThis.exe
[2011/12/09 15:01:53 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Owner\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >
[2008/10/18 11:49:43 | 000,018,526 | —- | M] () – C:\Program Files\Common Files\anoqipemis.sys
[2008/10/18 11:49:43 | 000,016,511 | —- | M] () – C:\Program Files\Common Files\juxyku.dl
[2003/08/27 14:19:18 | 000,036,963 | R— | M] (Cypress Semiconductor) – C:\Program Files\Common Files\SM1updtr.dll

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-12-09 14:43:18

< >

< End of report >