This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

promlems with laptop [Solved]

11 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

It runs ok but the volume control buttons on the keyboard don't work, and touchpad scroller doesn't work.

here are the results from OTL:

OTL logfile created on: 1/6/2012 4:47:42 AM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Michele\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.99 Gb Total Physical Memory | 1.10 Gb Available Physical Memory | 55.21% Memory free
4.22 Gb Paging File | 3.02 Gb Available in Paging File | 71.63% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 69.78 Gb Total Space | 23.92 Gb Free Space | 34.28% Space Free | Partition Type: NTFS
Drive D: | 69.51 Gb Total Space | 69.42 Gb Free Space | 99.87% Space Free | Partition Type: NTFS

Computer Name: MICHELE-PC | User Name: Michele | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Michele\AppData\Local\temp\RtkBtMnt.exe (Realtek Semiconductor Corp.)
PRC - C:\Users\Michele\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
PRC - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe ()
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Acer\Empowering Technology\eRecovery\eRAgent.exe (Acer Inc.)
PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT)
PRC - C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)
PRC - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
PRC - C:\Acer\ALaunch\ALaunchSvc.exe ()
PRC - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Supervisor.exe (Acer Inc.)
PRC - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Inc.)
PRC - C:\Acer\Empowering Technology\ePower\ePowerSvc.exe (acer)
PRC - C:\Acer\Empowering Technology\eNet\eNMTray.exe (Acer Inc.)
PRC - C:\Acer\Empowering Technology\eNet\eNet Service.exe (Acer Inc.)
PRC - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe (Acer Inc.)
PRC - C:\Acer\Mobility Center\MobilityService.exe ()


========== Modules (No Company Name) ==========

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6bc98e9b5eedaa8f71c5454d36a4b772\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8645de531003807d00822e03986a075d\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\e00630ec1e225a2376fdd430645e20f7\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\6d2f689baff5da3df134fdec0742a13c\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\40da9084d0863e07d7ce55953833b8b0\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c1c06a392871267db27f7cbc40e1c4fb\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1363115565fff5a641243a48f396f107\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\367c4043efc2f32d843cb588b0dc97fc\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\f9c36ea806e77872dce891c77b68fac3\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll ()
MOD - C:\Acer\Empowering Technology\eSettings\eSettings.Plugin.dll ()
MOD - C:\Acer\Empowering Technology\eSettings\eSettings.Presenter.dll ()
MOD - C:\Acer\Empowering Technology\eSettings\eSettings.View.dll ()
MOD - C:\Acer\Empowering Technology\eSettings.Model.ComputerInterfaces.dll ()
MOD - C:\Windows\System32\BatchCrypto.dll ()
MOD - C:\Windows\System32\ShowErrMsg.dll ()
MOD - C:\Acer\Empowering Technology\eRecovery\ServiceInterface.dll ()
MOD - C:\Acer\Empowering Technology\Acer.Empowering.Framework.DialogManager.dll ()
MOD - C:\Acer\Empowering Technology\Acer.Empowering.Framework.PasswordSetting.dll ()
MOD - C:\Acer\Empowering Technology\ePresentation\ePresentationCTL.dll ()
MOD - C:\Acer\Empowering Technology\eNet\eNetPlugin.dll ()
MOD - C:\Acer\Empowering Technology\eLock\eLockCTL.dll ()
MOD - C:\Windows\System32\igfxTMM.dll ()
MOD - C:\Windows\System32\hccutils.dll ()
MOD - C:\Acer\Empowering Technology\ePower\SysHook.dll ()


========== Win32 Services (SafeList) ==========

SRV - (RichVideo) Cyberlink RichVideo Service(CRVS) – File not found
SRV - (LVSrvLauncher) – File not found
SRV - (LightScribeService) – File not found
SRV - (gusvc) – File not found
SRV - (gupdatem) Google Update Service (gupdatem) – File not found
SRV - (gupdate) Google Update Service (gupdate) – File not found
SRV - (CLTNetCnService) – File not found
SRV - (MBAMService) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (ekrn) – C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe (ESET)
SRV - (ACDaemon) – C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (eSettingsService) – C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe ()
SRV - (eDataSecurity Service) – C:\Acer\Empowering Technology\eDataSecurity\eDSService.exe (HiTRSUT)
SRV - (eRecoveryService) – C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
SRV - (ALaunchService) – C:\Acer\ALaunch\ALaunchSvc.exe ()
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE (SEIKO EPSON CORPORATION)
SRV - (WMIService) – C:\Acer\Empowering Technology\ePower\ePowerSvc.exe (acer)
SRV - (eNet Service) – C:\Acer\Empowering Technology\eNet\eNet Service.exe (Acer Inc.)
SRV - (eLockService) – C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe (Acer Inc.)
SRV - (MobilityService) – C:\Acer\Mobility Center\MobilityService.exe ()


========== Driver Services (SafeList) ==========

DRV - (MBAMProtector) – C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (eamonm) – C:\Windows\System32\drivers\eamonm.sys (ESET)
DRV - (epfwwfpr) – C:\Windows\System32\drivers\epfwwfpr.sys (ESET)
DRV - (ehdrv) – C:\Windows\System32\drivers\ehdrv.sys (ESET)
DRV - (Revoflt) – C:\Windows\System32\drivers\revoflt.sys (VS Revo Group)
DRV - (f5ipfw) – C:\Windows\System32\drivers\urfltwlh.sys (F5 Networks)
DRV - (urvpndrv) – C:\Windows\System32\drivers\urvpnwlh.sys (F5 Networks)
DRV - (NETw4v32) Intel® – C:\Windows\System32\drivers\NETw4v32.sys (Intel Corporation)
DRV - (int15) – C:\Acer\Empowering Technology\eRecovery\int15.sys ()
DRV - (LVMVDrv) – C:\Windows\System32\drivers\LVMVdrv.sys (Logitech Inc.)
DRV - (LVUVC) Acer OrbiCam(UVC) – C:\Windows\System32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (LVUSBSta) – C:\Windows\System32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (bcm4sbxp) – C:\Windows\System32\drivers\bcm4sbxp.sys (Broadcom Corporation)
DRV - (ESDCR) – C:\Windows\System32\drivers\ESD7SK.sys (ENE Technology Inc.)
DRV - (ESMCR) – C:\Windows\System32\drivers\ESM7SK.sys (ENE Technology Inc.)
DRV - (EMSCR) – C:\Windows\System32\drivers\EMS7SK.sys (ENE Technology Inc.)
DRV - (XAudio) – C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (Afc) – C:\Windows\System32\drivers\afc.sys (Arcsoft, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://en.us.acer.yahoo.com
IE - HKLM\..\URLSearchHook: {7b13ec3e-999a-4b70-b9cb-2617b8323822} - No CLSID value found

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTe…-8&fr;=b1ie7
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "http://ww.yahoo.com/"
FF - prefs.js..extensions.enabledItems: [removed]:7
FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Content Upload Plugin,version=1.0.0: C:\Program Files\DivX\DivX Content Uploader\npUpload.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2888: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2946: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.2806: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll File not found
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine,version=1.0: C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll File not found
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Users\Michele\AppData\Roaming\Move Networks\plugins\npqmp071701000002.dll (Move Networks)
FF - HKCU\Software\MozillaPlugins\@real.com/RhapsodyPlayerEngine: C:\Users\Michele\AppData\Roaming\nprhapengine.dll File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Program Files\Real\RealPlayer\browserrecord
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{B728AB94-9BC7-49b7-B76A-422BB31B2FD0}: C:\Program Files\ArcSoft\Video Downloader\Plugin_FireFox [2011/12/28 20:51:29 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\ArcSoft\RAW Thumbnail Viewer\FireFox Extension [2011/12/28 20:53:36 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/24 09:50:49 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2011/11/02 08:17:55 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Users\Michele\AppData\Roaming\Move Networks [2010/02/22 07:45:00 | 000,000,000 | —D | M]

[2010/11/13 20:01:49 | 000,000,000 | —D | M] (No name found) – C:\Users\Michele\AppData\Roaming\Mozilla\Extensions
[2009/06/16 10:18:32 | 000,000,000 | —D | M] (No name found) – C:\Users\Michele\AppData\Roaming\Mozilla\Extensions\[removed]
[2011/12/28 20:48:26 | 000,000,000 | —D | M] (No name found) – C:\Users\Michele\AppData\Roaming\Mozilla\Firefox\Profiles\23icuuwi.default\extensions
[2010/11/14 20:50:29 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Michele\AppData\Roaming\Mozilla\Firefox\Profiles\23icuuwi.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/12/28 20:48:44 | 000,000,000 | —D | M] (Ask Toolbar) – C:\Users\Michele\AppData\Roaming\Mozilla\Firefox\Profiles\23icuuwi.default\extensions\[removed]
[2011/02/01 19:05:08 | 000,002,333 | —- | M] () – C:\Users\Michele\AppData\Roaming\Mozilla\Firefox\Profiles\23icuuwi.default\searchplugins\askcom.xml
[2011/12/24 09:50:47 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/12/24 09:50:47 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\distribution\extensions
[2011/12/24 09:50:47 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Program Files\Mozilla Firefox\distribution\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/11/20 23:04:51 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/11/20 20:04:05 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/11/20 20:04:05 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2011/12/28 00:07:11 | 000,000,027 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (IEPlugin Class) - {11222041-111B-46E3-BD29-EFB2449479B1} - C:\Program Files\ArcSoft\Video Downloader\ArcURLRecord.dll (ArcSoft, Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (ToolbarBHO Class) - {9519AF7E-638D-4933-BAD6-D33D23C79FE5} - C:\Program Files\ArcSoft\RAW Thumbnail Viewer\EXIFToolBar.dll (ArcSoft Inc.)
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - No CLSID value found.
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No CLSID value found.
O3 - HKLM\..\Toolbar: (RAW Thumbnail Viewer) - {F301665A-12F8-4331-804A-5BCBD379668C} - C:\Program Files\ArcSoft\RAW Thumbnail Viewer\EXIFToolBar.dll (ArcSoft Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O3 - HKCU\..\Toolbar\WebBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Windows\System32\eDStoolbar.dll (HiTRUST)
O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe (HiTRUST)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Read EXIF - C:\Program Files\ArcSoft\RAW Thumbnail Viewer\ArcEXIFM.htm ()
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - Reg Error: Key error. File not found
O15 - HKCU\..Trusted Domains: arielcorp.com ( https in Trusted sites)
O15 - HKCU\..Trusted Domains: arielcorp.com ([www] https in Trusted sites)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {2A0B9B82-D5C8-4D3D-8338-AD55B23662B1} C:\Users\Michele\AppData\Local\Temp\f5tmp\cachecleaner.cab (F5 Networks CacheCleaner)
O16 - DPF: {2BCDB465-81F9-41CB-832C-8037A4064446} C:\Users\Michele\AppData\Local\Temp\f5tmp\urxvpn.cab (F5 Networks VPN Manager)
O16 - DPF: {45B69029-F3AB-4204-92DE-D5140C3E8E74} C:\Users\Michele\AppData\Local\Temp\IXP000.TMP\InstallerControl.cab (F5 Networks Auto Update)
O16 - DPF: {6C275925-A1ED-4DD2-9CEE-9823F5FDAA10} C:\Users\Michele\AppData\Local\Temp\f5tmp\urTermProxy.cab (F5 Networks SSLTunnel)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {BAC761D3-DFFD-4DB4-A01D-173346E090A7} http://pogo.oberon-media.com/online2/pogo/…eb.1.0.0.10.cab (CPlayFirstzenerchiControl Object)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CC85ACDF-B277-486F-8C70-2C9B2ED2A4E7} C:\Users\Michele\AppData\Local\Temp\f5tmp\urxshost.cab (F5 Networks SuperHost Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} http://games.pogo.com/online2/pogo/chuzzle…aploader_v6.cab (PopCapLoader Object)
O16 - DPF: {E0FF21FA-B857-45C5-8621-F120A0C17FF2} C:\Users\Michele\AppData\Local\Temp\f5tmp\urxhost.cab (F5 Networks Host Control)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E692E074-289B-4C1A-84A0-30585EC2A430}: DhcpNameServer = [removed] [removed]
O20 - AppInit_DLLs: (C:\Windows\System32\eNetHook.dll) -C:\Windows\System32\eNetHook.dll (acer)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img23.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img23.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.mkdmp3enc - C:\PROGRA~1\ACERAR~1\DVWIZA~1\Kernel\Burner\MKDMP3Enc.ACM File not found
Drivers32: MSVideo - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - C:\Windows\System32\lvcodec2.dll (Logitech Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/12/28 22:32:01 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Local\VS Revo Group
[2011/12/28 22:31:57 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
[2011/12/28 22:31:56 | 000,027,192 | —- | C] (VS Revo Group) – C:\Windows\System32\drivers\revoflt.sys
[2011/12/28 22:31:52 | 000,000,000 | —D | C] – C:\Program Files\VS Revo Group
[2011/12/28 21:56:41 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Local\MediaMonkey
[2011/12/28 21:56:25 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Roaming\MediaMonkey
[2011/12/28 21:56:15 | 000,000,000 | —D | C] – C:\ProgramData\MediaMonkey
[2011/12/28 21:56:07 | 000,000,000 | —D | C] – C:\Program Files\MediaMonkey
[2011/12/28 21:40:00 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Roaming\DriverCure
[2011/12/28 21:39:59 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Roaming\SpeedyPC Software
[2011/12/28 21:39:53 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedyPC Software
[2011/12/28 21:39:45 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SpeedyPC Software
[2011/12/28 21:39:39 | 000,000,000 | —D | C] – C:\ProgramData\SpeedyPC Software
[2011/12/28 21:39:39 | 000,000,000 | —D | C] – C:\Program Files\SpeedyPC Software
[2011/12/28 21:13:12 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WiseFixer
[2011/12/28 21:13:05 | 000,000,000 | —D | C] – C:\Program Files\WiseFixer
[2011/12/28 20:51:38 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Video Downloader
[2011/12/28 20:48:27 | 000,000,000 | —D | C] – C:\Program Files\Ask.com
[2011/12/28 20:27:34 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Local\ArcSoft
[2011/12/28 20:27:29 | 000,000,000 | —D | C] – C:\ProgramData\ArcSoft
[2011/12/28 20:27:24 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft Connect
[2011/12/28 20:25:53 | 000,000,000 | —D | C] – C:\Program Files\ArcSoft
[2011/12/28 20:25:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\ArcSoft
[2011/12/28 20:25:46 | 000,000,000 | -H-D | C] – C:\Program Files\InstallShield Installation Information
[2011/12/28 20:25:06 | 000,000,000 | —D | C] – C:\Program Files\Common Files\InstallShield
[2011/12/28 20:08:44 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Local\Easy CD-DA Extractor
[2011/12/28 20:08:38 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Easy CD-DA Extractor 15
[2011/12/28 20:08:29 | 000,000,000 | —D | C] – C:\Program Files\Easy CD-DA Extractor 15
[2011/12/28 18:29:12 | 002,322,184 | —- | C] (ESET) – C:\Users\Michele\Desktop\esetsmartinstaller_enu.exe
[2011/12/28 17:56:50 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/12/28 17:48:16 | 010,847,608 | —- | C] (Malwarebytes Corporation ) – C:\Users\Michele\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/28 00:16:12 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2011/12/28 00:16:04 | 000,000,000 | —D | C] – C:\Windows\temp
[2011/12/28 00:16:04 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Local\temp
[2011/12/27 23:55:48 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2011/12/27 23:55:48 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2011/12/27 23:55:48 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2011/12/27 23:55:41 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2011/12/27 23:54:54 | 000,000,000 | —D | C] – C:\Qoobox
[2011/12/27 23:52:27 | 004,353,794 | R— | C] (Swearware) – C:\Users\Michele\Desktop\ComboFix.exe
[2011/12/27 20:53:59 | 001,918,464 | —- | C] (AVAST Software) – C:\Users\Michele\Desktop\aswMBR.exe
[2011/12/26 17:25:17 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Michele\Desktop\OTL.exe
[2011/12/26 09:34:26 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Local\Microsoft Help
[2011/12/26 09:33:34 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DESIGNER
[2011/12/26 09:33:33 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Works
[2011/12/26 09:33:09 | 000,000,000 | —D | C] – C:\Program Files\Microsoft.NET
[2011/12/24 23:58:26 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Java
[2011/12/24 23:57:59 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\System32\javaws.exe
[2011/12/24 23:57:59 | 000,149,280 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\System32\javaw.exe
[2011/12/24 23:57:59 | 000,149,280 | —- | C] (Sun Microsystems, Inc.) – C:\Windows\System32\java.exe
[2011/12/24 23:57:30 | 000,000,000 | —D | C] – C:\Program Files\Java
[2011/12/24 23:48:02 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Silverlight
[2011/12/24 09:39:18 | 000,000,000 | -H-D | C] – C:\Users\Michele\AppData\Local\acer eNM
[2011/12/24 09:38:45 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Local\VirtualStore
[2011/12/23 20:48:48 | 000,000,000 | —D | C] – C:\Users\Michele\AppData\Roaming\DivX
[2011/12/23 20:44:41 | 000,000,000 | —D | C] – C:\ProgramData\DivX
[2011/12/15 07:32:26 | 002,382,848 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mshtml.tlb
[2011/12/15 07:32:24 | 001,798,144 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jscript9.dll
[2011/12/15 07:32:24 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\System32\url.dll
[2011/12/15 07:32:24 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ieui.dll
[2011/12/15 07:32:23 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\Windows\System32\jsproxy.dll
[2011/12/15 07:32:20 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\inetcpl.cpl
[2011/12/15 06:52:11 | 002,043,904 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2011/12/15 06:52:04 | 003,602,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntkrnlpa.exe
[2011/12/15 06:52:03 | 003,550,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\ntoskrnl.exe
[2011/12/15 06:51:57 | 000,429,056 | —- | C] (Microsoft Corporation) – C:\Windows\System32\EncDec.dll
[2011/12/15 06:51:52 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\csrsrv.dll
[2011/12/15 06:51:02 | 000,002,048 | —- | C] (Microsoft Corporation) – C:\Windows\System32\tzres.dll
[2007/06/05 11:29:04 | 000,016,384 | —- | C] ( ) – C:\Windows\System32\ClearEvent.exe
[2007/04/10 04:32:24 | 000,053,248 | —- | C] ( ) – C:\Windows\System32\Interop.Shell32.dll
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/01/06 04:43:14 | 000,000,400 | —- | M] () – C:\Windows\tasks\SpeedyPC Pro.job
[2012/01/06 03:58:17 | 000,003,168 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/06 03:58:17 | 000,003,168 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/06 01:58:06 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/01/05 19:50:58 | 2137,120,768 | -HS- | M] () – C:\hiberfil.sys
[2012/01/02 18:00:00 | 000,000,472 | —- | M] () – C:\Windows\tasks\SpeedyPC Registration3.job
[2011/12/31 02:35:02 | 000,000,444 | —- | M] () – C:\Windows\tasks\SpeedyPC Update Version3.job
[2011/12/29 13:42:11 | 000,595,684 | —- | M] () – C:\Windows\System32\perfh009.dat
[2011/12/29 13:42:11 | 000,101,350 | —- | M] () – C:\Windows\System32\perfc009.dat
[2011/12/28 22:31:58 | 000,001,029 | —- | M] () – C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2011/12/28 21:56:25 | 000,000,828 | —- | M] () – C:\Users\Michele\Application Data\Microsoft\Internet Explorer\Quick Launch\MediaMonkey.lnk
[2011/12/28 21:56:25 | 000,000,804 | —- | M] () – C:\Users\Public\Desktop\MediaMonkey.lnk
[2011/12/28 21:39:53 | 000,000,964 | —- | M] () – C:\Users\Michele\Desktop\SpeedyPC Pro.lnk
[2011/12/28 21:13:12 | 000,000,804 | —- | M] () – C:\Users\Michele\Application Data\Microsoft\Internet Explorer\Quick Launch\WiseFixer.lnk
[2011/12/28 21:13:12 | 000,000,780 | —- | M] () – C:\Users\Public\Desktop\WiseFixer.lnk
[2011/12/28 20:53:46 | 000,001,960 | —- | M] () – C:\Users\Public\Desktop\RAW Thumbnail Viewer.lnk
[2011/12/28 20:51:38 | 000,001,805 | —- | M] () – C:\Users\Public\Desktop\Video Downloader.lnk
[2011/12/28 20:27:19 | 000,001,913 | —- | M] () – C:\Users\Public\Desktop\Print Creations.lnk
[2011/12/28 20:08:38 | 000,001,760 | —- | M] () – C:\Users\Public\Desktop\Easy CD-DA Extractor.lnk
[2011/12/28 20:00:53 | 000,007,680 | —- | M] () – C:\Users\Michele\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/12/28 19:58:41 | 000,001,947 | —- | M] () – C:\Users\Michele\Application Data\Microsoft\Internet Explorer\Quick Launch\Adobe Digital Editions.lnk
[2011/12/28 19:58:41 | 000,001,923 | —- | M] () – C:\Users\Public\Desktop\Adobe Digital Editions.lnk
[2011/12/28 18:29:20 | 002,322,184 | —- | M] (ESET) – C:\Users\Michele\Desktop\esetsmartinstaller_enu.exe
[2011/12/28 17:56:52 | 000,000,870 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2011/12/28 17:48:26 | 010,847,608 | —- | M] (Malwarebytes Corporation ) – C:\Users\Michele\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/28 00:07:11 | 000,000,027 | —- | M] () – C:\Windows\System32\drivers\etc\hosts
[2011/12/27 23:53:00 | 004,353,794 | R— | M] (Swearware) – C:\Users\Michele\Desktop\ComboFix.exe
[2011/12/27 21:30:06 | 000,000,463 | —- | M] () – C:\Users\Michele\Desktop\MBR.zip
[2011/12/27 21:27:13 | 000,000,512 | —- | M] () – C:\Users\Michele\Desktop\MBR.dat
[2011/12/27 21:17:28 | 000,000,118 | —- | M] () – C:\Users\Michele\Desktop\promlems with laptop.URL
[2011/12/27 21:05:17 | 214,288,718 | —- | M] () – C:\Windows\MEMORY.DMP
[2011/12/27 20:54:21 | 001,918,464 | —- | M] (AVAST Software) – C:\Users\Michele\Desktop\aswMBR.exe
[2011/12/27 20:47:03 | 000,315,904 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2011/12/26 17:25:23 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Michele\Desktop\OTL.exe
[2011/12/26 11:21:38 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\Windows\System32\FlashPlayerCPLApp.cpl
[2011/12/24 23:57:34 | 000,157,472 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\System32\javaws.exe
[2011/12/24 23:57:34 | 000,149,280 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\System32\javaw.exe
[2011/12/24 23:57:33 | 000,472,808 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\System32\deployJava1.dll
[2011/12/24 23:57:33 | 000,149,280 | —- | M] (Sun Microsystems, Inc.) – C:\Windows\System32\java.exe
[2011/12/24 09:50:49 | 000,000,834 | —- | M] () – C:\Users\Michele\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/12/24 09:50:49 | 000,000,810 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011/12/24 09:35:37 | 000,002,560 | —- | M] () – C:\Windows\_MSRSTRT.EXE
[2011/12/10 15:24:06 | 000,020,464 | —- | M] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/12/28 22:31:58 | 000,001,029 | —- | C] () – C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2011/12/28 21:40:19 | 000,000,472 | —- | C] () – C:\Windows\tasks\SpeedyPC Registration3.job
[2011/12/28 21:39:53 | 000,000,964 | —- | C] () – C:\Users\Michele\Desktop\SpeedyPC Pro.lnk
[2011/12/28 21:39:50 | 000,000,444 | —- | C] () – C:\Windows\tasks\SpeedyPC Update Version3.job
[2011/12/28 21:39:46 | 000,000,400 | —- | C] () – C:\Windows\tasks\SpeedyPC Pro.job
[2011/12/28 21:13:12 | 000,000,804 | —- | C] () – C:\Users\Michele\Application Data\Microsoft\Internet Explorer\Quick Launch\WiseFixer.lnk
[2011/12/28 21:13:12 | 000,000,780 | —- | C] () – C:\Users\Public\Desktop\WiseFixer.lnk
[2011/12/28 20:53:46 | 000,001,960 | —- | C] () – C:\Users\Public\Desktop\RAW Thumbnail Viewer.lnk
[2011/12/28 20:51:38 | 000,001,805 | —- | C] () – C:\Users\Public\Desktop\Video Downloader.lnk
[2011/12/28 17:56:52 | 000,000,870 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2011/12/27 23:55:48 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2011/12/27 23:55:48 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2011/12/27 23:55:48 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2011/12/27 23:55:48 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2011/12/27 23:55:48 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2011/12/27 21:30:06 | 000,000,463 | —- | C] () – C:\Users\Michele\Desktop\MBR.zip
[2011/12/27 21:27:13 | 000,000,512 | —- | C] () – C:\Users\Michele\Desktop\MBR.dat
[2011/12/27 21:17:28 | 000,000,118 | —- | C] () – C:\Users\Michele\Desktop\promlems with laptop.URL
[2011/12/24 09:38:51 | 000,007,680 | —- | C] () – C:\Users\Michele\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/12/24 09:35:37 | 000,002,560 | —- | C] () – C:\Windows\_MSRSTRT.EXE
[2011/07/09 19:25:08 | 000,002,427 | —- | C] () – C:\Windows\System32\lgAxconfig.ini
[2009/10/20 14:52:12 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2009/10/20 14:52:12 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2009/10/20 14:51:22 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009/10/01 18:09:26 | 000,073,220 | —- | C] () – C:\Windows\System32\EPPICPrinterDB.dat
[2009/10/01 18:09:26 | 000,000,097 | —- | C] () – C:\Windows\System32\PICSDK.ini
[2009/10/01 18:09:25 | 000,031,053 | —- | C] () – C:\Windows\System32\EPPICPattern131.dat
[2009/10/01 18:09:25 | 000,029,114 | —- | C] () – C:\Windows\System32\EPPICPattern1.dat
[2009/10/01 18:09:25 | 000,027,417 | —- | C] () – C:\Windows\System32\EPPICPattern121.dat
[2009/10/01 18:09:25 | 000,021,021 | —- | C] () – C:\Windows\System32\EPPICPattern3.dat
[2009/10/01 18:09:25 | 000,015,670 | —- | C] () – C:\Windows\System32\EPPICPattern5.dat
[2009/10/01 18:09:25 | 000,013,280 | —- | C] () – C:\Windows\System32\EPPICPattern2.dat
[2009/10/01 18:09:25 | 000,010,673 | —- | C] () – C:\Windows\System32\EPPICPattern4.dat
[2009/10/01 18:09:25 | 000,004,943 | —- | C] () – C:\Windows\System32\EPPICPattern6.dat
[2009/10/01 18:09:25 | 000,001,140 | —- | C] () – C:\Windows\System32\EPPICPresetData_PT.dat
[2009/10/01 18:09:25 | 000,001,140 | —- | C] () – C:\Windows\System32\EPPICPresetData_BP.dat
[2009/10/01 18:09:25 | 000,001,137 | —- | C] () – C:\Windows\System32\EPPICPresetData_ES.dat
[2009/10/01 18:09:25 | 000,001,130 | —- | C] () – C:\Windows\System32\EPPICPresetData_FR.dat
[2009/10/01 18:09:25 | 000,001,130 | —- | C] () – C:\Windows\System32\EPPICPresetData_CF.dat
[2009/10/01 18:09:25 | 000,001,104 | —- | C] () – C:\Windows\System32\EPPICPresetData_EN.dat
[2009/10/01 18:07:33 | 000,000,079 | —- | C] () – C:\Windows\EPSCX7400.ini
[2009/08/03 15:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,230,768 | —- | C] () – C:\Windows\System32\OGAEXEC.exe
[2007/10/27 04:57:38 | 000,000,037 | —- | C] () – C:\Windows\Acer.ini
[2007/06/05 11:29:04 | 000,016,384 | —- | C] () – C:\Windows\System32\LauncheRyAgentUser.exe
[2007/06/05 11:04:48 | 000,000,030 | —- | C] () – C:\Windows\SETPANEL.INI
[2007/06/05 11:04:46 | 000,000,092 | —- | C] () – C:\Windows\CLEANUP.INI
[2007/04/10 05:43:43 | 000,001,024 | RH– | C] () – C:\Windows\System32\NTIBUN4.dll
[2007/04/10 04:42:55 | 000,076,584 | —- | C] () – C:\Windows\System32\drivers\int15.sys
[2007/04/10 04:42:55 | 000,015,656 | —- | C] () – C:\Windows\System32\drivers\int15_64.sys
[2007/04/10 04:42:00 | 000,065,536 | —- | C] () – C:\Windows\System32\NATTraversal.dll
[2007/04/10 04:32:24 | 000,331,776 | —- | C] () – C:\Windows\System32\ScrollBarLib.dll
[2007/04/10 04:12:36 | 000,356,352 | —- | C] () – C:\Windows\EMCRI.dll
[2007/04/10 04:04:38 | 000,001,132 | —- | C] () – C:\Windows\RtDefLvl.ini
[2007/04/10 03:29:34 | 000,204,800 | —- | C] () – C:\Windows\System32\igfxCoIn_v1114.dll
[2007/04/10 03:29:34 | 000,053,248 | —- | C] () – C:\Windows\System32\oemdspif.dll
[2007/04/10 03:29:32 | 000,077,824 | —- | C] () – C:\Windows\System32\hccutils.dll
[2007/04/10 03:29:31 | 001,060,424 | —- | C] () – C:\Windows\System32\WdfCoInstaller01000.dll
[2007/04/10 03:28:47 | 000,042,594 | —- | C] () – C:\Windows\System32\lvcoinst.ini
[2007/02/07 01:58:10 | 000,204,800 | —- | C] () – C:\Windows\System32\NotesActnMenu.dll
[2007/02/07 01:57:58 | 000,266,240 | —- | C] () – C:\Windows\System32\NotesExtmngr.dll
[2007/02/07 01:57:20 | 000,086,016 | —- | C] () – C:\Windows\System32\MSNSpook.dll
[2007/02/07 01:56:30 | 000,028,672 | —- | C] () – C:\Windows\System32\BatchCrypto.dll
[2007/02/07 01:56:28 | 000,073,728 | —- | C] () – C:\Windows\System32\APISlice.dll
[2007/02/07 01:52:08 | 000,063,488 | —- | C] () – C:\Windows\System32\ShowErrMsg.dll
[2006/12/25 17:44:48 | 000,022,016 | —- | C] () – C:\Windows\System32\MailFormat_U.dll
[2006/11/13 07:50:06 | 000,071,680 | —- | C] () – C:\Windows\System32\HTCA_SelfExtract.bin
[2006/11/02 07:57:28 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 07:47:37 | 000,315,904 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 07:35:32 | 000,005,632 | —- | C] () – C:\Windows\System32\sysprepMCE.dll
[2006/11/02 05:33:01 | 000,595,684 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 05:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 05:33:01 | 000,101,350 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 05:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 05:25:21 | 000,061,440 | —- | C] () – C:\Windows\System32\igfxTMM.dll
[2006/11/02 05:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 03:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 03:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 02:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 02:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat
[2001/12/26 17:12:30 | 000,065,536 | —- | C] () – C:\Windows\System32\multiplex_vcd.dll
[2001/09/04 00:46:38 | 000,110,592 | —- | C] () – C:\Windows\System32\Hmpg12.dll
[2001/07/30 17:33:56 | 000,118,784 | —- | C] () – C:\Windows\System32\HMPV2_ENC.dll
[2001/07/23 23:04:36 | 000,118,784 | —- | C] () – C:\Windows\System32\HMPV2_ENC_MMX.dll

========== LOP Check ==========

[2007/10/27 04:58:29 | 000,000,000 | —D | M] – C:\Users\Michele\AppData\Roaming\Acer
[2011/12/28 21:40:00 | 000,000,000 | —D | M] – C:\Users\Michele\AppData\Roaming\DriverCure
[2010/02/17 17:26:39 | 000,000,000 | —D | M] – C:\Users\Michele\AppData\Roaming\ESET
[2007/10/27 04:58:29 | 000,000,000 | —D | M] – C:\Users\Michele\AppData\Roaming\Leadertech
[2011/12/28 21:57:12 | 000,000,000 | —D | M] – C:\Users\Michele\AppData\Roaming\MediaMonkey
[2011/12/28 21:39:59 | 000,000,000 | —D | M] – C:\Users\Michele\AppData\Roaming\SpeedyPC Software
[2012/01/05 17:34:06 | 000,032,596 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2012/01/06 04:43:14 | 000,000,400 | —- | M] () – C:\Windows\Tasks\SpeedyPC Pro.job
[2012/01/02 18:00:00 | 000,000,472 | —- | M] () – C:\Windows\Tasks\SpeedyPC Registration3.job
[2011/12/31 02:35:02 | 000,000,444 | —- | M] () – C:\Windows\Tasks\SpeedyPC Update Version3.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2007/04/10 04:37:19 | 000,003,380 | —- | M] () – C:\-20070410.log
[2006/09/18 16:43:36 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/04/11 01:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2007/04/10 03:30:30 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2011/12/28 00:15:56 | 000,012,969 | —- | M] () – C:\ComboFix.txt
[2006/09/18 16:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2012/01/05 19:50:58 | 2137,120,768 | -HS- | M] () – C:\hiberfil.sys
[2007/10/28 03:21:11 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2007/10/28 03:21:11 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/01/05 19:50:56 | 2450,919,424 | -HS- | M] () – C:\pagefile.sys
[2007/04/10 04:05:28 | 000,000,420 | —- | M] () – C:\RHDSetup.log
[2007/04/10 04:28:10 | 000,000,178 | —- | M] () – C:\setup.log
[2007/04/10 04:48:50 | 000,000,000 | —- | M] () – C:\Trace.log

< %systemroot%\Fonts\*.com >
[2006/11/02 07:37:12 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 07:37:12 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 07:37:12 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/12/23 06:54:45 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 16:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/02 07:35:48 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2006/10/19 12:00:56 | 000,187,392 | —- | M] () – C:\Windows\Acer.scr

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2006/11/02 05:34:05 | 000,008,192 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2006/11/02 05:34:05 | 000,020,480 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2006/11/02 05:34:05 | 000,008,192 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 05:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 05:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/05/23 19:34:27 | 000,000,286 | -HS- | M] () – C:\Users\Michele\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2011/12/27 20:54:21 | 001,918,464 | —- | M] (AVAST Software) – C:\Users\Michele\Desktop\aswMBR.exe
[2011/12/27 23:53:00 | 004,353,794 | R— | M] (Swearware) – C:\Users\Michele\Desktop\ComboFix.exe
[2011/12/28 18:29:20 | 002,322,184 | —- | M] (ESET) – C:\Users\Michele\Desktop\esetsmartinstaller_enu.exe
[2011/11/02 08:04:50 | 001,263,344 | —- | M] (ESET) – C:\Users\Michele\Desktop\eset_nod32_antivirus_live_installer.exe
[2011/12/28 17:48:26 | 010,847,608 | —- | M] (Malwarebytes Corporation ) – C:\Users\Michele\Desktop\mbam-setup-1.60.0.1800.exe
[2011/12/26 17:25:23 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Michele\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-01-06 07:32:51

========== Alternate Data Streams ==========

@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:DD4DD9B9

< End of report >
Just wanted you to know that I am still working on this. I am currently working with the vista forum and will be back here in a couple days.
Hi CatByte, That did it. My wife's laptop is fixed. Than you very much for the help over the last 20 days. We will make a donation. I'm tired now, I think I'll go to bed soon. LOL :notworthy:
It was a reformat, but the cool thing was that all the files that I had her back up on the D partition, remained. I scanned D for viruses and it came up all clear. So now she essentially has a new computer again and she is happy about that. Thanks again Catbyte.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI