ping.exe & PSANHost.exe problem ! [Solved]

Hi ! My PC is very slow on startup and i get virtual memory minimum too low error very often.

Ping.exe uses 99% of CPU
PSANHost.exe uses ~75 % of computer virtual memory (i guess its my AV - Panda)
Here's my logs…

OTL logfile created on: 2011.12.30. 15:07:28 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\dators\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000426 | Country: Latvia | Language: LVI | Date Format: yyyy.MM.dd.

1022,42 Mb Total Physical Memory | 473,75 Mb Available Physical Memory | 46,34% Memory free
2,40 Gb Paging File | 0,52 Gb Available in Paging File | 21,71% Paging File free
Paging file location(s): C:\pagefile.sys 1533 1533 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 15,08 Gb Free Space | 10,12% Space Free | Partition Type: NTFS

Computer Name: MAAJAS-45B2A63F | User Name: dators | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\dators\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe (Panda Security)
PRC - C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe (Panda Security, S.L.)
PRC - C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe (Panda Security, S.L.)
PRC - C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe (Nitro PDF Software)
PRC - C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe (Uniblue Systems Limited)
PRC - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe ()
PRC - C:\WINDOWS\system32\ping.exe (Microsoft Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\VIAudioi\SBADeck\ADeck.exe (VIA Technologies, Inc.)


========== Modules (No Company Name) ==========

MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files\Uniblue\RegistryBooster\cache.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe ()
MOD - \\?\globalroot\systemroot\system32\mswsock.dll ()
MOD - \\.\globalroot\systemroot\system32\mswsock.dll ()
MOD - C:\Program Files\Panda Security\Panda Cloud Antivirus\MiniCrypto.dll ()
MOD - C:\Program Files\Panda Security\Panda Cloud Antivirus\APIcr.dll ()


========== Win32 Services (SafeList) ==========

SRV - (AMService) – File not found
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (NanoServiceMain) – C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe (Panda Security, S.L.)
SRV - (NitroReaderDriverReadSpool) – C:\Program Files\Nitro PDF\Reader\NitroPDFReaderDriverService.exe (Nitro PDF Software)
SRV - (mi-raysat_3dsmax2010_32) – C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe ()


========== Driver Services (SafeList) ==========

DRV - (PSINAflt) – C:\WINDOWS\system32\drivers\PSINAflt.sys (Panda Security, S.L.)
DRV - (PSINProt) – C:\WINDOWS\system32\drivers\PSINProt.sys (Panda Security, S.L.)
DRV - (PSINKNC) – C:\WINDOWS\system32\drivers\PSINKNC.sys (Panda Security, S.L.)
DRV - (PSINProc) – C:\WINDOWS\system32\drivers\PSINProc.sys (Panda Security, S.L.)
DRV - (PSINFile) – C:\WINDOWS\system32\drivers\PSINFile.sys (Panda Security, S.L.)
DRV - (sptd) – C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (acedrv11) – C:\WINDOWS\system32\drivers\acedrv11.sys (Protect Software GmbH)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (IPSec) – C:\WINDOWS\system32\drivers\ipsec.sys ()
DRV - (s115obex) – C:\WINDOWS\system32\drivers\s115obex.sys (MCCI Corporation)
DRV - (s115mdm) – C:\WINDOWS\system32\drivers\s115mdm.sys (MCCI Corporation)
DRV - (s115mdfl) – C:\WINDOWS\system32\drivers\s115mdfl.sys (MCCI Corporation)
DRV - (s115bus) Sony Ericsson Device 115 driver (WDM) – C:\WINDOWS\system32\drivers\s115bus.sys (MCCI Corporation)
DRV - (xfilt) – C:\WINDOWS\system32\DRIVERS\xfilt.sys (VIA Technologies,Inc)
DRV - (videX32) – C:\WINDOWS\system32\DRIVERS\videX32.sys (VIA Technologies, Inc.)
DRV - (VIAudio) Vinyl AC'97 Audio Controller (WDM) – C:\WINDOWS\system32\drivers\vinyl97.sys (VIA Technologies, Inc.)
DRV - (IntelC52) – C:\WINDOWS\system32\drivers\IntelC52.sys (Intel Corporation)
DRV - (IntelC51) – C:\WINDOWS\system32\drivers\IntelC51.sys (Intel Corporation)
DRV - (IntelC53) – C:\WINDOWS\system32\drivers\IntelC53.sys (Intel Corporation)
DRV - (mohfilt) – C:\WINDOWS\system32\drivers\mohfilt.sys (Intel Corporation)
DRV - (irsir) – C:\WINDOWS\system32\drivers\irsir.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://downloads.phpnuke.org/en/index.php?rvs=google
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/cheatengine/{126…F-D8A7A24B801B}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,AlwaysUseDefaultPrinter = yes
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.draugiem.lv/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.mail.ru/cnt/9514
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:61758

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://go.mail.ru/search?fr=fftb&utf8in;&q;="
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type;=937811&ilc;=12"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "google.lv"
FF - prefs.js..extensions.enabledItems: CuteButtonsCrystalSVG@ChoGGi:0.2.9
FF - prefs.js..extensions.enabledItems: [removed]:3.6.7
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..extensions.enabledItems: [removed]:1.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:4.0.2
FF - prefs.js..extensions.enabledItems: [removed]:0.6.20110329release
FF - prefs.js..extensions.enabledItems: {5c8bfb7c-9a54-11dc-8314-0800200c9a66}:3.6.7
FF - prefs.js..keyword.URL: "http://search.yahoo.com/search?fr=panda&type;=PCAFSI1190&p;="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 61758
FF - prefs.js..network.proxy.type: 1

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\dators\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\dators\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.12.13 20:38:03 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.09.17 10:00:39 | 000,000,000 | —D | M]

[2011.03.10 16:32:18 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\dators\Application Data\Mozilla\Extensions
[2011.12.09 21:08:44 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions
[2011.04.09 11:12:31 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.03.10 16:38:04 | 000,000,000 | —D | M] (Aero Fox XL) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}
[2011.06.04 21:00:56 | 000,000,000 | —D | M] ("DVDVideoSoft Menu") – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.10.25 21:53:09 | 000,000,000 | —D | M] (Panda Security Toolbar) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
[2011.09.09 19:52:12 | 000,000,000 | —D | M] (CuteButtons - Crystal SVG) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\CuteButtonsCrystalSVG@ChoGGi
[2011.03.10 16:38:11 | 000,000,000 | —D | M] (Virtus Search Opt-in) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\[removed]
[2011.03.10 16:38:10 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\[removed]\chrome
[2011.03.10 16:38:04 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\{5c8bfb7c-9a54-11dc-8314-0800200c9a66}\chrome\win\mozapps\extensions
[2011.09.17 10:13:34 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}\Setup\bin\PandaSecurityTb_2.0.0.9\$[56]\extensions
[2011.09.17 10:13:34 | 000,000,000 | —D | M] (Panda Security Toolbar) – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}\Setup\bin\PandaSecurityTb_2.0.0.9\$[56]\extensions\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}
[2011.11.13 01:01:28 | 000,001,533 | —- | M] () – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\searchplugins\mailru—.xml
[2011.03.10 16:32:26 | 000,009,966 | —- | M] () – C:\Documents and Settings\dators\Application Data\Mozilla\Firefox\Profiles\8fw3pqq9.default\searchplugins\mywebsearch.xml
[2011.12.25 14:59:19 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011.12.01 18:30:53 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011.11.04 22:08:01 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2011.12.25 14:59:20 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
() (No name found) – C:\DOCUMENTS AND SETTINGS\DATORS\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\8FW3PQQ9.DEFAULT\EXTENSIONS\{888D99E7-E8B5-46A3-851E-1EC45DA1E644}.XPI
[2011.07.03 20:52:19 | 000,000,000 | —D | M] (Java Quick Starter) – C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011.12.13 20:38:03 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.11.10 05:54:13 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.03.22 20:38:12 | 000,012,800 | —- | M] (Nullsoft, Inc.) – C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2011.10.01 20:24:50 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.12.13 20:38:03 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\Application\16.0.912.63\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.5 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\Application\16.0.912.63\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\Application\16.0.912.63\pdf.dll
CHR - plugin: Winamp Application Detector (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: VLC Multimedia Plug-in (Enabled) = C:\Program Files\VideoLAN\VLC\npvlc.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.2_0\
CHR - Extension: Bolides = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\cdpbfghlfllibkdgmdlddafjlgdfnadc\1_0\
CHR - Extension: Google Search = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.16_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8442_0\
CHR - Extension: Cheat Engine = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mpcknfcdcgpffjddjeceioobdelceffo\1.0.0\
CHR - Extension: Gmail = C:\Documents and Settings\dators\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\6.1.4_0\

Hosts file not found
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (no name) - {8984B388-A5BB-4DF7-B274-77B879E179DB} - No CLSID value found.
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Panda Security Toolbar) - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll ()
O3 - HKLM\..\Toolbar: (Panda Security Toolbar) - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {09900DE8-1DCA-443F-9243-26FF581438AF} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9A9E-3AF287E2699B} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [018.exe] C:\Program Files\LP\172B\018.exe ()
O4 - HKLM..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe (VIA Technologies, Inc.)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [Panda Security URL Filtering] C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe (Panda Security)
O4 - HKLM..\Run: [PSUNMain] C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe (Panda Security, S.L.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: svchost = C:\Documents and Settings\dators\Application Data\svchost.exe
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: Policies = C:\WindowsUpdate\server.exe
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &Search; - ?s=100000343&p;=ZKxdm607YYLV&si;=43983&a;=Le._A6pOhuWaO3OxRss1hQ&n;=2011031009 File not found
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\dators\Desktop\PartyPoker.lnk File not found
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Documents and Settings\dators\Desktop\PartyPoker.lnk File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll (InterTrust Technologies Corporation, Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F4A2F1B3-2C0D-4B2F-A676-5B8DC180FEC0}: DhcpNameServer = [removed] [removed]
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (c:\windows\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (C:\Documents and Settings\dators\Application Data\B0799\AA417.exe) -C:\Documents and Settings\dators\Application Data\B0799\AA417.exe ()
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\dators\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\dators\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.12.29 22:33:33 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: msacm.vorbis - C:\WINDOWS\System32\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: wave1 - C:\WINDOWS\System32\serwvdrv.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011.12.30 15:05:05 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Documents and Settings\dators\Desktop\OTL.exe
[2011.12.30 14:47:05 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2011.12.29 14:31:07 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\SpeedUpMyPC
[2011.12.29 14:13:31 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Application Data\Apple Computer
[2011.12.29 14:01:38 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\Application Data\Uniblue
[2011.12.29 14:01:35 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Uniblue
[2011.12.29 13:57:36 | 000,000,000 | —D | C] – C:\Program Files\Uniblue
[2011.12.29 13:47:19 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
[2011.12.29 13:42:24 | 000,000,000 | RH-D | C] – C:\Documents and Settings\dators\Recent
[2011.12.27 23:41:02 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\BestGameEver
[2011.12.26 23:51:10 | 000,139,264 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\eax.dll
[2011.12.26 23:51:10 | 000,000,000 | —D | C] – C:\Program Files\Creative
[2011.12.26 23:18:36 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\Desktop\ziemassvetki
[2011.12.26 00:38:10 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\My Documents\Gaslamp Games
[2011.12.25 14:59:18 | 000,157,472 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaws.exe
[2011.12.25 14:59:18 | 000,149,280 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\javaw.exe
[2011.12.25 14:59:18 | 000,149,280 | —- | C] (Sun Microsystems, Inc.) – C:\WINDOWS\System32\java.exe
[2011.12.24 20:45:20 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\Application Data\Broken Rules
[2011.12.24 20:14:02 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\My Documents\Saved Games
[2011.12.21 16:47:46 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\Local Settings\Application Data\2K Games
[2011.12.21 16:47:22 | 000,000,000 | —D | C] – C:\Program Files\NVIDIA Corporation
[2011.12.19 19:53:53 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\My Documents\Battlefield 2
[2011.12.19 19:43:09 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\EA GAMES
[2011.12.18 21:38:46 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Codemasters
[2011.12.18 21:38:44 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\My Documents\Codemasters
[2011.12.18 21:38:30 | 000,109,080 | —- | C] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\WINDOWS\System32\OpenAL32.dll
[2011.12.18 21:28:38 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Race Driver GRID
[2011.12.18 16:09:05 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\My Documents\BFBC2
[2011.12.17 22:57:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Akella Games
[2011.12.17 13:25:22 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Local Settings\Application Data\PCHealth
[2011.12.12 22:00:18 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\My Documents\18 WoS Extreme Trucker
[2011.12.11 19:33:03 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\My Documents\GTA San Andreas User Files
[2011.12.11 10:56:28 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\Start Menu\Programs\Euro Truck Simulator
[2011.12.11 10:24:20 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\My Documents\Euro Truck Simulator
[2011.12.09 22:31:59 | 000,000,000 | —D | C] – C:\Program Files\99715
[2011.12.08 19:50:16 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\Start Menu\Programs\PartyPoker
[2011.12.07 21:37:23 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\Start Menu\Programs\Activision Value
[2011.12.04 22:12:29 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Test Drive Unlimited
[2011.12.03 20:11:54 | 000,000,000 | —D | C] – C:\Documents and Settings\dators\Application Data\B0799
[2011.12.03 20:11:48 | 000,000,000 | —D | C] – C:\Program Files\LP
[2011.12.03 17:13:23 | 000,270,336 | —- | C] (Sysgration) – C:\WINDOWS\System32\ALFASVRUab9D32.dll
[2011.12.03 17:13:23 | 000,270,336 | —- | C] (Sysgration) – C:\WINDOWS\System32\ALFASVRUab32.dll
[2011.12.03 17:13:22 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Steering Wheel Drivers
[2011.12.01 18:30:02 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Skype
[2011.11.30 17:51:50 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\WZP CSS
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.12.30 15:05:07 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\dators\Desktop\OTL.exe
[2011.12.30 15:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At34.job
[2011.12.30 15:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At33.job
[2011.12.30 14:48:12 | 000,001,030 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-861567501-484763869-1417001333-1003UA.job
[2011.12.30 14:26:43 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.12.30 14:26:37 | 000,000,266 | —- | M] () – C:\WINDOWS\tasks\RegistryBooster.job
[2011.12.30 14:26:26 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011.12.30 01:25:00 | 000,000,886 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.12.30 01:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At6.job
[2011.12.30 01:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At5.job
[2011.12.30 00:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At4.job
[2011.12.30 00:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At3.job
[2011.12.29 23:03:04 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At50.job
[2011.12.29 23:03:01 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At49.job
[2011.12.29 22:03:03 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At48.job
[2011.12.29 22:03:01 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At47.job
[2011.12.29 21:03:02 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At46.job
[2011.12.29 21:03:01 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At45.job
[2011.12.29 20:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At44.job
[2011.12.29 20:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At43.job
[2011.12.29 19:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At42.job
[2011.12.29 19:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At41.job
[2011.12.29 18:20:17 | 000,002,239 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Run Audiosurf.lnk
[2011.12.29 18:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At40.job
[2011.12.29 18:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At39.job
[2011.12.29 17:03:01 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At38.job
[2011.12.29 17:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At37.job
[2011.12.29 16:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At36.job
[2011.12.29 16:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At35.job
[2011.12.29 14:31:07 | 000,000,744 | —- | M] () – C:\Documents and Settings\dators\Desktop\SpeedUpMyPC.lnk
[2011.12.29 14:03:01 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At32.job
[2011.12.29 14:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At31.job
[2011.12.29 14:01:35 | 000,000,749 | —- | M] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2011.12.29 13:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At30.job
[2011.12.29 13:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At29.job
[2011.12.28 12:16:14 | 000,353,768 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011.12.28 00:42:03 | 000,000,011 | R— | M] () – C:\WINDOWS\amunres.lsl
[2011.12.27 02:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At8.job
[2011.12.27 02:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At7.job
[2011.12.26 20:59:04 | 000,000,342 | —- | M] () – C:\WINDOWS\tasks\At2.job
[2011.12.26 16:22:59 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011.12.25 12:03:01 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At28.job
[2011.12.25 12:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At27.job
[2011.12.25 11:48:08 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-861567501-484763869-1417001333-1003Core.job
[2011.12.25 03:03:05 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At9.job
[2011.12.25 03:03:04 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At10.job
[2011.12.24 20:13:59 | 000,444,952 | —- | M] (Creative Labs) – C:\WINDOWS\System32\wrap_oal.dll
[2011.12.24 20:13:59 | 000,109,080 | —- | M] (Portions © Creative Labs Inc. and NVIDIA Corp.) – C:\WINDOWS\System32\OpenAL32.dll
[2011.12.23 23:01:33 | 000,002,265 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2011.12.18 23:00:01 | 000,000,638 | —- | M] () – C:\Documents and Settings\dators\Desktop\GRID.lnk
[2011.12.18 12:11:06 | 000,002,271 | —- | M] () – C:\Documents and Settings\dators\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011.12.18 12:11:04 | 000,002,293 | —- | M] () – C:\Documents and Settings\dators\Desktop\Google Chrome.lnk
[2011.12.17 13:36:04 | 000,000,118 | —- | M] () – C:\WINDOWS\System32\MRT.INI
[2011.12.13 16:39:31 | 000,000,905 | —- | M] () – C:\Documents and Settings\dators\Desktop\Extream.lnk
[2011.12.12 21:47:15 | 000,004,729 | —- | M] () – C:\Documents and Settings\dators\.recently-used.xbel
[2011.12.11 11:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At26.job
[2011.12.11 11:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At25.job
[2011.12.11 10:56:28 | 000,000,835 | —- | M] () – C:\Documents and Settings\dators\Desktop\Euro Truck Simulator.lnk
[2011.12.11 10:03:05 | 000,000,346 | —- | M] () – C:\WINDOWS\tasks\At24.job
[2011.12.11 10:03:03 | 000,000,344 | —- | M] () – C:\WINDOWS\tasks\At23.job
[2011.12.10 21:25:23 | 000,072,192 | —- | M] () – C:\Documents and Settings\dators\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.12.09 22:48:42 | 000,000,211 | -HS- | M] () – C:\boot.ini
[2011.12.09 22:04:15 | 000,005,569 | —- | M] () – C:\WINDOWS\wininit.ini
[2011.12.05 18:07:11 | 000,000,754 | —- | M] () – C:\Documents and Settings\dators\Application Data\Microsoft\Internet Explorer\Quick Launch\PokerStars.lnk
[2011.12.05 14:41:51 | 000,001,009 | —- | M] () – C:\Documents and Settings\dators\Desktop\flatout2.lnk
[2011.12.03 19:48:29 | 000,435,688 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011.12.03 19:48:26 | 000,068,584 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011.11.30 17:51:54 | 000,001,568 | —- | M] () – C:\Documents and Settings\All Users\Desktop\WaZzZuP.LV Counter-Strike Source.lnk
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.12.29 14:31:07 | 000,000,744 | —- | C] () – C:\Documents and Settings\dators\Desktop\SpeedUpMyPC.lnk
[2011.12.29 14:01:47 | 000,000,266 | —- | C] () – C:\WINDOWS\tasks\RegistryBooster.job
[2011.12.29 14:01:35 | 000,000,749 | —- | C] () – C:\Documents and Settings\All Users\Desktop\RegistryBooster.lnk
[2011.12.28 00:42:03 | 000,000,011 | R— | C] () – C:\WINDOWS\amunres.lsl
[2011.12.27 23:41:02 | 000,002,239 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Run Audiosurf.lnk
[2011.12.26 23:40:44 | 000,233,472 | R— | C] () – C:\WINDOWS\System32\MafiaSetup.exe
[2011.12.18 22:59:32 | 000,000,638 | —- | C] () – C:\Documents and Settings\dators\Desktop\GRID.lnk
[2011.12.17 13:36:04 | 000,000,118 | —- | C] () – C:\WINDOWS\System32\MRT.INI
[2011.12.13 16:39:31 | 000,000,905 | —- | C] () – C:\Documents and Settings\dators\Desktop\Extream.lnk
[2011.12.12 21:47:15 | 000,004,729 | —- | C] () – C:\Documents and Settings\dators\.recently-used.xbel
[2011.12.11 10:56:28 | 000,000,835 | —- | C] () – C:\Documents and Settings\dators\Desktop\Euro Truck Simulator.lnk
[2011.12.04 20:17:30 | 000,001,009 | —- | C] () – C:\Documents and Settings\dators\Desktop\flatout2.lnk
[2011.12.03 17:13:23 | 000,077,824 | —- | C] () – C:\WINDOWS\System32\AlfaBIGUab9D32.dll
[2011.12.03 17:13:23 | 000,077,824 | —- | C] () – C:\WINDOWS\System32\AlfaBIGUab32.dll
[2011.12.01 18:30:02 | 000,002,265 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Skype.lnk
[2011.11.30 17:51:54 | 000,001,568 | —- | C] () – C:\Documents and Settings\All Users\Desktop\WaZzZuP.LV Counter-Strike Source.lnk
[2011.11.26 12:14:41 | 000,000,000 | —- | C] () – C:\Documents and Settings\All Users\Application Data\058jwV.dat
[2011.10.10 19:17:39 | 000,459,088 | —- | C] () – C:\Documents and Settings\dators\Local Settings\Application Data\promo.exe
[2011.09.17 10:13:20 | 000,000,264 | —- | C] () – C:\WINDOWS\System32\PSUNCpl.dat
[2011.08.25 15:34:51 | 000,000,096 | -H– | C] () – C:\WINDOWS\System32\HsInfo.dat
[2011.08.03 15:39:52 | 000,354,816 | —- | C] () – C:\WINDOWS\System32\psisdecd.dll
[2011.07.06 15:24:07 | 002,122,464 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2011.06.28 11:22:20 | 000,005,569 | —- | C] () – C:\WINDOWS\wininit.ini
[2011.05.18 18:48:04 | 000,000,034 | —- | C] () – C:\WINDOWS\CDE DX4400DEFGIPS.ini
[2011.05.18 11:40:53 | 000,000,111 | —- | C] () – C:\WINDOWS\ANS2000.INI
[2011.05.18 11:40:53 | 000,000,020 | -H– | C] () – C:\WINDOWS\akebook.ini
[2011.05.18 11:40:53 | 000,000,004 | -H– | C] () – C:\WINDOWS\a3kebook.ini
[2011.05.06 11:43:10 | 000,003,584 | —- | C] () – C:\WINDOWS\System32\klipxm32.dll
[2011.04.01 17:55:58 | 000,004,096 | —- | C] () – C:\WINDOWS\d3dx.dat
[2011.03.10 16:32:10 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2011.01.09 16:00:47 | 000,000,056 | -H– | C] () – C:\WINDOWS\System32\ezsidmv.dat
[2011.01.08 13:24:15 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\clientpad.dll
[2011.01.03 17:09:30 | 000,072,192 | —- | C] () – C:\Documents and Settings\dators\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.12.30 00:22:16 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2010.12.30 00:20:52 | 000,353,768 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2010.12.29 23:11:01 | 000,000,000 | —- | C] () – C:\WINDOWS\ativpsrm.bin
[2010.12.29 23:08:47 | 000,593,920 | —- | C] () – C:\WINDOWS\System32\ati2sgag.exe
[2010.12.29 22:46:03 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\vusetup.dll
[2010.12.29 22:45:27 | 000,069,632 | —- | C] () – C:\WINDOWS\System32\vuins32.dll
[2010.12.29 22:36:07 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2010.12.29 22:30:17 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2010.02.11 06:12:00 | 003,107,788 | —- | C] () – C:\WINDOWS\System32\ativva5x.dat
[2010.02.11 06:12:00 | 000,887,724 | —- | C] () – C:\WINDOWS\System32\ativva6x.dat
[2009.04.24 00:29:16 | 000,189,051 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2005.12.30 08:33:55 | 003,325,706 | -H– | C] () – C:\Documents and Settings\dators\Application Data\datorslog.dat
[2004.08.04 02:07:22 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2004.08.04 00:14:30 | 000,075,264 | —- | C] () – C:\WINDOWS\System32\drivers\ipsec.sys
[2004.08.02 15:20:40 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2002.09.18 00:45:00 | 000,119,808 | —- | C] () – C:\WINDOWS\lsb_un20.exe
[2001.08.23 14:00:00 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2001.08.23 14:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2001.08.23 14:00:00 | 000,435,688 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2001.08.23 14:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2001.08.23 14:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2001.08.23 14:00:00 | 000,068,584 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2001.08.23 14:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2001.08.23 14:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2001.08.23 14:00:00 | 000,004,463 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2001.08.23 14:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat

========== LOP Check ==========

[2011.10.01 20:43:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Astroburn Lite
[2011.10.15 14:44:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Autodesk
[2011.10.22 21:52:16 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Blumentals
[2011.01.06 21:14:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Cakewalk
[2011.12.18 21:38:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Codemasters
[2010.12.31 00:05:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2011.07.13 10:10:47 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Easybits GO
[2011.01.07 01:03:48 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Guitar Pro 6
[2011.06.26 14:35:26 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Installations
[2011.03.25 18:41:33 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LAG
[2011.10.22 21:12:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Media Get LLC
[2011.01.06 00:32:16 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Native Instruments
[2011.04.17 09:46:38 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nitro PDF
[2010.12.29 23:24:36 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Panda Security
[2011.12.30 14:27:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering
[2011.06.26 14:38:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\PC Suite
[2011.12.04 22:38:32 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Test Drive Unlimited
[2011.10.16 21:01:15 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Ticno
[2011.02.20 22:09:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\VideoConverter
[2011.07.30 11:19:06 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Web Page Maker
[2011.09.15 22:23:26 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\YouTube Downloader
[2011.11.28 19:30:41 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011.12.29 13:57:37 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
[2011.10.01 20:43:45 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Astroburn Lite
[2011.10.15 14:44:08 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Autodesk
[2011.11.02 21:42:06 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Avnex
[2011.12.13 21:47:55 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\B0799
[2011.05.20 13:09:48 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\BitLord
[2011.10.16 19:57:04 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Blender Foundation
[2011.10.22 21:53:17 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Blumentals
[2011.10.16 21:01:35 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Breakpad
[2011.12.24 20:45:20 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Broken Rules
[2010.12.31 15:34:23 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\DAEMON Tools Lite
[2011.07.26 16:26:26 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\DVDVideoSoft
[2011.06.04 21:00:55 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\DVDVideoSoftIEHelpers
[2011.10.09 11:47:04 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\FarmingSimulator2008
[2011.05.12 16:05:42 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\FileZilla
[2011.01.08 14:26:42 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\FXpansion
[2011.04.14 15:13:58 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\GetRightToGo
[2011.07.13 10:10:08 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\go
[2011.12.11 16:39:47 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\gtk-2.0
[2011.04.16 11:58:58 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Guitar Pro 6
[2011.10.16 21:00:07 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Installer
[2011.11.26 12:03:33 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\InterTrust
[2010.12.31 00:18:57 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Leadertech
[2011.10.22 21:12:09 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Media Get LLC
[2011.10.29 20:42:01 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\mm
[2011.01.30 19:31:30 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Mumble
[2011.12.29 13:50:31 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Nitro PDF
[2011.09.03 20:04:48 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\OpenCandy
[2010.12.29 23:25:45 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Panda Security
[2011.10.12 17:53:12 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\pandasecuritytb
[2011.06.26 14:38:44 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\PC Suite
[2011.02.23 22:17:52 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\PhotoScape
[2011.01.08 21:42:39 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\ProtectDISC
[2010.12.30 15:32:01 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Python-Eggs
[2011.01.16 13:09:24 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Rovio
[2011.06.26 14:39:06 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Samsung
[2011.10.10 18:49:39 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\SkyMonk
[2011.12.11 22:14:16 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\SystemRequirementsLab
[2011.10.03 21:18:20 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\TeamViewer
[2011.10.16 22:23:40 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Ticno
[2011.09.10 11:43:25 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Toolbar4
[2011.12.29 14:27:22 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Uniblue
[2011.02.23 16:38:05 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\UseNeXT
[2011.12.29 14:31:28 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\uTorrent
[2011.07.30 11:19:36 | 000,000,000 | —D | M] – C:\Documents and Settings\dators\Application Data\Web Page Maker
[2011.12.25 03:03:04 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At10.job
[2011.11.26 12:14:24 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At11.job
[2011.11.26 12:14:24 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At12.job
[2011.11.26 12:14:24 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At13.job
[2011.11.26 12:14:24 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At14.job
[2011.11.26 12:14:24 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At15.job
[2011.11.26 12:14:25 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At16.job
[2011.11.26 12:14:25 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At17.job
[2011.11.26 12:14:25 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At18.job
[2011.11.26 12:14:25 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At19.job
[2011.12.26 20:59:04 | 000,000,342 | —- | M] () – C:\WINDOWS\Tasks\At2.job
[2011.11.26 12:14:25 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At20.job
[2011.11.26 12:14:25 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At21.job
[2011.11.26 12:14:25 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At22.job
[2011.12.11 10:03:03 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At23.job
[2011.12.11 10:03:05 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At24.job
[2011.12.11 11:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At25.job
[2011.12.11 11:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At26.job
[2011.12.25 12:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At27.job
[2011.12.25 12:03:01 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At28.job
[2011.12.29 13:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At29.job
[2011.12.30 00:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At3.job
[2011.12.29 13:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At30.job
[2011.12.29 14:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At31.job
[2011.12.29 14:03:01 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At32.job
[2011.12.30 15:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At33.job
[2011.12.30 15:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At34.job
[2011.12.29 16:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At35.job
[2011.12.29 16:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At36.job
[2011.12.29 17:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At37.job
[2011.12.29 17:03:01 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At38.job
[2011.12.29 18:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At39.job
[2011.12.30 00:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At4.job
[2011.12.29 18:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At40.job
[2011.12.29 19:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At41.job
[2011.12.29 19:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At42.job
[2011.12.29 20:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At43.job
[2011.12.29 20:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At44.job
[2011.12.29 21:03:01 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At45.job
[2011.12.29 21:03:02 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At46.job
[2011.12.29 22:03:01 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At47.job
[2011.12.29 22:03:03 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At48.job
[2011.12.29 23:03:01 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At49.job
[2011.12.30 01:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At5.job
[2011.12.29 23:03:04 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At50.job
[2011.12.30 01:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At6.job
[2011.12.27 02:03:00 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At7.job
[2011.12.27 02:03:00 | 000,000,346 | —- | M] () – C:\WINDOWS\Tasks\At8.job
[2011.12.25 03:03:05 | 000,000,344 | —- | M] () – C:\WINDOWS\Tasks\At9.job
[2011.11.18 12:00:00 | 000,000,502 | —- | M] () – C:\WINDOWS\Tasks\One-Click Tweak.job
[2011.12.30 14:26:37 | 000,000,266 | —- | M] () – C:\WINDOWS\Tasks\RegistryBooster.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011.06.23 01:06:51 | 000,000,000 | —- | M] () – C:\0x0304A000.sfl
[2010.12.29 22:33:33 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011.12.09 22:48:42 | 000,000,211 | -HS- | M] () – C:\boot.ini
[2010.12.29 22:33:33 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011.11.02 21:51:13 | 000,000,043 | —- | M] () – C:\END
[2007.11.07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007.11.07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007.11.07 08:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007.11.07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007.11.07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007.11.07 08:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007.11.07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007.11.07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007.11.07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007.11.07 08:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2007.11.07 08:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007.11.07 08:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2007.11.07 08:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007.11.07 08:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007.11.07 08:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007.11.07 08:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007.11.07 08:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007.11.07 08:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007.11.07 08:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007.11.07 08:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007.11.07 08:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2010.12.29 22:33:33 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010.12.29 22:33:33 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004.08.03 23:38:34 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2011.03.23 12:59:08 | 000,250,048 | RHS- | M] () – C:\ntldr
[2011.06.26 14:10:20 | 000,000,076 | —- | M] () – C:\nv_original.ini
[2011.12.30 14:26:19 | 1607,467,008 | -HS- | M] () – C:\pagefile.sys
[2007.11.07 08:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007.11.07 08:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007.11.07 08:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI

< %systemroot%\Fonts\*.com >
[2006.04.18 14:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006.06.29 13:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006.04.18 14:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006.06.29 13:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010.12.29 22:33:04 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008.07.06 14:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2006.10.26 19:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
[2008.07.06 12:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >
[2011.10.16 21:00:22 | 000,000,144 | —- | M] () – C:\Documents and Settings\All Users\Favorites\Mail.Ru.url

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010.12.30 00:16:42 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2010.12.30 00:16:42 | 000,659,456 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2010.12.30 00:16:42 | 000,905,216 | —- | M] () – C:\WINDOWS\System32\config\system.sav

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2011.03.23 13:07:56 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010.12.29 22:39:19 | 000,000,060 | -HS- | M] () – C:\Documents and Settings\dators\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2010.12.29 22:39:18 | 000,000,079 | —- | M] () – C:\Documents and Settings\dators\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2005.12.13 09:58:26 | 000,097,792 | —- | M] () – C:\Documents and Settings\dators\Desktop\keygen.exe
[2011.12.30 15:05:07 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\dators\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-12-17 11:38:34

========== Files - Unicode (All) ==========
[2011.10.19 21:06:07 | 000,024,576 | —- | M] ()(C:\Documents and Settings\dators\Desktop\?????.doc) – C:\Documents and Settings\dators\Desktop\Салат.doc
[2011.10.19 21:06:07 | 000,024,576 | —- | C] ()(C:\Documents and Settings\dators\Desktop\?????.doc) – C:\Documents and Settings\dators\Desktop\Салат.doc
[2011.10.16 21:00:22 | 000,000,210 | —- | M] ()(C:\Documents and Settings\All Users\Favorites\Mail.Ru ????? - ????????? ??? ???????!.url) – C:\Documents and Settings\All Users\Favorites\Mail.Ru Агент - используй для общения!.url

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\WINDOWS\$NtUninstallKB61167$] -> Error: Cannot create file handle -> Unknown point type

< End of report >

OTL Extras logfile created on: 2011.12.30. 15:07:28 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\dators\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000426 | Country: Latvia | Language: LVI | Date Format: yyyy.MM.dd.

1022,42 Mb Total Physical Memory | 473,75 Mb Available Physical Memory | 46,34% Memory free
2,40 Gb Paging File | 0,52 Gb Available in Paging File | 21,71% Paging File free
Paging file location(s): C:\pagefile.sys 1533 1533 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,04 Gb Total Space | 15,08 Gb Free Space | 10,12% Space Free | Partition Type: NTFS

Computer Name: MAAJAS-45B2A63F | User Name: dators | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = htmlfile] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] – "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] – "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] – "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DoNotAllowExceptions" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh
"C:\Documents and Settings\All Users\Application Data\wscntfy.exe" = C:\Documents and Settings\All Users\Application Data\wscntfy.exe:*:Enabled:Windows-Audio Driver
"C:\Program Files\Common Files\lsmass.exe" = C:\Program Files\Common Files\lsmass.exe:*:Enabled:Windows-Audio Driver

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\kapaajamais\CSS\hl2.exe" = C:\kapaajamais\CSS\hl2.exe:*:Enabled:hl2
"C:\kapaajamais\CS\hl.exe" = C:\kapaajamais\CS\hl.exe:*:Enabled:Half-Life Launcher
"C:\Program Files\RevConnect\DCPlusPlus.exe" = C:\Program Files\RevConnect\DCPlusPlus.exe:*:Enabled:DC++ – ()
"C:\kapaajamais\BF2.exe" = C:\kapaajamais\BF2.exe:*:Enabled:Battlefield 2
"C:\kapaajamais\Battlefield\BF2.exe" = C:\kapaajamais\Battlefield\BF2.exe:*:Disabled:BF2
"C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"C:\kapaajamais\Battlefield\Bf2_w32ded.exe" = C:\kapaajamais\Battlefield\Bf2_w32ded.exe:*:Disabled:Bf2_w32ded
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam – (Valve Corporation)
"C:\Program Files\Steam\steamapps\joey_kapracis\team fortress 2\hl2.exe" = C:\Program Files\Steam\steamapps\joey_kapracis\team fortress 2\hl2.exe:*:Enabled:hl2 – ()
"C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Disabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\kapaajamais\Counter Strike Source 2010\hl2.exe" = C:\kapaajamais\Counter Strike Source 2010\hl2.exe:*:Disabled:hl2
"C:\Program Files\ACSPMonitor\ASMonitor.exe" = C:\Program Files\ACSPMonitor\ASMonitor.exe:*:Enabled:System
"C:\kapaajamais\CSS gamerxx\hl2.exe" = C:\kapaajamais\CSS gamerxx\hl2.exe:*:Disabled:hl2
"C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Disabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\DOCUME~1\dators\LOCALS~1\Temp\Rar$EX02.734\SHROOMBOT.exe" = C:\DOCUME~1\dators\LOCALS~1\Temp\Rar$EX02.734\SHROOMBOT.exe:*:Enabled:Windows Messanger
"C:\Documents and Settings\dators\Application Data\svchost.exe" = C:\Documents and Settings\dators\Application Data\svchost.exe:*:Enabled:Windows Messanger
"C:\Program Files\Roozz\RoozzNHostSvc.exe" = C:\Program Files\Roozz\RoozzNHostSvc.exe:*:Disabled:Binary loader for Roozz plugin
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh
"C:\Program Files\Winamp\winamp.exe" = C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp – (Nullsoft, Inc.)
"C:\Games\WZP CSS\hl2.exe" = C:\Games\WZP CSS\hl2.exe:*:Disabled:hl2
"C:\Documents and Settings\dators\Local Settings\Application Data\MediaGet2\mediaget.exe" = C:\Documents and Settings\dators\Local Settings\Application Data\MediaGet2\mediaget.exe:*:Enabled:MediaGet torrent client – (MediaGet LLC)
"C:\Program Files\TorrentEasy\TorrentEasy.exe" = C:\Program Files\TorrentEasy\TorrentEasy.exe:*:Enabled:TorrentEasy
"C:\Program Files\Steam\steamapps\common\alien swarm\srcds.exe" = C:\Program Files\Steam\steamapps\common\alien swarm\srcds.exe:*:Enabled:Alien Swarm Dedicated Server
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)
"C:\Documents and Settings\dators\My Documents\Downloads\ChampionsOnlineF2P.exe" = C:\Documents and Settings\dators\My Documents\Downloads\ChampionsOnlineF2P.exe:*:Enabled:ChampionsOnlineF2P
"C:\Games\Portal 2\portal2.exe" = C:\Games\Portal 2\portal2.exe:*:Enabled:portal2
"C:\Program Files\Steam\steamapps\common\ava\REACTOR.exe" = C:\Program Files\Steam\steamapps\common\ava\REACTOR.exe:*:Enabled:Alliance of Valiant Arms
"C:\Games\DOD.Lv_DODS_OB\hl2.exe" = C:\Games\DOD.Lv_DODS_OB\hl2.exe:*:Enabled:hl2 – ()
"C:\Program Files\Steam\steamapps\common\champions online\Champions Online\Live\GameClient.exe" = C:\Program Files\Steam\steamapps\common\champions online\Champions Online\Live\GameClient.exe:*:Enabled:GameClient
"C:\Documents and Settings\dators\Games\Unreal Tournament 2004\System\UT2004.exe" = C:\Documents and Settings\dators\Games\Unreal Tournament 2004\System\UT2004.exe:*:Enabled:UT2004 – ()
"C:\Games\NFSU2\speed2.exe" = C:\Games\NFSU2\speed2.exe:*:Disabled:speed2
"C:\Games\Landwirtschafts Simulator 2011\FarmingSimulator2011.exe" = C:\Games\Landwirtschafts Simulator 2011\FarmingSimulator2011.exe:*:Enabled:Landwirtschafts Simulator 2011
"C:\Games\Landwirtschafts Simulator 2011\game.exe" = C:\Games\Landwirtschafts Simulator 2011\game.exe:*:Enabled:Landwirtschafts Simulator 2011
"C:\Documents and Settings\dators\Games\Unreal Tournament 3\Binaries\UT3.exe" = C:\Documents and Settings\dators\Games\Unreal Tournament 3\Binaries\UT3.exe:*:Enabled:Unreal_Tournament_1
"C:\Documents and Settings\dators\Games\Unreal Tournament 3\Binaries\UnrealFrontend.exe" = C:\Documents and Settings\dators\Games\Unreal Tournament 3\Binaries\UnrealFrontend.exe:*:Enabled:Unreal_Tournament_2
"C:\Documents and Settings\dators\Games\Unreal Tournament 3\Binaries\UnrealConsole.exe" = C:\Documents and Settings\dators\Games\Unreal Tournament 3\Binaries\UnrealConsole.exe:*:Enabled:Unreal_Tournament_3
"C:\Games\cs1.6\Counter strike 1.6\Counter strike 1.6 [v5]\hl.exe" = C:\Games\cs1.6\Counter strike 1.6\Counter strike 1.6 [v5]\hl.exe:*:Disabled:Half-Life Launcher
"C:\Program Files\Steam\steamapps\common\crimecraft\Binaries\CrimeCraft.exe" = C:\Program Files\Steam\steamapps\common\crimecraft\Binaries\CrimeCraft.exe:*:Enabled:CrimeCraft
"C:\Games\Agrar Simulator 2011\iupdate.dll" = C:\Games\Agrar Simulator 2011\iupdate.dll:*:Enabled:Agricultural Simulator 2011
"C:\Games\Agrar Simulator 2011\farm.dll" = C:\Games\Agrar Simulator 2011\farm.dll:*:Enabled:Agricultural Simulator 2011
"C:\kapaajamais\WZP CSS\hl2.exe" = C:\kapaajamais\WZP CSS\hl2.exe:*:Disabled:hl2 – ()
"C:\kapaajamais\Agrar Simulator 2011\farm.dll" = C:\kapaajamais\Agrar Simulator 2011\farm.dll:*:Disabled:Agrar Simulator 2011
"C:\Games\Rising Kingdoms Demo\RK Demo.exe" = C:\Games\Rising Kingdoms Demo\RK Demo.exe:*:Disabled:RK Demo
"C:\Program Files\DownVision\DownVision.exe" = C:\Program Files\DownVision\DownVision.exe:*:Disabled:DownVision
"C:\Program Files\Autodesk\Backburner\monitor.exe" = C:\Program Files\Autodesk\Backburner\monitor.exe:*:Enabled:backburner 2.3 monitor – (Autodesk, Inc.)
"C:\Program Files\Autodesk\Backburner\manager.exe" = C:\Program Files\Autodesk\Backburner\manager.exe:*:Enabled:backburner 2.3 manager – (Autodesk, Inc.)
"C:\Program Files\Autodesk\Backburner\server.exe" = C:\Program Files\Autodesk\Backburner\server.exe:*:Enabled:backburner 2.3 server – (Autodesk, Inc.)
"C:\Program Files\Autodesk\3ds Max 2010\3dsmax.exe" = C:\Program Files\Autodesk\3ds Max 2010\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2010 32-bit – (Autodesk, Inc.)
"C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe" = C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe:*:Enabled:mental ray satellite server for Autodesk 3ds Max 2010 32-bit – ()
"C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32.exe" = C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32.exe:*:Enabled:mental ray satellite for Autodesk 3ds Max 2010 32-bit – (mental images GmbH)
"C:\Documents and Settings\dators\Local Settings\Application Data\Akamai\netsession_win.exe" = C:\Documents and Settings\dators\Local Settings\Application Data\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Interface
"C:\kapaajamais\ CSS\hl2.exe" = C:\kapaajamais\ CSS\hl2.exe:*:Disabled:hl2
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit – (Apple Inc.)
"C:\Documents and Settings\All Users\Application Data\wscntfy.exe" = C:\Documents and Settings\All Users\Application Data\wscntfy.exe:*:Enabled:Windows-Audio Driver
"C:\Program Files\Common Files\lsmass.exe" = C:\Program Files\Common Files\lsmass.exe:*:Enabled:Windows-Audio Driver
"C:\Documents and Settings\dators\Desktop\GAMES\FlatOut\FlatOut\flatout.exe" = C:\Documents and Settings\dators\Desktop\GAMES\FlatOut\FlatOut\flatout.exe:*:Disabled:flatout
"C:\Documents and Settings\dators\My Documents\qtorrent\[PC] Test Drive Unlimited [PROPER] [RIP] [dopeman]\TDU\TDU\TestDriveUnlimited.exe" = C:\Documents and Settings\dators\My Documents\qtorrent\[PC] Test Drive Unlimited [PROPER] [RIP] [dopeman]\TDU\TDU\TestDriveUnlimited.exe:*:Disabled:Test Drive Unlimited
"C:\Documents and Settings\dators\Desktop\TDU\TDU\TestDriveUnlimited.exe" = C:\Documents and Settings\dators\Desktop\TDU\TDU\TestDriveUnlimited.exe:*:Disabled:Test Drive Unlimited
"C:\Program Files\Cake Poker 2.0\PokerClient.exe" = C:\Program Files\Cake Poker 2.0\PokerClient.exe:*:Enabled:Cake Poker 2.0
"C:\Games\Agrar Simulator 2012\iupdate.dll" = C:\Games\Agrar Simulator 2012\iupdate.dll:*:Enabled:Agricultural Simulator 2012
"C:\Games\Agrar Simulator 2012\farm2012.dll" = C:\Games\Agrar Simulator 2012\farm2012.dll:*:Enabled:Agricultural Simulator 2012
"C:\Games\Race Driver GRID\GRID.exe" = C:\Games\Race Driver GRID\GRID.exe:*:Disabled:GRID Executable – (Codemasters)
"C:\Games\BF2.exe" = C:\Games\BF2.exe:*:Enabled:Battlefield 2
"C:\Program Files\Steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe" = C:\Program Files\Steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe:*:Enabled:Spiral Knights – (Sun Microsystems, Inc.)
"C:\Program Files\Steam\steamapps\common\defcon\defcon.exe" = C:\Program Files\Steam\steamapps\common\defcon\defcon.exe:*:Enabled:Defcon


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{03ADC8AB-C130-0C3D-1FF9-2C385DF25689}" = CCC Help Czech
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2™
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{07021185-008D-ABF9-7716-475AC035F8B3}" = CCC Help Spanish
"{0F8D0406-7755-AC37-6529-73AD649DBE32}" = Catalyst Control Center Graphics Previews Common
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1" = Guitar Pro 6
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{19C70FC4-272E-4551-9295-B9DA835BC1EB}" = Streering Wheel Drivers V4.2
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 3.3
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{22072CC8-7230-96F8-52F4-05EAF3F906B6}" = CCC Help Polish
"{2368ADBD-6FDF-4B9F-FE41-E20B4D78E79E}" = CCC Help Chinese Standard
"{25EF0DC4-B072-2E04-4581-A13C91423CE6}" = CCC Help Portuguese
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java™ 6 Update 30
"{26F7855C-443B-00A6-F7B8-A97A5403F617}" = CCC Help Danish
"{2881063B-C58F-49EB-97FD-8BF58EC580F9}" = Nitro PDF Reader
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{2CB4A925-48A7-DA65-DCEE-D4DE224B7D84}" = CCC Help English
"{306D75B9-7FFF-FF65-0C76-57F2FE4FE1D6}" = Catalyst Control Center Core Implementation
"{3127F76D-5335-4AC7-BD1E-2F5247A23C24}" = iTunes
"{317AC0C7-FEBF-0409-87A3-4FC70D0ED900}" = Autodesk 3ds Max 2010 32-bit
"{32B12FE4-5A51-751A-1FB6-A14E97EBDD5C}" = CCC Help German
"{351512E5-01BD-E878-6F57-AA3E517D9ECE}" = Skins
"{354A387E-0374-21A3-6832-335674A6D7D1}" = CCC Help French
"{3C00BEE9-26D0-D9E0-A2D1-62F70D412A12}" = CCC Help Turkish
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2008.1
"{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX
"{4346F7AA-3D56-0941-424C-4454E04D37F6}" = CCC Help Italian
"{453554F1-2666-4577-BE6A-B65B46119217}_is1" = WaZzZuP.LV Counter-Strike Source 1.0
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CAE2F2C-75CD-A0DE-7520-449BCBBCC833}" = CCC Help Korean
"{5783F2D7-8001-0409-0002-0060B0CE6BBA}" = AutoCAD 2010 - English
"{5783F2D7-8001-0409-1002-0060B0CE6BBA}" = AutoCAD 2010 Language Pack - English
"{57F7F0A5-8F22-8E63-E819-803B5C9CA3A5}" = CCC Help Dutch
"{5EA437D2-7A57-B60E-E8F2-76BFAC0895A5}" = CCC Help Chinese Traditional
"{60A08432-00DD-0409-AC2C-143C75460878}" = Autodesk 3ds Max 2010 32-bit Components
"{61AF4E75-050E-0304-3417-8BC16417FEB1}" = CCC Help Greek
"{632005DA-C291-5275-284C-5EE96B05C714}" = Catalyst Control Center HydraVision Full
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C72BE0C-3E25-CACD-0070-2FD9C02ABA14}" = ccc-core-preinstall
"{6D316D67-DA52-4659-9C98-F479963534D6}" = Audiosurf
"{70C592EC-AE9B-4734-928B-676E824FB41E}" = MFC RunTime files
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7CCEBC24-62DB-4280-A8EC-BFA49F167920}" = Software Update for Web Folders
"{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{880BB617-914E-17E8-D877-A96BAC5794D2}" = Catalyst Control Center Graphics Full New
"{8897CF22-DB6C-8248-895C-12BFA2677F51}" = CCC Help Hungarian
"{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9324F5BB-7DE8-4BFD-ACC7-2A6583DF8AED}_is1" = DOD.LV Day of Defeat: Source OrangeBox Engine v30 version (1.0.
"{943A8D28-80D6-41DC-AE94-81FEB42041BF}" = System Requirements Lab CYRI
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AAF4238F-7C29-451D-9925-C753271A5728}" = Microsoft Visual C++ Run Time Lib Setup
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1)
"{AF710FDE-2815-8C8D-5281-8004C2654AA6}" = CCC Help Russian
"{AFF2D965-C6F2-A210-FBF7-532612AA1D23}" = CCC Help Swedish
"{B21336EE-4AEF-9940-4AC7-EDB89854B8D3}" = CCC Help Thai
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BBA69346-61A1-BD34-E75A-4D81232DB1FE}" = Catalyst Control Center Localization All
"{BFD5ED08-F066-92D5-BE67-3B9AE5DCFF0C}" = CCC Help Japanese
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4609F15-FB3C-D97E-BAA1-4F10815039C2}" = Catalyst Control Center Graphics Full Existing
"{CAF21AE5-4D30-4ACC-AAB1-3215D8EAF459}" = Cobra 11 - Nitro
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D01FAC3D-86B4-3A19-9D10-9156A0EB3EBE}" = CCC Help Finnish
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D73722C8-3F65-C75B-A631-5D36894DAB92}" = ccc-core-static
"{D8CE69B0-9274-4b8c-BA49-0FF6A20A3C65}" = SAMSUNG SYMBIAN USB Download Driver
"{DDAD33B6-8C00-428D-087B-A7088355B9BE}" = Catalyst Control Center Graphics Light
"{E333F074-FC7F-596D-3D61-44F0EC28E8C0}" = ccc-utility
"{E551D82D-4D56-4AF7-A2C9-8897D7A0CB00}" = Autodesk 3ds Max 2010 Tutorials Files
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster
"{E6B43401-E818-4961-AFED-118DD8E87642}" = RAF
"{FA38F9E4-BED7-E021-B660-8FDFF7EC6E1A}" = CCC Help Norwegian
"{FEB2D0CA-9912-4AA1-8FBE-CFD852F9F1FC}" = Panda Cloud Antivirus
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"All ATI Software" = ATI - Software Uninstall Utility
"ASIO4ALL" = ASIO4ALL
"Astroburn Lite" = Astroburn Lite
"ATI Display Driver" = ATI Display Driver
"AutoCAD 2010 - English" = AutoCAD 2010 - English
"Autodesk FBX Plugin 2009.4 - 3ds Max 2010" = Autodesk FBX Plugin 2009.4 - 3ds Max 2010
"AV Voice Changer Software DIAMOND 7.0" = AV Voice Changer Software DIAMOND 7.0
"BFD" = BFD
"Cakewalk Studio Instruments_is1" = Studio Instruments 1.0
"CCleaner" = CCleaner
"ClassicPro" = ClassicPro© v1.15
"Drumaxx" = Drumaxx
"EA NHL 10 Mod_is1" = EA NHL 10 Mod
"EAX Unified" = EAX Unified
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EPSON Printer and Utilities" = EPSON Printer Software
"EPSON Scanner" = EPSON Scan
"Euro Truck Simulator" = Euro Truck Simulator 1.1
"FL Studio 9" = FL Studio 9
"GCFScape_is1" = GCFScape 1.8.2
"Hardcore" = Hardcore
"ie8" = Windows Internet Explorer 8
"IL Download Manager" = IL Download Manager
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"Intel® 537EP Modem" = Intel® 537EP Modem
"IP Changer 2.0" = IP Changer 2.0
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 8.0.1 (x86 en-US)" = Mozilla Firefox 8.0.1 (x86 en-US)
"Native Instruments Guitar Rig 3" = Native Instruments Guitar Rig 3
"OpenAL" = OpenAL
"Panda Cloud Antivirus" = Panda Cloud Antivirus
"Panda Security URL Filtering" = Panda Security URL Filtering
"pandasecuritytb" = Panda Security Toolbar
"PhotoScape" = PhotoScape
"PoiZone" = PoiZone
"PokerStars" = PokerStars
"ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
"Race Driver GRID_is1" = Race Driver GRID (2008)
"ReverseConnect" = RevConnect
"Sakura" = Sakura
"San Andreas Mod Installer1.1" = San Andreas Mod Installer
"Sawer" = Sawer
"SpeedUpMyPC_is1" = Uniblue SpeedUpMyPC
"Steam App 211" = Source SDK
"Steam App 440" = Team Fortress 2
"Steam App 99900" = Spiral Knights
"Toxic Biohazard" = Toxic Biohazard
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.5
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter
"VTFEdit_is1" = VTFEdit 1.2.5
"WIC" = Windows Imaging Component
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinRAR archiver" = WinRAR archiver
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"MediaGet" = MediaGet
"Winamp Detect" = Winamp Detector Plug-in

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2011.12.26. 13:12:17 | Computer Name = MAAJAS-45B2A63F | Source = Application Error | ID = 1000
Description = Faulting application psunmain.exe, version 3.0.0.79, faulting module
ieframe.dll, version 8.0.6001.19165, fault address 0x00125e20.

Error - 2011.12.27. 7:36:09 | Computer Name = MAAJAS-45B2A63F | Source = | ID = 0
Description =

Error - 2011.12.27. 7:36:09 | Computer Name = MAAJAS-45B2A63F | Source = | ID = 0
Description =

[ OSession Events ]
Error - 2011.05.20. 8:14:33 | Computer Name = MAAJAS-45B2A63F | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4515
seconds with 2880 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 2011.12.28. 15:51:41 | Computer Name = MAAJAS-45B2A63F | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 2011.12.28. 16:03:00 | Computer Name = MAAJAS-45B2A63F | Source = Schedule | ID = 7901
Description = The At47.job command failed to start due to the following error: %%2147942402

Error - 2011.12.28. 17:03:00 | Computer Name = MAAJAS-45B2A63F | Source = Schedule | ID = 7901
Description = The At49.job command failed to start due to the following error: %%2147942402

Error - 2011.12.28. 17:03:01 | Computer Name = MAAJAS-45B2A63F | Source = Schedule | ID = 7901
Description = The At50.job command failed to start due to the following error: %%2147942402

Error - 2011.12.28. 18:03:00 | Computer Name = MAAJAS-45B2A63F | Source = Schedule | ID = 7901
Description = The At3.job command failed to start due to the following error: %%2147942402

Error - 2011.12.28. 18:03:00 | Computer Name = MAAJAS-45B2A63F | Source = Schedule | ID = 7901
Description = The At4.job command failed to start due to the following error: %%2147942402

Error - 2011.12.28. 19:03:00 | Computer Name = MAAJAS-45B2A63F | Source = Schedule | ID = 7901
Description = The At5.job command failed to start due to the following error: %%2147942402

Error - 2011.12.28. 19:03:01 | Computer Name = MAAJAS-45B2A63F | Source = Schedule | ID = 7901
Description = The At6.job command failed to start due to the following error: %%2147942402

Error - 2011.12.29. 7:47:34 | Computer Name = MAAJAS-45B2A63F | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127

Error - 2011.12.29. 7:47:49 | Computer Name = MAAJAS-45B2A63F | Source = Service Control Manager | ID = 7023
Description = The Network Location Awareness (NLA) service terminated with the following
error: %%127


< End of report >

Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

• I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  
• Please subscribe to this topic, if you haven't already. You can subscribe by clicking the Watch Topic button to the right of your topic title and then choosing the notification method ( Recommended: Inmediate Notification)
  
• The fixes are specific to your problem and should only be used for the issues on this machine.
  
• Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  
• It's often worth reading through these instructions and printing them for ease of reference.
  
• If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  
• Please reply to this thread. Do not start a new topic.

IMPORTANT NOTE : Please do not delete anything unless instructed to.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision.
Doing so could make your system inoperable and could require a full reinstall of your OS losing all your programs and data.

Vista and Windows 7 users:
These tools MUST be run from the executable (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator")

Stay with this topic until I give you the all clean post.
———-

**WARNING**Unfortunately one or more of the infections I have identified are Backdoor Trojans, IRCBots or other Malware capable of stealing very important information. You need to stop using all Internet Banking sites, change passwords to all sites with sensitive information from a clean computer and phone your bank to inform them that you may be a victim of identify theft. More often than not, we advise users that a full reinstallation of their Operating System is the only way to ensure that their computer will ever be 100% clean again.

Unfortunately I have found what is known as the ZeroAccess rootkit on your system. It is an especially nasty infection that can take quite some time to clean as well as may have damaged your system files itself. As a warning, during the cleaning (if you choose to do so) you may lose internet access with this computer and in the end we may need to reinstall the operating system anyway depending on the extent of the infection.

If you would like to format and reinstall your Operating System please let me know and we can assist you with that.

If you would like to continue with the cleaning, please continue with the following instructions and I will be more than happy to help.
———-

Please download TDSSKiller.zip

• Extract it to your desktop
• Double click TDSSKiller.exe
• Press Start Scan
  
  • Only if Malicious objects are found then ensure Cure is selected
  • Then click Continue > Reboot now
• Copy and paste the log in your next reply
  
  • A copy of the log will be saved automatically to the root of the drive (typically C:\)

———-

Please read through these instructions to familarize yourself with what to expect when this tool runs

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs
  
• Double click on ComboFix.exe & follow the prompts.
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

[external image: Posted Image]

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]

Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

Notes:

1.Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
———-

If you have chosen to attempt to clean, please post the logs created by TDSSKiller and ComboFix.