What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Locked files in licensed programs, files being moved, etc

30 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
OK, this is a rather long drawn out story, but this is only the first of about 5 computers I will need to post and get fixed. I've cleaned a lot of these problems out already manually, and writing other programs to find and delete them. This computer is, by far, the one I need to save the most as I use it for work and run all my work programs through.

Really quick short version. I did something stupid while I was fixing a friends computer at my house, and during a storm… ok let's just say the 4 different computers that weren't infected before… are acting terribly wrong. I've done many scans and they aren't finding them.

My first clue was this:

I just installed a program on my computer a few months back. When looking at the properties of a certain file I was trying to open, I noticed something funny. It said the date created: was in 2009, but the date modified was in 2004. For one, this system was first turned on in 2009, and I didn't install the program until about 4 months ago. I found a lot of files that were similar, and when I ran a check it showed them as being modified in the last 30 days. I found several time stamping changing files hidden everywhere. I ran their scripts to see what they were doing and sure enough, it had changed the counters on certain things, and also changed the time stamps… .along with various other awful things it did to my $10,000 piece of software from work. All of my library files have been locked by "something" and require a password for me to open them. By opening up the locked files in a different program I was able to tell what type of encryption key was there, and it was easy to unlock with 7-zip. But, there are like.. .way too many files to feasibly unlock all by myself. Who has the time? :P That's what they get for not upgrading me to the newest software when I needed it, right? LOL The scripts I found running were also changing my symantec output to not give warnings when a certain part was read. So it is discuising itself from the scans somehow. Very clever.

Anyway, I also found a p2p program on this computer, one of which I've never participated in. It says its a fairly recent download.

I have found so many bad things that just aren't right. So, here is my first OTL file on the first computer. I'm at work now, so I will be posting the others shortly. One computer lost its network adapters to the virus, and I can't get online. They want me to…. connect a cable? haha… do people still do that? I don't even own one….

OTL logfile created on: 1/12/2012 11:34:47 AM - Run 3
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\846TSS\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1022.37 Mb Total Physical Memory | 540.45 Mb Available Physical Memory | 52.86% Memory free
2.40 Gb Paging File | 2.07 Gb Available in Paging File | 86.20% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298.08 Gb Total Space | 272.80 Gb Free Space | 91.52% Space Free | Partition Type: NTFS

Computer Name: 846TH-564F5C483 | User Name: 846th | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\846TSS\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
PRC - C:\Program Files\USAF\CMDP\RMM Reader.exe ()
PRC - C:\Program Files\Symantec AntiVirus\Smc.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\SmcGui.exe (Symantec Corporation)
PRC - C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe (Adobe Systems Inc.)


========== Modules (No Company Name) ==========

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\abef85f2fb8ba830eda73e2d12e8d41e\System.ServiceProcess.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\71a2ae9ad561a62181cbd9fb11e9de7a\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\c10bea3c4bb7ef654651141bf9419090\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\af39f6e644af02873b9bae319f2bfb13\System.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll ()
MOD - C:\Program Files\USAF\CMDP\RMM Reader.exe ()
MOD - C:\Program Files\USAF\CMDP\RecorderTransfer.DLL ()
MOD - C:\Program Files\USAF\CMDP\BabbleWareDotNet.DLL ()
MOD - C:\WINDOWS\system32\preflib.dll ()
MOD - C:\WINDOWS\system32\bcm1xsup.dll ()


========== Win32 Services (SafeList) ==========

SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (RMMReaderWinService) – C:\Program Files\USAF\CMDP\RMM Reader.exe ()
SRV - (SmcService) – C:\Program Files\Symantec AntiVirus\Smc.exe (Symantec Corporation)
SRV - (Symantec AntiVirus) – C:\Program Files\Symantec AntiVirus\Rtvscan.exe (Symantec Corporation)
SRV - (SNAC) – C:\Program Files\Symantec AntiVirus\SNAC.EXE (Symantec Corporation)
SRV - (LiveUpdate) – C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE (Symantec Corporation)
SRV - (ccSetMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccEvtMgr) – C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (YahooAUService) – C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)


========== Driver Services (SafeList) ==========

DRV - (PROCEXP151) – File not found
DRV - (NAVEX15) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20120110.032\NAVEX15.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (NAVENG) – C:\Program Files\Common Files\Symantec Shared\VirusDefs\20120110.032\NAVENG.SYS (Symantec Corporation)
DRV - (SymEvent) – C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (WpsHelper) – C:\WINDOWS\system32\drivers\wpshelper.sys (Symantec Corporation)
DRV - (NPF) – C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (SysPlant) – C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys (Symantec Corporation)
DRV - (WPS) – C:\WINDOWS\system32\drivers\WPSDRVnt.sys (Symantec Corporation)
DRV - (SRTSPL) – C:\WINDOWS\system32\drivers\srtspl.sys (Symantec Corporation)
DRV - (SRTSP) – C:\WINDOWS\system32\drivers\srtsp.sys (Symantec Corporation)
DRV - (SRTSPX) – C:\WINDOWS\system32\drivers\srtspx.sys (Symantec Corporation)
DRV - (Teefer2) – C:\WINDOWS\system32\drivers\Teefer2.sys (Symantec Corporation)
DRV - (SPBBCDrv) – C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (COH_Mon) – C:\WINDOWS\system32\drivers\COH_Mon.sys (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (SYMREDRV) – C:\WINDOWS\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (BCM43XX) – C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corp.)
DRV - (STHDA) – C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (APPDRV) – C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS (Dell Inc)
DRV - (altio) – C:\WINDOWS\system32\altio.sys (Altium Limited)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.yahoo.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)


[2010/02/18 08:08:47 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\846TSS\Application Data\Mozilla\Extensions
[2010/02/18 08:08:47 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\846TSS\Application Data\Mozilla\Extensions\[removed]

Hosts file not found
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Append to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert link target to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selected links to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert selection to existing PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Google Sidewiki… - File not found
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F54C4308-947A-421D-A13A-46C9BFA9F969}: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\NavLogon: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O24 - Desktop WallPaper: C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/02/04 09:23:59 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2\{1f8c74e7-95f1-11df-9507-0016ce86390e}\Shell - "" = AutoRun
O33 - MountPoints2\{1f8c74e7-95f1-11df-9507-0016ce86390e}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{1f8c74e7-95f1-11df-9507-0016ce86390e}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{a4dc0810-19c5-11e0-9532-0016ce86390e}\Shell - "" = AutoRun
O33 - MountPoints2\{a4dc0810-19c5-11e0-9532-0016ce86390e}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{a4dc0810-19c5-11e0-9532-0016ce86390e}\Shell\AutoRun\command - "" = E:\setup.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (MACHINE BootExecut)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.WMV3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/01/12 09:23:32 | 000,000,000 | —D | C] – C:\Documents and Settings\846TSS\Application Data\Help
[2012/01/12 07:01:02 | 000,000,000 | —D | C] – C:\WINDOWS\LastGood
[2012/01/11 15:27:22 | 000,388,608 | —- | C] (Trend Micro Inc.) – C:\Documents and Settings\846TSS\Desktop\HiJackThis.exe
[2012/01/10 16:25:48 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Documents and Settings\846TSS\Desktop\OTL.exe
[2012/01/10 14:51:48 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\CMDP
[2012/01/10 14:51:28 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Yahoo! Messenger
[2012/01/10 08:07:26 | 000,000,000 | —D | C] – C:\Documents and Settings\846TSS\My Documents\New Folder
[2012/01/09 09:08:30 | 000,000,000 | —D | C] – C:\logs (Nicci)
[2012/01/05 10:53:12 | 000,000,000 | —D | C] – C:\Documents and Settings\846TSS\My Documents\ProcessExplorer
[2012/01/04 15:58:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Common Files
[2012/01/04 15:52:49 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\AVG2012
[2012/01/04 15:52:49 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\AVG
[2012/01/04 15:51:18 | 000,000,000 | —D | C] – C:\Program Files\AVG
[2012/01/04 15:40:36 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\MFAData
[2012/01/04 10:47:40 | 000,000,000 | R–D | C] – C:\Documents and Settings\846TSS\My Documents\My Videos
[2012/01/03 10:09:44 | 000,000,000 | —D | C] – C:\Documents and Settings\846TSS\Local Settings\Application Data\NPE
[2012/01/03 10:09:44 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Norton
[2011/12/28 13:13:32 | 000,000,000 | —D | C] – C:\Documents and Settings\846TSS\Application Data\GyroTools
[2011/12/28 11:03:39 | 000,000,000 | —D | C] – C:\Documents and Settings\846TSS\My Documents\Security
[2011/12/16 14:58:12 | 000,000,000 | RH-D | C] – C:\Documents and Settings\846TSS\Recent
[2011/12/16 13:28:40 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2011/12/16 07:23:30 | 000,000,000 | -H-D | C] – C:\WINDOWS\PIF
[2011/12/15 15:44:28 | 000,000,000 | —D | C] – C:\Program Files\VirusTotalUploader2
[2011/12/15 07:22:02 | 000,000,000 | —D | C] – C:\WINDOWS\System32\NtmsData
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Documents and Settings\846TSS\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\846TSS\Local Settings\Application Data\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/01/12 11:17:27 | 000,000,664 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2012/01/12 09:11:48 | 000,002,285 | —- | M] () – C:\WINDOWS\CAMDXP.INI
[2012/01/12 07:03:57 | 000,501,570 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/01/12 07:03:57 | 000,095,780 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/01/12 07:00:14 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/01/12 06:59:12 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/01/11 15:27:25 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\846TSS\Desktop\HiJackThis.exe
[2012/01/11 03:07:34 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2012/01/10 16:25:49 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\846TSS\Desktop\OTL.exe
[2012/01/10 09:43:52 | 000,026,791 | —- | M] () – C:\WINDOWS\System32\drivers\AVG\iavichjg.avm
[2012/01/10 07:02:33 | 086,424,870 | —- | M] () – C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2012/01/10 03:42:12 | 000,585,844 | —- | M] () – C:\Documents and Settings\846TSS\Desktop\logavg.csv
[2012/01/09 13:44:00 | 000,620,630 | —- | M] () – C:\WINDOWS\System32\drivers\AVG\iavifw.avm
[2012/01/05 10:50:24 | 001,851,394 | —- | M] () – C:\Documents and Settings\846TSS\My Documents\ProcessExplorer.zip
[2012/01/04 10:11:51 | 477,730,132 | —- | M] () – C:\WINDOWS\System32\image
[2012/01/04 07:58:55 | 002,738,886 | —- | M] () – C:\Documents and Settings\846TSS\Application Data\SMRResults210.dat
[2012/01/03 15:58:28 | 006,710,791 | —- | M] () – C:\Documents and Settings\846TSS\Application Data\SMRBackup210.dat
[2011/12/29 12:23:07 | 000,000,750 | —- | M] () – C:\Documents and Settings\846TSS\My Documents\ccRegFile 12-29-11.reg
[2011/12/29 09:39:21 | 000,003,745 | —- | M] () – C:\Documents and Settings\846TSS\My Documents\scam.JPG
[2011/12/29 09:31:56 | 000,024,638 | —- | M] () – C:\Documents and Settings\846TSS\My Documents\scam.bmp
[2011/12/29 09:29:52 | 000,159,186 | —- | M] () – C:\Documents and Settings\846TSS\My Documents\scam.PNG
[2011/12/19 16:04:24 | 000,000,146 | —- | M] () – C:\WINDOWS\Capture.INI
[2011/12/16 15:06:34 | 000,025,860 | —- | M] () – C:\Documents and Settings\846TSS\My Documents\ccRegFile.reg
[2011/12/16 13:28:42 | 000,000,682 | —- | M] () – C:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2011/12/16 03:23:23 | 000,269,392 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/12/15 15:44:28 | 000,001,710 | —- | M] () – C:\Documents and Settings\846TSS\Desktop\VirusTotal Uploader 2.0.lnk
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Documents and Settings\846TSS\Local Settings\Application Data\*.tmp files -> C:\Documents and Settings\846TSS\Local Settings\Application Data\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/01/11 03:00:47 | 000,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2012/01/10 09:43:52 | 000,026,791 | —- | C] () – C:\WINDOWS\System32\drivers\AVG\iavichjg.avm
[2012/01/10 07:02:33 | 086,424,870 | —- | C] () – C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2012/01/10 03:42:12 | 000,585,844 | —- | C] () – C:\Documents and Settings\846TSS\Desktop\logavg.csv
[2012/01/09 19:31:04 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2012/01/09 13:44:00 | 000,620,630 | —- | C] () – C:\WINDOWS\System32\drivers\AVG\iavifw.avm
[2012/01/05 10:50:15 | 001,851,394 | —- | C] () – C:\Documents and Settings\846TSS\My Documents\ProcessExplorer.zip
[2012/01/04 07:58:14 | 002,738,886 | —- | C] () – C:\Documents and Settings\846TSS\Application Data\SMRResults210.dat
[2012/01/03 15:57:25 | 006,710,791 | —- | C] () – C:\Documents and Settings\846TSS\Application Data\SMRBackup210.dat
[2011/12/29 12:22:55 | 000,000,750 | —- | C] () – C:\Documents and Settings\846TSS\My Documents\ccRegFile 12-29-11.reg
[2011/12/29 09:31:52 | 000,024,638 | —- | C] () – C:\Documents and Settings\846TSS\My Documents\scam.bmp
[2011/12/29 09:29:52 | 000,159,186 | —- | C] () – C:\Documents and Settings\846TSS\My Documents\scam.PNG
[2011/12/29 09:26:18 | 000,003,745 | —- | C] () – C:\Documents and Settings\846TSS\My Documents\scam.JPG
[2011/12/16 15:06:17 | 000,025,860 | —- | C] () – C:\Documents and Settings\846TSS\My Documents\ccRegFile.reg
[2011/12/16 13:28:42 | 000,000,682 | —- | C] () – C:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2011/12/15 15:44:28 | 000,001,710 | —- | C] () – C:\Documents and Settings\846TSS\Desktop\VirusTotal Uploader 2.0.lnk
[2011/12/04 18:25:38 | 000,002,404 | —- | C] () – C:\WINDOWS\System32\ASOROSet.bin
[2011/10/25 13:27:25 | 000,000,146 | —- | C] () – C:\WINDOWS\Capture.INI
[2011/10/14 19:49:27 | 000,002,285 | —- | C] () – C:\WINDOWS\CAMDXP.INI
[2011/09/29 07:23:02 | 000,004,061 | —- | C] () – C:\WINDOWS\scad3.INI
[2010/07/31 12:59:55 | 000,000,000 | —- | C] () – C:\WINDOWS\vpc32.INI
[2010/07/25 21:57:31 | 000,000,056 | -H– | C] () – C:\WINDOWS\System32\ezsidmv.dat
[2010/02/18 08:13:07 | 000,002,528 | —- | C] () – C:\Documents and Settings\846TSS\Application Data\$_hpcst$.hpc
[2010/02/18 08:05:12 | 000,085,504 | —- | C] () – C:\WINDOWS\System32\ff_vfw.dll
[2010/02/10 10:30:45 | 000,000,552 | —- | C] () – C:\WINDOWS\System32\d3d8caps.dat
[2010/02/05 07:27:04 | 000,091,136 | —- | C] () – C:\Documents and Settings\846TSS\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/02/04 09:47:39 | 000,139,264 | —- | C] () – C:\WINDOWS\System32\preflib.dll
[2010/02/04 09:47:38 | 000,753,664 | —- | C] () – C:\WINDOWS\System32\bcm1xsup.dll
[2010/02/04 09:47:38 | 000,024,064 | —- | C] () – C:\WINDOWS\System32\WLTRYSVC.EXE
[2010/02/04 09:26:59 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2010/02/04 09:20:57 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2010/02/04 03:15:42 | 000,004,328 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2010/02/04 03:14:33 | 000,269,392 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2005/10/15 13:25:20 | 000,028,672 | —- | C] () – C:\WINDOWS\System32\myodbc3i.exe
[2005/10/15 13:25:20 | 000,011,776 | —- | C] () – C:\WINDOWS\System32\myodbc3m.exe
[2005/03/21 12:48:05 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2005/03/21 12:48:05 | 000,004,627 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2004/08/03 23:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2004/08/03 23:00:00 | 000,501,570 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2004/08/03 23:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2004/08/03 23:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2004/08/03 23:00:00 | 000,095,780 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2004/08/03 23:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2004/08/03 23:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2004/08/03 23:00:00 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2004/08/03 23:00:00 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2004/08/03 23:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[1999/11/16 12:04:36 | 000,485,376 | —- | C] () – C:\WINDOWS\System32\DrRw40.dll

========== LOP Check ==========

[2012/01/12 10:41:46 | 000,000,000 | —D | M] – C:\Documents and Settings\846TSS\Application Data\AltiumDesigner6
[2011/12/04 17:53:17 | 000,000,000 | —D | M] – C:\Documents and Settings\846TSS\Application Data\DriverCure
[2012/01/10 14:54:15 | 000,000,000 | —D | M] – C:\Documents and Settings\846TSS\Application Data\GyroTools
[2011/11/22 07:27:42 | 000,000,000 | —D | M] – C:\Documents and Settings\846TSS\Application Data\Registry Help Free
[2011/12/04 17:53:15 | 000,000,000 | —D | M] – C:\Documents and Settings\846TSS\Application Data\SpeedyPC Software
[2011/12/05 07:00:36 | 000,000,000 | —D | M] – C:\Documents and Settings\846TSS\Application Data\Systweak
[2011/09/29 11:52:10 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AltiumDesigner6
[2011/10/11 05:56:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AltiumDesigner6_Security
[2012/01/10 14:51:46 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG2012
[2011/02/01 07:10:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\CMDP
[2012/01/04 15:58:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Common Files
[2012/01/10 14:51:47 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MFAData
[2011/12/04 18:07:59 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\SpeedyPC Software
[2011/11/21 08:29:34 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/02/04 09:23:59 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/12/04 17:25:32 | 000,000,211 | -HS- | M] () – C:\boot.ini
[2010/02/04 09:23:59 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 08:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 08:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 08:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2011/02/09 12:18:48 | 000,003,886 | —- | M] () – C:\INSTALL.LOG
[2010/02/04 09:23:59 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2010/02/04 09:23:59 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2010/02/04 09:47:34 | 000,022,729 | —- | M] () – C:\newfile.enc
[2010/02/04 09:47:34 | 000,022,729 | —- | M] () – C:\newkey
[2004/08/03 23:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2010/02/10 09:07:11 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/01/12 06:59:04 | 1610,612,736 | -HS- | M] () – C:\pagefile.sys
[2011/02/09 12:25:44 | 000,000,173 | —- | M] () – C:\TTCVision.log.txt
[2007/11/07 08:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 08:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab

< %systemroot%\Fonts\*.com >
[2006/04/18 14:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/06/29 13:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 13:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2010/02/04 09:23:40 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 06:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2008/07/06 04:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2010/02/04 03:13:26 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav

< %PROGRAMFILES%\bak. /s >
[2010/02/18 08:06:30 | 000,000,000 | —D | M] – C:\Program Files\Teletronics\Drivers\DecomLib\vbDecomLibApp_cpp\bak

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2010/02/10 09:12:50 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/02/10 09:25:16 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\846TSS\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2010/02/04 09:30:15 | 000,000,079 | —- | M] () – C:\Documents and Settings\846TSS\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf

< %USERPROFILE%\Desktop\*.exe >
[2011/09/29 19:01:10 | 036,831,232 | —- | M] () – C:\Documents and Settings\846TSS\Desktop\eagle-win-5.11.0.exe
[2012/01/11 15:27:25 | 000,388,608 | —- | M] (Trend Micro Inc.) – C:\Documents and Settings\846TSS\Desktop\HiJackThis.exe
[2012/01/10 16:25:49 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Documents and Settings\846TSS\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-01-11 09:07:41

< >

< >

< End of report >


OTL Extras logfile created on: 1/10/2012 4:27:31 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\846TSS\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1022.37 Mb Total Physical Memory | 560.21 Mb Available Physical Memory | 54.80% Memory free
2.40 Gb Paging File | 2.12 Gb Available in Paging File | 88.45% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 298.08 Gb Total Space | 272.69 Gb Free Space | 91.48% Space Free | Partition Type: NTFS

Computer Name: 846TH-564F5C483 | User Name: 846TSS | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\pspiceaa.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa (Release 16.5) – (Cadence Design Systems)
"C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\mbs2sp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\mbs2sp.exe:*:Enabled:mbs2sp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\sp2mbs.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\sp2mbs.exe:*:Enabled:sp2mbs (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\specctra.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\specctra.exe:*:Enabled:specctra (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\stmed.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\stmed.exe:*:Enabled:stmed (Release 16.5) – (Cadence Design System)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\IndiceFileGeneration.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\MrkSrvr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\pspice.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\pspice.exe:*:Enabled:pspice (Release 16.5) – (Cadence Design Systems)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\PSpiceEnc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\PSpiceEnc.exe:*:Enabled:PSpiceEnc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\psp_cmd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\simmgr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\simmgr.exe:*:Enabled:simmgr (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\SimSrvr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\SimSrvr.exe:*:Enabled:SimSrvr (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\ModelEd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\ModelEd.exe:*:Enabled:ModelEd (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\Magneticdesigner.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\pseteditor.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\pseteditor.exe:*:Enabled:pseteditor (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\conceptNmpListCheck.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\conceptNmpListCheck.exe:*:Enabled:conceptNmpListCheck (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\cpmaccess.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\cpmaccess.exe:*:Enabled:cpmaccess (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\libaccess.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\libaccess.exe:*:Enabled:libaccess (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\projmgr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\projmgr.exe:*:Enabled:projmgr (Release 16.5) – (Cadence Design Systems Inc)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\productServer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\productServer.exe:*:Enabled:productServer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\bin\perl.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\bin\perl.exe:*:Enabled:perl (Release 16.5) – (hip communications inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\bin\perlglob.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\bin\perlglob.exe:*:Enabled:perlglob (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\ntt\cmd32.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\ntt\cmd32.exe:*:Enabled:cmd32 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\msbase\vcredist_x86.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\msbase\vcredist_x86.exe:*:Enabled:vcredist_x86 (Release 16.5) – (Microsoft Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\bodygen.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\bodygen.exe:*:Enabled:bodygen (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\newgenasym.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\newgenasym.exe:*:Enabled:newgenasym (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\bem2d.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\bem2d.exe:*:Enabled:bem2d (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ems2d.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ems2d.exe:*:Enabled:ems2d (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\extracta.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\extracta.exe:*:Enabled:extracta (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fatten.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fatten.exe:*:Enabled:fatten (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\FSvia.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\FSvia.exe:*:Enabled:FSvia (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\FSviaSolver.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\FSviaSolver.exe:*:Enabled:FSviaSolver (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gate_assign.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gate_assign.exe:*:Enabled:gate_assign (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\il_allegro.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\il_allegro.exe:*:Enabled:il_allegro (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\j2script.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\j2script.exe:*:Enabled:j2script (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mbs2brd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mbs2brd.exe:*:Enabled:mbs2brd (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mbs2lib.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mbs2lib.exe:*:Enabled:mbs2lib (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mcm_escapes.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mcm_escapes.exe:*:Enabled:mcm_escapes (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mpiexec.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mpiexec.exe:*:Enabled:mpiexec (Release 16.5) – (Argonne National Lab)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\parallel.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\parallel.exe:*:Enabled:parallel (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pe_wordpad.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pe_wordpad.exe:*:Enabled:pe_wordpad (Release 16.5) – (Microsoft Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pre_check.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pre_check.exe:*:Enabled:pre_check (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_padstack.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_padstack.exe:*:Enabled:refresh_padstack (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_symbol.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_symbol.exe:*:Enabled:refresh_symbol (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_vs.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_vs.exe:*:Enabled:refresh_vs (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\reftxt.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\reftxt.exe:*:Enabled:reftxt (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\report.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\report.exe:*:Enabled:report (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\smpd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\smpd.exe:*:Enabled:smpd (Release 16.5) – (Argonne National Lab)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile.exe:*:Enabled:techfile (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiconfig.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiconfig.exe:*:Enabled:wmpiconfig (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiexec.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiexec.exe:*:Enabled:wmpiexec (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiregister.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiregister.exe:*:Enabled:wmpiregister (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\zrouter.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\zrouter.exe:*:Enabled:zrouter (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\spif.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\spif.exe:*:Enabled:spif (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\spif_batch.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\spif_batch.exe:*:Enabled:spif_batch (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\downrev14.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\downrev14.exe:*:Enabled:downrev14 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile13.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile13.exe:*:Enabled:techfile13 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile14.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile14.exe:*:Enabled:techfile14 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile15.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile15.exe:*:Enabled:techfile15 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbdoctor14.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbdoctor14.exe:*:Enabled:dbdoctor14 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbdoctor15.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbdoctor15.exe:*:Enabled:dbdoctor15 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix11.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix11.exe:*:Enabled:dbfix11 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix12.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix12.exe:*:Enabled:dbfix12 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix13.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix13.exe:*:Enabled:dbfix13 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\downrev15.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\downrev15.exe:*:Enabled:downrev15 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\placement.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\placement.exe:*:Enabled:placement (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\swap.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\swap.exe:*:Enabled:swap (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\l2a.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\l2a.exe:*:Enabled:l2a (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pads_in.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pads_in.exe:*:Enabled:pads_in (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pcad_in.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pcad_in.exe:*:Enabled:pcad_in (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pad_designer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pad_designer.exe:*:Enabled:pad_designer (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\netin.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\netin.exe:*:Enabled:netin (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\convert_ger.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\convert_ger.exe:*:Enabled:convert_ger (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\explot.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\explot.exe:*:Enabled:explot (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fill_ipf.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fill_ipf.exe:*:Enabled:fill_ipf (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gbplot.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gbplot.exe:*:Enabled:gbplot (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\genrad.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\genrad.exe:*:Enabled:genrad (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gloss.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gloss.exe:*:Enabled:gloss (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ncroute.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ncroute.exe:*:Enabled:ncroute (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\nctape.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\nctape.exe:*:Enabled:nctape (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\strip_ger.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\strip_ger.exe:*:Enabled:strip_ger (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ipc356_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ipc356_out.exe:*:Enabled:ipc356_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\iges_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\iges_out.exe:*:Enabled:iges_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\iges_in.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\iges_in.exe:*:Enabled:iges_in (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idf_in.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idf_in.exe:*:Enabled:idf_in (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idf_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idf_out.exe:*:Enabled:idf_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idx_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idx_out.exe:*:Enabled:idx_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pdf_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pdf_out.exe:*:Enabled:pdf_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\baf.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\baf.exe:*:Enabled:baf (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\genfeedformat.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\genfeedformat.exe:*:Enabled:genfeedformat (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\netrev.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\netrev.exe:*:Enabled:netrev (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\batch_drc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\batch_drc.exe:*:Enabled:batch_drc (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\bbvia.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\bbvia.exe:*:Enabled:bbvia (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\convert_gerber.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\convert_gerber.exe:*:Enabled:convert_gerber (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\create_devices.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\create_devices.exe:*:Enabled:create_devices (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\create_sym.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\create_sym.exe:*:Enabled:create_sym (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\draw_check.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\draw_check.exe:*:Enabled:draw_check (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dump_libraries.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dump_libraries.exe:*:Enabled:dump_libraries (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\plctxt.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\plctxt.exe:*:Enabled:plctxt (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro_batch.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro_batch.exe:*:Enabled:allegro_batch (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro_free_viewer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro_free_viewer.exe:*:Enabled:allegro_free_viewer (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbdoctor.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbdoctor.exe:*:Enabled:dbdoctor (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbdoctor_ui.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbdoctor_ui.exe:*:Enabled:dbdoctor_ui (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbstat.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbstat.exe:*:Enabled:dbstat (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\db_change_type.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\db_change_type.exe:*:Enabled:db_change_type (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dfa_dlg.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dfa_dlg.exe:*:Enabled:dfa_dlg (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dfa_update.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dfa_update.exe:*:Enabled:dfa_update (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\downrev_library.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\downrev_library.exe:*:Enabled:downrev_library (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\enved.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\enved.exe:*:Enabled:enved (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\flash_convert.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\flash_convert.exe:*:Enabled:flash_convert (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fpbrowse.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fpbrowse.exe:*:Enabled:fpbrowse (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\layer_compare.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\layer_compare.exe:*:Enabled:layer_compare (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\qvupdate.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\qvupdate.exe:*:Enabled:qvupdate (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\systemdump.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\systemdump.exe:*:Enabled:systemdump (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\uprev.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\uprev.exe:*:Enabled:uprev (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro.exe:*:Enabled:allegro (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\artwork.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\artwork.exe:*:Enabled:artwork (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\a2dxf.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\a2dxf.exe:*:Enabled:a2dxf (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dxf2a.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dxf2a.exe:*:Enabled:dxf2a (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\rollback.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\rollback.exe:*:Enabled:rollback (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\purge.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\purge.exe:*:Enabled:purge (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\lrm.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\lrm.exe:*:Enabled:lrm (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\pcbCache.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\pcbCache.exe:*:Enabled:pcbCache (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\publishpdf.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\publishpdf.exe:*:Enabled:publishpdf (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\QPSetEditor.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\QPSetEditor.exe:*:Enabled:QPSetEditor (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\UniversalBrowser.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\UniversalBrowser.exe:*:Enabled:UniversalBrowser (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\dfII\bin\skill.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\dfII\bin\skill.exe:*:Enabled:skill (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\dfII\bin\skill_g.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\dfII\bin\skill_g.exe:*:Enabled:skill_g (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\sch2cap.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\sch2cap.exe:*:Enabled:sch2cap (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\mkdefcfg.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\versiontool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\versiontool.exe:*:Enabled:versiontool (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\PSpiceExplorerSrvr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\PSpiceExplorerSrvr.exe:*:Enabled:PSpiceExplorerSrvr (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\regsvr32.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\regsvr32.exe:*:Enabled:regsvr32 (Release 16.5) – (Microsoft Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\def2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\def2oa.exe:*:Enabled:def2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\lef2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\lef2oa.exe:*:Enabled:lef2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2def.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2def.exe:*:Enabled:oa2def (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2lef.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2lef.exe:*:Enabled:oa2lef (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2spef.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2spef.exe:*:Enabled:oa2spef (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2strm.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2strm.exe:*:Enabled:oa2strm (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2verilog.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2verilog.exe:*:Enabled:oa2verilog (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaDMTurboServer.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaDMTurboServer.exe:*:Enabled:oaDMTurboServer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaFSLockD.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaFSLockD.exe:*:Enabled:oaFSLockD (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaGetVersion.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaGetVersion.exe:*:Enabled:oaGetVersion (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\spef2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\spef2oa.exe:*:Enabled:spef2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\strm2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\strm2oa.exe:*:Enabled:strm2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\verilog2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\verilog2oa.exe:*:Enabled:verilog2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\verilogAnnotate.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\verilogAnnotate.exe:*:Enabled:verilogAnnotate (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsmps.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsmps.exe:*:Enabled:cdsmps (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsMsgServer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsNameServer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRemote.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRemote.exe:*:Enabled:cdsRemote (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRemshClient.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRunHidden.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsServIpc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsServIpc.exe:*:Enabled:cdsServIpc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\mpsinfo.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\mpsinfo.exe:*:Enabled:mpsinfo (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\sipDiffViewer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\sipDiffViewer.exe:*:Enabled:sipDiffViewer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\emsChecker.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\emsChecker.exe:*:Enabled:emsChecker (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\emsMkError.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\emsMkError.exe:*:Enabled:emsMkError (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\msgHelp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\msgHelp.exe:*:Enabled:msgHelp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cmfeedback.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cmfeedback.exe:*:Enabled:cmfeedback (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\consmgr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\consmgr.exe:*:Enabled:consmgr (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clu.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clu.exe:*:Enabled:clu (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\van.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\van.exe:*:Enabled:van (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\tcl\bin\tclsh80.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\tcl\bin\tclsh80.exe:*:Enabled:tclsh80 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\tcl\bin\wish80.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\tcl\bin\wish80.exe:*:Enabled:wish80 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\assistant.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\assistant.exe:*:Enabled:assistant (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\assistant_adp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\assistant_adp.exe:*:Enabled:assistant_adp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\designer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\designer.exe:*:Enabled:designer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\dumpcpp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\dumpcpp.exe:*:Enabled:dumpcpp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\idc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\idc.exe:*:Enabled:idc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lconvert.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lconvert.exe:*:Enabled:lconvert (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\linguist.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\linguist.exe:*:Enabled:linguist (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lrelease.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lrelease.exe:*:Enabled:lrelease (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lupdate.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lupdate.exe:*:Enabled:lupdate (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\moc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\moc.exe:*:Enabled:moc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\pixeltool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\pixeltool.exe:*:Enabled:pixeltool (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qcollectiongenerator.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qcollectiongenerator.exe:*:Enabled:qcollectiongenerator (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qhelpconverter.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qhelpconverter.exe:*:Enabled:qhelpconverter (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qhelpgenerator.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qhelpgenerator.exe:*:Enabled:qhelpgenerator (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qmake.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qmake.exe:*:Enabled:qmake (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qt3to4.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qt3to4.exe:*:Enabled:qt3to4 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qtdemo.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qtdemo.exe:*:Enabled:qtdemo (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\rcc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\rcc.exe:*:Enabled:rcc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\uic.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\uic.exe:*:Enabled:uic (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\uic3.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\uic3.exe:*:Enabled:uic3 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\xmlpatterns.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\xmlpatterns.exe:*:Enabled:xmlpatterns (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\java-rmi.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\java-rmi.exe:*:Enabled:java-rmi (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\java.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\java.exe:*:Enabled:java (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javacpl.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javacpl.exe:*:Enabled:javacpl (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javaw.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javaw.exe:*:Enabled:javaw (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javaws.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javaws.exe:*:Enabled:javaws (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jucheck.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jucheck.exe:*:Enabled:jucheck (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jureg.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jureg.exe:*:Enabled:jureg (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jusched.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jusched.exe:*:Enabled:jusched (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\keytool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\keytool.exe:*:Enabled:keytool (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\kinit.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\kinit.exe:*:Enabled:kinit (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\klist.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\klist.exe:*:Enabled:klist (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\ktab.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\ktab.exe:*:Enabled:ktab (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\orbd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\orbd.exe:*:Enabled:orbd (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\pack200.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\pack200.exe:*:Enabled:pack200 (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\policytool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\policytool.exe:*:Enabled:policytool (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\rmid.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\rmid.exe:*:Enabled:rmid (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\rmiregistry.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\servertool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\servertool.exe:*:Enabled:servertool (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\ssvagent.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\ssvagent.exe:*:Enabled:ssvagent (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\tnameserv.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\unpack200.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\unpack200.exe:*:Enabled:unpack200 (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsinfo.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsinfo.exe:*:Enabled:cdsinfo (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsOaPathUtil.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsUnzip.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip (Release 16.5) – (DataFocus, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdswhich.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdswhich.exe:*:Enabled:cdswhich (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsZip.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsZip.exe:*:Enabled:cdsZip (Release 16.5) – (DataFocus, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cds_root.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cds_root.exe:*:Enabled:cds_root (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clsAdminTool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clsbd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clsbd.exe:*:Enabled:clsbd (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\dregprint.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\dregprint.exe:*:Enabled:dregprint (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\nmp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\nmp.exe:*:Enabled:nmp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\nmppath.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\nmppath.exe:*:Enabled:nmppath (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\tclsh.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\tclsh.exe:*:Enabled:tclsh (Release 16.5) – (ActiveState Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\tclsh84.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\tclsh84.exe:*:Enabled:tclsh84 (Release 16.5) – (ActiveState Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\wish.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\wish.exe:*:Enabled:wish (Release 16.5) – (ActiveState Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\wish84.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\wish84.exe:*:Enabled:wish84 (Release 16.5) – (ActiveState Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\tutorial\Captutor.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\tutorial\Captutor.exe:*:Enabled:Captutor (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\pstswp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\pstswp.exe:*:Enabled:pstswp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\Capture.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\Capture.exe:*:Enabled:Capture (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\comp16.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\comp16.exe:*:Enabled:comp16 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\Pcadi.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\Pcadi.exe:*:Enabled:Pcadi (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdnshelp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdnshelp.exe:*:Enabled:cdnshelp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\cdnshelp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\cdnshelp.exe:*:Enabled:cdnshelp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\cdnshelpindexer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\cdnshelpindexer.exe:*:Enabled:cdnshelpindexer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\indexer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\indexer.exe:*:Enabled:indexer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\tagtest.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\tagtest.exe:*:Enabled:tagtest (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\topicgen.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\topicgen.exe:*:Enabled:topicgen (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\_cdnshelp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\_cdnshelp.exe:*:Enabled:_cdnshelp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\sys_root.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\sys_root.exe:*:Enabled:sys_root (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\switchversion.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\switchversion.exe:*:Enabled:switchversion (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\versionviewer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\versionviewer.exe:*:Enabled:versionviewer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\xcon2project.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\xcon2project.exe:*:Enabled:xcon2project (Release 16.5) – ()

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger – (Yahoo! Inc.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test – (Microsoft Corporation)
"C:\Program Files\Altium Designer 6\DXP.exe" = C:\Program Files\Altium Designer 6\DXP.exe:*:Enabled:DXP – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\pspiceaa.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\pspiceaa.exe:*:Enabled:pspiceaa (Release 16.5) – (Cadence Design Systems)
"C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\mbs2sp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\mbs2sp.exe:*:Enabled:mbs2sp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\sp2mbs.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\sp2mbs.exe:*:Enabled:sp2mbs (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\specctra.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\specctra\bin\specctra.exe:*:Enabled:specctra (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\stmed.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\stmed.exe:*:Enabled:stmed (Release 16.5) – (Cadence Design System)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\IndiceFileGeneration.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\IndiceFileGeneration.exe:*:Enabled:IndiceFileGeneration (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\MrkSrvr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\MrkSrvr.exe:*:Enabled:MrkSrvr (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\pspice.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\pspice.exe:*:Enabled:pspice (Release 16.5) – (Cadence Design Systems)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\PSpiceEnc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\PSpiceEnc.exe:*:Enabled:PSpiceEnc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\psp_cmd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\psp_cmd.exe:*:Enabled:psp_cmd (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\simmgr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\simmgr.exe:*:Enabled:simmgr (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\SimSrvr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\SimSrvr.exe:*:Enabled:SimSrvr (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\ModelEd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\ModelEd.exe:*:Enabled:ModelEd (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\Magneticdesigner.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pspice\Magneticdesigner.exe:*:Enabled:Magneticdesigner (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\pseteditor.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\pseteditor.exe:*:Enabled:pseteditor (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\conceptNmpListCheck.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\conceptNmpListCheck.exe:*:Enabled:conceptNmpListCheck (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\cpmaccess.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\cpmaccess.exe:*:Enabled:cpmaccess (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\libaccess.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\libaccess.exe:*:Enabled:libaccess (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\projmgr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\projmgr.exe:*:Enabled:projmgr (Release 16.5) – (Cadence Design Systems Inc)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\productServer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\productServer.exe:*:Enabled:productServer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\bin\perl.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\bin\perl.exe:*:Enabled:perl (Release 16.5) – (hip communications inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\bin\perlglob.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\bin\perlglob.exe:*:Enabled:perlglob (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\ntt\cmd32.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\perl5\ntt\cmd32.exe:*:Enabled:cmd32 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\msbase\vcredist_x86.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\msbase\vcredist_x86.exe:*:Enabled:vcredist_x86 (Release 16.5) – (Microsoft Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\bodygen.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\bodygen.exe:*:Enabled:bodygen (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\newgenasym.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\newgenasym.exe:*:Enabled:newgenasym (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\bem2d.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\bem2d.exe:*:Enabled:bem2d (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ems2d.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ems2d.exe:*:Enabled:ems2d (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\extracta.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\extracta.exe:*:Enabled:extracta (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fatten.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fatten.exe:*:Enabled:fatten (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\FSvia.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\FSvia.exe:*:Enabled:FSvia (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\FSviaSolver.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\FSviaSolver.exe:*:Enabled:FSviaSolver (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gate_assign.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gate_assign.exe:*:Enabled:gate_assign (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\il_allegro.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\il_allegro.exe:*:Enabled:il_allegro (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\j2script.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\j2script.exe:*:Enabled:j2script (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mbs2brd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mbs2brd.exe:*:Enabled:mbs2brd (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mbs2lib.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mbs2lib.exe:*:Enabled:mbs2lib (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mcm_escapes.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mcm_escapes.exe:*:Enabled:mcm_escapes (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mpiexec.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\mpiexec.exe:*:Enabled:mpiexec (Release 16.5) – (Argonne National Lab)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\parallel.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\parallel.exe:*:Enabled:parallel (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pe_wordpad.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pe_wordpad.exe:*:Enabled:pe_wordpad (Release 16.5) – (Microsoft Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pre_check.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pre_check.exe:*:Enabled:pre_check (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_padstack.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_padstack.exe:*:Enabled:refresh_padstack (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_symbol.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_symbol.exe:*:Enabled:refresh_symbol (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_vs.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\refresh_vs.exe:*:Enabled:refresh_vs (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\reftxt.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\reftxt.exe:*:Enabled:reftxt (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\report.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\report.exe:*:Enabled:report (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\smpd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\smpd.exe:*:Enabled:smpd (Release 16.5) – (Argonne National Lab)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile.exe:*:Enabled:techfile (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiconfig.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiconfig.exe:*:Enabled:wmpiconfig (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiexec.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiexec.exe:*:Enabled:wmpiexec (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiregister.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\wmpiregister.exe:*:Enabled:wmpiregister (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\zrouter.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\zrouter.exe:*:Enabled:zrouter (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\spif.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\spif.exe:*:Enabled:spif (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\spif_batch.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\spif_batch.exe:*:Enabled:spif_batch (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\downrev14.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\downrev14.exe:*:Enabled:downrev14 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile13.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile13.exe:*:Enabled:techfile13 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile14.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile14.exe:*:Enabled:techfile14 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile15.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\techfile15.exe:*:Enabled:techfile15 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbdoctor14.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbdoctor14.exe:*:Enabled:dbdoctor14 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbdoctor15.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbdoctor15.exe:*:Enabled:dbdoctor15 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix11.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix11.exe:*:Enabled:dbfix11 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix12.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix12.exe:*:Enabled:dbfix12 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix13.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\dbfix13.exe:*:Enabled:dbfix13 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\downrev15.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\vc5\downrev15.exe:*:Enabled:downrev15 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\placement.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\placement.exe:*:Enabled:placement (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\swap.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\swap.exe:*:Enabled:swap (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\l2a.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\l2a.exe:*:Enabled:l2a (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pads_in.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pads_in.exe:*:Enabled:pads_in (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pcad_in.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pcad_in.exe:*:Enabled:pcad_in (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pad_designer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pad_designer.exe:*:Enabled:pad_designer (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\netin.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\netin.exe:*:Enabled:netin (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\convert_ger.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\convert_ger.exe:*:Enabled:convert_ger (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\explot.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\explot.exe:*:Enabled:explot (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fill_ipf.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fill_ipf.exe:*:Enabled:fill_ipf (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gbplot.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gbplot.exe:*:Enabled:gbplot (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\genrad.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\genrad.exe:*:Enabled:genrad (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gloss.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\gloss.exe:*:Enabled:gloss (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ncroute.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ncroute.exe:*:Enabled:ncroute (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\nctape.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\nctape.exe:*:Enabled:nctape (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\strip_ger.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\strip_ger.exe:*:Enabled:strip_ger (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ipc356_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\ipc356_out.exe:*:Enabled:ipc356_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\iges_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\iges_out.exe:*:Enabled:iges_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\iges_in.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\iges_in.exe:*:Enabled:iges_in (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idf_in.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idf_in.exe:*:Enabled:idf_in (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idf_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idf_out.exe:*:Enabled:idf_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idx_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\idx_out.exe:*:Enabled:idx_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pdf_out.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\pdf_out.exe:*:Enabled:pdf_out (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\baf.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\baf.exe:*:Enabled:baf (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\genfeedformat.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\genfeedformat.exe:*:Enabled:genfeedformat (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\netrev.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\netrev.exe:*:Enabled:netrev (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\batch_drc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\batch_drc.exe:*:Enabled:batch_drc (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\bbvia.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\bbvia.exe:*:Enabled:bbvia (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\convert_gerber.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\convert_gerber.exe:*:Enabled:convert_gerber (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\create_devices.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\create_devices.exe:*:Enabled:create_devices (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\create_sym.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\create_sym.exe:*:Enabled:create_sym (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\draw_check.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\draw_check.exe:*:Enabled:draw_check (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dump_libraries.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dump_libraries.exe:*:Enabled:dump_libraries (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\plctxt.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\plctxt.exe:*:Enabled:plctxt (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro_batch.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro_batch.exe:*:Enabled:allegro_batch (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro_free_viewer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro_free_viewer.exe:*:Enabled:allegro_free_viewer (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbdoctor.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbdoctor.exe:*:Enabled:dbdoctor (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbdoctor_ui.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbdoctor_ui.exe:*:Enabled:dbdoctor_ui (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbstat.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dbstat.exe:*:Enabled:dbstat (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\db_change_type.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\db_change_type.exe:*:Enabled:db_change_type (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dfa_dlg.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dfa_dlg.exe:*:Enabled:dfa_dlg (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dfa_update.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dfa_update.exe:*:Enabled:dfa_update (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\downrev_library.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\downrev_library.exe:*:Enabled:downrev_library (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\enved.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\enved.exe:*:Enabled:enved (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\flash_convert.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\flash_convert.exe:*:Enabled:flash_convert (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fpbrowse.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\fpbrowse.exe:*:Enabled:fpbrowse (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\layer_compare.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\layer_compare.exe:*:Enabled:layer_compare (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\qvupdate.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\qvupdate.exe:*:Enabled:qvupdate (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\systemdump.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\systemdump.exe:*:Enabled:systemdump (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\uprev.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\uprev.exe:*:Enabled:uprev (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\allegro.exe:*:Enabled:allegro (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\artwork.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\artwork.exe:*:Enabled:artwork (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\a2dxf.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\a2dxf.exe:*:Enabled:a2dxf (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dxf2a.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\dxf2a.exe:*:Enabled:dxf2a (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\rollback.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\rollback.exe:*:Enabled:rollback (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\purge.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\purge.exe:*:Enabled:purge (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\lrm.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\lrm.exe:*:Enabled:lrm (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\pcbCache.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\pcbCache.exe:*:Enabled:pcbCache (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\publishpdf.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\publishpdf.exe:*:Enabled:publishpdf (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\QPSetEditor.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\QPSetEditor.exe:*:Enabled:QPSetEditor (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\UniversalBrowser.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\UniversalBrowser.exe:*:Enabled:UniversalBrowser (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\dfII\bin\skill.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\dfII\bin\skill.exe:*:Enabled:skill (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\dfII\bin\skill_g.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\dfII\bin\skill_g.exe:*:Enabled:skill_g (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\sch2cap.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\sch2cap.exe:*:Enabled:sch2cap (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\mkdefcfg.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\mkdefcfg.exe:*:Enabled:mkdefcfg (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\versiontool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\fet\bin\versiontool.exe:*:Enabled:versiontool (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\PSpiceExplorerSrvr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\PSpiceExplorerSrvr.exe:*:Enabled:PSpiceExplorerSrvr (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\regsvr32.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\regsvr32.exe:*:Enabled:regsvr32 (Release 16.5) – (Microsoft Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\def2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\def2oa.exe:*:Enabled:def2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\lef2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\lef2oa.exe:*:Enabled:lef2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2def.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2def.exe:*:Enabled:oa2def (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2lef.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2lef.exe:*:Enabled:oa2lef (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2spef.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2spef.exe:*:Enabled:oa2spef (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2strm.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2strm.exe:*:Enabled:oa2strm (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2verilog.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oa2verilog.exe:*:Enabled:oa2verilog (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaDMTurboServer.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaDMTurboServer.exe:*:Enabled:oaDMTurboServer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaFSLockD.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaFSLockD.exe:*:Enabled:oaFSLockD (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaGetVersion.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\oaGetVersion.exe:*:Enabled:oaGetVersion (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\spef2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\spef2oa.exe:*:Enabled:spef2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\strm2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\strm2oa.exe:*:Enabled:strm2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\verilog2oa.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\verilog2oa.exe:*:Enabled:verilog2oa (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\verilogAnnotate.exe" = C:\OrCAD\OrCAD_16.5_Lite\OpenAccess\bin\win32\opt\verilogAnnotate.exe:*:Enabled:verilogAnnotate (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsmps.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsmps.exe:*:Enabled:cdsmps (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsMsgServer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsMsgServer.exe:*:Enabled:cdsMsgServer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsNameServer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsNameServer.exe:*:Enabled:cdsNameServer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRemote.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRemote.exe:*:Enabled:cdsRemote (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRemshClient.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRemshClient.exe:*:Enabled:cdsRemshClient (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRunHidden.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsRunHidden.exe:*:Enabled:cdsRunHidden (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsServIpc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsServIpc.exe:*:Enabled:cdsServIpc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\mpsinfo.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\mpsinfo.exe:*:Enabled:mpsinfo (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\sipDiffViewer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\sipDiffViewer.exe:*:Enabled:sipDiffViewer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\emsChecker.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\emsChecker.exe:*:Enabled:emsChecker (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\emsMkError.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\emsMkError.exe:*:Enabled:emsMkError (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\msgHelp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\msgHelp.exe:*:Enabled:msgHelp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cmfeedback.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cmfeedback.exe:*:Enabled:cmfeedback (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\consmgr.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\consmgr.exe:*:Enabled:consmgr (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clu.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clu.exe:*:Enabled:clu (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\van.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\van.exe:*:Enabled:van (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\tcl\bin\tclsh80.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\tcl\bin\tclsh80.exe:*:Enabled:tclsh80 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\tcl\bin\wish80.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\tcl\bin\wish80.exe:*:Enabled:wish80 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\assistant.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\assistant.exe:*:Enabled:assistant (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\assistant_adp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\assistant_adp.exe:*:Enabled:assistant_adp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\designer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\designer.exe:*:Enabled:designer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\dumpcpp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\dumpcpp.exe:*:Enabled:dumpcpp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\idc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\idc.exe:*:Enabled:idc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lconvert.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lconvert.exe:*:Enabled:lconvert (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\linguist.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\linguist.exe:*:Enabled:linguist (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lrelease.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lrelease.exe:*:Enabled:lrelease (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lupdate.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\lupdate.exe:*:Enabled:lupdate (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\moc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\moc.exe:*:Enabled:moc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\pixeltool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\pixeltool.exe:*:Enabled:pixeltool (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qcollectiongenerator.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qcollectiongenerator.exe:*:Enabled:qcollectiongenerator (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qhelpconverter.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qhelpconverter.exe:*:Enabled:qhelpconverter (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qhelpgenerator.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qhelpgenerator.exe:*:Enabled:qhelpgenerator (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qmake.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qmake.exe:*:Enabled:qmake (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qt3to4.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qt3to4.exe:*:Enabled:qt3to4 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qtdemo.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\qtdemo.exe:*:Enabled:qtdemo (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\rcc.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\rcc.exe:*:Enabled:rcc (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\uic.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\uic.exe:*:Enabled:uic (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\uic3.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\uic3.exe:*:Enabled:uic3 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\xmlpatterns.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\Qt\bin\xmlpatterns.exe:*:Enabled:xmlpatterns (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\java-rmi.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\java-rmi.exe:*:Enabled:java-rmi (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\java.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\java.exe:*:Enabled:java (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javacpl.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javacpl.exe:*:Enabled:javacpl (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javaw.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javaw.exe:*:Enabled:javaw (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javaws.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\javaws.exe:*:Enabled:javaws (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jucheck.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jucheck.exe:*:Enabled:jucheck (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jureg.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jureg.exe:*:Enabled:jureg (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jusched.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\jusched.exe:*:Enabled:jusched (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\keytool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\keytool.exe:*:Enabled:keytool (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\kinit.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\kinit.exe:*:Enabled:kinit (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\klist.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\klist.exe:*:Enabled:klist (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\ktab.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\ktab.exe:*:Enabled:ktab (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\orbd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\orbd.exe:*:Enabled:orbd (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\pack200.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\pack200.exe:*:Enabled:pack200 (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\policytool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\policytool.exe:*:Enabled:policytool (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\rmid.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\rmid.exe:*:Enabled:rmid (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\rmiregistry.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\rmiregistry.exe:*:Enabled:rmiregistry (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\servertool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\servertool.exe:*:Enabled:servertool (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\ssvagent.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\ssvagent.exe:*:Enabled:ssvagent (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\tnameserv.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\tnameserv.exe:*:Enabled:tnameserv (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\unpack200.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\jre\bin\unpack200.exe:*:Enabled:unpack200 (Release 16.5) – (Sun Microsystems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsinfo.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsinfo.exe:*:Enabled:cdsinfo (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsOaPathUtil.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsOaPathUtil.exe:*:Enabled:cdsOaPathUtil (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsUnzip.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsUnzip.exe:*:Enabled:cdsUnzip (Release 16.5) – (DataFocus, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdswhich.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdswhich.exe:*:Enabled:cdswhich (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsZip.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdsZip.exe:*:Enabled:cdsZip (Release 16.5) – (DataFocus, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cds_root.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cds_root.exe:*:Enabled:cds_root (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clsAdminTool.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clsAdminTool.exe:*:Enabled:clsAdminTool (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clsbd.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\clsbd.exe:*:Enabled:clsbd (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\dregprint.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\dregprint.exe:*:Enabled:dregprint (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\nmp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\nmp.exe:*:Enabled:nmp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\nmppath.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\nmppath.exe:*:Enabled:nmppath (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\tclsh.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\tclsh.exe:*:Enabled:tclsh (Release 16.5) – (ActiveState Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\tclsh84.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\tclsh84.exe:*:Enabled:tclsh84 (Release 16.5) – (ActiveState Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\wish.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\wish.exe:*:Enabled:wish (Release 16.5) – (ActiveState Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\wish84.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\tcltk\8.4\bin\wish84.exe:*:Enabled:wish84 (Release 16.5) – (ActiveState Corporation)
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\tutorial\Captutor.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\tutorial\Captutor.exe:*:Enabled:Captutor (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\pstswp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\pstswp.exe:*:Enabled:pstswp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\Capture.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\Capture.exe:*:Enabled:Capture (Release 16.5) – (Cadence Design Systems, Inc.)
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\comp16.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\comp16.exe:*:Enabled:comp16 (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\capture\Pcadi.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\capture\Pcadi.exe:*:Enabled:Pcadi (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdnshelp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\cdnshelp.exe:*:Enabled:cdnshelp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\cdnshelp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\cdnshelp.exe:*:Enabled:cdnshelp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\cdnshelpindexer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\cdnshelpindexer.exe:*:Enabled:cdnshelpindexer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\indexer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\indexer.exe:*:Enabled:indexer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\tagtest.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\tagtest.exe:*:Enabled:tagtest (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\topicgen.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\topicgen.exe:*:Enabled:topicgen (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\_cdnshelp.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\cdnshelp\bin\_cdnshelp.exe:*:Enabled:_cdnshelp (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\sys_root.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\pcb\bin\sys_root.exe:*:Enabled:sys_root (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\switchversion.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\switchversion.exe:*:Enabled:switchversion (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\versionviewer.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\versionviewer.exe:*:Enabled:versionviewer (Release 16.5) – ()
"C:\OrCAD\OrCAD_16.5_Lite\tools\bin\xcon2project.exe" = C:\OrCAD\OrCAD_16.5_Lite\tools\bin\xcon2project.exe:*:Enabled:xcon2project (Release 16.5) – ()
"C:\Program Files\Symantec AntiVirus\Smc.exe" = C:\Program Files\Symantec AntiVirus\Smc.exe:*:Enabled:SMC Service – (Symantec Corporation)
"C:\Program Files\Symantec AntiVirus\SNAC.EXE" = C:\Program Files\Symantec AntiVirus\SNAC.EXE:*:Enabled:SNAC Service – (Symantec Corporation)
"C:\Program Files\Common Files\Symantec Shared\ccApp.exe" = C:\Program Files\Common Files\Symantec Shared\ccApp.exe:*:Enabled:Symantec Email – (Symantec Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{05BB8E07-3148-40FB-994C-F95E667DEB3D}" = MSXML 4.0
"{0CB3C535-1171-4A20-B549-E2CB5DEB9723}" = MySQL Connector/ODBC 3.51
"{1227DF0A-1A52-483D-BF40-7CE35D1BE8C1}" = CMDP
"{1C4FA629-42F3-40F8-BAB9-72E75CB3F589}" = Altium Designer 6
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java™ 6 Update 29
"{3207D1B4-80E5-11D2-B95D-006097C4DE24}" = Windows Common Controls ActiveX Control DLL
"{3207D1B6-80E5-11D2-B95D-006097C4DE24}" = Microsoft Common Controls 2 ActiveX Control DLL
"{3207D1B9-80E5-11D2-B95D-006097C4DE24}" = Windows Common Controls ActiveX Control DLL
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{46E7604E-00E5-4264-8557-B47A1D759DF4}" = VC User gdiPlus RTL X86 —
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{576D64B0-7413-11D2-B954-006097C4DE24}" = CMDialog ActiveX Control DLL
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{76D1AA2B-A434-4D63-BE2C-80286F23C223}" = Microsoft Interop Forms Redistributable Package 2.0a
"{7B3B4CE5-300C-4DFC-8CD1-D9C0E07015D1}" = Symantec Endpoint Protection
"{7EBEDD1E-AA66-11D2-B980-006097C4DE24}" = MSComm
"{7EBEDD26-AA66-11D2-B980-006097C4DE24}" = MSFlexGrid
"{7EBEDD27-AA66-11D2-B980-006097C4DE24}" = Microsoft Hierarchical FlexGrid Control
"{7EBEDD3D-AA66-11D2-B980-006097C4DE24}" = Microsoft Standard Data Formating Object DLL
"{7EBEDD46-AA66-11D2-B980-006097C4DE24}" = TABCTL32 OLE Control DLL
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8BB4B550-AA69-11D2-B980-006097C4DE24}" = Microsoft Winsock Control DLL
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROPLUS_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROPLUS_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{914DDCB2-4002-4C17-A291-414D46EE4436}" = LTpowerCAD Design Tool
"{94CAC2F1-C856-47F4-AF24-65A1E75AEDB9}" = MotoHelper MergeModules
"{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D68DD2B-1AF8-11D4-AB3C-00C04F0971B2}" = Jet351
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-1033-0000-7760-000000000003}" = Adobe Acrobat 8 Professional
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1)
"{AEB9948B-4FF2-47C9-990E-47014492A0FE}" = MSXML 6.0 Parser
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C35CCBEB-5A54-4DD8-9EC8-110F2A8154B3}" = Motorola Mobile Drivers Installation 5.1.0
"{C484CC8D-03CF-4022-89C4-DB4F02E8A15B}" = Crystal Reports 2008 Runtime
"{C5074CC4-0E26-4716-A307-960272A90040}" = QuickSet
"{C9C35FC7-5AEE-4C1E-8BD2-80ED9FA87FFF}" = MDAC 2.7 Sp1 (English)
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"4569969E1360D2854474C661EF9B4D54F143EB16" = Windows Driver Package - Ricoh Company (rimsptsk) hdc (11/14/2006 6.00.01.04)
"7-Zip" = 7-Zip 9.20
"Adobe Acrobat 8 Professional" = Adobe Acrobat 8 Professional
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Broadcom 802.11b Network Adapter" = Dell Wireless WLAN Card
"CCleaner" = CCleaner
"EAGLE 5.11.0" = EAGLE 5.11.0
"ESET Online Scanner" = ESET Online Scanner v3
"ffdshow_is1" = ffdshow [rev 3124] [2009-11-03]
"FreePCB_is1" = FreePCB 1.2
"ie8" = Windows Internet Explorer 8
"LiveUpdate" = LiveUpdate 3.3 (Symantec Corporation)
"LTspice IV" = LTspice IV
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware version 1.51.2.1300
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MotoHelper" = MotoHelper 2.0.51 Driver 5.1.0
"Product_Name" = Ultra Librarian
"PROPLUS" = Microsoft Office Professional Plus 2007
"Registry Help Free" = Registry Help Free
"Teletronics Software Suite" = Teletronics Software Suite
"VirusTotalUploader2.0" = VirusTotal Uploader 2.0
"VLC media player" = VLC media player 1.0.5
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{09AB0B35-9138-4765-900C-28FC4011058E}" = OrCAD 16.5 Lite

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 1/4/2012 6:14:00 PM | Computer Name = 846TH-564F5C483 | Source = Application Hang | ID = 1002
Description = Hanging application Acrobat.exe, version 8.0.0.456, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.

Error - 1/10/2012 5:16:32 AM | Computer Name = 846TH-564F5C483 | Source = .NET Runtime Optimization Service | ID = 1101
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Failed to compile: c:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\System.ServiceModel.dll
. Error code = 0x80070020

Error - 1/10/2012 5:18:52 AM | Computer Name = 846TH-564F5C483 | Source = .NET Runtime Optimization Service | ID = 1101
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Failed to compile: System.Web.Mobile, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a
. Error code = 0x80070020

Error - 1/10/2012 4:56:11 PM | Computer Name = 846TH-564F5C483 | Source = Application Error | ID = 1000
Description = Faulting application RMM Reader.exe, version 0.0.0.0, faulting module
kernel32.dll, version 5.1.2600.5781, fault address 0x00012afb.

Error - 1/10/2012 4:57:48 PM | Computer Name = 846TH-564F5C483 | Source = Symantec AntiVirus | ID = 16711720
Description = Symantec Endpoint Protection has determined that the virus definitions
are missing on this computer. This computer will remain unprotected from viruses
until virus definitions are downloaded to this computer.Application has encountered
an error. For more information, please go to: http://www.symantec.com/techsupp/servlet/P…ld=symantec_ent


Error - 1/10/2012 5:00:35 PM | Computer Name = 846TH-564F5C483 | Source = LoadPerf | ID = 3001
Description = The performance counter name string value in the registry is incorrectly
formatted.
The bogus string is 12508, the bogus index value is the first DWORD in Data section
while the last valid index values are the second and third DWORD in Data section.

Error - 1/10/2012 5:00:35 PM | Computer Name = 846TH-564F5C483 | Source = LoadPerf | ID = 3011
Description = Unloading the performance counter strings for service WmiApRpl (WmiApRpl)
failed. The Error code is the first DWORD in Data section.

Error - 1/10/2012 5:00:38 PM | Computer Name = 846TH-564F5C483 | Source = LoadPerf | ID = 3001
Description = The performance counter name string value in the registry is incorrectly
formatted.
The bogus string is 12508, the bogus index value is the first DWORD in Data section
while the last valid index values are the second and third DWORD in Data section.

Error - 1/10/2012 5:15:54 PM | Computer Name = 846TH-564F5C483 | Source = SescLU | ID = 13
Description = LiveUpdate returned a non-critical error. Available content updates
may have failed to install.

Error - 1/10/2012 5:17:42 PM | Computer Name = 846TH-564F5C483 | Source = Application Hang | ID = 1002
Description = Hanging application SymCorpUI.exe, version 11.0.6000.419, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

[ System Events ]
Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = SRTSP | ID = 524292
Description = Error loading virus definitions.

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = SRTSP | ID = 524293
Description = Error loading Symantec real time Anti-Virus driver.

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = SRTSPL | ID = 458772
Description = Unable to initialize the virus scanning engine database files.

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = SRTSP | ID = 524292
Description = Error loading virus definitions.

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = SRTSP | ID = 524293
Description = Error loading Symantec real time Anti-Virus driver.

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = SRTSPL | ID = 458772
Description = Unable to initialize the virus scanning engine database files.

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = Service Control Manager | ID = 7000
Description = The SRTSP service failed to start due to the following error: %%31

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = Service Control Manager | ID = 7000
Description = The SRTSPL service failed to start due to the following error: %%31

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = Service Control Manager | ID = 7000
Description = The SRTSP service failed to start due to the following error: %%31

Error - 1/10/2012 5:15:03 PM | Computer Name = 846TH-564F5C483 | Source = Service Control Manager | ID = 7000
Description = The SRTSPL service failed to start due to the following error: %%31


< End of report >
Post #2
Hi Nicci,

:welcome:

My name is Tomk. I would be glad to take a look at your log and help you with solving any malware problems. Logs can take a while to research, so please be patient and I'd be grateful if you would note the following:

  • I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for the issues on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.

Let's give this a try:

Download ComboFix from one of these locations:

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop


  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link –> http://forums.whatthetech.com/How_Disable_…ams_t96260.html

  • Double click on ComboFix.exe & follow the prompts.

  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.

  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


[external image: Posted Image]



Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

[external image: Posted Image]


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.


Notes:

1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
4. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you – please tell your helper.
5. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
Post #4
OK, I ran combofix. SOmething is terribly wrong lol. I disabled all running anti-virus and anti-spyware programs. They showed disabled. I got the warning notice twice when combofix was ran that it wasn't diabled. SO before I pushed ok, I went looking. I couldn't find it. I do have the symantec in other files from other people (common files, sharing)… that was how this mess got started in the first place was file sharing when I was working on his computer. Anyway… this file looks weird to me. It's missing things… like all the locked files I have over in my altium file.

ComboFix 12-01-17.01 - Nicci 01/17/2012 13:46:13.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.462 [GMT -6:00]
Running from: c:\documents and settings\[removed]\Desktop\ComboFix.exe
AV: Symantec Endpoint Protection *Enabled/Updated* {FB06448E-52B8-493A-90F3-E43226D3305C}
FW: Symantec Endpoint Protection *Disabled* {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\846TSS\Recent\Thumbs.db
c:\program files\Blinkx
c:\program files\Blinkx\templates\index.html
c:\program files\Blinkx\templates\noflash.html
c:\program files\Blinkx\templates\offline.html
c:\program files\Blinkx\templates\offline.swf
c:\windows\system32\drivers\npf.sys
c:\windows\system32\roboot.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Service_NPF
.
.
((((((((((((((((((((((((( Files Created from 2011-12-17 to 2012-01-17 )))))))))))))))))))))))))))))))
.
.
2012-01-10 20:54 . 2012-01-10 20:54 ——– d—–w- c:\windows\system32\wbem\Repository
2012-01-09 15:08 . 2012-01-10 20:50 ——– d—–w- C:\logs (Nicci)
2012-01-04 21:58 . 2012-01-04 21:58 ——– d—–w- c:\documents and settings\All Users\Application Data\Common Files
2012-01-04 21:52 . 2012-01-10 20:51 ——– d—–w- c:\documents and settings\All Users\Application Data\AVG2012
2012-01-04 21:52 . 2012-01-10 15:43 ——– d—–w- c:\windows\system32\drivers\AVG
2012-01-04 21:51 . 2012-01-04 21:51 ——– d—–w- c:\program files\AVG
2012-01-04 21:40 . 2012-01-10 20:51 ——– d—–w- c:\documents and settings\All Users\Application Data\MFAData
2012-01-03 16:09 . 2012-01-10 20:53 ——– d—–w- c:\documents and settings\All Users\Application Data\Norton
2012-01-03 16:09 . 2012-01-10 20:53 ——– d—–w- c:\documents and settings\846TSS\Local Settings\Application Data\NPE
2012-01-03 13:10 . 2012-01-03 13:10 182672 —-a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2011-12-28 19:13 . 2012-01-10 20:54 ——– d—–w- c:\documents and settings\846TSS\Application Data\GyroTools
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-09 19:51 . 2011-11-26 23:51 664 —-a-w- c:\documents and settings\846TSS\Local Settings\Application Data\d3d9caps.tmp
2011-12-01 05:40 . 2011-06-08 11:28 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-11-28 20:59 . 2011-11-28 20:12 286720 —-a-w- c:\windows\iun505.exe
2011-11-25 21:57 . 2004-08-04 05:00 293376 —-a-w- c:\windows\system32\winsrv.dll
2011-11-23 13:25 . 2004-08-04 05:00 1859584 —-a-w- c:\windows\system32\win32k.sys
2011-11-18 12:35 . 2004-08-04 05:00 60416 —-a-w- c:\windows\system32\packager.exe
2011-11-17 13:34 . 2011-11-17 13:33 60808 —-a-w- c:\windows\system32\S32EVNT1.DLL
2011-11-17 13:34 . 2011-11-17 13:33 124976 —-a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2011-11-16 14:21 . 2004-08-04 05:00 354816 —-a-w- c:\windows\system32\winhttp.dll
2011-11-16 14:21 . 2004-08-04 05:00 152064 —-a-w- c:\windows\system32\schannel.dll
2011-11-04 19:20 . 2006-03-03 22:33 916992 —-a-w- c:\windows\system32\wininet.dll
2011-11-04 19:20 . 2004-08-04 05:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20 . 2004-08-04 05:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23 . 2004-08-04 05:00 385024 —-a-w- c:\windows\system32\html.iec
2011-11-03 15:28 . 2004-08-04 05:00 386048 —-a-w- c:\windows\system32\qdvd.dll
2011-11-03 15:28 . 2004-08-04 05:00 1292288 —-a-w- c:\windows\system32\quartz.dll
2011-11-01 16:07 . 2004-08-04 05:00 1288704 —-a-w- c:\windows\system32\ole32.dll
2011-10-28 05:31 . 2004-08-04 05:00 33280 —-a-w- c:\windows\system32\csrsrv.dll
2011-10-25 13:37 . 2005-03-29 20:21 2148864 —-a-w- c:\windows\system32\ntoskrnl.exe
2011-10-25 12:52 . 2005-03-29 20:01 2027008 —-a-w- c:\windows\system32\ntkrnlpa.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"="c:\progra~1\MI3AA1~1\wcescomm.exe" [2006-11-13 1289000]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"Messenger (Yahoo!)"="c:\progra~1\Yahoo!\Messenger\YahooMessenger.exe" [2010-06-01 5252408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-10-10 2183168]
"SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\stsystra.exe" [2007-05-10 405504]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-23 620152]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2010-01-25 115560]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe [2011-11-28 295606]
Adobe Acrobat Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872]
CMDP IEEE1394 Starter.lnk - c:\windows\Installer\{1227DF0A-1A52-483D-BF40-7CE35D1BE8C1}\_52A0CDA7B6929B27953B36.exe [2011-2-1 10134]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableCAD"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccEvtMgr]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ccSetMgr]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Symantec Antivirus]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"MotoHelper"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\program files\Microsoft ActiveSync\rapimgr.exe"= c:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\program files\Microsoft ActiveSync\wcescomm.exe"= c:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\program files\Microsoft ActiveSync\WCESMgr.exe"= c:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Altium Designer 6\\DXP.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\pspiceaa.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\specctra\\bin\\mbs2sp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\specctra\\bin\\sp2mbs.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\specctra\\bin\\specctra.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\stmed.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\IndiceFileGeneration.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\MrkSrvr.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\pspice.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\PSpiceEnc.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\psp_cmd.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\simmgr.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\SimSrvr.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\ModelEd.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pspice\\Magneticdesigner.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\pseteditor.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\conceptNmpListCheck.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\cpmaccess.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\libaccess.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\projmgr.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\productServer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\perl5\\bin\\perl.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\perl5\\bin\\perlglob.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\perl5\\ntt\\cmd32.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\msbase\\vcredist_x86.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\bodygen.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\newgenasym.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\bem2d.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\ems2d.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\extracta.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\fatten.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\FSvia.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\FSviaSolver.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\gate_assign.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\il_allegro.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\j2script.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\mbs2brd.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\mbs2lib.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\mcm_escapes.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\mpiexec.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\parallel.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\pe_wordpad.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\pre_check.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\refresh_padstack.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\refresh_symbol.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\refresh_vs.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\reftxt.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\report.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\smpd.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\techfile.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\wmpiconfig.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\wmpiexec.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\wmpiregister.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\zrouter.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\spif.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\spif_batch.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\downrev14.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\techfile13.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\techfile14.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\techfile15.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\vc5\\dbdoctor14.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\vc5\\dbdoctor15.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\vc5\\dbfix11.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\vc5\\dbfix12.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\vc5\\dbfix13.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\vc5\\downrev15.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\placement.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\swap.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\l2a.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\pads_in.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\pcad_in.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\pad_designer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\netin.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\convert_ger.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\explot.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\fill_ipf.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\gbplot.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\genrad.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\gloss.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\ncroute.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\nctape.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\strip_ger.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\ipc356_out.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\iges_out.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\iges_in.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\idf_in.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\idf_out.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\idx_out.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\pdf_out.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\baf.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\genfeedformat.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\netrev.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\batch_drc.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\bbvia.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\convert_gerber.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\create_devices.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\create_sym.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\draw_check.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\dump_libraries.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\plctxt.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\allegro_batch.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\allegro_free_viewer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\dbdoctor.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\dbdoctor_ui.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\dbstat.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\db_change_type.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\dfa_dlg.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\dfa_update.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\downrev_library.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\enved.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\flash_convert.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\fpbrowse.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\layer_compare.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\qvupdate.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\systemdump.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\uprev.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\allegro.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\artwork.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\a2dxf.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\dxf2a.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\rollback.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\purge.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\lrm.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\pcbCache.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\publishpdf.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\QPSetEditor.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\UniversalBrowser.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\dfII\\bin\\skill.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\dfII\\bin\\skill_g.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\capture\\sch2cap.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\mkdefcfg.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\fet\\bin\\versiontool.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\PSpiceExplorerSrvr.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\regsvr32.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\def2oa.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\lef2oa.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\oa2def.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\oa2lef.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\oa2spef.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\oa2strm.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\oa2verilog.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\oaDMTurboServer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\oaFSLockD.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\oaGetVersion.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\spef2oa.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\strm2oa.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\verilog2oa.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\OpenAccess\\bin\\win32\\opt\\verilogAnnotate.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsmps.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsMsgServer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsNameServer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsRemote.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsRemshClient.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsRunHidden.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsServIpc.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\mpsinfo.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\sipDiffViewer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\emsChecker.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\emsMkError.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\msgHelp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cmfeedback.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\consmgr.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\clu.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\van.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\tcltk\\tcl\\bin\\tclsh80.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\tcltk\\tcl\\bin\\wish80.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\assistant.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\assistant_adp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\designer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\dumpcpp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\idc.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\lconvert.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\linguist.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\lrelease.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\lupdate.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\moc.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\pixeltool.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\qcollectiongenerator.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\qhelpconverter.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\qhelpgenerator.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\qmake.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\qt3to4.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\qtdemo.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\rcc.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\uic.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\uic3.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\Qt\\bin\\xmlpatterns.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\java-rmi.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\java.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\javacpl.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\javaw.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\javaws.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\jucheck.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\jureg.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\jusched.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\keytool.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\kinit.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\klist.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\ktab.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\orbd.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\pack200.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\policytool.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\rmid.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\rmiregistry.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\servertool.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\ssvagent.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\tnameserv.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\jre\\bin\\unpack200.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsinfo.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsOaPathUtil.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsUnzip.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdswhich.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdsZip.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cds_root.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\clsAdminTool.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\clsbd.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\dregprint.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\nmp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\nmppath.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\tcltk\\8.4\\bin\\tclsh.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\tcltk\\8.4\\bin\\tclsh84.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\tcltk\\8.4\\bin\\wish.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\tcltk\\8.4\\bin\\wish84.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\capture\\tutorial\\Captutor.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\capture\\pstswp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\capture\\Capture.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\capture\\comp16.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\capture\\Pcadi.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\cdnshelp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\cdnshelp\\bin\\cdnshelp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\cdnshelp\\bin\\cdnshelpindexer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\cdnshelp\\bin\\indexer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\cdnshelp\\bin\\tagtest.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\cdnshelp\\bin\\topicgen.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\cdnshelp\\bin\\_cdnshelp.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\pcb\\bin\\sys_root.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\switchversion.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\versionviewer.exe"=
"c:\\OrCAD\\OrCAD_16.5_Lite\\tools\\bin\\xcon2project.exe"=
"c:\\Program Files\\Symantec AntiVirus\\Smc.exe"=
"c:\\Program Files\\Symantec AntiVirus\\SNAC.EXE"=
"c:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
.
R2 altio;altio;c:\windows\system32\altio.sys [5/26/2004 7:56 PM 3200]
R2 RMMReaderWinService;RMMReaderWinService;c:\program files\USAF\CMDP\RMM Reader.exe [12/10/2010 10:35 AM 152576]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [11/26/2011 4:58 PM 106104]
S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [12/2/2009 4:02 PM 23888]
S3 PROCEXP151;PROCEXP151;\??\c:\windows\system32\Drivers\PROCEXP151.SYS –> c:\windows\system32\Drivers\PROCEXP151.SYS [?]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.yahoo.com/
IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki… -
TCP: DhcpNameServer = [removed] [removed]
.
- - - - ORPHANS REMOVED - - - -
.
Notify-NavLogon - (no file)
SafeBoot-Symantec Antvirus
AddRemove-Yahoo! Software Update - c:\progra~1\Yahoo!\SOFTWA~1\UNINST~1.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-17 13:52
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(460)
c:\windows\System32\BCMLogon.dll
.
- - - - - - - > 'explorer.exe'(1372)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
———————— Other Running Processes ————————
.
c:\program files\Symantec AntiVirus\Smc.exe
c:\program files\Common Files\Symantec Shared\ccSvcHst.exe
c:\windows\System32\WLTRYSVC.EXE
c:\windows\System32\bcmwltry.exe
c:\windows\system32\msdtc.exe
c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files\Symantec AntiVirus\SmcGui.exe
c:\program files\Symantec AntiVirus\Rtvscan.exe
c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
c:\progra~1\MI3AA1~1\rapimgr.exe
c:\program files\Adobe\Acrobat 8.0\Acrobat\acrobat_sl.exe
c:\windows\system32\msiexec.exe
c:\progra~1\Yahoo!\Messenger\ymsgr_tray.exe
.
**************************************************************************
.
Completion time: 2012-01-17 13:56:52 - machine was rebooted
ComboFix-quarantined-files.txt 2012-01-17 19:56
.
Pre-Run: 295,139,762,176 bytes free
Post-Run: 295,320,698,880 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 153B91050CD5238B4EC5A292CC926B1B
Post #5
I've also created a lot more files than what this list shows. It's very different than what the OTL from my first post says. But… This computer has had over a week to play with files, move them around, delete them… i have no idea. I've got 4 other computers I've got to figure out, but this one has all my work that I really need to keep. BTW - orcad can be deleted if necessary. It was a free one, as I only had 1 license and it is on a different computer. I dont want to re-install altium, but can if needed. I just need to make sure I get ALL files backed up and saved, since a project I have been working on for over 4 months is sitting in there… .somewhere.
Post #6
Nicci,

You appear to have two anti-virus programs. AVG and Symantec. You only want one or they will cause each other problems. Uninstall one of them.

I'm not seeing any files that you are locked out of. Are there some specific ones?

Please get an online scan:

ESET Online Scanner:

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as Administrator from the context menu.

  • Please go here then click on: [external image: Posted Image]

    Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install.
    All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.

  • Select the option YES, I accept the Terms of Use then click on: [external image: Posted Image]
  • When prompted allow the Add-On/Active X to install.
  • Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
  • Now click on Advanced Settings and select the following:
    • Scan for potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth Technology
  • Now click on: [external image: Posted Image]
  • The virus signature database… will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
  • When completed the Online Scan will begin automatically.
  • Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
  • When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
  • Now click on: [external image: Posted Image]
  • Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
  • Copy and paste that log as a reply to this topic.

Note: Do not forget to re-enable your Anti-Virus application after running the above scan!
Post #7
I had AVG on here… I can't find it now. ComboFix didn't mention it was even running, and I haven't seen it running in any of my task scans. It is located on a shared computer (thought not currently sharing since I am at work and the other ocmputer is at home). I did have AVG on this computer…. but I don't know where it, and a lot of other files, have gone. Here is a log of the locked files that AVG gave me back on Jan 10th. (*I took some out, as the excel file was over 2700 lines of these locked files. I tried to find as many "different" ones as I could) Scan "Whole computer scan" completed. Information;"2729" Folders selected for scanning:;"Whole computer scan" Scan started:;"Tuesday, January 10, 2012, 1:27:58 AM" Scan finished:;"Tuesday, January 10, 2012, 3:37:37 AM (2 hour(s) 9 minute(s) 39 second(s))" Total object scanned:;"1016401" User who launched the scan:;"846TSS" Information ;"File";"Information";"Result" ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\bistats.db";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\bistats.db-journal";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\bistats.lock";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\dc.db";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\dc.db-journal";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\griffin.db";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\griffin.lock";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\keyval.db";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\keyval.db-journal";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\keyval.lock";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\main.db";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\main.db-journal";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\niccivan\main.lock";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\shared_dynco\dc.db";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\shared_dynco\dc.db-journal";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\shared_dynco\dc.lock";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\shared_httpfe\queue.db";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\shared_httpfe\queue.lock";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\temp-AzaHaef67fewJQjZBPmHaqiH";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Application Data\Skype\temp-z7Q7cQv49HhfIgufwIGVct0t";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\CardSpace\CardSpaceSP2.db";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\CardSpace\CardSpaceSP2.db.shadow";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\RecoveryStore.{1334634E-3B42-11E1-9605-0016CE86390E}.dat";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{1334634F-3B42-11E1-9605-0016CE86390E}.dat";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{5C2FEBE0-3B5C-11E1-9605-0016CE86390E}.dat";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Active\{BEB31E28-3B51-11E1-9605-0016CE86390E}.dat";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\NTUSER.DAT";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\ntuser.dat.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\All Users\Application Data\AVG2012\avgam\avgam.lck";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\Quarantine\";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\All Users\Application Data\Symantec\SRTSP\SrtETmp\";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\LocalService\NTUSER.DAT";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\LocalService\ntuser.dat.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\NetworkService\NTUSER.DAT";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\NetworkService\ntuser.dat.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\pagefile.sys";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Program Files\Yahoo!\Messenger\logs\networkcontroller.log";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\System Volume Information\";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\SoftwareDistribution\EventCache\{C61676BC-91E4-4510-9252-54AE778AAA48}.bin";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\CatRoot2\edb.log";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\CatRoot2\tmp.edb";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\default";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\default.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\SAM";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\SAM.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\SECURITY";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\SECURITY.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\software";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\software.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\system";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\system32\config\system.LOG";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\Temp\avg-95460d29-8eaa-4c1d-8475-5856b0a7471f.tmp";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\WINDOWS\Temp\avg-d9fdaf60-10cc-426f-89d1-706bfb9cb667.tmp";"Locked file. Not tested.";"Locked file. Not tested." ;"C:\Documents and Settings\846TSS\My Documents\Orcad install\Base_SPB16.50.000_wint_1of5.zip";"Password-protected";"" ;"C:\Documents and Settings\846TSS\My Documents\Orcad install\Base_SPB16.50.000_wint_1of5.zip:\AutoPlay\setup.cdd";"Password-protected";"" ;"C:\Documents and Settings\All Users\Application Data\AVG2012\IDS\config\internalList.zip";"Password-protected";"" ;"C:\Documents and Settings\All Users\Application Data\AVG2012\IDS\config\internalList.zip.bak";"Password-protected";"" ;"C:\Documents and Settings\All Users\Application Data\AVG2012\IDS\config\quarantinedList.zip";"Password-protected";"" ;"C:\Documents and Settings\All Users\Application Data\AVG2012\IDS\config\quarantinedList.zip.bak";"Password-protected";"" ;"C:\Documents and Settings\All Users\Application Data\AVG2012\IDS\config\userList.zip";"Password-protected";"" ;"C:\Documents and Settings\All Users\Application Data\AVG2012\IDS\config\userList.zip.bak";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3e\Can_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3e\Emac32.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3e\Emac8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3e\Emac8_md.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3e\Emac8_md_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3e\Emac8_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3e\Fpga_startup16.zip";"Password-protected";"" ……. (a lot more just like this the same folders) ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3e\Wb_uart8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Can.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Canb_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Can_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Clkgen.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Fpga_startup16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Fpga_startup32.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Fpga_startup8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Frqcnt2.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Generic.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\I2cm.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\I2cm_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Iob_1x16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Iob_1x8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasic3\Iob_2x16.zip";"Password-protected";"" ……. more more ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Canb_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Clkgen.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Emac8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Fpga_startup16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Fpga_startup32.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Fpga_startup8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Frqcnt2.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Generic.ZIP";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\I2cm.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\I2cm_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Iob_1x16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Iob_1x8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Iob_2x16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Iob_2x8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Iob_4x16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Iob_4x8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Keypada.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Keypada_w.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Lax_16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Actel\Proasicplus\Lax_1k16.zip";"Password-protected";"" ……. and yes more…. ;"C:\Program Files\Altium Designer 6\Library\Edif\Lattice\Ec\Vga32.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Lattice\Ec\Wb_pwm8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Lattice\Ec\Wb_pwmx.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Lattice\Ec\Wb_uart8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Clkgen.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Fpga_startup16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Fpga_startup32.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Fpga_startup8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Frqcnt2.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Generic.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Iob_1x16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Iob_1x8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Iob_2x16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Iob_2x8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Iob_4x16.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Iob_4x8.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Keypada.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Lcd16x2a.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Max1104_dac.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Coolrunner2\Prtio1x32.zip";"Password-protected";"" …… ugh…… here is the end…. 2739 lines/files later. ;"C:\Program Files\Altium Designer 6\Library\Edif\Xilinx\Xc9500\Xilinx.zip";"Password-protected";"" ;"C:\Program Files\Altium Designer 6\Templates\BOM Manufacturer.XLT";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\standard.xcap";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\standard.xind";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTC3403.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTC3411.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTC3602.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTC3610.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTM46.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTM4614.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTM4628.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTM4628dual.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTM802x_V2.xls";"Contains macros";"" ;"C:\Program Files\LTC\LTpowerCAD\LTCLib\XLS\LTMBB.xls";"Contains macros";"" ;"C:\Program Files\Microsoft Office\Office12\1033\EXPTOOWS.XLA";"Contains macros";"" ;"C:\Program Files\Microsoft Office\Office12\Library\HTML.XLAM";"Contains macros";"" ;"C:\Program Files\Microsoft Office\Office12\SAMPLES\SOLVSAMP.XLS";"Contains macros";"" ;"C:\UltraLibrarian\Databases\BlankPat.mdb";"Contains macros";"" ;"C:\UltraLibrarian\Databases\BlankPat.mdb:\embedded.doc";"Contains macros";"" ;"C:\UltraLibrarian\Databases\BlankRevision.mdb";"Contains macros";"" ;"C:\UltraLibrarian\Databases\BlankRevision.mdb:\embedded.doc";"Contains macros";"" ;"C:\UltraLibrarian\DBase\CISRevisions\BlankRevision.mdb";"Contains macros";"" ;"C:\UltraLibrarian\DBase\CISRevisions\BlankRevision.mdb:\embedded.doc";"Contains macros";"" ;"C:\UltraLibrarian\DBase\FISRevisions\BlankRevision.mdb";"Contains macros";"" ;"C:\UltraLibrarian\DBase\FISRevisions\BlankRevision.mdb:\embedded.doc";"Contains macros";"" ;"C:\UltraLibrarian\Templates\UltraLibrarian.xls";"Contains macros";"" ;"C:\UltraLibrarian\UltraLibrarian.xls";"Contains macros";"" ;"C:\WINDOWS\Installer\117a48.msp";"Contains macros";"" ;"C:\WINDOWS\Installer\117a48.msp:\PATCH_CAB";"Contains macros";"" ;"C:\WINDOWS\Installer\117a48.msp:\PATCH_CAB:\SOLVER.XLAM_1033";"Contains macros";"" ;"C:\WINDOWS\Installer\117a48.msp:\PATCH_CAB:\SUMIF.XLAM_1033";"Contains macros";"" ;"C:\WINDOWS\Installer\117a67.msp";"Contains macros";"" ;"C:\WINDOWS\Installer\117a67.msp:\PATCH_CAB";"Contains macros";"" ;"C:\WINDOWS\Installer\117a67.msp:\PATCH_CAB:\EXPTOOWS.XLA_1033";"Contains macros";"" ;"C:\WINDOWS\Installer\1e6d5c.msp";"Contains macros";"" ;"C:\WINDOWS\Installer\1e6d5c.msp:\PATCH_CAB";"Contains macros";"" ;"C:\WINDOWS\Installer\1e6d5c.msp:\PATCH_CAB:\SOLVER.XLAM_1033";"Contains macros";"" ;"C:\WINDOWS\Installer\1e6d5c.msp:\PATCH_CAB:\SUMIF.XLAM_1033";"Contains macros";"" ;"C:\WINDOWS\Installer\1e6d73.msp";"Contains macros";"" ;"C:\WINDOWS\Installer\1e6d73.msp:\PATCH_CAB";"Contains macros";"" ;"C:\WINDOWS\Installer\1e6d73.msp:\PATCH_CAB:\EXPTOOWS.XLA_1033";"Contains macros";""
Post #8 last edited
This file is also in my Altium Folder. It's called DXP.exe.manifest.

It says it was created and modified: Friday, March 08, 2002, 10:36:18 AM

The inside of this file says:

Windows Shell

I installed this program Altium DXP: Wednesday, October 19, 2011, 2:53:28 PM

I found another file on my system called: VC_RED.cab and in a subset found a dat file that I attempted to decode. It came up with:

c o m p i l a n d s c h e c k s u m T y p e f i l e N a m e U n i q u e i d f o r t h e s o u r c e f i l e ( i n t h i s d a t a s t o r e ) . c o m p i l a n d I D s t a t e m e n t s o u r c e F i l e I D l e n g t h V A R V A a d d r e s s O f f s e t a d d r e s s S e c t i o n c o l u m n N u m b e r E n d c o l u m n N u m b e r l i n e N u m b e r E n d l i n e N u m b e r s o u r c e F i l e c o m p i l a n d 1 6 b i t c o d e r e l o c C R C d a t a C R C w r i t e r e a d e x e c u t e s h a r e n o t C a c h e d d i s c a r d a b l e c o m d a t r e m o v e u n i n i t i a l i z e d D a t a i n i t i a l i z e d D a t a c o d e n o t P a g e d E x e c u t e a l l o w e d . W r i t e a l l o w e d . R e a d a l l o w e d . L e n g t h i n b y t e s o f s e g m e n t . O f f s e t i n p h y s i c a l s e c t i o n . F r a m e . S o u r c e c o m p r e s s i o n a l g o r i t h m . V i r t u a l f i l e n a m e . O b j e c t f i l e n a m e . S o u r c e f i l e n a m e . L e n g t h o f s o u r c e i n b y t e s . C R C o f s o u r c e b y t e s . F r a m e d a t a f o r e n c l o s i n g f u n c t i o n . t y p e a l l o c a t e s B a s e P o i n t e r f u n c t i o n S t a r t c p l u s p l u s E x c e p t i o n H a n d l i n g s y s t e m E x c e p t i o n H a n d l i n g p r o g r a m l e n g t h S a v e d R e g i s t e r s l e n g t h P r o l o g m a x S t a c k l e n g t h P a r a m s l e n g t h L o c a l s l e n g t h B l o c k i n s t a n c e c o n s t r u c t o r o f a c l a s s w i t h v i r t u a l b a s e r e t u r n C + + s t y l e U D T S t r i c t G S C h e c k W a s I n l i n e d B a c k E n d Q F E F r o n t E n d Q F E c o n t a i n e r i s S p l i t t e d i s A g g r e g a t e d I s N a k e d h a s A s y n c h r o n o u s E H h a s S t r u c t u r e d E H h a s C + + E H h a s I n l i n e A s s e m b l y h a s L o n g J u m p h a s S e t J u m p h a s A l l o c a c o m p i l e r n a m e h a s S e c u r i t y C h e c k s I s i t c o m p i l e d w i t h - B z a l i g n C o m p i l e d W i t h L T C G h a s D e b u g I n f o s t a t i c f u n c t i o n f a r r e t u r n r e t u r n f r o m i n t e r r u p t U n r e a c h a b l e d e b u g i n f o f o r o p t i m i z e d c o d e N o I n l i n e u s e s c u s t o m c a l l i n g c o n v e n t i o n N o R e t u r n U D T K i n d O b j e c t P o i n t e r T y p e O E M S y m b o l I d O E M I d M a c h i n e T y p e T a r g e t V i r t u a l A d d r e s s T a r g e t R e l a t i v e V i r t u a l A d d r e s s T a r g e t O f f s e t T a r g e t S e c t i o n U p p e r B o u n d I d L o w e r B o u n d I d U p p e r B o u n d L o w e r B o u n d R a n k A d d r e s s T a k e n C o m p i l e r G e n e r a t e d S i g n a t u r e A g e U n d e c o r a t e d N a m e V i r t u a l B a s e D i s p I n d e x M S I L M a n a g e d F u n c t i o n C o d e V i r t u a l T a b l e S h a p e I d A r r a y I n d e x T y p e I d T y p e I d C l a s s P a r e n t I d L e x i c a l P a r e n t I d V i r t u a l T a b l e S h a p e V i r t u a l B a s e P o i n t e r O f f s e t I n d i r e c t V i r t u a l B a s e C l a s s V i r t u a l B a s e C l a s s S c o p e d H a s C a s t O p e r a t o r H a s A s s i g n m e n t O p e r a t o r H a s N e s t e d T y p e s N e s t e d O v e r l o a d e d O p e r a t o r U D T h a s c o n s t r u c t o r o r d e s t r u c t o r , o r f u n c i s a c o n s t r u c t o r P a c k e d A r r a y I n d e x T y p e B i t P o s i t i o n C o u n t R e f e r e n c e S y m b o l s F i l e N a m e G U I D T i m e S t a m p T o k e n B a s e T y p e V a l u e C a l l i n

and in another file in that same file was another coded file. It was harder to read… but got this info out of it

Program to evaluate the symbol IDiaStackFrame InterfaceWW typeWW Base of the stack frameWWW size of frame in bytes return address of the frameWWW base of locals cbLocalsWW cbParamsWW cbPrologWW cbSavedRegsWWW fHasSEHWWW fHasEH funcStartW fUsesBPWWW maxStackWW Register value.WWW NoReturnWW uses custom calling convention NoInlineWW% has debugging Info for optimized codeW UnreachableWWW return from interruptW
far return static functionWWW hasDebugInfoWW Compiled With LTCG Is it compiled with -BzalignWW hasSecurityChecksW compiler nameW hasAllocaW
hasSetJump hasLongJumpWWW hasInlineAssemblyW hasC++EHWW hasStructuredEHWWW hasAsynchronousEHW IsNakedWWW isAggregatedWW isSplitted containerW WasSpecifiedAsInlineWW BufferChecksWithoutOrderingWWW! Type of Virtual Base Offset TableW hasManagedCode isHotpatchable isCVTCILWW isMSILNetmoduleWWW isCTypesWW
isStripped
WasInlined
StrictGSCheckW return C++ style UDTWW1 instance constructor of a class with virtual baseW Global scope (exe) symbol. IDiaEnumTables InterfaceWW' IEnumVARIANT version of IDiaEnumTables.WWW Number of tables.W IDiaTable InterfaceWWW" IEnumVARIANT version of IDiaTable. Table name.WWW Number of table entries.WW- Return the table element for the given index.W- Return the table for the given index or name.W IDiaEnumSymbolsByAddr InterfaceWWW( Return the symbol for the given address.WW9 Return the symbol for the given relative virtual address.W0 Return the symbol for the given virtual address.WW IDiaEnumSourceFiles InterfaceW, IEnumVARIANT version of IDiaEnumSourceFiles.WW Number of source files.WWW IDiaSourceFile InterfaceWW3 Unique id for the source file (in this data store).WWW+ Return the source file for the given index.WWW IDiaEnumLineNumbers InterfaceW, IEnumVARIANT version of IDiaEnumLineNumbers.WW Number of line numbers.WWW IDiaLineNumber InterfaceWW+ Return the line number for the given index.WWW! IDiaEnumInjectedSources InterfaceW0 IEnumVARIANT version of IDiaEnumInjectedSources.WW Number of injected source files.WW IDiaInjectedSource InterfaceWW CRC of source bytes.WW Length of source in bytes. Source filename.WW Object filename.WW Virtual filename.W Source compression algorithm.W/ Return the injected source for the given index.WWW IDiaEnumDebugStreams Interface- IEnumVARIANT version of IDiaEnumDebugStreams.W Number of streams.! IDiaEnumDebugStreamData InterfaceW0 IEnumVARIANT version of IDiaEnumDebugStreamData.WW! Number of elements in the stream.W Stream name.WW' Return the element for the given index.WWW& Return the stream for the given index. Local Heap DiaSource Class General Stackwalk ClassWWW IDiaStackWalker InterfaceW IDiaStackWalkHelper InterfaceW IDiaFrameData InterfaceWWW" Frame data for enclosing function. IDiaStackWalkFrame InterfaceWW IDiaEnumStackFrames Interface

Something was hard at work…. and it still is.


Also, in another log I've run, when it says "files created in last 30 days"…. it has folders/files listed from a date of 2004. I didn't have this computer in 2004. In fact, this computer was wiped cleaned and started fresh in 2008. There are too many files on this machine that says I modified it before that date, and more so, before I ever had this program installed. It has never even been on our network (even though I am running a standalone through our private wireless"). So, I don't see how any of those files could have been modified at those times. I keep finding time stamp changer files… they are more difficult to decode.

I was able to get these specific commands from one of the files:

plibNewPosition
SetSize
zlibNewSize
RemoteCopyTo
pstm
Commit
CommitFlags
nRevert
LockRegion
(libOffset
dwLockType
UnlockRegion
tagSTATSTG
pwcsNameX
 typeX
cbSize
FILETIME
LowDateTime
HighDateTime
time
ctime
îatime
ígrfMode
grfLocksSupported
clsid
grfStateBitsX
reserved

I have A LOT of files who's dates have changed. Some of them showed up in a scan that said "files created in the last 30 days". and it had 2004 dates on it.
anyway… I will run ESET now. I've run this file before…. but will strictly follow your instructions above.
Post #9
Nicci,

A couple of things:

When an AVG scan shows locked files… it doesn't mean that you are locked out of them. It just means that they are open and therefore AVG doesn't scan them. Some files will always report as locked… you will get fewer of them reported if you run the scan in safe mode. Have a look here at and AVG faq for some information: http://free.avg.com/ww-en/faq.num-2677#num-2677 You can uncheck a box in your AVG setup and it will no longer list the locked files if they bother you.

Password protected files are not scanned by AVG. Password protecting .zip files is not typically done by any malware. It is done by a user.

Cabinet files (or .cab files) are not "readily usable" files. They are typically installation files that have been compressed. The are then expanded into usable files when the program is installed. You cannot look in them and get any readable information.

The "coded file" that you provided an excerpt of is a program that was coded in the C++ language. Those are lines of programming code. Nothing nefarious.

The information you provided from DXP.exe is just header information. Nothing wrong with it.

The created date of a file is exactly what it says. The day it was created. It has nothing to do with the date it was installed on your computer. The same is usually true for the modified date, unless it was modified on your computer. If you make a file on your computer, then make a copy of it and put it on a different computer… it will still show the date you originally made it… not the date you put it on the other computer. Have a read here: http://www.techrepublic.com/article/build-…windows/5034280
Post #11
That program didn't install the manifest file. I've already contacted altium and got a list of folders and files that came with the program. There are a lot of new things. Those dates are wrong. Why would a list say I created a file in the last 30 days that has a creation date, and modified date from 2004. If I created a file, it would be a new creation, not something created in 2004. Every single library file in Altium has been modified by me over the last 4 months, mostly in the months of october and november. I can provide a screen shot of the lock asking for a password if that would help? I'm not arguing, I promise :) I'm just giving you the issues I am dealing with. The files that show locked above are indeed locked with a password. the files even say above password protected. I also try to open log files, and I get the message: This file is in use by another user. I dont know… I was able to read the cabinet file just fine. There are no restrictions to open them up and read their contents. Those cabinets were created by …. who knows (not me, and I'm the only user on this machine… I think) Those library files were either made directly by me, or came installed with the program. I know when I made/created/modified those files… and it wasn't earlier than 2011. I am familiar with C++ and I write and read code every single day at work, and I know that those lines, used with several others (that I can't decipher and/or find yet), don't necessarily say "good" either. Call it jumping the gun? Maybe… but I didn't lock those files, or those files in orcad. It could just be a software glitch from orcad in importing the files from one program to the other. Either way, I knew something was wrong when my debit card came up with charges from some place in France trying to use it without my permission. This is the only computer I have ever put my debit card information on to.
Post #12
I'm not trying to be argumentative either. I'm just giving information. I would be very surprised if you were creating .cab files. I cannot think of any reason for you to do so. They are files that would come when installing a program. As an example: [1999/11/16 12:04:36 | 000,485,376 | —- | C] () – C:\WINDOWS\System32\DrRw40.dll is the "oldest" file I find in your log. The creation date is in 1999. That appears to be the correct creation date for that file. If you were to look at other computers with that file… they show the same date. You have several files dated 2004 that are/were part of service pack 2 for XP. Why would you be modifying library files? They should have came with the program. VC_RED.cab should have appeared on your computer when you installed C++. It's an installation file. The credit card issue is obviously a problem… however, it might not have originated from your computer. Let's see what the ESET scan finds.
Post #13
I edit library files of programs like Orcad and Altium because I am creating…. new library files. When new parts are added, or when/if I need to design/create a new part, I must extract the old files from the library, add the new part, and create an entirely new library, with the same name. it's the same library file, just with some new added parts. One more thing before I run this scan. I can't seem to turn off Symantec. I follow the advice in the link you provided. It's still running somewhere else. Also, AVG doesn't have any exe files on my computer that I can find to even run the program to turn it off. I'm going to download AVG again, but uninstall what I have on here first, then uninstall symantec.
Post #14
ok, so the last few days have been hell. I started with the first piece of advice: "You appear to have two anti-virus programs. AVG and Symantec. You only want one or they will cause each other problems. Uninstall one of them." So, I uninstgalled Symantec. At least tried to. The first time I hit uninstall, it said it was successful. But then, just as I was about to open AVG to make sure it was good, I got a message from symantec saying it had blocked access to something. Well, that's odd, I just uninstalled Symantec. Did a search for Symantec on my system and I had a million folders with Symantec in them. Most of them some different form of .exe running, with LU, and other various Symantec components. I can't delete them, I can't uninstall them. When I try to do either, I am denied access. I am the only user of this computer. (I have an admin account, but have recently created a different "power user" acct as told by my IT guys was a "best practice" type of access, but that's it. I've never even opened that user acct.) So I tried to uninstall and delete through the command prompt. Also denied access. I tried to change permissions to files, denied access. Finally, tried to uninstall from control panel, and it let me…. but……. darn thing took my internet out with it when I uninstalled it. After it was gone (which it wasn't gone… it was still everywhere AND running). But my wireless adapter was no longer "found" and it wasn't "installed". I tried finding a fix for the entire day yesterday, and couldn't get anything configured. I checked my permissions, but really didn't get me anywhere as that's where my knowledge becomes…. sketchy. I did check my port exceptions and my goodness, there was over 150 exceptions in there, with about 140 of them being associated with that Orcad 16.5 program I have running. I'm guessing I should probably uninstall? I can get a different version if this is the problem. Anyway, the only way I could get my wireless back was doing a quick restore to where combo fix left off. OK, since I can't disable symantec, please advise on next step. I am now finally able to go to ESET and get that scan. Coming right up.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI