redmax1
Topic Starter
Never mind….I have fixed it
redmax1
OTL logfile created on: 1/18/2012 3:17:06 PM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Larry.MAX\Desktop\WhatTheTech
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1022.80 Mb Total Physical Memory | 360.72 Mb Available Physical Memory | 35.27% Memory free
2.90 Gb Paging File | 2.49 Gb Available in Paging File | 85.68% Paging File free
Paging file location(s): C:\pagefile.sys 2048 4096 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 211.28 Gb Free Space | 90.72% Space Free | Partition Type: NTFS
Drive E: | 114.49 Gb Total Space | 33.27 Gb Free Space | 29.06% Space Free | Partition Type: NTFS
Drive F: | 189.92 Gb Total Space | 73.92 Gb Free Space | 38.92% Space Free | Partition Type: NTFS
Drive G: | 233.76 Gb Total Space | 63.55 Gb Free Space | 27.19% Space Free | Partition Type: NTFS
Computer Name: MAX | User Name: Larry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - C:\Documents and Settings\Larry.MAX\Desktop\WhatTheTech\OTL.exe (OldTimer Tools)
PRC - C:\Documents and Settings\All Users.WINDOWS\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Freemake)
PRC - C:\Program Files\Fighters\FighterSuiteService.exe (SPAMfighter ApS)
PRC - C:\Program Files\Fighters\SPAMfighter\sfus.exe (SPAMfighter ApS)
PRC - C:\Program Files\Fighters\SPAMfighter\sfagent.exe (SPAMfighter ApS)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Norton 360\Engine\5.1.0.29\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
PRC - C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
PRC - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\ATnotes\ATnotes.exe (Thomas Ascher)
========== Modules (No Company Name) ==========
MOD - C:\Program Files\Fighters\SPAMfighter\sfse.dll ()
MOD - C:\Program Files\Fighters\SPAMfighter\sfsg.dll ()
MOD - C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\WINDOWS\system32\devenum.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\WINDOWS\system32\FAXMON.DLL ()
========== Win32 Services (SafeList) ==========
SRV - (JavaQuickStarterService) – C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (FreemakeUtilsService) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Freemake)
SRV - (Suite Service) – C:\Program Files\Fighters\FighterSuiteService.exe (SPAMfighter ApS)
SRV - (SPAMfighter Update Service) – C:\Program Files\Fighters\SPAMfighter\sfus.exe (SPAMfighter ApS)
SRV - (N360) – C:\Program Files\Norton 360\Engine\5.1.0.29\ccSvcHst.exe (Symantec Corporation)
SRV - (PMBDeviceInfoProvider) – C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
SRV - (Nero BackItUp Scheduler 4.0) – C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
========== Driver Services (SafeList) ==========
DRV - (NAVEX15) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120118.001\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120118.001\NAVENG.SYS (Symantec Corporation)
DRV - (BHDrvx86) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20111223.001\BHDrvx86.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (IDSxpx86) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20120117.002\IDSXpx86.sys (Symantec Corporation)
DRV - (SymEvent) – C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\WINDOWS\System32\Drivers\N360\0501000.01D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\WINDOWS\system32\drivers\N360\0501000.01D\SRTSPX.SYS (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\N360\0501000.01D\SYMTDI.SYS (Symantec Corporation)
DRV - (SymEFA) – C:\WINDOWS\system32\drivers\N360\0501000.01D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymDS) – C:\WINDOWS\system32\drivers\N360\0501000.01D\SYMDS.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\WINDOWS\system32\drivers\N360\0501000.01D\Ironx86.SYS (Symantec Corporation)
DRV - (SiFilter) – C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys (Silicon Image, Inc)
DRV - (SiRemFil) – C:\WINDOWS\system32\DRIVERS\SiRemFil.sys (Silicon Image, Inc)
DRV - (SI3112) – C:\WINDOWS\system32\DRIVERS\SI3112.sys (Silicon Image, Inc)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (P1110VID) – C:\WINDOWS\system32\drivers\P1110Vid.sys (Creative Technology Ltd.)
DRV - (cdudf_xp) – C:\WINDOWS\System32\drivers\Cdudf_xp.sys (Roxio)
DRV - (UdfReadr_xp) – C:\WINDOWS\System32\drivers\UdfReadr_xp.sys (Roxio)
DRV - (pwd_2k) – C:\WINDOWS\System32\drivers\pwd_2K.sys (Roxio)
DRV - (mmc_2K) – C:\WINDOWS\System32\drivers\Mmc_2k.sys (Roxio)
DRV - (dvd_2K) – C:\WINDOWS\System32\drivers\Dvd_2k.sys (Roxio)
DRV - (pfc) – C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (IdeChnDr) Intel® – C:\WINDOWS\system32\DRIVERS\IdeChnDr.sys (Intel Corporation)
DRV - (IdeBusDr) – C:\WINDOWS\system32\DRIVERS\IdeBusDr.sys (Intel Corporation)
DRV - (HCF_MSFT) – C:\WINDOWS\system32\drivers\HCF_MSFT.sys (Conexant)
DRV - (dmsmbios) – C:\WINDOWS\system32\dmsmbios.sys (Intel Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/index.cfm
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Bing"
FF - prefs.js..browser.startup.homepage: "http://www.rr.com/index.cfm"
FF - prefs.js..network.proxy.type: 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/npracplug;version=1.0.0.0: C:\Program Files\Real\RealArcade\Plugins\Mozilla\npracplug.dll (RealNetworks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPlgn\ [2011/09/27 15:28:00 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn_2011_7_4_3 [2012/01/18 13:39:51 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/29 08:32:17 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/12 22:33:53 | 000,000,000 | —D | M]
[2011/04/16 22:03:19 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Larry.MAX\Application Data\Mozilla\Extensions
[2011/07/27 02:18:16 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Larry.MAX\Application Data\Mozilla\Firefox\Profiles\8kf06vey.default\extensions
[2011/07/27 01:41:46 | 000,002,469 | —- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\Mozilla\Firefox\Profiles\8kf06vey.default\searchplugins\safesearch.xml
[2011/04/16 22:02:11 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) – C:\DOCUMENTS AND SETTINGS\ALL USERS.WINDOWS\APPLICATION DATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\COFFPLGN_2011_7_1_3
[2011/09/27 15:28:00 | 000,000,000 | —D | M] (Symantec IPS) – C:\DOCUMENTS AND SETTINGS\ALL USERS.WINDOWS\APPLICATION DATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPLGN
() (No name found) – C:\DOCUMENTS AND SETTINGS\LARRY.MAX\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\8KF06VEY.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI
[2011/08/17 10:25:14 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/09/07 06:51:34 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files\mozilla firefox\plugins\NPcol400.dll
[2011/07/13 17:52:56 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\mozilla firefox\plugins\npCouponPrinter.dll
[2011/07/13 17:52:58 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\mozilla firefox\plugins\npMozCouponPrinter.dll
[2011/08/08 23:51:39 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
O1 HOSTS File: ([2011/12/22 18:01:24 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\5.1.0.29\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O2 - BHO: (no name) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - No CLSID value found.
O3 - HKLM\..\Toolbar: (The Weather Channel Toolbar) - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll ()
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O4 - HKLM..\Run: [sfagent] C:\Program Files\Fighters\SPAMfighter\sfagent.exe (SPAMfighter ApS)
O4 - HKCU..\Run: [ATI Launchpad] C:\Program Files\ATI Multimedia\main\launchpd.exe (ATI Technologies Inc.)
O4 - HKCU..\Run: [ATnotes.exe] C:\Program Files\ATnotes\ATnotes.exe (Thomas Ascher)
O4 - HKCU..\RunOnce: [118_14158901632489] C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\LogMeIn Rescue Applet\LMIR0001.tmp_r.bat ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - Reg Error: Key error. File not found
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/get/shock…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {16F67783-7E72-4C39-99C4-4780A8335484} http://www.syncmyride.com/Own/Modules/Uplo…pplets/sync.cab (SyncXfer Class)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} http://webiq005.webiqonline.com/WebIQ/Data…6-6D5536C585C9} (WebIQ Engine Application Object)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} http://offers.e-centives.com/cif/download/bin/actxcab.cab (CBSTIEPrint Class)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8072E46F-97C6-4CF2-9D15-83E5E1508F7E}: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/05/17 14:50:57 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: MIDI1 - C:\WINDOWS\System32\Syncor11.dll (SoundMAX)
Drivers32: msacm.ac3filter - C:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Ligos Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Kristal Studio)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.D263 - C:\WINDOWS\System32\xl_x263dec.dll (Xirlink, Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.DRAW - DVIDEO.DLL File not found
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Ligos Corporation)
Drivers32: VIDC.VCR1 - ATIVCR1.DLL File not found
Drivers32: VIDC.VCR2 - ATIVCR2.DLL File not found
Drivers32: VIDC.WMV3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)
Drivers32: VIDC.YU12 - C:\WINDOWS\System32\atiyuv12.dll ()
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012/01/18 14:19:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\LogMeIn Rescue Applet
[2012/01/18 03:15:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\PCPro
[2012/01/18 03:15:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\PC Cleaners
[2012/01/18 03:13:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PC1Data
[2012/01/17 23:07:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\DivX Plus
[2012/01/17 23:07:16 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DivX Shared
[2012/01/17 22:39:25 | 000,072,176 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\pxhpinst.exe
[2012/01/17 22:25:40 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\vlc
[2012/01/17 22:25:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\VideoLAN
[2012/01/17 17:54:51 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\Nullsoft
[2012/01/17 01:43:48 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Start Menu\Programs\WMV9 VCM
[2012/01/17 01:43:46 | 000,000,000 | —D | C] – C:\Program Files\WMV9_VCM
[2012/01/16 23:34:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\quicktime
[2012/01/11 03:28:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\PCHealth
[2012/01/03 19:48:42 | 000,354,176 | —- | C] (DivX, Inc.) – C:\WINDOWS\System32\DivXControlPanelApplet.cpl
[2012/01/03 08:02:50 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\MSScanAppDataDir
[2011/12/31 03:01:17 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\My Documents\Fax
[2011/12/31 02:51:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\My Documents\Faxes Recieved
[2011/12/31 02:43:32 | 000,000,000 | —D | C] – C:\WINDOWS\System32\FxsTmp
[2011/12/31 02:43:15 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsclntR.dll
[2011/12/31 02:43:15 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2011/12/31 02:43:15 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsroute.dll
[2011/12/31 02:43:15 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2011/12/31 02:43:15 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxssend.exe
[2011/12/31 02:43:15 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2011/12/31 02:43:14 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscfgwz.dll
[2011/12/31 02:43:14 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2011/12/28 21:33:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\WINDOWS
[2011/12/26 22:08:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\Nero
[2011/12/26 21:58:14 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Nero
[2011/12/26 21:57:41 | 000,000,000 | —D | C] – C:\Program Files\Nero
[2011/12/26 21:56:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Nero
[2011/12/26 21:56:36 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Nero
[2011/12/23 20:40:28 | 000,000,000 | —D | C] – C:\Program Files\Free Offers from RI Soft Systems
[2011/12/23 16:03:29 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2011/12/23 15:45:07 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\Malwarebytes
[2011/12/23 15:44:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/12/23 15:44:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
[2011/12/23 15:44:35 | 000,020,464 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2011/12/23 15:44:35 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/12/23 15:15:17 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\Sun
[2011/12/23 15:12:14 | 000,637,848 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\npdeployJava1.dll
[2011/12/23 15:12:14 | 000,223,112 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2011/12/23 15:12:14 | 000,173,960 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2011/12/23 15:12:14 | 000,173,960 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2011/12/23 15:12:14 | 000,141,312 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2011/12/23 13:59:43 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2011/12/22 23:31:40 | 000,000,000 | RHSD | C] – C:\cmdcons
[2011/12/22 17:29:36 | 000,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2011/12/22 15:31:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Desktop\Noodle Tech
[2011/12/22 13:33:37 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Desktop\WhatTheTech
[2011/12/21 13:55:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Desktop\Virus Tools
[2011/12/21 03:32:44 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Larry.MAX\Recent
[2011/12/21 01:01:17 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serial.sys
[2011/12/21 01:00:37 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rundll32.exe
[2011/12/19 20:13:43 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\NPE
[2008/09/09 14:37:57 | 000,774,144 | —- | C] (RealNetworks, Inc.) – C:\Program Files\RngInterstitial.dll
========== Files - Modified Within 30 Days ==========
[2012/01/18 15:23:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{CA39505C-B0B6-4CEF-AC1E-AB513ECA8CD1}.job
[2012/01/18 13:41:17 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/01/18 13:39:23 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/01/18 03:13:34 | 005,276,432 | —- | M] (PC Cleaners) – C:\WINDOWS\uninst.exe
[2012/01/18 01:55:56 | 000,000,134 | —- | M] () – C:\Documents and Settings\Larry.MAX\Desktop\Microsoft Fix it.url
[2012/01/17 22:09:54 | 000,267,008 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/01/17 17:45:11 | 000,081,920 | —- | M] () – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/01/13 14:47:03 | 000,444,172 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/01/13 14:47:03 | 000,070,410 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/01/11 03:10:51 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2012/01/06 01:58:45 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/01/05 01:01:12 | 000,031,712 | —- | M] () – C:\{F2DFA54A-2B64-4325-998C-84CC7A647949}
[2012/01/04 23:57:49 | 000,002,560 | —- | M] () – C:\{E90043D8-6516-4199-8C6A-C3BDA988CECC}
[2012/01/04 19:31:26 | 000,002,576 | —- | M] () – C:\{F51568F8-53AF-417A-B360-13CEDC8154EF}
[2012/01/04 15:57:55 | 000,009,662 | —- | M] () – C:\WINDOWS\EPISME00.SWB
[2012/01/04 12:22:52 | 000,000,272 | —- | M] () – C:\{529A0076-A5B9-41B6-9CCD-EF61D23D9653}
[2012/01/04 02:01:38 | 000,000,272 | —- | M] () – C:\{62F54313-1962-4FAF-8D0E-F669E0388F6E}
[2012/01/04 02:00:36 | 000,000,272 | —- | M] () – C:\{0A15DEF3-8EA2-430C-B5A5-B4A17D3EC93F}
[2012/01/03 19:48:42 | 000,354,176 | —- | M] (DivX, Inc.) – C:\WINDOWS\System32\DivXControlPanelApplet.cpl
[2012/01/03 10:04:15 | 000,000,440 | —- | M] () – C:\{B50A5443-AA89-4A4D-AD67-BEEDBDF4E911}
[2012/01/03 08:09:14 | 000,001,071 | —- | M] () – C:\WINDOWS\AWMODEM.INF
[2012/01/02 03:01:22 | 000,000,280 | —- | M] () – C:\{352E854E-683E-44E9-ABCA-A746EAAC5A0B}
[2012/01/02 03:00:04 | 000,000,280 | —- | M] () – C:\{57E31AB6-2175-4F51-A8EA-920625AD0B5C}
[2012/01/02 02:58:49 | 000,000,280 | —- | M] () – C:\{4F81ECBB-D96F-45C3-AAFE-D76CC507C7E8}
[2012/01/02 02:57:12 | 000,000,280 | —- | M] () – C:\{8C2FBEF8-A2F5-48FA-9418-323742B40FB2}
[2012/01/01 21:36:05 | 000,002,248 | —- | M] () – C:\{09F15372-D640-473C-B5B8-055FF589C907}
[2012/01/01 03:57:19 | 000,000,272 | —- | M] () – C:\{92D06403-2389-457C-9031-3FFB62BC4A15}
[2011/12/31 02:43:32 | 000,001,078 | —- | M] () – C:\WINDOWS\System32\mapisvc.inf
[2011/12/30 22:39:32 | 000,002,736 | —- | M] () – C:\{7C427D0D-6996-4914-8D1E-7AA2B92A678E}
[2011/12/30 19:21:58 | 000,002,808 | —- | M] () – C:\{18E9942C-359C-455B-939D-F550D500C0E0}
[2011/12/30 12:13:13 | 000,002,808 | —- | M] () – C:\{A01265E5-1537-4F7C-BE0E-814F6DAABA1A}
[2011/12/30 10:21:53 | 000,002,720 | —- | M] () – C:\{CABF6429-E349-4513-8B67-505472461A74}
[2011/12/30 03:08:06 | 000,000,280 | —- | M] () – C:\{03D8F309-6540-41A1-8675-BDBD23DB3089}
[2011/12/29 12:15:17 | 000,007,246 | —- | M] () – C:\WINDOWS\System32\EPPICResdb0000
[2011/12/29 12:15:17 | 000,000,120 | —- | M] () – C:\WINDOWS\System32\EPPICResdb
[2011/12/29 11:22:23 | 000,000,030 | —- | M] () – C:\WINDOWS\MAIN.INI
[2011/12/29 11:17:06 | 000,000,586 | —- | M] () – C:\WINDOWS\3DFAX.INI
[2011/12/29 03:05:21 | 000,000,069 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/12/28 02:42:15 | 000,000,280 | —- | M] () – C:\{6F26357D-AE4C-489D-A85F-BFFB6944ADED}
[2011/12/26 21:58:14 | 000,002,345 | —- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk
[2011/12/23 16:25:41 | 000,000,280 | —- | M] () – C:\{BA9A3762-D117-43E1-A453-D2B199484E55}
[2011/12/23 16:24:07 | 000,000,280 | —- | M] () – C:\{56DD988E-6917-49FD-8002-B4AD3AB52EA6}
[2011/12/23 16:22:32 | 000,000,488 | —- | M] () – C:\{226286FD-C295-4C4F-AA38-DA1BFB85BDBC}
[2011/12/23 15:12:03 | 000,637,848 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\npdeployJava1.dll
[2011/12/23 15:12:03 | 000,567,184 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2011/12/23 15:12:03 | 000,223,112 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2011/12/23 15:12:03 | 000,173,960 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2011/12/23 15:12:03 | 000,173,960 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2011/12/23 15:12:03 | 000,141,312 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2011/12/23 13:07:01 | 000,002,672 | —- | M] () – C:\{F84F6E03-A4C6-4846-B2FA-DEE5393BE053}
[2011/12/22 23:31:47 | 000,000,336 | RHS- | M] () – C:\boot.ini
[2011/12/22 18:01:24 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2011/12/22 17:30:02 | 000,001,984 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/12/22 16:24:45 | 000,004,864 | —- | M] () – C:\{1DE5B8CD-31FA-48AF-BD4C-CAEF35D50A2E}
[2011/12/22 15:37:21 | 000,004,872 | —- | M] () – C:\{2BB69D3C-B1CF-4FF8-9C02-2AACD60EA54E}
[2011/12/22 14:41:23 | 000,004,872 | —- | M] () – C:\{195EC084-7ECF-41A7-B363-B48529BE0B45}
[2011/12/22 14:18:32 | 000,004,864 | —- | M] () – C:\{CD8CE751-93D8-4F60-9D45-3F944F5C32D9}
[2011/12/22 13:32:37 | 000,004,880 | —- | M] () – C:\{8F732DF0-F487-48D7-B42D-D9C36B928432}
[2011/12/22 11:54:51 | 000,004,864 | —- | M] () – C:\{D1A0043F-1025-4926-80BF-B68F88F46ABA}
[2011/12/22 11:26:45 | 000,004,864 | —- | M] () – C:\{D768DD99-2761-44BA-AADD-F1CCEDBED051}
[2011/12/22 10:44:05 | 000,004,864 | —- | M] () – C:\{0F38997B-DEA6-4C56-8F44-CB51A7450626}
[2011/12/22 10:20:14 | 000,004,872 | —- | M] () – C:\{94E6833C-9B91-4C17-B4F3-7C3A4857851A}
[2011/12/22 04:13:12 | 000,004,864 | —- | M] () – C:\{91FCA3B2-FF36-428B-8DCA-D2088DAE8A0E}
[2011/12/22 04:06:39 | 000,004,880 | —- | M] () – C:\{FAC177BB-8D69-4B0B-B036-C7C205C447FB}
[2011/12/22 03:27:05 | 000,004,880 | —- | M] () – C:\{ECCB689E-DD41-43E0-AF7B-3EC37007668C}
[2011/12/22 03:21:23 | 000,004,872 | —- | M] () – C:\{F5EB4A10-7C5E-4A10-A3B7-0F5B585D6D9F}
[2011/12/22 02:01:39 | 000,004,872 | —- | M] () – C:\{D22A739B-DDE9-460B-BDEC-84254273CFC2}
[2011/12/22 02:00:01 | 000,004,848 | —- | M] () – C:\{A93F24BE-AA13-4846-B85C-82DFCEF8AB94}
[2011/12/22 01:41:28 | 000,004,872 | —- | M] () – C:\{332E52DC-D924-4F49-9CA5-E93FB98B80A3}
[2011/12/21 22:08:37 | 000,004,864 | —- | M] () – C:\{1CB98AF2-13B2-4506-919A-E251DD3E51A3}
[2011/12/21 19:30:50 | 000,004,864 | —- | M] () – C:\{67288E2C-4FA0-428A-8DED-A2AE2166DEBB}
[2011/12/21 17:58:13 | 000,004,872 | —- | M] () – C:\{A812D6E4-3ED5-4AE4-9AFB-47807C00A242}
[2011/12/21 16:18:16 | 000,004,856 | —- | M] () – C:\{663DEDE2-6DA0-47E0-B387-9008AC9FD7A9}
[2011/12/21 14:09:28 | 000,004,864 | —- | M] () – C:\{DF3E1670-B162-4265-A5F0-7C9CC399DE3D}
[2011/12/21 13:35:06 | 000,004,864 | —- | M] () – C:\{2374C9A1-B08E-42B4-89AA-AC2B23693133}
[2011/12/21 09:11:04 | 000,004,880 | —- | M] () – C:\{E66A4D79-30FF-4F4A-826D-DCA0854A46EF}
[2011/12/20 04:02:01 | 000,004,576 | —- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\SMRResults210.dat
[2011/12/20 03:49:12 | 000,014,062 | -HS- | M] () – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\1w86bd6l41q237
[2011/12/20 03:49:12 | 000,014,062 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS\Application Data\1w86bd6l41q237
[2011/12/20 03:38:18 | 000,000,220 | —- | M] () – C:\Boot.bak
[2011/12/20 03:33:10 | 000,004,856 | —- | M] () – C:\{73E3B5E8-B647-4E3E-A30A-0ECF5E14E7DD}
[2011/12/19 21:35:08 | 000,138,991 | —- | M] () – C:\WINDOWS\System32\AdobeFnt.lst
========== Files Created - No Company Name ==========
[2012/01/18 01:55:56 | 000,000,134 | —- | C] () – C:\Documents and Settings\Larry.MAX\Desktop\Microsoft Fix it.url
[2012/01/12 22:33:53 | 000,001,804 | —- | C] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Adobe Reader 9.lnk
[2012/01/05 01:01:12 | 000,031,712 | —- | C] () – C:\{F2DFA54A-2B64-4325-998C-84CC7A647949}
[2012/01/04 23:57:49 | 000,002,560 | —- | C] () – C:\{E90043D8-6516-4199-8C6A-C3BDA988CECC}
[2012/01/04 19:31:26 | 000,002,576 | —- | C] () – C:\{F51568F8-53AF-417A-B360-13CEDC8154EF}
[2012/01/04 12:22:52 | 000,000,272 | —- | C] () – C:\{529A0076-A5B9-41B6-9CCD-EF61D23D9653}
[2012/01/04 02:01:38 | 000,000,272 | —- | C] () – C:\{62F54313-1962-4FAF-8D0E-F669E0388F6E}
[2012/01/04 02:00:36 | 000,000,272 | —- | C] () – C:\{0A15DEF3-8EA2-430C-B5A5-B4A17D3EC93F}
[2012/01/03 10:04:15 | 000,000,440 | —- | C] () – C:\{B50A5443-AA89-4A4D-AD67-BEEDBDF4E911}
[2012/01/03 08:09:14 | 000,001,071 | —- | C] () – C:\WINDOWS\AWMODEM.INF
[2012/01/02 03:01:22 | 000,000,280 | —- | C] () – C:\{352E854E-683E-44E9-ABCA-A746EAAC5A0B}
[2012/01/02 03:00:04 | 000,000,280 | —- | C] () – C:\{57E31AB6-2175-4F51-A8EA-920625AD0B5C}
[2012/01/02 02:58:49 | 000,000,280 | —- | C] () – C:\{4F81ECBB-D96F-45C3-AAFE-D76CC507C7E8}
[2012/01/02 02:57:12 | 000,000,280 | —- | C] () – C:\{8C2FBEF8-A2F5-48FA-9418-323742B40FB2}
[2012/01/01 21:36:05 | 000,002,248 | —- | C] () – C:\{09F15372-D640-473C-B5B8-055FF589C907}
[2012/01/01 03:57:19 | 000,000,272 | —- | C] () – C:\{92D06403-2389-457C-9031-3FFB62BC4A15}
[2011/12/31 02:43:15 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2011/12/31 02:43:15 | 000,001,361 | —- | C] () – C:\WINDOWS\System32\fxscount.h
[2011/12/30 22:39:32 | 000,002,736 | —- | C] () – C:\{7C427D0D-6996-4914-8D1E-7AA2B92A678E}
[2011/12/30 19:21:58 | 000,002,808 | —- | C] () – C:\{18E9942C-359C-455B-939D-F550D500C0E0}
[2011/12/30 12:13:13 | 000,002,808 | —- | C] () – C:\{A01265E5-1537-4F7C-BE0E-814F6DAABA1A}
[2011/12/30 10:21:53 | 000,002,720 | —- | C] () – C:\{CABF6429-E349-4513-8B67-505472461A74}
[2011/12/30 03:08:06 | 000,000,280 | —- | C] () – C:\{03D8F309-6540-41A1-8675-BDBD23DB3089}
[2011/12/29 11:17:05 | 000,000,030 | —- | C] () – C:\WINDOWS\MAIN.INI
[2011/12/28 21:36:25 | 000,059,004 | —- | C] () – C:\WINDOWS\System32\Zelda__2.ttf
[2011/12/28 21:36:25 | 000,050,100 | —- | C] () – C:\WINDOWS\System32\Tt0017m2.ttf
[2011/12/28 21:36:25 | 000,049,988 | —- | C] () – C:\WINDOWS\System32\Tt0015m2.ttf
[2011/12/28 21:36:25 | 000,048,340 | —- | C] () – C:\WINDOWS\System32\Tt0016m2.ttf
[2011/12/28 21:36:25 | 000,047,976 | —- | C] () – C:\WINDOWS\System32\Zeldi__2.ttf
[2011/12/28 21:36:24 | 000,071,052 | —- | C] () – C:\WINDOWS\System32\Varsity2.ttf
[2011/12/28 21:36:24 | 000,065,156 | —- | C] () – C:\WINDOWS\System32\Willow_2.ttf
[2011/12/28 21:36:24 | 000,062,260 | —- | C] () – C:\WINDOWS\System32\Tt0909m2.ttf
[2011/12/28 21:36:24 | 000,062,212 | —- | C] () – C:\WINDOWS\System32\Tt0327m2.ttf
[2011/12/28 21:36:24 | 000,058,712 | —- | C] () – C:\WINDOWS\System32\Tt0122m2.ttf
[2011/12/28 21:36:24 | 000,056,180 | —- | C] () – C:\WINDOWS\System32\Tt0326m2.ttf
[2011/12/28 21:36:24 | 000,051,700 | —- | C] () – C:\WINDOWS\System32\Vogue__2.ttf
[2011/12/28 21:36:24 | 000,045,196 | —- | C] () – C:\WINDOWS\System32\Vagabon2.ttf
[2011/12/28 21:36:24 | 000,044,236 | —- | C] () – C:\WINDOWS\System32\Valiant2.ttf
[2011/12/28 21:36:24 | 000,043,988 | —- | C] () – C:\WINDOWS\System32\Tt0756m2.ttf
[2011/12/28 21:36:23 | 000,058,732 | —- | C] () – C:\WINDOWS\System32\Tt0939m2.ttf
[2011/12/28 21:36:23 | 000,048,608 | —- | C] () – C:\WINDOWS\System32\Tribuit2.ttf
[2011/12/28 21:36:23 | 000,048,596 | —- | C] () – C:\WINDOWS\System32\Treasur2.ttf
[2011/12/28 21:36:23 | 000,047,868 | —- | C] () – C:\WINDOWS\System32\Unicorn2.ttf
[2011/12/28 21:36:23 | 000,047,448 | —- | C] () – C:\WINDOWS\System32\Teletyp2.ttf
[2011/12/28 21:36:23 | 000,047,088 | —- | C] () – C:\WINDOWS\System32\Tt0317m2.ttf
[2011/12/28 21:36:23 | 000,047,036 | —- | C] () – C:\WINDOWS\System32\Tt0316m2.ttf
[2011/12/28 21:36:23 | 000,046,664 | —- | C] () – C:\WINDOWS\System32\Tribune2.ttf
[2011/12/28 21:36:23 | 000,045,964 | —- | C] () – C:\WINDOWS\System32\Tribubo2.ttf
[2011/12/28 21:36:23 | 000,045,252 | —- | C] () – C:\WINDOWS\System32\Tristan2.ttf
[2011/12/28 21:36:23 | 000,040,312 | —- | C] () – C:\WINDOWS\System32\Tubular2.ttf
[2011/12/28 21:36:23 | 000,037,252 | —- | C] () – C:\WINDOWS\System32\Transis2.ttf
[2011/12/28 21:36:22 | 000,068,968 | —- | C] () – C:\WINDOWS\System32\Stars__2.ttf
[2011/12/28 21:36:22 | 000,059,272 | —- | C] () – C:\WINDOWS\System32\Standou2.ttf
[2011/12/28 21:36:22 | 000,050,920 | —- | C] () – C:\WINDOWS\System32\Storybo2.ttf
[2011/12/28 21:36:22 | 000,049,224 | —- | C] () – C:\WINDOWS\System32\Tabitha2.ttf
[2011/12/28 21:36:22 | 000,048,500 | —- | C] () – C:\WINDOWS\System32\Submari2.ttf
[2011/12/28 21:36:22 | 000,046,644 | —- | C] () – C:\WINDOWS\System32\Steamer2.ttf
[2011/12/28 21:36:22 | 000,045,812 | —- | C] () – C:\WINDOWS\System32\Subway2.ttf
[2011/12/28 21:36:22 | 000,041,116 | —- | C] () – C:\WINDOWS\System32\Stonehe2.ttf
[2011/12/28 21:36:22 | 000,038,672 | —- | C] () – C:\WINDOWS\System32\Tt0373m2.ttf
[2011/12/28 21:36:22 | 000,037,256 | —- | C] () – C:\WINDOWS\System32\Tt0372m2.ttf
[2011/12/28 21:36:22 | 000,036,044 | —- | C] () – C:\WINDOWS\System32\Stageco2.ttf
[2011/12/28 21:36:22 | 000,034,384 | —- | C] () – C:\WINDOWS\System32\Steward2.ttf
[2011/12/28 21:36:22 | 000,033,988 | —- | C] () – C:\WINDOWS\System32\Socket2.ttf
[2011/12/28 21:36:22 | 000,032,972 | —- | C] () – C:\WINDOWS\System32\Stylus2.ttf
[2011/12/28 21:36:21 | 000,102,428 | —- | C] () – C:\WINDOWS\System32\Rocksto2.ttf
[2011/12/28 21:36:21 | 000,086,156 | —- | C] () – C:\WINDOWS\System32\Scratch2.ttf
[2011/12/28 21:36:21 | 000,069,112 | —- | C] () – C:\WINDOWS\System32\Quill__2.ttf
[2011/12/28 21:36:21 | 000,064,000 | —- | C] () – C:\WINDOWS\System32\Tt0197m2.ttf
[2011/12/28 21:36:21 | 000,050,924 | —- | C] () – C:\WINDOWS\System32\Scribbl2.ttf
[2011/12/28 21:36:21 | 000,050,212 | —- | C] () – C:\WINDOWS\System32\Saloon_2.ttf
[2011/12/28 21:36:21 | 000,047,616 | —- | C] () – C:\WINDOWS\System32\Sedona_2.ttf
[2011/12/28 21:36:21 | 000,045,048 | —- | C] () – C:\WINDOWS\System32\Sherwoo2.ttf
[2011/12/28 21:36:21 | 000,043,904 | —- | C] () – C:\WINDOWS\System32\Snifi__2.ttf
[2011/12/28 21:36:21 | 000,039,904 | —- | C] () – C:\WINDOWS\System32\Signatu2.ttf
[2011/12/28 21:36:21 | 000,038,780 | —- | C] () – C:\WINDOWS\System32\Sceptre2.ttf
[2011/12/28 21:36:21 | 000,037,664 | —- | C] () – C:\WINDOWS\System32\Signboa2.ttf
[2011/12/28 21:36:21 | 000,033,504 | —- | C] () – C:\WINDOWS\System32\Snifb__2.ttf
[2011/12/28 21:36:21 | 000,033,404 | —- | C] () – C:\WINDOWS\System32\Sniff__2.ttf
[2011/12/28 21:36:20 | 000,081,424 | —- | C] () – C:\WINDOWS\System32\Partrid2.ttf
[2011/12/28 21:36:20 | 000,074,672 | —- | C] () – C:\WINDOWS\System32\Papercl2.ttf
[2011/12/28 21:36:20 | 000,066,536 | —- | C] () – C:\WINDOWS\System32\Presws_2.ttf
[2011/12/28 21:36:20 | 000,055,428 | —- | C] () – C:\WINDOWS\System32\Perciva2.ttf
[2011/12/28 21:36:20 | 000,049,368 | —- | C] () – C:\WINDOWS\System32\Patrick2.ttf
[2011/12/28 21:36:20 | 000,045,112 | —- | C] () – C:\WINDOWS\System32\Paramou2.ttf
[2011/12/28 21:36:20 | 000,044,112 | —- | C] () – C:\WINDOWS\System32\Parambo2.ttf
[2011/12/28 21:36:20 | 000,042,952 | —- | C] () – C:\WINDOWS\System32\Paramit2.ttf
[2011/12/28 21:36:20 | 000,041,432 | —- | C] () – C:\WINDOWS\System32\Tt0867m2.ttf
[2011/12/28 21:36:20 | 000,039,472 | —- | C] () – C:\WINDOWS\System32\Poster2.ttf
[2011/12/28 21:36:20 | 000,038,820 | —- | C] () – C:\WINDOWS\System32\Pickwic2.ttf
[2011/12/28 21:36:20 | 000,038,220 | —- | C] () – C:\WINDOWS\System32\Pegasus2.ttf
[2011/12/28 21:36:20 | 000,032,640 | —- | C] () – C:\WINDOWS\System32\Pythago2.ttf
[2011/12/28 21:36:19 | 000,060,404 | —- | C] () – C:\WINDOWS\System32\Papep__2.ttf
[2011/12/28 21:36:19 | 000,048,380 | —- | C] () – C:\WINDOWS\System32\Palatit2.ttf
[2011/12/28 21:36:19 | 000,048,288 | —- | C] () – C:\WINDOWS\System32\Palatbo2.ttf
[2011/12/28 21:36:19 | 000,047,848 | —- | C] () – C:\WINDOWS\System32\Palatia2.ttf
[2011/12/28 21:36:19 | 000,046,104 | —- | C] () – C:\WINDOWS\System32\Tt0519m2.ttf
[2011/12/28 21:36:19 | 000,043,748 | —- | C] () – C:\WINDOWS\System32\Oldcent2.ttf
[2011/12/28 21:36:19 | 000,040,144 | —- | C] () – C:\WINDOWS\System32\Newzurc2.ttf
[2011/12/28 21:36:19 | 000,039,160 | —- | C] () – C:\WINDOWS\System32\Moderne2.ttf
[2011/12/28 21:36:19 | 000,037,500 | —- | C] () – C:\WINDOWS\System32\Newzuob2.ttf
[2011/12/28 21:36:19 | 000,037,272 | —- | C] () – C:\WINDOWS\System32\Modobl2.ttf
[2011/12/28 21:36:19 | 000,033,328 | —- | C] () – C:\WINDOWS\System32\Newzubo2.ttf
[2011/12/28 21:36:19 | 000,031,976 | —- | C] () – C:\WINDOWS\System32\Moddeob2.ttf
[2011/12/28 21:36:18 | 000,053,996 | —- | C] () – C:\WINDOWS\System32\Market2.ttf
[2011/12/28 21:36:18 | 000,051,404 | —- | C] () – C:\WINDOWS\System32\Mariah2.ttf
[2011/12/28 21:36:18 | 000,048,424 | —- | C] () – C:\WINDOWS\System32\Tt0726m2.ttf
[2011/12/28 21:36:18 | 000,047,468 | —- | C] () – C:\WINDOWS\System32\Tt0843m2.ttf
[2011/12/28 21:36:18 | 000,047,100 | —- | C] () – C:\WINDOWS\System32\Tt0841m2.ttf
[2011/12/28 21:36:18 | 000,046,852 | —- | C] () – C:\WINDOWS\System32\Tt0842m2.ttf
[2011/12/28 21:36:18 | 000,046,268 | —- | C] () – C:\WINDOWS\System32\Tt0844m2.ttf
[2011/12/28 21:36:18 | 000,045,368 | —- | C] () – C:\WINDOWS\System32\Tt0727m2.ttf
[2011/12/28 21:36:18 | 000,043,956 | —- | C] () – C:\WINDOWS\System32\Librari2.ttf
[2011/12/28 21:36:18 | 000,043,608 | —- | C] () – C:\WINDOWS\System32\Longisl2.ttf
[2011/12/28 21:36:18 | 000,032,736 | —- | C] () – C:\WINDOWS\System32\Metro2.ttf
[2011/12/28 21:36:18 | 000,029,536 | —- | C] () – C:\WINDOWS\System32\Moddemi2.ttf
[2011/12/28 21:36:17 | 000,056,688 | —- | C] () – C:\WINDOWS\System32\Jester2.ttf
[2011/12/28 21:36:17 | 000,056,516 | —- | C] () – C:\WINDOWS\System32\Julius_2.ttf
[2011/12/28 21:36:17 | 000,053,696 | —- | C] () – C:\WINDOWS\System32\Janis__2.ttf
[2011/12/28 21:36:17 | 000,053,180 | —- | C] () – C:\WINDOWS\System32\Invitat2.ttf
[2011/12/28 21:36:17 | 000,052,744 | —- | C] () – C:\WINDOWS\System32\Intreb_2.ttf
[2011/12/28 21:36:17 | 000,041,844 | —- | C] () – C:\WINDOWS\System32\Tt1115m2.ttf
[2011/12/28 21:36:17 | 000,039,796 | —- | C] () – C:\WINDOWS\System32\Tt0390m2.ttf
[2011/12/28 21:36:17 | 000,038,888 | —- | C] () – C:\WINDOWS\System32\Tt0388m2.ttf
[2011/12/28 21:36:17 | 000,038,360 | —- | C] () – C:\WINDOWS\System32\Tt0389m2.ttf
[2011/12/28 21:36:17 | 000,036,360 | —- | C] () – C:\WINDOWS\System32\Tt0387m2.ttf
[2011/12/28 21:36:17 | 000,034,036 | —- | C] () – C:\WINDOWS\System32\Intreob2.ttf
[2011/12/28 21:36:17 | 000,032,080 | —- | C] () – C:\WINDOWS\System32\Intrepi2.ttf
[2011/12/28 21:36:17 | 000,031,344 | —- | C] () – C:\WINDOWS\System32\Intrebo2.ttf
[2011/12/28 21:36:16 | 000,067,988 | —- | C] () – C:\WINDOWS\System32\Tt0107m2.ttf
[2011/12/28 21:36:16 | 000,061,352 | —- | C] () – C:\WINDOWS\System32\Tt0209m2.ttf
[2011/12/28 21:36:16 | 000,061,204 | —- | C] () – C:\WINDOWS\System32\Tt0110m2.ttf
[2011/12/28 21:36:16 | 000,040,792 | —- | C] () – C:\WINDOWS\System32\Heather2.ttf
[2011/12/28 21:36:16 | 000,039,944 | —- | C] () – C:\WINDOWS\System32\Tt0307m2.ttf
[2011/12/28 21:36:16 | 000,039,800 | —- | C] () – C:\WINDOWS\System32\Tt0312m2.ttf
[2011/12/28 21:36:16 | 000,039,336 | —- | C] () – C:\WINDOWS\System32\Tt0391m2.ttf
[2011/12/28 21:36:16 | 000,038,812 | —- | C] () – C:\WINDOWS\System32\Tt0306m2.ttf
[2011/12/28 21:36:16 | 000,031,344 | —- | C] () – C:\WINDOWS\System32\Herald2.ttf
[2011/12/28 21:36:15 | 000,060,256 | —- | C] () – C:\WINDOWS\System32\Tt1001m2.ttf
[2011/12/28 21:36:15 | 000,054,904 | —- | C] () – C:\WINDOWS\System32\Fifthav2.ttf
[2011/12/28 21:36:15 | 000,048,336 | —- | C] () – C:\WINDOWS\System32\Fitzger2.ttf
[2011/12/28 21:36:15 | 000,041,048 | —- | C] () – C:\WINDOWS\System32\Fillmor2.ttf
[2011/12/28 21:36:15 | 000,039,960 | —- | C] () – C:\WINDOWS\System32\Gasligh2.ttf
[2011/12/28 21:36:15 | 000,039,620 | —- | C] () – C:\WINDOWS\System32\Tt1128m2.ttf
[2011/12/28 21:36:15 | 000,038,712 | —- | C] () – C:\WINDOWS\System32\Francis2.ttf
[2011/12/28 21:36:15 | 000,037,804 | —- | C] () – C:\WINDOWS\System32\Tt1126m2.ttf
[2011/12/28 21:36:15 | 000,037,620 | —- | C] () – C:\WINDOWS\System32\Tt1127m2.ttf
[2011/12/28 21:36:15 | 000,036,920 | —- | C] () – C:\WINDOWS\System32\Tt1129m2.ttf
[2011/12/28 21:36:14 | 000,081,708 | —- | C] () – C:\WINDOWS\System32\Emeri__2.ttf
[2011/12/28 21:36:14 | 000,071,444 | —- | C] () – C:\WINDOWS\System32\Diner__2.ttf
[2011/12/28 21:36:14 | 000,063,540 | —- | C] () – C:\WINDOWS\System32\Crate__2.ttf
[2011/12/28 21:36:14 | 000,058,064 | —- | C] () – C:\WINDOWS\System32\Tt0769m2.ttf
[2011/12/28 21:36:14 | 000,055,824 | —- | C] () – C:\WINDOWS\System32\Cotilli2.ttf
[2011/12/28 21:36:14 | 000,052,944 | —- | C] () – C:\WINDOWS\System32\Executi2.ttf
[2011/12/28 21:36:14 | 000,050,068 | —- | C] () – C:\WINDOWS\System32\Diploma2.ttf
[2011/12/28 21:36:14 | 000,034,940 | —- | C] () – C:\WINDOWS\System32\Tt0628m2.ttf
[2011/12/28 21:36:14 | 000,034,176 | —- | C] () – C:\WINDOWS\System32\Corners2.ttf
[2011/12/28 21:36:14 | 000,033,524 | —- | C] () – C:\WINDOWS\System32\Denmark2.ttf
[2011/12/28 21:36:14 | 000,031,008 | —- | C] () – C:\WINDOWS\System32\Cuckoo2.ttf
[2011/12/28 21:36:13 | 000,062,500 | —- | C] () – C:\WINDOWS\System32\Tt0630m2.ttf
[2011/12/28 21:36:13 | 000,058,272 | —- | C] () – C:\WINDOWS\System32\Tt0579m2.ttf
[2011/12/28 21:36:13 | 000,057,932 | —- | C] () – C:\WINDOWS\System32\Tt0575m2.ttf
[2011/12/28 21:36:13 | 000,056,780 | —- | C] () – C:\WINDOWS\System32\Tt0580m2.ttf
[2011/12/28 21:36:13 | 000,056,708 | —- | C] () – C:\WINDOWS\System32\Tt0576m2.ttf
[2011/12/28 21:36:13 | 000,056,676 | —- | C] () – C:\WINDOWS\System32\Contl__2.ttf
[2011/12/28 21:36:13 | 000,053,008 | —- | C] () – C:\WINDOWS\System32\Tt0757m2.ttf
[2011/12/28 21:36:13 | 000,046,584 | —- | C] () – C:\WINDOWS\System32\Contm__2.ttf
[2011/12/28 21:36:13 | 000,045,908 | —- | C] () – C:\WINDOWS\System32\Contb__2.ttf
[2011/12/28 21:36:13 | 000,044,980 | —- | C] () – C:\WINDOWS\System32\Tt0423m2.ttf
[2011/12/28 21:36:12 | 000,056,552 | —- | C] () – C:\WINDOWS\System32\Christi2.ttf
[2011/12/28 21:36:12 | 000,053,340 | —- | C] () – C:\WINDOWS\System32\Chaucer2.ttf
[2011/12/28 21:36:12 | 000,051,972 | —- | C] () – C:\WINDOWS\System32\Tt0622m2.ttf
[2011/12/28 21:36:12 | 000,051,804 | —- | C] () – C:\WINDOWS\System32\Tt0623m2.ttf
[2011/12/28 21:36:12 | 000,051,416 | —- | C] () – C:\WINDOWS\System32\Tt0620m2.ttf
[2011/12/28 21:36:12 | 000,051,380 | —- | C] () – C:\WINDOWS\System32\Tt0085m2.ttf
[2011/12/28 21:36:12 | 000,051,060 | —- | C] () – C:\WINDOWS\System32\Tt0621m2.ttf
[2011/12/28 21:36:12 | 000,049,844 | —- | C] () – C:\WINDOWS\System32\Tt0086m2.ttf
[2011/12/28 21:36:12 | 000,048,556 | —- | C] () – C:\WINDOWS\System32\Tt0083m2.ttf
[2011/12/28 21:36:12 | 000,048,152 | —- | C] () – C:\WINDOWS\System32\Tt0084m2.ttf
[2011/12/28 21:36:12 | 000,038,944 | —- | C] () – C:\WINDOWS\System32\Cezanne2.ttf
[2011/12/28 21:36:11 | 000,055,696 | —- | C] () – C:\WINDOWS\System32\Tt0280m2.ttf
[2011/12/28 21:36:11 | 000,055,660 | —- | C] () – C:\WINDOWS\System32\Tt0281m2.ttf
[2011/12/28 21:36:11 | 000,055,100 | —- | C] () – C:\WINDOWS\System32\Caesar2.ttf
[2011/12/28 21:36:11 | 000,054,876 | —- | C] () – C:\WINDOWS\System32\Tt0837m2.ttf
[2011/12/28 21:36:11 | 000,050,772 | —- | C] () – C:\WINDOWS\System32\Tt0342m2.ttf
[2011/12/28 21:36:11 | 000,044,960 | —- | C] () – C:\WINDOWS\System32\Tt0131m2.ttf
[2011/12/28 21:36:11 | 000,043,368 | —- | C] () – C:\WINDOWS\System32\Block__2.ttf
[2011/12/28 21:36:11 | 000,042,900 | —- | C] () – C:\WINDOWS\System32\Broadvi2.ttf
[2011/12/28 21:36:11 | 000,040,120 | —- | C] () – C:\WINDOWS\System32\Calligr2.ttf
[2011/12/28 21:36:11 | 000,032,032 | —- | C] () – C:\WINDOWS\System32\Boulder2.ttf
[2011/12/28 21:36:10 | 000,058,612 | —- | C] () – C:\WINDOWS\System32\Tt0607m2.ttf
[2011/12/28 21:36:10 | 000,057,576 | —- | C] () – C:\WINDOWS\System32\Tt0838m2.ttf
[2011/12/28 21:36:10 | 000,055,608 | —- | C] () – C:\WINDOWS\System32\Tt0839m2.ttf
[2011/12/28 21:36:10 | 000,053,416 | —- | C] () – C:\WINDOWS\System32\Tt0329m2.ttf
[2011/12/28 21:36:10 | 000,053,000 | —- | C] () – C:\WINDOWS\System32\Tt0328m2.ttf
[2011/12/28 21:36:10 | 000,046,064 | —- | C] () – C:\WINDOWS\System32\Bazooka2.ttf
[2011/12/28 21:36:10 | 000,043,096 | —- | C] () – C:\WINDOWS\System32\Bavand2.ttf
[2011/12/28 21:36:10 | 000,037,160 | —- | C] () – C:\WINDOWS\System32\Tt0361m2.ttf
[2011/12/28 21:36:10 | 000,037,132 | —- | C] () – C:\WINDOWS\System32\Tt0360m2.ttf
[2011/12/28 21:36:10 | 000,036,372 | —- | C] () – C:\WINDOWS\System32\Tt0359m2.ttf
[2011/12/28 21:36:09 | 000,172,408 | —- | C] () – C:\WINDOWS\System32\Antique2.ttf
[2011/12/28 21:36:09 | 000,064,488 | —- | C] () – C:\WINDOWS\System32\Tt1040m2.ttf
[2011/12/28 21:36:09 | 000,053,528 | —- | C] () – C:\WINDOWS\System32\Tt0330m2.ttf
[2011/12/28 21:36:09 | 000,053,160 | —- | C] () – C:\WINDOWS\System32\Tt0498m2.ttf
[2011/12/28 21:36:09 | 000,050,588 | —- | C] () – C:\WINDOWS\System32\Tt0331m2.ttf
[2011/12/28 21:36:09 | 000,049,908 | —- | C] () – C:\WINDOWS\System32\Tt0500m2.ttf
[2011/12/28 21:36:09 | 000,049,192 | —- | C] () – C:\WINDOWS\System32\Tt0499m2.ttf
[2011/12/28 21:36:09 | 000,037,652 | —- | C] () – C:\WINDOWS\System32\Tt1027m2.ttf
[2011/12/28 02:42:15 | 000,000,280 | —- | C] () – C:\{6F26357D-AE4C-489D-A85F-BFFB6944ADED}
[2011/12/27 02:59:45 | 000,000,069 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2011/12/26 21:58:14 | 000,002,345 | —- | C] () – C:\Documents and Settings\Larry.MAX\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk
[2011/12/23 16:25:41 | 000,000,280 | —- | C] () – C:\{BA9A3762-D117-43E1-A453-D2B199484E55}
[2011/12/23 16:24:07 | 000,000,280 | —- | C] () – C:\{56DD988E-6917-49FD-8002-B4AD3AB52EA6}
[2011/12/23 16:22:32 | 000,000,488 | —- | C] () – C:\{226286FD-C295-4C4F-AA38-DA1BFB85BDBC}
[2011/12/23 13:07:01 | 000,002,672 | —- | C] () – C:\{F84F6E03-A4C6-4846-B2FA-DEE5393BE053}
[2011/12/22 23:31:46 | 000,000,220 | —- | C] () – C:\Boot.bak
[2011/12/22 23:31:43 | 000,260,272 | RHS- | C] () – C:\cmldr
[2011/12/22 16:24:45 | 000,004,864 | —- | C] () – C:\{1DE5B8CD-31FA-48AF-BD4C-CAEF35D50A2E}
[2011/12/22 15:37:21 | 000,004,872 | —- | C] () – C:\{2BB69D3C-B1CF-4FF8-9C02-2AACD60EA54E}
[2011/12/22 14:41:23 | 000,004,872 | —- | C] () – C:\{195EC084-7ECF-41A7-B363-B48529BE0B45}
[2011/12/22 14:18:32 | 000,004,864 | —- | C] () – C:\{CD8CE751-93D8-4F60-9D45-3F944F5C32D9}
[2011/12/22 13:32:37 | 000,004,880 | —- | C] () – C:\{8F732DF0-F487-48D7-B42D-D9C36B928432}
[2011/12/22 11:54:51 | 000,004,864 | —- | C] () – C:\{D1A0043F-1025-4926-80BF-B68F88F46ABA}
[2011/12/22 11:26:45 | 000,004,864 | —- | C] () – C:\{D768DD99-2761-44BA-AADD-F1CCEDBED051}
[2011/12/22 10:44:05 | 000,004,864 | —- | C] () – C:\{0F38997B-DEA6-4C56-8F44-CB51A7450626}
[2011/12/22 10:20:14 | 000,004,872 | —- | C] () – C:\{94E6833C-9B91-4C17-B4F3-7C3A4857851A}
[2011/12/22 04:13:12 | 000,004,864 | —- | C] () – C:\{91FCA3B2-FF36-428B-8DCA-D2088DAE8A0E}
[2011/12/22 04:06:39 | 000,004,880 | —- | C] () – C:\{FAC177BB-8D69-4B0B-B036-C7C205C447FB}
[2011/12/22 03:27:05 | 000,004,880 | —- | C] () – C:\{ECCB689E-DD41-43E0-AF7B-3EC37007668C}
[2011/12/22 03:21:23 | 000,004,872 | —- | C] () – C:\{F5EB4A10-7C5E-4A10-A3B7-0F5B585D6D9F}
[2011/12/22 02:01:39 | 000,004,872 | —- | C] () – C:\{D22A739B-DDE9-460B-BDEC-84254273CFC2}
[2011/12/22 02:00:01 | 000,004,848 | —- | C] () – C:\{A93F24BE-AA13-4846-B85C-82DFCEF8AB94}
[2011/12/22 01:41:28 | 000,004,872 | —- | C] () – C:\{332E52DC-D924-4F49-9CA5-E93FB98B80A3}
[2011/12/21 22:08:37 | 000,004,864 | —- | C] () – C:\{1CB98AF2-13B2-4506-919A-E251DD3E51A3}
[2011/12/21 19:30:50 | 000,004,864 | —- | C] () – C:\{67288E2C-4FA0-428A-8DED-A2AE2166DEBB}
[2011/12/21 17:58:13 | 000,004,872 | —- | C] () – C:\{A812D6E4-3ED5-4AE4-9AFB-47807C00A242}
[2011/12/21 16:18:16 | 000,004,856 | —- | C] () – C:\{663DEDE2-6DA0-47E0-B387-9008AC9FD7A9}
[2011/12/21 14:09:28 | 000,004,864 | —- | C] () – C:\{DF3E1670-B162-4265-A5F0-7C9CC399DE3D}
[2011/12/21 13:35:06 | 000,004,864 | —- | C] () – C:\{2374C9A1-B08E-42B4-89AA-AC2B23693133}
[2011/12/21 09:11:04 | 000,004,880 | —- | C] () – C:\{E66A4D79-30FF-4F4A-826D-DCA0854A46EF}
[2011/12/20 04:01:49 | 000,004,576 | —- | C] () – C:\Documents and Settings\Larry.MAX\Application Data\SMRResults210.dat
[2011/12/20 03:33:10 | 000,004,856 | —- | C] () – C:\{73E3B5E8-B647-4E3E-A30A-0ECF5E14E7DD}
[2011/12/19 23:11:05 | 000,001,984 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/12/19 22:18:57 | 000,014,062 | -HS- | C] () – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\1w86bd6l41q237
[2011/12/19 22:18:57 | 000,014,062 | -HS- | C] () – C:\Documents and Settings\All Users.WINDOWS\Application Data\1w86bd6l41q237
[2011/10/13 12:25:13 | 000,000,000 | —- | C] () – C:\WINDOWS\SMBinder.INI
[2011/10/11 10:39:09 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\FAXMON.DLL
[2011/04/16 22:02:23 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2010/06/13 11:10:01 | 000,098,304 | —- | C] () – C:\WINDOWS\System32\TwcToolbarBho.dll
[2010/06/13 11:10:00 | 000,331,776 | —- | C] () – C:\WINDOWS\System32\TwcToolbarIe7.dll
[2010/02/26 11:07:02 | 000,061,678 | —- | C] () – C:\Documents and Settings\Larry.MAX\Application Data\PFP110JPR.{PB
[2010/02/26 11:07:02 | 000,012,358 | —- | C] () – C:\Documents and Settings\Larry.MAX\Application Data\PFP110JCM.{PB
[2010/02/26 11:05:50 | 000,000,258 | —- | C] () – C:\WINDOWS\System32\BDEMERGE.INI
[2010/02/17 15:30:22 | 000,003,584 | —- | C] () – C:\WINDOWS\System32\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/02/04 10:40:28 | 000,000,025 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2010/01/06 16:39:18 | 000,061,440 | —- | C] () – C:\WINDOWS\wnUninstall.exe
[2009/04/09 10:06:18 | 000,000,029 | —- | C] () – C:\WINDOWS\DEBUGSM.INI
[2008/12/26 23:29:20 | 000,000,057 | —- | C] () – C:\WINDOWS\DcmLtbox-WS.ini
[2008/09/15 22:01:56 | 000,000,028 | —- | C] () – C:\WINDOWS\@loha.ini
[2008/07/21 12:59:44 | 000,100,864 | —- | C] () – C:\WINDOWS\System32\Dc50ip32.dll
[2008/07/21 12:59:44 | 000,065,864 | —- | C] () – C:\WINDOWS\System32\Digita.sys
[2008/07/21 12:59:44 | 000,007,808 | —- | C] () – C:\WINDOWS\System32\dc240u.sys
[2008/07/21 12:59:44 | 000,006,144 | —- | C] () – C:\WINDOWS\System32\ImgLibLead.dll
[2008/07/21 12:59:34 | 000,210,944 | —- | C] () – C:\WINDOWS\System32\MSVCRT10.DLL
[2008/07/21 12:59:34 | 000,048,640 | —- | C] () – C:\WINDOWS\catalogSubInstaller.exe
[2008/07/14 12:38:16 | 000,000,044 | —- | C] () – C:\WINDOWS\System32\msssc.dll
[2008/07/10 11:59:05 | 000,001,061 | —- | C] () – C:\WINDOWS\fpexplor.INI
[2008/07/08 12:52:32 | 000,000,388 | —- | C] () – C:\WINDOWS\frontpg.ini
[2008/07/08 12:45:16 | 000,103,936 | —- | C] () – C:\WINDOWS\System32\JPEGACC.DLL
[2008/07/08 12:45:16 | 000,044,544 | —- | C] () – C:\WINDOWS\System32\IGFPX32S.DLL
[2008/07/08 12:45:15 | 000,316,928 | —- | C] () – C:\WINDOWS\System32\FPXIG.DLL
[2008/07/08 11:33:10 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2008/07/08 09:28:31 | 000,081,920 | —- | C] () – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/07/08 09:19:48 | 000,000,000 | —- | C] () – C:\WINDOWS\ATIMMC.INI
[2008/07/08 05:53:41 | 000,033,797 | —- | C] () – C:\WINDOWS\System32\EPPICPrinterDB.dat
[2008/07/08 05:53:41 | 000,020,910 | —- | C] () – C:\WINDOWS\System32\EPPICPattern2.dat
[2008/07/08 05:53:41 | 000,020,869 | —- | C] () – C:\WINDOWS\System32\EPPICPattern1.dat
[2008/07/08 05:53:41 | 000,000,022 | —- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2008/07/08 05:51:56 | 000,096,768 | —- | C] () – C:\WINDOWS\SlantAdj.dll
[2008/07/08 05:51:56 | 000,003,136 | —- | C] () – C:\WINDOWS\Ade001.bin
[2008/07/08 05:51:56 | 000,000,072 | —- | C] () – C:\WINDOWS\System32\epDPE.ini
[2008/07/08 05:46:59 | 000,000,192 | —- | C] () – C:\WINDOWS\EPSON RX620 Installer.ini
[2008/07/07 21:07:28 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2008/07/07 21:07:13 | 000,444,172 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2008/07/07 21:07:13 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2008/07/07 21:07:13 | 000,070,410 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2008/07/07 21:07:13 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2008/07/07 21:07:08 | 000,004,461 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2008/07/07 21:07:03 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2008/07/07 21:06:55 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2008/07/07 21:06:35 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2008/07/07 21:06:34 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2008/07/07 21:05:57 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2008/07/07 21:05:25 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2008/07/07 19:52:11 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2008/07/07 19:46:03 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2008/07/07 15:16:43 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2008/07/07 15:15:38 | 000,267,008 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2006/02/13 12:29:26 | 000,121,995 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2004/01/28 10:42:06 | 000,066,560 | —- | C] () – C:\WINDOWS\System32\atiyuv12.dll
[2004/01/28 10:42:06 | 000,056,320 | —- | C] () – C:\WINDOWS\System32\iyvu9_32.dll
[2004/01/28 10:42:06 | 000,013,601 | —- | C] () – C:\WINDOWS\System32\vctest.ini
[2003/01/13 13:21:58 | 000,019,968 | —- | C] () – C:\WINDOWS\System32\cpuinf32.dll
[2002/12/12 19:44:30 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2002/05/24 01:00:00 | 000,208,896 | —- | C] () – C:\WINDOWS\System32\lockout.dll
[2002/05/24 01:00:00 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\lockres.dll
[2002/03/26 14:18:28 | 000,091,136 | —- | C] () – C:\WINDOWS\System32\mp4fil32.dll
[2002/01/20 07:26:36 | 000,073,728 | —- | C] () – C:\WINDOWS\System32\SimpleResize.dll
[2001/08/31 15:33:58 | 000,425,984 | —- | C] () – C:\WINDOWS\System32\VxDMDcDlg.dll
[2001/08/14 11:47:08 | 000,020,480 | —- | C] () – C:\WINDOWS\System32\vxpsapi.dll
[2000/04/25 12:58:08 | 000,047,104 | —- | C] () – C:\WINDOWS\System32\Wrkgadm.exe
[1997/02/27 12:13:12 | 000,000,586 | —- | C] () – C:\WINDOWS\3DFAX.INI
========== LOP Check ==========
[2011/05/17 13:34:19 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Applications
[2011/09/11 21:49:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Fighters
[2011/09/08 11:32:16 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Freemake
[2010/11/10 09:43:29 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Instant Doppler Desktop
[2012/01/03 08:02:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\MSScanAppDataDir
[2012/01/18 03:14:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PC1Data
[2008/11/12 11:27:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PCSettings
[2011/09/11 21:51:52 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\{36D85831-9286-474C-9585-E2746B1879FB}
[2011/08/16 07:31:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/12/07 23:57:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\AnvSoft
[2012/01/17 15:29:08 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\BitTorrent
[2011/09/07 06:51:34 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Catalina Marketing Corp
[2011/09/16 12:42:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\CBS Interactive
[2008/07/28 12:07:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/02/15 18:22:34 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Digiarty
[2011/05/17 13:50:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\DNA
[2008/09/10 09:10:45 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\EPSON
[2010/11/11 09:57:53 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Fighters
[2009/03/03 10:44:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\ICQ
[2008/07/08 05:57:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Leadertech
[2012/01/17 17:54:51 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Nullsoft
[2012/01/18 03:15:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\PC Cleaners
[2012/01/18 14:28:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\PCPro
[2009/04/09 10:07:27 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Smart Panel
[2008/07/08 08:32:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\SPAMfighter
[2011/04/28 23:11:33 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Thumbnail me
[2011/04/25 11:42:23 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Tific
[2010/01/15 09:25:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\TweakNow RegCleaner
[2008/11/04 18:08:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\VERITAS
[2012/01/18 15:23:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{CA39505C-B0B6-4CEF-AC1E-AB513ECA8CD1}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2006/05/17 14:50:57 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/12/20 03:38:18 | 000,000,220 | —- | M] () – C:\Boot.bak
[2011/12/22 23:31:47 | 000,000,336 | RHS- | M] () – C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | RHS- | M] () – C:\cmldr
[2006/05/17 14:50:57 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010/03/02 23:43:14 | 000,000,120 | —- | M] () – C:\drmHeader.bin
[2008/07/14 12:34:59 | 000,000,090 | —- | M] () – C:\inf.log
[2006/05/17 14:50:57 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2006/05/17 14:50:57 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/08/04 07:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/07/08 10:27:06 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/01/18 13:39:14 | 2147,483,648 | -HS- | M] () – C:\pagefile.sys
[2012/01/18 13:39:53 | 000,000,627 | —- | M] () – C:\sti.log
[2008/07/02 23:01:17 | 096,801,430 | —- | M] () – C:\SYM_REGISTRY_BACKUP.reg
[2011/04/28 23:01:34 | 000,003,072 | -HS- | M] () – C:\Thumbs.db
[2011/12/30 03:08:06 | 000,000,280 | —- | M] () – C:\{03D8F309-6540-41A1-8675-BDBD23DB3089}
[2012/01/01 21:36:05 | 000,002,248 | —- | M] () – C:\{09F15372-D640-473C-B5B8-055FF589C907}
[2012/01/04 02:00:36 | 000,000,272 | —- | M] () – C:\{0A15DEF3-8EA2-430C-B5A5-B4A17D3EC93F}
[2011/12/22 10:44:05 | 000,004,864 | —- | M] () – C:\{0F38997B-DEA6-4C56-8F44-CB51A7450626}
[2011/12/30 19:21:58 | 000,002,808 | —- | M] () – C:\{18E9942C-359C-455B-939D-F550D500C0E0}
[2011/12/22 14:41:23 | 000,004,872 | —- | M] () – C:\{195EC084-7ECF-41A7-B363-B48529BE0B45}
[2011/09/26 23:50:47 | 000,002,560 | —- | M] () – C:\{1C12FDAE-6B9B-48C1-A761-D3A4E9A20A6F}
[2011/12/21 22:08:37 | 000,004,864 | —- | M] () – C:\{1CB98AF2-13B2-4506-919A-E251DD3E51A3}
[2011/10/26 19:36:31 | 005,974,608 | —- | M] () – C:\{1D21FBD3-88EF-47D9-A3E7-B98BC905B01B}
[2011/12/01 15:19:51 | 000,030,904 | —- | M] () – C:\{1DE2A903-D03E-4737-88F1-892F0A851288}
[2011/12/22 16:24:45 | 000,004,864 | —- | M] () – C:\{1DE5B8CD-31FA-48AF-BD4C-CAEF35D50A2E}
[2011/12/23 16:22:32 | 000,000,488 | —- | M] () – C:\{226286FD-C295-4C4F-AA38-DA1BFB85BDBC}
[2011/12/21 13:35:06 | 000,004,864 | —- | M] () – C:\{2374C9A1-B08E-42B4-89AA-AC2B23693133}
[2011/07/12 07:17:44 | 000,000,280 | —- | M] () – C:\{280832E3-02B8-44FF-A024-8764552DE1FE}
[2011/12/22 15:37:21 | 000,004,872 | —- | M] () – C:\{2BB69D3C-B1CF-4FF8-9C02-2AACD60EA54E}
[2011/12/22 01:41:28 | 000,004,872 | —- | M] () – C:\{332E52DC-D924-4F49-9CA5-E93FB98B80A3}
[2012/01/02 03:01:22 | 000,000,280 | —- | M] () – C:\{352E854E-683E-44E9-ABCA-A746EAAC5A0B}
[2011/09/12 02:13:20 | 000,000,272 | —- | M] () – C:\{36200277-2D08-4BB7-AB8C-F1788068739B}
[2012/01/02 02:58:49 | 000,000,280 | —- | M] () – C:\{4F81ECBB-D96F-45C3-AAFE-D76CC507C7E8}
[2011/10/16 01:53:49 | 000,000,280 | —- | M] () – C:\{5132061D-3F22-4B76-A854-47B49F743FBE}
[2012/01/04 12:22:52 | 000,000,272 | —- | M] () – C:\{529A0076-A5B9-41B6-9CCD-EF61D23D9653}
[2011/12/23 16:24:07 | 000,000,280 | —- | M] () – C:\{56DD988E-6917-49FD-8002-B4AD3AB52EA6}
[2012/01/02 03:00:04 | 000,000,280 | —- | M] () – C:\{57E31AB6-2175-4F51-A8EA-920625AD0B5C}
[2012/01/04 02:01:38 | 000,000,272 | —- | M] () – C:\{62F54313-1962-4FAF-8D0E-F669E0388F6E}
[2011/12/21 16:18:16 | 000,004,856 | —- | M] () – C:\{663DEDE2-6DA0-47E0-B387-9008AC9FD7A9}
[2011/12/21 19:30:50 | 000,004,864 | —- | M] () – C:\{67288E2C-4FA0-428A-8DED-A2AE2166DEBB}
[2011/12/28 02:42:15 | 000,000,280 | —- | M] () – C:\{6F26357D-AE4C-489D-A85F-BFFB6944ADED}
[2011/12/20 03:33:10 | 000,004,856 | —- | M] () – C:\{73E3B5E8-B647-4E3E-A30A-0ECF5E14E7DD}
[2011/12/30 22:39:32 | 000,002,736 | —- | M] () – C:\{7C427D0D-6996-4914-8D1E-7AA2B92A678E}
[2011/10/26 19:18:16 | 000,000,280 | —- | M] () – C:\{885FAD4A-40BC-439F-B162-AB33D316104D}
[2012/01/02 02:57:12 | 000,000,280 | —- | M] () – C:\{8C2FBEF8-A2F5-48FA-9418-323742B40FB2}
[2011/08/19 07:07:00 | 000,002,560 | —- | M] () – C:\{8D0897BC-CD8C-455F-9C4E-35537A128C5B}
[2011/12/22 13:32:37 | 000,004,880 | —- | M] () – C:\{8F732DF0-F487-48D7-B42D-D9C36B928432}
[2011/12/22 04:13:12 | 000,004,864 | —- | M] () – C:\{91FCA3B2-FF36-428B-8DCA-D2088DAE8A0E}
[2012/01/01 03:57:19 | 000,000,272 | —- | M] () – C:\{92D06403-2389-457C-9031-3FFB62BC4A15}
[2011/12/22 10:20:14 | 000,004,872 | —- | M] () – C:\{94E6833C-9B91-4C17-B4F3-7C3A4857851A}
[2011/10/27 03:34:18 | 000,000,280 | —- | M] () – C:\{9817FEFA-8127-4BFB-9585-8EEC4E03D12F}
[2011/12/30 12:13:13 | 000,002,808 | —- | M] () – C:\{A01265E5-1537-4F7C-BE0E-814F6DAABA1A}
[2011/12/21 17:58:13 | 000,004,872 | —- | M] () – C:\{A812D6E4-3ED5-4AE4-9AFB-47807C00A242}
[2011/12/22 02:00:01 | 000,004,848 | —- | M] () – C:\{A93F24BE-AA13-4846-B85C-82DFCEF8AB94}
[2012/01/03 10:04:15 | 000,000,440 | —- | M] () – C:\{B50A5443-AA89-4A4D-AD67-BEEDBDF4E911}
[2011/12/23 16:25:41 | 000,000,280 | —- | M] () – C:\{BA9A3762-D117-43E1-A453-D2B199484E55}
[2011/07/28 01:42:28 | 000,000,272 | —- | M] () – C:\{BDEBAE23-E068-442A-8A40-EB7E3CD157F3}
[2011/12/30 10:21:53 | 000,002,720 | —- | M] () – C:\{CABF6429-E349-4513-8B67-505472461A74}
[2011/12/22 14:18:32 | 000,004,864 | —- | M] () – C:\{CD8CE751-93D8-4F60-9D45-3F944F5C32D9}
[2011/12/22 11:54:51 | 000,004,864 | —- | M] () – C:\{D1A0043F-1025-4926-80BF-B68F88F46ABA}
[2011/12/22 02:01:39 | 000,004,872 | —- | M] () – C:\{D22A739B-DDE9-460B-BDEC-84254273CFC2}
[2011/12/22 11:26:45 | 000,004,864 | —- | M] () – C:\{D768DD99-2761-44BA-AADD-F1CCEDBED051}
[2011/12/21 14:09:28 | 000,004,864 | —- | M] () – C:\{DF3E1670-B162-4265-A5F0-7C9CC399DE3D}
[2011/12/21 09:11:04 | 000,004,880 | —- | M] () – C:\{E66A4D79-30FF-4F4A-826D-DCA0854A46EF}
[2012/01/04 23:57:49 | 000,002,560 | —- | M] () – C:\{E90043D8-6516-4199-8C6A-C3BDA988CECC}
[2011/12/22 03:27:05 | 000,004,880 | —- | M] () – C:\{ECCB689E-DD41-43E0-AF7B-3EC37007668C}
[2012/01/05 01:01:12 | 000,031,712 | —- | M] () – C:\{F2DFA54A-2B64-4325-998C-84CC7A647949}
[2012/01/04 19:31:26 | 000,002,576 | —- | M] () – C:\{F51568F8-53AF-417A-B360-13CEDC8154EF}
[2011/12/22 03:21:23 | 000,004,872 | —- | M] () – C:\{F5EB4A10-7C5E-4A10-A3B7-0F5B585D6D9F}
[2011/12/23 13:07:01 | 000,002,672 | —- | M] () – C:\{F84F6E03-A4C6-4846-B2FA-DEE5393BE053}
[2011/12/22 04:06:39 | 000,004,880 | —- | M] () – C:\{FAC177BB-8D69-4B0B-B036-C7C205C447FB}
[2011/09/26 02:14:59 | 000,002,720 | —- | M] () – C:\{FB3C55A8-6D78-41EF-9C46-FFC6792F8FF7}
< %systemroot%\Fonts\*.com >
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2008/07/07 19:48:26 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2003/06/18 17:31:48 | 000,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[1999/11/30 13:54:10 | 000,072,704 | —- | M] () – C:\WINDOWS\PhotoDeluxe.scr
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2008/09/09 14:37:35 | 000,774,144 | —- | M] (RealNetworks, Inc.) – C:\Program Files\RngInterstitial.dll
[2011/04/28 23:01:31 | 000,010,240 | -HS- | M] () – C:\Program Files\Thumbs.db
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2008/07/07 15:14:36 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2008/07/07 15:14:36 | 000,659,456 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2008/07/07 15:14:36 | 000,913,408 | —- | M] () – C:\WINDOWS\System32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/07/08 10:39:45 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
[2011/01/14 23:33:20 | 000,005,120 | -HS- | M] () – C:\WINDOWS\system32\Thumbs.db
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/07/07 20:05:35 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2008/07/07 20:05:34 | 000,000,079 | —- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-01-17 23:13:57
< End of report >
redmax1
OTL logfile created on: 1/18/2012 3:17:06 PM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Larry.MAX\Desktop\WhatTheTech
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
1022.80 Mb Total Physical Memory | 360.72 Mb Available Physical Memory | 35.27% Memory free
2.90 Gb Paging File | 2.49 Gb Available in Paging File | 85.68% Paging File free
Paging file location(s): C:\pagefile.sys 2048 4096 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 232.88 Gb Total Space | 211.28 Gb Free Space | 90.72% Space Free | Partition Type: NTFS
Drive E: | 114.49 Gb Total Space | 33.27 Gb Free Space | 29.06% Space Free | Partition Type: NTFS
Drive F: | 189.92 Gb Total Space | 73.92 Gb Free Space | 38.92% Space Free | Partition Type: NTFS
Drive G: | 233.76 Gb Total Space | 63.55 Gb Free Space | 27.19% Space Free | Partition Type: NTFS
Computer Name: MAX | User Name: Larry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - C:\Documents and Settings\Larry.MAX\Desktop\WhatTheTech\OTL.exe (OldTimer Tools)
PRC - C:\Documents and Settings\All Users.WINDOWS\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Freemake)
PRC - C:\Program Files\Fighters\FighterSuiteService.exe (SPAMfighter ApS)
PRC - C:\Program Files\Fighters\SPAMfighter\sfus.exe (SPAMfighter ApS)
PRC - C:\Program Files\Fighters\SPAMfighter\sfagent.exe (SPAMfighter ApS)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Norton 360\Engine\5.1.0.29\ccsvchst.exe (Symantec Corporation)
PRC - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
PRC - C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
PRC - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\ATnotes\ATnotes.exe (Thomas Ascher)
========== Modules (No Company Name) ==========
MOD - C:\Program Files\Fighters\SPAMfighter\sfse.dll ()
MOD - C:\Program Files\Fighters\SPAMfighter\sfsg.dll ()
MOD - C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\WINDOWS\system32\devenum.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\WINDOWS\system32\FAXMON.DLL ()
========== Win32 Services (SafeList) ==========
SRV - (JavaQuickStarterService) – C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (FreemakeUtilsService) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Freemake)
SRV - (Suite Service) – C:\Program Files\Fighters\FighterSuiteService.exe (SPAMfighter ApS)
SRV - (SPAMfighter Update Service) – C:\Program Files\Fighters\SPAMfighter\sfus.exe (SPAMfighter ApS)
SRV - (N360) – C:\Program Files\Norton 360\Engine\5.1.0.29\ccSvcHst.exe (Symantec Corporation)
SRV - (PMBDeviceInfoProvider) – C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
SRV - (Nero BackItUp Scheduler 4.0) – C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
========== Driver Services (SafeList) ==========
DRV - (NAVEX15) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120118.001\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120118.001\NAVENG.SYS (Symantec Corporation)
DRV - (BHDrvx86) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20111223.001\BHDrvx86.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (IDSxpx86) – C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20120117.002\IDSXpx86.sys (Symantec Corporation)
DRV - (SymEvent) – C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\WINDOWS\System32\Drivers\N360\0501000.01D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\WINDOWS\system32\drivers\N360\0501000.01D\SRTSPX.SYS (Symantec Corporation)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\N360\0501000.01D\SYMTDI.SYS (Symantec Corporation)
DRV - (SymEFA) – C:\WINDOWS\system32\drivers\N360\0501000.01D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymDS) – C:\WINDOWS\system32\drivers\N360\0501000.01D\SYMDS.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\WINDOWS\system32\drivers\N360\0501000.01D\Ironx86.SYS (Symantec Corporation)
DRV - (SiFilter) – C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys (Silicon Image, Inc)
DRV - (SiRemFil) – C:\WINDOWS\system32\DRIVERS\SiRemFil.sys (Silicon Image, Inc)
DRV - (SI3112) – C:\WINDOWS\system32\DRIVERS\SI3112.sys (Silicon Image, Inc)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (P1110VID) – C:\WINDOWS\system32\drivers\P1110Vid.sys (Creative Technology Ltd.)
DRV - (cdudf_xp) – C:\WINDOWS\System32\drivers\Cdudf_xp.sys (Roxio)
DRV - (UdfReadr_xp) – C:\WINDOWS\System32\drivers\UdfReadr_xp.sys (Roxio)
DRV - (pwd_2k) – C:\WINDOWS\System32\drivers\pwd_2K.sys (Roxio)
DRV - (mmc_2K) – C:\WINDOWS\System32\drivers\Mmc_2k.sys (Roxio)
DRV - (dvd_2K) – C:\WINDOWS\System32\drivers\Dvd_2k.sys (Roxio)
DRV - (pfc) – C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (IdeChnDr) Intel® – C:\WINDOWS\system32\DRIVERS\IdeChnDr.sys (Intel Corporation)
DRV - (IdeBusDr) – C:\WINDOWS\system32\DRIVERS\IdeBusDr.sys (Intel Corporation)
DRV - (HCF_MSFT) – C:\WINDOWS\system32\drivers\HCF_MSFT.sys (Conexant)
DRV - (dmsmbios) – C:\WINDOWS\system32\dmsmbios.sys (Intel Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.rr.com/index.cfm
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Bing"
FF - prefs.js..browser.startup.homepage: "http://www.rr.com/index.cfm"
FF - prefs.js..network.proxy.type: 0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/npracplug;version=1.0.0.0: C:\Program Files\Real\RealArcade\Plugins\Mozilla\npracplug.dll (RealNetworks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPlgn\ [2011/09/27 15:28:00 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users.WINDOWS\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn_2011_7_4_3 [2012/01/18 13:39:51 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/12/29 08:32:17 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/01/12 22:33:53 | 000,000,000 | —D | M]
[2011/04/16 22:03:19 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Larry.MAX\Application Data\Mozilla\Extensions
[2011/07/27 02:18:16 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Larry.MAX\Application Data\Mozilla\Firefox\Profiles\8kf06vey.default\extensions
[2011/07/27 01:41:46 | 000,002,469 | —- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\Mozilla\Firefox\Profiles\8kf06vey.default\searchplugins\safesearch.xml
[2011/04/16 22:02:11 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
File not found (No name found) – C:\DOCUMENTS AND SETTINGS\ALL USERS.WINDOWS\APPLICATION DATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\COFFPLGN_2011_7_1_3
[2011/09/27 15:28:00 | 000,000,000 | —D | M] (Symantec IPS) – C:\DOCUMENTS AND SETTINGS\ALL USERS.WINDOWS\APPLICATION DATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPLGN
() (No name found) – C:\DOCUMENTS AND SETTINGS\LARRY.MAX\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\8KF06VEY.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI
[2011/08/17 10:25:14 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/09/07 06:51:34 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files\mozilla firefox\plugins\NPcol400.dll
[2011/07/13 17:52:56 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\mozilla firefox\plugins\npCouponPrinter.dll
[2011/07/13 17:52:58 | 000,091,552 | —- | M] (Coupons, Inc.) – C:\Program Files\mozilla firefox\plugins\npMozCouponPrinter.dll
[2011/08/08 23:51:39 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
O1 HOSTS File: ([2011/12/22 18:01:24 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\5.1.0.29\ips\ipsbho.dll (Symantec Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O2 - BHO: (no name) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - No CLSID value found.
O3 - HKLM\..\Toolbar: (The Weather Channel Toolbar) - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll ()
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\5.1.0.29\coieplg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\epson\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O4 - HKLM..\Run: [sfagent] C:\Program Files\Fighters\SPAMfighter\sfagent.exe (SPAMfighter ApS)
O4 - HKCU..\Run: [ATI Launchpad] C:\Program Files\ATI Multimedia\main\launchpd.exe (ATI Technologies Inc.)
O4 - HKCU..\Run: [ATnotes.exe] C:\Program Files\ATnotes\ATnotes.exe (Thomas Ascher)
O4 - HKCU..\RunOnce: [118_14158901632489] C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\LogMeIn Rescue Applet\LMIR0001.tmp_r.bat ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - Reg Error: Key error. File not found
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://fpdownload.macromedia.com/get/shock…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {16F67783-7E72-4C39-99C4-4780A8335484} http://www.syncmyride.com/Own/Modules/Uplo…pplets/sync.cab (SyncXfer Class)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {315B0BFB-2BD4-481B-80A3-A9B80727C61B} http://webiq005.webiqonline.com/WebIQ/Data…6-6D5536C585C9} (WebIQ Engine Application Object)
O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} https://webdl.symantec.com/activex/symdlmgr.cab (Symantec Download Manager)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flash…t/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {A7EA8AD2-287F-11D3-B120-006008C39542} http://offers.e-centives.com/cif/download/bin/actxcab.cab (CBSTIEPrint Class)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8072E46F-97C6-4CF2-9D15-83E5E1508F7E}: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/05/17 14:50:57 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: MIDI1 - C:\WINDOWS\System32\Syncor11.dll (SoundMAX)
Drivers32: msacm.ac3filter - C:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Ligos Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\System32\l3codeca.acm (Kristal Studio)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.D263 - C:\WINDOWS\System32\xl_x263dec.dll (Xirlink, Inc.)
Drivers32: vidc.DIVX - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.DRAW - DVIDEO.DLL File not found
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Ligos Corporation)
Drivers32: VIDC.VCR1 - ATIVCR1.DLL File not found
Drivers32: VIDC.VCR2 - ATIVCR2.DLL File not found
Drivers32: VIDC.WMV3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)
Drivers32: VIDC.YU12 - C:\WINDOWS\System32\atiyuv12.dll ()
Drivers32: vidc.yv12 - C:\WINDOWS\System32\DivX.dll (DivX, Inc.)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012/01/18 14:19:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\LogMeIn Rescue Applet
[2012/01/18 03:15:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\PCPro
[2012/01/18 03:15:16 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\PC Cleaners
[2012/01/18 03:13:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PC1Data
[2012/01/17 23:07:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\DivX Plus
[2012/01/17 23:07:16 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DivX Shared
[2012/01/17 22:39:25 | 000,072,176 | —- | C] (Sonic Solutions) – C:\WINDOWS\System32\pxhpinst.exe
[2012/01/17 22:25:40 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\vlc
[2012/01/17 22:25:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\VideoLAN
[2012/01/17 17:54:51 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\Nullsoft
[2012/01/17 01:43:48 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Start Menu\Programs\WMV9 VCM
[2012/01/17 01:43:46 | 000,000,000 | —D | C] – C:\Program Files\WMV9_VCM
[2012/01/16 23:34:13 | 000,000,000 | —D | C] – C:\WINDOWS\System32\quicktime
[2012/01/11 03:28:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\PCHealth
[2012/01/03 19:48:42 | 000,354,176 | —- | C] (DivX, Inc.) – C:\WINDOWS\System32\DivXControlPanelApplet.cpl
[2012/01/03 08:02:50 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\MSScanAppDataDir
[2011/12/31 03:01:17 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\My Documents\Fax
[2011/12/31 02:51:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\My Documents\Faxes Recieved
[2011/12/31 02:43:32 | 000,000,000 | —D | C] – C:\WINDOWS\System32\FxsTmp
[2011/12/31 02:43:15 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsclntR.dll
[2011/12/31 02:43:15 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2011/12/31 02:43:15 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxsroute.dll
[2011/12/31 02:43:15 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2011/12/31 02:43:15 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxssend.exe
[2011/12/31 02:43:15 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2011/12/31 02:43:14 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fxscfgwz.dll
[2011/12/31 02:43:14 | 000,111,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2011/12/28 21:33:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\WINDOWS
[2011/12/26 22:08:49 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\Nero
[2011/12/26 21:58:14 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Nero
[2011/12/26 21:57:41 | 000,000,000 | —D | C] – C:\Program Files\Nero
[2011/12/26 21:56:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Nero
[2011/12/26 21:56:36 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Nero
[2011/12/23 20:40:28 | 000,000,000 | —D | C] – C:\Program Files\Free Offers from RI Soft Systems
[2011/12/23 16:03:29 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2011/12/23 15:45:07 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Application Data\Malwarebytes
[2011/12/23 15:44:40 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/12/23 15:44:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes
[2011/12/23 15:44:35 | 000,020,464 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2011/12/23 15:44:35 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2011/12/23 15:15:17 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\Sun
[2011/12/23 15:12:14 | 000,637,848 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\npdeployJava1.dll
[2011/12/23 15:12:14 | 000,223,112 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2011/12/23 15:12:14 | 000,173,960 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2011/12/23 15:12:14 | 000,173,960 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2011/12/23 15:12:14 | 000,141,312 | —- | C] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2011/12/23 13:59:43 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2011/12/22 23:31:40 | 000,000,000 | RHSD | C] – C:\cmdcons
[2011/12/22 17:29:36 | 000,000,000 | —D | C] – C:\WINDOWS\ERDNT
[2011/12/22 15:31:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Desktop\Noodle Tech
[2011/12/22 13:33:37 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Desktop\WhatTheTech
[2011/12/21 13:55:12 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Desktop\Virus Tools
[2011/12/21 03:32:44 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Larry.MAX\Recent
[2011/12/21 01:01:17 | 000,064,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\serial.sys
[2011/12/21 01:00:37 | 000,033,280 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rundll32.exe
[2011/12/19 20:13:43 | 000,000,000 | —D | C] – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\NPE
[2008/09/09 14:37:57 | 000,774,144 | —- | C] (RealNetworks, Inc.) – C:\Program Files\RngInterstitial.dll
========== Files - Modified Within 30 Days ==========
[2012/01/18 15:23:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{CA39505C-B0B6-4CEF-AC1E-AB513ECA8CD1}.job
[2012/01/18 13:41:17 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/01/18 13:39:23 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/01/18 03:13:34 | 005,276,432 | —- | M] (PC Cleaners) – C:\WINDOWS\uninst.exe
[2012/01/18 01:55:56 | 000,000,134 | —- | M] () – C:\Documents and Settings\Larry.MAX\Desktop\Microsoft Fix it.url
[2012/01/17 22:09:54 | 000,267,008 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/01/17 17:45:11 | 000,081,920 | —- | M] () – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/01/13 14:47:03 | 000,444,172 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/01/13 14:47:03 | 000,070,410 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/01/11 03:10:51 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2012/01/06 01:58:45 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/01/05 01:01:12 | 000,031,712 | —- | M] () – C:\{F2DFA54A-2B64-4325-998C-84CC7A647949}
[2012/01/04 23:57:49 | 000,002,560 | —- | M] () – C:\{E90043D8-6516-4199-8C6A-C3BDA988CECC}
[2012/01/04 19:31:26 | 000,002,576 | —- | M] () – C:\{F51568F8-53AF-417A-B360-13CEDC8154EF}
[2012/01/04 15:57:55 | 000,009,662 | —- | M] () – C:\WINDOWS\EPISME00.SWB
[2012/01/04 12:22:52 | 000,000,272 | —- | M] () – C:\{529A0076-A5B9-41B6-9CCD-EF61D23D9653}
[2012/01/04 02:01:38 | 000,000,272 | —- | M] () – C:\{62F54313-1962-4FAF-8D0E-F669E0388F6E}
[2012/01/04 02:00:36 | 000,000,272 | —- | M] () – C:\{0A15DEF3-8EA2-430C-B5A5-B4A17D3EC93F}
[2012/01/03 19:48:42 | 000,354,176 | —- | M] (DivX, Inc.) – C:\WINDOWS\System32\DivXControlPanelApplet.cpl
[2012/01/03 10:04:15 | 000,000,440 | —- | M] () – C:\{B50A5443-AA89-4A4D-AD67-BEEDBDF4E911}
[2012/01/03 08:09:14 | 000,001,071 | —- | M] () – C:\WINDOWS\AWMODEM.INF
[2012/01/02 03:01:22 | 000,000,280 | —- | M] () – C:\{352E854E-683E-44E9-ABCA-A746EAAC5A0B}
[2012/01/02 03:00:04 | 000,000,280 | —- | M] () – C:\{57E31AB6-2175-4F51-A8EA-920625AD0B5C}
[2012/01/02 02:58:49 | 000,000,280 | —- | M] () – C:\{4F81ECBB-D96F-45C3-AAFE-D76CC507C7E8}
[2012/01/02 02:57:12 | 000,000,280 | —- | M] () – C:\{8C2FBEF8-A2F5-48FA-9418-323742B40FB2}
[2012/01/01 21:36:05 | 000,002,248 | —- | M] () – C:\{09F15372-D640-473C-B5B8-055FF589C907}
[2012/01/01 03:57:19 | 000,000,272 | —- | M] () – C:\{92D06403-2389-457C-9031-3FFB62BC4A15}
[2011/12/31 02:43:32 | 000,001,078 | —- | M] () – C:\WINDOWS\System32\mapisvc.inf
[2011/12/30 22:39:32 | 000,002,736 | —- | M] () – C:\{7C427D0D-6996-4914-8D1E-7AA2B92A678E}
[2011/12/30 19:21:58 | 000,002,808 | —- | M] () – C:\{18E9942C-359C-455B-939D-F550D500C0E0}
[2011/12/30 12:13:13 | 000,002,808 | —- | M] () – C:\{A01265E5-1537-4F7C-BE0E-814F6DAABA1A}
[2011/12/30 10:21:53 | 000,002,720 | —- | M] () – C:\{CABF6429-E349-4513-8B67-505472461A74}
[2011/12/30 03:08:06 | 000,000,280 | —- | M] () – C:\{03D8F309-6540-41A1-8675-BDBD23DB3089}
[2011/12/29 12:15:17 | 000,007,246 | —- | M] () – C:\WINDOWS\System32\EPPICResdb0000
[2011/12/29 12:15:17 | 000,000,120 | —- | M] () – C:\WINDOWS\System32\EPPICResdb
[2011/12/29 11:22:23 | 000,000,030 | —- | M] () – C:\WINDOWS\MAIN.INI
[2011/12/29 11:17:06 | 000,000,586 | —- | M] () – C:\WINDOWS\3DFAX.INI
[2011/12/29 03:05:21 | 000,000,069 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/12/28 02:42:15 | 000,000,280 | —- | M] () – C:\{6F26357D-AE4C-489D-A85F-BFFB6944ADED}
[2011/12/26 21:58:14 | 000,002,345 | —- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk
[2011/12/23 16:25:41 | 000,000,280 | —- | M] () – C:\{BA9A3762-D117-43E1-A453-D2B199484E55}
[2011/12/23 16:24:07 | 000,000,280 | —- | M] () – C:\{56DD988E-6917-49FD-8002-B4AD3AB52EA6}
[2011/12/23 16:22:32 | 000,000,488 | —- | M] () – C:\{226286FD-C295-4C4F-AA38-DA1BFB85BDBC}
[2011/12/23 15:12:03 | 000,637,848 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\npdeployJava1.dll
[2011/12/23 15:12:03 | 000,567,184 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\deployJava1.dll
[2011/12/23 15:12:03 | 000,223,112 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaws.exe
[2011/12/23 15:12:03 | 000,173,960 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javaw.exe
[2011/12/23 15:12:03 | 000,173,960 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\java.exe
[2011/12/23 15:12:03 | 000,141,312 | —- | M] (Oracle Corporation) – C:\WINDOWS\System32\javacpl.cpl
[2011/12/23 13:07:01 | 000,002,672 | —- | M] () – C:\{F84F6E03-A4C6-4846-B2FA-DEE5393BE053}
[2011/12/22 23:31:47 | 000,000,336 | RHS- | M] () – C:\boot.ini
[2011/12/22 18:01:24 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2011/12/22 17:30:02 | 000,001,984 | —- | M] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/12/22 16:24:45 | 000,004,864 | —- | M] () – C:\{1DE5B8CD-31FA-48AF-BD4C-CAEF35D50A2E}
[2011/12/22 15:37:21 | 000,004,872 | —- | M] () – C:\{2BB69D3C-B1CF-4FF8-9C02-2AACD60EA54E}
[2011/12/22 14:41:23 | 000,004,872 | —- | M] () – C:\{195EC084-7ECF-41A7-B363-B48529BE0B45}
[2011/12/22 14:18:32 | 000,004,864 | —- | M] () – C:\{CD8CE751-93D8-4F60-9D45-3F944F5C32D9}
[2011/12/22 13:32:37 | 000,004,880 | —- | M] () – C:\{8F732DF0-F487-48D7-B42D-D9C36B928432}
[2011/12/22 11:54:51 | 000,004,864 | —- | M] () – C:\{D1A0043F-1025-4926-80BF-B68F88F46ABA}
[2011/12/22 11:26:45 | 000,004,864 | —- | M] () – C:\{D768DD99-2761-44BA-AADD-F1CCEDBED051}
[2011/12/22 10:44:05 | 000,004,864 | —- | M] () – C:\{0F38997B-DEA6-4C56-8F44-CB51A7450626}
[2011/12/22 10:20:14 | 000,004,872 | —- | M] () – C:\{94E6833C-9B91-4C17-B4F3-7C3A4857851A}
[2011/12/22 04:13:12 | 000,004,864 | —- | M] () – C:\{91FCA3B2-FF36-428B-8DCA-D2088DAE8A0E}
[2011/12/22 04:06:39 | 000,004,880 | —- | M] () – C:\{FAC177BB-8D69-4B0B-B036-C7C205C447FB}
[2011/12/22 03:27:05 | 000,004,880 | —- | M] () – C:\{ECCB689E-DD41-43E0-AF7B-3EC37007668C}
[2011/12/22 03:21:23 | 000,004,872 | —- | M] () – C:\{F5EB4A10-7C5E-4A10-A3B7-0F5B585D6D9F}
[2011/12/22 02:01:39 | 000,004,872 | —- | M] () – C:\{D22A739B-DDE9-460B-BDEC-84254273CFC2}
[2011/12/22 02:00:01 | 000,004,848 | —- | M] () – C:\{A93F24BE-AA13-4846-B85C-82DFCEF8AB94}
[2011/12/22 01:41:28 | 000,004,872 | —- | M] () – C:\{332E52DC-D924-4F49-9CA5-E93FB98B80A3}
[2011/12/21 22:08:37 | 000,004,864 | —- | M] () – C:\{1CB98AF2-13B2-4506-919A-E251DD3E51A3}
[2011/12/21 19:30:50 | 000,004,864 | —- | M] () – C:\{67288E2C-4FA0-428A-8DED-A2AE2166DEBB}
[2011/12/21 17:58:13 | 000,004,872 | —- | M] () – C:\{A812D6E4-3ED5-4AE4-9AFB-47807C00A242}
[2011/12/21 16:18:16 | 000,004,856 | —- | M] () – C:\{663DEDE2-6DA0-47E0-B387-9008AC9FD7A9}
[2011/12/21 14:09:28 | 000,004,864 | —- | M] () – C:\{DF3E1670-B162-4265-A5F0-7C9CC399DE3D}
[2011/12/21 13:35:06 | 000,004,864 | —- | M] () – C:\{2374C9A1-B08E-42B4-89AA-AC2B23693133}
[2011/12/21 09:11:04 | 000,004,880 | —- | M] () – C:\{E66A4D79-30FF-4F4A-826D-DCA0854A46EF}
[2011/12/20 04:02:01 | 000,004,576 | —- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\SMRResults210.dat
[2011/12/20 03:49:12 | 000,014,062 | -HS- | M] () – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\1w86bd6l41q237
[2011/12/20 03:49:12 | 000,014,062 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS\Application Data\1w86bd6l41q237
[2011/12/20 03:38:18 | 000,000,220 | —- | M] () – C:\Boot.bak
[2011/12/20 03:33:10 | 000,004,856 | —- | M] () – C:\{73E3B5E8-B647-4E3E-A30A-0ECF5E14E7DD}
[2011/12/19 21:35:08 | 000,138,991 | —- | M] () – C:\WINDOWS\System32\AdobeFnt.lst
========== Files Created - No Company Name ==========
[2012/01/18 01:55:56 | 000,000,134 | —- | C] () – C:\Documents and Settings\Larry.MAX\Desktop\Microsoft Fix it.url
[2012/01/12 22:33:53 | 000,001,804 | —- | C] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\Adobe Reader 9.lnk
[2012/01/05 01:01:12 | 000,031,712 | —- | C] () – C:\{F2DFA54A-2B64-4325-998C-84CC7A647949}
[2012/01/04 23:57:49 | 000,002,560 | —- | C] () – C:\{E90043D8-6516-4199-8C6A-C3BDA988CECC}
[2012/01/04 19:31:26 | 000,002,576 | —- | C] () – C:\{F51568F8-53AF-417A-B360-13CEDC8154EF}
[2012/01/04 12:22:52 | 000,000,272 | —- | C] () – C:\{529A0076-A5B9-41B6-9CCD-EF61D23D9653}
[2012/01/04 02:01:38 | 000,000,272 | —- | C] () – C:\{62F54313-1962-4FAF-8D0E-F669E0388F6E}
[2012/01/04 02:00:36 | 000,000,272 | —- | C] () – C:\{0A15DEF3-8EA2-430C-B5A5-B4A17D3EC93F}
[2012/01/03 10:04:15 | 000,000,440 | —- | C] () – C:\{B50A5443-AA89-4A4D-AD67-BEEDBDF4E911}
[2012/01/03 08:09:14 | 000,001,071 | —- | C] () – C:\WINDOWS\AWMODEM.INF
[2012/01/02 03:01:22 | 000,000,280 | —- | C] () – C:\{352E854E-683E-44E9-ABCA-A746EAAC5A0B}
[2012/01/02 03:00:04 | 000,000,280 | —- | C] () – C:\{57E31AB6-2175-4F51-A8EA-920625AD0B5C}
[2012/01/02 02:58:49 | 000,000,280 | —- | C] () – C:\{4F81ECBB-D96F-45C3-AAFE-D76CC507C7E8}
[2012/01/02 02:57:12 | 000,000,280 | —- | C] () – C:\{8C2FBEF8-A2F5-48FA-9418-323742B40FB2}
[2012/01/01 21:36:05 | 000,002,248 | —- | C] () – C:\{09F15372-D640-473C-B5B8-055FF589C907}
[2012/01/01 03:57:19 | 000,000,272 | —- | C] () – C:\{92D06403-2389-457C-9031-3FFB62BC4A15}
[2011/12/31 02:43:15 | 000,001,793 | —- | C] () – C:\WINDOWS\System32\fxsperf.ini
[2011/12/31 02:43:15 | 000,001,361 | —- | C] () – C:\WINDOWS\System32\fxscount.h
[2011/12/30 22:39:32 | 000,002,736 | —- | C] () – C:\{7C427D0D-6996-4914-8D1E-7AA2B92A678E}
[2011/12/30 19:21:58 | 000,002,808 | —- | C] () – C:\{18E9942C-359C-455B-939D-F550D500C0E0}
[2011/12/30 12:13:13 | 000,002,808 | —- | C] () – C:\{A01265E5-1537-4F7C-BE0E-814F6DAABA1A}
[2011/12/30 10:21:53 | 000,002,720 | —- | C] () – C:\{CABF6429-E349-4513-8B67-505472461A74}
[2011/12/30 03:08:06 | 000,000,280 | —- | C] () – C:\{03D8F309-6540-41A1-8675-BDBD23DB3089}
[2011/12/29 11:17:05 | 000,000,030 | —- | C] () – C:\WINDOWS\MAIN.INI
[2011/12/28 21:36:25 | 000,059,004 | —- | C] () – C:\WINDOWS\System32\Zelda__2.ttf
[2011/12/28 21:36:25 | 000,050,100 | —- | C] () – C:\WINDOWS\System32\Tt0017m2.ttf
[2011/12/28 21:36:25 | 000,049,988 | —- | C] () – C:\WINDOWS\System32\Tt0015m2.ttf
[2011/12/28 21:36:25 | 000,048,340 | —- | C] () – C:\WINDOWS\System32\Tt0016m2.ttf
[2011/12/28 21:36:25 | 000,047,976 | —- | C] () – C:\WINDOWS\System32\Zeldi__2.ttf
[2011/12/28 21:36:24 | 000,071,052 | —- | C] () – C:\WINDOWS\System32\Varsity2.ttf
[2011/12/28 21:36:24 | 000,065,156 | —- | C] () – C:\WINDOWS\System32\Willow_2.ttf
[2011/12/28 21:36:24 | 000,062,260 | —- | C] () – C:\WINDOWS\System32\Tt0909m2.ttf
[2011/12/28 21:36:24 | 000,062,212 | —- | C] () – C:\WINDOWS\System32\Tt0327m2.ttf
[2011/12/28 21:36:24 | 000,058,712 | —- | C] () – C:\WINDOWS\System32\Tt0122m2.ttf
[2011/12/28 21:36:24 | 000,056,180 | —- | C] () – C:\WINDOWS\System32\Tt0326m2.ttf
[2011/12/28 21:36:24 | 000,051,700 | —- | C] () – C:\WINDOWS\System32\Vogue__2.ttf
[2011/12/28 21:36:24 | 000,045,196 | —- | C] () – C:\WINDOWS\System32\Vagabon2.ttf
[2011/12/28 21:36:24 | 000,044,236 | —- | C] () – C:\WINDOWS\System32\Valiant2.ttf
[2011/12/28 21:36:24 | 000,043,988 | —- | C] () – C:\WINDOWS\System32\Tt0756m2.ttf
[2011/12/28 21:36:23 | 000,058,732 | —- | C] () – C:\WINDOWS\System32\Tt0939m2.ttf
[2011/12/28 21:36:23 | 000,048,608 | —- | C] () – C:\WINDOWS\System32\Tribuit2.ttf
[2011/12/28 21:36:23 | 000,048,596 | —- | C] () – C:\WINDOWS\System32\Treasur2.ttf
[2011/12/28 21:36:23 | 000,047,868 | —- | C] () – C:\WINDOWS\System32\Unicorn2.ttf
[2011/12/28 21:36:23 | 000,047,448 | —- | C] () – C:\WINDOWS\System32\Teletyp2.ttf
[2011/12/28 21:36:23 | 000,047,088 | —- | C] () – C:\WINDOWS\System32\Tt0317m2.ttf
[2011/12/28 21:36:23 | 000,047,036 | —- | C] () – C:\WINDOWS\System32\Tt0316m2.ttf
[2011/12/28 21:36:23 | 000,046,664 | —- | C] () – C:\WINDOWS\System32\Tribune2.ttf
[2011/12/28 21:36:23 | 000,045,964 | —- | C] () – C:\WINDOWS\System32\Tribubo2.ttf
[2011/12/28 21:36:23 | 000,045,252 | —- | C] () – C:\WINDOWS\System32\Tristan2.ttf
[2011/12/28 21:36:23 | 000,040,312 | —- | C] () – C:\WINDOWS\System32\Tubular2.ttf
[2011/12/28 21:36:23 | 000,037,252 | —- | C] () – C:\WINDOWS\System32\Transis2.ttf
[2011/12/28 21:36:22 | 000,068,968 | —- | C] () – C:\WINDOWS\System32\Stars__2.ttf
[2011/12/28 21:36:22 | 000,059,272 | —- | C] () – C:\WINDOWS\System32\Standou2.ttf
[2011/12/28 21:36:22 | 000,050,920 | —- | C] () – C:\WINDOWS\System32\Storybo2.ttf
[2011/12/28 21:36:22 | 000,049,224 | —- | C] () – C:\WINDOWS\System32\Tabitha2.ttf
[2011/12/28 21:36:22 | 000,048,500 | —- | C] () – C:\WINDOWS\System32\Submari2.ttf
[2011/12/28 21:36:22 | 000,046,644 | —- | C] () – C:\WINDOWS\System32\Steamer2.ttf
[2011/12/28 21:36:22 | 000,045,812 | —- | C] () – C:\WINDOWS\System32\Subway2.ttf
[2011/12/28 21:36:22 | 000,041,116 | —- | C] () – C:\WINDOWS\System32\Stonehe2.ttf
[2011/12/28 21:36:22 | 000,038,672 | —- | C] () – C:\WINDOWS\System32\Tt0373m2.ttf
[2011/12/28 21:36:22 | 000,037,256 | —- | C] () – C:\WINDOWS\System32\Tt0372m2.ttf
[2011/12/28 21:36:22 | 000,036,044 | —- | C] () – C:\WINDOWS\System32\Stageco2.ttf
[2011/12/28 21:36:22 | 000,034,384 | —- | C] () – C:\WINDOWS\System32\Steward2.ttf
[2011/12/28 21:36:22 | 000,033,988 | —- | C] () – C:\WINDOWS\System32\Socket2.ttf
[2011/12/28 21:36:22 | 000,032,972 | —- | C] () – C:\WINDOWS\System32\Stylus2.ttf
[2011/12/28 21:36:21 | 000,102,428 | —- | C] () – C:\WINDOWS\System32\Rocksto2.ttf
[2011/12/28 21:36:21 | 000,086,156 | —- | C] () – C:\WINDOWS\System32\Scratch2.ttf
[2011/12/28 21:36:21 | 000,069,112 | —- | C] () – C:\WINDOWS\System32\Quill__2.ttf
[2011/12/28 21:36:21 | 000,064,000 | —- | C] () – C:\WINDOWS\System32\Tt0197m2.ttf
[2011/12/28 21:36:21 | 000,050,924 | —- | C] () – C:\WINDOWS\System32\Scribbl2.ttf
[2011/12/28 21:36:21 | 000,050,212 | —- | C] () – C:\WINDOWS\System32\Saloon_2.ttf
[2011/12/28 21:36:21 | 000,047,616 | —- | C] () – C:\WINDOWS\System32\Sedona_2.ttf
[2011/12/28 21:36:21 | 000,045,048 | —- | C] () – C:\WINDOWS\System32\Sherwoo2.ttf
[2011/12/28 21:36:21 | 000,043,904 | —- | C] () – C:\WINDOWS\System32\Snifi__2.ttf
[2011/12/28 21:36:21 | 000,039,904 | —- | C] () – C:\WINDOWS\System32\Signatu2.ttf
[2011/12/28 21:36:21 | 000,038,780 | —- | C] () – C:\WINDOWS\System32\Sceptre2.ttf
[2011/12/28 21:36:21 | 000,037,664 | —- | C] () – C:\WINDOWS\System32\Signboa2.ttf
[2011/12/28 21:36:21 | 000,033,504 | —- | C] () – C:\WINDOWS\System32\Snifb__2.ttf
[2011/12/28 21:36:21 | 000,033,404 | —- | C] () – C:\WINDOWS\System32\Sniff__2.ttf
[2011/12/28 21:36:20 | 000,081,424 | —- | C] () – C:\WINDOWS\System32\Partrid2.ttf
[2011/12/28 21:36:20 | 000,074,672 | —- | C] () – C:\WINDOWS\System32\Papercl2.ttf
[2011/12/28 21:36:20 | 000,066,536 | —- | C] () – C:\WINDOWS\System32\Presws_2.ttf
[2011/12/28 21:36:20 | 000,055,428 | —- | C] () – C:\WINDOWS\System32\Perciva2.ttf
[2011/12/28 21:36:20 | 000,049,368 | —- | C] () – C:\WINDOWS\System32\Patrick2.ttf
[2011/12/28 21:36:20 | 000,045,112 | —- | C] () – C:\WINDOWS\System32\Paramou2.ttf
[2011/12/28 21:36:20 | 000,044,112 | —- | C] () – C:\WINDOWS\System32\Parambo2.ttf
[2011/12/28 21:36:20 | 000,042,952 | —- | C] () – C:\WINDOWS\System32\Paramit2.ttf
[2011/12/28 21:36:20 | 000,041,432 | —- | C] () – C:\WINDOWS\System32\Tt0867m2.ttf
[2011/12/28 21:36:20 | 000,039,472 | —- | C] () – C:\WINDOWS\System32\Poster2.ttf
[2011/12/28 21:36:20 | 000,038,820 | —- | C] () – C:\WINDOWS\System32\Pickwic2.ttf
[2011/12/28 21:36:20 | 000,038,220 | —- | C] () – C:\WINDOWS\System32\Pegasus2.ttf
[2011/12/28 21:36:20 | 000,032,640 | —- | C] () – C:\WINDOWS\System32\Pythago2.ttf
[2011/12/28 21:36:19 | 000,060,404 | —- | C] () – C:\WINDOWS\System32\Papep__2.ttf
[2011/12/28 21:36:19 | 000,048,380 | —- | C] () – C:\WINDOWS\System32\Palatit2.ttf
[2011/12/28 21:36:19 | 000,048,288 | —- | C] () – C:\WINDOWS\System32\Palatbo2.ttf
[2011/12/28 21:36:19 | 000,047,848 | —- | C] () – C:\WINDOWS\System32\Palatia2.ttf
[2011/12/28 21:36:19 | 000,046,104 | —- | C] () – C:\WINDOWS\System32\Tt0519m2.ttf
[2011/12/28 21:36:19 | 000,043,748 | —- | C] () – C:\WINDOWS\System32\Oldcent2.ttf
[2011/12/28 21:36:19 | 000,040,144 | —- | C] () – C:\WINDOWS\System32\Newzurc2.ttf
[2011/12/28 21:36:19 | 000,039,160 | —- | C] () – C:\WINDOWS\System32\Moderne2.ttf
[2011/12/28 21:36:19 | 000,037,500 | —- | C] () – C:\WINDOWS\System32\Newzuob2.ttf
[2011/12/28 21:36:19 | 000,037,272 | —- | C] () – C:\WINDOWS\System32\Modobl2.ttf
[2011/12/28 21:36:19 | 000,033,328 | —- | C] () – C:\WINDOWS\System32\Newzubo2.ttf
[2011/12/28 21:36:19 | 000,031,976 | —- | C] () – C:\WINDOWS\System32\Moddeob2.ttf
[2011/12/28 21:36:18 | 000,053,996 | —- | C] () – C:\WINDOWS\System32\Market2.ttf
[2011/12/28 21:36:18 | 000,051,404 | —- | C] () – C:\WINDOWS\System32\Mariah2.ttf
[2011/12/28 21:36:18 | 000,048,424 | —- | C] () – C:\WINDOWS\System32\Tt0726m2.ttf
[2011/12/28 21:36:18 | 000,047,468 | —- | C] () – C:\WINDOWS\System32\Tt0843m2.ttf
[2011/12/28 21:36:18 | 000,047,100 | —- | C] () – C:\WINDOWS\System32\Tt0841m2.ttf
[2011/12/28 21:36:18 | 000,046,852 | —- | C] () – C:\WINDOWS\System32\Tt0842m2.ttf
[2011/12/28 21:36:18 | 000,046,268 | —- | C] () – C:\WINDOWS\System32\Tt0844m2.ttf
[2011/12/28 21:36:18 | 000,045,368 | —- | C] () – C:\WINDOWS\System32\Tt0727m2.ttf
[2011/12/28 21:36:18 | 000,043,956 | —- | C] () – C:\WINDOWS\System32\Librari2.ttf
[2011/12/28 21:36:18 | 000,043,608 | —- | C] () – C:\WINDOWS\System32\Longisl2.ttf
[2011/12/28 21:36:18 | 000,032,736 | —- | C] () – C:\WINDOWS\System32\Metro2.ttf
[2011/12/28 21:36:18 | 000,029,536 | —- | C] () – C:\WINDOWS\System32\Moddemi2.ttf
[2011/12/28 21:36:17 | 000,056,688 | —- | C] () – C:\WINDOWS\System32\Jester2.ttf
[2011/12/28 21:36:17 | 000,056,516 | —- | C] () – C:\WINDOWS\System32\Julius_2.ttf
[2011/12/28 21:36:17 | 000,053,696 | —- | C] () – C:\WINDOWS\System32\Janis__2.ttf
[2011/12/28 21:36:17 | 000,053,180 | —- | C] () – C:\WINDOWS\System32\Invitat2.ttf
[2011/12/28 21:36:17 | 000,052,744 | —- | C] () – C:\WINDOWS\System32\Intreb_2.ttf
[2011/12/28 21:36:17 | 000,041,844 | —- | C] () – C:\WINDOWS\System32\Tt1115m2.ttf
[2011/12/28 21:36:17 | 000,039,796 | —- | C] () – C:\WINDOWS\System32\Tt0390m2.ttf
[2011/12/28 21:36:17 | 000,038,888 | —- | C] () – C:\WINDOWS\System32\Tt0388m2.ttf
[2011/12/28 21:36:17 | 000,038,360 | —- | C] () – C:\WINDOWS\System32\Tt0389m2.ttf
[2011/12/28 21:36:17 | 000,036,360 | —- | C] () – C:\WINDOWS\System32\Tt0387m2.ttf
[2011/12/28 21:36:17 | 000,034,036 | —- | C] () – C:\WINDOWS\System32\Intreob2.ttf
[2011/12/28 21:36:17 | 000,032,080 | —- | C] () – C:\WINDOWS\System32\Intrepi2.ttf
[2011/12/28 21:36:17 | 000,031,344 | —- | C] () – C:\WINDOWS\System32\Intrebo2.ttf
[2011/12/28 21:36:16 | 000,067,988 | —- | C] () – C:\WINDOWS\System32\Tt0107m2.ttf
[2011/12/28 21:36:16 | 000,061,352 | —- | C] () – C:\WINDOWS\System32\Tt0209m2.ttf
[2011/12/28 21:36:16 | 000,061,204 | —- | C] () – C:\WINDOWS\System32\Tt0110m2.ttf
[2011/12/28 21:36:16 | 000,040,792 | —- | C] () – C:\WINDOWS\System32\Heather2.ttf
[2011/12/28 21:36:16 | 000,039,944 | —- | C] () – C:\WINDOWS\System32\Tt0307m2.ttf
[2011/12/28 21:36:16 | 000,039,800 | —- | C] () – C:\WINDOWS\System32\Tt0312m2.ttf
[2011/12/28 21:36:16 | 000,039,336 | —- | C] () – C:\WINDOWS\System32\Tt0391m2.ttf
[2011/12/28 21:36:16 | 000,038,812 | —- | C] () – C:\WINDOWS\System32\Tt0306m2.ttf
[2011/12/28 21:36:16 | 000,031,344 | —- | C] () – C:\WINDOWS\System32\Herald2.ttf
[2011/12/28 21:36:15 | 000,060,256 | —- | C] () – C:\WINDOWS\System32\Tt1001m2.ttf
[2011/12/28 21:36:15 | 000,054,904 | —- | C] () – C:\WINDOWS\System32\Fifthav2.ttf
[2011/12/28 21:36:15 | 000,048,336 | —- | C] () – C:\WINDOWS\System32\Fitzger2.ttf
[2011/12/28 21:36:15 | 000,041,048 | —- | C] () – C:\WINDOWS\System32\Fillmor2.ttf
[2011/12/28 21:36:15 | 000,039,960 | —- | C] () – C:\WINDOWS\System32\Gasligh2.ttf
[2011/12/28 21:36:15 | 000,039,620 | —- | C] () – C:\WINDOWS\System32\Tt1128m2.ttf
[2011/12/28 21:36:15 | 000,038,712 | —- | C] () – C:\WINDOWS\System32\Francis2.ttf
[2011/12/28 21:36:15 | 000,037,804 | —- | C] () – C:\WINDOWS\System32\Tt1126m2.ttf
[2011/12/28 21:36:15 | 000,037,620 | —- | C] () – C:\WINDOWS\System32\Tt1127m2.ttf
[2011/12/28 21:36:15 | 000,036,920 | —- | C] () – C:\WINDOWS\System32\Tt1129m2.ttf
[2011/12/28 21:36:14 | 000,081,708 | —- | C] () – C:\WINDOWS\System32\Emeri__2.ttf
[2011/12/28 21:36:14 | 000,071,444 | —- | C] () – C:\WINDOWS\System32\Diner__2.ttf
[2011/12/28 21:36:14 | 000,063,540 | —- | C] () – C:\WINDOWS\System32\Crate__2.ttf
[2011/12/28 21:36:14 | 000,058,064 | —- | C] () – C:\WINDOWS\System32\Tt0769m2.ttf
[2011/12/28 21:36:14 | 000,055,824 | —- | C] () – C:\WINDOWS\System32\Cotilli2.ttf
[2011/12/28 21:36:14 | 000,052,944 | —- | C] () – C:\WINDOWS\System32\Executi2.ttf
[2011/12/28 21:36:14 | 000,050,068 | —- | C] () – C:\WINDOWS\System32\Diploma2.ttf
[2011/12/28 21:36:14 | 000,034,940 | —- | C] () – C:\WINDOWS\System32\Tt0628m2.ttf
[2011/12/28 21:36:14 | 000,034,176 | —- | C] () – C:\WINDOWS\System32\Corners2.ttf
[2011/12/28 21:36:14 | 000,033,524 | —- | C] () – C:\WINDOWS\System32\Denmark2.ttf
[2011/12/28 21:36:14 | 000,031,008 | —- | C] () – C:\WINDOWS\System32\Cuckoo2.ttf
[2011/12/28 21:36:13 | 000,062,500 | —- | C] () – C:\WINDOWS\System32\Tt0630m2.ttf
[2011/12/28 21:36:13 | 000,058,272 | —- | C] () – C:\WINDOWS\System32\Tt0579m2.ttf
[2011/12/28 21:36:13 | 000,057,932 | —- | C] () – C:\WINDOWS\System32\Tt0575m2.ttf
[2011/12/28 21:36:13 | 000,056,780 | —- | C] () – C:\WINDOWS\System32\Tt0580m2.ttf
[2011/12/28 21:36:13 | 000,056,708 | —- | C] () – C:\WINDOWS\System32\Tt0576m2.ttf
[2011/12/28 21:36:13 | 000,056,676 | —- | C] () – C:\WINDOWS\System32\Contl__2.ttf
[2011/12/28 21:36:13 | 000,053,008 | —- | C] () – C:\WINDOWS\System32\Tt0757m2.ttf
[2011/12/28 21:36:13 | 000,046,584 | —- | C] () – C:\WINDOWS\System32\Contm__2.ttf
[2011/12/28 21:36:13 | 000,045,908 | —- | C] () – C:\WINDOWS\System32\Contb__2.ttf
[2011/12/28 21:36:13 | 000,044,980 | —- | C] () – C:\WINDOWS\System32\Tt0423m2.ttf
[2011/12/28 21:36:12 | 000,056,552 | —- | C] () – C:\WINDOWS\System32\Christi2.ttf
[2011/12/28 21:36:12 | 000,053,340 | —- | C] () – C:\WINDOWS\System32\Chaucer2.ttf
[2011/12/28 21:36:12 | 000,051,972 | —- | C] () – C:\WINDOWS\System32\Tt0622m2.ttf
[2011/12/28 21:36:12 | 000,051,804 | —- | C] () – C:\WINDOWS\System32\Tt0623m2.ttf
[2011/12/28 21:36:12 | 000,051,416 | —- | C] () – C:\WINDOWS\System32\Tt0620m2.ttf
[2011/12/28 21:36:12 | 000,051,380 | —- | C] () – C:\WINDOWS\System32\Tt0085m2.ttf
[2011/12/28 21:36:12 | 000,051,060 | —- | C] () – C:\WINDOWS\System32\Tt0621m2.ttf
[2011/12/28 21:36:12 | 000,049,844 | —- | C] () – C:\WINDOWS\System32\Tt0086m2.ttf
[2011/12/28 21:36:12 | 000,048,556 | —- | C] () – C:\WINDOWS\System32\Tt0083m2.ttf
[2011/12/28 21:36:12 | 000,048,152 | —- | C] () – C:\WINDOWS\System32\Tt0084m2.ttf
[2011/12/28 21:36:12 | 000,038,944 | —- | C] () – C:\WINDOWS\System32\Cezanne2.ttf
[2011/12/28 21:36:11 | 000,055,696 | —- | C] () – C:\WINDOWS\System32\Tt0280m2.ttf
[2011/12/28 21:36:11 | 000,055,660 | —- | C] () – C:\WINDOWS\System32\Tt0281m2.ttf
[2011/12/28 21:36:11 | 000,055,100 | —- | C] () – C:\WINDOWS\System32\Caesar2.ttf
[2011/12/28 21:36:11 | 000,054,876 | —- | C] () – C:\WINDOWS\System32\Tt0837m2.ttf
[2011/12/28 21:36:11 | 000,050,772 | —- | C] () – C:\WINDOWS\System32\Tt0342m2.ttf
[2011/12/28 21:36:11 | 000,044,960 | —- | C] () – C:\WINDOWS\System32\Tt0131m2.ttf
[2011/12/28 21:36:11 | 000,043,368 | —- | C] () – C:\WINDOWS\System32\Block__2.ttf
[2011/12/28 21:36:11 | 000,042,900 | —- | C] () – C:\WINDOWS\System32\Broadvi2.ttf
[2011/12/28 21:36:11 | 000,040,120 | —- | C] () – C:\WINDOWS\System32\Calligr2.ttf
[2011/12/28 21:36:11 | 000,032,032 | —- | C] () – C:\WINDOWS\System32\Boulder2.ttf
[2011/12/28 21:36:10 | 000,058,612 | —- | C] () – C:\WINDOWS\System32\Tt0607m2.ttf
[2011/12/28 21:36:10 | 000,057,576 | —- | C] () – C:\WINDOWS\System32\Tt0838m2.ttf
[2011/12/28 21:36:10 | 000,055,608 | —- | C] () – C:\WINDOWS\System32\Tt0839m2.ttf
[2011/12/28 21:36:10 | 000,053,416 | —- | C] () – C:\WINDOWS\System32\Tt0329m2.ttf
[2011/12/28 21:36:10 | 000,053,000 | —- | C] () – C:\WINDOWS\System32\Tt0328m2.ttf
[2011/12/28 21:36:10 | 000,046,064 | —- | C] () – C:\WINDOWS\System32\Bazooka2.ttf
[2011/12/28 21:36:10 | 000,043,096 | —- | C] () – C:\WINDOWS\System32\Bavand2.ttf
[2011/12/28 21:36:10 | 000,037,160 | —- | C] () – C:\WINDOWS\System32\Tt0361m2.ttf
[2011/12/28 21:36:10 | 000,037,132 | —- | C] () – C:\WINDOWS\System32\Tt0360m2.ttf
[2011/12/28 21:36:10 | 000,036,372 | —- | C] () – C:\WINDOWS\System32\Tt0359m2.ttf
[2011/12/28 21:36:09 | 000,172,408 | —- | C] () – C:\WINDOWS\System32\Antique2.ttf
[2011/12/28 21:36:09 | 000,064,488 | —- | C] () – C:\WINDOWS\System32\Tt1040m2.ttf
[2011/12/28 21:36:09 | 000,053,528 | —- | C] () – C:\WINDOWS\System32\Tt0330m2.ttf
[2011/12/28 21:36:09 | 000,053,160 | —- | C] () – C:\WINDOWS\System32\Tt0498m2.ttf
[2011/12/28 21:36:09 | 000,050,588 | —- | C] () – C:\WINDOWS\System32\Tt0331m2.ttf
[2011/12/28 21:36:09 | 000,049,908 | —- | C] () – C:\WINDOWS\System32\Tt0500m2.ttf
[2011/12/28 21:36:09 | 000,049,192 | —- | C] () – C:\WINDOWS\System32\Tt0499m2.ttf
[2011/12/28 21:36:09 | 000,037,652 | —- | C] () – C:\WINDOWS\System32\Tt1027m2.ttf
[2011/12/28 02:42:15 | 000,000,280 | —- | C] () – C:\{6F26357D-AE4C-489D-A85F-BFFB6944ADED}
[2011/12/27 02:59:45 | 000,000,069 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2011/12/26 21:58:14 | 000,002,345 | —- | C] () – C:\Documents and Settings\Larry.MAX\Application Data\Microsoft\Internet Explorer\Quick Launch\Nero StartSmart Essentials.lnk
[2011/12/23 16:25:41 | 000,000,280 | —- | C] () – C:\{BA9A3762-D117-43E1-A453-D2B199484E55}
[2011/12/23 16:24:07 | 000,000,280 | —- | C] () – C:\{56DD988E-6917-49FD-8002-B4AD3AB52EA6}
[2011/12/23 16:22:32 | 000,000,488 | —- | C] () – C:\{226286FD-C295-4C4F-AA38-DA1BFB85BDBC}
[2011/12/23 13:07:01 | 000,002,672 | —- | C] () – C:\{F84F6E03-A4C6-4846-B2FA-DEE5393BE053}
[2011/12/22 23:31:46 | 000,000,220 | —- | C] () – C:\Boot.bak
[2011/12/22 23:31:43 | 000,260,272 | RHS- | C] () – C:\cmldr
[2011/12/22 16:24:45 | 000,004,864 | —- | C] () – C:\{1DE5B8CD-31FA-48AF-BD4C-CAEF35D50A2E}
[2011/12/22 15:37:21 | 000,004,872 | —- | C] () – C:\{2BB69D3C-B1CF-4FF8-9C02-2AACD60EA54E}
[2011/12/22 14:41:23 | 000,004,872 | —- | C] () – C:\{195EC084-7ECF-41A7-B363-B48529BE0B45}
[2011/12/22 14:18:32 | 000,004,864 | —- | C] () – C:\{CD8CE751-93D8-4F60-9D45-3F944F5C32D9}
[2011/12/22 13:32:37 | 000,004,880 | —- | C] () – C:\{8F732DF0-F487-48D7-B42D-D9C36B928432}
[2011/12/22 11:54:51 | 000,004,864 | —- | C] () – C:\{D1A0043F-1025-4926-80BF-B68F88F46ABA}
[2011/12/22 11:26:45 | 000,004,864 | —- | C] () – C:\{D768DD99-2761-44BA-AADD-F1CCEDBED051}
[2011/12/22 10:44:05 | 000,004,864 | —- | C] () – C:\{0F38997B-DEA6-4C56-8F44-CB51A7450626}
[2011/12/22 10:20:14 | 000,004,872 | —- | C] () – C:\{94E6833C-9B91-4C17-B4F3-7C3A4857851A}
[2011/12/22 04:13:12 | 000,004,864 | —- | C] () – C:\{91FCA3B2-FF36-428B-8DCA-D2088DAE8A0E}
[2011/12/22 04:06:39 | 000,004,880 | —- | C] () – C:\{FAC177BB-8D69-4B0B-B036-C7C205C447FB}
[2011/12/22 03:27:05 | 000,004,880 | —- | C] () – C:\{ECCB689E-DD41-43E0-AF7B-3EC37007668C}
[2011/12/22 03:21:23 | 000,004,872 | —- | C] () – C:\{F5EB4A10-7C5E-4A10-A3B7-0F5B585D6D9F}
[2011/12/22 02:01:39 | 000,004,872 | —- | C] () – C:\{D22A739B-DDE9-460B-BDEC-84254273CFC2}
[2011/12/22 02:00:01 | 000,004,848 | —- | C] () – C:\{A93F24BE-AA13-4846-B85C-82DFCEF8AB94}
[2011/12/22 01:41:28 | 000,004,872 | —- | C] () – C:\{332E52DC-D924-4F49-9CA5-E93FB98B80A3}
[2011/12/21 22:08:37 | 000,004,864 | —- | C] () – C:\{1CB98AF2-13B2-4506-919A-E251DD3E51A3}
[2011/12/21 19:30:50 | 000,004,864 | —- | C] () – C:\{67288E2C-4FA0-428A-8DED-A2AE2166DEBB}
[2011/12/21 17:58:13 | 000,004,872 | —- | C] () – C:\{A812D6E4-3ED5-4AE4-9AFB-47807C00A242}
[2011/12/21 16:18:16 | 000,004,856 | —- | C] () – C:\{663DEDE2-6DA0-47E0-B387-9008AC9FD7A9}
[2011/12/21 14:09:28 | 000,004,864 | —- | C] () – C:\{DF3E1670-B162-4265-A5F0-7C9CC399DE3D}
[2011/12/21 13:35:06 | 000,004,864 | —- | C] () – C:\{2374C9A1-B08E-42B4-89AA-AC2B23693133}
[2011/12/21 09:11:04 | 000,004,880 | —- | C] () – C:\{E66A4D79-30FF-4F4A-826D-DCA0854A46EF}
[2011/12/20 04:01:49 | 000,004,576 | —- | C] () – C:\Documents and Settings\Larry.MAX\Application Data\SMRResults210.dat
[2011/12/20 03:33:10 | 000,004,856 | —- | C] () – C:\{73E3B5E8-B647-4E3E-A30A-0ECF5E14E7DD}
[2011/12/19 23:11:05 | 000,001,984 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/12/19 22:18:57 | 000,014,062 | -HS- | C] () – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\1w86bd6l41q237
[2011/12/19 22:18:57 | 000,014,062 | -HS- | C] () – C:\Documents and Settings\All Users.WINDOWS\Application Data\1w86bd6l41q237
[2011/10/13 12:25:13 | 000,000,000 | —- | C] () – C:\WINDOWS\SMBinder.INI
[2011/10/11 10:39:09 | 000,027,648 | —- | C] () – C:\WINDOWS\System32\FAXMON.DLL
[2011/04/16 22:02:23 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2010/06/13 11:10:01 | 000,098,304 | —- | C] () – C:\WINDOWS\System32\TwcToolbarBho.dll
[2010/06/13 11:10:00 | 000,331,776 | —- | C] () – C:\WINDOWS\System32\TwcToolbarIe7.dll
[2010/02/26 11:07:02 | 000,061,678 | —- | C] () – C:\Documents and Settings\Larry.MAX\Application Data\PFP110JPR.{PB
[2010/02/26 11:07:02 | 000,012,358 | —- | C] () – C:\Documents and Settings\Larry.MAX\Application Data\PFP110JCM.{PB
[2010/02/26 11:05:50 | 000,000,258 | —- | C] () – C:\WINDOWS\System32\BDEMERGE.INI
[2010/02/17 15:30:22 | 000,003,584 | —- | C] () – C:\WINDOWS\System32\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/02/04 10:40:28 | 000,000,025 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2010/01/06 16:39:18 | 000,061,440 | —- | C] () – C:\WINDOWS\wnUninstall.exe
[2009/04/09 10:06:18 | 000,000,029 | —- | C] () – C:\WINDOWS\DEBUGSM.INI
[2008/12/26 23:29:20 | 000,000,057 | —- | C] () – C:\WINDOWS\DcmLtbox-WS.ini
[2008/09/15 22:01:56 | 000,000,028 | —- | C] () – C:\WINDOWS\@loha.ini
[2008/07/21 12:59:44 | 000,100,864 | —- | C] () – C:\WINDOWS\System32\Dc50ip32.dll
[2008/07/21 12:59:44 | 000,065,864 | —- | C] () – C:\WINDOWS\System32\Digita.sys
[2008/07/21 12:59:44 | 000,007,808 | —- | C] () – C:\WINDOWS\System32\dc240u.sys
[2008/07/21 12:59:44 | 000,006,144 | —- | C] () – C:\WINDOWS\System32\ImgLibLead.dll
[2008/07/21 12:59:34 | 000,210,944 | —- | C] () – C:\WINDOWS\System32\MSVCRT10.DLL
[2008/07/21 12:59:34 | 000,048,640 | —- | C] () – C:\WINDOWS\catalogSubInstaller.exe
[2008/07/14 12:38:16 | 000,000,044 | —- | C] () – C:\WINDOWS\System32\msssc.dll
[2008/07/10 11:59:05 | 000,001,061 | —- | C] () – C:\WINDOWS\fpexplor.INI
[2008/07/08 12:52:32 | 000,000,388 | —- | C] () – C:\WINDOWS\frontpg.ini
[2008/07/08 12:45:16 | 000,103,936 | —- | C] () – C:\WINDOWS\System32\JPEGACC.DLL
[2008/07/08 12:45:16 | 000,044,544 | —- | C] () – C:\WINDOWS\System32\IGFPX32S.DLL
[2008/07/08 12:45:15 | 000,316,928 | —- | C] () – C:\WINDOWS\System32\FPXIG.DLL
[2008/07/08 11:33:10 | 000,000,376 | —- | C] () – C:\WINDOWS\ODBC.INI
[2008/07/08 09:28:31 | 000,081,920 | —- | C] () – C:\Documents and Settings\Larry.MAX\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/07/08 09:19:48 | 000,000,000 | —- | C] () – C:\WINDOWS\ATIMMC.INI
[2008/07/08 05:53:41 | 000,033,797 | —- | C] () – C:\WINDOWS\System32\EPPICPrinterDB.dat
[2008/07/08 05:53:41 | 000,020,910 | —- | C] () – C:\WINDOWS\System32\EPPICPattern2.dat
[2008/07/08 05:53:41 | 000,020,869 | —- | C] () – C:\WINDOWS\System32\EPPICPattern1.dat
[2008/07/08 05:53:41 | 000,000,022 | —- | C] () – C:\WINDOWS\System32\PICSDK.ini
[2008/07/08 05:51:56 | 000,096,768 | —- | C] () – C:\WINDOWS\SlantAdj.dll
[2008/07/08 05:51:56 | 000,003,136 | —- | C] () – C:\WINDOWS\Ade001.bin
[2008/07/08 05:51:56 | 000,000,072 | —- | C] () – C:\WINDOWS\System32\epDPE.ini
[2008/07/08 05:46:59 | 000,000,192 | —- | C] () – C:\WINDOWS\EPSON RX620 Installer.ini
[2008/07/07 21:07:28 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2008/07/07 21:07:13 | 000,444,172 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2008/07/07 21:07:13 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2008/07/07 21:07:13 | 000,070,410 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2008/07/07 21:07:13 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2008/07/07 21:07:08 | 000,004,461 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2008/07/07 21:07:03 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2008/07/07 21:06:55 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat
[2008/07/07 21:06:35 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2008/07/07 21:06:34 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2008/07/07 21:05:57 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2008/07/07 21:05:25 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2008/07/07 19:52:11 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2008/07/07 19:46:03 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2008/07/07 15:16:43 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2008/07/07 15:15:38 | 000,267,008 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2006/02/13 12:29:26 | 000,121,995 | —- | C] () – C:\WINDOWS\System32\atiicdxx.dat
[2004/01/28 10:42:06 | 000,066,560 | —- | C] () – C:\WINDOWS\System32\atiyuv12.dll
[2004/01/28 10:42:06 | 000,056,320 | —- | C] () – C:\WINDOWS\System32\iyvu9_32.dll
[2004/01/28 10:42:06 | 000,013,601 | —- | C] () – C:\WINDOWS\System32\vctest.ini
[2003/01/13 13:21:58 | 000,019,968 | —- | C] () – C:\WINDOWS\System32\cpuinf32.dll
[2002/12/12 19:44:30 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\px.ini
[2002/05/24 01:00:00 | 000,208,896 | —- | C] () – C:\WINDOWS\System32\lockout.dll
[2002/05/24 01:00:00 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\lockres.dll
[2002/03/26 14:18:28 | 000,091,136 | —- | C] () – C:\WINDOWS\System32\mp4fil32.dll
[2002/01/20 07:26:36 | 000,073,728 | —- | C] () – C:\WINDOWS\System32\SimpleResize.dll
[2001/08/31 15:33:58 | 000,425,984 | —- | C] () – C:\WINDOWS\System32\VxDMDcDlg.dll
[2001/08/14 11:47:08 | 000,020,480 | —- | C] () – C:\WINDOWS\System32\vxpsapi.dll
[2000/04/25 12:58:08 | 000,047,104 | —- | C] () – C:\WINDOWS\System32\Wrkgadm.exe
[1997/02/27 12:13:12 | 000,000,586 | —- | C] () – C:\WINDOWS\3DFAX.INI
========== LOP Check ==========
[2011/05/17 13:34:19 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Applications
[2011/09/11 21:49:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Fighters
[2011/09/08 11:32:16 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Freemake
[2010/11/10 09:43:29 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\Instant Doppler Desktop
[2012/01/03 08:02:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\MSScanAppDataDir
[2012/01/18 03:14:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PC1Data
[2008/11/12 11:27:43 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\PCSettings
[2011/09/11 21:51:52 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\{36D85831-9286-474C-9585-E2746B1879FB}
[2011/08/16 07:31:17 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users.WINDOWS\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/12/07 23:57:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\AnvSoft
[2012/01/17 15:29:08 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\BitTorrent
[2011/09/07 06:51:34 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Catalina Marketing Corp
[2011/09/16 12:42:59 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\CBS Interactive
[2008/07/28 12:07:12 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/02/15 18:22:34 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Digiarty
[2011/05/17 13:50:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\DNA
[2008/09/10 09:10:45 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\EPSON
[2010/11/11 09:57:53 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Fighters
[2009/03/03 10:44:15 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\ICQ
[2008/07/08 05:57:04 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Leadertech
[2012/01/17 17:54:51 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Nullsoft
[2012/01/18 03:15:16 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\PC Cleaners
[2012/01/18 14:28:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\PCPro
[2009/04/09 10:07:27 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Smart Panel
[2008/07/08 08:32:26 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\SPAMfighter
[2011/04/28 23:11:33 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Thumbnail me
[2011/04/25 11:42:23 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\Tific
[2010/01/15 09:25:47 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\TweakNow RegCleaner
[2008/11/04 18:08:30 | 000,000,000 | —D | M] – C:\Documents and Settings\Larry.MAX\Application Data\VERITAS
[2012/01/18 15:23:00 | 000,000,422 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{CA39505C-B0B6-4CEF-AC1E-AB513ECA8CD1}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2006/05/17 14:50:57 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/12/20 03:38:18 | 000,000,220 | —- | M] () – C:\Boot.bak
[2011/12/22 23:31:47 | 000,000,336 | RHS- | M] () – C:\boot.ini
[2004/08/03 23:00:00 | 000,260,272 | RHS- | M] () – C:\cmldr
[2006/05/17 14:50:57 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2010/03/02 23:43:14 | 000,000,120 | —- | M] () – C:\drmHeader.bin
[2008/07/14 12:34:59 | 000,000,090 | —- | M] () – C:\inf.log
[2006/05/17 14:50:57 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2006/05/17 14:50:57 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2004/08/04 07:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/07/08 10:27:06 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/01/18 13:39:14 | 2147,483,648 | -HS- | M] () – C:\pagefile.sys
[2012/01/18 13:39:53 | 000,000,627 | —- | M] () – C:\sti.log
[2008/07/02 23:01:17 | 096,801,430 | —- | M] () – C:\SYM_REGISTRY_BACKUP.reg
[2011/04/28 23:01:34 | 000,003,072 | -HS- | M] () – C:\Thumbs.db
[2011/12/30 03:08:06 | 000,000,280 | —- | M] () – C:\{03D8F309-6540-41A1-8675-BDBD23DB3089}
[2012/01/01 21:36:05 | 000,002,248 | —- | M] () – C:\{09F15372-D640-473C-B5B8-055FF589C907}
[2012/01/04 02:00:36 | 000,000,272 | —- | M] () – C:\{0A15DEF3-8EA2-430C-B5A5-B4A17D3EC93F}
[2011/12/22 10:44:05 | 000,004,864 | —- | M] () – C:\{0F38997B-DEA6-4C56-8F44-CB51A7450626}
[2011/12/30 19:21:58 | 000,002,808 | —- | M] () – C:\{18E9942C-359C-455B-939D-F550D500C0E0}
[2011/12/22 14:41:23 | 000,004,872 | —- | M] () – C:\{195EC084-7ECF-41A7-B363-B48529BE0B45}
[2011/09/26 23:50:47 | 000,002,560 | —- | M] () – C:\{1C12FDAE-6B9B-48C1-A761-D3A4E9A20A6F}
[2011/12/21 22:08:37 | 000,004,864 | —- | M] () – C:\{1CB98AF2-13B2-4506-919A-E251DD3E51A3}
[2011/10/26 19:36:31 | 005,974,608 | —- | M] () – C:\{1D21FBD3-88EF-47D9-A3E7-B98BC905B01B}
[2011/12/01 15:19:51 | 000,030,904 | —- | M] () – C:\{1DE2A903-D03E-4737-88F1-892F0A851288}
[2011/12/22 16:24:45 | 000,004,864 | —- | M] () – C:\{1DE5B8CD-31FA-48AF-BD4C-CAEF35D50A2E}
[2011/12/23 16:22:32 | 000,000,488 | —- | M] () – C:\{226286FD-C295-4C4F-AA38-DA1BFB85BDBC}
[2011/12/21 13:35:06 | 000,004,864 | —- | M] () – C:\{2374C9A1-B08E-42B4-89AA-AC2B23693133}
[2011/07/12 07:17:44 | 000,000,280 | —- | M] () – C:\{280832E3-02B8-44FF-A024-8764552DE1FE}
[2011/12/22 15:37:21 | 000,004,872 | —- | M] () – C:\{2BB69D3C-B1CF-4FF8-9C02-2AACD60EA54E}
[2011/12/22 01:41:28 | 000,004,872 | —- | M] () – C:\{332E52DC-D924-4F49-9CA5-E93FB98B80A3}
[2012/01/02 03:01:22 | 000,000,280 | —- | M] () – C:\{352E854E-683E-44E9-ABCA-A746EAAC5A0B}
[2011/09/12 02:13:20 | 000,000,272 | —- | M] () – C:\{36200277-2D08-4BB7-AB8C-F1788068739B}
[2012/01/02 02:58:49 | 000,000,280 | —- | M] () – C:\{4F81ECBB-D96F-45C3-AAFE-D76CC507C7E8}
[2011/10/16 01:53:49 | 000,000,280 | —- | M] () – C:\{5132061D-3F22-4B76-A854-47B49F743FBE}
[2012/01/04 12:22:52 | 000,000,272 | —- | M] () – C:\{529A0076-A5B9-41B6-9CCD-EF61D23D9653}
[2011/12/23 16:24:07 | 000,000,280 | —- | M] () – C:\{56DD988E-6917-49FD-8002-B4AD3AB52EA6}
[2012/01/02 03:00:04 | 000,000,280 | —- | M] () – C:\{57E31AB6-2175-4F51-A8EA-920625AD0B5C}
[2012/01/04 02:01:38 | 000,000,272 | —- | M] () – C:\{62F54313-1962-4FAF-8D0E-F669E0388F6E}
[2011/12/21 16:18:16 | 000,004,856 | —- | M] () – C:\{663DEDE2-6DA0-47E0-B387-9008AC9FD7A9}
[2011/12/21 19:30:50 | 000,004,864 | —- | M] () – C:\{67288E2C-4FA0-428A-8DED-A2AE2166DEBB}
[2011/12/28 02:42:15 | 000,000,280 | —- | M] () – C:\{6F26357D-AE4C-489D-A85F-BFFB6944ADED}
[2011/12/20 03:33:10 | 000,004,856 | —- | M] () – C:\{73E3B5E8-B647-4E3E-A30A-0ECF5E14E7DD}
[2011/12/30 22:39:32 | 000,002,736 | —- | M] () – C:\{7C427D0D-6996-4914-8D1E-7AA2B92A678E}
[2011/10/26 19:18:16 | 000,000,280 | —- | M] () – C:\{885FAD4A-40BC-439F-B162-AB33D316104D}
[2012/01/02 02:57:12 | 000,000,280 | —- | M] () – C:\{8C2FBEF8-A2F5-48FA-9418-323742B40FB2}
[2011/08/19 07:07:00 | 000,002,560 | —- | M] () – C:\{8D0897BC-CD8C-455F-9C4E-35537A128C5B}
[2011/12/22 13:32:37 | 000,004,880 | —- | M] () – C:\{8F732DF0-F487-48D7-B42D-D9C36B928432}
[2011/12/22 04:13:12 | 000,004,864 | —- | M] () – C:\{91FCA3B2-FF36-428B-8DCA-D2088DAE8A0E}
[2012/01/01 03:57:19 | 000,000,272 | —- | M] () – C:\{92D06403-2389-457C-9031-3FFB62BC4A15}
[2011/12/22 10:20:14 | 000,004,872 | —- | M] () – C:\{94E6833C-9B91-4C17-B4F3-7C3A4857851A}
[2011/10/27 03:34:18 | 000,000,280 | —- | M] () – C:\{9817FEFA-8127-4BFB-9585-8EEC4E03D12F}
[2011/12/30 12:13:13 | 000,002,808 | —- | M] () – C:\{A01265E5-1537-4F7C-BE0E-814F6DAABA1A}
[2011/12/21 17:58:13 | 000,004,872 | —- | M] () – C:\{A812D6E4-3ED5-4AE4-9AFB-47807C00A242}
[2011/12/22 02:00:01 | 000,004,848 | —- | M] () – C:\{A93F24BE-AA13-4846-B85C-82DFCEF8AB94}
[2012/01/03 10:04:15 | 000,000,440 | —- | M] () – C:\{B50A5443-AA89-4A4D-AD67-BEEDBDF4E911}
[2011/12/23 16:25:41 | 000,000,280 | —- | M] () – C:\{BA9A3762-D117-43E1-A453-D2B199484E55}
[2011/07/28 01:42:28 | 000,000,272 | —- | M] () – C:\{BDEBAE23-E068-442A-8A40-EB7E3CD157F3}
[2011/12/30 10:21:53 | 000,002,720 | —- | M] () – C:\{CABF6429-E349-4513-8B67-505472461A74}
[2011/12/22 14:18:32 | 000,004,864 | —- | M] () – C:\{CD8CE751-93D8-4F60-9D45-3F944F5C32D9}
[2011/12/22 11:54:51 | 000,004,864 | —- | M] () – C:\{D1A0043F-1025-4926-80BF-B68F88F46ABA}
[2011/12/22 02:01:39 | 000,004,872 | —- | M] () – C:\{D22A739B-DDE9-460B-BDEC-84254273CFC2}
[2011/12/22 11:26:45 | 000,004,864 | —- | M] () – C:\{D768DD99-2761-44BA-AADD-F1CCEDBED051}
[2011/12/21 14:09:28 | 000,004,864 | —- | M] () – C:\{DF3E1670-B162-4265-A5F0-7C9CC399DE3D}
[2011/12/21 09:11:04 | 000,004,880 | —- | M] () – C:\{E66A4D79-30FF-4F4A-826D-DCA0854A46EF}
[2012/01/04 23:57:49 | 000,002,560 | —- | M] () – C:\{E90043D8-6516-4199-8C6A-C3BDA988CECC}
[2011/12/22 03:27:05 | 000,004,880 | —- | M] () – C:\{ECCB689E-DD41-43E0-AF7B-3EC37007668C}
[2012/01/05 01:01:12 | 000,031,712 | —- | M] () – C:\{F2DFA54A-2B64-4325-998C-84CC7A647949}
[2012/01/04 19:31:26 | 000,002,576 | —- | M] () – C:\{F51568F8-53AF-417A-B360-13CEDC8154EF}
[2011/12/22 03:21:23 | 000,004,872 | —- | M] () – C:\{F5EB4A10-7C5E-4A10-A3B7-0F5B585D6D9F}
[2011/12/23 13:07:01 | 000,002,672 | —- | M] () – C:\{F84F6E03-A4C6-4846-B2FA-DEE5393BE053}
[2011/12/22 04:06:39 | 000,004,880 | —- | M] () – C:\{FAC177BB-8D69-4B0B-B036-C7C205C447FB}
[2011/09/26 02:14:59 | 000,002,720 | —- | M] () – C:\{FB3C55A8-6D78-41EF-9C46-FFC6792F8FF7}
< %systemroot%\Fonts\*.com >
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2008/07/07 19:48:26 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2003/06/18 17:31:48 | 000,018,944 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
[1999/11/30 13:54:10 | 000,072,704 | —- | M] () – C:\WINDOWS\PhotoDeluxe.scr
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
[2008/09/09 14:37:35 | 000,774,144 | —- | M] (RealNetworks, Inc.) – C:\Program Files\RngInterstitial.dll
[2011/04/28 23:01:31 | 000,010,240 | -HS- | M] () – C:\Program Files\Thumbs.db
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2008/07/07 15:14:36 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2008/07/07 15:14:36 | 000,659,456 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2008/07/07 15:14:36 | 000,913,408 | —- | M] () – C:\WINDOWS\System32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2008/07/08 10:39:45 | 000,000,272 | -HS- | M] () – C:\Documents and Settings\All Users.WINDOWS\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
[2011/01/14 23:33:20 | 000,005,120 | -HS- | M] () – C:\WINDOWS\system32\Thumbs.db
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2008/07/07 20:05:35 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2008/07/07 20:05:34 | 000,000,079 | —- | M] () – C:\Documents and Settings\Larry.MAX\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-01-17 23:13:57
< End of report >