Delayed write failed virus - All files hidden - please help [Solved]

OTL logfile created on: 1/23/2012 4:58:20 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = D:\DOWNLOAD
64bit- Professional (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

11.99 Gb Total Physical Memory | 9.55 Gb Available Physical Memory | 79.66% Memory free
17.85 Gb Paging File | 15.55 Gb Available in Paging File | 87.14% Paging File free
Paging file location(s): d:\pagefile.sys 6000 6000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 37.27 Gb Total Space | 1.83 Gb Free Space | 4.92% Space Free | Partition Type: NTFS
Drive D: | 931.41 Gb Total Space | 44.01 Gb Free Space | 4.73% Space Free | Partition Type: NTFS
Drive H: | 100.00 Mb Total Space | 71.66 Mb Free Space | 71.67% Space Free | Partition Type: NTFS
Drive I: | 1.81 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive J: | 5.12 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive K: | 1.38 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: I7-860 | User Name: thierry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - D:\DOWNLOAD\OTL.exe (OldTimer Tools)
PRC - C:\ProgramData\XapxUnRSMme.exe ()
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies LTD)
PRC - C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Windows\SysWOW64\nlssrv32.exe (Nalpeiron Ltd.)
PRC - C:\Program Files (x86)\GenArts\rlm\rlm.exe (Reprise Software Inc.)
PRC - C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
PRC - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe ()
PRC - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
PRC - C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
PRC - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Logitech Inc.)
PRC - C:\Windows\SysWOW64\attrib.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Common Files\Mediafour\M4LIC.EXE (Mediafour Corporation)


========== Modules (No Company Name) ==========

MOD - C:\ProgramData\XapxUnRSMme.exe ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\2552d50492d66f19cfc3bf526df9d515\IAStorUtil.ni.dll ()
MOD - C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
MOD - C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\3871fc2b96345aa6f3be81d9e3c97160\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\4bdeb88758dccd625f4703ed77aaf348\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\fedf1ba58dced4f0b3f8c457648ceed9\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ead6be8b410d56b5576b10e56af2c180\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\c2f9dd7db911053edcaaadf5fefc500a\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\5dd9f783008543df3e642ff1e99de4e8\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\4b1350e31ff09cc583b34854816d8036\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5ba3bf5367fc012300c6566f20cb7f54\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\8c1770d45c63cf5c462eeb945ef9aa5d\mscorlib.ni.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (IswSvc) – C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe (Check Point Software Technologies)
SRV:64bit: - (FLEXnet Licensing Service 64) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe (Acresso Software Inc.)
SRV:64bit: - (mi-raysat_3dsmax2011_64) – C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe ()
SRV:64bit: - (TabletServiceWacom) – C:\Windows\SysNative\Wacom_Tablet.exe (Wacom Technology, Corp.)
SRV:64bit: - (LVPrcS64) – C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) – C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (MacDriveService) – C:\Program Files\Mediafour\MacDrive 8\MacDriveService.exe (Mediafour Corporation)
SRV - (LMIMaint) – C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) – C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (vsmon) – C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies LTD)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) – C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (LogMeIn) – C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe (LogMeIn, Inc.)
SRV - (KMService) – C:\Windows\SysWOW64\srvany.exe ()
SRV - (nlsX86cc) – C:\Windows\SysWOW64\nlssrv32.exe (Nalpeiron Ltd.)
SRV - (nosGetPlusHelper) getPlus® – C:\Program Files (x86)\NOS\bin\getPlus_Helper_3004.dll (NOS Microsystems Ltd.)
SRV - (RLM-GenArts) – C:\Program Files (x86)\GenArts\rlm\rlm.exe (Reprise Software Inc.)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (Microsoft SharePoint Workspace Audit Service) – D:\Program Files\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (IAStorDataMgrSvc) Intel® – C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (SwitchBoard) – C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (M4LIC) – C:\Program Files (x86)\Common Files\Mediafour\M4LIC.EXE (Mediafour Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (LMIRfsClientNP) – C:\Windows\SysNative\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV:64bit: - (ISWKL) – C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys (Check Point Software Technologies)
DRV:64bit: - (LMIRfsDriver) – C:\Windows\SysNative\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV:64bit: - (lmimirr) – C:\Windows\SysNative\drivers\lmimirr.sys (LogMeIn, Inc.)
DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (Vsdatant) – C:\Windows\SysNative\drivers\vsdatant.sys (Check Point Software Technologies LTD)
DRV:64bit: - (ZMHHPAudioSrv) – C:\Windows\SysNative\drivers\zmhhpau.sys (ZOOM)
DRV:64bit: - (cpuz133) – C:\Windows\SysNative\drivers\cpuz133_x64.sys (Windows ® Win 7 DDK provider)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (wacmoumonitor) – C:\Windows\SysNative\drivers\wacmoumonitor.sys (Wacom Technology)
DRV:64bit: - (Tpkd) – C:\Windows\SysNative\drivers\Tpkd.sys (PACE Anti-Piracy, Inc.)
DRV:64bit: - (LVUVC64) Logitech QuickCam S7500(UVC) – C:\Windows\SysNative\drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) – C:\Windows\SysNative\drivers\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (LVPr2Mon) – C:\Windows\SysNative\drivers\LVPr2M64.sys ()
DRV:64bit: - (LVPr2M64) – C:\Windows\SysNative\drivers\LVPr2M64.sys ()
DRV:64bit: - (wacomvhid) – C:\Windows\SysNative\drivers\wacomvhid.sys (Wacom Technology)
DRV:64bit: - (RDID1053) – C:\Windows\SysNative\drivers\Rdwm1053.sys (Roland Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (61883) – C:\Windows\SysNative\drivers\61883.sys (Microsoft Corporation)
DRV:64bit: - (Avc) – C:\Windows\SysNative\drivers\avc.sys (Microsoft Corporation)
DRV:64bit: - (MSDV) – C:\Windows\SysNative\drivers\msdv.sys (Microsoft Corporation)
DRV:64bit: - (AVCSTRM) – C:\Windows\SysNative\drivers\avcstrm.sys (Microsoft Corporation)
DRV:64bit: - (MSTAPE) – C:\Windows\SysNative\drivers\mstape.sys (Microsoft Corporation)
DRV:64bit: - (MDPMGRNT) – C:\Windows\SysNative\drivers\MDPMGRNT.SYS (Mediafour Corporation)
DRV:64bit: - (MDFSYSNT) – C:\Windows\SysNative\drivers\MDFSYSNT.SYS (Mediafour Corporation)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (JRAID) – C:\Windows\SysNative\drivers\jraid.sys (JMicron Technology Corp.)
DRV:64bit: - (RTL8167) – C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek )
DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (mcdbus) – C:\Windows\SysNative\drivers\mcdbus.sys (MagicISO, Inc.)
DRV:64bit: - (wacommousefilter) – C:\Windows\SysNative\drivers\wacommousefilter.sys (Wacom Technology)
DRV - (LMIInfo) – C:\Program Files (x86)\LogMeIn\x64\rainfo.sys (LogMeIn, Inc.)
DRV - (WinRing0_1_2_0) – D:\DOWNLOAD\Softwares\Real Temp\WinRing0x64.sys (OpenLibSys.org)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
DRV - (mcdbus) – C:\Windows\SysWOW64\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (speedfan) – C:\Windows\SysWOW64\speedfan.sys (Windows ® Server 2003 DDK provider)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files (x86)\ZoneAlarm_Security\prxtbZone.dll (Conduit Ltd.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2645238
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://jp.msn.com/iat/us_jp.aspx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 98 FB B9 1E B9 EC CA 01 [binary data]
IE - HKCU\..\URLSearchHook: {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files (x86)\ZoneAlarm_Security\prxtbZone.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "google.ca"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7550


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: D:\Program Files\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\Microsoft Office\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nosltd.com/getPlus+®,version=1.6.2.97: C:\Program Files (x86)\NOS\bin\np_gp.dll (NOS Microsystems Ltd.)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\PROGRAM FILES\CHECKPOINT\ZAFORCEFIELD\TRUSTCHECKER [2012/01/18 09:06:00 | 000,000,000 | -H-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker [2011/12/27 09:48:21 | 000,000,000 | -H-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/01/07 15:38:33 | 000,000,000 | -H-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/06/21 16:10:34 | 000,000,000 | -H-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/11/11 09:16:12 | 000,000,000 | -H-D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

[2010/05/06 10:20:27 | 000,000,000 | -H-D | M] (No name found) – C:\Users\thierry\AppData\Roaming\Mozilla\Extensions
[2012/01/16 13:10:00 | 000,000,000 | -H-D | M] (No name found) – C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\dkiky1fy.default\extensions
[2012/01/16 13:10:00 | 000,000,000 | -H-D | M] (ZoneAlarm Security Community Toolbar) – C:\Users\thierry\AppData\Roaming\Mozilla\Firefox\Profiles\dkiky1fy.default\extensions\{91da5e8a-3318-4f8c-b67e-5964de3ab546}
[2011/11/10 11:44:56 | 000,000,000 | -H-D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2011/11/22 16:11:20 | 000,000,000 | -H-D | M] (Skype Click to Call) – C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
() (No name found) – C:\USERS\THIERRY\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\DKIKY1FY.DEFAULT\EXTENSIONS\{EDA7B1D7-F793-4E03-B074-E6F303317FB0}.XPI
[2012/01/07 15:38:33 | 000,121,816 | -H– | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010/11/12 18:53:06 | 000,472,808 | -H– | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2011/10/03 16:23:26 | 000,002,252 | -H– | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011/11/10 11:44:55 | 000,002,040 | -H– | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2010/05/13 11:28:42 | 000,001,661 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 adobe.activate.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Program Files\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (ZoneAlarm Security Toolbar) - {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files (x86)\ZoneAlarm_Security\prxtbZone.dll (Conduit Ltd.)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3:64bit: - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Toolbar) - {91da5e8a-3318-4f8c-b67e-5964de3ab546} - C:\Program Files (x86)\ZoneAlarm_Security\prxtbZone.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Getting started with MacDrive 8] C:\Program Files\Mediafour\MacDrive 8\MDGetStarted.exe (Mediafour Corporation)
O4:64bit: - HKLM..\Run: [ISW] C:\Program Files\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [MacDrive 8 application] C:\Program Files\Mediafour\MacDrive 8\MacDrive.exe (Mediafour Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin File not found
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [XapxUnRSMme.exe] C:\ProgramData\XapxUnRSMme.exe ()
O4 - HKLM..\Run: [ZoneAlarm] C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" File not found
O4 - HKCU..\Run: [MysticThumbs] C:\Program Files\MysticCoder\MysticThumbs\MysticThumbsTray.exe (MysticCoder)
O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe File not found
O4 - Startup: C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O4 - Startup: C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\thunderbird.exe - Shortcut.lnk = C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.24.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CF364BD8-440F-49B6-8EA6-E59DF09A7C64}: DhcpNameServer = 192.168.24.1
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Program Files\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/11/10 22:42:24 | 000,000,046 | R— | M] () - J:\autorun.inf – [ UDF ]
O32 - AutoRun File - [2010/03/22 13:24:09 | 000,000,175 | R— | M] () - K:\autorun.inf – [ CDFS ]
O33 - MountPoints2\{2cdd6d5e-5f66-11df-863e-4061862ca4c8}\Shell - "" = AutoRun
O33 - MountPoints2\{2cdd6d5e-5f66-11df-863e-4061862ca4c8}\Shell\AutoRun\command - "" = J:\install.exe – [2011/06/11 06:14:22 | 000,378,880 | R— | M] (Install.exe)
O33 - MountPoints2\{40d71280-280f-11e0-bedc-4061862ca4c8}\Shell - "" = AutoRun
O33 - MountPoints2\{40d71280-280f-11e0-bedc-4061862ca4c8}\Shell\AutoRun\command - "" = K:\setup.exe – [2010/03/12 12:45:10 | 001,377,656 | R— | M] (Microsoft Corporation)
O33 - MountPoints2\{40d71280-280f-11e0-bedc-4061862ca4c8}\Shell\configure\command - "" = K:\setup.exe – [2010/03/12 12:45:10 | 001,377,656 | R— | M] (Microsoft Corporation)
O33 - MountPoints2\{40d71280-280f-11e0-bedc-4061862ca4c8}\Shell\install\command - "" = K:\setup.exe – [2010/03/12 12:45:10 | 001,377,656 | R— | M] (Microsoft Corporation)
O33 - MountPoints2\{60d4a33d-58ab-11df-9a6c-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{60d4a33d-58ab-11df-9a6c-806e6f6e6963}\Shell\AutoRun\command - "" = E:\DVDSetup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs:64bit: AppMgmt - C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L)
Drivers32: vidc.i420 - C:\Windows\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.XVID - C:\Windows\SysWow64\xvidvfw.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/01/23 12:19:46 | 002,054,448 | -H– | C] (Kaspersky Lab ZAO) – C:\Users\thierry\Desktop\TDSSKiller.exe
[2012/01/21 10:52:21 | 000,000,000 | -H-D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2012/01/21 10:49:54 | 000,837,952 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\easyupdatusapiu64.dll
[2012/01/21 10:49:00 | 024,796,992 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcompiler.dll
[2012/01/21 10:49:00 | 024,742,720 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvoglv64.dll
[2012/01/21 10:49:00 | 018,871,616 | -H– | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvoglv32.dll
[2012/01/21 10:49:00 | 017,248,576 | -H– | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcompiler.dll
[2012/01/21 10:49:00 | 015,693,120 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvd3dumx.dll
[2012/01/21 10:49:00 | 013,205,312 | -H– | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvd3dum.dll
[2012/01/21 10:49:00 | 008,791,360 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvwgf2umx.dll
[2012/01/21 10:49:00 | 007,581,504 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuda.dll
[2012/01/21 10:49:00 | 007,041,856 | -H– | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvwgf2um.dll
[2012/01/21 10:49:00 | 005,578,560 | -H– | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuda.dll
[2012/01/21 10:49:00 | 002,808,128 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvapi64.dll
[2012/01/21 10:49:00 | 002,542,912 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvid.dll
[2012/01/21 10:49:00 | 002,458,432 | -H– | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvapi.dll
[2012/01/21 10:49:00 | 002,401,088 | -H– | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvid.dll
[2012/01/21 10:49:00 | 002,232,128 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvcuvenc.dll
[2012/01/21 10:49:00 | 002,099,520 | -H– | C] (NVIDIA Corporation) – C:\Windows\SysWow64\nvcuvenc.dll
[2012/01/21 10:49:00 | 001,533,248 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvdispco64.dll
[2012/01/21 10:49:00 | 001,454,400 | —- | C] (NVIDIA Corporation) – C:\Windows\SysNative\nvgenco64.dll
[2012/01/21 10:49:00 | 000,068,928 | —- | C] (Khronos Group) – C:\Windows\SysNative\OpenCL.dll
[2012/01/21 10:49:00 | 000,061,248 | -H– | C] (Khronos Group) – C:\Windows\SysWow64\OpenCL.dll
[2012/01/21 10:44:59 | 000,000,000 | -H-D | C] – C:\Users\thierry\Desktop\New folder (3)
[2012/01/16 10:02:18 | 000,000,000 | -H-D | C] – C:\Users\thierry\AppData\Roaming\Aescripts
[2012/01/05 11:49:46 | 000,000,000 | -H-D | C] – C:\Users\thierry\AppData\Local\Canon Easy-PhotoPrint EX
[2012/01/05 11:49:21 | 000,000,000 | -H-D | C] – C:\Program Files\Canon
[2012/01/05 10:04:15 | 000,000,000 | -H-D | C] – C:\Program Files\MysticCoder
[2012/01/03 14:39:01 | 000,000,000 | -H-D | C] – C:\VueScan
[2012/01/03 12:44:41 | 000,414,368 | -H– | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/01/03 12:44:17 | 000,000,000 | —D | C] – C:\Windows\SysNative\Macromed
[2011/12/28 10:40:20 | 000,000,000 | -H-D | C] – C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CDex
[2011/12/28 10:40:20 | 000,000,000 | -H-D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex
[2011/12/28 10:36:51 | 000,000,000 | -H-D | C] – C:\Users\thierry\AppData\Roaming\Audacity
[2011/12/28 01:14:11 | 000,032,352 | —- | C] (Mediafour Corporation) – C:\Windows\SysNative\drivers\MDPMGRNT.SYS
[2011/12/28 01:14:11 | 000,000,000 | -H-D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MacDrive 8
[2011/12/28 01:14:10 | 000,000,000 | -H-D | C] – C:\ProgramData\Mediafour
[2011/12/28 01:14:10 | 000,000,000 | -H-D | C] – C:\Program Files\Mediafour
[2011/12/28 01:14:10 | 000,000,000 | -H-D | C] – C:\Program Files\Common Files\Mediafour
[2011/12/28 01:14:10 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Common Files\Mediafour
[2011/12/28 01:13:33 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\Mediafour
[2011/12/27 12:29:20 | 000,700,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2011/12/27 12:29:20 | 000,098,816 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2011/12/27 12:29:20 | 000,038,112 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2011/12/27 12:29:15 | 000,185,416 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2011/12/27 12:29:15 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2011/12/27 12:29:14 | 002,621,440 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2011/12/27 12:29:14 | 000,057,560 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2011/12/27 12:29:14 | 000,043,744 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2011/12/27 09:48:08 | 000,000,000 | -H-D | C] – C:\Users\thierry\AppData\Local\Conduit
[2011/12/27 09:47:50 | 000,000,000 | -H-D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point
[2011/12/27 09:46:43 | 000,000,000 | -H-D | C] – C:\Program Files (x86)\CheckPoint
[2011/12/27 06:05:59 | 000,000,000 | -H-D | C] – C:\Windows\SysNative\CanonIJ Uninstaller Information
[2011/12/27 06:05:59 | 000,000,000 | -H-D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG6100 series
[2011/12/27 06:05:57 | 001,354,240 | —- | C] (CANON INC.) – C:\Windows\SysNative\CNC6100C.dll
[2011/12/27 06:05:57 | 000,348,672 | —- | C] (CANON INC.) – C:\Windows\SysNative\CNC6100L.dll
[2011/12/27 06:05:57 | 000,307,200 | -H– | C] (CANON INC.) – C:\Windows\SysWow64\CNC6100L.dll
[2011/12/27 06:05:57 | 000,112,128 | —- | C] (CANON INC.) – C:\Windows\SysNative\CNC6100I.dll
[2011/12/27 06:05:57 | 000,106,496 | -H– | C] (CANON INC.) – C:\Windows\SysWow64\CNC6100U.dll
[2011/12/27 06:05:53 | 000,248,320 | —- | C] (CANON INC.) – C:\Windows\SysNative\CNMIUAG.DLL
[2011/12/27 06:05:53 | 000,103,424 | —- | C] (Canon Inc.) – C:\Windows\SysNative\CNC6100O.dll
[2011/12/27 06:05:48 | 000,000,000 | -H-D | C] – C:\Program Files\CanonBJ
[2 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/01/23 16:55:42 | 000,000,000 | —- | M] () – C:\Windows\SysNative\drivers\lvuvc.hs
[2012/01/23 16:55:13 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/01/23 13:58:12 | 000,020,512 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/01/23 13:58:12 | 000,020,512 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/01/23 13:57:01 | 000,713,888 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/01/23 13:57:01 | 000,615,122 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/01/23 13:57:01 | 000,103,496 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/01/23 11:00:05 | 000,000,382 | -H– | M] () – C:\Windows\tasks\Intel_C_CVGB0050005D040GGN.job
[2012/01/23 10:56:28 | 000,456,952 | -H– | M] () – C:\ProgramData\XapxUnRSMme.exe
[2012/01/23 10:43:23 | 000,000,041 | -H– | M] () – C:\Users\thierry\LW-Maestro2.key
[2012/01/23 10:28:15 | 000,253,763 | -H– | M] () – C:\Users\thierry\LWEXT9-64.CFG
[2012/01/23 10:28:15 | 000,032,257 | -H– | M] () – C:\Users\thierry\LW9-64.CFG
[2012/01/23 10:28:14 | 000,000,047 | -H– | M] () – C:\Users\thierry\LWMASTERS9.CFG
[2012/01/23 10:06:29 | 000,001,697 | -H– | M] () – C:\Users\thierry\LWHUB9-64.CFG
[2012/01/22 19:23:55 | 000,034,157 | -H– | M] () – C:\Users\thierry\LWM9-64.CFG
[2012/01/22 16:00:00 | 000,000,322 | -H– | M] () – C:\Windows\tasks\At1.job
[2012/01/22 11:47:33 | 000,000,332 | -H– | M] () – C:\Users\thierry\LW-Maestro2-Config.CFG
[2012/01/22 11:08:48 | 000,000,054 | -H– | M] () – C:\Users\thierry\LW-Maestro2-Demo.key
[2012/01/22 09:29:54 | 000,000,352 | -H– | M] () – C:\Users\thierry\LW-Maestro2Demo-Config.CFG
[2012/01/21 09:56:31 | 000,001,278 | -H– | M] () – C:\Users\thierry\Desktop\modeler.exe - Shortcut.lnk
[2012/01/21 09:55:44 | 000,001,285 | -H– | M] () – C:\Users\thierry\Desktop\lightwav.exe - Shortcut.lnk
[2012/01/19 13:10:18 | 002,054,448 | -H– | M] (Kaspersky Lab ZAO) – C:\Users\thierry\Desktop\TDSSKiller.exe
[2012/01/18 14:50:04 | 000,000,358 | -H– | M] () – C:\Windows\SysWow64\hdvsplit.ini
[2012/01/09 19:23:29 | 000,268,469 | —- | M] () – C:\Windows\SysNative\magick-zYJiChXF
[2012/01/09 19:23:29 | 000,268,469 | —- | M] () – C:\Windows\SysNative\magick-7AF5fG_t
[2012/01/09 19:23:29 | 000,000,001 | —- | M] () – C:\Windows\SysNative\magick-ESgVd7d9
[2012/01/09 19:23:29 | 000,000,000 | —- | M] () – C:\Windows\SysNative\magick-3HOpDbJe
[2012/01/07 15:38:37 | 000,002,056 | -H– | M] () – C:\Users\thierry\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/01/04 21:20:46 | 000,094,194 | -H– | M] () – C:\Users\thierry\AppData\Roaming\thierrylog.dat
[2012/01/04 21:13:17 | 000,220,020 | -H– | M] () – C:\Windows\SysWow64\mlfcache.dat
[2012/01/03 12:44:41 | 000,414,368 | -H– | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/01/03 06:40:52 | 000,000,132 | -H– | M] () – C:\Users\thierry\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2012/01/03 05:01:19 | 005,460,992 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/01/02 11:33:04 | 000,002,130 | -H– | M] () – C:\Users\thierry\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Thunderbird.lnk
[2011/12/27 12:29:20 | 000,700,640 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wuapi.dll
[2011/12/27 12:29:20 | 000,098,816 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wudriver.dll
[2011/12/27 12:29:20 | 000,038,112 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wups.dll
[2011/12/27 12:29:15 | 000,185,416 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wuwebv.dll
[2011/12/27 12:29:15 | 000,036,864 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wuapp.exe
[2011/12/27 12:29:14 | 002,621,440 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wucltux.dll
[2011/12/27 12:29:14 | 000,057,560 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wuauclt.exe
[2011/12/27 12:29:14 | 000,043,744 | —- | M] (Microsoft Corporation) – C:\Windows\SysNative\wups2.dll
[2011/12/27 09:59:15 | 000,415,859 | —- | M] () – C:\Windows\SysNative\drivers\vsconfig.xml
[2 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/01/23 10:59:28 | 000,456,952 | -H– | C] () – C:\ProgramData\XapxUnRSMme.exe
[2012/01/22 11:47:54 | 000,000,041 | -H– | C] () – C:\Users\thierry\LW-Maestro2.key
[2012/01/22 11:47:33 | 000,000,332 | -H– | C] () – C:\Users\thierry\LW-Maestro2-Config.CFG
[2012/01/21 09:59:48 | 000,000,054 | -H– | C] () – C:\Users\thierry\LW-Maestro2-Demo.key
[2012/01/21 09:59:16 | 000,000,352 | -H– | C] () – C:\Users\thierry\LW-Maestro2Demo-Config.CFG
[2012/01/21 09:56:31 | 000,001,278 | -H– | C] () – C:\Users\thierry\Desktop\modeler.exe - Shortcut.lnk
[2012/01/21 09:55:44 | 000,001,285 | -H– | C] () – C:\Users\thierry\Desktop\lightwav.exe - Shortcut.lnk
[2012/01/09 19:23:29 | 000,268,469 | —- | C] () – C:\Windows\SysNative\magick-zYJiChXF
[2012/01/09 19:23:29 | 000,268,469 | —- | C] () – C:\Windows\SysNative\magick-7AF5fG_t
[2012/01/09 19:23:29 | 000,000,001 | —- | C] () – C:\Windows\SysNative\magick-ESgVd7d9
[2012/01/09 19:23:29 | 000,000,000 | —- | C] () – C:\Windows\SysNative\magick-3HOpDbJe
[2011/12/27 09:48:25 | 000,415,859 | —- | C] () – C:\Windows\SysNative\drivers\vsconfig.xml
[2011/10/15 00:54:52 | 000,321,856 | -H– | C] () – C:\Windows\SysWow64\nvStreaming.exe
[2011/09/26 12:49:52 | 000,765,952 | -H– | C] () – C:\Windows\SysWow64\xvidcore.dll
[2011/09/26 12:49:52 | 000,180,224 | -H– | C] () – C:\Windows\SysWow64\xvidvfw.dll
[2011/09/04 16:14:13 | 000,084,271 | -H– | C] () – C:\Windows\War3Unin.dat
[2011/09/03 13:57:11 | 000,008,192 | -H– | C] () – C:\Windows\SysWow64\srvany.exe
[2011/06/30 16:57:00 | 000,003,036 | -H– | C] () – C:\Windows\SysWow64\SpoonUninstall-dBpoweramp Ogg Vorbis Codec.dat
[2011/06/30 16:56:37 | 000,008,463 | -H– | C] () – C:\Windows\SysWow64\SpoonUninstall-dBpoweramp DSP Effects.dat
[2011/06/30 16:56:36 | 000,685,944 | -H– | C] () – C:\Windows\SysWow64\SpoonUninstall.exe
[2011/06/30 16:56:36 | 000,013,287 | -H– | C] () – C:\Windows\SysWow64\SpoonUninstall-dBpoweramp Music Converter.dat
[2011/04/21 21:02:31 | 000,000,193 | -H– | C] () – C:\Windows\WORDPAD.INI
[2011/04/06 09:01:42 | 000,080,896 | -H– | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2011/03/05 17:08:21 | 000,220,020 | -H– | C] () – C:\Windows\SysWow64\mlfcache.dat
[2011/01/03 10:30:25 | 000,129,024 | -H– | C] () – C:\Windows\SysWow64\AVERM.dll
[2011/01/03 10:30:25 | 000,028,672 | -H– | C] () – C:\Windows\SysWow64\AVEQT.dll
[2010/11/21 05:17:12 | 000,000,162 | -H– | C] () – C:\Windows\msmmdx9.ini
[2010/11/20 08:47:56 | 000,833,194 | -H– | C] () – C:\Windows\Replicant VST plug-in Uninstaller.exe
[2010/11/08 16:52:32 | 000,172,032 | -H– | C] () – C:\Windows\SysWow64\FxGoWinFu.dll
[2010/08/26 16:53:11 | 000,000,263 | -H– | C] () – C:\Windows\ui_bitmapviewer.ini
[2010/08/26 16:48:48 | 000,007,496 | -H– | C] () – C:\Windows\POLYTRAN.INI
[2010/08/21 15:16:59 | 000,000,358 | -H– | C] () – C:\Windows\SysWow64\hdvsplit.ini
[2010/08/12 10:51:34 | 005,206,016 | -H– | C] () – C:\Windows\SysWow64\mkl_genarts.dll
[2010/08/11 09:32:36 | 000,000,132 | -H– | C] () – C:\Users\thierry\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010/07/21 19:53:22 | 000,302,592 | -H– | C] () – C:\Windows\SysWow64\Adrfilechk.dll
[2010/05/13 11:41:30 | 000,000,021 | -H– | C] () – C:\Windows\SurCode.INI
[2010/05/11 01:12:30 | 000,000,201 | -H– | C] () – C:\Windows\MSUTIL.INI
[2010/05/07 02:55:22 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/03/13 10:25:10 | 000,057,344 | RH– | C] () – C:\Windows\SysWow64\XSIChooser.exe
[2009/07/14 14:38:36 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2009/07/14 11:35:51 | 000,000,741 | -H– | C] () – C:\Windows\SysWow64\NOISE.DAT
[2009/07/14 11:34:42 | 000,215,943 | -H– | C] () – C:\Windows\SysWow64\dssec.dat
[2009/07/14 09:10:29 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2009/07/14 08:42:10 | 000,064,000 | —- | C] () – C:\Windows\SysWow64\BWContextHandler.dll
[2009/07/14 06:03:59 | 000,364,544 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/06/11 06:26:10 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2009/05/12 13:44:02 | 000,000,587 | -H– | C] () – C:\Windows\SysWow64\AcaTTS.ini
[2009/01/14 16:54:58 | 003,661,824 | -H– | C] () – C:\Windows\SysWow64\mkl_wavearts.dll
[2008/06/23 16:19:36 | 002,379,776 | -H– | C] () – C:\Windows\SysWow64\tlvenh23.dll
[2008/03/19 09:34:00 | 000,516,096 | -H– | C] () – C:\Windows\SysWow64\RegisterDialog.dll
[2007/11/09 13:53:34 | 000,172,032 | -H– | C] () – C:\Windows\SysWow64\AcaTtsSapi5.dll
[2005/04/08 11:16:43 | 000,094,194 | -H– | C] () – C:\Users\thierry\AppData\Roaming\thierrylog.dat
[2005/04/02 13:04:22 | 000,338,944 | -H– | C] () – C:\Windows\SysWow64\lffpx7.dll
[2005/04/02 13:04:22 | 000,118,784 | -H– | C] () – C:\Windows\SysWow64\lfkodak.dll
[2004/02/28 05:30:12 | 000,049,152 | -H– | C] () – C:\Windows\SysWow64\TrustSupport.dll
[2003/08/07 14:01:52 | 000,237,568 | -H– | C] () – C:\Windows\SysWow64\lame_enc.dll

========== LOP Check ==========

[2010/12/06 10:28:48 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Ableton
[2011/08/28 16:01:45 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Acapela Group
[2012/01/16 10:02:18 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Aescripts
[2011/07/08 16:45:45 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Afur
[2010/12/09 10:31:50 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Artificial Audio
[2012/01/20 18:24:10 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Audacity
[2010/08/04 18:19:59 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Autodesk
[2011/01/11 17:59:03 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\calibre
[2011/06/08 12:28:56 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Canon
[2010/06/28 03:27:01 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/11/21 15:17:41 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\CheckPoint
[2010/11/22 07:15:45 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Cycling '74
[2010/11/08 17:05:34 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Drumagog 5
[2010/10/23 08:25:22 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\FabFilter
[2011/11/21 13:53:21 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\fhnetwork.com
[2011/08/12 19:15:08 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\FileZilla
[2011/09/26 12:50:39 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\GeoVid
[2010/05/06 11:57:25 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\HD Tune Pro
[2011/07/15 09:41:58 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Hyhoa
[2010/11/19 11:20:45 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\KORG
[2010/05/08 01:45:33 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Leadertech
[2010/11/14 09:54:21 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Lexicon PCM Native
[2011/09/18 11:05:56 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\MAXON
[2010/10/14 22:29:15 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\MP3toiPodAudioBookConverter
[2011/09/07 18:20:15 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\MPEG Streamclip
[2011/06/03 09:35:51 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Music Recognition
[2011/07/08 16:48:17 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\onOne Software
[2010/10/18 19:08:06 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\OpenOffice.org
[2010/05/13 11:41:30 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\PACE Anti-Piracy
[2010/10/10 19:37:33 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Propellerhead Software
[2011/05/29 12:22:01 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Quest3D
[2011/09/06 16:10:01 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\runic games
[2011/03/27 13:32:33 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\RWBYTE
[2010/05/13 11:41:58 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/05/31 12:53:18 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\SynthMaker
[2011/08/28 15:44:23 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Thinstall
[2011/08/09 09:08:32 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Thunderbird
[2011/07/28 21:34:55 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Upqysi
[2012/01/22 23:07:34 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\uTorrent
[2010/06/06 06:37:03 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\WinAVI
[2010/06/06 06:36:08 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\WinFF
[2010/08/29 22:18:21 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Xilisoft
[2011/07/15 09:39:02 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Ymydb
[2011/07/08 16:49:37 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Ytmaby
[2011/07/26 23:44:04 | 000,000,000 | -H-D | M] – C:\Users\thierry\AppData\Roaming\Zuxeku
[2012/01/22 16:00:00 | 000,000,322 | -H– | M] () – C:\Windows\Tasks\At1.job
[2011/12/08 08:21:37 | 000,032,578 | -H– | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2011/12/15 10:25:09 | 000,001,024 | -H– | M] () – C:\.rnd
[2010/11/09 07:55:50 | 000,116,894 | -H– | M] () – C:\INSTALL.LOG
[2010/09/15 17:47:16 | 000,042,933 | -H– | M] () – C:\MP4debug.log
[2010/11/09 08:05:26 | 000,001,396 | -H– | M] () – C:\SpnrLE.txt
[2011/04/06 10:51:55 | 000,000,000 | -H– | M] () – C:\StabilizerTest.txt
[2012/01/23 12:20:18 | 000,161,848 | -H– | M] () – C:\TDSSKiller.2.7.6.0_23.01.2012_12.19.48_log.txt
[2005/04/21 00:15:08 | 000,242,176 | -H– | M] () – C:\UNWISE.EXE
[1 C:\*.tmp files -> C:\*.tmp -> ]

< %systemroot%\Fonts\*.com >
[2009/07/14 14:32:31 | 000,026,040 | -H– | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 14:32:31 | 000,026,489 | -H– | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 14:32:31 | 000,029,779 | -H– | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 14:32:31 | 000,043,318 | -H– | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/11 05:49:50 | 000,000,065 | -H– | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 13:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/05/06 10:11:52 | 000,000,221 | -HS- | M] () – C:\Users\thierry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2012/01/19 13:10:18 | 002,054,448 | -H– | M] (Kaspersky Lab ZAO) – C:\Users\thierry\Desktop\TDSSKiller.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Files - Unicode (All) ==========
(C:\ProgramData\Microsoft\Windows\Start Menu\Programs\????Lite) – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\読取革命Lite

========== Alternate Data Streams ==========

@Alternate Data Stream - 132 bytes -> C:\ProgramData\TEMP:C8B8CEBD
@Alternate Data Stream - 1252 bytes -> C:\Users\thierry\AppData\Local\zTBh3phWS77NOP:O3s55xnZxhHoUaEqILf5g2g
@Alternate Data Stream - 1209 bytes -> C:\ProgramData\Microsoft:uUo8tX2Z7uKBn6TJk9NP
@Alternate Data Stream - 1189 bytes -> C:\ProgramData\Microsoft:2ad3c9r3qL3qCIdut7b5
@Alternate Data Stream - 1095 bytes -> C:\Users\thierry\AppData\Local\kfkDGRaSMUm8:JLsMxRuq5275NFkSBbt3tJel

< End of report >

OTL Extras logfile created on: 1/23/2012 4:58:20 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = D:\DOWNLOAD
64bit- Professional (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

11.99 Gb Total Physical Memory | 9.55 Gb Available Physical Memory | 79.66% Memory free
17.85 Gb Paging File | 15.55 Gb Available in Paging File | 87.14% Paging File free
Paging file location(s): d:\pagefile.sys 6000 6000 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 37.27 Gb Total Space | 1.83 Gb Free Space | 4.92% Space Free | Partition Type: NTFS
Drive D: | 931.41 Gb Total Space | 44.01 Gb Free Space | 4.73% Space Free | Partition Type: NTFS
Drive H: | 100.00 Mb Total Space | 71.66 Mb Free Space | 71.67% Space Free | Partition Type: NTFS
Drive I: | 1.81 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive J: | 5.12 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Drive K: | 1.38 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: I7-860 | User Name: thierry | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – "D:\Program Files\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "D:\Program Files\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [Bridge] – D:\Program Files\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
htmlfile – "D:\Program Files\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "D:\Program Files\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [Bridge] – D:\Program Files\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0998C32D-C8A7-42F4-BC57-C185538C6485}" = Autodesk Softimage 2011 64-bit
"{0B8565BA-BAD5-4732-B122-5FD78EFC50A9}" = Native Instruments Service Center
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6100_series" = Canon MG6100 series MP Drivers
"{14A6AE78-F4D9-4E9A-B27B-BC1E47C93185}" = Trapcode Lux
"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{39BFB02A-9692-0409-A808-3F5C7B1F8953}" = Autodesk 3ds Max 2011 64-bit
"{4388C87D-A0F9-4B0E-96A4-AC3127022C88}" = Max 5.1.6
"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64
"{470DA0AE-96BF-4F9C-888C-360DEF2DE71E}" = Autodesk DirectConnect 2010 R1 (64-bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4FFA2088-8317-3B14-93CD-4C699DB37843}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729
"{5CE0BE99-8B5C-4C32-B562-91BF3EF1F48F}" = Trapcode EchoSpace
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6CFB1B20-ECAE-488F-9FFB-6AD420882E71}" = iTunes
"{6D14F459-DA76-42A5-982F-CDE6BC7D64B2}" = Trapcode Form
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{71AC1C1B-CF68-4380-B040-AFBDF381C481}" = Trapcode Starglow
"{75104836-CAC7-444E-A39E-3F54151942F5}" = Apple Mobile Device Support
"{7563F495-80F5-0409-A514-747C66C22449}" = Autodesk 3ds Max 2011 64-bit Components
"{79A7A51A-CC11-48C2-866D-105E35439F05}" = MysticThumbs
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64
"{90140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0409-1000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-1000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-1000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-1000-0000000FF1CE}_Office14.PROPLUS_{0242505C-4E90-407F-9299-B5B275F50D86}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-1000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-1000-0000000FF1CE}_Office14.PROPLUS_{B51389C8-2890-4633-81D8-47D2A7402274}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-1000-0000000FF1CE}_Office14.PROPLUS_{1779650B-2E44-4A19-8DF6-3866D645764A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-1000-0000000FF1CE}_Office14.PROPLUS_{270CA0B9-9881-44DB-BC3B-37C7E66A044A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0000-1000-0000000FF1CE}_Office14.PROPLUS_{E8B6D35B-0B6F-4DCE-9493-859BF3809A7F}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0043-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2010
"{90140000-0043-0409-1000-0000000FF1CE}_Office14.PROPLUS_{FCD1C311-8B02-4DBD-BA46-1079C629577E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-1000-0000000FF1CE}_Office14.PROPLUS_{516CA4A9-98E6-4F77-A863-CBD8487368E4}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-1000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-1000-0000000FF1CE}_Office14.PROPLUS_{516CA4A9-98E6-4F77-A863-CBD8487368E4}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-1000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-1000-0000000FF1CE}_Office14.PROPLUS_{EC583796-6BBB-47DD-B9CE-B5DA12D71135}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64
"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{9CC7D91D-67FB-4DA0-BFE6-9E4F53B95475}" = MacDrive 8
"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.11.0621
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C503B73F-3DE3-419D-9807-0282C340CDE8}" = Trapcode 3D Stroke
"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64
"{D22915B9-8288-46E3-B55F-0EE2A903F274}" = Red Giant PlaneSpace 64 bit
"{D4C0D93D-7924-486F-9B30-27ABD4EA3BB3}" = Trapcode Shine
"{E489BCB7-D57D-4751-AAB6-589AF66E2F7F}" = Trapcode Particular
"{E9EA5F38-6299-45A1-9D23-F21729A19357}" = Native Instruments Reaktor 5
"{F9A11F80-49DA-11E0-B577-00269E8DC781}" = H-Series_ASIO64
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit" = Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit
"CameraTracker for AE_is1" = CameraTracker 1.0v3 (64 bit) for AE
"CANONIJINBOXADDON200" = Canon Inkjet Printer Driver Add-On Module V2.00
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.54
"CrystalDiskMark_is1" = CrystalDiskMark 3.0.0d
"GenArts Sapphire AE_is1" = GenArts Sapphire Plug-ins 5.04 for After Effects and Compatible
"lvdrivers_12.10" = Logitech Webcam Software Driver Package
"MAXON344035B1" = CINEMA 4D 13.016
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"PerformanceTest 7_is1" = PerformanceTest v7.0 (64-bit)
"RolandRDID0053" = PC-50 Driver
"V-Ray for 3dsmax 2011 for x64" = V-Ray for 3dsmax 2011 for x64
"WinRAR archiver" = WinRAR archiver
"ZoneAlarm Toolbar" = ZoneAlarm Toolbar

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}" = VC 9.0 Runtime
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{058E36DB-6433-4BB9-92A9-396FC4089A0E}" = AdrenaLinn Sync v2
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 23
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java™ 6 Update 22
"{294B9A61-B4D6-4EDB-91BF-354619C43FE2}" = PCM Native Reverb Bundle
"{2AF97DF8-A812-4488-B4AF-ABB87D1B07CF}" = 読取革命Lite
"{2B120B1D-1908-4FB3-8C9D-72128A74E80A}" = ZoneAlarm Security
"{342F5437-C87D-4BB5-89B9-B23E16C6A395}" = Microsoft VC80 Support DLLs
"{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMicron JMB36X Driver
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2008.1
"{3E171899-0175-47CC-84C4-562ACDD4C021}" = OpenOffice.org 3.3
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{411F3ABA-2AB5-4799-AA19-6ADF0A8F7424}" = Adobe Setup
"{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit
"{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets
"{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5C2CBFFD-FC3B-4AA9-993B-CE2B8DA25B87}" = Rhinoceros 4.0
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{620FE3A6-F576-4ECC-9734-FA2DCFA4FF82}" = KORG Legacy Collection - ANALOG EDITION 2007
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{656C6151-03B2-4077-8E29-0950037FC8B4}" = Avid Codecs LE
"{67A68D11-D091-486F-B05A-C89AAB1D7DE3}" = Free JPSViewer
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{67F7D625-2E32-481B-85E4-2D17F0E6778D}" = NaturalReader95
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX
"{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1" = iPhone Explorer 2.005
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{842C6AFC-7856-4fd9-99AF-8900554ACAA2}_is1" = V-Station 1.6
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{957E1902-30C7-4A35-890B-90EB94B956D6}" = Intel® Solid-State Drive Toolbox
"{96F9B265-1367-4E1A-B8B9-F8530EF3AA62}" = Add or Remove Adobe Premiere Pro CS5
"{975951E7-14D0-49AF-A630-89680D12D7F6}" = Autodesk Material Library 2011 Medium Image library
"{976475B8-63E9-4559-BE2C-D26086BE4C40}" = LogMeIn
"{98E68339-9C13-48E0-85DD-61CFC3BDD809}" = Master Restoration
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011
"{A386CC19-1E79-4D4C-A54B-C8747871E4AD}" = ZoneAlarm Firewall
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3
"{AE76D4C2-A1F0-4381-BB13-BE7EE3B05819}" = Heather
"{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4
"{B0B46A1F-EC96-44A4-A9FB-62FE33BAF7DE}" = Rapidshare Auto Downloader 4.1
"{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
"{C00F32AF-E350-43CC-80EB-F0D961A5C9BD}" = calibre
"{C28DD992-5B7B-D195-6841-4EC57DF512BD}" = Adobe Story
"{C4BEACC0-723F-4F45-B49F-B5F764B9508B}" = TopazEnhance
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{CA9483A2-742A-4A72-881D-B81C6B1ACB3E}" = Google SketchUp Pro 7
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CD1E078C-A6B9-47DA-B035-6365C85C7832}" = Autodesk Material Library 2011 Base Image library
"{D0E565B0-03A0-40D9-A514-000634AA58C6}" = KORG Legacy Collection - DIGITAL EDITION
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E82097B9-A3B8-404A-9A92-AC16A8AC9576}" = Adobe After Effects CS5.5
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FBB02B04-C034-4382-A3F6-57416E2752C4}" = Adobe Creative Suite 5 Master Collection
"{FCADA4FF-142C-42A8-B73C-0A54A7F83345}" = Perfect Resize 7.0.1 Professional Edition
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe_3dcb365ab9e01871fb8c6f27b0ea079" = Adobe After Effects CS4
"ASIO4ALL" = ASIO4ALL
"ATF_Event_Preview_2010" = ebook ATF_Event_Preview_2010
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.14 (Unicode)
"Audio Damage Mayhem VST v1.0" = Audio Damage Mayhem VST v1.0
"Audio.Damage.Ronin.v1.0.VST-DAC" = Audio.Damage.Ronin.v1.0.VST-DAC
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"AVS4YOU Video Converter 7_is1" = AVS Video Converter 7
"CalorieKing Nutrition and Exercise Manager" = CalorieKing Nutrition and Exercise Manager (remove only)
"Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data" = Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data
"Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data" = Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data
"CanonSolutionMenuEX" = Canon Solution Menu EX
"CDex" = CDex extraction audio
"CDisplay_is1" = CDisplay 1.8
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Story
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"CrystalDiskInfo_is1" = CrystalDiskInfo 3.5.6b
"dBpoweramp DSP Effects" = dBpoweramp DSP Effects
"dBpoweramp Music Converter" = dBpoweramp Music Converter
"dBpoweramp Ogg Vorbis Codec" = dBpoweramp Ogg Vorbis Codec
"DUNE Demo 1.0_is1" = DUNE Demo 1.0
"East West EWQLSO Gold Edition" = East West EWQLSO Gold Edition
"East West Stormdrum Kompakt" = East West Stormdrum Kompakt
"Easy-PhotoPrint EX" = Canon Easy-PhotoPrint EX
"Easy-PhotoPrint Pro" = Canon Easy-PhotoPrint Pro
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"ffdshow_is1" = ffdshow v1.1.3836 [2011-05-02]
"FileZilla Client" = FileZilla Client 3.3.5.1
"Flash to Video Encoder Pro_is1" = Flash to Video Encoder Pro
"FLV Player2.0.25" = FLV Player
"Fraps" = Fraps
"GenArts Reprise License Manager Server_is1" = GenArts Sapphire RLM Server [removed]
"GenArts Sapphire Plug-ins for After Effects_is1" = GenArts Sapphire Plug-ins 2.06 for After Effects and Compatible
"HD Tune Pro_is1" = HD Tune Pro 4.01
"IL Gross Beat" = IL Gross Beat
"ImageConverter Plus_is1" = ImageConverter Plus 7.1
"InstallShield_{14A6AE78-F4D9-4E9A-B27B-BC1E47C93185}" = Trapcode Lux
"InstallShield_{5CE0BE99-8B5C-4C32-B562-91BF3EF1F48F}" = Trapcode EchoSpace
"InstallShield_{6D14F459-DA76-42A5-982F-CDE6BC7D64B2}" = Trapcode Form
"InstallShield_{71AC1C1B-CF68-4380-B040-AFBDF381C481}" = Trapcode Starglow
"InstallShield_{C503B73F-3DE3-419D-9807-0282C340CDE8}" = Trapcode 3D Stroke
"InstallShield_{D22915B9-8288-46E3-B55F-0EE2A903F274}" = Red Giant PlaneSpace 64 bit
"InstallShield_{D4C0D93D-7924-486F-9B30-27ABD4EA3BB3}" = Trapcode Shine
"InstallShield_{E489BCB7-D57D-4751-AAB6-589AF66E2F7F}" = Trapcode Particular
"JDownloader" = JDownloader
"LightWave 10.0 64-bit 10.0" = LightWave 10.0 64-bit
"LightWave 3D 9.6 64bit 9.6" = LightWave 3D 9.6 64bit
"Live 8.1.3" = Live 8.1.3
"Live 8.2" = Live 8.2
"Live 8.2.1" = Live 8.2.1
"Lumion_is1" = Lumion
"LUXONIX_LFX-1310" = LUXONIX LFX-1310
"Magic Bullet Steady" = Magic Bullet Steady
"Magic ISO Maker v5.5 (build 0281)" = Magic ISO Maker v5.5 (build 0281)
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.60.0.1800
"Minimonsta" = GForce - Minimonsta
"Mozilla Firefox 9.0.1 (x86 en-US)" = Mozilla Firefox 9.0.1 (x86 en-US)
"Mozilla Thunderbird 9.0.1 (x86 en-US)" = Mozilla Thunderbird 9.0.1 (x86 en-US)
"MP Navigator EX 4.0" = Canon MP Navigator EX 4.0
"Native Instruments Reaktor 5" = Native Instruments Reaktor 5
"Native Instruments Service Center" = Native Instruments Service Center
"Native.Instruments Battery v3.0.1.005 VSTi DXi RTAS" = Native.Instruments Battery v3.0.1.005 VSTi DXi RTAS
"Neat Video for After Effects_is1" = Neat Video v2.21 Demo plug-in for After Effects
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Ohmforce Predatohm PRO VST v1.32" = Ohmforce Predatohm PRO VST v1.32
"Ohmicide VST" = Ohm Force - Ohmicide VST
"OJOsoft HD Video Converter_is1" = OJOsoft HD Video Converter
"PCM Native Reverb Bundle" = PCM Native Reverb Bundle
"PSP VintageMeter1.0" = PSP VintageMeter 1.0
"Reason5_is1" = Reason 5.0
"reFX quadraSID 1.6.0_is1" = reFX quadraSID 1.6.0
"Replicant VST plug-in" = Replicant VST plug-in
"Runic Games Torchlight" = Torchlight
"Sonic Charge Synplant_is1" = Sonic Charge Synplant 1.0
"Sonitex STX-1260_is1" = Sonitex STX-1260 v1.0
"SpeedFan" = SpeedFan (remove only)
"Stanza" = Stanza
"SynthMaker" = SynthMaker 1.0
"TallStick TS-AudioToMIDI 3.30" = TallStick TS-AudioToMIDI 3.30 (remove only)
"Tone2 FilterBank3_is1" = FilterBank v3.2
"Tone2 FireBird+_is1" = FireBird+ v1.9
"Tone2 Gladiator full_is1" = Gladiator full
"Trapcode 3DStroke" = Trapcode 3DStroke
"Trapcode Particular" = Trapcode Particular
"Trapcode Shine" = Trapcode Shine
"Ultra Video Splitter_is1" = Ultra Video Splitter 6.0.0919
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.10
"VueScan" = VueScan
"Wacom Tablet Driver" = Wacom Tablet
"Warcraft III" = Warcraft III
"WIDI Recognition System Pro 3.32" = WIDI Recognition System Pro 3.32 (remove only)
"WinAVI Video Converter 10.0_is1" = WinAVI Video Converter
"Xfrog 3.5" = Xfrog 3.5
"Xilisoft iPhone Magic" = Xilisoft iPhone Magic
"Xilisoft Video Converter Ultimate 6" = Xilisoft Video Converter Ultimate 6
"XILS-lab polyKB_is1" = XILS-lab polyKB VSTi RTAS v1.0.1
"XILS-lab XILS-3_is1" = XILS-lab XILS-3 VSTi RTAS v1.2.12
"ZoneAlarm Free" = ZoneAlarm Free
"ZoneAlarm_Security Toolbar" = ZoneAlarm Security Toolbar

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Warcraft III" = Warcraft III: All Products
"WinDirStat" = WinDirStat 1.1.2

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 9/11/2011 12:56:42 AM | Computer Name = i7-860 | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\Autodesk\Softimage
2011\Application\python\Lib\distutils\command\wininst-8_d.exe". Dependent Assembly
Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 9/11/2011 3:50:32 AM | Computer Name = i7-860 | Source = Application Error | ID = 1000
Description = Faulting application name: Bridge.exe, version: 4.0.0.529, time stamp:
0x4b963c03 Faulting module name: QuickTime.qts, version: 7.69.80.9, time stamp:
0x4cf4536a Exception code: 0xc0000005 Fault offset: 0x00079e4c Faulting process id:
0x1340 Faulting application start time: 0x01cc70575fbf1e96 Faulting application path:
C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe Faulting module path: C:\Program
Files (x86)\QuickTime\QTSystem\QuickTime.qts Report Id: b918056a-dc4a-11e0-9fb2-4061862ca4c8

Error - 9/11/2011 3:52:34 AM | Computer Name = i7-860 | Source = Application Error | ID = 1000
Description = Faulting application name: Bridge.exe, version: 4.0.0.529, time stamp:
0x4b963c03 Faulting module name: QuickTime.qts, version: 7.69.80.9, time stamp:
0x4cf4536a Exception code: 0xc0000005 Fault offset: 0x00079e4c Faulting process id:
0x1498 Faulting application start time: 0x01cc705780ed9017 Faulting application path:
C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe Faulting module path: C:\Program
Files (x86)\QuickTime\QTSystem\QuickTime.qts Report Id: 01c8b894-dc4b-11e0-9fb2-4061862ca4c8

Error - 9/11/2011 4:09:32 AM | Computer Name = i7-860 | Source = Application Error | ID = 1000
Description = Faulting application name: Bridge.exe, version: 4.0.0.529, time stamp:
0x4b963c03 Faulting module name: QuickTime.qts, version: 7.69.80.9, time stamp:
0x4cf4536a Exception code: 0xc0000005 Fault offset: 0x00079e4c Faulting process id:
0xeb8 Faulting application start time: 0x01cc7057ebeafa32 Faulting application path:
C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe Faulting module path: C:\Program
Files (x86)\QuickTime\QTSystem\QuickTime.qts Report Id: 608c7b40-dc4d-11e0-9fb2-4061862ca4c8

Error - 9/11/2011 8:15:55 AM | Computer Name = i7-860 | Source = Application Error | ID = 1000
Description = Faulting application name: Bridge.exe, version: 4.0.0.529, time stamp:
0x4b963c03 Faulting module name: QuickTime.qts, version: 7.69.80.9, time stamp:
0x4cf4536a Exception code: 0xc0000005 Fault offset: 0x00079e4c Faulting process id:
0x1658 Faulting application start time: 0x01cc707c1e498e0c Faulting application path:
C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe Faulting module path: C:\Program
Files (x86)\QuickTime\QTSystem\QuickTime.qts Report Id: cc2c78d4-dc6f-11e0-89e2-4061862ca4c8

Error - 9/11/2011 8:21:05 AM | Computer Name = i7-860 | Source = Application Error | ID = 1000
Description = Faulting application name: Bridge.exe, version: 4.0.0.529, time stamp:
0x4b963c03 Faulting module name: QuickTime.qts, version: 7.69.80.9, time stamp:
0x4cf4536a Exception code: 0xc0000005 Fault offset: 0x00079e4c Faulting process id:
0x558 Faulting application start time: 0x01cc707c93e3306e Faulting application path:
C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe Faulting module path: C:\Program
Files (x86)\QuickTime\QTSystem\QuickTime.qts Report Id: 84ee5a13-dc70-11e0-89e2-4061862ca4c8

Error - 9/11/2011 8:22:56 AM | Computer Name = i7-860 | Source = Application Error | ID = 1000
Description = Faulting application name: Bridge.exe, version: 4.0.0.529, time stamp:
0x4b963c03 Faulting module name: QuickTime.qts, version: 7.69.80.9, time stamp:
0x4cf4536a Exception code: 0xc0000005 Fault offset: 0x00079e4c Faulting process id:
0x1734 Faulting application start time: 0x01cc707d499f1957 Faulting application path:
C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe Faulting module path: C:\Program
Files (x86)\QuickTime\QTSystem\QuickTime.qts Report Id: c730138f-dc70-11e0-89e2-4061862ca4c8

Error - 9/11/2011 8:28:23 AM | Computer Name = i7-860 | Source = Application Error | ID = 1000
Description = Faulting application name: Bridge.exe, version: 4.0.0.529, time stamp:
0x4b963c03 Faulting module name: QuickTime.qts, version: 7.69.80.9, time stamp:
0x4cf4536a Exception code: 0xc0000005 Fault offset: 0x00079e4c Faulting process id:
0x11a8 Faulting application start time: 0x01cc707d8bee8ea7 Faulting application path:
C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe Faulting module path: C:\Program
Files (x86)\QuickTime\QTSystem\QuickTime.qts Report Id: 89fe2d66-dc71-11e0-89e2-4061862ca4c8

Error - 9/11/2011 11:30:04 PM | Computer Name = i7-860 | Source = SideBySide | ID = 16842785
Description = Activation context generation failed for "C:\Program Files\Autodesk\Softimage
2011\Application\python\Lib\distutils\command\wininst-8_d.exe". Dependent Assembly
Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"
could not be found. Please use sxstrace.exe for detailed diagnosis.

Error - 9/12/2011 6:23:28 AM | Computer Name = i7-860 | Source = Application Error | ID = 1000
Description = Faulting application name: Live 8.2.1.exe, version: 1.0.0.1, time
stamp: 0x4caf588b Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception
code: 0xc0000005 Fault offset: 0x74cbc9f1 Faulting process id: 0x1aa8 Faulting application
start time: 0x01cc713563df8ce2 Faulting application path: C:\Program Files (x86)\Ableton\Live
8.2.1\Program\Live 8.2.1.exe Faulting module path: unknown Report Id: 410bcdfa-dd29-11e0-97d8-4061862ca4c8

[ System Events ]
Error - 1/23/2012 3:55:34 AM | Computer Name = i7-860 | Source = WMPNetworkSvc | ID = 866314
Description =

Error - 1/23/2012 3:55:34 AM | Computer Name = i7-860 | Source = WMPNetworkSvc | ID = 866314
Description =

Error - 1/23/2012 3:55:34 AM | Computer Name = i7-860 | Source = Service Control Manager | ID = 7023
Description = The Peer Name Resolution Protocol service terminated with the following
error: %%5

Error - 1/23/2012 3:55:34 AM | Computer Name = i7-860 | Source = Service Control Manager | ID = 7001
Description = The Peer Networking Grouping service depends on the Peer Name Resolution
Protocol service which failed to start because of the following error: %%5

Error - 1/23/2012 3:55:45 AM | Computer Name = i7-860 | Source = PNRPSvc | ID = 102
Description =

Error - 1/23/2012 3:55:45 AM | Computer Name = i7-860 | Source = Service Control Manager | ID = 7023
Description = The Peer Name Resolution Protocol service terminated with the following
error: %%5

Error - 1/23/2012 3:55:45 AM | Computer Name = i7-860 | Source = Service Control Manager | ID = 7001
Description = The Peer Networking Grouping service depends on the Peer Name Resolution
Protocol service which failed to start because of the following error: %%5

Error - 1/23/2012 3:55:46 AM | Computer Name = i7-860 | Source = PNRPSvc | ID = 102
Description =

Error - 1/23/2012 3:55:46 AM | Computer Name = i7-860 | Source = Service Control Manager | ID = 7023
Description = The Peer Name Resolution Protocol service terminated with the following
error: %%5

Error - 1/23/2012 3:55:46 AM | Computer Name = i7-860 | Source = Service Control Manager | ID = 7001
Description = The Peer Networking Grouping service depends on the Peer Name Resolution
Protocol service which failed to start because of the following error: %%5


< End of report >