bad case of system check [Solved]

Thanks to all the people on this site I have kept my computer clean. Unfortunately my daughters machine is a mess. She asked for my help way too late.
I believe i"ve gotten rid of system check but most of her files are still hidden. presently running in safe mode w/ networking.
I ran OTL the logs are posted below
Thanks in advance
Patrick
OTL logfile created on: 2/12/2012 12:02:18 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Ana\Desktop
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 0.64 Gb Available Physical Memory | 34.37% Memory free
3.98 Gb Paging File | 2.89 Gb Available in Paging File | 72.60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 138.03 Gb Total Space | 30.22 Gb Free Space | 21.89% Space Free | Partition Type: NTFS
Drive D: | 11.02 Gb Total Space | 1.49 Gb Free Space | 13.57% Space Free | Partition Type: NTFS
Drive E: | 621.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive G: | 778.49 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: TOBE | User Name: Ana | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Ana\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV - (PlugPlay32) – File not found
SRV - (MBAMService) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (nvUpdatusService) – C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (sdCoreService) – C:\Program Files\PC Tools Security\pctsSvc.exe (PC Tools)
SRV - (TabletServicePen) – C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Wacom Technology, Corp.)
SRV - (TouchServicePen) – C:\Program Files\Tablet\Pen\Pen_TouchService.exe (Wacom Technology, Corp.)
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (sdAuxService) – C:\Program Files\PC Tools Security\pctsAuxs.exe (PC Tools)
SRV - (aawservice) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe (Lavasoft)


========== Driver Services (SafeList) ==========

DRV - (MBAMProtector) – C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (nvlddmkm) – C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (PCTCore) – C:\Windows\system32\drivers\PCTCore.sys (PC Tools)
DRV - (wacomvhid) – C:\Windows\System32\drivers\wacomvhid.sys (Wacom Technology)
DRV - (pctDS) – C:\Windows\system32\drivers\pctDS.sys (PC Tools)
DRV - (sptd) – C:\Windows\System32\Drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (wacmoumonitor) – C:\Windows\System32\drivers\wacmoumonitor.sys (Wacom Technology)
DRV - (WacomVTHid) – C:\Windows\System32\drivers\WacomVTHid.sys (Wacom Technology)
DRV - (mcdbus) – C:\Windows\System32\drivers\mcdbus.sys (MagicISO, Inc.)
DRV - (nvrd32) – C:\Windows\system32\drivers\nvrd32.sys (NVIDIA Corporation)
DRV - (nvstor32) – C:\Windows\system32\DRIVERS\nvstor32.sys (NVIDIA Corporation)
DRV - (PCD5SRVC{BD6912E3-AC9D80E8-05040000}) – C:\Program Files\PC-Doctor for Windows\pcd5srvc.pkms (PC-Doctor, Inc.)
DRV - (nvsmu) – C:\Windows\system32\drivers\nvsmu.sys (NVIDIA Corporation)
DRV - (NVENETFD) – C:\Windows\System32\drivers\nvmfdx32.sys (NVIDIA Corporation)
DRV - (HSXHWBS3) – C:\Windows\System32\drivers\HSXHWBS3.sys (Conexant Systems, Inc.)
DRV - (HSF_DP) – C:\Windows\System32\drivers\HSX_DP.sys (Conexant Systems, Inc.)
DRV - (XAudio) – C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (MRV6X32P) – C:\Windows\System32\drivers\MRVW13B.sys (Marvell Semiconductor, Inc)
DRV - (wacommousefilter) – C:\Windows\System32\drivers\wacommousefilter.sys (Wacom Technology)
DRV - (Ps2) – C:\Windows\System32\drivers\PS2.sys (Hewlett-Packard Company)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cndt

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=ZUGO&form;=ZGAPHP
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.msn.com/?wl=true
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = E7 4E B6 01 10 F2 F7 42 A0 83 DB DB 0C 31 F6 0E [binary data]
IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.meebo.com/|http://www.menewsha.com/|http://crysandrea.com/"
FF - prefs.js..extensions.enabledItems: [removed]:0.9.11
FF - prefs.js..extensions.enabledItems: {AE93811A-5C9A-4d34-8462-F7B864FC4696}:3.81
FF - prefs.js..extensions.enabledItems: [removed]:1.6.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1151
FF - prefs.js..extensions.enabledItems: [removed]:1.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=navclient&hl;=en&q;="
FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.3: C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.5: C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKCU\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: C:\PROGRA~1\SONYON~1\npsoe.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Ana\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Ana\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1d5287d1-8a92-0001-1f31-1cec198018d8}: C:\Program Files\AVG\AVG8\ToolbarFF
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/11/29 15:22:48 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/06/09 10:19:51 | 000,000,000 | —D | M]

[2008/12/29 19:29:21 | 000,000,000 | —D | M] (No name found) – C:\Users\Ana\AppData\Roaming\mozilla\Extensions
[2012/02/11 18:41:18 | 000,000,000 | —D | M] (No name found) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions
[2010/05/18 08:25:57 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/02/12 14:09:31 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/07/22 14:14:22 | 000,000,000 | —D | M] (XUL Cache) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\{c8d9ff79-5aaa-4de6-afb9-fbbf30daa013}
[2009/03/25 10:50:02 | 000,000,000 | —D | M] (No name found) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}-trash
[2011/03/28 16:13:41 | 000,000,000 | —D | M] (Personas) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\[removed]
[2010/02/25 10:07:16 | 000,000,000 | —D | M] (Panda3D Game Engine Plug-In) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\[removed]
[2011/01/02 21:33:24 | 000,000,000 | —D | M] (Search Toolbar) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\[removed]
[2011/01/02 21:33:26 | 000,001,919 | —- | M] () – C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\d5btn3lz.default\searchplugins\bing-zugo.xml
[2011/11/29 15:22:47 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/07/19 19:57:48 | 000,000,000 | —D | M] (Skype extension) – C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2011/08/24 11:18:13 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}
() (No name found) – C:\USERS\ANA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D5BTN3LZ.DEFAULT\EXTENSIONS\{AE93811A-5C9A-4D34-8462-F7B864FC4696}.XPI
[2011/11/20 22:04:51 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/07/19 04:05:25 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/03/20 19:52:56 | 000,238,776 | —- | M] (Pando Networks) – C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll
[2011/11/20 19:04:05 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/11/20 19:04:05 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Ana\AppData\Local\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Users\Ana\AppData\Local\Google\Chrome\Application\15.0.874.121\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Ana\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java™ Platform SE 6 U20 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Windows Genuine Advantage (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
CHR - plugin: Pando Web Installer (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Wacom Dynamic Link Library (Enabled) = C:\Program Files\TabletPlugins\npwacom.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Ana\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Skype Extension = C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.5.0.7896_0\
CHR - Extension: AT_WesCravenV2 = C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahooofggegjbnodalhoibemeabkapop\3\

O1 HOSTS File: ([2006/09/18 15:41:30 | 000,000,761 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll File not found
O2 - BHO: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [1A:Stardock TrayMonitor] File not found
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DPService] C:\Program Files\HP\DVDPlay\DPService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [CITY LOUD LOCKS EQ] "C:\ProgramData\hope dead army.1alpp" File not found
O4 - HKCU..\Run: [Cool Road] "C:\ProgramData\mess iso iso.yy6qoge" File not found
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O4 - HKLM..\RunServices: [1A:Stardock TrayMonitor] File not found
O4 - Startup: C:\Users\Ana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Ana\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Ana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C3EFEE7-B1F5-406C-9ACB-9AABE3B7F973}: DhcpNameServer = 192.168.0.1 [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C517DEB-59CF-4806-A1BA-A71265252F3D}: DhcpNameServer = 192.168.0.1 [removed]
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (MrvGINA.dll) - File not found
O24 - Desktop WallPaper: C:\Users\Ana\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ana\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/08/25 07:12:57 | 000,000,074 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2002/07/15 14:09:40 | 000,032,768 | R— | M] (Aeon) - E:\autorun.exe – [ CDFS ]
O32 - AutoRun File - [2002/07/08 11:42:16 | 000,000,220 | R— | M] () - E:\autorun.inf – [ CDFS ]
O32 - AutoRun File - [2007/08/04 09:54:31 | 000,000,000 | —D | M] - G:\AutoRun – [ CDFS ]
O32 - AutoRun File - [2007/08/04 09:54:31 | 000,700,416 | R— | M] (Electronic Arts Inc.) - G:\AutoRun.exe – [ CDFS ]
O32 - AutoRun File - [2007/08/04 08:09:54 | 000,659,456 | R— | M] (Electronic Arts Inc.) - G:\AutoRunGUI.dll – [ CDFS ]
O32 - AutoRun File - [2007/08/04 10:00:52 | 000,000,152 | R— | M] () - G:\autorun.inf – [ CDFS ]
O33 - MountPoints2\{071cf126-b64a-11de-9ccc-002354029687}\Shell\Auto\command - "" = G:\launcher.exe
O33 - MountPoints2\{071cf126-b64a-11de-9ccc-002354029687}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\launcher.exe
O33 - MountPoints2\{692cae14-7c15-11dd-b3a6-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{692cae14-7c15-11dd-b3a6-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe – [2002/07/15 14:09:40 | 000,032,768 | R— | M] (Aeon)
O33 - MountPoints2\{79554103-d694-11dd-93c0-002354029687}\Shell - "" = AutoRun
O33 - MountPoints2\{79554103-d694-11dd-93c0-002354029687}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com)

CREATERESTOREPOINT
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2012/02/12 11:57:37 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Ana\Desktop\OTL.exe
[2012/02/12 03:07:37 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mciseq.dll
[2012/02/12 03:03:38 | 001,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\quartz.dll
[2012/02/12 03:03:38 | 000,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qdvd.dll
[2012/02/11 19:23:58 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Local\{BD1CEDE5-6EF3-4C7A-85D0-A9AC360F0B31}
[2012/02/11 19:23:47 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Local\{9734659A-CD14-4F8D-9671-80982881F240}
[2012/02/11 19:02:42 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Roaming\Malwarebytes
[2012/02/11 19:02:36 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/02/11 19:02:35 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/02/11 19:02:34 | 000,020,464 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2012/02/11 19:02:34 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/02/11 17:55:04 | 000,656,320 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctEFA.sys
[2012/02/11 17:55:04 | 000,338,880 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctDS.sys
[2012/02/11 17:55:01 | 000,251,560 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctgntdi.sys
[2012/02/11 17:55:01 | 000,103,232 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctwfpfilter.sys
[2012/02/11 17:54:55 | 000,239,168 | —- | C] (PC Tools) – C:\Windows\System32\drivers\PCTCore.sys
[2012/02/11 17:54:55 | 000,160,448 | —- | C] (PC Tools) – C:\Windows\System32\drivers\PCTAppEvent.sys
[2012/02/11 17:54:52 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Tools Security
[2012/02/11 17:54:49 | 000,070,536 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctplsg.sys
[2012/02/11 17:54:41 | 000,000,000 | —D | C] – C:\Program Files\PC Tools Security
[2012/02/11 17:54:41 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Roaming\PC Tools
[2012/02/11 17:54:41 | 000,000,000 | —D | C] – C:\Program Files\Common Files\PC Tools
[2012/02/11 17:47:36 | 000,000,000 | —D | C] – C:\ProgramData\PC Tools
[2012/02/11 17:01:29 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Local\{D15A6F1B-B210-44A7-8F82-D124A3AEF183}

========== Files - Modified Within 30 Days ==========

[2012/02/12 11:57:38 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Ana\Desktop\OTL.exe
[2012/02/12 11:07:11 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/02/12 10:32:00 | 000,000,900 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3397783422-3384463677-1815793419-1000UA1cce9256ef622a0.job
[2012/02/12 09:33:48 | 000,003,616 | —- | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/02/12 09:33:48 | 000,003,616 | —- | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/02/12 03:02:11 | 000,604,264 | —- | M] () – C:\Windows\System32\perfh009.dat
[2012/02/12 03:02:11 | 000,103,964 | —- | M] () – C:\Windows\System32\perfc009.dat
[2012/02/11 21:40:04 | 000,000,314 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForAna.job
[2012/02/11 20:05:05 | 000,000,414 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{613A91CE-67C1-4421-90F1-050F3F9C0DEE}.job
[2012/02/11 19:32:07 | 000,000,848 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3397783422-3384463677-1815793419-1000Core1cce9256e479320.job
[2012/02/11 19:02:36 | 000,000,868 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/02/11 17:54:52 | 000,001,748 | —- | M] () – C:\Users\Public\Desktop\Spyware Doctor.lnk
[2012/02/11 17:54:06 | 000,512,992 | —- | M] () – C:\Users\Ana\Desktop\sdsetup_revwire207.exe
[2012/02/11 17:09:41 | 000,000,440 | —- | M] () – C:\ProgramData\tWk0ZUp9RkTgZp

========== Files Created - No Company Name ==========

[2012/02/11 19:27:07 | 000,000,900 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3397783422-3384463677-1815793419-1000UA1cce9256ef622a0.job
[2012/02/11 19:27:06 | 000,000,848 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3397783422-3384463677-1815793419-1000Core1cce9256e479320.job
[2012/02/11 19:02:36 | 000,000,868 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/02/11 17:54:52 | 000,001,748 | —- | C] () – C:\Users\Public\Desktop\Spyware Doctor.lnk
[2012/02/11 17:47:36 | 000,512,992 | —- | C] () – C:\Users\Ana\Desktop\sdsetup_revwire207.exe
[2012/02/11 17:05:25 | 000,000,440 | —- | C] () – C:\ProgramData\tWk0ZUp9RkTgZp
[2011/06/23 14:46:10 | 000,001,256 | -HS- | C] () – C:\Users\Ana\AppData\Local\mr110yktqi3o5x0re4lcdw74726h807gcu42b8w7a
[2011/06/23 14:46:10 | 000,001,256 | -HS- | C] () – C:\ProgramData\mr110yktqi3o5x0re4lcdw74726h807gcu42b8w7a
[2011/05/23 15:08:55 | 000,010,168 | -HS- | C] () – C:\Users\Ana\AppData\Local\h0387md7ekpl3vuk24yy
[2011/05/23 15:08:55 | 000,010,168 | -HS- | C] () – C:\ProgramData\h0387md7ekpl3vuk24yy
[2011/05/20 17:01:49 | 000,002,342 | -HS- | C] () – C:\Users\Ana\AppData\Local\8401sgr55c16mo87yn31xda72w67qm6w8m
[2011/05/20 17:01:49 | 000,002,342 | -HS- | C] () – C:\ProgramData\8401sgr55c16mo87yn31xda72w67qm6w8m
[2011/04/25 13:01:04 | 000,001,184 | -HS- | C] () – C:\Users\Ana\AppData\Local\y24qcl280mo26hc4l3k2x887b4ekht2wptb23ff5
[2011/04/25 13:01:04 | 000,001,184 | -HS- | C] () – C:\ProgramData\y24qcl280mo26hc4l3k2x887b4ekht2wptb23ff5
[2011/04/24 09:55:38 | 000,001,408 | -HS- | C] () – C:\Users\Ana\AppData\Local\p035dbpjt3svb8585w6y4q3422bq336n0wyhmjh
[2011/04/24 09:55:38 | 000,001,408 | -HS- | C] () – C:\ProgramData\p035dbpjt3svb8585w6y4q3422bq336n0wyhmjh
[2011/04/23 19:07:07 | 000,001,252 | -HS- | C] () – C:\Users\Ana\AppData\Local\58bx7eu82nw807u43225osy0i56032q6uj62
[2011/04/23 19:07:07 | 000,001,252 | -HS- | C] () – C:\ProgramData\58bx7eu82nw807u43225osy0i56032q6uj62
[2011/04/22 15:53:16 | 000,001,244 | -HS- | C] () – C:\ProgramData\d7pn6113367ma77ot8s28ry8ea5d377u5ya3c35x36mll6
[2011/04/17 21:40:33 | 000,001,440 | -HS- | C] () – C:\Users\Ana\AppData\Local\m66fi4h7igbk5j7s3q05o5woxb
[2011/04/17 21:40:33 | 000,001,440 | -HS- | C] () – C:\ProgramData\m66fi4h7igbk5j7s3q05o5woxb
[2011/04/10 13:11:06 | 000,001,350 | -HS- | C] () – C:\Users\Ana\AppData\Local\sv24unw18034m5f8c31w3380qikks0ugb36
[2011/04/10 13:11:06 | 000,001,350 | -HS- | C] () – C:\ProgramData\sv24unw18034m5f8c31w3380qikks0ugb36
[2010/12/20 20:45:23 | 000,018,604 | —- | C] () – C:\Users\Ana\AppData\Roaming\UserTile.png
[2010/11/10 19:20:54 | 000,000,000 | —- | C] () – C:\Users\Ana\AppData\Local\prvlcl.dat
[2010/10/05 20:14:29 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2010/10/05 20:13:44 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2010/06/29 23:12:16 | 000,013,312 | —- | C] () – C:\Windows\LPRES.DLL
[2009/12/27 22:35:43 | 000,258,064 | —- | C] () – C:\ProgramData\mess iso iso.8p3v2hg
[2009/12/27 22:13:43 | 000,106,512 | —- | C] () – C:\ProgramData\mess iso iso.rov1tbz
[2009/12/27 21:51:52 | 000,049,168 | —- | C] () – C:\ProgramData\mess iso iso.fk8ee7
[2009/12/27 21:30:02 | 000,356,368 | —- | C] () – C:\ProgramData\mess iso iso.1hy6j2
[2009/12/27 21:08:08 | 000,131,088 | —- | C] () – C:\ProgramData\mess iso iso.7yskg
[2009/12/27 20:46:17 | 000,028,688 | —- | C] () – C:\ProgramData\mess iso iso.70nph
[2009/12/27 20:24:27 | 000,253,968 | —- | C] () – C:\ProgramData\mess iso iso.x4xmx
[2009/12/27 20:02:36 | 000,098,320 | —- | C] () – C:\ProgramData\mess iso iso.qr2oz
[2009/12/27 19:40:46 | 000,364,560 | —- | C] () – C:\ProgramData\mess iso iso.xg2c04
[2009/12/27 19:18:56 | 000,262,160 | —- | C] () – C:\ProgramData\mess iso iso.zx1h7u
[2009/12/27 18:57:05 | 000,200,720 | —- | C] () – C:\ProgramData\mess iso iso.cj8kcq
[2009/12/27 18:35:15 | 000,004,112 | —- | C] () – C:\ProgramData\mess iso iso.xtpwhlo
[2009/12/27 18:13:24 | 000,303,120 | —- | C] () – C:\ProgramData\mess iso iso.wv4i78
[2009/12/27 17:51:34 | 000,167,952 | —- | C] () – C:\ProgramData\mess iso iso.0b0d38
[2009/12/27 17:29:43 | 000,327,696 | —- | C] () – C:\ProgramData\mess iso iso.mzg4bb
[2009/12/27 17:07:53 | 000,073,744 | —- | C] () – C:\ProgramData\mess iso iso.ouh8pkh
[2009/12/27 16:46:02 | 000,139,280 | —- | C] () – C:\ProgramData\mess iso iso.m6nvgap
[2009/12/27 16:24:12 | 000,208,912 | —- | C] () – C:\ProgramData\mess iso iso.mnaep6a
[2009/12/27 16:02:21 | 000,360,464 | —- | C] () – C:\ProgramData\mess iso iso.8d3km
[2009/12/27 15:40:31 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.289km
[2009/12/27 15:18:40 | 000,360,464 | —- | C] () – C:\ProgramData\mess iso iso.jqxw8i
[2009/12/27 14:56:50 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.w2i28ak
[2009/12/27 14:34:59 | 000,323,600 | —- | C] () – C:\ProgramData\mess iso iso.m3bxoqx
[2009/12/27 14:13:09 | 000,389,136 | —- | C] () – C:\ProgramData\mess iso iso.zf22y
[2009/12/27 13:51:19 | 000,102,416 | —- | C] () – C:\ProgramData\mess iso iso.4b7g8
[2009/12/27 13:29:28 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.rhzy1v
[2009/12/27 13:07:38 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.kpv3uz3
[2009/12/27 12:45:47 | 000,225,296 | —- | C] () – C:\ProgramData\mess iso iso.hs1zym
[2009/12/27 12:23:56 | 000,352,272 | —- | C] () – C:\ProgramData\mess iso iso.pivyl
[2009/12/27 12:02:05 | 000,376,848 | —- | C] () – C:\ProgramData\mess iso iso.0oa17
[2009/12/27 11:40:15 | 000,405,520 | —- | C] () – C:\ProgramData\mess iso iso.5hwh2fb
[2009/12/27 11:18:24 | 000,258,064 | —- | C] () – C:\ProgramData\mess iso iso.zf0da
[2009/12/27 10:56:34 | 000,389,136 | —- | C] () – C:\ProgramData\mess iso iso.izq48oe
[2009/12/27 10:34:43 | 000,401,424 | —- | C] () – C:\ProgramData\mess iso iso.he1y8k6
[2009/12/27 10:12:53 | 000,040,976 | —- | C] () – C:\ProgramData\mess iso iso.nie18o
[2009/12/27 09:51:02 | 000,098,320 | —- | C] () – C:\ProgramData\mess iso iso.qmuj8
[2009/12/27 09:29:12 | 000,192,528 | —- | C] () – C:\ProgramData\mess iso iso.pa51a
[2009/12/27 09:07:21 | 000,172,048 | —- | C] () – C:\ProgramData\mess iso iso.8gb8xj
[2009/12/27 08:45:31 | 000,401,424 | —- | C] () – C:\ProgramData\mess iso iso.69xfvg
[2009/12/27 08:23:40 | 000,258,064 | —- | C] () – C:\ProgramData\mess iso iso.7dzp5
[2009/12/27 08:01:50 | 000,126,992 | —- | C] () – C:\ProgramData\mess iso iso.xx5ae04
[2009/12/27 07:39:59 | 000,213,008 | —- | C] () – C:\ProgramData\mess iso iso.l6ix0b
[2009/12/27 07:18:09 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.gcrw49
[2009/12/27 06:56:18 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.mjkfl
[2009/12/27 06:34:27 | 000,167,952 | —- | C] () – C:\ProgramData\mess iso iso.3wu98pq
[2009/12/27 06:12:37 | 000,397,328 | —- | C] () – C:\ProgramData\mess iso iso.9kgzx
[2009/12/27 05:50:32 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.6liiyav
[2009/12/27 05:28:32 | 000,249,872 | —- | C] () – C:\ProgramData\mess iso iso.db773c
[2009/12/27 05:06:41 | 000,335,888 | —- | C] () – C:\ProgramData\mess iso iso.6llr1
[2009/12/27 04:44:48 | 000,065,552 | —- | C] () – C:\ProgramData\mess iso iso.vzq9h4
[2009/12/27 04:22:56 | 000,290,832 | —- | C] () – C:\ProgramData\mess iso iso.ko8oev
[2009/12/27 04:01:05 | 000,294,928 | —- | C] () – C:\ProgramData\mess iso iso.k7b11t1
[2009/12/27 03:39:14 | 000,114,704 | —- | C] () – C:\ProgramData\mess iso iso.t92icm7
[2009/12/27 03:17:24 | 000,155,664 | —- | C] () – C:\ProgramData\mess iso iso.48b2k
[2009/12/27 02:55:33 | 000,356,368 | —- | C] () – C:\ProgramData\mess iso iso.bptz0
[2009/12/27 02:33:43 | 000,368,656 | —- | C] () – C:\ProgramData\mess iso iso.gxgq59
[2009/12/27 02:11:52 | 000,331,792 | —- | C] () – C:\ProgramData\mess iso iso.9w36u1
[2009/12/27 01:50:02 | 000,352,272 | —- | C] () – C:\ProgramData\mess iso iso.nnomtjj
[2009/12/27 01:28:11 | 000,299,024 | —- | C] () – C:\ProgramData\mess iso iso.kz43m
[2009/12/27 01:06:21 | 000,311,312 | —- | C] () – C:\ProgramData\mess iso iso.d3uuyt8
[2009/12/27 00:44:30 | 000,319,504 | —- | C] () – C:\ProgramData\mess iso iso.6z3vskh
[2009/12/27 00:22:40 | 000,151,568 | —- | C] () – C:\ProgramData\mess iso iso.zidpe
[2009/12/27 00:00:49 | 000,110,608 | —- | C] () – C:\ProgramData\mess iso iso.y8zwc9
[2009/12/26 23:38:59 | 000,249,872 | —- | C] () – C:\ProgramData\mess iso iso.d3c7m
[2009/12/26 23:17:07 | 000,000,016 | —- | C] () – C:\ProgramData\mess iso iso.hkurt
[2009/12/26 22:55:16 | 000,008,208 | —- | C] () – C:\ProgramData\mess iso iso.yalyun
[2009/12/26 22:33:26 | 000,077,840 | —- | C] () – C:\ProgramData\mess iso iso.lhevo6
[2009/12/26 22:11:35 | 000,061,456 | —- | C] () – C:\ProgramData\mess iso iso.m6u7gp
[2009/12/26 21:49:44 | 000,303,120 | —- | C] () – C:\ProgramData\mess iso iso.5xxqw
[2009/12/26 21:27:53 | 000,352,272 | —- | C] () – C:\ProgramData\mess iso iso.p0x9l
[2009/12/26 21:06:03 | 000,069,648 | —- | C] () – C:\ProgramData\mess iso iso.vw32p
[2009/12/26 20:44:12 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.r67vw
[2009/12/26 20:22:22 | 000,327,696 | —- | C] () – C:\ProgramData\mess iso iso.blz9m
[2009/12/26 20:00:31 | 000,180,240 | —- | C] () – C:\ProgramData\mess iso iso.hoxzs
[2009/12/26 19:38:40 | 000,110,608 | —- | C] () – C:\ProgramData\mess iso iso.e9jy0
[2009/12/26 19:16:50 | 000,102,416 | —- | C] () – C:\ProgramData\mess iso iso.qkjdkn
[2009/12/26 18:54:58 | 000,368,656 | —- | C] () – C:\ProgramData\mess iso iso.04wu7
[2009/12/26 18:33:08 | 000,110,608 | —- | C] () – C:\ProgramData\mess iso iso.ccp5wa4
[2009/12/26 18:11:17 | 000,225,296 | —- | C] () – C:\ProgramData\mess iso iso.uldjl
[2009/12/26 17:49:20 | 000,315,408 | —- | C] () – C:\ProgramData\mess iso iso.m23d80m
[2009/12/26 17:27:30 | 000,360,464 | —- | C] () – C:\ProgramData\mess iso iso.hbcbkem
[2009/12/26 17:05:40 | 000,335,888 | —- | C] () – C:\ProgramData\mess iso iso.5359m
[2009/12/26 16:43:49 | 000,077,840 | —- | C] () – C:\ProgramData\mess iso iso.px5354
[2009/12/26 16:21:58 | 000,225,296 | —- | C] () – C:\ProgramData\mess iso iso.mt67g13
[2009/12/26 16:00:08 | 000,016,400 | —- | C] () – C:\ProgramData\mess iso iso.is2lsen
[2009/12/26 15:38:17 | 000,405,520 | —- | C] () – C:\ProgramData\mess iso iso.x6it33v
[2009/12/26 15:16:27 | 000,008,208 | —- | C] () – C:\ProgramData\mess iso iso.l5cjaez
[2009/12/26 14:54:36 | 000,278,544 | —- | C] () – C:\ProgramData\mess iso iso.3rkf5
[2009/12/26 14:32:45 | 000,106,512 | —- | C] () – C:\ProgramData\mess iso iso.5yzpu
[2009/12/26 14:10:54 | 000,204,816 | —- | C] () – C:\ProgramData\mess iso iso.wp8ab
[2009/12/26 13:49:04 | 000,151,568 | —- | C] () – C:\ProgramData\mess iso iso.iap60w6
[2009/12/26 13:27:13 | 000,299,024 | —- | C] () – C:\ProgramData\mess iso iso.05n4b
[2009/12/26 13:05:22 | 000,036,880 | —- | C] () – C:\ProgramData\mess iso iso.uwtf4g
[2009/12/26 12:43:32 | 000,266,256 | —- | C] () – C:\ProgramData\mess iso iso.stmyw
[2009/12/26 12:21:42 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.91xi1
[2009/12/26 11:59:51 | 000,253,968 | —- | C] () – C:\ProgramData\mess iso iso.5xkahhm
[2009/12/26 11:38:00 | 000,090,128 | —- | C] () – C:\ProgramData\mess iso iso.gq6wb
[2009/12/26 11:16:10 | 000,110,608 | —- | C] () – C:\ProgramData\mess iso iso.blr9u
[2009/12/26 10:54:19 | 000,204,816 | —- | C] () – C:\ProgramData\mess iso iso.jgaqlt
[2009/12/26 10:32:29 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.xp63t
[2009/12/26 10:10:37 | 000,319,504 | —- | C] () – C:\ProgramData\mess iso iso.ud0twk5
[2009/12/26 09:48:47 | 000,241,680 | —- | C] () – C:\ProgramData\mess iso iso.e5a22v
[2009/12/26 09:26:56 | 000,331,792 | —- | C] () – C:\ProgramData\mess iso iso.raa7b6
[2009/12/26 09:05:06 | 000,073,744 | —- | C] () – C:\ProgramData\mess iso iso.t4229k
[2009/12/26 08:43:16 | 000,155,664 | —- | C] () – C:\ProgramData\mess iso iso.2v1c56
[2009/12/26 08:21:25 | 000,077,840 | —- | C] () – C:\ProgramData\mess iso iso.7a4hl
[2009/12/26 07:59:35 | 000,405,520 | —- | C] () – C:\ProgramData\mess iso iso.mbn29
[2009/12/26 07:37:44 | 000,204,816 | —- | C] () – C:\ProgramData\mess iso iso.g7vja
[2009/12/26 07:15:54 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.f30thm
[2009/12/26 06:54:03 | 000,356,368 | —- | C] () – C:\ProgramData\mess iso iso.940lk
[2009/12/26 06:32:13 | 000,065,552 | —- | C] () – C:\ProgramData\mess iso iso.y029g7w
[2009/12/26 06:10:22 | 000,311,312 | —- | C] () – C:\ProgramData\mess iso iso.kk81qn8
[2009/12/26 05:48:30 | 000,073,744 | —- | C] () – C:\ProgramData\mess iso iso.w0tgb0
[2009/12/26 05:26:36 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.ttvglq
[2009/12/26 05:04:46 | 000,016,400 | —- | C] () – C:\ProgramData\mess iso iso.bc3ue3
[2009/12/26 04:42:49 | 000,172,048 | —- | C] () – C:\ProgramData\mess iso iso.y7ne1
[2009/12/26 04:20:56 | 000,167,952 | —- | C] () – C:\ProgramData\mess iso iso.lgrbz
[2009/12/26 03:59:05 | 000,368,656 | —- | C] () – C:\ProgramData\mess iso iso.ebwbk
[2009/12/26 03:37:15 | 000,217,104 | —- | C] () – C:\ProgramData\mess iso iso.trs55
[2009/12/26 03:15:24 | 000,049,168 | —- | C] () – C:\ProgramData\mess iso iso.zxoifk5
[2009/12/26 02:53:32 | 000,368,656 | —- | C] () – C:\ProgramData\mess iso iso.yk2id
[2009/12/26 02:31:41 | 000,376,848 | —- | C] () – C:\ProgramData\mess iso iso.sdydqyk
[2009/12/26 02:09:51 | 000,237,584 | —- | C] () – C:\ProgramData\mess iso iso.86kq6qz
[2009/12/26 01:48:01 | 000,028,688 | —- | C] () – C:\ProgramData\mess iso iso.eb9bkx
[2009/12/26 01:26:09 | 000,180,240 | —- | C] () – C:\ProgramData\mess iso iso.mp0ee
[2009/12/26 01:04:19 | 000,307,216 | —- | C] () – C:\ProgramData\mess iso iso.owjh9aw
[2009/12/26 00:42:29 | 000,389,136 | —- | C] () – C:\ProgramData\mess iso iso.ac4perb
[2009/12/26 00:20:38 | 000,122,896 | —- | C] () – C:\ProgramData\mess iso iso.4wk9s08
[2009/12/25 23:58:47 | 000,126,992 | —- | C] () – C:\ProgramData\mess iso iso.yo8p9
[2009/12/25 23:36:57 | 000,098,320 | —- | C] () – C:\ProgramData\mess iso iso.pqsqv
[2009/12/25 23:15:07 | 000,086,032 | —- | C] () – C:\ProgramData\mess iso iso.1g8qluz
[2009/12/25 22:53:16 | 000,126,992 | —- | C] () – C:\ProgramData\mess iso iso.p6oml
[2009/12/25 22:31:26 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.98shqqh
[2009/12/25 22:09:35 | 000,229,392 | —- | C] () – C:\ProgramData\mess iso iso.hsc30
[2009/12/25 21:47:45 | 000,196,624 | —- | C] () – C:\ProgramData\mess iso iso.2xanyx
[2009/12/25 21:25:54 | 000,372,752 | —- | C] () – C:\ProgramData\mess iso iso.3ecxtf
[2009/12/25 21:04:04 | 000,364,560 | —- | C] () – C:\ProgramData\mess iso iso.9f965du
[2009/12/25 20:42:13 | 000,249,872 | —- | C] () – C:\ProgramData\mess iso iso.xp4k1yy
[2009/12/25 20:20:23 | 000,188,432 | —- | C] () – C:\ProgramData\mess iso iso.45816ko
[2009/12/25 19:58:32 | 000,090,128 | —- | C] () – C:\ProgramData\mess iso iso.iphzh93
[2009/12/25 19:36:42 | 000,045,072 | —- | C] () – C:\ProgramData\mess iso iso.e6fr7
[2009/12/25 19:14:51 | 000,208,912 | —- | C] () – C:\ProgramData\mess iso iso.lk8zd
[2009/12/25 18:53:00 | 000,040,976 | —- | C] () – C:\ProgramData\mess iso iso.lxp5q7
[2009/12/25 18:31:10 | 000,176,144 | —- | C] () – C:\ProgramData\mess iso iso.qk5uh
[2009/12/25 18:09:20 | 000,389,136 | —- | C] () – C:\ProgramData\mess iso iso.yjjf9
[2009/12/25 17:47:27 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.6ftep
[2009/12/25 17:25:36 | 000,139,280 | —- | C] () – C:\ProgramData\mess iso iso.17l3f
[2009/12/25 17:03:46 | 000,143,376 | —- | C] () – C:\ProgramData\mess iso iso.jio5irz
[2009/12/25 16:41:54 | 000,004,112 | —- | C] () – C:\ProgramData\mess iso iso.41t14
[2009/12/25 16:20:03 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.r277qm
[2009/12/25 15:58:13 | 000,192,528 | —- | C] () – C:\ProgramData\mess iso iso.nluoou
[2009/12/25 15:36:23 | 000,081,936 | —- | C] () – C:\ProgramData\mess iso iso.fcvmi
[2009/12/25 15:14:32 | 000,143,376 | —- | C] () – C:\ProgramData\mess iso iso.2kjc5o
[2009/12/25 14:52:42 | 000,135,184 | —- | C] () – C:\ProgramData\mess iso iso.ksikj1
[2009/12/25 14:30:51 | 000,208,912 | —- | C] () – C:\ProgramData\mess iso iso.4jsde
[2009/12/25 14:09:01 | 000,335,888 | —- | C] () – C:\ProgramData\mess iso iso.58ekz
[2009/12/25 13:47:10 | 000,024,592 | —- | C] () – C:\ProgramData\mess iso iso.r5i9skm
[2009/12/25 13:25:19 | 000,237,584 | —- | C] () – C:\ProgramData\mess iso iso.8q4sdhp
[2009/12/25 13:03:29 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.5z0f2hr
[2009/12/25 12:41:39 | 000,376,848 | —- | C] () – C:\ProgramData\mess iso iso.kxhfi
[2009/12/25 12:19:48 | 000,086,032 | —- | C] () – C:\ProgramData\mess iso iso.w5q4n5v
[2009/12/25 11:57:58 | 000,364,560 | —- | C] () – C:\ProgramData\mess iso iso.va8g9
[2009/12/25 11:36:07 | 000,200,720 | —- | C] () – C:\ProgramData\mess iso iso.vhcg1z
[2009/12/25 11:14:16 | 000,090,128 | —- | C] () – C:\ProgramData\mess iso iso.0g7hy
[2009/12/25 10:52:25 | 000,008,208 | —- | C] () – C:\ProgramData\mess iso iso.szhj74p
[2009/12/25 10:30:35 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.mbx1n
[2009/12/25 10:08:44 | 000,114,704 | —- | C] () – C:\ProgramData\mess iso iso.5q0gdw
[2009/12/25 09:46:54 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.utbzoj
[2009/12/25 09:25:04 | 000,290,832 | —- | C] () – C:\ProgramData\mess iso iso.ym7la
[2009/12/25 09:03:13 | 000,167,952 | —- | C] () – C:\ProgramData\mess iso iso.bzubpq
[2009/12/25 08:41:22 | 000,065,552 | —- | C] () – C:\ProgramData\mess iso iso.mhu0c9
[2009/12/25 08:19:32 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.mssyiq
[2009/12/25 07:57:41 | 000,090,128 | —- | C] () – C:\ProgramData\mess iso iso.d3424
[2009/12/25 07:35:50 | 000,122,896 | —- | C] () – C:\ProgramData\mess iso iso.16a88g
[2009/12/25 07:14:00 | 000,208,912 | —- | C] () – C:\ProgramData\mess iso iso.kfc8rn
[2009/12/25 06:52:08 | 000,294,928 | —- | C] () – C:\ProgramData\mess iso iso.kpfvmzj
[2009/12/25 06:30:17 | 000,073,744 | —- | C] () – C:\ProgramData\mess iso iso.1fbft
[2009/12/25 06:08:27 | 000,229,392 | —- | C] () – C:\ProgramData\mess iso iso.h4wsv
[2009/12/25 05:46:34 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.9m8xp45
[2009/12/25 05:24:39 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.nzmspl
[2009/12/25 05:02:47 | 000,319,504 | —- | C] () – C:\ProgramData\mess iso iso.rd6o5x
[2009/12/25 04:40:55 | 000,024,592 | —- | C] () – C:\ProgramData\mess iso iso.uszw7
[2009/12/25 04:19:04 | 000,241,680 | —- | C] () – C:\ProgramData\mess iso iso.81l08
[2009/12/25 03:57:13 | 000,040,976 | —- | C] () – C:\ProgramData\mess iso iso.8k1bt
[2009/12/25 03:35:22 | 000,020,496 | —- | C] () – C:\ProgramData\mess iso iso.sbzmb
[2009/12/25 03:13:32 | 000,069,648 | —- | C] () – C:\ProgramData\mess iso iso.ioicinc
[2009/12/25 02:51:42 | 000,086,032 | —- | C] () – C:\ProgramData\mess iso iso.3mfk9p
[2009/12/25 02:29:51 | 000,077,840 | —- | C] () – C:\ProgramData\mess iso iso.xukrnto
[2009/12/22 02:39:59 | 000,000,016 | —- | C] () – C:\ProgramData\mess iso iso.xoz34
[2009/12/21 19:18:11 | 000,135,184 | —- | C] () – C:\ProgramData\hope dead army.1alpp
[2009/12/21 19:17:12 | 000,262,160 | —- | C] () – C:\ProgramData\mess iso iso.yy6qoge
[2009/12/21 19:17:10 | 000,028,688 | —- | C] () – C:\ProgramData\mess iso iso.lwy2o
[2009/10/15 19:30:35 | 000,003,584 | —- | C] () – C:\Users\Ana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/03 14:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009/08/03 14:07:42 | 000,230,768 | —- | C] () – C:\Windows\System32\OGAEXEC.exe
[2009/05/26 22:39:53 | 000,069,632 | —- | C] () – C:\Windows\System32\xmltok.dll
[2009/05/26 22:39:53 | 000,036,864 | —- | C] () – C:\Windows\System32\xmlparse.dll
[2009/03/25 20:50:37 | 000,000,604 | —- | C] () – C:\Users\Ana\AppData\Local\Notes.stt
[2009/03/25 20:50:37 | 000,000,008 | —- | C] () – C:\Users\Ana\AppData\Local\Reminders.stt
[2009/01/09 09:31:30 | 000,000,446 | —- | C] () – C:\Windows\Sierra.ini
[2008/12/30 01:59:36 | 000,016,976 | —- | C] () – C:\Users\Ana\AppData\Roaming\wklnhst.dat
[2008/12/29 20:11:08 | 000,000,680 | —- | C] () – C:\Users\Ana\AppData\Local\d3d9caps.dat
[2008/12/29 19:36:36 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/08/25 07:13:58 | 000,107,357 | —- | C] () – C:\Windows\hpqins13.dat
[2008/08/25 06:46:22 | 000,327,680 | —- | C] () – C:\Windows\System32\pythoncom25.dll
[2008/08/25 06:46:22 | 000,102,400 | —- | C] () – C:\Windows\System32\pywintypes25.dll
[2008/05/16 10:58:04 | 000,012,632 | —- | C] () – C:\Windows\System32\lsdelete.exe
[2006/11/02 06:53:49 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 06:44:53 | 002,243,000 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 04:33:01 | 000,604,264 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 04:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 04:33:01 | 000,103,964 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 04:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 04:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 02:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 02:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 01:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 01:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat

========== LOP Check ==========

[2008/12/29 22:02:53 | 000,000,000 | -HSD | M] – C:\Users\Ana\AppData\Roaming\.#
[2011/10/25 20:47:14 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\.minecraft
[2010/08/12 00:05:47 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\.purple
[2010/11/18 14:30:31 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\DAEMON Tools Lite
[2009/06/16 18:54:15 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\DAEMON Tools Pro
[2011/12/31 13:26:30 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\Dropbox
[2011/01/18 10:51:05 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\GetRightToGo
[2008/12/31 00:17:40 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\iWin
[2010/01/13 09:02:23 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\Multi File Downloader
[2010/10/05 11:58:26 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\muvee Technologies
[2010/12/20 20:45:22 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\PeerNetworking
[2011/07/17 12:55:46 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\SystemRequirementsLab
[2008/12/30 01:59:38 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\Template
[2011/10/26 09:25:58 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\uTorrent
[2009/01/06 20:44:15 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\WinBatch
[2010/03/30 21:55:19 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\Windows Live Writer
[2010/12/25 13:38:09 | 000,000,000 | —D | M] – C:\Users\Ana\AppData\Roaming\WTouch
[2012/02/11 17:22:11 | 000,032,570 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2012/02/11 20:05:05 | 000,000,414 | -H– | M] () – C:\Windows\Tasks\User_Feed_Synchronization-{613A91CE-67C1-4421-90F1-050F3F9C0DEE}.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2008/08/25 07:12:57 | 000,000,074 | —- | M] () – C:\autoexec.bat
[2009/04/10 22:36:38 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2008/08/25 07:27:44 | 000,008,192 | R-S- | M] () – C:\BOOTSECT.BAK
[2006/09/18 15:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2010/08/23 19:25:02 | 000,000,375 | —- | M] () – C:\FINIS_IT.TXT
[2009/01/31 10:09:51 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2009/01/31 10:09:51 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/02/12 11:06:25 | 2325,487,616 | -HS- | M] () – C:\pagefile.sys
[2012/02/11 18:59:18 | 000,000,368 | —- | M] () – C:\rkill.log

< %systemroot%\Fonts\*.com >
[2006/11/02 06:35:34 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 06:35:34 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 06:35:34 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2010/10/05 20:26:22 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 15:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2010/11/10 02:28:46 | 000,301,936 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >
[2009/11/04 20:51:10 | 000,001,642 | —- | M] () – C:\Users\Ana\AppData\Roaming\Microsoft\LastFlashConfig.WFC

< %PROGRAMFILES%\*.* >
[2008/01/20 20:57:01 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2008/01/20 21:31:11 | 015,716,352 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/20 21:31:01 | 000,102,400 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2008/01/20 21:31:12 | 000,020,480 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 04:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 04:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >

< %USERPROFILE%\Desktop\*.exe >
[2012/02/12 11:57:38 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Ana\Desktop\OTL.exe
[2012/02/11 17:54:06 | 000,512,992 | —- | M] () – C:\Users\Ana\Desktop\sdsetup_revwire207.exe
[2007/09/04 13:53:04 | 011,480,576 | R— | M] (Maxis, a division of Electronic Arts Inc.) – C:\Users\Ana\Desktop\Sims2EP6.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-02-12 09:08:05

========== Alternate Data Streams ==========

@Alternate Data Stream - 171 bytes -> C:\ProgramData\TEMP:DFC5A2B2

< End of report >

OTL Extras logfile created on: 2/12/2012 12:02:18 PM - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Ana\Desktop
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 0.64 Gb Available Physical Memory | 34.37% Memory free
3.98 Gb Paging File | 2.89 Gb Available in Paging File | 72.60% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 138.03 Gb Total Space | 30.22 Gb Free Space | 21.89% Space Free | Partition Type: NTFS
Drive D: | 11.02 Gb Total Space | 1.49 Gb Free Space | 13.57% Space Free | Partition Type: NTFS
Drive E: | 621.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive G: | 778.49 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: TOBE | User Name: Ana | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.bat [@ = batfile] – Reg Error: Key error. File not found
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile – Reg Error: Key error.
htmlfile [print] – rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 0
"InternetSettingsDisableNotify" = 0
"AutoUpdateDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{027463FE-914D-403C-A8E1-A52C237DB1CC}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{03FC9D8F-3723-41E1-B30A-641F2FB200F8}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{047A26BE-CF72-4D41-A687-DF5795CCA811}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{113026E1-1480-4805-B999-D146098A0DDB}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{14022ADE-992E-43BE-8399-AD8601644AE7}" = lport=10243 | protocol=6 | dir=in | app=system |
"{17C8212B-1A8C-4013-96CE-E742A157625B}" = lport=445 | protocol=6 | dir=in | app=system |
"{182AE77B-ADB8-4155-920A-6FE253896A59}" = lport=139 | protocol=6 | dir=in | app=system |
"{26A885B0-7639-44FF-BD21-D2ED9B4F4A11}" = rport=445 | protocol=6 | dir=out | app=system |
"{40E55E8F-EE72-49BC-8FC7-21FEEB31565D}" = rport=139 | protocol=6 | dir=out | app=system |
"{54AAAB17-7939-41C2-B554-6061EFCC3C5C}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{581B448B-1A17-4194-AAF3-40B4EDFFEF1F}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5D27730A-C0FE-4F9F-9DD9-51D9F8680A5F}" = rport=138 | protocol=17 | dir=out | app=system |
"{5DB2585B-E77A-4518-9011-70B953617C86}" = lport=2869 | protocol=6 | dir=in | app=system |
"{63969950-705C-4931-9380-8317C5AB53E6}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{6516DACA-27BE-4A7D-B5E8-6D205039F651}" = lport=138 | protocol=17 | dir=in | app=system |
"{7145E891-D6F7-4D15-BA31-75FE2DE433A0}" = lport=137 | protocol=17 | dir=in | app=system |
"{719B796E-3F06-4B53-8710-841931D4884E}" = lport=2869 | protocol=6 | dir=in | app=system |
"{72F723B5-4D66-45AF-8E83-2B9C5DE27DE3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{797214C9-B97D-420D-9C2A-120150855428}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{7FA43325-B2A4-48CC-92CC-42B8A08DCD0B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{80154D9B-D757-4BF2-AAD4-0033646C2ECF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{918A58F5-8C65-47AA-9FAA-09E6BF9A3A45}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{969442A2-591B-457B-8556-B25155F3B29C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9C54BFB7-D177-4C7B-82F2-12834EEB5F2A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{A283D333-2DA6-4DE9-AC40-5A4F06EE0487}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{A91E82BD-D477-4823-941C-1A75787B4929}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B8EA185C-2E47-44D0-AB05-784BC8EFD9A8}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C0232D69-1A71-42D7-B1D9-25F75CF6585E}" = rport=137 | protocol=17 | dir=out | app=system |
"{C6A5C77D-6731-4C44-8FEC-246D6AC20A89}" = lport=2869 | protocol=6 | dir=in | app=system |
"{CF155F3D-BE97-43AD-9634-4B30E6598147}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D089C245-B79A-4FA0-AD13-9CA3920675BD}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{D562F1C5-F95F-418E-BEE8-224E4B239718}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DDA29136-57DE-4E11-B7B2-B7CD5AFD28BC}" = rport=10243 | protocol=6 | dir=out | app=system |
"{F3273707-87E1-437C-88DF-CC9B7E2B9147}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |
"{FCACDFEC-D001-4B72-B312-24DD2CC5D0BB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06737CA5-82AF-4FA9-93B0-14674BE21AF7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{07D21B6A-8E6E-4B8A-AD45-06ED2A519986}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{0D959772-10A0-4969-B022-D40F96C46A67}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{12CF7F5B-D867-4E5B-817C-904C4C8E388E}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{13753348-0853-49B7-90E7-542E11E0E169}" = dir=in | app=c:\program files\avg\avg8\avgemc.exe |
"{155D9AC0-C7ED-436E-9751-F7C80BB62B20}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe |
"{17597DA3-3314-47A2-B0A9-7049A060E2DE}" = protocol=17 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{1CC82739-0D20-4D69-8CF0-1FD8016066F3}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{2137CE7F-E0BD-484D-AD9F-4390BD96D668}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{23E0BAC6-2842-49A0-866A-918384EE2B36}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{2D714EDF-CFB9-4C93-963B-D2F531E680B7}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{31508220-9059-4F9B-BC9E-6ED57C484E12}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{36FD300D-8842-4183-B32F-C2CAA51067F4}" = dir=in | app=c:\program files\hp\dvdplay\dpservice.exe |
"{378E4B14-251A-401F-9C81-557C1DC075E7}" = protocol=17 | dir=in | app=c:\users\ana\appdata\roaming\dropbox\bin\dropbox.exe |
"{3A74ACAA-04FD-494C-8EAF-0C21346D3DD2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{40791B02-836B-43B5-97AC-FEB01B3C03D9}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{45B3BEDA-E9E8-484C-97FD-13ADBC1DDFF2}" = protocol=6 | dir=out | app=system |
"{45D2E318-43D3-4615-80EF-1872DDDE7933}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{46575D36-1296-4A58-888B-37C2823DE6DD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{48C78B3F-DEC7-4278-86EB-221F1C6F04EB}" = dir=in | app=c:\program files\hp\dvdplay\dvdplay.exe |
"{4BFC43C5-966B-4085-AE5A-76E2ED4ECE7B}" = dir=in | app=c:\program files\windows live\mesh\moe.exe |
"{572DCE7C-29E2-4DEE-98EE-8026DBFC5E4D}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{60DD1FB4-AE01-4940-814B-C701B42B7D2C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6F551DC1-1337-47C9-A1D5-CD88DA4E0777}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{74502795-A9FC-4857-87D4-CA45B9F26510}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{77A79906-E454-427C-8C9C-D265344B760C}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{8425550F-D306-408F-9643-D53B7FC43A9C}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{8F744E19-45E0-424E-A29A-C547398E22F8}" = protocol=6 | dir=out | app=system |
"{994FCD5C-68EE-4B77-BBDD-8FD90A006BEC}" = protocol=6 | dir=in | app=c:\users\ana\appdata\roaming\dropbox\bin\dropbox.exe |
"{A1D0EFE3-AC39-4061-907C-3F7D0DC9CA80}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{A8B29F74-F5F6-440F-AB59-335724A2A45F}" = protocol=6 | dir=in | app=c:\program files\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{ABE6D80F-AAE7-43F9-B052-146ECD0CA0F1}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B37A82CD-BE6B-4726-A824-1DCB9BE628CC}" = protocol=6 | dir=out | app=c:\windows\system32\wudfhost.exe |
"{C635790C-939F-48F5-B4A4-AD8C09703E47}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C71C656A-8A0F-4137-B9D8-2A3C65CE50DD}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{D25451E3-D226-4D56-BFED-1D114E04DB93}" = dir=in | app=c:\program files\avg\avg8\avgupd.exe |
"{DE6606F1-9093-4DAC-B177-E5684969CE48}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E706D24A-7C8B-4C1C-9ADB-DEDA199DE101}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{F119961E-2C66-4ADE-9D6F-B8CE30DD84AF}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FB9F1A3F-45AC-4C8C-AEA3-85F605BB3003}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FF5D173C-3BAE-40D3-ABFF-04F85B9A6A62}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"TCP Query User{1E32F6EC-44D2-4937-B482-956E107249AF}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{5E2A3B44-8533-4A31-BA1E-6DF873D07BFA}C:\program files\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"TCP Query User{C4F5EE76-0F72-458F-A527-1B2D0AF3C905}C:\program files\secondlife\slvoice.exe" = protocol=6 | dir=in | app=c:\program files\secondlife\slvoice.exe |
"TCP Query User{D23E89A3-6862-4577-840F-61B1E580574B}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"TCP Query User{EAB84D3F-C4BF-41A8-A1DB-96BB7F221E87}C:\users\ana\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\ana\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{F080C3E9-9596-4714-BE4B-51C291AD8797}C:\program files\pidgin\pidgin.exe" = protocol=6 | dir=in | app=c:\program files\pidgin\pidgin.exe |
"UDP Query User{2FE26C12-5783-4C78-B64B-5E9104AB4CE9}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{309CCAE8-45D8-4F72-ABEE-CD0F84D7E53B}C:\program files\secondlife\slvoice.exe" = protocol=17 | dir=in | app=c:\program files\secondlife\slvoice.exe |
"UDP Query User{3A021730-71D6-44B1-892D-A5A8E207CBB8}C:\users\ana\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\ana\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{530432C8-FDE9-4281-B0EE-C7FCD0B63CC5}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"UDP Query User{8722BB4D-D1F9-491D-9877-625CEEED0A83}C:\program files\pidgin\pidgin.exe" = protocol=17 | dir=in | app=c:\program files\pidgin\pidgin.exe |
"UDP Query User{C22DAAD9-65AB-4ED2-9020-D58BDC34A46B}C:\program files\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{01501EBA-EC35-4F9F-8889-3BE346E5DA13}" = MSXML4 Parser
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{17504ED4-DB08-40A8-81C2-27D8C01581DA}" = Windows Live Remote Service Resources
"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java™ 6 Update 27
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{294BF709-D758-4363-8D75-01479AD20927}" = Windows Live Family Safety
"{305D4B08-5807-4475-B1C8-D54685534864}" = LightScribeTemplateLabeler
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java™ SE Runtime Environment 6 Update 1
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}" = HP Advisor
"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = DVD Play
"{464B3406-A4D0-4914-910F-7CA4380DCC13}" = Windows Live Remote Client Resources
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5DAA9C36-8F8B-462F-8CCA-E205BC3751F5}" = HP Active Support Library
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B976ADF-8AE8-434E-B282-A06C7F624D2F}" = Python 2.5.2
"{70014586-7BBA-4A92-A610-CDC896C48F8F}" = NETGEAR WG311v3 PCI Adapter
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{74DC0593-6BC6-4001-AD5F-D810AFB68D86}" = HP Update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7F10292C-A190-4176-A665-A1ED3478DF86}" = LightScribe System Software
"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{821DABD6-26F2-49E5-AE55-40A589ADBE6D}" = Emperor: Rise of the Middle Kingdom
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{84EBDF39-4B33-49D7-A0BD-EB6E2C4E81C1}" = Windows Live Sync
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97ABD26A-3249-46CB-B2E2-F66E64B2E480}" = HP Demo
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback
"{A0640EC2-B97E-4FC1-AD14-227C9E386BB4}" = HP Recovery Manager RSS
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.4
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 275.33
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.3.5
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Toolbars
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C27C82E4-9C53-4D76-9ED3-A01A3D5EE679}" = HP Customer Experience Enhancements
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E9E34215-82EF-4909-BE2F-F581F0DC9062}" = DirectX for Managed Code Update (Summer 2004)
"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FA3B34BE-4246-4062-90A3-34CBBEA12B72}" = HPTCSSetup
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"7-Zip" = 7-Zip 4.65
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop 7.0" = Adobe Photoshop 7.0
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4
"Age of Mythology 1.0" = Age of Mythology
"Audacity_is1" = Audacity 1.2.6
"CNXT_MODEM_PCI_HSF" = PCIe Soft Data Fax Modem with SmartCP
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"HijackThis" = HijackThis 2.0.2
"InstallShield_{70014586-7BBA-4A92-A610-CDC896C48F8F}" = NETGEAR WG311v3 PCI Adapter
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.60.1.1000
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 8.0.1 (x86 en-US)" = Mozilla Firefox 8.0.1 (x86 en-US)
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"OfficeTrial" = Microsoft Office Home and Student 60 day trial
"Origin" = Origin
"PC-Doctor for Windows" = Hardware Diagnostic Tools
"Pen Tablet Driver" = Bamboo
"Search Toolbar" = Search Toolbar
"SeaStorm 3D Screensaver_is1" = SeaStorm 3D Screensaver 1.5
"Sierra Utilities" = Sierra Utilities
"Spyware Doctor" = Spyware Doctor 8.0
"Wacom WebTabletPlugin for IE" = WebTablet IE Plugin
"Wacom WebTabletPlugin for Netscape" = WebTablet Netscape Plugin
"WinLiveSuite" = Windows Live Essentials

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Driver Performer 2010" = Driver Performer 2010
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 12/28/2011 5:16:25 PM | Computer Name = Tobe | Source = System Restore | ID = 8210
Description =

Error - 12/29/2011 2:00:17 AM | Computer Name = Tobe | Source = SPP | ID = 16387
Description =

Error - 12/29/2011 2:00:17 AM | Computer Name = Tobe | Source = System Restore | ID = 8193
Description =

Error - 12/29/2011 2:00:17 AM | Computer Name = Tobe | Source = System Restore | ID = 8210
Description =

Error - 12/31/2011 2:50:16 PM | Computer Name = Tobe | Source = WinMgmt | ID = 10
Description =

Error - 12/31/2011 3:11:09 PM | Computer Name = Tobe | Source = Application Error | ID = 1000
Description = Faulting application svchost.exe, version 6.0.6001.18000, time stamp
0x47918b89, faulting module jvm.dll, version 20.2.0.6, time stamp 0x4e2580fd, exception
code 0xc0000005, fault offset 0x0001b74c, process id 0x518, application start time
0x01ccc7ecdf8f63fe.

Error - 12/31/2011 3:25:23 PM | Computer Name = Tobe | Source = WinMgmt | ID = 10
Description =

Error - 12/31/2011 4:06:11 PM | Computer Name = Tobe | Source = Application Hang | ID = 1002
Description = The program avgui.exe version 10.0.0.1150 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Problem Reports and Solutions control panel. Process
ID: b80 Start Time: 01ccc7f73afd9d56 Termination Time: 219

Error - 12/31/2011 4:13:28 PM | Computer Name = Tobe | Source = Application Hang | ID = 1002
Description = The program firefox.exe version 8.0.1.4341 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Problem Reports and Solutions control panel. Process
ID: cd8 Start Time: 01ccc7f73529c346 Termination Time: 7740

Error - 12/31/2011 4:25:38 PM | Computer Name = Tobe | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 2/12/2012 11:51:28 AM | Computer Name = Tobe | Source = BROWSER | ID = 8007
Description =

Error - 2/12/2012 11:52:28 AM | Computer Name = Tobe | Source = BROWSER | ID = 8007
Description =

Error - 2/12/2012 1:06:06 PM | Computer Name = Tobe | Source = sptd | ID = 262148
Description = Driver detected an internal error in its data structures for .

Error - 2/12/2012 1:07:12 PM | Computer Name = Tobe | Source = EventLog | ID = 6008
Description = The previous system shutdown at 11:04:03 AM on 2/12/2012 was unexpected.

Error - 2/12/2012 1:07:48 PM | Computer Name = Tobe | Source = DCOM | ID = 10005
Description =

Error - 2/12/2012 1:07:54 PM | Computer Name = Tobe | Source = DCOM | ID = 10005
Description =

Error - 2/12/2012 1:07:57 PM | Computer Name = Tobe | Source = DCOM | ID = 10005
Description =

Error - 2/12/2012 1:07:58 PM | Computer Name = Tobe | Source = DCOM | ID = 10005
Description =

Error - 2/12/2012 1:08:26 PM | Computer Name = Tobe | Source = Service Control Manager | ID = 7001
Description =

Error - 2/12/2012 1:08:26 PM | Computer Name = Tobe | Source = Service Control Manager | ID = 7026
Description =


< End of report >

OK, here is the OTL.Txt log
OTL logfile created on: 2/12/2012 5:02:28 PM - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Ana\Desktop
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 0.15 Gb Available Physical Memory | 8.23% Memory free
3.98 Gb Paging File | 2.29 Gb Available in Paging File | 57.53% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 138.03 Gb Total Space | 30.19 Gb Free Space | 21.87% Space Free | Partition Type: NTFS
Drive D: | 11.02 Gb Total Space | 1.49 Gb Free Space | 13.57% Space Free | Partition Type: NTFS
Drive E: | 621.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive G: | 778.49 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: TOBE | User Name: Ana | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Custom Scans ==========


< %USERPROFILE%\..|smtmp;true;true;true /FP >
[2012/02/11 17:04:51 | 000,000,000 | —D | M] – C:\Users\Ana\..\Ana\AppData\Local\Temp\smtmp
[2012/02/11 17:04:51 | 000,000,000 | —D | M] – C:\Users\Ana\..\Ana\AppData\Local\Temp\smtmp\1
[2012/02/11 17:04:51 | 000,000,000 | —D | M] – C:\Users\Ana\..\Ana\AppData\Local\Temp\smtmp\2
[2012/02/11 17:04:51 | 000,000,000 | —D | M] – C:\Users\Ana\..\Ana\AppData\Local\Temp\smtmp\4

< %temp%\smtmp\*.* /s > >


< MD5 for: EXPLORER.EXE >
[2008/10/29 00:20:29 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008/10/29 00:29:41 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008/10/29 21:59:17 | 002,927,616 | —- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009/04/10 22:27:38 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\explorer.exe
[2009/04/11 00:27:36 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2009/04/10 22:27:38 | 002,926,592 | —- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008/10/27 20:15:02 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008/01/20 20:34:05 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >
[2006/11/02 06:38:53 | 000,036,864 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\en-US\explorer.exe.mui
[2006/11/02 06:38:53 | 000,036,864 | —- | M] (Microsoft Corporation) Unable to obtain MD5 – C:\Windows\winsxs\x86_microsoft-windows-explorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_03bbc52176b6ba20\explorer.exe.mui

< MD5 for: EXPLORER.EXE-7A3328DA.PF >
[2012/02/11 20:04:03 | 000,224,074 | —- | M] () MD5=DBA461B106CABBFD5490F59453BFB1AD – C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf

< MD5 for: IEXPLORE.EXE >
[2010/09/08 11:30:52 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=02FF22F3AF0108DA2A563ABC9867049F – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18527_none_2f536bb51a085bcf\iexplore.exe
[2009/10/27 07:11:33 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=03EF289E8F82CBC4E492658864C7C51A – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22550_none_2fb594d03344a0e4\iexplore.exe
[2008/08/25 07:30:16 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=07ED775D6DB4BFA96D7CFB09EB228418 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16681_none_2d26424d1d17e8b7\iexplore.exe
[2009/01/14 22:14:36 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=0844F5B9CB3BB85A917D347EF1565B6C – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16809_none_2d84c7c91ccfce35\iexplore.exe
[2009/12/18 06:28:58 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=115076DAD84312F3A51698C15BC39D39 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21184_none_2db2bdca3632ff3d\iexplore.exe
[2008/08/25 07:29:00 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=182CAF7403705ACCB51211A761080B8F – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20777_none_2dc0b0c03628049a\iexplore.exe
[2009/07/18 06:16:49 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=1D5A01AA2DE47C052AF46D7EBCB003A3 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16890_none_2d1a75e31d20e59f\iexplore.exe
[2009/07/18 15:39:09 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=1D8163DBFECAEDB9C48C5F55084BC491 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18294_none_2f04b5b11a43dbec\iexplore.exe
[2009/03/02 22:18:52 | 000,636,072 | —- | M] (Microsoft Corporation) MD5=1DD66A2851DACDEC32EAE8F9A8865ABD – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21023_none_2df29b2236034119\iexplore.exe
[2009/04/24 10:25:27 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=1F44940EF1D07D0BDAF80E55853DFBD0 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16851_none_2d46b5dd1cff8f32\iexplore.exe
[2010/03/09 10:56:18 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=259E27152180B895DF395ED3E412B90E – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.17037_none_2d6231791cea1fc3\iexplore.exe
[2012/02/11 18:58:11 | 001,008,141 | —- | M] () MD5=28C253A0212B221E96F6A17499B91651 – C:\Users\Ana\Pictures\Ana's pics\Gothic\iExplore.exe
[2010/05/04 12:56:53 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=29A7F81290165264010B784A7D217561 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18470_none_2f16582d1a3738fc\iexplore.exe
[2009/04/10 22:27:46 | 000,636,080 | —- | M] (Microsoft Corporation) MD5=2C5168C856455CC43C4B4E1CC1920001 – C:\Program Files\Internet Explorer\iexplore.exe
[2009/04/11 00:27:44 | 000,636,080 | —- | M] (Microsoft Corporation) MD5=2C5168C856455CC43C4B4E1CC1920001 – C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_314d791517204c15\iexplore.exe
[2009/04/10 22:27:46 | 000,636,080 | —- | M] (Microsoft Corporation) MD5=2C5168C856455CC43C4B4E1CC1920001 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6002.18005_none_314d791517204c15\iexplore.exe
[2010/09/09 09:50:19 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=3EF3476EF687FE18856A6148C6082452 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22760_none_2faac8b0334cb723\iexplore.exe
[2010/05/04 12:31:09 | 000,634,656 | —- | M] (Microsoft Corporation) MD5=424CEA5CB5999B2A6A3ED643EA20C97F – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22685_none_2f9a286433587091\iexplore.exe
[2010/12/20 09:42:20 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=4319F2A5C725D9E0B9E01744E02D32BE – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18565_none_2f262b711a2a98e5\iexplore.exe
[2008/10/15 22:27:53 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=4CBA2F58668F2D5F3259CBE73E227F25 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20937_none_2debf43c36078f24\iexplore.exe
[2009/10/27 09:11:10 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=4F9B04D546C23A295F3F0AE015BE51DB – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16945_none_2d5588d71cf3d5c4\iexplore.exe
[2008/01/20 20:33:22 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=5B92133D3E7FB2644677686305E29E81 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18000_none_2f62000919fe80c9\iexplore.exe
[2010/10/20 11:48:33 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=63E2F08404C9824C6CE6EE4A308B4083 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18542_none_2f38ca6b1a1d14fe\iexplore.exe
[2012/01/13 14:53:20 | 000,182,856 | —- | M] () MD5=63EEC8A8B221AB79045E776E5F592868 – C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe
[2010/03/11 10:40:22 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=67C769016A79E6FC65D1755E5D6ADAB3 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22653_none_2fb897943341ea10\iexplore.exe
[2009/12/18 09:42:45 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=6C8AC3469BBEFE194BB18B2D84D98252 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18385_none_2f1087cd1a3ad679\iexplore.exe
[2011/04/21 08:34:57 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=6C93AC7C0A8718E2A1543DB1B1B3B19F – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22905_none_2ff0ad763317887e\iexplore.exe
[2010/03/09 10:30:03 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=74E60C93D1C9A40354D839776CCF53DF – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18444_none_2f3ac9191a1b4a85\iexplore.exe
[2011/04/21 09:02:30 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=77B9A891222FB46B13E414B99E1AF842 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18639_none_2f4a9e431a0ea795\iexplore.exe
[2009/10/27 07:24:29 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=79B60CC26404F8FC2B351A7551D93C17 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18349_none_2f3fc8a51a16cc11\iexplore.exe
[2009/07/18 06:16:45 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=7FCF4E704A48D95202F3E7A1E1A21412 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21089_none_2db7bd56362e80c9\iexplore.exe
[2009/10/27 07:22:34 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=80675329E0FD54F016C4F8A83C616349 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21148_none_2de1fea2360ef4d5\iexplore.exe
[2010/06/28 10:33:13 | 000,634,656 | —- | M] (Microsoft Corporation) MD5=867D06F3C473F65921F5EDF35866FF14 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22720_none_2fd60860332c475f\iexplore.exe
[2009/03/02 22:32:44 | 000,636,072 | —- | M] (Microsoft Corporation) MD5=8BA2B7A05F88BE0D45237A0994AD8366 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22389_none_2f9e23da3354de78\iexplore.exe
[2008/08/25 07:29:00 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=9437CA21CD48C9B6BFD6F5AC0143D251 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16643_none_2d5382911cf5aba1\iexplore.exe
[2010/03/09 10:32:31 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=97496AA4590CB101EF990060F7055F3D – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21242_none_2ddbfecc361459f2\iexplore.exe
[2009/08/27 08:04:53 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=9E45866CD349219784CD5A7620DBEB8A – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16916_none_2d76f8e51cda9b48\iexplore.exe
[2009/03/02 22:40:22 | 000,636,072 | —- | M] (Microsoft Corporation) MD5=9E6C1527D9A2C64BFD780AA23075380F – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18226_none_2f5265b91a094b03\iexplore.exe
[2008/08/25 07:30:16 | 000,625,664 | —- | M] (Microsoft Corporation) MD5=9F1427F203CA078005C9943800929640 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20823_none_2df2c11a360310b0\iexplore.exe
[2009/08/27 07:43:41 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=A76AFC309AA55CD607A28AC41C7D7603 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21116_none_2e006dd235f86e54\iexplore.exe
[2010/12/20 09:29:40 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=B021EBF2A5344FF71A641B2EFDAF813E – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22816_none_2fe6dbee331ec09f\iexplore.exe
[2010/06/28 10:19:40 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=B6D7D54B736056991109F169737592C7 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18498_none_2f08baa51a403b96\iexplore.exe
[2009/08/27 07:38:13 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=BBF84F317553520BB78AEF7B047325C1 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18319_none_2f60386919fe783e\iexplore.exe
[2011/02/18 09:23:49 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=BECD30E162ACFD7A04B1F87FBBAFF70E – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22857_none_2fbc9c88333e49ba\iexplore.exe
[2009/12/18 06:56:05 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=C071905121F6DE5F399550FC70138FEC – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16982_none_2d2748491d16f983\iexplore.exe
[2011/02/18 09:49:27 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=C84ABBF7D7AF2F7D004D800D10430FF5 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18602_none_2f640c0119fca261\iexplore.exe
[2009/04/24 10:03:18 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=D5271AC4A06AD9D1E2EA0151B79B2657 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.21046_none_2ddffc283610c500\iexplore.exe
[2009/04/24 10:01:36 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=D6157423C117F24D24695866A1D0A93F – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22418_none_2fe8d4ea331cfeb1\iexplore.exe
[2008/10/15 22:42:58 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=D762642A109433EEDCD332B0A9511137 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16764_none_2d3ee4e91d04fa01\iexplore.exe
[2009/03/02 22:22:10 | 000,636,072 | —- | M] (Microsoft Corporation) MD5=EA4BE33726155F89D89A3FE7142878E0 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.16830_none_2d5b556b1cf03df9\iexplore.exe
[2009/07/18 05:55:42 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=EBEE9E4421F35CD861107DDA0266FBB1 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22475_none_2fa4f48433505a52\iexplore.exe
[2010/10/21 12:50:10 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=ED748658B126A4617A4BA4A8F4F10DBE – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22784_none_2f992a0033595461\iexplore.exe
[2009/01/14 22:18:47 | 000,634,024 | —- | M] (Microsoft Corporation) MD5=F0B1CA517977BA2FF6DA33F1B966C488 – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6000.20996_none_2daa146a36391d73\iexplore.exe
[2009/04/24 10:08:04 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=F294D8EEB05C835EC44A12CE0A1DFE7A – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.18248_none_2f3ec6751a17b593\iexplore.exe
[2009/12/18 06:27:08 | 000,634,632 | —- | M] (Microsoft Corporation) MD5=F47755101C622AF18EE669ECEB3A97AD – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22585_none_2f9a267e3358736a\iexplore.exe
[2009/08/27 07:19:25 | 000,634,648 | —- | M] (Microsoft Corporation) MD5=FE2DFF83B7753AC47C553EF7D5289BEE – C:\Windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_6.0.6001.22508_none_2ff3a6bc3314dfe7\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >
[2006/11/02 06:38:50 | 000,016,384 | —- | M] (Microsoft Corporation) MD5=3CCDDDBC49DEACA370F39A9F0E146A1B – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui
[2006/11/02 06:38:50 | 000,016,384 | —- | M] (Microsoft Corporation) MD5=3CCDDDBC49DEACA370F39A9F0E146A1B – C:\Windows\winsxs\x86_microsoft-windows-i..texplorer.resources_31bf3856ad364e35_6.0.6000.16386_en-us_3b55b11a57da5590\iexplore.exe.mui

< MD5 for: WINLOGON.EXE >
[2012/01/13 14:53:20 | 000,182,856 | —- | M] () MD5=63EEC8A8B221AB79045E776E5F592868 – C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2009/04/11 00:28:13 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\SoftwareDistribution\Download\cd2b15b1a90e884578188440a1660b12\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2009/04/10 22:28:14 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\System32\winlogon.exe
[2009/04/10 22:28:14 | 000,314,368 | —- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2008/01/20 20:34:38 | 000,314,880 | —- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >
[2008/01/20 20:35:28 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=26AC28BF50DC112BAA794A83E08588F0 – C:\Windows\System32\en-US\winlogon.exe.mui
[2008/01/20 20:35:28 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=26AC28BF50DC112BAA794A83E08588F0 – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6001.18000_en-us_caf8918b0416723a\winlogon.exe.mui
[2006/11/02 06:38:26 | 000,028,672 | —- | M] (Microsoft Corporation) MD5=A1D2856F3EC3C86EBBF1442B0245A8B3 – C:\Windows\winsxs\x86_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.0.6000.16386_en-us_c8c1cf8f072b6166\winlogon.exe.mui

< MD5 for: WINLOGON.MOF >
[2006/09/18 15:41:56 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\System32\wbem\winlogon.mof
[2006/09/18 15:41:56 | 000,002,794 | —- | M] () MD5=545C578F290B9CDD280966939935B9EA – C:\Windows\winsxs\x86_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.0.6000.16386_none_7e0207d478fccc94\winlogon.mof

< End of report >
Thanks,
Patrick

OK, Done
Here are the logs

OTL logfile created on: 2/13/2012 6:29:07 PM - Run 3
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Ana\Desktop
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.87 Gb Total Physical Memory | 1.33 Gb Available Physical Memory | 70.85% Memory free
3.98 Gb Paging File | 3.55 Gb Available in Paging File | 89.22% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 138.03 Gb Total Space | 38.21 Gb Free Space | 27.68% Space Free | Partition Type: NTFS
Drive D: | 11.02 Gb Total Space | 1.49 Gb Free Space | 13.57% Space Free | Partition Type: NTFS
Drive E: | 621.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive G: | 778.49 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: TOBE | User Name: Ana | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/02/12 11:57:38 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Ana\Desktop\OTL.exe
PRC - [2009/04/10 22:27:38 | 002,926,592 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
PRC - [2008/09/10 13:01:28 | 000,611,664 | —- | M] (Lavasoft) – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe


========== Modules (No Company Name) ==========

MOD - [2011/10/16 02:34:46 | 011,490,816 | —- | M] () – C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] – – (PlugPlay32)
SRV - [2012/01/13 14:53:18 | 000,652,360 | —- | M] (Malwarebytes Corporation) [Auto | Stopped] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2011/05/25 00:09:06 | 002,214,504 | —- | M] (NVIDIA Corporation) [Auto | Stopped] – C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe – (nvUpdatusService)
SRV - [2010/11/19 06:57:14 | 001,150,936 | —- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\PC Tools Security\pctsSvc.exe – (sdCoreService)
SRV - [2010/10/21 08:38:32 | 004,869,488 | —- | M] (Wacom Technology, Corp.) [Auto | Stopped] – C:\Program Files\Tablet\Pen\Pen_Tablet.exe – (TabletServicePen)
SRV - [2010/10/21 08:38:32 | 000,416,112 | —- | M] (Wacom Technology, Corp.) [Auto | Stopped] – C:\Program Files\Tablet\Pen\Pen_TouchService.exe – (TouchServicePen)
SRV - [2010/03/30 19:38:55 | 000,655,624 | —- | M] (Acresso Software Inc.) [On_Demand | Stopped] – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe – (FLEXnet Licensing Service)
SRV - [2010/03/15 14:02:36 | 000,366,840 | —- | M] (PC Tools) [On_Demand | Stopped] – C:\Program Files\PC Tools Security\pctsAuxs.exe – (sdAuxService)
SRV - [2008/09/10 13:01:28 | 000,611,664 | —- | M] (Lavasoft) [Auto | Running] – C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe – (aawservice)


========== Driver Services (SafeList) ==========

DRV - [2011/12/10 15:24:06 | 000,020,464 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] – C:\Windows\System32\drivers\mbam.sys – (MBAMProtector)
DRV - [2011/05/25 00:09:05 | 010,589,800 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\nvlddmkm.sys – (nvlddmkm)
DRV - [2010/12/10 13:24:12 | 000,239,168 | —- | M] (PC Tools) [Kernel | Boot | Running] – C:\Windows\system32\drivers\PCTCore.sys – (PCTCore)
DRV - [2010/10/05 13:26:00 | 000,014,120 | —- | M] (Wacom Technology) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\wacomvhid.sys – (wacomvhid)
DRV - [2010/07/16 14:59:54 | 000,338,880 | —- | M] (PC Tools) [Kernel | Boot | Running] – C:\Windows\system32\drivers\pctDS.sys – (pctDS)
DRV - [2009/12/20 10:17:49 | 000,691,696 | —- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] – C:\Windows\System32\Drivers\sptd.sys – (sptd)
DRV - [2009/08/27 17:06:32 | 000,016,168 | —- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\wacmoumonitor.sys – (wacmoumonitor)
DRV - [2009/07/09 11:16:24 | 000,013,480 | —- | M] (Wacom Technology) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\WacomVTHid.sys – (WacomVTHid)
DRV - [2009/02/24 18:42:14 | 000,116,736 | —- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\mcdbus.sys – (mcdbus)
DRV - [2008/06/06 13:13:40 | 000,133,152 | —- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] – C:\Windows\system32\drivers\nvrd32.sys – (nvrd32)
DRV - [2008/06/06 13:13:10 | 000,145,440 | —- | M] (NVIDIA Corporation) [Kernel | Boot | Running] – C:\Windows\system32\DRIVERS\nvstor32.sys – (nvstor32)
DRV - [2008/05/22 13:20:54 | 000,020,640 | —- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] – C:\Program Files\PC-Doctor for Windows\pcd5srvc.pkms – (PCD5SRVC{BD6912E3-AC9D80E8-05040000})
DRV - [2008/05/22 03:39:34 | 000,015,360 | —- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] – C:\Windows\system32\drivers\nvsmu.sys – (nvsmu)
DRV - [2008/05/21 05:44:10 | 001,049,760 | —- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\nvmfdx32.sys – (NVENETFD)
DRV - [2008/02/12 09:27:34 | 000,207,360 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\HSXHWBS3.sys – (HSXHWBS3)
DRV - [2008/02/12 09:25:22 | 000,985,600 | —- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\HSX_DP.sys – (HSF_DP)
DRV - [2007/10/18 09:36:54 | 000,008,704 | —- | M] (Conexant Systems, Inc.) [Kernel | Auto | Stopped] – C:\Windows\System32\drivers\XAudio.sys – (XAudio)
DRV - [2007/05/03 08:11:14 | 000,256,000 | —- | M] (Marvell Semiconductor, Inc) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\MRVW13B.sys – (MRV6X32P)
DRV - [2007/02/16 10:12:36 | 000,011,312 | —- | M] (Wacom Technology) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\wacommousefilter.sys – (wacommousefilter)
DRV - [2005/12/12 11:27:00 | 000,019,072 | —- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\PS2.sys – (Ps2)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cndt
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cndt


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:56303

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:56303

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = E7 4E B6 01 10 F2 F7 42 A0 83 DB DB 0C 31 F6 0E [binary data]

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = E7 4E B6 01 10 F2 F7 42 A0 83 DB DB 0C 31 F6 0E [binary data]

IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/?pc=ZUGO&form;=ZGAPHP
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.msn.com/?wl=true
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = E7 4E B6 01 10 F2 F7 42 A0 83 DB DB 0C 31 F6 0E [binary data]
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" =
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:56525

IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cndt
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…ion&pf;=cndt
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 4E 99 7A 01 DA AC ED 48 B7 16 22 EE 73 AD 1D 6B [binary data]
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:53859

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.meebo.com/|http://www.menewsha.com/|http://crysandrea.com/"
FF - prefs.js..extensions.enabledItems: [removed]:0.9.11
FF - prefs.js..extensions.enabledItems: {AE93811A-5C9A-4d34-8462-F7B864FC4696}:3.81
FF - prefs.js..extensions.enabledItems: [removed]:1.6.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1151
FF - prefs.js..extensions.enabledItems: [removed]:1.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..keyword.URL: "http://www.google.com/search?sourceid=navclient&hl;=en&q;="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 56525
FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.3: C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKLM\Software\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.5: C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF - HKCU\Software\MozillaPlugins\@soe.sony.com/installer,version=1.0.3: C:\PROGRA~1\SONYON~1\npsoe.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Ana\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Ana\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1d5287d1-8a92-0001-1f31-1cec198018d8}: C:\Program Files\AVG\AVG8\ToolbarFF
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/13 10:37:22 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/06/09 10:19:51 | 000,000,000 | —D | M]

[2008/12/29 19:29:21 | 000,000,000 | —D | M] (No name found) – C:\Users\Ana\AppData\Roaming\mozilla\Extensions
[2012/02/11 18:41:18 | 000,000,000 | —D | M] (No name found) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions
[2010/05/18 08:25:57 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/02/12 14:09:31 | 000,000,000 | —D | M] (Google Toolbar for Firefox) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/07/22 14:14:22 | 000,000,000 | —D | M] (XUL Cache) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\{c8d9ff79-5aaa-4de6-afb9-fbbf30daa013}
[2009/03/25 10:50:02 | 000,000,000 | —D | M] (No name found) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}-trash
[2011/03/28 16:13:41 | 000,000,000 | —D | M] (Personas) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\[removed]
[2010/02/25 10:07:16 | 000,000,000 | —D | M] (Panda3D Game Engine Plug-In) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\[removed]
[2011/01/02 21:33:24 | 000,000,000 | —D | M] (Search Toolbar) – C:\Users\Ana\AppData\Roaming\mozilla\Firefox\Profiles\d5btn3lz.default\extensions\[removed]
[2011/01/02 21:33:26 | 000,001,919 | —- | M] () – C:\Users\Ana\AppData\Roaming\Mozilla\Firefox\Profiles\d5btn3lz.default\searchplugins\bing-zugo.xml
[2012/02/13 10:37:24 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/07/19 19:57:48 | 000,000,000 | —D | M] (Skype extension) – C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
() (No name found) – C:\USERS\ANA\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\D5BTN3LZ.DEFAULT\EXTENSIONS\{AE93811A-5C9A-4D34-8462-F7B864FC4696}.XPI
[2012/02/13 10:37:21 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/07/19 04:05:25 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010/03/20 19:52:56 | 000,238,776 | —- | M] (Pando Networks) – C:\Program Files\mozilla firefox\plugins\npPandoWebInst.dll
[2012/02/13 10:37:17 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/02/13 10:37:17 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Ana\AppData\Local\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Users\Ana\AppData\Local\Google\Chrome\Application\15.0.874.121\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Ana\AppData\Local\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java™ Platform SE 6 U20 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Windows Genuine Advantage (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
CHR - plugin: Pando Web Installer (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Wacom Dynamic Link Library (Enabled) = C:\Program Files\TabletPlugins\npwacom.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Ana\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Skype Extension = C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.5.0.7896_0\
CHR - Extension: AT_WesCravenV2 = C:\Users\Ana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahooofggegjbnodalhoibemeabkapop\3\

O1 HOSTS File: ([2006/09/18 15:41:30 | 000,000,761 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll File not found
O2 - BHO: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O3 - HKLM\..\Toolbar: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O3 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\..\Toolbar\WebBrowser: (Search Toolbar) - {9D425283-D487-4337-BAB6-AB8354A81457} - C:\Program Files\Search Toolbar\SearchToolbar.dll ()
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [1A:Stardock TrayMonitor] File not found
O4 - HKLM..\Run: [354.exe] C:\Program Files\LP\6875\354.exe ()
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [DPService] C:\Program Files\HP\DVDPlay\DPService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe (Hewlett-Packard Company)
O4 - HKLM..\Run: [KBD] C:\hp\KBD\KbdStub.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000..\Run: [CITY LOUD LOCKS EQ] "C:\ProgramData\hope dead army.1alpp" File not found
O4 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000..\Run: [Cool Road] "C:\ProgramData\mess iso iso.yy6qoge" File not found
O4 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001..\Run: [1453276227] C:\Users\Brie\AppData\Local\Temp\0.07513792656841833.exe File not found
O4 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001..\Run: [HPADVISOR] File not found
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O4 - HKLM..\RunServices: [1A:Stardock TrayMonitor] File not found
O4 - Startup: C:\Users\Ana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Ana\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Ana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HideSCAHealth = 1
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001\..Trusted Ranges: Range1 ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_27)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C3EFEE7-B1F5-406C-9ACB-9AABE3B7F973}: DhcpNameServer = 192.168.0.1 [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1C517DEB-59CF-4806-A1BA-A71265252F3D}: DhcpNameServer = 192.168.0.1 [removed]
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (MrvGINA.dll) - File not found
O20 - HKU\.DEFAULT Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\.DEFAULT Winlogon: Shell - (C:\Windows\system32\config\systemprofile\AppData\Roaming\569F3\02968.exe) -C:\Windows\System32\config\systemprofile\AppData\Roaming\569F3\02968.exe ()
O20 - HKU\S-1-5-18 Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\S-1-5-18 Winlogon: Shell - (C:\Windows\system32\config\systemprofile\AppData\Roaming\569F3\02968.exe) -C:\Windows\System32\config\systemprofile\AppData\Roaming\569F3\02968.exe ()
O24 - Desktop WallPaper: C:\Users\Ana\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ana\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/08/25 07:12:57 | 000,000,074 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O32 - AutoRun File - [2002/07/15 14:09:40 | 000,032,768 | R— | M] (Aeon) - E:\autorun.exe – [ CDFS ]
O32 - AutoRun File - [2002/07/08 11:42:16 | 000,000,220 | R— | M] () - E:\autorun.inf – [ CDFS ]
O32 - AutoRun File - [2007/08/04 09:54:31 | 000,000,000 | —D | M] - G:\AutoRun – [ CDFS ]
O32 - AutoRun File - [2007/08/04 09:54:31 | 000,700,416 | R— | M] (Electronic Arts Inc.) - G:\AutoRun.exe – [ CDFS ]
O32 - AutoRun File - [2007/08/04 08:09:54 | 000,659,456 | R— | M] (Electronic Arts Inc.) - G:\AutoRunGUI.dll – [ CDFS ]
O32 - AutoRun File - [2007/08/04 10:00:52 | 000,000,152 | R— | M] () - G:\autorun.inf – [ CDFS ]
O33 - MountPoints2\{071cf126-b64a-11de-9ccc-002354029687}\Shell\Auto\command - "" = G:\launcher.exe
O33 - MountPoints2\{071cf126-b64a-11de-9ccc-002354029687}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL G:\launcher.exe
O33 - MountPoints2\{692cae14-7c15-11dd-b3a6-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{692cae14-7c15-11dd-b3a6-806e6f6e6963}\Shell\AutoRun\command - "" = E:\autorun.exe – [2002/07/15 14:09:40 | 000,032,768 | R— | M] (Aeon)
O33 - MountPoints2\{79554103-d694-11dd-93c0-002354029687}\Shell - "" = AutoRun
O33 - MountPoints2\{79554103-d694-11dd-93c0-002354029687}\Shell\AutoRun\command - "" = H:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (lsdelete)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O35 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001..exefile [open] – "C:\Users\Brie\AppData\Local\vfj.exe" -a "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKU\S-1-5-21-3397783422-3384463677-1815793419-1001\…exe [@ = exefile] – "C:\Users\Brie\AppData\Local\vfj.exe" -a "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/02/13 18:23:31 | 004,733,440 | —- | C] (AVAST Software) – C:\Users\Ana\Desktop\aswMBR.exe
[2012/02/13 10:33:10 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Roaming\F3C43
[2012/02/13 10:32:52 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Local\{7D0CFB31-503B-40BC-9ABB-F72E19779501}
[2012/02/13 10:32:50 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Local\{4AB2A8D6-5FD4-4C12-85FD-610A4D1F5A7F}
[2012/02/13 10:31:47 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Roaming\569F3
[2012/02/13 08:48:05 | 000,000,000 | —D | C] – C:\_OTL
[2012/02/12 23:02:31 | 000,000,000 | —D | C] – C:\Program Files\F3C43
[2012/02/12 23:01:56 | 000,000,000 | —D | C] – C:\Program Files\LP
[2012/02/12 14:06:29 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2011
[2012/02/12 11:57:37 | 000,584,192 | —- | C] (OldTimer Tools) – C:\Users\Ana\Desktop\OTL.exe
[2012/02/12 03:07:37 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\Windows\System32\mciseq.dll
[2012/02/12 03:03:38 | 001,314,816 | —- | C] (Microsoft Corporation) – C:\Windows\System32\quartz.dll
[2012/02/12 03:03:38 | 000,497,152 | —- | C] (Microsoft Corporation) – C:\Windows\System32\qdvd.dll
[2012/02/11 19:23:58 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Local\{BD1CEDE5-6EF3-4C7A-85D0-A9AC360F0B31}
[2012/02/11 19:23:47 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Local\{9734659A-CD14-4F8D-9671-80982881F240}
[2012/02/11 19:02:42 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Roaming\Malwarebytes
[2012/02/11 19:02:36 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/02/11 19:02:35 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/02/11 19:02:34 | 000,020,464 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2012/02/11 19:02:34 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/02/11 17:55:04 | 000,656,320 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctEFA.sys
[2012/02/11 17:55:04 | 000,338,880 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctDS.sys
[2012/02/11 17:55:01 | 000,251,560 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctgntdi.sys
[2012/02/11 17:55:01 | 000,103,232 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctwfpfilter.sys
[2012/02/11 17:54:55 | 000,239,168 | —- | C] (PC Tools) – C:\Windows\System32\drivers\PCTCore.sys
[2012/02/11 17:54:55 | 000,160,448 | —- | C] (PC Tools) – C:\Windows\System32\drivers\PCTAppEvent.sys
[2012/02/11 17:54:52 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Tools Security
[2012/02/11 17:54:49 | 000,070,536 | —- | C] (PC Tools) – C:\Windows\System32\drivers\pctplsg.sys
[2012/02/11 17:54:41 | 000,000,000 | —D | C] – C:\Program Files\PC Tools Security
[2012/02/11 17:54:41 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Roaming\PC Tools
[2012/02/11 17:54:41 | 000,000,000 | —D | C] – C:\Program Files\Common Files\PC Tools
[2012/02/11 17:47:36 | 000,000,000 | —D | C] – C:\ProgramData\PC Tools
[2012/02/11 17:01:29 | 000,000,000 | —D | C] – C:\Users\Ana\AppData\Local\{D15A6F1B-B210-44A7-8F82-D124A3AEF183}

========== Files - Modified Within 30 Days ==========

[2012/02/13 18:26:38 | 000,000,512 | —- | M] () – C:\Users\Ana\Desktop\MBR.dat
[2012/02/13 18:23:52 | 004,733,440 | —- | M] (AVAST Software) – C:\Users\Ana\Desktop\aswMBR.exe
[2012/02/13 17:10:55 | 000,001,356 | —- | M] () – C:\Users\Ana\AppData\Local\d3d9caps.dat
[2012/02/13 10:47:51 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/02/13 10:47:23 | 261,136,407 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/02/13 10:44:19 | 000,282,624 | —- | M] () – C:\Users\Ana\AppData\Roaming\firefox.exe
[2012/02/13 10:35:35 | 000,000,414 | -H– | M] () – C:\Windows\tasks\User_Feed_Synchronization-{613A91CE-67C1-4421-90F1-050F3F9C0DEE}.job
[2012/02/13 10:32:00 | 000,000,900 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3397783422-3384463677-1815793419-1000UA1cce9256ef622a0.job
[2012/02/13 08:58:37 | 000,003,616 | —- | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/02/13 08:58:37 | 000,003,616 | —- | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/02/12 14:44:26 | 000,111,872 | —- | M] () – C:\Windows\System32\drivers\TrueSight.sys
[2012/02/12 14:04:49 | 001,202,688 | —- | M] () – C:\Users\Ana\Desktop\RogueKiller.exe
[2012/02/12 11:57:38 | 000,584,192 | —- | M] (OldTimer Tools) – C:\Users\Ana\Desktop\OTL.exe
[2012/02/12 03:02:11 | 000,604,264 | —- | M] () – C:\Windows\System32\perfh009.dat
[2012/02/12 03:02:11 | 000,103,964 | —- | M] () – C:\Windows\System32\perfc009.dat
[2012/02/11 21:40:04 | 000,000,314 | —- | M] () – C:\Windows\tasks\HPCeeScheduleForAna.job
[2012/02/11 19:32:07 | 000,000,848 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3397783422-3384463677-1815793419-1000Core1cce9256e479320.job
[2012/02/11 19:02:36 | 000,000,868 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/02/11 17:54:52 | 000,001,748 | —- | M] () – C:\Users\Public\Desktop\Spyware Doctor.lnk
[2012/02/11 17:09:41 | 000,000,440 | —- | M] () – C:\ProgramData\tWk0ZUp9RkTgZp

========== Files Created - No Company Name ==========

[2012/02/13 18:26:38 | 000,000,512 | —- | C] () – C:\Users\Ana\Desktop\MBR.dat
[2012/02/13 10:37:05 | 000,282,624 | —- | C] () – C:\Users\Ana\AppData\Roaming\firefox.exe
[2012/02/12 14:06:31 | 000,001,987 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Live Messenger .lnk
[2012/02/12 14:06:31 | 000,000,940 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2012/02/12 14:06:31 | 000,000,778 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2012/02/12 14:06:30 | 000,002,032 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/02/12 14:06:30 | 000,001,081 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2012/02/12 14:06:30 | 000,000,945 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2012/02/12 14:06:30 | 000,000,832 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2012/02/12 14:06:30 | 000,000,258 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk
[2012/02/12 14:06:30 | 000,000,240 | —- | C] () – C:\Users\Ana\Application Data\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk
[2012/02/12 14:05:50 | 000,111,872 | —- | C] () – C:\Windows\System32\drivers\TrueSight.sys
[2012/02/12 14:04:48 | 001,202,688 | —- | C] () – C:\Users\Ana\Desktop\RogueKiller.exe
[2012/02/11 19:27:07 | 000,000,900 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3397783422-3384463677-1815793419-1000UA1cce9256ef622a0.job
[2012/02/11 19:27:06 | 000,000,848 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3397783422-3384463677-1815793419-1000Core1cce9256e479320.job
[2012/02/11 19:02:36 | 000,000,868 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/02/11 17:54:52 | 000,001,748 | —- | C] () – C:\Users\Public\Desktop\Spyware Doctor.lnk
[2012/02/11 17:05:25 | 000,000,440 | —- | C] () – C:\ProgramData\tWk0ZUp9RkTgZp
[2010/12/20 20:45:23 | 000,018,604 | —- | C] () – C:\Users\Ana\AppData\Roaming\UserTile.png
[2010/11/10 19:20:54 | 000,000,000 | —- | C] () – C:\Users\Ana\AppData\Local\prvlcl.dat
[2010/10/05 20:14:29 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2010/10/05 20:13:44 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2010/06/29 23:12:16 | 000,013,312 | —- | C] () – C:\Windows\LPRES.DLL
[2009/12/27 22:35:43 | 000,258,064 | —- | C] () – C:\ProgramData\mess iso iso.8p3v2hg
[2009/12/27 22:13:43 | 000,106,512 | —- | C] () – C:\ProgramData\mess iso iso.rov1tbz
[2009/12/27 21:51:52 | 000,049,168 | —- | C] () – C:\ProgramData\mess iso iso.fk8ee7
[2009/12/27 21:30:02 | 000,356,368 | —- | C] () – C:\ProgramData\mess iso iso.1hy6j2
[2009/12/27 21:08:08 | 000,131,088 | —- | C] () – C:\ProgramData\mess iso iso.7yskg
[2009/12/27 20:46:17 | 000,028,688 | —- | C] () – C:\ProgramData\mess iso iso.70nph
[2009/12/27 20:24:27 | 000,253,968 | —- | C] () – C:\ProgramData\mess iso iso.x4xmx
[2009/12/27 20:02:36 | 000,098,320 | —- | C] () – C:\ProgramData\mess iso iso.qr2oz
[2009/12/27 19:40:46 | 000,364,560 | —- | C] () – C:\ProgramData\mess iso iso.xg2c04
[2009/12/27 19:18:56 | 000,262,160 | —- | C] () – C:\ProgramData\mess iso iso.zx1h7u
[2009/12/27 18:57:05 | 000,200,720 | —- | C] () – C:\ProgramData\mess iso iso.cj8kcq
[2009/12/27 18:35:15 | 000,004,112 | —- | C] () – C:\ProgramData\mess iso iso.xtpwhlo
[2009/12/27 18:13:24 | 000,303,120 | —- | C] () – C:\ProgramData\mess iso iso.wv4i78
[2009/12/27 17:51:34 | 000,167,952 | —- | C] () – C:\ProgramData\mess iso iso.0b0d38
[2009/12/27 17:29:43 | 000,327,696 | —- | C] () – C:\ProgramData\mess iso iso.mzg4bb
[2009/12/27 17:07:53 | 000,073,744 | —- | C] () – C:\ProgramData\mess iso iso.ouh8pkh
[2009/12/27 16:46:02 | 000,139,280 | —- | C] () – C:\ProgramData\mess iso iso.m6nvgap
[2009/12/27 16:24:12 | 000,208,912 | —- | C] () – C:\ProgramData\mess iso iso.mnaep6a
[2009/12/27 16:02:21 | 000,360,464 | —- | C] () – C:\ProgramData\mess iso iso.8d3km
[2009/12/27 15:40:31 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.289km
[2009/12/27 15:18:40 | 000,360,464 | —- | C] () – C:\ProgramData\mess iso iso.jqxw8i
[2009/12/27 14:56:50 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.w2i28ak
[2009/12/27 14:34:59 | 000,323,600 | —- | C] () – C:\ProgramData\mess iso iso.m3bxoqx
[2009/12/27 14:13:09 | 000,389,136 | —- | C] () – C:\ProgramData\mess iso iso.zf22y
[2009/12/27 13:51:19 | 000,102,416 | —- | C] () – C:\ProgramData\mess iso iso.4b7g8
[2009/12/27 13:29:28 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.rhzy1v
[2009/12/27 13:07:38 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.kpv3uz3
[2009/12/27 12:45:47 | 000,225,296 | —- | C] () – C:\ProgramData\mess iso iso.hs1zym
[2009/12/27 12:23:56 | 000,352,272 | —- | C] () – C:\ProgramData\mess iso iso.pivyl
[2009/12/27 12:02:05 | 000,376,848 | —- | C] () – C:\ProgramData\mess iso iso.0oa17
[2009/12/27 11:40:15 | 000,405,520 | —- | C] () – C:\ProgramData\mess iso iso.5hwh2fb
[2009/12/27 11:18:24 | 000,258,064 | —- | C] () – C:\ProgramData\mess iso iso.zf0da
[2009/12/27 10:56:34 | 000,389,136 | —- | C] () – C:\ProgramData\mess iso iso.izq48oe
[2009/12/27 10:34:43 | 000,401,424 | —- | C] () – C:\ProgramData\mess iso iso.he1y8k6
[2009/12/27 10:12:53 | 000,040,976 | —- | C] () – C:\ProgramData\mess iso iso.nie18o
[2009/12/27 09:51:02 | 000,098,320 | —- | C] () – C:\ProgramData\mess iso iso.qmuj8
[2009/12/27 09:29:12 | 000,192,528 | —- | C] () – C:\ProgramData\mess iso iso.pa51a
[2009/12/27 09:07:21 | 000,172,048 | —- | C] () – C:\ProgramData\mess iso iso.8gb8xj
[2009/12/27 08:45:31 | 000,401,424 | —- | C] () – C:\ProgramData\mess iso iso.69xfvg
[2009/12/27 08:23:40 | 000,258,064 | —- | C] () – C:\ProgramData\mess iso iso.7dzp5
[2009/12/27 08:01:50 | 000,126,992 | —- | C] () – C:\ProgramData\mess iso iso.xx5ae04
[2009/12/27 07:39:59 | 000,213,008 | —- | C] () – C:\ProgramData\mess iso iso.l6ix0b
[2009/12/27 07:18:09 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.gcrw49
[2009/12/27 06:56:18 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.mjkfl
[2009/12/27 06:34:27 | 000,167,952 | —- | C] () – C:\ProgramData\mess iso iso.3wu98pq
[2009/12/27 06:12:37 | 000,397,328 | —- | C] () – C:\ProgramData\mess iso iso.9kgzx
[2009/12/27 05:50:32 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.6liiyav
[2009/12/27 05:28:32 | 000,249,872 | —- | C] () – C:\ProgramData\mess iso iso.db773c
[2009/12/27 05:06:41 | 000,335,888 | —- | C] () – C:\ProgramData\mess iso iso.6llr1
[2009/12/27 04:44:48 | 000,065,552 | —- | C] () – C:\ProgramData\mess iso iso.vzq9h4
[2009/12/27 04:22:56 | 000,290,832 | —- | C] () – C:\ProgramData\mess iso iso.ko8oev
[2009/12/27 04:01:05 | 000,294,928 | —- | C] () – C:\ProgramData\mess iso iso.k7b11t1
[2009/12/27 03:39:14 | 000,114,704 | —- | C] () – C:\ProgramData\mess iso iso.t92icm7
[2009/12/27 03:17:24 | 000,155,664 | —- | C] () – C:\ProgramData\mess iso iso.48b2k
[2009/12/27 02:55:33 | 000,356,368 | —- | C] () – C:\ProgramData\mess iso iso.bptz0
[2009/12/27 02:33:43 | 000,368,656 | —- | C] () – C:\ProgramData\mess iso iso.gxgq59
[2009/12/27 02:11:52 | 000,331,792 | —- | C] () – C:\ProgramData\mess iso iso.9w36u1
[2009/12/27 01:50:02 | 000,352,272 | —- | C] () – C:\ProgramData\mess iso iso.nnomtjj
[2009/12/27 01:28:11 | 000,299,024 | —- | C] () – C:\ProgramData\mess iso iso.kz43m
[2009/12/27 01:06:21 | 000,311,312 | —- | C] () – C:\ProgramData\mess iso iso.d3uuyt8
[2009/12/27 00:44:30 | 000,319,504 | —- | C] () – C:\ProgramData\mess iso iso.6z3vskh
[2009/12/27 00:22:40 | 000,151,568 | —- | C] () – C:\ProgramData\mess iso iso.zidpe
[2009/12/27 00:00:49 | 000,110,608 | —- | C] () – C:\ProgramData\mess iso iso.y8zwc9
[2009/12/26 23:38:59 | 000,249,872 | —- | C] () – C:\ProgramData\mess iso iso.d3c7m
[2009/12/26 23:17:07 | 000,000,016 | —- | C] () – C:\ProgramData\mess iso iso.hkurt
[2009/12/26 22:55:16 | 000,008,208 | —- | C] () – C:\ProgramData\mess iso iso.yalyun
[2009/12/26 22:33:26 | 000,077,840 | —- | C] () – C:\ProgramData\mess iso iso.lhevo6
[2009/12/26 22:11:35 | 000,061,456 | —- | C] () – C:\ProgramData\mess iso iso.m6u7gp
[2009/12/26 21:49:44 | 000,303,120 | —- | C] () – C:\ProgramData\mess iso iso.5xxqw
[2009/12/26 21:27:53 | 000,352,272 | —- | C] () – C:\ProgramData\mess iso iso.p0x9l
[2009/12/26 21:06:03 | 000,069,648 | —- | C] () – C:\ProgramData\mess iso iso.vw32p
[2009/12/26 20:44:12 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.r67vw
[2009/12/26 20:22:22 | 000,327,696 | —- | C] () – C:\ProgramData\mess iso iso.blz9m
[2009/12/26 20:00:31 | 000,180,240 | —- | C] () – C:\ProgramData\mess iso iso.hoxzs
[2009/12/26 19:38:40 | 000,110,608 | —- | C] () – C:\ProgramData\mess iso iso.e9jy0
[2009/12/26 19:16:50 | 000,102,416 | —- | C] () – C:\ProgramData\mess iso iso.qkjdkn
[2009/12/26 18:54:58 | 000,368,656 | —- | C] () – C:\ProgramData\mess iso iso.04wu7
[2009/12/26 18:33:08 | 000,110,608 | —- | C] () – C:\ProgramData\mess iso iso.ccp5wa4
[2009/12/26 18:11:17 | 000,225,296 | —- | C] () – C:\ProgramData\mess iso iso.uldjl
[2009/12/26 17:49:20 | 000,315,408 | —- | C] () – C:\ProgramData\mess iso iso.m23d80m
[2009/12/26 17:27:30 | 000,360,464 | —- | C] () – C:\ProgramData\mess iso iso.hbcbkem
[2009/12/26 17:05:40 | 000,335,888 | —- | C] () – C:\ProgramData\mess iso iso.5359m
[2009/12/26 16:43:49 | 000,077,840 | —- | C] () – C:\ProgramData\mess iso iso.px5354
[2009/12/26 16:21:58 | 000,225,296 | —- | C] () – C:\ProgramData\mess iso iso.mt67g13
[2009/12/26 16:00:08 | 000,016,400 | —- | C] () – C:\ProgramData\mess iso iso.is2lsen
[2009/12/26 15:38:17 | 000,405,520 | —- | C] () – C:\ProgramData\mess iso iso.x6it33v
[2009/12/26 15:16:27 | 000,008,208 | —- | C] () – C:\ProgramData\mess iso iso.l5cjaez
[2009/12/26 14:54:36 | 000,278,544 | —- | C] () – C:\ProgramData\mess iso iso.3rkf5
[2009/12/26 14:32:45 | 000,106,512 | —- | C] () – C:\ProgramData\mess iso iso.5yzpu
[2009/12/26 14:10:54 | 000,204,816 | —- | C] () – C:\ProgramData\mess iso iso.wp8ab
[2009/12/26 13:49:04 | 000,151,568 | —- | C] () – C:\ProgramData\mess iso iso.iap60w6
[2009/12/26 13:27:13 | 000,299,024 | —- | C] () – C:\ProgramData\mess iso iso.05n4b
[2009/12/26 13:05:22 | 000,036,880 | —- | C] () – C:\ProgramData\mess iso iso.uwtf4g
[2009/12/26 12:43:32 | 000,266,256 | —- | C] () – C:\ProgramData\mess iso iso.stmyw
[2009/12/26 12:21:42 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.91xi1
[2009/12/26 11:59:51 | 000,253,968 | —- | C] () – C:\ProgramData\mess iso iso.5xkahhm
[2009/12/26 11:38:00 | 000,090,128 | —- | C] () – C:\ProgramData\mess iso iso.gq6wb
[2009/12/26 11:16:10 | 000,110,608 | —- | C] () – C:\ProgramData\mess iso iso.blr9u
[2009/12/26 10:54:19 | 000,204,816 | —- | C] () – C:\ProgramData\mess iso iso.jgaqlt
[2009/12/26 10:32:29 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.xp63t
[2009/12/26 10:10:37 | 000,319,504 | —- | C] () – C:\ProgramData\mess iso iso.ud0twk5
[2009/12/26 09:48:47 | 000,241,680 | —- | C] () – C:\ProgramData\mess iso iso.e5a22v
[2009/12/26 09:26:56 | 000,331,792 | —- | C] () – C:\ProgramData\mess iso iso.raa7b6
[2009/12/26 09:05:06 | 000,073,744 | —- | C] () – C:\ProgramData\mess iso iso.t4229k
[2009/12/26 08:43:16 | 000,155,664 | —- | C] () – C:\ProgramData\mess iso iso.2v1c56
[2009/12/26 08:21:25 | 000,077,840 | —- | C] () – C:\ProgramData\mess iso iso.7a4hl
[2009/12/26 07:59:35 | 000,405,520 | —- | C] () – C:\ProgramData\mess iso iso.mbn29
[2009/12/26 07:37:44 | 000,204,816 | —- | C] () – C:\ProgramData\mess iso iso.g7vja
[2009/12/26 07:15:54 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.f30thm
[2009/12/26 06:54:03 | 000,356,368 | —- | C] () – C:\ProgramData\mess iso iso.940lk
[2009/12/26 06:32:13 | 000,065,552 | —- | C] () – C:\ProgramData\mess iso iso.y029g7w
[2009/12/26 06:10:22 | 000,311,312 | —- | C] () – C:\ProgramData\mess iso iso.kk81qn8
[2009/12/26 05:48:30 | 000,073,744 | —- | C] () – C:\ProgramData\mess iso iso.w0tgb0
[2009/12/26 05:26:36 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.ttvglq
[2009/12/26 05:04:46 | 000,016,400 | —- | C] () – C:\ProgramData\mess iso iso.bc3ue3
[2009/12/26 04:42:49 | 000,172,048 | —- | C] () – C:\ProgramData\mess iso iso.y7ne1
[2009/12/26 04:20:56 | 000,167,952 | —- | C] () – C:\ProgramData\mess iso iso.lgrbz
[2009/12/26 03:59:05 | 000,368,656 | —- | C] () – C:\ProgramData\mess iso iso.ebwbk
[2009/12/26 03:37:15 | 000,217,104 | —- | C] () – C:\ProgramData\mess iso iso.trs55
[2009/12/26 03:15:24 | 000,049,168 | —- | C] () – C:\ProgramData\mess iso iso.zxoifk5
[2009/12/26 02:53:32 | 000,368,656 | —- | C] () – C:\ProgramData\mess iso iso.yk2id
[2009/12/26 02:31:41 | 000,376,848 | —- | C] () – C:\ProgramData\mess iso iso.sdydqyk
[2009/12/26 02:09:51 | 000,237,584 | —- | C] () – C:\ProgramData\mess iso iso.86kq6qz
[2009/12/26 01:48:01 | 000,028,688 | —- | C] () – C:\ProgramData\mess iso iso.eb9bkx
[2009/12/26 01:26:09 | 000,180,240 | —- | C] () – C:\ProgramData\mess iso iso.mp0ee
[2009/12/26 01:04:19 | 000,307,216 | —- | C] () – C:\ProgramData\mess iso iso.owjh9aw
[2009/12/26 00:42:29 | 000,389,136 | —- | C] () – C:\ProgramData\mess iso iso.ac4perb
[2009/12/26 00:20:38 | 000,122,896 | —- | C] () – C:\ProgramData\mess iso iso.4wk9s08
[2009/12/25 23:58:47 | 000,126,992 | —- | C] () – C:\ProgramData\mess iso iso.yo8p9
[2009/12/25 23:36:57 | 000,098,320 | —- | C] () – C:\ProgramData\mess iso iso.pqsqv
[2009/12/25 23:15:07 | 000,086,032 | —- | C] () – C:\ProgramData\mess iso iso.1g8qluz
[2009/12/25 22:53:16 | 000,126,992 | —- | C] () – C:\ProgramData\mess iso iso.p6oml
[2009/12/25 22:31:26 | 000,094,224 | —- | C] () – C:\ProgramData\mess iso iso.98shqqh
[2009/12/25 22:09:35 | 000,229,392 | —- | C] () – C:\ProgramData\mess iso iso.hsc30
[2009/12/25 21:47:45 | 000,196,624 | —- | C] () – C:\ProgramData\mess iso iso.2xanyx
[2009/12/25 21:25:54 | 000,372,752 | —- | C] () – C:\ProgramData\mess iso iso.3ecxtf
[2009/12/25 21:04:04 | 000,364,560 | —- | C] () – C:\ProgramData\mess iso iso.9f965du
[2009/12/25 20:42:13 | 000,249,872 | —- | C] () – C:\ProgramData\mess iso iso.xp4k1yy
[2009/12/25 20:20:23 | 000,188,432 | —- | C] () – C:\ProgramData\mess iso iso.45816ko
[2009/12/25 19:58:32 | 000,090,128 | —- | C] () – C:\ProgramData\mess iso iso.iphzh93
[2009/12/25 19:36:42 | 000,045,072 | —- | C] () – C:\ProgramData\mess iso iso.e6fr7
[2009/12/25 19:14:51 | 000,208,912 | —- | C] () – C:\ProgramData\mess iso iso.lk8zd
[2009/12/25 18:53:00 | 000,040,976 | —- | C] () – C:\ProgramData\mess iso iso.lxp5q7
[2009/12/25 18:31:10 | 000,176,144 | —- | C] () – C:\ProgramData\mess iso iso.qk5uh
[2009/12/25 18:09:20 | 000,389,136 | —- | C] () – C:\ProgramData\mess iso iso.yjjf9
[2009/12/25 17:47:27 | 000,221,200 | —- | C] () – C:\ProgramData\mess iso iso.6ftep
[2009/12/25 17:25:36 | 000,139,280 | —- | C] () – C:\ProgramData\mess iso iso.17l3f
[2009/12/25 17:03:46 | 000,143,376 | —- | C] () – C:\ProgramData\mess iso iso.jio5irz
[2009/12/25 16:41:54 | 000,004,112 | —- | C] () – C:\ProgramData\mess iso iso.41t14
[2009/12/25 16:20:03 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.r277qm
[2009/12/25 15:58:13 | 000,192,528 | —- | C] () – C:\ProgramData\mess iso iso.nluoou
[2009/12/25 15:36:23 | 000,081,936 | —- | C] () – C:\ProgramData\mess iso iso.fcvmi
[2009/12/25 15:14:32 | 000,143,376 | —- | C] () – C:\ProgramData\mess iso iso.2kjc5o
[2009/12/25 14:52:42 | 000,135,184 | —- | C] () – C:\ProgramData\mess iso iso.ksikj1
[2009/12/25 14:30:51 | 000,208,912 | —- | C] () – C:\ProgramData\mess iso iso.4jsde
[2009/12/25 14:09:01 | 000,335,888 | —- | C] () – C:\ProgramData\mess iso iso.58ekz
[2009/12/25 13:47:10 | 000,024,592 | —- | C] () – C:\ProgramData\mess iso iso.r5i9skm
[2009/12/25 13:25:19 | 000,237,584 | —- | C] () – C:\ProgramData\mess iso iso.8q4sdhp
[2009/12/25 13:03:29 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.5z0f2hr
[2009/12/25 12:41:39 | 000,376,848 | —- | C] () – C:\ProgramData\mess iso iso.kxhfi
[2009/12/25 12:19:48 | 000,086,032 | —- | C] () – C:\ProgramData\mess iso iso.w5q4n5v
[2009/12/25 11:57:58 | 000,364,560 | —- | C] () – C:\ProgramData\mess iso iso.va8g9
[2009/12/25 11:36:07 | 000,200,720 | —- | C] () – C:\ProgramData\mess iso iso.vhcg1z
[2009/12/25 11:14:16 | 000,090,128 | —- | C] () – C:\ProgramData\mess iso iso.0g7hy
[2009/12/25 10:52:25 | 000,008,208 | —- | C] () – C:\ProgramData\mess iso iso.szhj74p
[2009/12/25 10:30:35 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.mbx1n
[2009/12/25 10:08:44 | 000,114,704 | —- | C] () – C:\ProgramData\mess iso iso.5q0gdw
[2009/12/25 09:46:54 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.utbzoj
[2009/12/25 09:25:04 | 000,290,832 | —- | C] () – C:\ProgramData\mess iso iso.ym7la
[2009/12/25 09:03:13 | 000,167,952 | —- | C] () – C:\ProgramData\mess iso iso.bzubpq
[2009/12/25 08:41:22 | 000,065,552 | —- | C] () – C:\ProgramData\mess iso iso.mhu0c9
[2009/12/25 08:19:32 | 000,339,984 | —- | C] () – C:\ProgramData\mess iso iso.mssyiq
[2009/12/25 07:57:41 | 000,090,128 | —- | C] () – C:\ProgramData\mess iso iso.d3424
[2009/12/25 07:35:50 | 000,122,896 | —- | C] () – C:\ProgramData\mess iso iso.16a88g
[2009/12/25 07:14:00 | 000,208,912 | —- | C] () – C:\ProgramData\mess iso iso.kfc8rn
[2009/12/25 06:52:08 | 000,294,928 | —- | C] () – C:\ProgramData\mess iso iso.kpfvmzj
[2009/12/25 06:30:17 | 000,073,744 | —- | C] () – C:\ProgramData\mess iso iso.1fbft
[2009/12/25 06:08:27 | 000,229,392 | —- | C] () – C:\ProgramData\mess iso iso.h4wsv
[2009/12/25 05:46:34 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.9m8xp45
[2009/12/25 05:24:39 | 000,282,640 | —- | C] () – C:\ProgramData\mess iso iso.nzmspl
[2009/12/25 05:02:47 | 000,319,504 | —- | C] () – C:\ProgramData\mess iso iso.rd6o5x
[2009/12/25 04:40:55 | 000,024,592 | —- | C] () – C:\ProgramData\mess iso iso.uszw7
[2009/12/25 04:19:04 | 000,241,680 | —- | C] () – C:\ProgramData\mess iso iso.81l08
[2009/12/25 03:57:13 | 000,040,976 | —- | C] () – C:\ProgramData\mess iso iso.8k1bt
[2009/12/25 03:35:22 | 000,020,496 | —- | C] () – C:\ProgramData\mess iso iso.sbzmb
[2009/12/25 03:13:32 | 000,069,648 | —- | C] () – C:\ProgramData\mess iso iso.ioicinc
[2009/12/25 02:51:42 | 000,086,032 | —- | C] () – C:\ProgramData\mess iso iso.3mfk9p
[2009/12/25 02:29:51 | 000,077,840 | —- | C] () – C:\ProgramData\mess iso iso.xukrnto
[2009/12/22 02:39:59 | 000,000,016 | —- | C] () – C:\ProgramData\mess iso iso.xoz34
[2009/12/21 19:18:11 | 000,135,184 | —- | C] () – C:\ProgramData\hope dead army.1alpp
[2009/12/21 19:17:12 | 000,262,160 | —- | C] () – C:\ProgramData\mess iso iso.yy6qoge
[2009/12/21 19:17:10 | 000,028,688 | —- | C] () – C:\ProgramData\mess iso iso.lwy2o
[2009/10/15 19:30:35 | 000,003,584 | —- | C] () – C:\Users\Ana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/08/03 14:07:42 | 000,403,816 | —- | C] () – C:\Windows\System32\OGACheckControl.dll
[2009/08/03 14:07:42 | 000,230,768 | —- | C] () – C:\Windows\System32\OGAEXEC.exe
[2009/05/26 22:39:53 | 000,069,632 | —- | C] () – C:\Windows\System32\xmltok.dll
[2009/05/26 22:39:53 | 000,036,864 | —- | C] () – C:\Windows\System32\xmlparse.dll
[2009/03/25 20:50:37 | 000,000,604 | —- | C] () – C:\Users\Ana\AppData\Local\Notes.stt
[2009/03/25 20:50:37 | 000,000,008 | —- | C] () – C:\Users\Ana\AppData\Local\Reminders.stt
[2009/01/09 09:31:30 | 000,000,446 | —- | C] () – C:\Windows\Sierra.ini
[2008/12/30 01:59:36 | 000,016,976 | —- | C] () – C:\Users\Ana\AppData\Roaming\wklnhst.dat
[2008/12/29 20:11:08 | 000,001,356 | —- | C] () – C:\Users\Ana\AppData\Local\d3d9caps.dat
[2008/12/29 19:36:36 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008/08/25 07:13:58 | 000,107,357 | —- | C] () – C:\Windows\hpqins13.dat
[2008/08/25 06:46:22 | 000,327,680 | —- | C] () – C:\Windows\System32\pythoncom25.dll
[2008/08/25 06:46:22 | 000,102,400 | —- | C] () – C:\Windows\System32\pywintypes25.dll
[2008/05/16 10:58:04 | 000,012,632 | —- | C] () – C:\Windows\System32\lsdelete.exe
[2006/11/02 06:53:49 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 06:44:53 | 002,243,000 | —- | C] () – C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 04:33:01 | 000,604,264 | —- | C] () – C:\Windows\System32\perfh009.dat
[2006/11/02 04:33:01 | 000,287,440 | —- | C] () – C:\Windows\System32\perfi009.dat
[2006/11/02 04:33:01 | 000,103,964 | —- | C] () – C:\Windows\System32\perfc009.dat
[2006/11/02 04:33:01 | 000,030,674 | —- | C] () – C:\Windows\System32\perfd009.dat
[2006/11/02 04:23:21 | 000,215,943 | —- | C] () – C:\Windows\System32\dssec.dat
[2006/11/02 02:58:30 | 000,043,131 | —- | C] () – C:\Windows\mib.bin
[2006/11/02 02:19:00 | 000,000,741 | —- | C] () – C:\Windows\System32\NOISE.DAT
[2006/11/02 01:40:29 | 000,013,750 | —- | C] () – C:\Windows\System32\pacerprf.ini
[2006/11/02 01:25:31 | 000,673,088 | —- | C] () – C:\Windows\System32\mlang.dat

========== Alternate Data Streams ==========

@Alternate Data Stream - 171 bytes -> C:\ProgramData\TEMP:DFC5A2B2

< End of report >

aswMBR version 0.9.9.1532 Copyright© 2011 AVAST Software
Run date: 2012-02-13 18:25:03
—————————–
18:25:03.047 OS Version: Windows 6.0.6002 Service Pack 2
18:25:03.048 Number of processors: 2 586 0x6B02
18:25:03.048 ComputerName: TOBE UserName: Ana
18:25:03.582 Initialize success
18:25:11.421 AVAST engine download error: 0
18:25:59.919 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\00000032
18:25:59.922 Disk 0 Vendor: Hitachi_ GMBO Size: 152627MB BusType: 3
18:25:59.926 Device \Device\00000053 -> \??\SCSI#Disk&Ven;_Hitachi&Prod;_HDP725016GLA#4&18252d01&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b} not found
18:25:59.930 Disk 0 MBR read error 0
18:25:59.935 Disk 0 MBR scan
18:25:59.939 Disk 0 unknown MBR code
18:25:59.950 MBR BIOS signature not found 0
18:25:59.955 Disk 0 scanning sectors +312576705
18:25:59.987 Disk 0 scanning C:\Windows\system32\drivers
18:26:06.201 Service scanning
18:26:07.715 Modules scanning
18:26:16.980 Disk 0 trace - called modules:
18:26:16.993 ntkrnlpa.exe CLASSPNP.SYS disk.sys PCTCore.sys acpi.sys hal.dll >>UNKNOWN [0x857ca49f]<<
18:26:17.005 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x856b8030]
18:26:17.013 3 CLASSPNP.SYS[8289d8b3] -> nt!IofCallDriver -> [0x856327d0]
18:26:17.022 5 PCTCore.sys[82966099] -> nt!IofCallDriver -> [0x85571b68]
18:26:17.030 7 acpi.sys[827636bc] -> nt!IofCallDriver -> [0x8515eaf0]
18:26:17.045 \Driver\nvstor32[0x856d6580] -> IRP_MJ_CREATE -> 0x857ca49f
18:26:17.053 Scan finished successfully
18:26:38.814 Disk 0 MBR has been saved successfully to "C:\Users\Ana\Desktop\MBR.dat"
18:26:38.833 The log file has been saved successfully to "C:\Users\Ana\Desktop\aswMBR.txt"


Thanks,
Patrick