Couldn’t install Windows Updates, Dragon Naturally Speaking visual c++

Hello,

I'm just posting here in the effect that I don't have any malware on my computer, hopefully. But I was trying to install Dragon Naturally Speaking and it couldn’t find visual c++ 8.0 runtime for DNS 10. I noticed that I couldn’t install Windows Updates either. But I'm also posting the OTL by OldTimer, just in case. I would have posted in the Windows forum but just in case I do have some malwear on my system, I just posted here…. I didn't know that if I uninstalled Dropbox Portable, I wouldn't be able to completely uninstall it. Can you also help me with that if you can. Thank you :-)


OTL logfile created on: 2/20/2012 9:20:54 PM - Run 1
OTL by OldTimer - Version 3.2.33.1 Folder = C:\Documents and Settings\Default\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

447.48 Mb Total Physical Memory | 264.56 Mb Available Physical Memory | 59.12% Memory free
1.03 Gb Paging File | 0.69 Gb Available in Paging File | 66.94% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 61.27 Gb Free Space | 82.23% Space Free | Partition Type: NTFS
Drive J: | 232.83 Gb Total Space | 25.70 Gb Free Space | 11.04% Space Free | Partition Type: FAT32
Drive K: | 1.63 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: HOME-3FBD27C0AE | User Name: Default | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/02/20 21:15:46 | 000,583,168 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Default\Desktop\OTL.exe
PRC - [2012/01/13 14:53:18 | 000,652,360 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/01/13 14:53:18 | 000,460,872 | —- | M] (Malwarebytes Corporation) – C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011/11/28 12:01:24 | 003,744,552 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2011/11/28 12:01:23 | 000,044,768 | —- | M] (AVAST Software) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2011/11/07 02:26:14 | 000,025,472 | —- | M] (Uniblue Systems Limited) – C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
PRC - [2011/10/19 08:51:20 | 002,566,472 | —- | M] (Mister Group) – J:\PortableApps\System Explorer\SystemExplorer.exe
PRC - [2011/04/22 06:21:10 | 000,092,592 | —- | M] (TomTom) – C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2011/01/10 08:24:20 | 000,399,416 | —- | M] (Secunia) – C:\Program Files\Secunia\PSI\sua.exe
PRC - [2011/01/04 15:34:12 | 004,545,024 | —- | M] () – C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
PRC - [2010/08/04 14:44:24 | 000,266,240 | —- | M] () – C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
PRC - [2009/02/20 13:23:26 | 000,495,700 | —- | M] (Atheros) – C:\WINDOWS\system32\acs.exe
PRC - [2008/04/13 18:12:19 | 001,033,728 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2012/02/20 16:43:42 | 001,712,640 | —- | M] () – C:\Program Files\AVAST Software\Avast\defs\12022002\algo.dll
MOD - [2012/02/20 02:11:59 | 001,712,640 | —- | M] () – C:\Program Files\AVAST Software\Avast\defs\12022000\algo.dll
MOD - [2012/01/25 19:45:54 | 000,460,800 | —- | M] () – C:\Program Files\SDExplorer\SDShellNSE.dll
MOD - [2011/01/04 15:34:12 | 004,545,024 | —- | M] () – C:\Program Files\NETGEAR\WNA1100\WNA1100.exe
MOD - [2010/08/04 14:44:24 | 000,266,240 | —- | M] () – C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe
MOD - [2010/03/10 14:50:38 | 000,204,800 | —- | M] () – C:\Program Files\NETGEAR\WNA1100\WifiLib.dll
MOD - [2009/08/28 16:50:18 | 000,282,624 | —- | M] () – C:\Program Files\NETGEAR\WNA1100\WifiSvcLib.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] – – (HidServ)
SRV - File not found [On_Demand | Stopped] – – (AppMgmt)
SRV - [2012/01/13 14:53:18 | 000,652,360 | —- | M] (Malwarebytes Corporation) [Auto | Running] – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe – (MBAMService)
SRV - [2011/11/28 12:01:23 | 000,044,768 | —- | M] (AVAST Software) [Auto | Running] – C:\Program Files\AVAST Software\Avast\AvastSvc.exe – (avast! Antivirus)
SRV - [2011/08/22 15:18:11 | 000,658,432 | —- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe – (FLEXnet Licensing Service)
SRV - [2011/04/22 06:21:10 | 000,092,592 | —- | M] (TomTom) [Auto | Running] – C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe – (TomTomHOMEService)
SRV - [2011/01/10 08:24:20 | 000,993,848 | —- | M] (Secunia) [On_Demand | Stopped] – C:\Program Files\Secunia\PSI\PSIA.exe – (Secunia PSI Agent)
SRV - [2011/01/10 08:24:20 | 000,399,416 | —- | M] (Secunia) [Auto | Running] – C:\Program Files\Secunia\PSI\sua.exe – (Secunia Update Agent)
SRV - [2010/08/04 14:44:24 | 000,266,240 | —- | M] () [Auto | Running] – C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe – (WSWNA1100)
SRV - [2009/11/05 16:08:36 | 000,360,529 | —- | M] (Atheros Communications, Inc.) [On_Demand | Stopped] – C:\Program Files\NETGEAR\WNA1100\jswpsapi.exe – (jswpsapi)
SRV - [2009/02/20 13:23:26 | 000,495,700 | —- | M] (Atheros) [Auto | Running] – C:\WINDOWS\system32\acs.exe – (ACS)


========== Driver Services (SafeList) ==========

DRV - [2011/12/10 15:24:06 | 000,020,464 | —- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] – C:\WINDOWS\system32\drivers\mbam.sys – (MBAMProtector)
DRV - [2011/12/05 16:43:50 | 000,428,088 | —- | M] () [Kernel | Boot | Running] – C:\WINDOWS\System32\Drivers\sptd.sys – (sptd)
DRV - [2011/11/28 11:53:53 | 000,435,032 | —- | M] (AVAST Software) [File_System | System | Running] – C:\WINDOWS\System32\drivers\aswSnx.sys – (aswSnx)
DRV - [2011/11/28 11:53:35 | 000,314,456 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswSP.sys – (aswSP)
DRV - [2011/11/28 11:52:19 | 000,034,392 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswRdr.sys – (aswRdr)
DRV - [2011/11/28 11:52:16 | 000,052,952 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aswTdi.sys – (aswTdi)
DRV - [2011/11/28 11:52:02 | 000,111,320 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\System32\drivers\aswmon2.sys – (aswMon2)
DRV - [2011/11/28 11:51:50 | 000,020,568 | —- | M] (AVAST Software) [File_System | Auto | Running] – C:\WINDOWS\System32\drivers\aswFsBlk.sys – (aswFsBlk)
DRV - [2011/11/28 11:48:49 | 000,030,808 | —- | M] (AVAST Software) [Kernel | System | Running] – C:\WINDOWS\System32\drivers\aavmker4.sys – (Aavmker4)
DRV - [2011/10/01 23:02:31 | 000,017,800 | —- | M] () [Kernel | Boot | Running] – C:\WINDOWS\system32\drivers\EnumProcessesDriver.sys – (EnumProcessesDriver)
DRV - [2011/04/30 13:58:06 | 000,009,216 | —- | M] () [File_System | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\SE_Filter.sys – (se_filter)
DRV - [2010/09/30 20:15:00 | 001,759,584 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\athuw.sys – (AR9271)
DRV - [2010/09/01 02:30:58 | 000,015,544 | —- | M] (Secunia) [File_System | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\psi_mf.sys – (PSI)
DRV - [2010/02/11 06:02:15 | 000,226,880 | —- | M] (Microsoft Corporation) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\tcpip6.sys – (Tcpip6)
DRV - [2009/01/30 17:13:20 | 000,058,208 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\wsimd.sys – (WSIMD)
DRV - [2008/09/25 18:07:00 | 000,057,440 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\jswscimd.sys – (JSWSCIMD)
DRV - [2004/10/01 09:24:00 | 002,279,424 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ALCXWDM.SYS – (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2003/12/12 18:03:10 | 000,652,689 | —- | M] (Agere Systems) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\ltmdmnt.sys – (ltmodem5)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@sun.com/npsopluginmi;version=1.0: C:\Program Files\OOo-dev 3\program File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@yahoo.com/BrowserPlus,version=2.9.8: File not found

FF - HKEY_LOCAL_MACHINE\software\mozilla\Aurora 7.0a2\extensions\\Components: C:\Program Files\Aurora\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Aurora 7.0a2\extensions\\Plugins: C:\Program Files\Aurora\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/02/12 21:50:52 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/17 15:57:38 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/11/13 05:48:54 | 000,000,000 | —D | M]

[2012/01/25 20:34:38 | 000,000,000 | —D | M] (No name found) – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\Mozilla\Extensions
[2012/02/07 01:29:14 | 000,000,000 | —D | M] (No name found) – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\Mozilla\SeaMonkey\Profiles\s0o08hu2.default\extensions
[2011/12/10 14:19:21 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/10/04 22:37:40 | 000,000,000 | —D | M] (Anti-Banner) – C:\Program Files\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2
[2012/02/07 13:40:14 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2011/10/04 22:37:15 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2
[2012/02/17 15:57:38 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\distribution\extensions
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
() (No name found) – J:\PORTABLEAPPS\DROPBOXPORTABLEAHK\.DBFILES\PROFILE\FILES\DISRUPTIVE INNOVATIONS SARL\BLUEGRIFFON\PROFILES\U4ID8QCY.DEFAULT\EXTENSIONS\[removed]
[2012/02/17 15:57:38 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/10/24 02:31:13 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011/04/07 01:13:36 | 000,002,226 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2011/09/28 10:03:28 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/09/28 10:03:28 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2011/12/19 20:34:30 | 000,000,791 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 secure.tune-up.com
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Show Naturalreader Bar) - {127AD70F-B2B7-4f6a-ACD9-C7B1FE48C8C0} - C:\Program Files\naturalsoft\naturalreader9\NVRshowbar.dll ()
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [CX] C:\Documents and Settings\Default\Start Menu\Programs\CX Inc\CX.appref-ms ()
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [RegistryBooster] C:\Program Files\Uniblue\RegistryBooster\launcher.exe (Uniblue Systems Limited)
O4 - HKCU..\Run: [SystemExplorerAutoStart] J:\PortableApps\System Explorer\SystemExplorer.exe (Mister Group)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\AutorunsDisabled [2011/04/20 20:12:15 | 000,000,000 | -H-D | M]
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NETGEAR WNA1100 Smart Wizard.lnk = C:\Program Files\NETGEAR\WNA1100\WNA1100.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 179
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleStartMenu = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoRecentDocsNetHood = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFind = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoFavoritesMenu = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogOff = 01 [binary data]
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: GreyMSIAds = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTrayItemsDisplay = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoViewOnDrive = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogoff = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMHelp = 01 00 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 01 00 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyPictures = 01 00 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoUserNameInStartMenu = 01 00 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSharedDocuments = 01 00 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWindowsUpdate = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSMMyDocs = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStartMenuMyMusic = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: StartMenuLogOff = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoTaskGrouping = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF 03 [binary data]
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1310045450968 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{37473BFE-537A-4668-8373-894A5D5784DC}: NameServer = 156.154.70.22,156.154.71.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7DEC7F49-C8A0-4F1A-BFBC-C0C37DD53B94}: DhcpNameServer = 192.168.1.254
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 () -
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Bliss.bmp
O27 - HKLM IFEO\notepad.exe: Debugger - C:\Program Files\Notepad Replacer\NotepadReplacer.exe (Binary Fortress Software)
O27 - HKLM IFEO\taskmgr.exe: Debugger - J:\PortableApps\System Explorer\SystemExplorer.exe (Mister Group)
O32 - HKLM CDRom: AutoRun - 0
O32 - AutoRun File - [2011/03/25 21:59:55 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2003/03/21 12:00:56 | 000,000,000 | RH-D | M] - J:\AUTORUN – [ FAT32 ]
O32 - AutoRun File - [2008/07/27 18:44:00 | 000,000,027 | R— | M] () - K:\Autorun.inf – [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/02/20 21:22:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Desktop\RegistryBooster_2012_v6.0.10.6
[2012/02/20 21:15:39 | 000,583,168 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Default\Desktop\OTL.exe
[2012/02/20 20:42:09 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\Uniblue
[2012/02/20 20:41:57 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}
[2012/02/20 20:41:57 | 000,000,000 | —D | C] – C:\Program Files\Uniblue
[2012/02/20 20:41:57 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Uniblue
[2012/02/20 20:40:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Local Settings\Application Data\PackageAware
[2012/02/20 20:27:23 | 000,106,547 | —- | C] (Microsoft Corporation) – C:\Documents and Settings\Default\Desktop\msscript.ocx
[2012/02/20 04:13:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Desktop\XTweaker
[2012/02/20 04:09:15 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\X-Setup Pro
[2012/02/20 04:09:15 | 000,000,000 | —D | C] – C:\Program Files\X-Setup Pro
[2012/02/20 04:09:15 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\X-Setup Pro
[2012/02/20 04:06:18 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Start Menu\Programs\TweakXP
[2012/02/20 04:06:15 | 000,000,000 | —D | C] – C:\Program Files\TweakXP 2
[2012/02/20 03:14:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\cloudstorageexplorer.com
[2012/02/20 03:13:54 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\My Documents\SDExplorer Logs
[2012/02/20 03:10:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\SDExplorer
[2012/02/20 03:10:11 | 000,000,000 | —D | C] – C:\Program Files\SDExplorer
[2012/02/20 01:23:42 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\ElevatedDiagnostics
[2012/02/19 22:20:32 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Local Settings\Application Data\PCHealth
[2012/02/18 01:03:52 | 000,000,000 | —D | C] – C:\Program Files\NextUp-Acapela
[2012/02/18 00:15:01 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\naturalsoft
[2012/02/18 00:14:39 | 000,000,000 | —D | C] – C:\Program Files\TTS1.4
[2012/02/18 00:14:39 | 000,000,000 | —D | C] – C:\Program Files\naturalsoft
[2012/02/18 00:14:39 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\My Documents\Naturalsoft
[2012/02/18 00:13:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NaturalSoft
[2012/02/17 21:58:37 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\NaturalSoft
[2012/02/17 16:31:39 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Start Menu\Programs\e-Speaking
[2012/02/17 16:31:37 | 000,000,000 | —D | C] – C:\Program Files\e-Speaking
[2012/02/17 03:40:47 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\WinRAR
[2012/02/17 01:04:19 | 000,000,000 | —D | C] – C:\WINDOWS\Fonts\AdvUninstal
[2012/02/17 01:03:50 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Local Settings\Application Data\Innovative Solutions
[2012/02/17 01:03:49 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Advanced Uninstaller PRO
[2012/02/17 01:03:47 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Innovative Solutions
[2012/02/17 01:03:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Innovative Solutions
[2012/02/17 01:03:25 | 000,000,000 | —D | C] – C:\Program Files\Innovative Solutions
[2012/02/17 00:58:01 | 000,000,000 | —D | C] – C:\Program Files\ATTNaturalVoices
[2012/02/17 00:56:16 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Speech SDK 5.1
[2012/02/17 00:55:11 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Speech SDK 5.1
[2012/02/16 23:21:36 | 000,491,520 | —- | C] (NCT Company) – C:\WINDOWS\System32\NCTAudioFile.dll
[2012/02/16 23:21:34 | 000,158,208 | —- | C] (NCT Company) – C:\WINDOWS\System32\NCTTextToAudio.dll
[2012/02/16 23:03:11 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\adnmaster
[2012/02/16 01:38:36 | 000,000,000 | —D | C] – C:\WINDOWS\ie8updates
[2012/02/12 21:51:21 | 000,020,568 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswFsBlk.sys
[2012/02/12 21:51:21 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
[2012/02/12 21:51:20 | 000,314,456 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSP.sys
[2012/02/12 21:51:18 | 000,052,952 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswTdi.sys
[2012/02/12 21:51:18 | 000,034,392 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswRdr.sys
[2012/02/12 21:51:17 | 000,435,032 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswSnx.sys
[2012/02/12 21:51:17 | 000,111,320 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswmon2.sys
[2012/02/12 21:51:17 | 000,105,176 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aswmon.sys
[2012/02/12 21:51:16 | 000,030,808 | —- | C] (AVAST Software) – C:\WINDOWS\System32\drivers\aavmker4.sys
[2012/02/12 21:50:50 | 000,041,184 | —- | C] (AVAST Software) – C:\WINDOWS\avastSS.scr
[2012/02/12 21:50:49 | 000,199,816 | —- | C] (AVAST Software) – C:\WINDOWS\System32\aswBoot.exe
[2012/02/12 21:50:37 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2012/02/12 20:28:05 | 000,000,000 | —D | C] – C:\Program Files\Orca
[2012/02/12 19:04:24 | 000,000,000 | -HSD | C] – C:\Documents and Settings\Default\Recent
[2012/02/12 16:48:55 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Desktop\CX-Home
[2012/02/12 15:00:02 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\CX
[2012/02/12 14:59:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Start Menu\Programs\CX Inc
[2012/02/12 14:57:30 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Local Settings\Application Data\Deployment
[2012/02/12 14:11:45 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\TweakMe!
[2012/02/12 14:11:45 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\OpenCandy
[2012/02/12 14:11:44 | 000,000,000 | —D | C] – C:\Program Files\TweakMe!
[2012/02/11 01:15:11 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\OpenArena
[2012/02/09 14:46:37 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Aptana Rubles
[2012/02/09 14:18:21 | 000,000,000 | —D | C] – C:\Program Files\Aptana
[2012/02/09 04:08:57 | 000,000,000 | —D | C] – C:\PcwBak
[2012/02/09 04:08:48 | 000,000,000 | —D | C] – C:\Program Files\Power PC Washer
[2012/02/09 03:35:57 | 000,000,000 | —D | C] – C:\WINDOWS\RegInOut System Utilities
[2012/02/08 21:24:18 | 000,244,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\Msflxgrd.ocx
[2012/02/08 20:52:22 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\pchc
[2012/02/07 23:17:05 | 000,000,000 | —D | C] – C:\Program Files\Chami
[2012/02/07 16:21:10 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\Avira
[2012/02/07 02:31:28 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Local Settings\Application Data\ActiveState
[2012/02/07 02:31:21 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\ActiveState
[2012/02/07 00:32:10 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\kompozer.net
[2012/02/07 00:32:10 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Local Settings\Application Data\kompozer.net
[2012/02/07 00:27:35 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\Disruptive Innovations SARL
[2012/02/07 00:27:35 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Local Settings\Application Data\Disruptive Innovations SARL
[2012/02/06 16:45:49 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Atheros
[2012/02/06 16:42:08 | 000,058,208 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\drivers\wsimd.sys
[2012/02/06 16:42:01 | 000,426,074 | —- | C] (Atheros) – C:\WINDOWS\System32\wgapi.dll
[2012/02/06 16:42:00 | 001,269,854 | —- | C] (Devicescape) – C:\WINDOWS\System32\dsa.dll
[2012/02/06 16:42:00 | 000,495,700 | —- | C] (Atheros) – C:\WINDOWS\System32\acs.exe
[2012/02/06 16:42:00 | 000,405,504 | —- | C] (Atheros) – C:\WINDOWS\System32\wcapi.dll
[2012/02/06 16:42:00 | 000,356,443 | —- | C] (Atheros) – C:\WINDOWS\System32\wcapiU.dll
[2012/02/06 16:42:00 | 000,311,390 | —- | C] (Atheros) – C:\WINDOWS\System32\athcfg20U.dll
[2012/02/06 16:42:00 | 000,254,022 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\wsfwDS.dll
[2012/02/06 16:42:00 | 000,249,924 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\wsimd.dll
[2012/02/06 16:42:00 | 000,237,568 | —- | C] (Atheros) – C:\WINDOWS\System32\athcfg20.dll
[2012/02/06 16:42:00 | 000,127,079 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\athcfg20resU.dll
[2012/02/06 16:42:00 | 000,127,053 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\athcfg20res.dll
[2012/02/06 16:42:00 | 000,082,017 | —- | C] (Devicescape, Inc.) – C:\WINDOWS\System32\dsaNac.dll
[2012/02/06 16:41:59 | 001,759,584 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\drivers\athuw.sys
[2012/02/06 16:41:58 | 000,058,208 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\wsimd.sys
[2012/02/06 16:41:58 | 000,057,440 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\jswscimd.sys
[2012/02/06 16:41:58 | 000,057,440 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\drivers\jswscimd.sys
[2012/02/06 16:41:55 | 000,405,582 | —- | C] (Atheros Communications, Inc.) – C:\WINDOWS\System32\jswscsup.dll
[2012/02/06 16:41:55 | 000,073,800 | —- | C] (Atheros) – C:\WINDOWS\System32\athgina.dll
[2012/02/06 16:41:52 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\NETGEAR WNA1100 Smart Wizard
[2012/02/06 16:41:48 | 000,000,000 | —D | C] – C:\Program Files\NETGEAR
[2012/02/06 16:41:26 | 000,000,000 | —D | C] – C:\temp
[2012/02/02 04:44:12 | 000,000,000 | —D | C] – C:\WINDOWS\Mozilla
[2012/02/02 04:42:42 | 000,000,000 | —D | C] – C:\Mozilla
[2012/01/31 20:24:11 | 000,000,000 | —D | C] – C:\Documents and Settings\Default\Start Menu\Programs\Startup
[2012/01/28 13:36:21 | 000,000,000 | —D | C] – J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\Yahoo!
[2012/01/28 13:16:06 | 000,000,000 | —D | C] – C:\Program Files\Yahoo!
[2012/01/26 01:45:52 | 000,000,000 | –SD | C] – C:\Documents and Settings\Default\Start Menu\Programs\Administrative Tools
[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/02/20 21:15:46 | 000,583,168 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Default\Desktop\OTL.exe
[2012/02/20 20:50:02 | 000,000,888 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/02/20 20:46:11 | 000,000,123 | —- | M] () – C:\WINDOWS\_vmtxp.ini
[2012/02/20 20:42:17 | 000,000,268 | —- | M] () – C:\WINDOWS\tasks\RegistryBooster.job
[2012/02/20 20:41:59 | 000,001,493 | —- | M] () – C:\Documents and Settings\Default\Desktop\Uniblue RegistryBooster.lnk
[2012/02/20 20:27:29 | 000,106,547 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\Default\Desktop\msscript.ocx
[2012/02/20 17:50:01 | 000,000,884 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/02/20 11:51:41 | 000,014,166 | —- | M] () – C:\Documents and Settings\Default\Desktop\holly.rtf
[2012/02/20 09:36:28 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/02/20 09:36:20 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/02/20 09:08:06 | 000,321,136 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/20 04:14:55 | 000,001,733 | —- | M] () – C:\Documents and Settings\Default\Desktop\X-Setup Pro.lnk
[2012/02/20 04:06:20 | 000,000,671 | —- | M] () – C:\Documents and Settings\Default\Desktop\TweakXP.lnk
[2012/02/19 23:51:19 | 000,523,516 | —- | M] () – C:\Documents and Settings\Default\Desktop\xlcatodress7.jpg
[2012/02/19 03:00:00 | 000,000,336 | —- | M] () – C:\WINDOWS\tasks\RegInOut Scheduled Scan - Default.job
[2012/02/18 01:19:36 | 000,569,884 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/02/18 01:19:36 | 000,108,452 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/02/18 00:15:01 | 000,001,825 | —- | M] () – C:\Documents and Settings\All Users\Desktop\NaturalReader 9.lnk
[2012/02/17 21:38:36 | 000,014,848 | —- | M] () – C:\WINDOWS\System32\BASSMOD.dll
[2012/02/17 16:32:29 | 000,031,352 | —- | M] () – C:\Documents and Settings\Default\My Documents\e-Speaking Commands.xml
[2012/02/17 16:32:05 | 000,002,349 | —- | M] () – C:\Documents and Settings\Default\Desktop\e-Speaking Voice.lnk
[2012/02/17 01:03:49 | 000,002,106 | —- | M] () – C:\Documents and Settings\Default\Desktop\Advanced Uninstaller PRO 10.lnk
[2012/02/16 10:36:29 | 000,000,302 | —- | M] () – C:\Documents and Settings\Default\Desktop\REDBOXPASS.rtf
[2012/02/16 03:09:18 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/02/16 01:39:48 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2012/02/14 12:21:33 | 000,004,249 | —- | M] () – C:\Documents and Settings\Default\Desktop\Document2.rtf
[2012/02/13 15:53:17 | 000,045,613 | —- | M] () – C:\Documents and Settings\Default\Desktop\marvelous-hairstyles-17.jpg
[2012/02/12 23:14:44 | 000,045,613 | —- | M] () – C:\Documents and Settings\Default\Desktop\pic1.jpg
[2012/02/12 21:51:17 | 000,002,638 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2012/02/12 15:40:40 | 000,299,351 | —- | M] () – C:\Documents and Settings\Default\Desktop\sis.jpg
[2012/02/12 15:04:37 | 000,000,276 | —- | M] () – C:\Documents and Settings\Default\Desktop\CX.appref-ms
[2012/02/12 14:11:46 | 000,000,687 | —- | M] () – C:\Documents and Settings\All Users\Desktop\TweakMe!.lnk
[2012/02/09 04:08:59 | 000,065,552 | -HS- | M] () – C:\Documents and Settings\All Users\Application Data\Desktop.lnk
[2012/02/08 07:01:53 | 000,001,324 | —- | M] () – C:\Documents and Settings\Default\My Documents\CHORES.rtf
[2012/02/06 16:41:52 | 000,000,595 | —- | M] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NETGEAR WNA1100 Smart Wizard.lnk
[2012/01/28 13:49:29 | 000,000,072 | —- | M] () – C:\BlankABRP.html
[2012/01/28 09:13:22 | 000,002,903 | —- | M] () – C:\Documents and Settings\Default\Desktop\Kristysinfosheet.rtf
[2012/01/25 02:56:47 | 000,002,855 | —- | M] () – C:\Documents and Settings\Default\Desktop\Michael Info Sheet.rtf
[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/02/20 20:42:12 | 000,000,268 | —- | C] () – C:\WINDOWS\tasks\RegistryBooster.job
[2012/02/20 20:41:59 | 000,001,493 | —- | C] () – C:\Documents and Settings\Default\Desktop\Uniblue RegistryBooster.lnk
[2012/02/20 10:57:50 | 000,000,123 | —- | C] () – C:\WINDOWS\_vmtxp.ini
[2012/02/20 04:14:55 | 000,001,733 | —- | C] () – C:\Documents and Settings\Default\Desktop\X-Setup Pro.lnk
[2012/02/20 04:09:41 | 000,001,733 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\X-Setup Pro.lnk
[2012/02/20 04:06:20 | 000,000,671 | —- | C] () – C:\Documents and Settings\Default\Desktop\TweakXP.lnk
[2012/02/19 23:51:10 | 000,523,516 | —- | C] () – C:\Documents and Settings\Default\Desktop\xlcatodress7.jpg
[2012/02/19 21:24:47 | 000,014,166 | —- | C] () – C:\Documents and Settings\Default\Desktop\holly.rtf
[2012/02/18 00:15:01 | 000,001,825 | —- | C] () – C:\Documents and Settings\All Users\Desktop\NaturalReader 9.lnk
[2012/02/17 21:36:56 | 000,014,848 | —- | C] () – C:\WINDOWS\System32\BASSMOD.dll
[2012/02/17 16:32:26 | 000,031,352 | —- | C] () – C:\Documents and Settings\Default\My Documents\e-Speaking Commands.xml
[2012/02/17 16:31:40 | 000,002,349 | —- | C] () – C:\Documents and Settings\Default\Desktop\e-Speaking Voice.lnk
[2012/02/17 01:03:50 | 000,001,984 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Advanced Uninstaller PRO 10.lnk
[2012/02/17 01:03:49 | 000,002,106 | —- | C] () – C:\Documents and Settings\Default\Desktop\Advanced Uninstaller PRO 10.lnk
[2012/02/17 01:03:38 | 000,047,984 | —- | C] () – C:\WINDOWS\System32\AdvUninstCPL.cpl
[2012/02/16 01:24:11 | 000,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2012/02/15 10:41:41 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2012/02/15 10:41:41 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/02/15 06:17:49 | 000,000,302 | —- | C] () – C:\Documents and Settings\Default\Desktop\REDBOXPASS.rtf
[2012/02/14 12:21:32 | 000,004,249 | —- | C] () – C:\Documents and Settings\Default\Desktop\Document2.rtf
[2012/02/13 15:52:59 | 000,045,613 | —- | C] () – C:\Documents and Settings\Default\Desktop\marvelous-hairstyles-17.jpg
[2012/02/12 23:14:42 | 000,045,613 | —- | C] () – C:\Documents and Settings\Default\Desktop\pic1.jpg
[2012/02/12 21:00:15 | 000,321,136 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/12 15:40:17 | 000,299,351 | —- | C] () – C:\Documents and Settings\Default\Desktop\sis.jpg
[2012/02/12 15:04:37 | 000,000,276 | —- | C] () – C:\Documents and Settings\Default\Desktop\CX.appref-ms
[2012/02/12 14:11:46 | 000,000,687 | —- | C] () – C:\Documents and Settings\All Users\Desktop\TweakMe!.lnk
[2012/02/09 04:08:59 | 000,065,552 | -HS- | C] () – C:\Documents and Settings\All Users\Application Data\Desktop.lnk
[2012/02/09 03:36:18 | 000,000,336 | —- | C] () – C:\WINDOWS\tasks\RegInOut Scheduled Scan - Default.job
[2012/02/08 07:01:53 | 000,001,324 | —- | C] () – C:\Documents and Settings\Default\My Documents\CHORES.rtf
[2012/02/06 16:41:59 | 000,039,471 | —- | C] () – C:\WINDOWS\System32\wsimdp.cat
[2012/02/06 16:41:59 | 000,005,363 | —- | C] () – C:\WINDOWS\System32\wsimdp.inf
[2012/02/06 16:41:58 | 000,039,469 | —- | C] () – C:\WINDOWS\System32\wsimd.cat
[2012/02/06 16:41:58 | 000,035,967 | —- | C] () – C:\WINDOWS\System32\jswscimdp.cat
[2012/02/06 16:41:58 | 000,035,538 | —- | C] () – C:\WINDOWS\System32\jswscimd.cat
[2012/02/06 16:41:58 | 000,005,529 | —- | C] () – C:\WINDOWS\System32\jswscimdp.inf
[2012/02/06 16:41:58 | 000,002,231 | —- | C] () – C:\WINDOWS\System32\jswscimd.inf
[2012/02/06 16:41:58 | 000,002,179 | —- | C] () – C:\WINDOWS\System32\wsimd.inf
[2012/02/06 16:41:55 | 000,262,216 | —- | C] () – C:\WINDOWS\System32\IPTests.dll
[2012/02/06 16:41:52 | 000,000,595 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\NETGEAR WNA1100 Smart Wizard.lnk
[2012/01/28 13:49:29 | 000,000,072 | —- | C] () – C:\BlankABRP.html
[2012/01/28 09:13:22 | 000,002,903 | —- | C] () – C:\Documents and Settings\Default\Desktop\Kristysinfosheet.rtf
[2012/01/25 02:56:47 | 000,002,855 | —- | C] () – C:\Documents and Settings\Default\Desktop\Michael Info Sheet.rtf
[2012/01/20 16:12:51 | 000,000,125 | —- | C] () – C:\WINDOWS\FlashDecompiler.INI
[2011/11/14 08:44:27 | 000,299,806 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2011/10/12 01:56:25 | 000,156,672 | —- | C] () – C:\WINDOWS\System32\RtlCPAPI.dll
[2011/10/12 01:56:23 | 000,040,448 | —- | C] () – C:\WINDOWS\System32\ChCfg.exe
[2011/10/10 22:56:27 | 000,000,121 | —- | C] () – C:\WINDOWS\_vmtel.INI
[2011/10/04 22:42:31 | 000,017,408 | —- | C] () – C:\Documents and Settings\Default\Local Settings\Application Data\WebpageIcons.db
[2011/10/01 23:03:15 | 000,017,800 | —- | C] () – C:\WINDOWS\System32\drivers\EnumProcessesDriver.sys
[2011/09/14 20:01:31 | 000,001,661 | —- | C] () – C:\WINDOWS\System32\.ini
[2011/08/24 18:12:05 | 000,062,304 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2011/07/21 13:57:39 | 000,000,632 | —- | C] () – C:\WINDOWS\Q3ta.INI
[2011/07/03 20:25:52 | 000,000,031 | —- | C] () – C:\WINDOWS\Q3CDKey.ini
[2011/06/20 10:00:15 | 000,000,754 | —- | C] () – C:\WINDOWS\WORDPAD.INI
[2011/04/30 13:58:06 | 000,009,216 | —- | C] () – C:\WINDOWS\System32\drivers\SE_Filter.sys
[2011/03/26 11:34:58 | 000,000,000 | —- | C] () – C:\WINDOWS\nsreg.dat
[2011/03/25 22:57:09 | 001,474,832 | —- | C] () – C:\WINDOWS\System32\drivers\sfi.dat
[2011/03/25 22:02:08 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/03/25 21:57:15 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/03/25 15:47:59 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI

========== Alternate Data Streams ==========

@Alternate Data Stream - 140 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:07BF512B
@Alternate Data Stream - 128 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:42D9E231
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CC02DF48

< End of report >

OTL Extras logfile created on: 2/20/2012 9:20:54 PM - Run 1
OTL by OldTimer - Version 3.2.33.1 Folder = C:\Documents and Settings\Default\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

447.48 Mb Total Physical Memory | 264.56 Mb Available Physical Memory | 59.12% Memory free
1.03 Gb Paging File | 0.69 Gb Available in Paging File | 66.94% Paging File free
Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.52 Gb Total Space | 61.27 Gb Free Space | 82.23% Space Free | Partition Type: NTFS
Drive J: | 232.83 Gb Total Space | 25.70 Gb Free Space | 11.04% Space Free | Partition Type: FAT32
Drive K: | 1.63 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS

Computer Name: HOME-3FBD27C0AE | User Name: Default | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Reg Error: Value error.] – Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
http [open] – Reg Error: Key error.
https [open] – Reg Error: Key error.
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [DosHere] – C:\WINDOWS\System32\cmd.exe /k cd ""%1"" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5985:TCP" = 5985:TCP:*:Disabled:Windows Remote Management
"80:TCP" = 80:TCP:*:Disabled:Windows Remote Management - Compatibility Mode (HTTP-In)

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"J:\PortableApps\Malwarebytes\App\Malwarebytes\mbam.exe" = J:\PortableApps\Malwarebytes\App\Malwarebytes\mbam.exe:*:Enabled:Malwarebytes

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"J:\PortableApps\Skype\App\Skype\Phone\Skype.exe" = J:\PortableApps\Skype\App\Skype\Phone\Skype.exe:*:Enabled:Skype
"J:\PortableApps\Malwarebytes\App\Malwarebytes\mbam.exe" = J:\PortableApps\Malwarebytes\App\Malwarebytes\mbam.exe:*:Enabled:Malwarebytes
"J:\PortableApps\uTorrent\App\utorrent\uTorrent.exe" = J:\PortableApps\uTorrent\App\utorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)
"J:\PortableApps\Open Arena\openarena.exe" = J:\PortableApps\Open Arena\openarena.exe:*:Enabled:openarena – ()
"J:\PortableApps\JDownloader\CommonFiles\Java\bin\javaw.exe" = J:\PortableApps\JDownloader\CommonFiles\Java\bin\javaw.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\Spotify\spotify.exe" = J:\PortableApps\DropboxPortableAHK\.dbfiles\profile\files\Spotify\spotify.exe:*:Enabled:Spotify
"J:\PortableApps\Lighty2Go_v1.5.2\Lighty2Go\MySQL\bin\mysqld-nt.exe" = J:\PortableApps\Lighty2Go_v1.5.2\Lighty2Go\MySQL\bin\mysqld-nt.exe:*:Enabled:mysqld-nt
"J:\PortableApps\Lighty2Go_v1.5.2\Lighty2Go\LightTPD\LightTPD.exe" = J:\PortableApps\Lighty2Go_v1.5.2\Lighty2Go\LightTPD\LightTPD.exe:*:Enabled:A fast, secure and flexible webserver
"C:\Documents and Settings\Default\Desktop\Uniform Server UPX\diskw\usr\local\apache2\bin\Apache.exe" = C:\Documents and Settings\Default\Desktop\Uniform Server UPX\diskw\usr\local\apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server
"C:\Program Files\Ampps\mysql\bin\mysqld.exe" = C:\Program Files\Ampps\mysql\bin\mysqld.exe:*:Enabled:mysqld
"C:\Program Files\Ampps\apache\bin\httpd.exe" = C:\Program Files\Ampps\apache\bin\httpd.exe:*:Enabled:Apache HTTP Server
"C:\wamp\bin\apache\Apache2.2.21\bin\httpd.exe" = C:\wamp\bin\apache\Apache2.2.21\bin\httpd.exe:*:Enabled:Apache HTTP Server
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger
"C:\Program Files\ActiveState Komodo IDE 7\lib\mozilla\komodo.exe" = C:\Program Files\ActiveState Komodo IDE 7\lib\mozilla\komodo.exe:*:Enabled:ActiveState Komodo
"C:\WINDOWS\system32\java.exe" = C:\WINDOWS\system32\java.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\Program Files\Aptana\Aptana Studio 3\AptanaStudio3.exe" = C:\Program Files\Aptana\Aptana Studio 3\AptanaStudio3.exe:*:Enabled:AptanaStudio3
"C:\Program Files\NextUp-Acapela\bin\acatel_srv.exe" = C:\Program Files\NextUp-Acapela\bin\acatel_srv.exe:*:Enabled:Acapela Telecom HQ TTS Server – (Acapela Group)
"J:\PortableApps\Tixati 1.83-1\tixati_Windows.exe" = J:\PortableApps\Tixati 1.83-1\tixati_Windows.exe:*:Enabled:tixati_Windows – ()


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07EA4E9F-BD35-4F38-9809-D825B772B833}" = Image Optimizer 3.0
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP2700_series" = Canon iP2700 series Printer Driver
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java™ 6 Update 29
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{30DC2AF9-7E3F-4172-B0E6-7D9B0676CFFA}" = ATT 1.4 Engine Only (no voices)
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A5A427F-BA39-4BF0-9A47-9999FBE60C9F}" = Visual C++ Runtime for Dragon NaturallySpeaking
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{62AAFC0A-00B8-4663-98D8-96AE9F3BA058}" = TTS
"{6624A46E-1215-4525-A7BB-237B6C877EA9}" = Voice and Speech Recognition Software
"{67F7D625-2E32-481B-85E4-2D17F0E6778D}" = NaturalReader95
"{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1" = TweakMe!
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7A21DC50-7E57-4D73-B805-2B25F495A111}" = NextUp-Acapela Brightspeech Ryan22 US English Voice
"{7B166B27-C968-4CF1-ABE6-9AFAB7014347}" = Peter
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2AE9709-283B-4B48-AA34-729C070A62FB}" = NETGEAR WNA1100 N150 Wireless USB Adapter
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A403D88E-ED7D-48E3-91FD-B8C8A720EDA1}" = Microsoft Speech SDK 5.1
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AFDAE90A-E444-446E-9A27-13E8C77F1108}" = Microsoft Text-To-Speech Voices
"{BF127B80-CFD5-4379-9752-E8AF1A5D0141}" = Microsoft Expression Encoder 4 Screen Capture Codec
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFE0FD61-98C7-4CEE-9E59-149D861A361B}" = NextUp-Acapela Elan Aaron22 US English Voice
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"0EDD95B3-6CED-4E8A-B1BF-78BF11C38837_is1" = Notepad Replacer 1.1.5
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AU10_is1" = Advanced Uninstaller PRO - Version 10
"avast" = avast! Free Antivirus
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"DAEMON Tools Lite" = DAEMON Tools Lite
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"Foxit Reader_is1" = Foxit Reader 5.0
"ID_POLYSOFT_POLYEDIT_LITE_is1" = PolyEdit Lite 5.4
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.60.1.1000
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 11.0 (x86 en-US)" = Mozilla Firefox 11.0 (x86 en-US)
"MyDefrag v4.3.1_is1" = MyDefrag v4.3.1
"Notepad++" = Notepad++
"S3" = VIA/S3G Display Driver
"SDEPRO20_is1" = SDExplorer 3.1
"Secunia PSI" = Secunia PSI (2.0.0.3001)
"Software Informer_is1" = Software Informer 1.1
"TomTom HOME" = TomTom HOME 2.8.2.2264
"twxp_is1" = TweakXP Tweaking Utility 2
"Uniblue RegistryBooster" = Uniblue RegistryBooster
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter
"VTDisplay" = S3 S3Display
"VTGamma2" = S3 S3Gamma2
"VTInfo2" = S3 S3Info2
"VTOverlay" = S3 S3Overlay
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"xqdcXSP_is1" = XQDC X-Setup Pro 9.2.100

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"1ae4b70d7cc027a5" = CX
"SugarSync" = SugarSync Manager

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2/17/2012 6:32:41 PM | Computer Name = HOME-3FBD27C0AE | Source = WmiAdapter | ID = 4099
Description = Open of service failed.

Error - 2/18/2012 2:49:10 AM | Computer Name = HOME-3FBD27C0AE | Source = MsiInstaller | ID = 11500
Description = Product: Rachel – Error 1500.Another installation is in progress.
You must complete that installation before continuing this one.

Error - 2/20/2012 12:14:45 AM | Computer Name = HOME-3FBD27C0AE | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 3.5 SP1 - Update '{A7EEA2F2-BFCD-4A54-A575-7B81A786E658}'
could not be installed. Error code 1651. Additional information is available in
the log file C:\DOCUME~1\Default\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB958484_20120220_041440828-Msi0.txt.

Error - 2/20/2012 12:14:47 AM | Computer Name = HOME-3FBD27C0AE | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 3.5-kb958484,
P2 1033, P3 1651, P4 msi, P5 f, P6 9.0.31211.0, P7 install, P8 x86, P9 xp, P10
0.

Error - 2/20/2012 2:33:01 PM | Computer Name = HOME-3FBD27C0AE | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 3.5 SP1 - Update '{A7EEA2F2-BFCD-4A54-A575-7B81A786E658}'
could not be installed. Error code 1651. Additional information is available in
the log file C:\DOCUME~1\Default\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB958484_20120220_183256656-Msi0.txt.

Error - 2/20/2012 2:33:02 PM | Computer Name = HOME-3FBD27C0AE | Source = HotFixInstaller | ID = 5000
Description = EventType visualstudio8setup, P1 microsoft .net framework 3.5-kb958484,
P2 1033, P3 1651, P4 msi, P5 f, P6 9.0.31211.0, P7 install, P8 x86, P9 xp, P10
0.

Error - 2/20/2012 11:08:57 PM | Computer Name = HOME-3FBD27C0AE | Source = MsiInstaller | ID = 1023
Description = Product: Microsoft .NET Framework 3.5 SP1 - Update '{A7EEA2F2-BFCD-4A54-A575-7B81A786E658}'
could not be installed. Error code 1651. Additional information is available in
the log file C:\DOCUME~1\Default\LOCALS~1\Temp\Microsoft .NET Framework 3.5-KB958484_20120221_030851359-Msi0.txt.

[ System Events ]
Error - 2/13/2012 4:03:41 PM | Computer Name = HOME-3FBD27C0AE | Source = Print | ID = 6161
Description = The document Michael Info Sheet.rtf owned by Default failed to print
on printer Canon iP2700 series. Data type: NT EMF 1.008. Size of the spool file
in bytes: 0. Number of bytes printed: 0. Total number of pages in the document:
1. Number of pages printed: 0. Client machine: \\HOME-3FBD27C0AE. Win32 error code
returned by the print processor: 259 (0x103).

Error - 2/14/2012 10:23:17 PM | Computer Name = HOME-3FBD27C0AE | Source = atapi | ID = 262153
Description = The device, \Device\Ide\IdePort2, did not respond within the timeout
period.

Error - 2/15/2012 3:45:39 PM | Computer Name = HOME-3FBD27C0AE | Source = Print | ID = 6161
Description = The document Document5 owned by Default failed to print on printer
Canon iP2700 series. Data type: NT EMF 1.008. Size of the spool file in bytes:
8940. Number of bytes printed: 8864. Total number of pages in the document: 1. Number
of pages printed: 0. Client machine: \\HOME-3FBD27C0AE. Win32 error code returned
by the print processor: 0 (0x0).

Error - 2/15/2012 3:46:05 PM | Computer Name = HOME-3FBD27C0AE | Source = Print | ID = 6161
Description = The document Document5 owned by Default failed to print on printer
Canon iP2700 series. Data type: NT EMF 1.008. Size of the spool file in bytes:
9024. Number of bytes printed: 8948. Total number of pages in the document: 1. Number
of pages printed: 0. Client machine: \\HOME-3FBD27C0AE. Win32 error code returned
by the print processor: 0 (0x0).

Error - 2/20/2012 12:14:54 AM | Computer Name = HOME-3FBD27C0AE | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework
3.5 Family Update for .NET versions 2.0 through 3.5 (KB951847) x86.

Error - 2/20/2012 3:23:42 AM | Computer Name = HOME-3FBD27C0AE | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {2411AF30-E193-47E3-895F-89B3BD3AA340}.
The
error: "%193" Happened while starting this command: C:\Documents and Settings\Default\Local
Settings\Temp\MATS-Temp\CABtb4512u4.krw\matshost.exe -Embedding

Error - 2/20/2012 3:26:08 AM | Computer Name = HOME-3FBD27C0AE | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {2411AF30-E193-47E3-895F-89B3BD3AA340}.
The
error: "%193" Happened while starting this command: C:\Documents and Settings\Default\Local
Settings\Temp\MATS-Temp\CAB4zckjhiz.wkm\matshost.exe -Embedding

Error - 2/20/2012 3:27:36 AM | Computer Name = HOME-3FBD27C0AE | Source = DCOM | ID = 10000
Description = Unable to start a DCOM Server: {2411AF30-E193-47E3-895F-89B3BD3AA340}.
The
error: "%193" Happened while starting this command: C:\Documents and Settings\Default\Local
Settings\Temp\MATS-Temp\CABtwvy5ivw.y11\matshost.exe -Embedding

Error - 2/20/2012 2:33:09 PM | Computer Name = HOME-3FBD27C0AE | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework
3.5 Family Update for .NET versions 2.0 through 3.5 (KB951847) x86.

Error - 2/20/2012 11:09:06 PM | Computer Name = HOME-3FBD27C0AE | Source = Windows Update Agent | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework
3.5 Family Update for .NET versions 2.0 through 3.5 (KB951847) x86.


< End of report >

Ok Ken, This is aswMBR log: aswMBR version 0.9.9.1649 Copyright© 2011 AVAST Software Run date: 2012-03-02 18:59:00 —————————– 18:59:00.421 OS Version: Windows 5.1.2600 Service Pack 3 18:59:00.421 Number of processors: 1 586 0xA00 18:59:00.421 ComputerName: HOME-3FBD27C0AE UserName: Default 18:59:04.843 Initialize success 18:59:06.640 AVAST engine defs: 12030201 19:00:18.953 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-1b 19:00:18.953 Disk 0 Vendor: ST380011A 3.08 Size: 76319MB BusType: 3 19:00:18.968 Disk 0 MBR read successfully 19:00:18.968 Disk 0 MBR scan 19:00:18.984 Disk 0 Windows XP default MBR code 19:00:18.984 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 76308 MB offset 63 19:00:19.000 Disk 0 scanning sectors +156280320 19:00:19.109 Disk 0 scanning C:\WINDOWS\system32\drivers 19:00:36.875 Service scanning 19:00:53.250 Service sptd C:\WINDOWS\System32\Drivers\sptd.sys **LOCKED** 32 19:00:58.453 Modules scanning 19:01:11.734 Disk 0 trace - called modules: 19:01:11.765 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sptd.sys viaide.sys PCIIDEX.SYS 19:01:11.765 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x853115e0] 19:01:11.765 3 CLASSPNP.SYS[f78c9fd7] -> nt!IofCallDriver -> \Device\0000006a[0x85310f18] 19:01:11.765 5 ACPI.sys[f7710620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-1b[0x85311b58] 19:01:12.218 AVAST engine scan C:\WINDOWS 19:01:15.687 AVAST engine scan C:\WINDOWS\system32 19:04:25.156 AVAST engine scan C:\WINDOWS\system32\drivers 19:04:44.218 AVAST engine scan C:\Documents and Settings\Default 19:08:49.640 AVAST engine scan C:\Documents and Settings\All Users 19:10:02.718 Scan finished successfully 19:10:19.968 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Default\Desktop\MBR.dat" 19:10:19.968 The log file has been saved successfully to "C:\Documents and Settings\Default\Desktop\aswMBR.txt" This is DDS log: . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_31 Run by [removed] at 19:42:26 on 2012-03-02 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.447.41 [GMT -6:00] . AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D} . ============== Running Processes =============== . C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\acs.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe J:\PortableApps\System Explorer\SystemExplorer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\NETGEAR\WNA1100\WNA1100.exe J:\PortableApps\System Explorer\service\SystemExplorerService.exe C:\Program Files\Secunia\PSI\sua.exe C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe C:\Program Files\NETGEAR\WNA1100\WifiSvc.exe C:\WINDOWS\system32\wuauclt.exe svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Notepad++\notepad++.exe . ============== Pseudo HJT Report =============== . uStart Page = about:blank uWindow Title = IE Sucks BHO: Show Naturalreader Bar: {127ad70f-b2b7-4f6a-acd9-c7b1fe48c8c0} - "c:\program files\naturalsoft\naturalreader9\NVRshowbar.dll" BHO: Canon Easy-WebPrint EX BHO: {3785d0ad-bfff-47f6-bf5b-a587c162fed9} - c:\program files\canon\easy-webprint ex\ewpexbho.dll BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll TB: Canon Easy-WebPrint EX: {759d9886-0c6f-4498-bab6-4a5f47c6c72f} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll TB: Naturalsoft IE Bar V9: {ae07101b-46d4-4a98-af68-0333ea26e113} - mscoree.dll EB: Canon Easy-WebPrint EX: {21347690-ec41-4f9a-8887-1f4aee672439} - c:\program files\canon\easy-webprint ex\ewpexhlp.dll uRun: [SystemExplorerAutoStart] "j:\portableapps\system explorer\SystemExplorer.exe" /TRAY uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe uRun: [CX] c:\documents and settings\default\start menu\programs\cx inc\CX.appref-ms uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" uPolicies-explorer: GreyMSIAds = 0 (0x0) uPolicies-explorer: NoInstrumentation = 1 (0x1) uPolicies-explorer: NoViewOnDrive = 0 (0x0) uPolicies-explorer: NoLogoff = 1 (0x1) uPolicies-explorer: NoSMHelp = 01000000 uPolicies-explorer: NoSMMyPictures = 01000000 uPolicies-explorer: NoWindowsUpdate = 0 (0x0) uPolicies-explorer: NoSMMyDocs = 1 (0x1) uPolicies-explorer: NoStartMenuMyMusic = 1 (0x1) uPolicies-explorer: StartMenuLogOff = 1 (0x1) uPolicies-explorer: NoTaskGrouping = 1 (0x1) mPolicies-explorer: NoSimpleStartMenu = 1 (0x1) mPolicies-explorer: NoRecentDocsNetHood = 1 (0x1) mPolicies-explorer: NoFind = 1 (0x1) mPolicies-explorer: NoSMHelp = 1 (0x1) mPolicies-explorer: NoInstrumentation = 1 (0x1) mPolicies-explorer: NoFavoritesMenu = 1 (0x1) mPolicies-explorer: NoLogOff = 01 mPolicies-system: DisableStatusMessages = 1 (0x1) mPolicies-system: SynchronousMachineGroupPolicy = 0 (0x0) mPolicies-system: SynchronousUserGroupPolicy = 0 (0x0) IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1310045450968 DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab TCP: DhcpNameServer = 192.168.1.254 TCP: Interfaces\{37473BFE-537A-4668-8373-894A5D5784DC} : NameServer = 156.154.70.22,156.154.71.22 TCP: Interfaces\{7DEC7F49-C8A0-4F1A-BFBC-C0C37DD53B94} : DhcpNameServer = 192.168.1.254 AppInit_DLLs: SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll IFEO: notepad.exe - c:\program files\notepad replacer\NotepadReplacer.exe IFEO: taskmgr.exe - "j:\portableapps\system explorer\SystemExplorer.exe" . ================= FIREFOX =================== . FF - ProfilePath - . ============= SERVICES / DRIVERS =============== . R? clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86 R? gupdate;Google Update Service (gupdate) R? gupdatem;Google Update Service (gupdatem) R? jswpsapi;JumpStart Wi-Fi Protected Setup R? PSI;PSI R? SASDIFSV;SASDIFSV R? SASKUTIL;SASKUTIL R? se_filter;System Explorer Filter Driver R? Secunia PSI Agent;Secunia PSI Agent R? WinRM;Windows Remote Management (WS-Management) R? WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0 S? AR9271;Atheros AR9271 Wireless Network Adapter Service S? aswFsBlk;aswFsBlk S? aswSnx;aswSnx S? aswSP;aswSP S? avast! Antivirus;avast! Antivirus S? EnumProcessesDriver;EnumProcessesDriver S? JSWSCIMD;jswscimd Service S? MBAMProtector;MBAMProtector S? MBAMService;MBAMService S? Secunia Update Agent;Secunia Update Agent S? TomTomHOMEService;TomTomHOMEService S? WSWNA1100;WSWNA1100 . =============== File Associations =============== . regfile\shell\edit\command=%SystemRoot%\system32\NOTEPAD.EXE %1 . =============== Created Last 30 ================ . 2012-03-02 06:47:45 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\Thinstall 2012-02-29 20:32:23 73728 —-a-w- c:\windows\system32\javacpl.cpl 2012-02-29 09:02:41 ——– d—–w- C:\f0bc509b701ae51da9 2012-02-23 05:21:10 ——– d—–w- c:\documents and settings\default\local settings\application data\Unity 2012-02-23 05:19:30 ——– d—–w- c:\program files\Unity 2012-02-21 02:41:57 ——– dc-h–w- c:\documents and settings\all users\application data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1} 2012-02-21 02:40:32 ——– d—–w- c:\documents and settings\default\local settings\application data\PackageAware 2012-02-20 10:09:15 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\X-Setup Pro 2012-02-20 10:09:15 ——– d—–w- c:\program files\X-Setup Pro 2012-02-20 10:09:15 ——– d—–w- c:\documents and settings\all users\application data\X-Setup Pro 2012-02-20 10:06:15 ——– d—–w- c:\program files\TweakXP 2 2012-02-20 09:14:51 ——– d—–w- c:\documents and settings\all users\application data\cloudstorageexplorer.com 2012-02-20 09:10:11 ——– d—–w- c:\program files\SDExplorer 2012-02-20 07:23:42 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\ElevatedDiagnostics 2012-02-20 04:20:32 ——– d—–w- c:\documents and settings\default\local settings\application data\PCHealth 2012-02-18 07:03:52 ——– d—–w- c:\program files\NextUp-Acapela 2012-02-18 06:14:39 ——– d—–w- c:\program files\TTS1.4 2012-02-18 06:14:39 ——– d—–w- c:\program files\naturalsoft 2012-02-18 06:13:54 ——– d—–w- c:\documents and settings\all users\application data\NaturalSoft 2012-02-17 22:31:37 ——– d—–w- c:\program files\e-Speaking 2012-02-17 09:40:47 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\WinRAR 2012-02-17 07:03:50 ——– d—–w- c:\documents and settings\default\local settings\application data\Innovative Solutions 2012-02-17 07:03:47 ——– d—–w- c:\program files\common files\Innovative Solutions 2012-02-17 07:03:39 ——– d—–w- c:\documents and settings\all users\application data\Innovative Solutions 2012-02-17 07:03:38 47984 —-a-w- c:\windows\system32\AdvUninstCPL.cpl 2012-02-17 07:03:25 ——– d—–w- c:\program files\Innovative Solutions 2012-02-17 06:58:01 ——– d—–w- c:\program files\ATTNaturalVoices 2012-02-17 06:55:11 ——– d—–w- c:\program files\Microsoft Speech SDK 5.1 2012-02-17 05:21:36 491520 —-a-w- c:\windows\system32\NCTAudioFile.dll 2012-02-17 05:21:34 158208 —-a-w- c:\windows\system32\NCTTextToAudio.dll 2012-02-17 05:03:11 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\adnmaster 2012-02-16 07:38:36 ——– d—–w- c:\windows\ie8updates 2012-02-15 16:41:41 3072 -c—-w- c:\windows\system32\dllcache\iacenc.dll 2012-02-15 16:41:41 3072 ——w- c:\windows\system32\iacenc.dll 2012-02-13 03:51:17 610648 —-a-w- c:\windows\system32\drivers\aswSnx.sys 2012-02-13 03:50:50 41184 —-a-w- c:\windows\avastSS.scr 2012-02-13 03:50:37 ——– d—–w- c:\program files\AVAST Software 2012-02-13 02:28:05 ——– d—–w- c:\program files\Orca 2012-02-12 21:00:02 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\CX 2012-02-12 20:57:30 ——– d—–w- c:\documents and settings\default\local settings\application data\Deployment 2012-02-12 20:11:45 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\OpenCandy 2012-02-12 20:11:44 ——– d—–w- c:\program files\TweakMe! 2012-02-11 07:15:11 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\OpenArena 2012-02-09 20:46:37 ——– d—–w- c:\documents and settings\default\Aptana Rubles 2012-02-09 20:18:21 ——– d—–w- c:\program files\Aptana 2012-02-09 10:08:59 65552 –sh–w- c:\documents and settings\all users\application data\Desktop.lnk 2012-02-09 10:08:57 ——– d—–w- C:\PcwBak 2012-02-09 10:08:48 ——– d—–w- c:\program files\Power PC Washer 2012-02-09 09:35:57 ——– d—–w- c:\windows\RegInOut System Utilities 2012-02-09 03:24:18 244416 —-a-w- c:\windows\system32\Msflxgrd.ocx 2012-02-09 02:52:22 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\pchc 2012-02-08 05:17:05 ——– d—–w- c:\program files\Chami 2012-02-07 22:21:10 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\Avira 2012-02-07 19:40:14 147856 —-a-w- c:\program files\mozilla firefox\extensions\[removed]\components\kavlinkfilter.dll 2012-02-07 08:45:26 592824 —-a-w- c:\program files\mozilla firefox\gkmedias.dll 2012-02-07 08:45:26 43960 —-a-w- c:\program files\mozilla firefox\mozglue.dll 2012-02-07 08:31:28 ——– d—–w- c:\documents and settings\default\local settings\application data\ActiveState 2012-02-07 08:31:21 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\ActiveState 2012-02-07 06:32:10 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\kompozer.net 2012-02-07 06:32:10 ——– d—–w- c:\documents and settings\default\local settings\application data\kompozer.net 2012-02-07 06:27:35 ——– d—–w- j:\portableapps\dropboxportableahk\.dbfiles\profile\files\Disruptive Innovations SARL 2012-02-07 06:27:35 ——– d—–w- c:\documents and settings\default\local settings\application data\Disruptive Innovations SARL 2012-02-06 22:45:49 ——– d—–w- c:\documents and settings\all users\application data\Atheros 2012-02-06 22:41:59 1759584 —-a-w- c:\windows\system32\drivers\athuw.sys 2012-02-06 22:41:58 58208 —-a-w- c:\windows\system32\wsimd.sys 2012-02-06 22:41:58 57440 —-a-w- c:\windows\system32\jswscimd.sys 2012-02-06 22:41:58 57440 —-a-w- c:\windows\system32\drivers\jswscimd.sys 2012-02-06 22:41:55 73800 —-a-w- c:\windows\system32\athgina.dll 2012-02-06 22:41:55 405582 —-a-w- c:\windows\system32\jswscsup.dll 2012-02-06 22:41:55 262216 —-a-w- c:\windows\system32\IPTests.dll 2012-02-06 22:41:48 ——– d—–w- c:\program files\NETGEAR 2012-02-06 22:41:26 ——– d—–w- C:\temp 2012-02-02 10:44:12 ——– d—–w- c:\windows\Mozilla 2012-02-02 10:42:42 ——– d—–w- C:\Mozilla . ==================== Find3M ==================== . 2012-02-29 20:32:01 472808 —-a-w- c:\windows\system32\deployJava1.dll 2012-02-16 09:09:18 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-01-12 16:53:24 1859968 —-a-w- c:\windows\system32\win32k.sys 2011-12-17 19:46:36 916992 —-a-w- c:\windows\system32\wininet.dll 2011-12-17 19:46:36 43520 —-a-w- c:\windows\system32\licmgr10.dll 2011-12-17 19:46:36 1469440 —-a-w- c:\windows\system32\inetcpl.cpl 2011-12-16 12:22:58 385024 —-a-w- c:\windows\system32\html.iec 2011-12-10 21:24:06 20464 —-a-w- c:\windows\system32\drivers\mbam.sys 2011-12-05 22:43:50 428088 —-a-w- c:\windows\system32\drivers\sptd.sys . ============= FINISH: 19:46:56.06 ===============