Trojan.Zeroacess!kmem v31417.exe [Closed]

Please help


OTL logfile created on: 2/24/2012 4:03:06 PM - Run 1
OTL by OldTimer - Version 3.2.33.2 Folder = C:\Users\Lab One\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.05 Gb Available Physical Memory | 52.56% Memory free
4.00 Gb Paging File | 2.76 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 93.06 Gb Total Space | 11.65 Gb Free Space | 12.52% Space Free | Partition Type: NTFS
Drive D: | 496.24 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive J: | 1.83 Gb Total Space | 0.63 Gb Free Space | 34.45% Space Free | Partition Type: FAT

Computer Name: LABONE-PC | User Name: Lab One | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Windows\system\svchost.exe ()
PRC - C:\Users\Lab One\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\SRS Labs\SRS HD Audio Lab\HDAL.exe (SRS Labs, Inc.)
PRC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Flexera Software, Inc.)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\tv_w32.exe (TeamViewer GmbH)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Norton 360\Engine\6.0.1.2\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\SRS Labs\SRS HD Audio Lab Service\SRSAudioLabService.exe (SRS Labs, Inc.)
PRC - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (StarWind Software)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
PRC - C:\Windows\System32\lxddcoms.exe ( )


========== Modules (No Company Name) ==========

MOD - C:\Windows\System32\config\systemprofile\AppData\Roaming\Adobe\sp.DLL ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.WorkflowServ#\99f03be29e7f6de2f4bc278b83f0761b\System.WorkflowServices.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel#\0113a0162fe157bb4f0130a60bbcad1a\System.ServiceModel.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.IdentityModel\d939fca96c3645bb8806ea8ae43cc0ca\System.IdentityModel.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\bc96c5c6e644452270ff7c3d066ff713\System.Runtime.Serialization.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\SMDiagnostics\281b67b96a2dd473dad4d222da0ca514\SMDiagnostics.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceModel\b74950292d5681795d9d2c1a72a79952\System.ServiceModel.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\f01c5c76d0a19516a37b7bd191a02cda\System.Core.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\74fcc0f56435d0396f9524cd4293d3e5\PresentationFramework.Aero.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\42ae8760f0a74ab774e82a64368aa1f6\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\02f7846cbc5c02a5dbf50fd34325eb61\PresentationFramework.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6c51e152e7404188914c9fa4d8503ff9\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\ab87129c2b603f218e4aa5300c9b1bdd\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\f4b2424c1b32fbd11130482bb899b7ae\PresentationCore.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\47b9e7f070271ff50f988f75ea68fa3e\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll ()
MOD - C:\Users\Lab One\AppData\Roaming\Mozilla\Firefox\Profiles\koidg6v5.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCoreGecko9.dll ()
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll ()
MOD - \\?\globalroot\systemroot\system32\mswsock.DLL ()
MOD - \\.\globalroot\systemroot\system32\mswsock.dll ()
MOD - C:\Program Files\WIDCOMM\Bluetooth Software\BTKeyInd.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()


========== Win32 Services (SafeList) ==========

SRV - (Ntmssvc) – File not found
SRV - (DAZContentManagementService) – File not found
SRV - (SPService) – C:\Windows\System32\config\systemprofile\AppData\Roaming\Adobe\sp.DLL ()
SRV - (NecUsb3) – C:\Windows\System32\NCUSBw32.dll (Intel Corporation )
SRV - (FLEXnet Licensing Service) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Flexera Software, Inc.)
SRV - (TeamViewer7) – C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (N360) – C:\Program Files\Norton 360\Engine\6.0.1.2\ccSvcHst.exe (Symantec Corporation)
SRV - (WatAdminSvc) – C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (wampmysqld) – c:\wamp\bin\mysql\mysql5.5.8\bin\mysqld.exe ()
SRV - (wampapache) – c:\wamp\bin\apache\apache2.2.17\bin\httpd.exe (Apache Software Foundation)
SRV - (SRSHDAudioService) – C:\Program Files\Common Files\SRS Labs\SRS HD Audio Lab Service\SRSAudioLabService.exe (SRS Labs, Inc.)
SRV - (SwitchBoard) – C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (StarWindServiceAE) – C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (StarWind Software)
SRV - (btwdins) – C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) – C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (fcprintservice) – C:\Windows\System32\AtcL002.dll (Oak Technology Inc.)
SRV - (lxddCATSCustConnectService) – C:\Windows\System32\spool\DRIVERS\W32X86\3\\lxddserv.exe ()
SRV - (lxdd_device) – C:\Windows\System32\lxddcoms.exe ( )


========== Driver Services (SafeList) ==========

DRV - (SymEvent) – C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (NAVEX15) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.1.2\Definitions\VirusDefs\20120224.002\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.1.2\Definitions\VirusDefs\20120224.002\NAVENG.SYS (Symantec Corporation)
DRV - (IDSVix86) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.1.2\Definitions\IPSDefs\20120223.002\IDSvix86.sys (Symantec Corporation)
DRV - (FixZeroAccess) – C:\Windows\system32\drivers\FixZeroAccess.sys (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (BHDrvx86) – C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.1.2\Definitions\BASHDefs\20120215.001\BHDrvx86.sys (Symantec Corporation)
DRV - (SymEFA) – C:\Windows\system32\drivers\N360\0600010.002\SYMEFA.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\Windows\System32\Drivers\N360\0600010.002\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\Windows\system32\drivers\N360\0600010.002\SRTSPX.SYS (Symantec Corporation)
DRV - (SymNetS) – C:\Windows\System32\Drivers\N360\0600010.002\SYMNETS.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\Windows\system32\drivers\N360\0600010.002\Ironx86.SYS (Symantec Corporation)
DRV - (ccSet_N360) – C:\Windows\system32\drivers\N360\0600010.002\ccSetx86.sys (Symantec Corporation)
DRV - (sptd) – C:\Windows\System32\Drivers\sptd.sys ()
DRV - (SymDS) – C:\Windows\system32\drivers\N360\0600010.002\SYMDS.SYS (Symantec Corporation)
DRV - (psdrv3) – C:\Windows\System32\drivers\psdrv3.sys (Prime Sense Ltd.)
DRV - (AFD) – C:\Windows\system32\drivers\afd.sys ()
DRV - (teamviewervpn) – C:\Windows\System32\drivers\teamviewervpn.sys (TeamViewer GmbH)
DRV - (vmbus) – C:\Windows\system32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (storflt) – C:\Windows\system32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) – C:\Windows\system32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbFlt) – C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) – C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (WinUSB) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (VMBusHID) – C:\Windows\system32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) – C:\Windows\system32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (CSC) – C:\Windows\System32\drivers\csc.sys ()
DRV - (DfsC) – C:\Windows\System32\drivers\dfsc.sys ()
DRV - (NetBT) – C:\Windows\System32\drivers\netbt.sys ()
DRV - (tdx) – C:\Windows\System32\drivers\tdx.sys ()
DRV - (SRS_HDAL_Service) – C:\Windows\System32\drivers\SRS_HDAL_i386.sys ()
DRV - (Serial) – C:\Windows\system32\DRIVERS\serial.sys (Brother Industries Ltd.)
DRV - (nvlddmkm) – C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (MRVW147) Marvell TOPDOG ™ 802.11bgn Driver for Vista Native WIFI (CB8x/EC8x) – C:\Windows\System32\drivers\MRVW147.sys (Marvell Semiconductor, Inc)
DRV - (fanio) – C:\Windows\System32\drivers\fanio.sys (Christian Diefer)
DRV - (Hardlock) – C:\Windows\System32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.)
DRV - (b57w2k) – C:\Windows\System32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (STAC97) – C:\Windows\System32\drivers\STAC97.sys (SigmaTel, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=Z134&install;_date=20110908
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 59 7E AC 88 D9 68 CC 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http://www.google.com/
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.selectedEngine: "Amazon.com"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource;=2&q;="

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.1.2\IPSFFPlgn\ [2012/02/20 21:56:30 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.0.1.2\coFFPlgn\ [2012/02/24 15:58:42 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012/01/05 23:58:16 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/02/22 18:00:48 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2012/01/17 11:41:22 | 000,000,000 | —D | M] (No name found) – C:\Users\Lab One\AppData\Roaming\Mozilla\Extensions
[2012/01/26 10:47:05 | 000,000,000 | —D | M] (No name found) – C:\Users\Lab One\AppData\Roaming\Mozilla\Firefox\Profiles\koidg6v5.default\extensions
[2012/01/17 13:38:35 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\Lab One\AppData\Roaming\Mozilla\Firefox\Profiles\koidg6v5.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012/01/26 10:47:05 | 000,000,000 | —D | M] (uTorrentBar Community Toolbar) – C:\Users\Lab One\AppData\Roaming\Mozilla\Firefox\Profiles\koidg6v5.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2012/01/17 11:39:58 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2011/12/21 02:24:52 | 000,121,816 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/12/20 23:30:41 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011/08/30 14:41:02 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml.old
[2011/12/20 23:30:41 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Lab One\AppData\Local\Google\Chrome\Application\15.0.874.106\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Lab One\AppData\Local\Google\Chrome\Application\15.0.874.106\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Lab One\AppData\Local\Google\Chrome\Application\15.0.874.106\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Browser\nppdf32.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Lab One\AppData\Local\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Windows Activation Technologies (Enabled) = C:\Windows\system32\Wat\npWatWeb.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Lamborghini = C:\Users\Lab One\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiefegoncbfdemobfpaldfapbfiinmeo\1.0_0\

Hosts file not found
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\6.0.1.2\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\6.0.1.2\IPS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\6.0.1.2\CoIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\6.0.1.2\CoIEPlg.dll (Symantec Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [MozillaAgent] C:\Windows\Temp\_ex-68.exe File not found
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVHotkey] C:\Windows\System32\nvHotkey.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKCU..\Run: [AdobeBridge] File not found
O4 - HKCU..\Run: [SRSHDAudioLab] C:\Program Files\SRS Labs\SRS HD Audio Lab\HDAL.exe (SRS Labs, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Send image to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Send page to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O13 - gopher Prefix: missing
O16 - DPF: {5EA13312-8764-496F-B4AB-F7A872B51E14} http://cdn03.oovoo.com/oovoomelink/oovoome…vc/ooVooWeb.dll (ooVooWebCtrl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A29C36CD-8A1D-4E8D-A711-B4CEB19F6445}: DhcpNameServer = 192.168.1.1 [removed]
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/01/29 06:55:41 | 000,000,000 | —D | M] - C:\Autodesk – [ NTFS ]
O32 - AutoRun File - [2009/06/10 16:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck msln)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: Ntmssvc - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: fcprintservice - C:\Windows\System32\AtcL002.dll (Oak Technology Inc.)
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.ac3filter - C:\Windows\System32\ac3filter.acm ()
Drivers32: msacm.divxa32 - C:\Windows\System32\DivXa32.acm (Packed With Joy !)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lameacm - C:\Windows\System32\lameACM.acm (http://www.mp3dev.org/)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.ffds - C:\Windows\System32\ff_vfw.dll ()
Drivers32: vidc.lags - C:\Windows\System32\Lagarith.dll ( )
Drivers32: vidc.xvid - C:\Windows\System32\xvidvfw.dll ()

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/02/24 15:50:22 | 000,583,680 | —- | C] (OldTimer Tools) – C:\Users\Lab One\Desktop\OTL.exe
[2012/02/23 16:46:34 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAZ Productions
[2012/02/23 16:45:23 | 000,090,112 | —- | C] (MindVision Software) – C:\Windows\unvise32.exe
[2012/02/23 15:21:36 | 000,000,000 | —D | C] – C:\Users\Lab One\.designer
[2012/02/22 18:00:25 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2012/02/22 18:00:01 | 000,000,000 | —D | C] – C:\Program Files\QuickTime
[2012/02/21 04:34:53 | 000,000,000 | —D | C] – C:\Users\Lab One\Desktop\Digital-Tutors Maya
[2012/02/20 21:38:43 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
[2012/02/17 08:06:34 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Marvelous Designer 2
[2012/02/17 08:05:44 | 000,000,000 | —D | C] – C:\Program Files\Marvelous Designer 2
[2012/02/17 06:24:17 | 000,000,000 | —D | C] – C:\Program Files\InstallShield Installation Information
[2012/02/17 06:23:05 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pixologic
[2012/02/16 07:16:44 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Local\Apple Computer
[2012/02/16 07:16:22 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Roaming\Apple Computer
[2012/02/16 04:10:58 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/02/16 04:09:17 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2012/02/16 04:09:15 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2012/02/16 04:09:15 | 000,000,000 | —D | C] – C:\ProgramData\Apple Computer
[2012/02/16 04:09:15 | 000,000,000 | —D | C] – C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012/02/16 04:08:10 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Local\Apple
[2012/02/16 04:07:51 | 000,000,000 | —D | C] – C:\Program Files\Apple Software Update
[2012/02/16 04:02:01 | 000,000,000 | —D | C] – C:\Program Files\Bonjour
[2012/02/16 04:01:36 | 000,000,000 | —D | C] – C:\ProgramData\Apple
[2012/02/16 04:01:36 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Apple
[2012/02/16 03:32:30 | 002,343,424 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2012/02/12 14:59:42 | 000,156,672 | —- | C] (Intel Corporation ) – C:\Windows\System32\NCUSBw32.dll
[2012/02/11 14:31:10 | 000,000,000 | —D | C] – C:\Windows\Minidump
[2012/02/09 23:43:10 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Local\NPE
[2012/02/09 13:38:15 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Roaming\FixZeroAccess
[2012/02/09 13:38:14 | 000,032,808 | —- | C] (Symantec Corporation) – C:\Windows\System32\drivers\FixZeroAccess.sys
[2012/02/09 13:22:26 | 000,000,000 | —D | C] – C:\Program Files\DFX
[2012/02/09 08:48:27 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRS Labs
[2012/02/09 08:48:25 | 000,000,000 | —D | C] – C:\Program Files\SRS Labs
[2012/02/09 08:48:25 | 000,000,000 | —D | C] – C:\Program Files\Common Files\SRS Labs
[2012/01/29 21:15:08 | 000,000,000 | —D | C] – C:\3D
[2012/01/29 06:18:20 | 000,000,000 | —D | C] – C:\Users\Lab One\Documents\toxik
[2012/01/29 06:11:46 | 000,000,000 | —D | C] – C:\Users\Lab One\Documents\maya
[2012/01/29 01:26:54 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Alias Shared
[2012/01/29 00:58:16 | 000,000,000 | —D | C] – C:\ProgramData\App4rTemp
[2012/01/27 16:08:07 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Roaming\uTorrent
[2012/01/27 15:42:44 | 000,735,608 | —- | C] (BitTorrent, Inc.) – C:\Users\Lab One\Desktop\utorrent.exe
[2012/01/26 10:47:02 | 000,000,000 | —D | C] – C:\Program Files\Conduit
[2012/01/26 10:46:55 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Local\Conduit
[2012/01/26 10:37:42 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Local\backburner
[2012/01/26 10:26:51 | 000,000,000 | —D | C] – C:\Program Files\Maya
[2012/01/25 23:13:59 | 000,000,000 | —D | C] – C:\Program Files\DAZ
[2012/01/25 22:49:51 | 000,314,880 | —- | C] (Microsoft Corporation) – C:\Windows\System32\webio.dll
[2012/01/25 22:49:51 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\Windows\System32\sspisrv.dll
[2012/01/25 19:38:51 | 000,000,000 | —D | C] – C:\Program Files\Pixologic
[2012/01/25 19:37:21 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Local\Downloaded Installations
[2012/01/25 18:59:08 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DAZ
[2012/01/25 18:54:33 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DAZ 3D
[2012/01/25 18:46:56 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAZ 3D
[2012/01/25 18:46:56 | 000,000,000 | —D | C] – C:\ProgramData\DAZ 3D
[2012/01/25 18:46:20 | 000,000,000 | —D | C] – C:\Users\Lab One\Documents\DAZ 3D
[2012/01/25 18:45:28 | 000,000,000 | —D | C] – C:\Program Files\DAZ 3D
[2012/01/25 18:44:50 | 000,000,000 | —D | C] – C:\Users\Lab One\AppData\Roaming\DAZ 3D
[2012/01/25 18:04:31 | 001,846,632 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_41.dll
[2012/01/25 18:04:31 | 000,453,456 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_41.dll
[2012/01/25 18:04:30 | 004,178,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DX9_41.dll
[2012/01/25 18:04:28 | 002,036,576 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_40.dll
[2012/01/25 18:04:28 | 000,452,440 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_40.dll
[2012/01/25 18:04:27 | 004,379,984 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DX9_40.dll
[2012/01/25 18:04:26 | 000,509,448 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAudio2_2.dll
[2012/01/25 18:04:26 | 000,238,088 | —- | C] (Microsoft Corporation) – C:\Windows\System32\xactengine3_2.dll
[2012/01/25 18:04:26 | 000,068,616 | —- | C] (Microsoft Corporation) – C:\Windows\System32\XAPOFX1_1.dll
[2012/01/25 18:04:16 | 001,124,720 | —- | C] (Microsoft Corporation) – C:\Windows\System32\D3DCompiler_34.dll
[2012/01/25 18:04:16 | 000,443,752 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10_34.dll
[2012/01/25 18:04:14 | 003,497,832 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_34.dll
[2012/01/25 18:04:13 | 000,440,080 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx10.dll
[2012/01/25 18:04:11 | 003,426,072 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_32.dll
[2012/01/25 18:04:10 | 002,414,360 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3dx9_31.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/02/24 16:03:37 | 000,022,912 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/02/24 16:03:37 | 000,022,912 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/02/24 16:01:57 | 000,007,680 | —- | M] () – C:\Windows\System\svchost.exe
[2012/02/24 15:58:06 | 008,405,015 | —- | M] () – C:\Windows\TempFile
[2012/02/24 15:58:05 | 000,000,350 | —- | M] () – C:\Windows\tasks\At8.job
[2012/02/24 15:58:05 | 000,000,350 | —- | M] () – C:\Windows\tasks\At6.job
[2012/02/24 15:58:05 | 000,000,350 | —- | M] () – C:\Windows\tasks\At48.job
[2012/02/24 15:58:05 | 000,000,348 | —- | M] () – C:\Windows\tasks\At9.job
[2012/02/24 15:58:05 | 000,000,348 | —- | M] () – C:\Windows\tasks\At7.job
[2012/02/24 15:58:05 | 000,000,348 | —- | M] () – C:\Windows\tasks\At5.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At46.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At44.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At42.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At40.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At4.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At38.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At36.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At34.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At30.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At28.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At26.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At24.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At22.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At20.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At2.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At18.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At16.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At14.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At12.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\tasks\At10.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At47.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At45.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At43.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At41.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At39.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At37.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At35.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At33.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At31.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At3.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At29.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At27.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At25.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At23.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At21.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At19.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At17.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At15.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At13.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At11.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\tasks\At1.job
[2012/02/24 15:57:47 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/02/24 15:57:41 | 1610,194,944 | -HS- | M] () – C:\hiberfil.sys
[2012/02/24 15:56:04 | 000,000,112 | —- | M] () – C:\ProgramData\pjOG6s2s.dat
[2012/02/24 15:50:35 | 000,583,680 | —- | M] (OldTimer Tools) – C:\Users\Lab One\Desktop\OTL.exe
[2012/02/24 15:50:00 | 000,000,350 | —- | M] () – C:\Windows\tasks\At32.job
[2012/02/24 15:22:52 | 000,028,160 | —- | M] () – C:\Windows\System32\1pfT3T2.com
[2012/02/24 15:12:17 | 000,000,000 | -HS- | M] () – C:\Windows\System32\dds_trash_log.cmd
[2012/02/23 16:43:51 | 000,001,021 | —- | M] () – C:\Users\Public\Desktop\Update Victoria 4.2 Base.lnk
[2012/02/23 15:14:33 | 000,615,360 | —- | M] () – C:\Windows\System32\perfh009.dat
[2012/02/23 15:14:33 | 000,103,702 | —- | M] () – C:\Windows\System32\perfc009.dat
[2012/02/23 15:10:44 | 000,000,175 | —- | M] () – C:\Users\Public\Desktop\Get 3D Models.url
[2012/02/23 10:55:25 | 000,000,652 | —- | M] () – C:\Users\Lab One\Desktop\DAZ Studio 4.lnk
[2012/02/23 10:55:25 | 000,000,161 | —- | M] () – C:\Users\Lab One\Desktop\Get 3D Models.url
[2012/02/21 02:11:08 | 000,156,672 | —- | M] (Intel Corporation ) – C:\Windows\System32\NCUSBw32.dll
[2012/02/20 22:03:30 | 000,004,782 | —- | M] () – C:\Windows\System32\drivers\N360\0600010.002\VT20111023.022
[2012/02/20 21:58:14 | 000,001,291 | —- | M] () – C:\Users\Lab One\Desktop\Norton Installation Files.lnk
[2012/02/20 21:54:51 | 000,002,221 | —- | M] () – C:\Users\Public\Desktop\Norton 360.lnk
[2012/02/20 21:54:10 | 001,203,547 | —- | M] () – C:\Windows\System32\drivers\N360\0600010.002\Cat.DB
[2012/02/20 21:42:46 | 000,141,944 | —- | M] (Symantec Corporation) – C:\Windows\System32\drivers\SYMEVENT.SYS
[2012/02/20 21:42:46 | 000,007,468 | —- | M] () – C:\Windows\System32\drivers\SYMEVENT.CAT
[2012/02/20 21:42:46 | 000,000,806 | —- | M] () – C:\Windows\System32\drivers\SYMEVENT.INF
[2012/02/17 08:21:14 | 000,001,090 | —- | M] () – C:\Users\Public\Desktop\MarvelousDesigner2.lnk
[2012/02/17 06:23:13 | 000,002,043 | —- | M] () – C:\Users\Public\Desktop\ZBrush 4R2.lnk
[2012/02/16 06:27:17 | 003,845,216 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2012/02/10 04:51:27 | 000,003,138 | —- | M] () – C:\Users\Lab One\AppData\Roaming\SMRResults250.dat
[2012/02/10 04:47:38 | 000,001,401 | —- | M] () – C:\Windows\System32\drivers\etc\hosts.bak
[2012/02/09 14:14:11 | 000,103,733 | —- | M] () – C:\Windows\System32\itusbcore.dat
[2012/02/09 14:14:11 | 000,000,196 | —- | M] () – C:\Windows\System32\itlsvc.dat
[2012/02/09 13:43:13 | 000,000,382 | RHS- | M] () – C:\ProgramData\ntuser.pol
[2012/02/09 13:38:14 | 000,032,808 | —- | M] (Symantec Corporation) – C:\Windows\System32\drivers\FixZeroAccess.sys
[2012/02/07 02:37:07 | 000,000,172 | —- | M] () – C:\Windows\System32\drivers\N360\0600010.002\isolate.ini
[2012/01/29 01:19:55 | 000,001,116 | —- | M] () – C:\Users\Lab One\Application Data\Microsoft\Internet Explorer\Quick Launch\Autodesk Maya 2011.lnk
[2012/01/29 01:19:54 | 000,001,092 | —- | M] () – C:\Users\Public\Desktop\Autodesk Maya 2011.lnk
[2012/01/29 01:04:50 | 000,007,623 | —- | M] () – C:\Users\Lab One\AppData\Local\Resmon.ResmonCfg
[2012/01/27 16:09:05 | 000,000,933 | —- | M] () – C:\Users\Lab One\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2012/01/27 15:42:46 | 000,735,608 | —- | M] (BitTorrent, Inc.) – C:\Users\Lab One\Desktop\utorrent.exe
[2012/01/27 06:26:07 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/01/27 06:26:07 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2012/01/27 03:04:44 | 003,768,991 | —- | M] () – C:\Users\Lab One\Documents\HTBASE1.DWG
[2012/01/25 18:48:34 | 000,003,264 | —- | M] () – C:\{7068CA1C-7CDA-4021-8BA2-3105FD471735}
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/02/24 15:26:05 | 000,000,112 | —- | C] () – C:\ProgramData\pjOG6s2s.dat
[2012/02/24 15:26:00 | 000,000,350 | —- | C] () – C:\Windows\tasks\At48.job
[2012/02/24 15:25:58 | 000,000,348 | —- | C] () – C:\Windows\tasks\At47.job
[2012/02/24 15:25:56 | 000,000,350 | —- | C] () – C:\Windows\tasks\At46.job
[2012/02/24 15:25:53 | 000,000,348 | —- | C] () – C:\Windows\tasks\At45.job
[2012/02/24 15:25:51 | 000,000,350 | —- | C] () – C:\Windows\tasks\At44.job
[2012/02/24 15:25:48 | 000,000,348 | —- | C] () – C:\Windows\tasks\At43.job
[2012/02/24 15:25:42 | 000,000,350 | —- | C] () – C:\Windows\tasks\At42.job
[2012/02/24 15:25:40 | 000,000,348 | —- | C] () – C:\Windows\tasks\At41.job
[2012/02/24 15:25:38 | 000,000,350 | —- | C] () – C:\Windows\tasks\At40.job
[2012/02/24 15:25:35 | 000,000,348 | —- | C] () – C:\Windows\tasks\At39.job
[2012/02/24 15:25:33 | 000,000,350 | —- | C] () – C:\Windows\tasks\At38.job
[2012/02/24 15:25:31 | 000,000,348 | —- | C] () – C:\Windows\tasks\At37.job
[2012/02/24 15:25:28 | 000,000,350 | —- | C] () – C:\Windows\tasks\At36.job
[2012/02/24 15:25:26 | 000,000,348 | —- | C] () – C:\Windows\tasks\At35.job
[2012/02/24 15:25:23 | 000,000,350 | —- | C] () – C:\Windows\tasks\At34.job
[2012/02/24 15:25:21 | 000,000,348 | —- | C] () – C:\Windows\tasks\At33.job
[2012/02/24 15:25:17 | 000,000,350 | —- | C] () – C:\Windows\tasks\At32.job
[2012/02/24 15:25:14 | 000,000,348 | —- | C] () – C:\Windows\tasks\At31.job
[2012/02/24 15:25:11 | 000,000,350 | —- | C] () – C:\Windows\tasks\At30.job
[2012/02/24 15:25:08 | 000,000,348 | —- | C] () – C:\Windows\tasks\At29.job
[2012/02/24 15:25:04 | 000,000,350 | —- | C] () – C:\Windows\tasks\At28.job
[2012/02/24 15:25:02 | 000,000,348 | —- | C] () – C:\Windows\tasks\At27.job
[2012/02/24 15:24:59 | 000,000,350 | —- | C] () – C:\Windows\tasks\At26.job
[2012/02/24 15:24:57 | 000,000,348 | —- | C] () – C:\Windows\tasks\At25.job
[2012/02/24 15:24:54 | 000,000,350 | —- | C] () – C:\Windows\tasks\At24.job
[2012/02/24 15:24:52 | 000,000,348 | —- | C] () – C:\Windows\tasks\At23.job
[2012/02/24 15:24:49 | 000,000,350 | —- | C] () – C:\Windows\tasks\At22.job
[2012/02/24 15:24:47 | 000,000,348 | —- | C] () – C:\Windows\tasks\At21.job
[2012/02/24 15:24:44 | 000,000,350 | —- | C] () – C:\Windows\tasks\At20.job
[2012/02/24 15:24:42 | 000,000,348 | —- | C] () – C:\Windows\tasks\At19.job
[2012/02/24 15:24:39 | 000,000,350 | —- | C] () – C:\Windows\tasks\At18.job
[2012/02/24 15:24:37 | 000,000,348 | —- | C] () – C:\Windows\tasks\At17.job
[2012/02/24 15:24:34 | 000,000,350 | —- | C] () – C:\Windows\tasks\At16.job
[2012/02/24 15:24:32 | 000,000,348 | —- | C] () – C:\Windows\tasks\At15.job
[2012/02/24 15:24:30 | 000,000,350 | —- | C] () – C:\Windows\tasks\At14.job
[2012/02/24 15:24:28 | 000,000,348 | —- | C] () – C:\Windows\tasks\At13.job
[2012/02/24 15:24:24 | 000,000,350 | —- | C] () – C:\Windows\tasks\At12.job
[2012/02/24 15:24:22 | 000,000,348 | —- | C] () – C:\Windows\tasks\At11.job
[2012/02/24 15:24:20 | 000,000,350 | —- | C] () – C:\Windows\tasks\At10.job
[2012/02/24 15:24:16 | 000,000,348 | —- | C] () – C:\Windows\tasks\At9.job
[2012/02/24 15:24:08 | 000,000,350 | —- | C] () – C:\Windows\tasks\At8.job
[2012/02/24 15:24:05 | 000,000,348 | —- | C] () – C:\Windows\tasks\At7.job
[2012/02/24 15:24:03 | 000,000,350 | —- | C] () – C:\Windows\tasks\At6.job
[2012/02/24 15:24:00 | 000,000,348 | —- | C] () – C:\Windows\tasks\At5.job
[2012/02/24 15:23:58 | 000,000,350 | —- | C] () – C:\Windows\tasks\At4.job
[2012/02/24 15:23:56 | 000,000,348 | —- | C] () – C:\Windows\tasks\At3.job
[2012/02/24 15:23:54 | 000,000,350 | —- | C] () – C:\Windows\tasks\At2.job
[2012/02/24 15:23:46 | 000,028,160 | —- | C] () – C:\Windows\System32\1pfT3T2.com
[2012/02/24 15:23:46 | 000,000,348 | —- | C] () – C:\Windows\tasks\At1.job
[2012/02/23 16:43:50 | 000,001,021 | —- | C] () – C:\Users\Public\Desktop\Update Victoria 4.2 Base.lnk
[2012/02/23 16:38:02 | 000,681,257 | —- | C] () – C:\Users\Lab One\Desktop\PC_DS_Victoria_4_2_Update.exe
[2012/02/23 15:10:44 | 000,000,175 | —- | C] () – C:\Users\Public\Desktop\Get 3D Models.url
[2012/02/23 10:55:25 | 000,000,652 | —- | C] () – C:\Users\Lab One\Desktop\DAZ Studio 4.lnk
[2012/02/23 10:55:25 | 000,000,161 | —- | C] () – C:\Users\Lab One\Desktop\Get 3D Models.url
[2012/02/20 21:38:43 | 000,001,291 | —- | C] () – C:\Users\Lab One\Desktop\Norton Installation Files.lnk
[2012/02/17 08:06:35 | 000,001,090 | —- | C] () – C:\Users\Public\Desktop\MarvelousDesigner2.lnk
[2012/02/17 06:23:08 | 000,002,043 | —- | C] () – C:\Users\Public\Desktop\ZBrush 4R2.lnk
[2012/02/16 04:07:52 | 000,002,519 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2012/02/10 04:51:07 | 000,003,138 | —- | C] () – C:\Users\Lab One\AppData\Roaming\SMRResults250.dat
[2012/02/09 14:14:11 | 000,103,733 | —- | C] () – C:\Windows\System32\itusbcore.dat
[2012/02/09 14:14:11 | 000,007,680 | —- | C] () – C:\Windows\System\svchost.exe
[2012/02/09 14:14:11 | 000,000,196 | —- | C] () – C:\Windows\System32\itlsvc.dat
[2012/02/09 13:32:56 | 000,000,000 | -HS- | C] () – C:\Windows\System32\dds_trash_log.cmd
[2012/02/09 08:48:52 | 000,384,752 | —- | C] () – C:\Windows\System32\drivers\SRS_HDAL_i386.sys
[2012/02/01 22:54:26 | 000,002,221 | —- | C] () – C:\Users\Public\Desktop\Norton 360.lnk
[2012/01/29 01:19:55 | 000,001,116 | —- | C] () – C:\Users\Lab One\Application Data\Microsoft\Internet Explorer\Quick Launch\Autodesk Maya 2011.lnk
[2012/01/29 01:19:53 | 000,001,092 | —- | C] () – C:\Users\Public\Desktop\Autodesk Maya 2011.lnk
[2012/01/29 01:04:50 | 000,007,623 | —- | C] () – C:\Users\Lab One\AppData\Local\Resmon.ResmonCfg
[2012/01/27 16:09:05 | 000,000,933 | —- | C] () – C:\Users\Lab One\Application Data\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
[2012/01/27 06:26:07 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2012/01/27 06:26:07 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2012/01/25 18:48:34 | 000,003,264 | —- | C] () – C:\{7068CA1C-7CDA-4021-8BA2-3105FD471735}
[2012/01/23 00:15:15 | 000,348,160 | —- | C] () – C:\Windows\System32\PerforceConnector.dll
[2012/01/23 00:15:15 | 000,008,192 | —- | C] () – C:\Windows\System32\AlienbrainConnector.dll
[2012/01/23 00:15:14 | 001,224,704 | —- | C] () – C:\Windows\System32\NxN_alienbrain_Library_128.dll
[2012/01/23 00:15:14 | 000,221,184 | —- | C] () – C:\Windows\System32\NxN_alienbrain_EEM.dll
[2012/01/23 00:15:14 | 000,090,112 | —- | C] () – C:\Windows\System32\NxN_alienbrain_WIF_128.dll
[2012/01/23 00:15:06 | 000,860,211 | —- | C] () – C:\Windows\System32\XSIFtk-3.6.2.1.dll
[2012/01/09 15:00:48 | 004,346,880 | —- | C] () – C:\Windows\System32\ffmpeg.dll
[2012/01/09 07:25:42 | 000,413,696 | —- | C] ( ) – C:\Windows\System32\lxddinpa.dll
[2012/01/09 07:25:42 | 000,397,312 | —- | C] ( ) – C:\Windows\System32\lxddiesc.dll
[2012/01/09 07:25:42 | 000,323,584 | —- | C] ( ) – C:\Windows\System32\LXDDhcp.dll
[2012/01/09 07:25:42 | 000,286,720 | —- | C] () – C:\Windows\System32\LXDDinst.dll
[2012/01/09 07:25:41 | 001,232,896 | —- | C] ( ) – C:\Windows\System32\lxddserv.dll
[2012/01/09 07:25:41 | 000,999,424 | —- | C] ( ) – C:\Windows\System32\lxddusb1.dll
[2012/01/09 07:25:41 | 000,700,416 | —- | C] ( ) – C:\Windows\System32\lxddhbn3.dll
[2012/01/09 07:25:41 | 000,684,032 | —- | C] ( ) – C:\Windows\System32\lxddcomc.dll
[2012/01/09 07:25:41 | 000,643,072 | —- | C] ( ) – C:\Windows\System32\lxddpmui.dll
[2012/01/09 07:25:41 | 000,585,728 | —- | C] ( ) – C:\Windows\System32\lxddlmpm.dll
[2012/01/09 07:25:41 | 000,537,520 | —- | C] ( ) – C:\Windows\System32\lxddcoms.exe
[2012/01/09 07:25:41 | 000,425,984 | —- | C] ( ) – C:\Windows\System32\lxddcomm.dll
[2012/01/09 07:25:41 | 000,394,160 | —- | C] ( ) – C:\Windows\System32\lxddcfg.exe
[2012/01/09 07:25:41 | 000,385,968 | —- | C] ( ) – C:\Windows\System32\lxddih.exe
[2012/01/09 07:25:41 | 000,208,896 | —- | C] () – C:\Windows\System32\lxddgrd.dll
[2012/01/09 07:25:41 | 000,163,840 | —- | C] ( ) – C:\Windows\System32\lxddprox.dll
[2012/01/09 07:25:41 | 000,094,208 | —- | C] ( ) – C:\Windows\System32\lxddpplc.dll
[2012/01/07 17:22:00 | 000,172,032 | —- | C] () – C:\Windows\System32\libbluray.dll
[2012/01/07 17:21:50 | 006,366,094 | —- | C] () – C:\Windows\System32\avcodec-lav-53.dll
[2012/01/07 17:21:50 | 001,007,151 | —- | C] () – C:\Windows\System32\avformat-lav-53.dll
[2012/01/07 17:21:50 | 000,354,979 | —- | C] () – C:\Windows\System32\swscale-lav-2.dll
[2012/01/07 17:21:50 | 000,203,306 | —- | C] () – C:\Windows\System32\avutil-lav-51.dll
[2012/01/07 17:21:50 | 000,138,727 | —- | C] () – C:\Windows\System32\avfilter-lav-2.dll
[2012/01/05 23:11:09 | 000,074,752 | —- | C] () – C:\Windows\System32\CLEyeDevices.dll
[2012/01/05 16:29:38 | 000,000,382 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2012/01/02 12:47:58 | 000,000,272 | —- | C] () – C:\Users\Lab One\AppData\Roaming\.backup.dm
[2011/12/20 13:50:04 | 000,079,360 | —- | C] () – C:\Windows\System32\ff_vfw.dll
[2011/12/20 13:49:56 | 000,099,328 | —- | C] () – C:\Windows\System32\ff_wmv9.dll
[2011/12/20 13:49:54 | 000,158,720 | —- | C] () – C:\Windows\System32\ff_unrar.dll
[2011/12/20 13:49:54 | 000,146,944 | —- | C] () – C:\Windows\System32\ff_libmad.dll
[2011/12/20 13:49:52 | 001,525,248 | —- | C] () – C:\Windows\System32\ff_samplerate.dll
[2011/12/20 13:49:52 | 000,212,480 | —- | C] () – C:\Windows\System32\ff_libdts.dll
[2011/12/20 13:49:52 | 000,115,200 | —- | C] () – C:\Windows\System32\ff_liba52.dll
[2011/12/20 13:49:50 | 000,328,704 | —- | C] () – C:\Windows\System32\ff_libfaad2.dll
[2011/12/20 13:49:50 | 000,260,608 | —- | C] () – C:\Windows\System32\TomsMoComp_ff.dll
[2011/12/20 13:49:50 | 000,137,728 | —- | C] () – C:\Windows\System32\libmpeg2_ff.dll
[2011/12/19 23:44:07 | 000,001,940 | —- | C] () – C:\Users\Lab One\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2011/12/07 14:32:24 | 000,216,064 | —- | C] ( ) – C:\Windows\System32\Lagarith.dll
[2011/12/02 16:13:24 | 000,003,584 | —- | C] () – C:\Users\Lab One\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/09/08 09:00:52 | 000,150,528 | —- | C] () – C:\Windows\System32\mkx.dll
[2011/09/08 09:00:48 | 000,142,336 | —- | C] () – C:\Windows\System32\mp4.dll
[2011/09/08 09:00:42 | 000,123,392 | —- | C] () – C:\Windows\System32\ogm.dll
[2011/09/08 09:00:38 | 000,249,856 | —- | C] () – C:\Windows\System32\dxr.dll
[2011/09/08 09:00:34 | 000,113,152 | —- | C] () – C:\Windows\System32\dsmux.exe
[2011/09/08 09:00:24 | 000,154,624 | —- | C] () – C:\Windows\System32\ts.dll
[2011/09/08 09:00:10 | 000,137,728 | —- | C] () – C:\Windows\System32\mkv2vfr.exe
[2011/09/08 09:00:06 | 000,358,400 | —- | C] () – C:\Windows\System32\gdsmux.exe
[2011/09/08 08:59:54 | 000,080,384 | —- | C] () – C:\Windows\System32\mkzlib.dll
[2011/09/08 08:59:52 | 000,024,576 | —- | C] () – C:\Windows\System32\mkunicode.dll
[2011/09/02 04:11:04 | 000,080,896 | —- | C] () – C:\Windows\System32\RDVGHelper.exe
[2011/09/02 04:10:28 | 000,388,096 | —- | C] () – C:\Windows\System32\drivers\csc.sys
[2011/09/02 04:10:05 | 000,187,904 | —- | C] () – C:\Windows\System32\drivers\netbt.sys
[2011/09/02 04:09:50 | 000,074,752 | —- | C] () – C:\Windows\System32\drivers\tdx.sys
[2011/09/02 04:09:40 | 000,066,048 | —- | C] () – C:\Windows\System32\PrintBrmUi.exe
[2011/09/02 04:09:37 | 000,078,336 | —- | C] () – C:\Windows\System32\drivers\dfsc.sys
[2011/09/01 14:07:43 | 000,338,944 | —- | C] () – C:\Windows\System32\drivers\afd.sys
[2011/09/01 14:04:06 | 000,049,156 | —- | C] () – C:\Windows\System32\certstore.dat
[2011/08/29 18:15:16 | 000,011,383 | —- | C] () – C:\Windows\System32\nvModes.dat
[2011/08/29 08:01:18 | 000,192,512 | —- | C] () – C:\Windows\System32\stac97co.dll
[2011/05/30 08:42:50 | 000,240,640 | —- | C] () – C:\Windows\System32\xvidvfw.dll
[2011/05/23 02:46:30 | 000,645,632 | —- | C] () – C:\Windows\System32\xvidcore.dll
[2011/03/03 06:39:56 | 000,109,568 | —- | C] () – C:\Windows\System32\avi.dll
[2011/03/03 06:38:10 | 000,097,792 | —- | C] () – C:\Windows\System32\avs.dll
[2011/03/03 06:37:50 | 000,093,184 | —- | C] () – C:\Windows\System32\avss.dll
[2010/08/18 14:56:38 | 000,000,151 | —- | C] () – C:\Windows\System32\Registration.ini

========== LOP Check ==========

[2012/01/29 06:14:47 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\Autodesk
[2011/10/26 01:05:51 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2012/01/25 23:25:45 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\DAZ 3D
[2012/02/09 08:21:39 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\Dropbox
[2012/02/09 13:38:15 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\FixZeroAccess
[2012/01/09 10:39:22 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\Lexmark Productivity Studio
[2011/09/02 19:17:45 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\ooVoo Details
[2011/09/14 02:04:15 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/09/25 20:26:52 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\TeamViewer
[2012/01/17 08:48:53 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\Tific
[2012/02/22 23:02:18 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\uTorrent
[2012/01/03 15:07:32 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\Xilisoft
[2011/09/08 11:07:59 | 000,000,000 | —D | M] – C:\Users\Lab One\AppData\Roaming\Xilisoft Corporation
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At1.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At10.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At11.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At12.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At13.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At14.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At15.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At16.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At17.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At18.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At19.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At2.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At20.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At21.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At22.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At23.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At24.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At25.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At26.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At27.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At28.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At29.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At3.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At30.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At31.job
[2012/02/24 15:50:00 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At32.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At33.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At34.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At35.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At36.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At37.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At38.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At39.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At4.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At40.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At41.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At42.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At43.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At44.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At45.job
[2012/02/24 15:58:04 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At46.job
[2012/02/24 15:58:04 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At47.job
[2012/02/24 15:58:05 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At48.job
[2012/02/24 15:58:05 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At5.job
[2012/02/24 15:58:05 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At6.job
[2012/02/24 15:58:05 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At7.job
[2012/02/24 15:58:05 | 000,000,350 | —- | M] () – C:\Windows\Tasks\At8.job
[2012/02/24 15:58:05 | 000,000,348 | —- | M] () – C:\Windows\Tasks\At9.job
[2012/02/09 13:42:32 | 000,032,586 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========


< >

< %SYSTEMDRIVE%\*.* >
[2009/06/10 16:42:20 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/06/10 16:42:20 | 000,000,010 | —- | M] () – C:\config.sys
[2012/02/24 15:57:41 | 1610,194,944 | -HS- | M] () – C:\hiberfil.sys
[2012/01/27 06:26:07 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2012/01/27 06:26:07 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/02/24 15:57:39 | 2146,926,592 | -HS- | M] () – C:\pagefile.sys
[2012/01/17 00:07:59 | 000,000,448 | —- | M] () – C:\user.js
[2012/01/22 23:56:00 | 000,003,288 | —- | M] () – C:\{52527DB1-CEC8-47BC-8D1A-5B027F5ACAA2}
[2012/01/05 23:48:37 | 000,003,032 | —- | M] () – C:\{68EC793B-AFF8-45EF-913A-CA97E955AFB8}
[2012/01/25 18:48:34 | 000,003,264 | —- | M] () – C:\{7068CA1C-7CDA-4021-8BA2-3105FD471735}
[2012/01/05 23:47:15 | 000,003,312 | —- | M] () – C:\{C292929A-9758-4C2C-99F0-01EA4C6D1FB1}

< %systemroot%\Fonts\*.com >
[2009/07/13 23:52:25 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/13 23:52:25 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/13 23:52:25 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2009/07/13 23:52:25 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/10 16:31:19 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/07/13 20:15:35 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
[2007/02/27 05:16:26 | 000,103,936 | —- | M] () – C:\Windows\system32\spool\prtprocs\w32x86\lxdddrpp.dll
[2006/10/26 18:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll
[2010/11/20 07:21:36 | 000,030,208 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\winprint.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/13 23:41:57 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/09/01 14:00:59 | 000,000,221 | -HS- | M] () – C:\Users\Lab One\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2012/02/24 15:50:35 | 000,583,680 | —- | M] (OldTimer Tools) – C:\Users\Lab One\Desktop\OTL.exe
[2012/01/23 01:30:46 | 000,681,257 | —- | M] () – C:\Users\Lab One\Desktop\PC_DS_Victoria_4_2_Update.exe
[2012/01/27 15:42:46 | 000,735,608 | —- | M] (BitTorrent, Inc.) – C:\Users\Lab One\Desktop\utorrent.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-02-16 08:36:38

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\Windows\$NtUninstallKB41511$] -> Error: Cannot create file handle -> Unknown point type

< End of report >

EXTRAS

OTL Extras logfile created on: 2/24/2012 4:03:06 PM - Run 1
OTL by OldTimer - Version 3.2.33.2 Folder = C:\Users\Lab One\Desktop
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.05 Gb Available Physical Memory | 52.56% Memory free
4.00 Gb Paging File | 2.76 Gb Available in Paging File | 69.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 93.06 Gb Total Space | 11.65 Gb Free Space | 12.52% Space Free | Partition Type: NTFS
Drive D: | 496.24 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive J: | 1.83 Gb Total Space | 0.63 Gb Free Space | 34.45% Space Free | Partition Type: FAT

Computer Name: LABONE-PC | User Name: Lab One | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] – Reg Error: Key error. File not found

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [open] – Reg Error: Key error.
htmlfile [opennew] – Reg Error: Key error.
http [open] – "C:\Program Files\Internet Explorer\iexplore.exe" -nohome
https [open] – "C:\Program Files\Internet Explorer\iexplore.exe" -nohome
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] – C:\Program Files\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – Reg Error: Key error.

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20B6BE33-525B-4EF9-9628-E1BA58093A4C}" = ZBrush 4R2
"{2B5940F3-2232-4B0D-BCF1-8662B8BC22C4}" = PrimeSense - NITE [removed] for Windows
"{343666E2-A059-48AC-AD67-230BF74E2DB2}" = Apple Application Support
"{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3ACE1AF8-9172-43F1-A89D-D5423E9ACFB2}" = Autodesk MotionBuilder 2012 32-bit
"{3C7A758F-E865-4748-B6C3-72B0F45BD7D5}" = Autodesk DirectConnect 2012 32-bit
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2012.1.0
"{42EFDBE2-3F87-45C2-A609-9E0A9A713E20}" = OpenNI 1.4.0.2 for Windows
"{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit
"{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets
"{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4E33D05D-76CF-5D3C-4D5D-7727530FA161}" = Adobe Content Viewer
"{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{5783F2D7-9004-0409-0002-0060B0CE6BBA}" = AutoCAD Architecture 2011 - English
"{5783F2D7-9004-0409-1002-0060B0CE6BBA}" = AutoCAD Architecture 2011 Language Pack - English
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{6406E3EA-9777-45B7-A0C0-89741E629352}" = Composite 2011
"{66381CF5-ECBB-4CB7-A7AF-C9767E4FDF24}" = Scratch Live 1.9.0 (19035)
"{67183F00-3DDC-497B-A090-4E2B79EAF1CD}" = Photo Viewer
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{6E9EF98E-259E-416D-B5F8-0ABDB99942CE}" = Adobe Flash Player 10 ActiveX
"{702EC1FF-A081-48AE-8363-8D78A0919F86}" = Autodesk DirectConnect 2010 R1
"{71B6C9B6-CDF1-516E-EDBD-F3F8EBF7A0C7}" = Adobe Support Advisor
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{8A864555-554E-4DE2-BB36-BC4810355525}" = Autodesk MatchMover 2011 32-bit
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{975951E7-14D0-49AF-A630-89680D12D7F6}" = Autodesk Material Library 2011 Medium Image library
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011
"{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}" = WIDCOMM Bluetooth Software
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{AC075837-7071-4c07-B9A1-CF5586060FE1}" = Autodesk Maya 2011 English Documentation 32-bit
"{AC76BA86-1033-F400-7760-000000000005}" = Adobe Acrobat X Pro - English, Français, Deutsch
"{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4
"{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4
"{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BC41C09D-FAA9-4346-9FE6-1E0017BC551A}" = Adobe Flash Player 10 Plugin
"{BDE646E8-86E0-50E1-37BC-0AEBB2185D76}" = Adobe Widget Browser
"{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
"{BFE4A2B6-4894-436C-8847-70FF3F18D892}" = NVIDIA PhysX Plug-in for Autodesk Maya 2012 32 bit
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B}" = Acrobat.com
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CD1E078C-A6B9-47DA-B035-6365C85C7832}" = Autodesk Material Library 2011 Base Image library
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}" = Windows Resource Kit Tools - SubInAcl.exe
"{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4
"{D57FC112-312E-4D70-860F-2DB8FB6858F0}" = Adobe Creative Suite 5.5 Master Collection
"{D5B1535A-FDFC-4B40-B2E2-21DA83D9CB57}" = Adobe Audition CS5.5
"{D63D9B01-D57F-4E9E-B712-3FD62F84A13B}" = PrimeSense Sensor KinectMod [removed] for Windows
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{DF80E056-3F24-4C02-8F1B-C247E42A59BF}" = SRS HD Audio Lab
"{E4386119-2C33-4023-9836-783F43A90E3C}" = Autodesk Maya 2011 32-bit
"{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
"{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby
"{F6D6B258-E3CA-4AAC-965A-68D3E3140A8C}" = iTunes
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"38DBA62E5F3E8B1A9D29076F0059C87E4A5B5785" = Windows Driver Package - PrimeSense (psdrv3) PrimeSense (02/16/2011 3.1.2.0)
"A6A8668C0A13640CA28FE2A7D9654BE4AE478B13" = Windows Driver Package - Broadcom Bluetooth (07/30/2009 6.2.0.9405)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe_b2d6abde968e6f277ddbfd501383e02" = Adobe Creative Suite 4 Master Collection
"AdobeSupportAdvisor.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1" = Adobe Support Advisor
"AutoCAD Architecture 2011 - English" = AutoCAD Architecture 2011 - English
"Autodesk DirectConnect 2012 32-bit" = Autodesk DirectConnect 2012 32-bit
"Autodesk FBX Plug-in 2011.1 - 3ds Max 2011" = Autodesk FBX Plug-in 2011.1 - 3ds Max 2011
"B7541EC5F72AA713F557569278EB6273725F5607" = Windows Driver Package - Broadcom Bluetooth (06/15/2009 6.2.0.9000)
"BF20603967CFDCB2BBF91950E8A56DFBC5C833FE" = Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800)
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"CL-Eye Driver" = CL-Eye Driver
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.adobe.dmp.contentviewer" = Adobe Content Viewer
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"com.adobe.WidgetBrowser.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1" = Adobe Widget Browser
"DAZ Content Management Service [removed]" = DAZ Content Management Service
"DAZ Studio 4 [removed]" = DAZ Studio 4
"DB14B70B60DCCC66CED317FC0887DA7278B7C84C" = Windows Driver Package - PrimeSense (psdrv3) PrimeSense (09/11/2011 3.1.2.2)
"DS4 Default Content 4.0.0.16" = DS4 Default Content
"ENTERPRISE" = Microsoft Office Enterprise 2007
"I8kfanGUI" = I8kfanGUI V3.1
"InstallShield_{20B6BE33-525B-4EF9-9628-E1BA58093A4C}" = ZBrush 4R2
"Lexmark 2500 Series" = Lexmark 2500 Series
"Marvelous Designer 2" = Marvelous Designer 2
"Media Player - Codec Pack" = Media Player Codec Pack 4.1.4
"Mozilla Firefox 9.0.1 (x86 en-US)" = Mozilla Firefox 9.0.1 (x86 en-US)
"N360" = Norton 360
"NaturalMotion endorphin_is1" = NaturalMotion endorphin 2.5.2
"NVIDIA Drivers" = NVIDIA Drivers
"TeamViewer 7" = TeamViewer 7
"uTorrent" = µTorrent
"Victoria 4.2 Base ps_pe069_Victoria4" = Victoria 4.2 Base
"Victoria 4.2 Morphs++ DAZ Studio Content ps_pe070_V4MorphsDS" = Victoria 4.2 Morphs++ DAZ Studio Content
"VirtualCloneDrive" = VirtualCloneDrive
"WampServer 2_is1" = WampServer 2.1
"WinRAR archiver" = WinRAR archiver
"Xilisoft Video Converter Ultimate" = Xilisoft Video Converter Ultimate 6

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2/23/2012 5:32:45 PM | Computer Name = LabOne-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2565938

Error - 2/23/2012 5:32:45 PM | Computer Name = LabOne-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2565938

Error - 2/23/2012 5:32:48 PM | Computer Name = LabOne-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2/23/2012 5:32:48 PM | Computer Name = LabOne-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2568703

Error - 2/23/2012 5:32:48 PM | Computer Name = LabOne-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2568703

Error - 2/24/2012 12:21:57 AM | Computer Name = LabOne-PC | Source = Application Hang | ID = 1002
Description = The program ZBrush.exe version 4.3.0.0 stopped interacting with Windows
and was closed. To see if more information about the problem is available, check
the problem history in the Action Center control panel. Process ID: 4fe0 Start Time:
01ccf2a7d681bfcd Termination Time: 86 Application Path: C:\Program Files\Pixologic\ZBrush
4R2\ZBrush.exe Report Id: 10fce074-5e9f-11e1-bc14-001422dabbf5

Error - 2/24/2012 1:14:40 PM | Computer Name = LabOne-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2/24/2012 1:14:49 PM | Computer Name = LabOne-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 46212765

Error - 2/24/2012 1:14:49 PM | Computer Name = LabOne-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 46212765

Error - 2/24/2012 4:30:06 PM | Computer Name = LabOne-PC | Source = Application Error | ID = 1000
Description = Faulting application name: setup.exe_unknown, version: 0.0.0.0, time
stamp: 0x2a425e19 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception
code: 0xc0000005 Fault offset: 0x00000000 Faulting process id: 0xa14 Faulting application
start time: 0x01ccf3320ae07ead Faulting application path: C:\Windows\TEMP\tmpafc\setup.exe
Faulting
module path: unknown Report Id: 55e57b7a-5f26-11e1-a24e-001422dabbf5

[ System Events ]
Error - 2/24/2012 4:58:31 PM | Computer Name = LabOne-PC | Source = Service Control Manager | ID = 7023
Description = The Nla service terminated with the following error: %%2

Error - 2/24/2012 4:58:31 PM | Computer Name = LabOne-PC | Source = Service Control Manager | ID = 7023
Description = The Network Security service terminated with the following error:
%%126

Error - 2/24/2012 4:58:31 PM | Computer Name = LabOne-PC | Source = Service Control Manager | ID = 7023
Description = The NWCWorkstation service terminated with the following error: %%2

Error - 2/24/2012 4:58:31 PM | Computer Name = LabOne-PC | Source = Service Control Manager | ID = 7023
Description = The Nwsapagent service terminated with the following error: %%2

Error - 2/24/2012 4:58:32 PM | Computer Name = LabOne-PC | Source = Service Control Manager | ID = 7003
Description = The IPsec Policy Agent service depends the following service: BFE.
This service might not be installed.

Error - 2/24/2012 4:58:46 PM | Computer Name = LabOne-PC | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
SMR250

Error - 2/24/2012 5:01:03 PM | Computer Name = LabOne-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 2/24/2012 5:01:05 PM | Computer Name = LabOne-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 2/24/2012 5:01:08 PM | Computer Name = LabOne-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.

Error - 2/24/2012 5:03:13 PM | Computer Name = LabOne-PC | Source = Microsoft-Windows-DNS-Client | ID = 1012
Description = There was an error while attempting to read the local hosts file.


< End of report >