juiblex
Topic Starter
Hello, I believe my computer has several issues affecting it and I just can't figure out what if any solutions I can peruse. Mind you, I used bitdefender to scan as well as GMER and TDDS killer(removed several issues), mbam, SAS and nothing came up.
Issue #1; I've used Google Chrome fine for several months now, but recently it stopped working, i.e.; when chrome loads every webpage shows the same thing. This being "Error 138 (net::ERR_NETWORK_ACCESS_DENIED): Unable to access the network.". However, I've found that Internet Explorer works fine in spite of this.
Issue #2; I'm currently using BitDefender antivirus, and although I've tried to update it using both manual and auto update, it keeps showing "update failed" and sometimes popping up a window that says "internet explorer cannot display this page" when trying to update.
Issue #3; Due to BitDefender's updatre failures, I downloaded Avira free anti-virus. And when trying to install it, it showed 2 programs that I needed to uninstall: BitDefender and Norton Security Suite. I had NSS some time ago, but uninstalled it so I'm confused as to why it's showing up. Due to this I tried to download the Norton Removal Tool, but each time it led to an "internet explorer cannot display this page" page.
Thanks for your time!
Here are my logs from OTL; OTL.txt and Extras.txt, respectively.
OTL logfile created on: 3/9/2012 7:31:19 PM - Run 1
OTL by OldTimer - Version 3.2.36.2 Folder = C:\Documents and Settings\Adnan\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.24 Gb Total Physical Memory | 2.67 Gb Available Physical Memory | 82.41% Memory free
5.08 Gb Paging File | 4.54 Gb Available in Paging File | 89.35% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 586.41 Gb Total Space | 307.15 Gb Free Space | 52.38% Space Free | Partition Type: NTFS
Computer Name: ADNAN-339E95D84 | User Name: Adnan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Adnan\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
PRC - C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe (Bitdefender)
PRC - C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe (Bitdefender)
PRC - C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe (Bitdefender)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\tv_w32.exe (TeamViewer GmbH)
PRC - C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe (Bitdefender)
PRC - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe (LogMeIn, Inc.)
PRC - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
PRC - C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
========== Modules (No Company Name) ==========
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\MenuSkinning\b596221adf45e9494cdff491a10bb53a\MenuSkinning.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\VistaBridgeLibrary\661031382186cdbb39a09ba1e5f9a6e7\VistaBridgeLibrary.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DellDock\4793436314d25d68903ecc6effcb15b6\DellDock.ni.exe ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\MyDock.Util\a4e469768347ec080495f018e31240df\MyDock.Util.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\c14e58265386feb509cc61bb5e8dd296\System.Runtime.Remoting.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\UI\popup.ui ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\UI\imsecurityal.ui ()
MOD - \\?\C:\Program Files\Bitdefender\Bitdefender 2012\wslib.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportMS.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\procinfo.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\popup.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\bdmltusrsrv.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\connector.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\avc3al.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\excludemgr.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\framework.dll ()
MOD - \\?\C:\Program Files\Bitdefender\Bitdefender 2012\bdnimbus.dll ()
MOD - C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\bdsmartdb.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\strdecoder.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\txmlutil.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\UI\accessl.ui ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\bdmetrics.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\bdfwcore.dll ()
MOD - \\?\C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\trufos.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpfr.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpph.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimf.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttprbl.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpbr.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimdsp.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpf.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpdsp.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimbr.mdl ()
MOD - \\?\C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\Antivirus_000_001\avxdisk.dll ()
MOD - C:\WINDOWS\system32\preflib.dll ()
MOD - C:\WINDOWS\system32\bcm1xsup.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\WINDOWS\system32\devenum.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
========== Win32 Services (SafeList) ==========
SRV - (WPFFontCache_v0400) – File not found
SRV - (N360) – File not found
SRV - (RapportMgmtService) – C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
SRV - (VSSERV) – C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe (Bitdefender)
SRV - (UPDATESRV) – C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe (Bitdefender)
SRV - (TeamViewer7) – C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (SafeBox) – C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe (Bitdefender)
SRV - (LMIMaint) – C:\Program Files\LogMeIn\x86\RaMaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) – C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (Update Server) – C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe (BitDefender)
SRV - (LogMeIn) – C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
SRV - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
========== Driver Services (SafeList) ==========
DRV - (WDICA) – File not found
DRV - (PDRFRAME) – File not found
DRV - (PDRELI) – File not found
DRV - (PDFRAME) – File not found
DRV - (PDCOMP) – File not found
DRV - (PCIDump) – File not found
DRV - (lbrtfdc) – File not found
DRV - (i2omgmt) – File not found
DRV - (Changer) – File not found
DRV - (SymEvent) – C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (NAVEX15) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120220.032\NAVEX15.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120220.032\NAVENG.SYS (Symantec Corporation)
DRV - (IDSxpx86) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20120217.003\IDSXpx86.sys (Symantec Corporation)
DRV - (BHDrvx86) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20120215.001\BHDrvx86.sys (Symantec Corporation)
DRV - (RapportIaso) – c:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportIaso.sys (Trusteer Ltd.)
DRV - (RapportPG) – C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys (Trusteer Ltd.)
DRV - (RapportEI) – C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys (Trusteer Ltd.)
DRV - (RapportKELL) – C:\WINDOWS\System32\Drivers\RapportKELL.sys (Trusteer Ltd.)
DRV - (avckf) – C:\WINDOWS\system32\drivers\avckf.sys (BitDefender)
DRV - (avc3) – C:\WINDOWS\system32\DRIVERS\avc3.sys (BitDefender)
DRV - (MonitorFunction) – C:\WINDOWS\system32\drivers\TVMonitor.sys (TeamViewer GmbH)
DRV - (teamviewervpn) – C:\WINDOWS\system32\drivers\teamviewervpn.sys (TeamViewer GmbH)
DRV - (RapportCerberus_34302) – C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\34302\RapportCerberus32_34302.sys ()
DRV - (LMIRfsClientNP) – C:\WINDOWS\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV - (avchv) – C:\WINDOWS\system32\drivers\avchv.sys (BitDefender)
DRV - (bdsandbox) – C:\WINDOWS\system32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (Bdfndisf) – C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf.sys (BitDefender LLC)
DRV - (bdftdif) – C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdftdif.sys (BitDefender LLC)
DRV - (trufos) – C:\WINDOWS\system32\DRIVERS\trufos.sys (BitDefender S.R.L.)
DRV - (LMIRfsDriver) – C:\WINDOWS\system32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV - (LMIInfo) – C:\Program Files\LogMeIn\x86\rainfo.sys (LogMeIn, Inc.)
DRV - (bdfsfltr) – C:\WINDOWS\system32\DRIVERS\bdfsfltr.sys (BitDefender)
DRV - (bdselfpr) – C:\Program Files\Bitdefender\Bitdefender 2012\bdselfpr.sys (BitDefender LLC)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\N360\0502000.00D\SYMTDI.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\WINDOWS\System32\Drivers\N360\0502000.00D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\WINDOWS\system32\drivers\N360\0502000.00D\SRTSPX.SYS (Symantec Corporation)
DRV - (SymEFA) – C:\WINDOWS\system32\drivers\N360\0502000.00D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymDS) – C:\WINDOWS\system32\drivers\N360\0502000.00D\SYMDS.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\WINDOWS\system32\drivers\N360\0502000.00D\Ironx86.SYS (Symantec Corporation)
DRV - (BDVEDISK) – C:\WINDOWS\system32\drivers\bdvedisk.sys (BitDefender)
DRV - (RTLE8023xp) – C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (BCM43XX) – C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (RtNdPt5x) – C:\WINDOWS\system32\drivers\RtNdPt5x.sys (Realtek Semiconductor Corporation )
DRV - (RTLVLAN) – C:\WINDOWS\system32\drivers\RTLVLAN.SYS (Realtek Semiconductor Corporation )
DRV - (RTLTEAMING) – C:\WINDOWS\system32\drivers\RTLTEAMING.SYS (Realtek Semiconductor Corporation)
DRV - (Hardlock) – C:\WINDOWS\system32\drivers\hardlock.sys (Aladdin Knowledge Systems)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://www.ask.com/web?q={SEARCHTERMS}&…eo=US&ver;=5
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Documents and Settings\Adnan\Application Data\Move Networks\plugins\npqmp071700000016.dll (Move Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Documents and Settings\Adnan\Application Data\Move Networks\plugins\npqmp071700000016.dll (Move Networks)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPlgn\ [2012/02/21 09:37:30 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\ [2012/02/24 20:02:21 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Documents and Settings\Adnan\Application Data\Move Networks [2011/02/22 11:30:12 | 000,000,000 | —D | M]
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\Application\18.0.1025.54\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\Application\18.0.1025.54\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\Application\18.0.1025.54\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Move Streaming Media Player (Enabled) = C:\Documents and Settings\Adnan\Application Data\Move Networks\plugins\npqmp071700000016.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: Gmail = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2008/04/14 07:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O2 - BHO: (no name) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [BDAgent] C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - Startup: C:\Documents and Settings\Adnan\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{81EB693B-FAD5-45B7-B8D9-09767A6564E7}: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LMIinit: DllName - (LMIinit.dll) - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Adnan\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Adnan\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/01/13 16:23:11 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2\{0d3c3001-3ee1-11e1-90d7-002564ccf605}\Shell\AutoRun\command - "" = K:\PMBP_Win.exe
O33 - MountPoints2\{40f042b8-54be-11e1-90e1-002564ccf605}\Shell - "" = AutoRun
O33 - MountPoints2\{40f042b8-54be-11e1-90e1-002564ccf605}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{40f042b8-54be-11e1-90e1-002564ccf605}\Shell\AutoRun\command - "" = "I:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012/03/09 19:18:05 | 000,593,920 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Adnan\Desktop\OTL.exe
[2012/03/09 19:01:53 | 015,210,392 | —- | C] (SUPERAntiSpyware.com) – C:\Documents and Settings\Adnan\Desktop\SUPERAntiSpyware.exe
[2012/03/09 19:01:38 | 009,502,424 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\Adnan\Desktop\mbam-setup-1.60.1.1000.exe
[2012/03/09 18:34:55 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Adnan\Recent
[2012/02/24 20:03:28 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\BDLogging
[2012/02/24 20:02:45 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsgXP_2k3.dll
[2012/02/24 20:02:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Bitdefender 2012
[2012/02/24 20:02:24 | 000,000,000 | —D | C] – C:\Documents and Settings\Adnan\Application Data\Bitdefender
[2012/02/24 20:02:12 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Bitdefender
[2012/02/24 20:00:53 | 000,000,000 | —D | C] – C:\Documents and Settings\Adnan\Application Data\QuickScan
[2012/02/24 20:00:43 | 000,000,000 | —D | C] – C:\Program Files\Bitdefender
[2012/02/24 20:00:42 | 000,360,976 | —- | C] (BitDefender) – C:\WINDOWS\System32\drivers\bdfsfltr.sys
[2012/02/24 20:00:39 | 000,340,624 | —- | C] (BitDefender S.R.L.) – C:\WINDOWS\System32\drivers\trufos.sys
[2012/02/24 19:46:57 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Bitdefender
[2012/02/24 16:30:15 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2012/02/20 20:25:42 | 000,744,568 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symefa.sys
[2012/02/20 20:25:42 | 000,369,784 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symtdi.sys
[2012/02/20 20:25:42 | 000,340,088 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symds.sys
[2012/02/20 20:25:42 | 000,331,384 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symtdiv.sys
[2012/02/20 20:25:42 | 000,299,640 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnets.sys
[2012/02/20 20:25:41 | 000,516,216 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtsp.sys
[2012/02/20 20:25:41 | 000,136,312 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\ironx86.sys
[2012/02/20 20:25:41 | 000,050,168 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtspx.sys
[2012/02/20 20:25:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\N360\0502000.00D
[2012/02/15 14:54:08 | 000,000,000 | —D | C] – C:\N360_BACKUP
[2012/02/15 13:41:55 | 000,126,584 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2012/02/15 13:41:55 | 000,060,872 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\S32EVNT1.DLL
[2012/02/15 13:41:55 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2012/02/15 13:41:45 | 000,106,928 | —- | C] (GEAR Software Inc.) – C:\WINDOWS\System32\GEARAspi.dll
[2012/02/15 13:41:38 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\N360
[2012/02/15 13:41:37 | 000,000,000 | —D | C] – C:\Program Files\Windows Sidebar
[2012/02/15 13:41:30 | 000,000,000 | —D | C] – C:\Documents and Settings\Adnan\My Documents\Symantec
[2012/02/15 13:41:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NortonInstaller
[2012/02/15 13:34:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Norton
[2012/02/15 13:34:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Norton
[2012/02/15 13:02:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Mitchell 1
[2012/02/15 13:02:38 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Adobe
[2012/02/15 13:02:22 | 001,238,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjt4jlt.dll
[2012/02/15 13:02:22 | 001,050,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjet35.dll
[2012/02/15 13:02:22 | 000,415,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msrepl35.dll
[2012/02/15 13:02:22 | 000,368,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\VBAR332.DLL
[2012/02/15 13:02:22 | 000,344,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msexch35.dll
[2012/02/15 13:02:22 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxbse35.dll
[2012/02/15 13:02:22 | 000,262,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msrd2x35.dll
[2012/02/15 13:02:22 | 000,252,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msexcl35.dll
[2012/02/15 13:02:22 | 000,250,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspdox35.dll
[2012/02/15 13:02:22 | 000,168,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msltus35.dll
[2012/02/15 13:02:22 | 000,166,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstext35.dll
[2012/02/15 13:02:22 | 000,044,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msrpfs35.dll
[2012/02/15 13:02:21 | 000,123,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjint35.dll
[2012/02/15 13:02:21 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\JETCOMP.exe
[2012/02/15 13:02:21 | 000,024,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjter35.dll
[2012/02/15 13:02:19 | 000,000,000 | —D | C] – C:\Mitchell1
[2012/02/15 11:09:22 | 000,000,000 | —D | C] – C:\Mitchell
[2012/02/15 10:56:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Adnan\Local Settings\Application Data\Western Digital
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/03/09 19:18:54 | 000,000,322 | —- | M] () – C:\WINDOWS\System32\checkdnsid.xml
[2012/03/09 19:18:05 | 000,593,920 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Adnan\Desktop\OTL.exe
[2012/03/09 19:02:03 | 015,210,392 | —- | M] (SUPERAntiSpyware.com) – C:\Documents and Settings\Adnan\Desktop\SUPERAntiSpyware.exe
[2012/03/09 19:01:51 | 009,502,424 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Adnan\Desktop\mbam-setup-1.60.1.1000.exe
[2012/03/09 18:42:04 | 087,031,672 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\avira_free_antivirus_en.exe
[2012/03/09 18:41:00 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-527237240-1801674531-1003UA.job
[2012/03/09 18:33:38 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/03/09 18:33:27 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/03/09 18:28:54 | 000,002,284 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\Google Chrome.lnk
[2012/03/09 18:28:54 | 000,002,262 | —- | M] () – C:\Documents and Settings\Adnan\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/03/09 17:03:38 | 000,057,846 | —- | M] () – C:\Documents and Settings\Adnan\My Documents\cc_20120309_170332.reg
[2012/03/09 15:03:04 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{0FA8D75F-DBBB-4C36-B782-5BC6A930EEB4}.job
[2012/03/08 20:41:00 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-527237240-1801674531-1003Core.job
[2012/03/08 10:25:19 | 000,015,451 | —- | M] () – C:\WINDOWS\od5.ini
[2012/02/24 20:41:12 | 000,583,818 | —- | M] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\Cat.DB
[2012/02/24 20:28:27 | 000,266,208 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/24 20:21:10 | 000,436,064 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/02/24 20:21:09 | 000,068,834 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/02/24 20:08:26 | 000,000,385 | —- | M] () – C:\WINDOWS\System32\user_gensett.xml
[2012/02/24 20:03:58 | 001,100,081 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1330131624.bdinstall.bin
[2012/02/24 20:02:54 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2012/02/24 20:02:53 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012/02/24 19:56:02 | 246,075,960 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\bitdefender_ts_2012_32b.exe
[2012/02/24 16:33:18 | 000,302,592 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\ql2s9dlq.exe
[2012/02/15 13:52:46 | 000,126,584 | —- | M] (Symantec Corporation) – C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2012/02/15 13:52:46 | 000,060,872 | —- | M] (Symantec Corporation) – C:\WINDOWS\System32\S32EVNT1.DLL
[2012/02/15 13:52:46 | 000,007,468 | —- | M] () – C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2012/02/15 13:52:46 | 000,000,806 | —- | M] () – C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2012/02/15 13:39:20 | 000,000,825 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\Norton Installation Files.lnk
[2012/02/15 13:03:00 | 000,000,048 | —- | M] () – C:\WINDOWS\PickList.ini
[2012/02/15 13:02:51 | 000,001,464 | —- | M] () – C:\Documents and Settings\All Users\Desktop\OnDemand5.lnk
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/03/09 18:42:03 | 087,031,672 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\avira_free_antivirus_en.exe
[2012/03/09 17:03:36 | 000,057,846 | —- | C] () – C:\Documents and Settings\Adnan\My Documents\cc_20120309_170332.reg
[2012/03/09 08:48:03 | 000,002,284 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\Google Chrome.lnk
[2012/03/07 13:52:53 | 000,000,322 | —- | C] () – C:\WINDOWS\System32\checkdnsid.xml
[2012/02/24 20:18:41 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2012/02/24 20:18:41 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/02/24 20:08:26 | 000,000,385 | —- | C] () – C:\WINDOWS\System32\user_gensett.xml
[2012/02/24 20:03:58 | 001,100,081 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1330131624.bdinstall.bin
[2012/02/24 20:02:54 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2012/02/24 20:02:53 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012/02/24 19:52:29 | 246,075,960 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\bitdefender_ts_2012_32b.exe
[2012/02/24 16:33:17 | 000,302,592 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\ql2s9dlq.exe
[2012/02/21 09:35:59 | 000,583,818 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\Cat.DB
[2012/02/20 20:25:42 | 000,007,877 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnetv.cat
[2012/02/20 20:25:42 | 000,007,458 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnet.cat
[2012/02/20 20:25:42 | 000,007,456 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symefa.cat
[2012/02/20 20:25:42 | 000,003,373 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symefa.inf
[2012/02/20 20:25:42 | 000,001,473 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnetv.inf
[2012/02/20 20:25:42 | 000,001,445 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnet.inf
[2012/02/20 20:25:41 | 000,007,528 | R— | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\iron.cat
[2012/02/20 20:25:41 | 000,007,454 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtspx.cat
[2012/02/20 20:25:41 | 000,007,450 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtsp.cat
[2012/02/20 20:25:41 | 000,002,792 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symds.inf
[2012/02/20 20:25:41 | 000,001,389 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtspx.inf
[2012/02/20 20:25:41 | 000,001,383 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtsp.inf
[2012/02/20 20:25:41 | 000,000,742 | R— | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\iron.inf
[2012/02/20 20:25:30 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symds.cat
[2012/02/20 20:25:27 | 000,000,172 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\isolate.ini
[2012/02/15 13:41:55 | 000,007,468 | —- | C] () – C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2012/02/15 13:41:55 | 000,000,806 | —- | C] () – C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2012/02/15 13:34:24 | 000,000,825 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\Norton Installation Files.lnk
[2012/02/15 13:03:00 | 000,000,048 | —- | C] () – C:\WINDOWS\PickList.ini
[2012/02/15 13:02:52 | 000,015,451 | —- | C] () – C:\WINDOWS\od5.ini
[2012/02/15 13:02:51 | 000,001,464 | —- | C] () – C:\Documents and Settings\All Users\Desktop\OnDemand5.lnk
[2012/01/18 16:15:11 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/14 20:11:57 | 000,000,383 | —- | C] () – C:\WINDOWS\System32\haspdos.sys
[2011/01/14 15:46:55 | 000,753,664 | —- | C] () – C:\WINDOWS\System32\bcm1xsup.dll
[2011/01/14 15:46:55 | 000,143,360 | —- | C] () – C:\WINDOWS\System32\preflib.dll
[2011/01/14 15:46:55 | 000,024,576 | —- | C] () – C:\WINDOWS\System32\WLTRYSVC.EXE
[2011/01/14 15:34:52 | 000,003,584 | —- | C] () – C:\Documents and Settings\Adnan\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/14 13:35:09 | 000,073,728 | —- | C] () – C:\WINDOWS\System32\RtNicProp32.dll
[2011/01/14 12:58:57 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\igfxCoIn_v4820.dll
[2011/01/13 16:24:44 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/01/13 16:20:45 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/01/13 08:09:04 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2011/01/13 08:08:01 | 000,266,208 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
========== LOP Check ==========
[2012/02/24 20:09:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Adnan\Application Data\Bitdefender
[2012/01/06 15:59:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Adnan\Application Data\ESET
[2012/02/24 20:00:53 | 000,000,000 | —D | M] – C:\Documents and Settings\Adnan\Application Data\QuickScan
[2012/02/19 01:23:28 | 000,000,000 | —D | M] – C:\Documents and Settings\Adnan\Application Data\TeamViewer
[2012/02/24 20:03:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BDLogging
[2012/02/24 20:03:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Bitdefender
[2012/01/27 14:31:33 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LogMeIn
[2011/09/29 14:25:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Trusteer
[2011/01/14 21:14:20 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{CBCE2F73-24E4-481F-84B2-1A5EB720D187}
[2012/03/09 15:03:04 | 000,000,422 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{0FA8D75F-DBBB-4C36-B782-5BC6A930EEB4}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2012/01/14 14:30:52 | 000,001,024 | —- | M] () – C:\.rnd
[2011/01/13 16:23:11 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2012/03/09 18:32:12 | 000,002,838 | —- | M] () – C:\bdlog.txt
[2011/01/13 16:18:41 | 000,000,321 | -HS- | M] () – C:\boot.ini
[2011/01/13 16:23:11 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/01/13 16:23:11 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/01/13 16:23:11 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2008/04/14 07:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/04/14 07:00:00 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/03/09 18:33:18 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2012/02/24 16:24:30 | 000,113,446 | —- | M] () – C:\TDSSKiller.2.7.14.0_24.02.2012_16.23.14_log.txt
[2012/02/24 16:32:55 | 000,050,830 | —- | M] () – C:\TDSSKiller.2.7.14.0_24.02.2012_16.32.32_log.txt
< %systemroot%\Fonts\*.com >
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2011/01/13 16:22:53 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 07:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2011/12/07 18:22:08 | 000,052,096 | —- | M] (LogMeIn, Inc.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\LMIproc.dll
[2006/10/26 22:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
[2008/07/06 05:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2011/01/13 08:06:30 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2011/01/13 08:06:30 | 001,089,536 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2011/01/13 08:06:30 | 000,942,080 | —- | M] () – C:\WINDOWS\System32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2011/01/13 16:23:16 | 000,000,294 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/01/13 16:32:01 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Adnan\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2011/01/13 16:32:00 | 000,000,079 | —- | M] () – C:\Documents and Settings\Adnan\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2012/03/09 18:42:04 | 087,031,672 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\avira_free_antivirus_en.exe
[2012/02/24 19:56:02 | 246,075,960 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\bitdefender_ts_2012_32b.exe
[2012/03/09 19:01:51 | 009,502,424 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Adnan\Desktop\mbam-setup-1.60.1.1000.exe
[2012/03/09 19:18:05 | 000,593,920 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Adnan\Desktop\OTL.exe
[2012/02/24 16:33:18 | 000,302,592 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\ql2s9dlq.exe
[2011/09/17 08:15:08 | 034,168,361 | —- | M] (WORLDPAC ) – C:\Documents and Settings\Adnan\Desktop\speedDIALInstall.exe
[2012/03/09 19:02:03 | 015,210,392 | —- | M] (SUPERAntiSpyware.com) – C:\Documents and Settings\Adnan\Desktop\SUPERAntiSpyware.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-01-14 18:26:06
========== Alternate Data Streams ==========
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Adnan\Desktop\SUPERAntiSpyware.exe:BDU
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Adnan\Desktop\OTL.exe:BDU
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Adnan\Desktop\mbam-setup-1.60.1.1000.exe:BDU
< End of report >
OTL Extras logfile created on: 3/9/2012 7:31:19 PM - Run 1
OTL by OldTimer - Version 3.2.36.2 Folder = C:\Documents and Settings\Adnan\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.24 Gb Total Physical Memory | 2.67 Gb Available Physical Memory | 82.41% Memory free
5.08 Gb Paging File | 4.54 Gb Available in Paging File | 89.35% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 586.41 Gb Total Space | 307.15 Gb Free Space | 52.38% Space Free | Partition Type: NTFS
Computer Name: ADNAN-339E95D84 | User Name: Adnan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application – (TeamViewer GmbH)
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service – (TeamViewer GmbH)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}" = Rapport
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2AB9289D-6432-4CC0-8869-A195C3F0CFCC}" = Bitdefender Total Security 2012
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{5F7DFDFA-27B3-4E06-BCDE-B371424C0032}" = OnDemand5
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7236672F-6430-439E-9B27-27EDEAF1D676}" = Diagnostic Utility
"{73090A5A-E0C0-4E0B-A320-E183877061A5}" = ALLDATA Repair
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{926CC8AE-8414-43DF-8EB4-CF26D9C3C663}" =
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{976475B8-63E9-4559-BE2C-D26086BE4C40}" = LogMeIn
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.2)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C73A3942-84C8-4597-9F9B-EE227DCBA758}" = Dell Dock
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"Bitdefender" = Bitdefender Total Security 2012
"Broadcom 802.11 Application" = Dell Wireless WLAN Card Utility
"CCleaner" = CCleaner
"Dell Dock" = Dell Dock
"ENTERPRISE" = Microsoft Office Enterprise 2007
"HDMI" = Intel® Graphics Media Accelerator Driver
"ie8" = Windows Internet Explorer 8
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Nero - Burning Rom!UninstallKey" = Nero - Burning Rom (Web installer)
"Rapport_msi" = Rapport
"TeamViewer 7" = TeamViewer 7
"VLC media player" = VLC media player 1.1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WinRAR archiver" = WinRAR archiver
"WORLDPAC speedDIAL_is1" = WORLDPAC speedDIAL
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Move Media Player" = Move Media Player
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 1/24/2012 7:33:29 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/24/2012 7:35:48 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/25/2012 7:50:02 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/25/2012 7:50:16 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1001
Description = Fault bucket -2070362295.
Error - 1/25/2012 7:53:57 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/25/2012 8:03:05 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/26/2012 10:01:59 AM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/26/2012 2:18:29 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/26/2012 2:20:36 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/26/2012 2:52:04 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
[ System Events ]
Error - 3/7/2012 10:36:01 AM | Computer Name = ADNAN-339E95D84 | Source = Service Control Manager | ID = 7000
Description = The Norton Security Suite service failed to start due to the following
error: %%3
Error - 3/7/2012 10:36:13 AM | Computer Name = ADNAN-339E95D84 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service LogMeIn with
arguments "" in order to run the server: {C3ADA61A-4E0E-48D4-A2B1-AE5F76D01044}
Error - 3/7/2012 12:58:03 PM | Computer Name = ADNAN-339E95D84 | Source = Service Control Manager | ID = 7000
Description = The Norton Security Suite service failed to start due to the following
error: %%3
Error - 3/7/2012 12:58:39 PM | Computer Name = ADNAN-339E95D84 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service LogMeIn with
arguments "" in order to run the server: {C3ADA61A-4E0E-48D4-A2B1-AE5F76D01044}
Error - 3/9/2012 7:21:42 PM | Computer Name = ADNAN-339E95D84 | Source = Service Control Manager | ID = 7000
Description = The Norton Security Suite service failed to start due to the following
error: %%3
Error - 3/9/2012 7:34:03 PM | Computer Name = ADNAN-339E95D84 | Source = Service Control Manager | ID = 7000
Description = The Norton Security Suite service failed to start due to the following
error: %%3
Error - 3/9/2012 7:35:17 PM | Computer Name = ADNAN-339E95D84 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service LogMeIn with
arguments "" in order to run the server: {C3ADA61A-4E0E-48D4-A2B1-AE5F76D01044}
Error - 3/9/2012 7:57:43 PM | Computer Name = ADNAN-339E95D84 | Source = Srv | ID = 2000
Description = The server's call to a system service failed unexpectedly.
Error - 3/9/2012 7:57:43 PM | Computer Name = ADNAN-339E95D84 | Source = Srv | ID = 2000
Description = The server's call to a system service failed unexpectedly.
Error - 3/9/2012 7:58:32 PM | Computer Name = ADNAN-339E95D84 | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetbiosSmb because
another computer on the network has the same name. The server could not start.
< End of report >
Issue #1; I've used Google Chrome fine for several months now, but recently it stopped working, i.e.; when chrome loads every webpage shows the same thing. This being "Error 138 (net::ERR_NETWORK_ACCESS_DENIED): Unable to access the network.". However, I've found that Internet Explorer works fine in spite of this.
Issue #2; I'm currently using BitDefender antivirus, and although I've tried to update it using both manual and auto update, it keeps showing "update failed" and sometimes popping up a window that says "internet explorer cannot display this page" when trying to update.
Issue #3; Due to BitDefender's updatre failures, I downloaded Avira free anti-virus. And when trying to install it, it showed 2 programs that I needed to uninstall: BitDefender and Norton Security Suite. I had NSS some time ago, but uninstalled it so I'm confused as to why it's showing up. Due to this I tried to download the Norton Removal Tool, but each time it led to an "internet explorer cannot display this page" page.
Thanks for your time!
Here are my logs from OTL; OTL.txt and Extras.txt, respectively.
OTL logfile created on: 3/9/2012 7:31:19 PM - Run 1
OTL by OldTimer - Version 3.2.36.2 Folder = C:\Documents and Settings\Adnan\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.24 Gb Total Physical Memory | 2.67 Gb Available Physical Memory | 82.41% Memory free
5.08 Gb Paging File | 4.54 Gb Available in Paging File | 89.35% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 586.41 Gb Total Space | 307.15 Gb Free Space | 52.38% Space Free | Partition Type: NTFS
Computer Name: ADNAN-339E95D84 | User Name: Adnan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Documents and Settings\Adnan\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
PRC - C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe (Bitdefender)
PRC - C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe (Bitdefender)
PRC - C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe (Bitdefender)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\tv_w32.exe (TeamViewer GmbH)
PRC - C:\Program Files\Bitdefender\Bitdefender Safebox\safeboxservice.exe (Bitdefender)
PRC - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe (LogMeIn, Inc.)
PRC - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
PRC - C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
========== Modules (No Company Name) ==========
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\MenuSkinning\b596221adf45e9494cdff491a10bb53a\MenuSkinning.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\VistaBridgeLibrary\661031382186cdbb39a09ba1e5f9a6e7\VistaBridgeLibrary.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\a2a14380e8c9149d5b212d0100ef588a\System.Management.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\DellDock\4793436314d25d68903ecc6effcb15b6\DellDock.ni.exe ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\MyDock.Util\a4e469768347ec080495f018e31240df\MyDock.Util.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\c14e58265386feb509cc61bb5e8dd296\System.Runtime.Remoting.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\94a40f415bfa947e251888bbe88bb973\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\77e1279cbf4eecfb0284b63316fe43fe\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ad99ac6b5666edb8ee742dd64f9578af\System.Windows.Forms.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\9351cf29bb1ba951e45a9b3b0edab937\System.Drawing.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\9e3803cd2a11f056291862e306a8e2b2\System.ni.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\UI\popup.ui ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\UI\imsecurityal.ui ()
MOD - \\?\C:\Program Files\Bitdefender\Bitdefender 2012\wslib.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\d86a3346c3d90ff12d0df9d7726f3ece\Accessibility.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\ca87ba84221991839abbe7d4bc9c6721\mscorlib.ni.dll ()
MOD - C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportMS.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\procinfo.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\popup.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\bdmltusrsrv.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\connector.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\avc3al.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\excludemgr.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\framework.dll ()
MOD - \\?\C:\Program Files\Bitdefender\Bitdefender 2012\bdnimbus.dll ()
MOD - C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\bdsmartdb.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\strdecoder.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\txmlutil.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\UI\accessl.ui ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\bdmetrics.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\bdfwcore.dll ()
MOD - \\?\C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\trufos.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpfr.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpph.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimf.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttprbl.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpbr.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimdsp.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpf.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\ashttpdsp.mdl ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2012\as2core\asimbr.mdl ()
MOD - \\?\C:\Program Files\Common Files\Bitdefender\Bitdefender Threat Scanner\Antivirus_000_001\avxdisk.dll ()
MOD - C:\WINDOWS\system32\preflib.dll ()
MOD - C:\WINDOWS\system32\bcm1xsup.dll ()
MOD - C:\Program Files\WinRAR\RarExt.dll ()
MOD - C:\WINDOWS\system32\devenum.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
========== Win32 Services (SafeList) ==========
SRV - (WPFFontCache_v0400) – File not found
SRV - (N360) – File not found
SRV - (RapportMgmtService) – C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe (Trusteer Ltd.)
SRV - (VSSERV) – C:\Program Files\Bitdefender\Bitdefender 2012\vsserv.exe (Bitdefender)
SRV - (UPDATESRV) – C:\Program Files\Bitdefender\Bitdefender 2012\updatesrv.exe (Bitdefender)
SRV - (TeamViewer7) – C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (SafeBox) – C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe (Bitdefender)
SRV - (LMIMaint) – C:\Program Files\LogMeIn\x86\RaMaint.exe (LogMeIn, Inc.)
SRV - (LMIGuardianSvc) – C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe (LogMeIn, Inc.)
SRV - (Update Server) – C:\Program Files\Common Files\Bitdefender\Bitdefender Arrakis Server\bin\arrakis3.exe (BitDefender)
SRV - (LogMeIn) – C:\Program Files\LogMeIn\x86\LogMeIn.exe (LogMeIn, Inc.)
SRV - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
========== Driver Services (SafeList) ==========
DRV - (WDICA) – File not found
DRV - (PDRFRAME) – File not found
DRV - (PDRELI) – File not found
DRV - (PDFRAME) – File not found
DRV - (PDCOMP) – File not found
DRV - (PCIDump) – File not found
DRV - (lbrtfdc) – File not found
DRV - (i2omgmt) – File not found
DRV - (Changer) – File not found
DRV - (SymEvent) – C:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (NAVEX15) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120220.032\NAVEX15.SYS (Symantec Corporation)
DRV - (eeCtrl) – C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) – C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (NAVENG) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\VirusDefs\20120220.032\NAVENG.SYS (Symantec Corporation)
DRV - (IDSxpx86) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\IPSDefs\20120217.003\IDSXpx86.sys (Symantec Corporation)
DRV - (BHDrvx86) – C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\Definitions\BASHDefs\20120215.001\BHDrvx86.sys (Symantec Corporation)
DRV - (RapportIaso) – c:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportIaso.sys (Trusteer Ltd.)
DRV - (RapportPG) – C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys (Trusteer Ltd.)
DRV - (RapportEI) – C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys (Trusteer Ltd.)
DRV - (RapportKELL) – C:\WINDOWS\System32\Drivers\RapportKELL.sys (Trusteer Ltd.)
DRV - (avckf) – C:\WINDOWS\system32\drivers\avckf.sys (BitDefender)
DRV - (avc3) – C:\WINDOWS\system32\DRIVERS\avc3.sys (BitDefender)
DRV - (MonitorFunction) – C:\WINDOWS\system32\drivers\TVMonitor.sys (TeamViewer GmbH)
DRV - (teamviewervpn) – C:\WINDOWS\system32\drivers\teamviewervpn.sys (TeamViewer GmbH)
DRV - (RapportCerberus_34302) – C:\Documents and Settings\All Users\Application Data\Trusteer\Rapport\store\exts\RapportCerberus\34302\RapportCerberus32_34302.sys ()
DRV - (LMIRfsClientNP) – C:\WINDOWS\System32\LMIRfsClientNP.dll (LogMeIn, Inc.)
DRV - (avchv) – C:\WINDOWS\system32\drivers\avchv.sys (BitDefender)
DRV - (bdsandbox) – C:\WINDOWS\system32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (Bdfndisf) – C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfndisf.sys (BitDefender LLC)
DRV - (bdftdif) – C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdftdif.sys (BitDefender LLC)
DRV - (trufos) – C:\WINDOWS\system32\DRIVERS\trufos.sys (BitDefender S.R.L.)
DRV - (LMIRfsDriver) – C:\WINDOWS\system32\drivers\LMIRfsDriver.sys (LogMeIn, Inc.)
DRV - (LMIInfo) – C:\Program Files\LogMeIn\x86\rainfo.sys (LogMeIn, Inc.)
DRV - (bdfsfltr) – C:\WINDOWS\system32\DRIVERS\bdfsfltr.sys (BitDefender)
DRV - (bdselfpr) – C:\Program Files\Bitdefender\Bitdefender 2012\bdselfpr.sys (BitDefender LLC)
DRV - (SYMTDI) – C:\WINDOWS\System32\Drivers\N360\0502000.00D\SYMTDI.SYS (Symantec Corporation)
DRV - (SRTSP) – C:\WINDOWS\System32\Drivers\N360\0502000.00D\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) – C:\WINDOWS\system32\drivers\N360\0502000.00D\SRTSPX.SYS (Symantec Corporation)
DRV - (SymEFA) – C:\WINDOWS\system32\drivers\N360\0502000.00D\SYMEFA.SYS (Symantec Corporation)
DRV - (SymDS) – C:\WINDOWS\system32\drivers\N360\0502000.00D\SYMDS.SYS (Symantec Corporation)
DRV - (SymIRON) – C:\WINDOWS\system32\drivers\N360\0502000.00D\Ironx86.SYS (Symantec Corporation)
DRV - (BDVEDISK) – C:\WINDOWS\system32\drivers\bdvedisk.sys (BitDefender)
DRV - (RTLE8023xp) – C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (BCM43XX) – C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (RtNdPt5x) – C:\WINDOWS\system32\drivers\RtNdPt5x.sys (Realtek Semiconductor Corporation )
DRV - (RTLVLAN) – C:\WINDOWS\system32\drivers\RTLVLAN.SYS (Realtek Semiconductor Corporation )
DRV - (RTLTEAMING) – C:\WINDOWS\system32\drivers\RTLTEAMING.SYS (Realtek Semiconductor Corporation)
DRV - (Hardlock) – C:\WINDOWS\system32\drivers\hardlock.sys (Aladdin Knowledge Systems)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}: "URL" = http://www.ask.com/web?q={SEARCHTERMS}&…eo=US&ver;=5
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Documents and Settings\Adnan\Application Data\Move Networks\plugins\npqmp071700000016.dll (Move Networks)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Documents and Settings\Adnan\Application Data\Move Networks\plugins\npqmp071700000016.dll (Move Networks)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\IPSFFPlgn\ [2012/02/21 09:37:30 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_5.0.0.125\coFFPlgn\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Program Files\Bitdefender\Bitdefender 2012\bdtbext\ [2012/02/24 20:02:21 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Documents and Settings\Adnan\Application Data\Move Networks [2011/02/22 11:30:12 | 000,000,000 | —D | M]
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\Application\18.0.1025.54\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\Application\18.0.1025.54\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\Application\18.0.1025.54\gcswf32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Move Streaming Media Player (Enabled) = C:\Documents and Settings\Adnan\Application Data\Move Networks\plugins\npqmp071700000016.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\
CHR - Extension: Gmail = C:\Documents and Settings\Adnan\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2008/04/14 07:00:00 | 000,000,734 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O2 - BHO: (no name) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [BDAgent] C:\Program Files\Bitdefender\Bitdefender 2012\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - Startup: C:\Documents and Settings\Adnan\Start Menu\Programs\Startup\Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} http://office.microsoft.com/sites/production/ieawsdc32.cab (Microsoft Office Template and Media Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed]
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{81EB693B-FAD5-45B7-B8D9-09767A6564E7}: DhcpNameServer = [removed] [removed]
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LMIinit: DllName - (LMIinit.dll) - C:\WINDOWS\System32\LMIinit.dll (LogMeIn, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Adnan\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Adnan\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/01/13 16:23:11 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2\{0d3c3001-3ee1-11e1-90d7-002564ccf605}\Shell\AutoRun\command - "" = K:\PMBP_Win.exe
O33 - MountPoints2\{40f042b8-54be-11e1-90e1-002564ccf605}\Shell - "" = AutoRun
O33 - MountPoints2\{40f042b8-54be-11e1-90e1-002564ccf605}\Shell\AutoRun - "" = Auto&Play;
O33 - MountPoints2\{40f042b8-54be-11e1-90e1-002564ccf605}\Shell\AutoRun\command - "" = "I:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012/03/09 19:18:05 | 000,593,920 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Adnan\Desktop\OTL.exe
[2012/03/09 19:01:53 | 015,210,392 | —- | C] (SUPERAntiSpyware.com) – C:\Documents and Settings\Adnan\Desktop\SUPERAntiSpyware.exe
[2012/03/09 19:01:38 | 009,502,424 | —- | C] (Malwarebytes Corporation ) – C:\Documents and Settings\Adnan\Desktop\mbam-setup-1.60.1.1000.exe
[2012/03/09 18:34:55 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Adnan\Recent
[2012/02/24 20:03:28 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\BDLogging
[2012/02/24 20:02:45 | 000,016,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsgXP_2k3.dll
[2012/02/24 20:02:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Bitdefender 2012
[2012/02/24 20:02:24 | 000,000,000 | —D | C] – C:\Documents and Settings\Adnan\Application Data\Bitdefender
[2012/02/24 20:02:12 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Bitdefender
[2012/02/24 20:00:53 | 000,000,000 | —D | C] – C:\Documents and Settings\Adnan\Application Data\QuickScan
[2012/02/24 20:00:43 | 000,000,000 | —D | C] – C:\Program Files\Bitdefender
[2012/02/24 20:00:42 | 000,360,976 | —- | C] (BitDefender) – C:\WINDOWS\System32\drivers\bdfsfltr.sys
[2012/02/24 20:00:39 | 000,340,624 | —- | C] (BitDefender S.R.L.) – C:\WINDOWS\System32\drivers\trufos.sys
[2012/02/24 19:46:57 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Bitdefender
[2012/02/24 16:30:15 | 000,000,000 | —D | C] – C:\WINDOWS\pss
[2012/02/20 20:25:42 | 000,744,568 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symefa.sys
[2012/02/20 20:25:42 | 000,369,784 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symtdi.sys
[2012/02/20 20:25:42 | 000,340,088 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symds.sys
[2012/02/20 20:25:42 | 000,331,384 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symtdiv.sys
[2012/02/20 20:25:42 | 000,299,640 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnets.sys
[2012/02/20 20:25:41 | 000,516,216 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtsp.sys
[2012/02/20 20:25:41 | 000,136,312 | R— | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\ironx86.sys
[2012/02/20 20:25:41 | 000,050,168 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtspx.sys
[2012/02/20 20:25:27 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\N360\0502000.00D
[2012/02/15 14:54:08 | 000,000,000 | —D | C] – C:\N360_BACKUP
[2012/02/15 13:41:55 | 000,126,584 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2012/02/15 13:41:55 | 000,060,872 | —- | C] (Symantec Corporation) – C:\WINDOWS\System32\S32EVNT1.DLL
[2012/02/15 13:41:55 | 000,000,000 | —D | C] – C:\Program Files\Common Files\Symantec Shared
[2012/02/15 13:41:45 | 000,106,928 | —- | C] (GEAR Software Inc.) – C:\WINDOWS\System32\GEARAspi.dll
[2012/02/15 13:41:38 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\N360
[2012/02/15 13:41:37 | 000,000,000 | —D | C] – C:\Program Files\Windows Sidebar
[2012/02/15 13:41:30 | 000,000,000 | —D | C] – C:\Documents and Settings\Adnan\My Documents\Symantec
[2012/02/15 13:41:30 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\NortonInstaller
[2012/02/15 13:34:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Documents\Norton
[2012/02/15 13:34:24 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Norton
[2012/02/15 13:02:51 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Mitchell 1
[2012/02/15 13:02:38 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Adobe
[2012/02/15 13:02:22 | 001,238,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjt4jlt.dll
[2012/02/15 13:02:22 | 001,050,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjet35.dll
[2012/02/15 13:02:22 | 000,415,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msrepl35.dll
[2012/02/15 13:02:22 | 000,368,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\VBAR332.DLL
[2012/02/15 13:02:22 | 000,344,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msexch35.dll
[2012/02/15 13:02:22 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxbse35.dll
[2012/02/15 13:02:22 | 000,262,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msrd2x35.dll
[2012/02/15 13:02:22 | 000,252,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msexcl35.dll
[2012/02/15 13:02:22 | 000,250,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspdox35.dll
[2012/02/15 13:02:22 | 000,168,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msltus35.dll
[2012/02/15 13:02:22 | 000,166,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstext35.dll
[2012/02/15 13:02:22 | 000,044,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msrpfs35.dll
[2012/02/15 13:02:21 | 000,123,664 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjint35.dll
[2012/02/15 13:02:21 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\JETCOMP.exe
[2012/02/15 13:02:21 | 000,024,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msjter35.dll
[2012/02/15 13:02:19 | 000,000,000 | —D | C] – C:\Mitchell1
[2012/02/15 11:09:22 | 000,000,000 | —D | C] – C:\Mitchell
[2012/02/15 10:56:19 | 000,000,000 | —D | C] – C:\Documents and Settings\Adnan\Local Settings\Application Data\Western Digital
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/03/09 19:18:54 | 000,000,322 | —- | M] () – C:\WINDOWS\System32\checkdnsid.xml
[2012/03/09 19:18:05 | 000,593,920 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Adnan\Desktop\OTL.exe
[2012/03/09 19:02:03 | 015,210,392 | —- | M] (SUPERAntiSpyware.com) – C:\Documents and Settings\Adnan\Desktop\SUPERAntiSpyware.exe
[2012/03/09 19:01:51 | 009,502,424 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Adnan\Desktop\mbam-setup-1.60.1.1000.exe
[2012/03/09 18:42:04 | 087,031,672 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\avira_free_antivirus_en.exe
[2012/03/09 18:41:00 | 000,000,978 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-527237240-1801674531-1003UA.job
[2012/03/09 18:33:38 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2012/03/09 18:33:27 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2012/03/09 18:28:54 | 000,002,284 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\Google Chrome.lnk
[2012/03/09 18:28:54 | 000,002,262 | —- | M] () – C:\Documents and Settings\Adnan\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/03/09 17:03:38 | 000,057,846 | —- | M] () – C:\Documents and Settings\Adnan\My Documents\cc_20120309_170332.reg
[2012/03/09 15:03:04 | 000,000,422 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{0FA8D75F-DBBB-4C36-B782-5BC6A930EEB4}.job
[2012/03/08 20:41:00 | 000,000,926 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-527237240-1801674531-1003Core.job
[2012/03/08 10:25:19 | 000,015,451 | —- | M] () – C:\WINDOWS\od5.ini
[2012/02/24 20:41:12 | 000,583,818 | —- | M] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\Cat.DB
[2012/02/24 20:28:27 | 000,266,208 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2012/02/24 20:21:10 | 000,436,064 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2012/02/24 20:21:09 | 000,068,834 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2012/02/24 20:08:26 | 000,000,385 | —- | M] () – C:\WINDOWS\System32\user_gensett.xml
[2012/02/24 20:03:58 | 001,100,081 | —- | M] () – C:\Documents and Settings\All Users\Application Data\1330131624.bdinstall.bin
[2012/02/24 20:02:54 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2012/02/24 20:02:53 | 000,000,000 | -H– | M] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012/02/24 19:56:02 | 246,075,960 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\bitdefender_ts_2012_32b.exe
[2012/02/24 16:33:18 | 000,302,592 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\ql2s9dlq.exe
[2012/02/15 13:52:46 | 000,126,584 | —- | M] (Symantec Corporation) – C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2012/02/15 13:52:46 | 000,060,872 | —- | M] (Symantec Corporation) – C:\WINDOWS\System32\S32EVNT1.DLL
[2012/02/15 13:52:46 | 000,007,468 | —- | M] () – C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2012/02/15 13:52:46 | 000,000,806 | —- | M] () – C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2012/02/15 13:39:20 | 000,000,825 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\Norton Installation Files.lnk
[2012/02/15 13:03:00 | 000,000,048 | —- | M] () – C:\WINDOWS\PickList.ini
[2012/02/15 13:02:51 | 000,001,464 | —- | M] () – C:\Documents and Settings\All Users\Desktop\OnDemand5.lnk
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/03/09 18:42:03 | 087,031,672 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\avira_free_antivirus_en.exe
[2012/03/09 17:03:36 | 000,057,846 | —- | C] () – C:\Documents and Settings\Adnan\My Documents\cc_20120309_170332.reg
[2012/03/09 08:48:03 | 000,002,284 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\Google Chrome.lnk
[2012/03/07 13:52:53 | 000,000,322 | —- | C] () – C:\WINDOWS\System32\checkdnsid.xml
[2012/02/24 20:18:41 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2012/02/24 20:18:41 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\dllcache\iacenc.dll
[2012/02/24 20:08:26 | 000,000,385 | —- | C] () – C:\WINDOWS\System32\user_gensett.xml
[2012/02/24 20:03:58 | 001,100,081 | —- | C] () – C:\Documents and Settings\All Users\Application Data\1330131624.bdinstall.bin
[2012/02/24 20:02:54 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2012/02/24 20:02:53 | 000,000,000 | -H– | C] () – C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2012/02/24 19:52:29 | 246,075,960 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\bitdefender_ts_2012_32b.exe
[2012/02/24 16:33:17 | 000,302,592 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\ql2s9dlq.exe
[2012/02/21 09:35:59 | 000,583,818 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\Cat.DB
[2012/02/20 20:25:42 | 000,007,877 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnetv.cat
[2012/02/20 20:25:42 | 000,007,458 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnet.cat
[2012/02/20 20:25:42 | 000,007,456 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symefa.cat
[2012/02/20 20:25:42 | 000,003,373 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symefa.inf
[2012/02/20 20:25:42 | 000,001,473 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnetv.inf
[2012/02/20 20:25:42 | 000,001,445 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symnet.inf
[2012/02/20 20:25:41 | 000,007,528 | R— | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\iron.cat
[2012/02/20 20:25:41 | 000,007,454 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtspx.cat
[2012/02/20 20:25:41 | 000,007,450 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtsp.cat
[2012/02/20 20:25:41 | 000,002,792 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symds.inf
[2012/02/20 20:25:41 | 000,001,389 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtspx.inf
[2012/02/20 20:25:41 | 000,001,383 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\srtsp.inf
[2012/02/20 20:25:41 | 000,000,742 | R— | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\iron.inf
[2012/02/20 20:25:30 | 000,000,000 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\symds.cat
[2012/02/20 20:25:27 | 000,000,172 | —- | C] () – C:\WINDOWS\System32\drivers\N360\0502000.00D\isolate.ini
[2012/02/15 13:41:55 | 000,007,468 | —- | C] () – C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2012/02/15 13:41:55 | 000,000,806 | —- | C] () – C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2012/02/15 13:34:24 | 000,000,825 | —- | C] () – C:\Documents and Settings\Adnan\Desktop\Norton Installation Files.lnk
[2012/02/15 13:03:00 | 000,000,048 | —- | C] () – C:\WINDOWS\PickList.ini
[2012/02/15 13:02:52 | 000,015,451 | —- | C] () – C:\WINDOWS\od5.ini
[2012/02/15 13:02:51 | 000,001,464 | —- | C] () – C:\Documents and Settings\All Users\Desktop\OnDemand5.lnk
[2012/01/18 16:15:11 | 000,000,664 | —- | C] () – C:\WINDOWS\System32\d3d9caps.dat
[2011/01/14 20:11:57 | 000,000,383 | —- | C] () – C:\WINDOWS\System32\haspdos.sys
[2011/01/14 15:46:55 | 000,753,664 | —- | C] () – C:\WINDOWS\System32\bcm1xsup.dll
[2011/01/14 15:46:55 | 000,143,360 | —- | C] () – C:\WINDOWS\System32\preflib.dll
[2011/01/14 15:46:55 | 000,024,576 | —- | C] () – C:\WINDOWS\System32\WLTRYSVC.EXE
[2011/01/14 15:34:52 | 000,003,584 | —- | C] () – C:\Documents and Settings\Adnan\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/14 13:35:09 | 000,073,728 | —- | C] () – C:\WINDOWS\System32\RtNicProp32.dll
[2011/01/14 12:58:57 | 000,204,800 | —- | C] () – C:\WINDOWS\System32\igfxCoIn_v4820.dll
[2011/01/13 16:24:44 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/01/13 16:20:45 | 000,021,640 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/01/13 08:09:04 | 000,004,161 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2011/01/13 08:08:01 | 000,266,208 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
========== LOP Check ==========
[2012/02/24 20:09:39 | 000,000,000 | —D | M] – C:\Documents and Settings\Adnan\Application Data\Bitdefender
[2012/01/06 15:59:03 | 000,000,000 | —D | M] – C:\Documents and Settings\Adnan\Application Data\ESET
[2012/02/24 20:00:53 | 000,000,000 | —D | M] – C:\Documents and Settings\Adnan\Application Data\QuickScan
[2012/02/19 01:23:28 | 000,000,000 | —D | M] – C:\Documents and Settings\Adnan\Application Data\TeamViewer
[2012/02/24 20:03:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BDLogging
[2012/02/24 20:03:28 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Bitdefender
[2012/01/27 14:31:33 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\LogMeIn
[2011/09/29 14:25:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Trusteer
[2011/01/14 21:14:20 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\{CBCE2F73-24E4-481F-84B2-1A5EB720D187}
[2012/03/09 15:03:04 | 000,000,422 | -H– | M] () – C:\WINDOWS\Tasks\User_Feed_Synchronization-{0FA8D75F-DBBB-4C36-B782-5BC6A930EEB4}.job
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*.* >
[2012/01/14 14:30:52 | 000,001,024 | —- | M] () – C:\.rnd
[2011/01/13 16:23:11 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2012/03/09 18:32:12 | 000,002,838 | —- | M] () – C:\bdlog.txt
[2011/01/13 16:18:41 | 000,000,321 | -HS- | M] () – C:\boot.ini
[2011/01/13 16:23:11 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/01/13 16:23:11 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/01/13 16:23:11 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2008/04/14 07:00:00 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2008/04/14 07:00:00 | 000,250,048 | RHS- | M] () – C:\ntldr
[2012/03/09 18:33:18 | 2145,386,496 | -HS- | M] () – C:\pagefile.sys
[2012/02/24 16:24:30 | 000,113,446 | —- | M] () – C:\TDSSKiller.2.7.14.0_24.02.2012_16.23.14_log.txt
[2012/02/24 16:32:55 | 000,050,830 | —- | M] () – C:\TDSSKiller.2.7.14.0_24.02.2012_16.32.32_log.txt
< %systemroot%\Fonts\*.com >
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
< %systemroot%\Fonts\*.dll >
< %systemroot%\Fonts\*.ini >
[2011/01/13 16:22:53 | 000,000,067 | -HS- | M] () – C:\WINDOWS\Fonts\desktop.ini
< %systemroot%\Fonts\*.ini2 >
< %systemroot%\Fonts\*.exe >
< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2008/07/06 07:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
[2011/12/07 18:22:08 | 000,052,096 | —- | M] (LogMeIn, Inc.) – C:\WINDOWS\system32\spool\prtprocs\w32x86\LMIproc.dll
[2006/10/26 22:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\msonpppr.dll
[2008/07/06 05:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
< %systemroot%\REPAIR\*.bak1 >
< %systemroot%\REPAIR\*.ini >
< %systemroot%\system32\*.jpg >
< %systemroot%\*.jpg >
< %systemroot%\*.png >
< %systemroot%\*.scr >
< %systemroot%\*._sy >
< %APPDATA%\Adobe\Update\*.* >
< %ALLUSERSPROFILE%\Favorites\*.* >
< %APPDATA%\Microsoft\*.* >
< %PROGRAMFILES%\*.* >
< %APPDATA%\Update\*.* >
< %systemroot%\*. /mp /s >
< %systemroot%\System32\config\*.sav >
[2011/01/13 08:06:30 | 000,094,208 | —- | M] () – C:\WINDOWS\System32\config\default.sav
[2011/01/13 08:06:30 | 001,089,536 | —- | M] () – C:\WINDOWS\System32\config\software.sav
[2011/01/13 08:06:30 | 000,942,080 | —- | M] () – C:\WINDOWS\System32\config\system.sav
< %PROGRAMFILES%\bak. /s >
< %systemroot%\system32\bak. /s >
< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >
[2011/01/13 16:23:16 | 000,000,294 | -HS- | M] () – C:\Documents and Settings\All Users\Start Menu\desktop.ini
< %systemroot%\system32\config\systemprofile\*.dat /x >
< %systemroot%\*.config >
< %systemroot%\system32\*.db >
< %PROGRAMFILES%\Internet Explorer\*.dat >
< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/01/13 16:32:01 | 000,000,119 | -HS- | M] () – C:\Documents and Settings\Adnan\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini
[2011/01/13 16:32:00 | 000,000,079 | —- | M] () – C:\Documents and Settings\Adnan\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf
< %USERPROFILE%\Desktop\*.exe >
[2012/03/09 18:42:04 | 087,031,672 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\avira_free_antivirus_en.exe
[2012/02/24 19:56:02 | 246,075,960 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\bitdefender_ts_2012_32b.exe
[2012/03/09 19:01:51 | 009,502,424 | —- | M] (Malwarebytes Corporation ) – C:\Documents and Settings\Adnan\Desktop\mbam-setup-1.60.1.1000.exe
[2012/03/09 19:18:05 | 000,593,920 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Adnan\Desktop\OTL.exe
[2012/02/24 16:33:18 | 000,302,592 | —- | M] () – C:\Documents and Settings\Adnan\Desktop\ql2s9dlq.exe
[2011/09/17 08:15:08 | 034,168,361 | —- | M] (WORLDPAC ) – C:\Documents and Settings\Adnan\Desktop\speedDIALInstall.exe
[2012/03/09 19:02:03 | 015,210,392 | —- | M] (SUPERAntiSpyware.com) – C:\Documents and Settings\Adnan\Desktop\SUPERAntiSpyware.exe
< %PROGRAMFILES%\Common Files\*.* >
< %systemroot%\*.src >
< %systemroot%\install\*.* >
< %systemroot%\system32\DLL\*.* >
< %systemroot%\system32\HelpFiles\*.* >
< %systemroot%\system32\rundll\*.* >
< %systemroot%\winn32\*.* >
< %systemroot%\Java\*.* >
< %systemroot%\system32\test\*.* >
< %systemroot%\system32\Rundll32\*.* >
< %systemroot%\AppPatch\Custom\*.* >
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-01-14 18:26:06
========== Alternate Data Streams ==========
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Adnan\Desktop\SUPERAntiSpyware.exe:BDU
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Adnan\Desktop\OTL.exe:BDU
@Alternate Data Stream - 16 bytes -> C:\Documents and Settings\Adnan\Desktop\mbam-setup-1.60.1.1000.exe:BDU
< End of report >
OTL Extras logfile created on: 3/9/2012 7:31:19 PM - Run 1
OTL by OldTimer - Version 3.2.36.2 Folder = C:\Documents and Settings\Adnan\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.24 Gb Total Physical Memory | 2.67 Gb Available Physical Memory | 82.41% Memory free
5.08 Gb Paging File | 4.54 Gb Available in Paging File | 89.35% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 586.41 Gb Total Space | 307.15 Gb Free Space | 52.38% Space Free | Partition Type: NTFS
Computer Name: ADNAN-339E95D84 | User Name: Adnan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application – (TeamViewer GmbH)
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe" = C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service – (TeamViewer GmbH)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}" = Rapport
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2AB9289D-6432-4CC0-8869-A195C3F0CFCC}" = Bitdefender Total Security 2012
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{5F7DFDFA-27B3-4E06-BCDE-B371424C0032}" = OnDemand5
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7236672F-6430-439E-9B27-27EDEAF1D676}" = Diagnostic Utility
"{73090A5A-E0C0-4E0B-A320-E183877061A5}" = ALLDATA Repair
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{926CC8AE-8414-43DF-8EB4-CF26D9C3C663}" =
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{976475B8-63E9-4559-BE2C-D26086BE4C40}" = LogMeIn
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.2)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C73A3942-84C8-4597-9F9B-EE227DCBA758}" = Dell Dock
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"Bitdefender" = Bitdefender Total Security 2012
"Broadcom 802.11 Application" = Dell Wireless WLAN Card Utility
"CCleaner" = CCleaner
"Dell Dock" = Dell Dock
"ENTERPRISE" = Microsoft Office Enterprise 2007
"HDMI" = Intel® Graphics Media Accelerator Driver
"ie8" = Windows Internet Explorer 8
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Nero - Burning Rom!UninstallKey" = Nero - Burning Rom (Web installer)
"Rapport_msi" = Rapport
"TeamViewer 7" = TeamViewer 7
"VLC media player" = VLC media player 1.1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WinRAR archiver" = WinRAR archiver
"WORLDPAC speedDIAL_is1" = WORLDPAC speedDIAL
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Move Media Player" = Move Media Player
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 1/24/2012 7:33:29 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/24/2012 7:35:48 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/25/2012 7:50:02 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/25/2012 7:50:16 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1001
Description = Fault bucket -2070362295.
Error - 1/25/2012 7:53:57 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/25/2012 8:03:05 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/26/2012 10:01:59 AM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/26/2012 2:18:29 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/26/2012 2:20:36 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
Error - 1/26/2012 2:52:04 PM | Computer Name = ADNAN-339E95D84 | Source = Application Error | ID = 1000
Description = Faulting application iexplore.exe, version 8.0.6001.18702, faulting
module mshtml.dll, version 8.0.6001.18999, fault address 0x000678b8.
[ System Events ]
Error - 3/7/2012 10:36:01 AM | Computer Name = ADNAN-339E95D84 | Source = Service Control Manager | ID = 7000
Description = The Norton Security Suite service failed to start due to the following
error: %%3
Error - 3/7/2012 10:36:13 AM | Computer Name = ADNAN-339E95D84 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service LogMeIn with
arguments "" in order to run the server: {C3ADA61A-4E0E-48D4-A2B1-AE5F76D01044}
Error - 3/7/2012 12:58:03 PM | Computer Name = ADNAN-339E95D84 | Source = Service Control Manager | ID = 7000
Description = The Norton Security Suite service failed to start due to the following
error: %%3
Error - 3/7/2012 12:58:39 PM | Computer Name = ADNAN-339E95D84 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service LogMeIn with
arguments "" in order to run the server: {C3ADA61A-4E0E-48D4-A2B1-AE5F76D01044}
Error - 3/9/2012 7:21:42 PM | Computer Name = ADNAN-339E95D84 | Source = Service Control Manager | ID = 7000
Description = The Norton Security Suite service failed to start due to the following
error: %%3
Error - 3/9/2012 7:34:03 PM | Computer Name = ADNAN-339E95D84 | Source = Service Control Manager | ID = 7000
Description = The Norton Security Suite service failed to start due to the following
error: %%3
Error - 3/9/2012 7:35:17 PM | Computer Name = ADNAN-339E95D84 | Source = DCOM | ID = 10005
Description = DCOM got error "%1058" attempting to start the service LogMeIn with
arguments "" in order to run the server: {C3ADA61A-4E0E-48D4-A2B1-AE5F76D01044}
Error - 3/9/2012 7:57:43 PM | Computer Name = ADNAN-339E95D84 | Source = Srv | ID = 2000
Description = The server's call to a system service failed unexpectedly.
Error - 3/9/2012 7:57:43 PM | Computer Name = ADNAN-339E95D84 | Source = Srv | ID = 2000
Description = The server's call to a system service failed unexpectedly.
Error - 3/9/2012 7:58:32 PM | Computer Name = ADNAN-339E95D84 | Source = Server | ID = 2505
Description = The server could not bind to the transport \Device\NetbiosSmb because
another computer on the network has the same name. The server could not start.
< End of report >