System hangs and continual activity light flashing [Closed] [Solved]

While using my Dell Inspiron 518 running Vista 64bit with 4G memory, it will repeatedly hang and have a spinning circle for 20 to 30 seconds. My pc activity light on my cable modem and disk activity light on my PC continually flash. Attached is the OTL.text file. It did not create an EXTRA.txt file
Can someone see why my system hangs?

OTL logfile created on: 3/20/2012 7:27:01 AM - Run 5
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\kevin\Desktop\highjackthis
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 34.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 70.00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 901.41 Gb Total Space | 325.71 Gb Free Space | 36.13% Space Free | Partition Type: NTFS
Drive D: | 30.00 Gb Total Space | 23.74 Gb Free Space | 79.15% Space Free | Partition Type: NTFS
Drive E: | 465.76 Gb Total Space | 16.89 Gb Free Space | 3.63% Space Free | Partition Type: NTFS
Drive F: | 232.88 Gb Total Space | 77.93 Gb Free Space | 33.46% Space Free | Partition Type: NTFS
Drive H: | 1.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: CZARNOTA-FAMILY | User Name: kevin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
PRC - C:\Users\kevin\Desktop\highjackthis\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - c:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Logitech Inc.)


========== Modules (SafeList) ==========

MOD - C:\Users\kevin\Desktop\highjackthis\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrcInj.dll (Logitech Inc.)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SRV:64bit: - (ZuneWlanCfgSvc) – C:\Program Files\Zune\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV:64bit: - (WMZuneComm) – C:\Program Files\Zune\WMZuneComm.exe (Microsoft Corporation)
SRV:64bit: - (ZuneNetworkSvc) – C:\Program Files\Zune\ZuneNss.exe (Microsoft Corporation)
SRV:64bit: - (ReflectService) – C:\Program Files\Macrium\Reflect\ReflectService.exe ()
SRV:64bit: - (LBTServ) – C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (NisSrv) – c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) – c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (CarboniteService) – C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe (Carbonite, Inc. (www.carbonite.com))
SRV:64bit: - (MSCamSvc) – C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV:64bit: - (AERTFilters) – C:\Windows\SysNative\AERTSr64.exe (Andrea Electronics Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (LVSrvLauncher) – C:\Program Files\Common Files\logishrd\SrvLnch\SrvLnch.exe (Logitech Inc.)
SRV:64bit: - (LVPrcS64) – c:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ShowAnalyzerMaster) – C:\Program Files (x86)\Dragon Global\ShowAnalyzerSuite\ShowAnalyzerMaster.exe (Dragon Global)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION)
SRV - (AOL ACS) – C:\Program Files (x86)\Common Files\AOL\ACS\AOLAcsd.exe (AOL LLC)


========== Driver Services (SafeList) ==========

DRV:64bit: - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (PSMounter) – C:\Windows\SysNative\drivers\psmounter.sys (Macrium Software)
DRV:64bit: - (motusbdevice) – C:\Windows\SysNative\DRIVERS\motusbdevice.sys (Motorola Inc)
DRV:64bit: - (LUsbFilt) – C:\Windows\SysNative\Drivers\LUsbFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) – C:\Windows\SysNative\DRIVERS\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LMouFilt) – C:\Windows\SysNative\DRIVERS\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (NisDrv) – C:\Windows\SysNative\DRIVERS\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (motccgp) – C:\Windows\SysNative\DRIVERS\motccgp.sys (Motorola)
DRV:64bit: - (motmodem) – C:\Windows\SysNative\DRIVERS\motmodem.sys (Motorola)
DRV:64bit: - (MSHUSBVideo) – C:\Windows\SysNative\Drivers\nx6000.sys (Microsoft Corporation)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek )
DRV:64bit: - (timounter) – C:\Windows\SysNative\DRIVERS\timntr.sys (Acronis)
DRV:64bit: - (tifsfilter) – C:\Windows\SysNative\DRIVERS\tifsfilt.sys (Acronis)
DRV:64bit: - (Motousbnet) – C:\Windows\SysNative\DRIVERS\Motousbnet.sys (Motorola)
DRV:64bit: - (ATIAVPCI) – C:\Windows\SysNative\DRIVERS\atinavrr.sys (ATI Technologies Inc.)
DRV:64bit: - (WpdUsb) – C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (AuviPCI) – C:\Windows\SysNative\DRIVERS\AuviPCI64.sys (Auvitek Corp.)
DRV:64bit: - (motccgpfl) – C:\Windows\SysNative\DRIVERS\motccgpfl.sys (Motorola)
DRV:64bit: - (BTCFilterService) – C:\Windows\SysNative\DRIVERS\motfilt.sys (Motorola Inc)
DRV:64bit: - (RimVSerPort) – C:\Windows\SysNative\DRIVERS\RimSerial_AMD64.sys (Research in Motion Ltd)
DRV:64bit: - (igfx) – C:\Windows\SysNative\DRIVERS\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iastor.sys (Intel Corporation)
DRV:64bit: - (SQTECH9052) – C:\Windows\SysNative\Drivers\Capt9052.sys (Service & Quality Technology.)
DRV:64bit: - (ROOTMODEM) – C:\Windows\SysNative\Drivers\RootMdm.sys (Microsoft Corporation)
DRV:64bit: - (e1express) Intel® – C:\Windows\SysNative\DRIVERS\e1e6032e.sys (Intel Corporation)
DRV:64bit: - (MotoSwitchService) – C:\Windows\SysNative\DRIVERS\motswch.sys (Motorola)
DRV:64bit: - (FlyUsb) – C:\Windows\SysNative\DRIVERS\FlyUsb.sys (LeapFrog)
DRV:64bit: - (SQTECH905C) – C:\Windows\SysNative\Drivers\Capt905c.sys (Service & Quality Technology.)
DRV:64bit: - (LVPr2Mon) – C:\Windows\SysNative\DRIVERS\LVPr2Mon.sys ()
DRV:64bit: - (LVMVDrv) – C:\Windows\SysNative\DRIVERS\LVMVDrv.sys (Logitech Inc.)
DRV:64bit: - (LVcKap64) – C:\Windows\SysNative\DRIVERS\LVcKap64.sys (Logitech Inc.)
DRV:64bit: - (LVUSBS64) – C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.)
DRV:64bit: - (CamDrL64) Logitech QuickCam Pro 3000(PID_08B0) – C:\Windows\SysNative\DRIVERS\CamDrL64.sys (Logitech Inc.)
DRV:64bit: - (wanatw) WAN Miniport (ATW) – C:\Windows\SysNative\DRIVERS\wanatw64.sys (America Online, Inc.)
DRV:64bit: - (R300) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\Wbem\ntfs.mof ()

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nickjr.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.techsupportalert.com/"
FF - prefs.js..extensions.enabledItems: {FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}:1.3.5
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.5.21amo
FF - prefs.js..extensions.enabledItems: {AF445D67-154C-4c69-A17B-7F392BCC36A3}:1.0.16
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {340c2bbc-ce74-4362-90b5-7c26312808ef}:1.7
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22


FF - HKLM\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/18 22:25:00 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/11/11 21:11:04 | 000,000,000 | —D | M]

[2009/01/16 15:36:21 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Extensions
[2012/02/26 23:18:57 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions
[2011/08/28 17:33:30 | 000,000,000 | —D | M] (Garmin Communicator) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2011/03/09 20:15:19 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}-trash
[2011/12/23 20:38:17 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009/09/14 13:04:52 | 000,000,000 | —D | M] (IE View Lite) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}
[2011/08/16 19:19:29 | 000,000,000 | —D | M] (Разпознаване на устройство Logitech) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\[removed]
[2011/11/13 10:17:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
File not found (No name found) –
() (No name found) – C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TU1FLXA4.DEFAULT\EXTENSIONS\[removed]
() (No name found) – C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TU1FLXA4.DEFAULT\EXTENSIONS\[removed]
[2012/03/18 22:25:00 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/06/19 10:00:07 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\Mozilla Firefox\plugins\NPcol400.dll
[2011/06/19 10:00:07 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\Mozilla Firefox\plugins\NPcol500.dll
[2011/07/03 12:41:05 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2011/11/13 10:17:14 | 000,002,252 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml
[2011/11/13 10:17:13 | 000,002,040 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2006/09/18 16:37:24 | 000,000,761 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Carbonite Backup] C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stoic Joker's T-Clock x64.lnk = C:\Program Files (x86)\Tclock\tclock-x64\Clock.exe (Stoic Joker's Network)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - ..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O15 - HKCU\..Trusted Domains: localhost ([]* in Local intranet)
O15 - HKCU\..Trusted Domains: turbotax.com ([]https in Trusted sites)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.1.0)
O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files%20(x86)/Virtual%20Families/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8714912E-380D-11D5-B8AA-00D0B78F3D48} http://chat.yahoo.com/cab/yuplapp.cab (Yahoo! Webcam Upload Wrapper)
O16 - DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://support.dell.com/systemprofiler/DellSystemLite.CAB (DellSystemLite.Scanner)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files%20(x86)/Peggle/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] 192.168.1.1
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img36.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img36.jpg
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{2f67cbc8-c8ce-11e0-8c1d-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{2f67cbc8-c8ce-11e0-8c1d-00038a000015}\Shell\AutoRun\command - "" = G:\setup.exe -a
O33 - MountPoints2\{351e0dd2-ef3d-11de-8bf7-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{351e0dd2-ef3d-11de-8bf7-00038a000015}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O33 - MountPoints2\{4dec99d4-9054-11df-a94b-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{4dec99d4-9054-11df-a94b-00038a000015}\Shell\AutoRun\command - "" = I:\LaunchU3.exe -a
O33 - MountPoints2\{aa8c2ee8-950a-11e0-9929-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{aa8c2ee8-950a-11e0-9929-00038a000015}\Shell\AutoRun\command - "" = G:\TLBootstrap_WPP.exe
O33 - MountPoints2\{e245a782-9507-11e0-a4fc-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{e245a782-9507-11e0-a4fc-00038a000015}\Shell\AutoRun\command - "" = G:\TLBootstrap_WPP.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*


Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32:64bit: vidc.i420 - lvcod64.dll (Logitech Inc.)
Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - File not found
Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\SysWow64\ff_vfw.dll ()
Drivers32: vidc.i420 - C:\Windows\SysWow64\lvcodec2.dll (Logitech Inc.)
Drivers32: VIDC.WMV3 - C:\Windows\SysWow64\wmv9vcm.dll (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/03/13 20:20:28 | 001,555,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2012/03/13 20:20:28 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2012/03/13 20:20:27 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2012/03/13 20:20:27 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2012/03/13 20:20:27 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2012/03/13 20:20:23 | 002,002,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2012/03/13 20:20:19 | 000,683,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2012/03/13 20:20:18 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2012/03/13 20:20:14 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2012/03/13 20:20:14 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2012/03/13 20:14:32 | 000,708,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2012/03/13 20:14:20 | 000,613,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2012/02/27 12:09:00 | 000,000,000 | —D | C] – C:\Users\kevin\AppData\Roaming\Yahoo!
[2012/02/24 15:44:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger
[2012/02/20 10:18:20 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avidemux
[2012/02/20 10:18:08 | 000,000,000 | —D | C] – C:\Program Files\Avidemux 2.5
[2002/03/11 04:06:30 | 001,822,520 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\instmsiw.exe
[2002/03/11 03:45:04 | 001,708,856 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\instmsia.exe
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/03/20 07:00:04 | 000,000,406 | —- | M] () – C:\Windows\tasks\AutoSmartDefrag.job
[2012/03/20 06:07:34 | 000,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/20 06:07:33 | 000,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/20 03:02:59 | 000,000,510 | —- | M] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job
[2012/03/20 01:59:59 | 000,000,510 | —- | M] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/19 19:15:45 | 000,645,624 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/03/19 19:15:45 | 000,120,716 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/03/19 19:15:38 | 000,763,778 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/03/18 20:07:40 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/03/15 10:05:30 | 000,002,643 | —- | M] () – C:\Users\kevin\Desktop\Microsoft Outlook 2010.lnk
[2012/03/15 09:30:11 | 000,016,262 | —- | M] () – C:\Users\kevin\Documents\2012TagRenewal.PDF
[2012/03/13 20:50:09 | 000,406,552 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/03/11 12:05:14 | 000,002,637 | —- | M] () – C:\Users\kevin\Desktop\Microsoft Word 2010.lnk
[2012/03/04 21:40:26 | 000,003,053 | —- | M] () – C:\Users\kevin\Desktop\Macrium Reflect.lnk
[2012/02/21 11:30:28 | 000,001,326 | —- | M] () – C:\Users\kevin\Documents\passwords-txt.axx
[2012/02/20 15:23:50 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/02/20 10:18:20 | 000,000,797 | —- | M] () – C:\Users\Public\Desktop\Avidemux 2.5.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/03/19 20:18:43 | 000,000,510 | —- | C] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job
[2012/03/19 20:18:43 | 000,000,510 | —- | C] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/15 09:30:10 | 000,016,262 | —- | C] () – C:\Users\kevin\Documents\2012TagRenewal.PDF
[2012/03/04 21:40:26 | 000,003,053 | —- | C] () – C:\Users\kevin\Desktop\Macrium Reflect.lnk
[2012/02/20 10:18:20 | 000,000,797 | —- | C] () – C:\Users\Public\Desktop\Avidemux 2.5.lnk
[2011/08/11 15:23:35 | 000,000,185 | —- | C] () – C:\Windows\WININIT.INI
[2011/08/11 15:19:23 | 000,000,000 | —- | C] () – C:\Windows\setup32.INI
[2011/07/28 16:51:56 | 000,000,510 | —- | C] () – C:\Windows\WORDPAD.INI
[2011/04/11 17:06:44 | 000,000,732 | —- | C] () – C:\Users\kevin\AppData\Local\d3d9caps64.dat
[2011/02/20 15:30:36 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/12/28 20:51:23 | 000,057,344 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/12/24 10:01:53 | 000,758,692 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/20 13:39:48 | 000,000,173 | —- | C] () – C:\Users\kevin\AppData\Local\rahistory.xml
[2010/07/16 12:10:49 | 000,000,256 | —- | C] () – C:\Windows\SysWow64\pool.bin
[2010/04/11 10:39:24 | 000,000,004 | —- | C] () – C:\Windows\msoffice.ini
[2009/12/23 13:27:26 | 000,000,094 | —- | C] () – C:\Windows\family.ini
[2009/11/22 12:27:51 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/11/22 12:27:30 | 000,107,612 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/11/22 12:27:11 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/01/26 17:17:15 | 000,000,154 | —- | C] () – C:\Windows\[removed]
[2009/01/26 12:23:01 | 000,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2009/01/25 18:15:36 | 000,000,411 | —- | C] () – C:\Windows\COOK'N5.INI
[2009/01/17 11:17:05 | 000,210,944 | —- | C] () – C:\Windows\SysWow64\Msvcrt10.dll
[2009/01/17 10:50:20 | 000,073,220 | —- | C] () – C:\Windows\SysWow64\EPPICPrinterDB.dat
[2009/01/17 10:50:20 | 000,031,053 | —- | C] () – C:\Windows\SysWow64\EPPICPattern131.dat
[2009/01/17 10:50:20 | 000,029,114 | —- | C] () – C:\Windows\SysWow64\EPPICPattern1.dat
[2009/01/17 10:50:20 | 000,027,417 | —- | C] () – C:\Windows\SysWow64\EPPICPattern121.dat
[2009/01/17 10:50:20 | 000,021,021 | —- | C] () – C:\Windows\SysWow64\EPPICPattern3.dat
[2009/01/17 10:50:20 | 000,015,670 | —- | C] () – C:\Windows\SysWow64\EPPICPattern5.dat
[2009/01/17 10:50:20 | 000,013,280 | —- | C] () – C:\Windows\SysWow64\EPPICPattern2.dat
[2009/01/17 10:50:20 | 000,010,673 | —- | C] () – C:\Windows\SysWow64\EPPICPattern4.dat
[2009/01/17 10:50:20 | 000,004,943 | —- | C] () – C:\Windows\SysWow64\EPPICPattern6.dat
[2009/01/17 10:50:20 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2009/01/17 10:50:20 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2009/01/17 10:50:20 | 000,001,137 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2009/01/17 10:50:20 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2009/01/17 10:50:20 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2009/01/17 10:50:20 | 000,001,104 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2009/01/17 10:50:20 | 000,000,097 | —- | C] () – C:\Windows\SysWow64\PICSDK.ini
[2009/01/17 10:23:27 | 000,005,216 | —- | C] () – C:\Users\kevin\AppData\Local\d3d9caps.dat
[2009/01/16 21:34:27 | 000,062,976 | —- | C] () – C:\Users\kevin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/01/16 16:30:17 | 000,000,335 | —- | C] () – C:\Windows\nsreg.dat
[2009/01/14 02:07:05 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2008/09/30 12:06:06 | 128,535,711 | —- | C] () – C:\Program Files (x86)\openofficeorg1.cab
[2008/09/30 11:29:36 | 000,000,217 | —- | C] () – C:\Program Files (x86)\setup.ini
[2008/09/30 11:29:32 | 009,772,544 | —- | C] () – C:\Program Files (x86)\openofficeorg30.msi
[2008/09/18 11:08:54 | 000,424,728 | —- | C] () – C:\Program Files (x86)\setup.exe
[2008/01/20 21:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 10:37:05 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 07:37:14 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2006/11/02 07:24:17 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 07:18:17 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2006/11/02 04:47:54 | 000,043,131 | —- | C] () – C:\Windows\mib.bin

========== LOP Check ==========

[2009/06/21 13:50:26 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\AlwaysNeat
[2010/03/02 13:08:18 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Auslogics
[2012/01/15 09:00:02 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\avidemux
[2009/01/23 20:51:56 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Bullzip
[2011/06/19 10:00:07 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Catalina Marketing Corp
[2010/03/29 10:19:58 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/05/26 09:02:40 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\com.picaboo.Picaboo.A382D4714709B456C4E0088DFC1F7243AF9EBF75.1
[2011/12/23 16:23:34 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Disney Pix 3.2
[2010/10/01 10:43:02 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\DriverCure
[2010/05/19 18:53:41 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\EA
[2010/07/27 15:11:02 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\EPIM Synchronizer
[2011/07/22 21:38:15 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\EPSON
[2012/03/15 09:54:14 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\EssentialPIM
[2010/08/12 18:56:59 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Floodlight Games
[2011/06/10 17:57:50 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\funkitron
[2011/08/28 17:33:38 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Garmin
[2009/05/11 14:45:32 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\gemsweeperextractedgfx
[2011/11/01 20:29:39 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\GlarySoft
[2009/12/23 14:25:00 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\HotSync
[2011/10/05 17:12:09 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\ImgBurn
[2009/12/22 14:30:26 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\IObit
[2010/05/24 20:45:19 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Jumping Bytes
[2012/03/04 19:42:17 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\KumoSync
[2011/08/16 21:04:10 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Leadertech
[2009/01/23 21:16:09 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\OpenOffice.org
[2010/09/07 22:08:43 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\PeaceCraft2
[2009/12/22 14:58:57 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\PlayFirst
[2010/11/22 21:23:33 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Playrix Entertainment
[2012/01/23 22:20:14 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\PTC
[2011/09/06 10:45:29 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Quest Software
[2011/12/21 17:45:04 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Softland
[2011/08/08 16:56:35 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\WendigoStudios
[2010/08/09 14:23:47 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Western Software Technologies
[2011/11/28 18:51:27 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\Xerox
[2010/05/31 13:08:21 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\XnView
[2011/03/01 19:42:46 | 000,000,000 | —D | M] – C:\Users\kevin\AppData\Roaming\YoudaGames
[2012/03/20 07:00:04 | 000,000,406 | —- | M] () – C:\Windows\Tasks\AutoSmartDefrag.job
[2012/03/18 17:34:36 | 000,032,644 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT
[2012/03/20 01:59:59 | 000,000,510 | —- | M] () – C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/20 03:02:59 | 000,000,510 | —- | M] () – C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2010/05/28 15:06:52 | 000,010,920 | —- | M] () – C:\aolconnfix.exe
[2010/05/28 15:06:52 | 000,001,039 | —- | M] () – C:\aolconnfix.txt
[2011/03/11 20:19:26 | 3997,528,064 | —- | M] () – C:\BOB_LIVE.ISO
[2009/04/11 01:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2009/01/14 02:11:15 | 000,004,257 | RH– | M] () – C:\dell.sdr
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1028.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1031.txt
[2007/11/07 09:00:40 | 000,010,134 | —- | M] () – C:\eula.1033.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1036.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1040.txt
[2007/11/07 09:00:40 | 000,000,118 | —- | M] () – C:\eula.1041.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.1042.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.2052.txt
[2007/11/07 09:00:40 | 000,017,734 | —- | M] () – C:\eula.3082.txt
[2007/11/07 09:00:40 | 000,001,110 | —- | M] () – C:\globdata.ini
[2007/11/07 09:03:18 | 000,562,688 | —- | M] (Microsoft Corporation) – C:\install.exe
[2007/11/07 09:00:40 | 000,000,843 | —- | M] () – C:\install.ini
[2011/02/19 23:11:16 | 000,031,163 | —- | M] () – C:\install.log
[2007/11/07 09:03:18 | 000,076,304 | —- | M] (Microsoft Corporation) – C:\install.res.1028.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.1031.dll
[2007/11/07 09:03:18 | 000,091,152 | —- | M] (Microsoft Corporation) – C:\install.res.1033.dll
[2007/11/07 09:03:18 | 000,097,296 | —- | M] (Microsoft Corporation) – C:\install.res.1036.dll
[2007/11/07 09:03:18 | 000,095,248 | —- | M] (Microsoft Corporation) – C:\install.res.1040.dll
[2007/11/07 09:03:18 | 000,081,424 | —- | M] (Microsoft Corporation) – C:\install.res.1041.dll
[2007/11/07 09:03:18 | 000,079,888 | —- | M] (Microsoft Corporation) – C:\install.res.1042.dll
[2007/11/07 09:03:18 | 000,075,792 | —- | M] (Microsoft Corporation) – C:\install.res.2052.dll
[2007/11/07 09:03:18 | 000,096,272 | —- | M] (Microsoft Corporation) – C:\install.res.3082.dll
[2005/09/23 01:39:38 | 000,894,976 | —- | M] (Microsoft Corporation) – C:\msdia80.dll
[2012/03/18 20:07:24 | 302,272,511 | -HS- | M] () – C:\pagefile.sys
[2012/01/16 13:59:53 | 000,052,420 | —- | M] () – C:\ptcsetup.log
[2011/12/22 15:03:19 | 000,000,169 | —- | M] () – C:\setup.log
[2011/12/19 13:27:17 | 000,151,042 | —- | M] () – C:\TDSSKiller.2.6.23.0_19.12.2011_12.26.02_log.txt
[2007/11/07 09:00:40 | 000,005,686 | —- | M] () – C:\vcredist.bmp
[2007/11/07 09:09:22 | 001,442,522 | —- | M] () – C:\VC_RED.cab
[2007/11/07 09:12:28 | 000,232,960 | —- | M] () – C:\VC_RED.MSI

< %systemroot%\Fonts\*.com >
[2006/11/02 10:06:41 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 10:06:41 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 10:06:41 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2010/12/26 22:53:12 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 16:35:48 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/20 22:21:59 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini
[2002/03/11 03:45:04 | 001,708,856 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\instmsia.exe
[2002/03/11 04:06:30 | 001,822,520 | —- | M] (Microsoft Corporation) – C:\Program Files (x86)\instmsiw.exe
[2008/09/30 12:06:06 | 128,535,711 | —- | M] () – C:\Program Files (x86)\openofficeorg1.cab
[2008/09/30 11:29:32 | 009,772,544 | —- | M] () – C:\Program Files (x86)\openofficeorg30.msi
[2008/09/18 11:08:54 | 000,424,728 | —- | M] () – C:\Program Files (x86)\setup.exe
[2008/09/30 11:29:36 | 000,000,217 | —- | M] () – C:\Program Files (x86)\setup.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2012/02/16 15:49:21 | 000,000,574 | -HS- | M] () – C:\Users\kevin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:7E927D7D
@Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:E962FBDB
@Alternate Data Stream - 239 bytes -> C:\ProgramData\TEMP:F0A06891
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:E7B4296D
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:BACB6B6C
@Alternate Data Stream - 235 bytes -> C:\ProgramData\TEMP:38FF076E
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:E5BA9ADD
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:CC4C59B4
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:09867A8B
@Alternate Data Stream - 227 bytes -> C:\ProgramData\TEMP:D93AABC7
@Alternate Data Stream - 226 bytes -> C:\ProgramData\TEMP:571CCF8E
@Alternate Data Stream - 224 bytes -> C:\ProgramData\TEMP:92EDCBF3
@Alternate Data Stream - 223 bytes -> C:\ProgramData\TEMP:BEB6D0B2
@Alternate Data Stream - 223 bytes -> C:\ProgramData\TEMP:2D3CB929
@Alternate Data Stream - 222 bytes -> C:\ProgramData\TEMP:15E76ABF
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:F5FC5DCE
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:A774141A
@Alternate Data Stream - 217 bytes -> C:\ProgramData\TEMP:EA7D76BE
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:8F067037
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:30DA8392
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:0ACF1AF5
@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:E222F217
@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:BD27B7FC
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:70B3C619
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:35629AE6
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:0E22C5DB
@Alternate Data Stream - 211 bytes -> C:\ProgramData\TEMP:ACCFA538
@Alternate Data Stream - 210 bytes -> C:\ProgramData\TEMP:98DFF516
@Alternate Data Stream - 203 bytes -> C:\ProgramData\TEMP:84E7BFEB
@Alternate Data Stream - 200 bytes -> C:\ProgramData\TEMP:EAFDF1CF
@Alternate Data Stream - 200 bytes -> C:\ProgramData\TEMP:9ACB70D7
@Alternate Data Stream - 192 bytes -> C:\ProgramData\TEMP:95775248
@Alternate Data Stream - 191 bytes -> C:\ProgramData\TEMP:3473F385
@Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:D667795F
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:EE7AAC75
@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:A652BC99
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:4A448DB2
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:98F0614F
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:EF5B3572
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:6C08335F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:B8AF0F0F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8944C195
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:322D2CD3
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:22313216
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:D2C51E3D
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:89C6F032
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:567FC9C2
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:EA701346
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:1B7E2022
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:45F3AD49
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:CB16385F
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:99A29126

< End of report >

Ok, I followed what you said. The first time I ran OTL, it froze up and had to do it again, then I ran it again and it seemed fine.
You noted not to check Loop and parity check. They are not check normally, so when I ran fix, they were not checked, should they have been?
Here is the OTL file after rebooting
OTL logfile created on: 3/21/2012 6:43:11 AM - Run 6
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\kevin\Desktop\highjackthis
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 57.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 79.00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 901.41 Gb Total Space | 325.15 Gb Free Space | 36.07% Space Free | Partition Type: NTFS
Drive D: | 30.00 Gb Total Space | 23.74 Gb Free Space | 79.15% Space Free | Partition Type: NTFS
Drive E: | 465.76 Gb Total Space | 16.89 Gb Free Space | 3.63% Space Free | Partition Type: NTFS
Drive F: | 232.88 Gb Total Space | 77.93 Gb Free Space | 33.46% Space Free | Partition Type: NTFS
Drive H: | 1.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: CZARNOTA-FAMILY | User Name: kevin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
PRC - C:\Users\kevin\Desktop\highjackthis\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
PRC - c:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Common Files\aol\acs\AOLacsd.exe (AOL LLC)


========== Modules (SafeList) ==========

MOD - C:\Users\kevin\Desktop\highjackthis\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrcInj.dll (Logitech Inc.)


========== Win32 Services (SafeList) ==========

SRV:64bit: - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE (SUPERAntiSpyware.com)
SRV:64bit: - (ZuneWlanCfgSvc) – C:\Program Files\Zune\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV:64bit: - (WMZuneComm) – C:\Program Files\Zune\WMZuneComm.exe (Microsoft Corporation)
SRV:64bit: - (ZuneNetworkSvc) – C:\Program Files\Zune\ZuneNss.exe (Microsoft Corporation)
SRV:64bit: - (ReflectService) – C:\Program Files\Macrium\Reflect\ReflectService.exe ()
SRV:64bit: - (LBTServ) – C:\Program Files\Common Files\logishrd\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV:64bit: - (NisSrv) – c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe (Microsoft Corporation)
SRV:64bit: - (MsMpSvc) – c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)
SRV:64bit: - (CarboniteService) – C:\Program Files\Carbonite\Carbonite Backup\carboniteservice.exe (Carbonite, Inc. (www.carbonite.com))
SRV:64bit: - (MSCamSvc) – C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corporation)
SRV:64bit: - (DockLoginService) – C:\Program Files\Dell\DellDock\DockLogin.exe (Stardock Corporation)
SRV:64bit: - (AERTFilters) – C:\Windows\SysNative\AERTSr64.exe (Andrea Electronics Corporation)
SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV:64bit: - (LVSrvLauncher) – C:\Program Files\Common Files\logishrd\SrvLnch\SrvLnch.exe (Logitech Inc.)
SRV:64bit: - (LVPrcS64) – c:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ShowAnalyzerMaster) – C:\Program Files (x86)\Dragon Global\ShowAnalyzerSuite\ShowAnalyzerMaster.exe (Dragon Global)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) – C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION)
SRV - (AOL ACS) – C:\Program Files (x86)\Common Files\AOL\ACS\AOLAcsd.exe (AOL LLC)


========== Driver Services (SafeList) ==========

DRV:64bit: - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV:64bit: - (PSMounter) – C:\Windows\SysNative\drivers\psmounter.sys (Macrium Software)
DRV:64bit: - (motusbdevice) – C:\Windows\SysNative\DRIVERS\motusbdevice.sys (Motorola Inc)
DRV:64bit: - (LUsbFilt) – C:\Windows\SysNative\Drivers\LUsbFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LHidFilt) – C:\Windows\SysNative\DRIVERS\LHidFilt.Sys (Logitech, Inc.)
DRV:64bit: - (LMouFilt) – C:\Windows\SysNative\DRIVERS\LMouFilt.Sys (Logitech, Inc.)
DRV:64bit: - (NisDrv) – C:\Windows\SysNative\DRIVERS\NisDrvWFP.sys (Microsoft Corporation)
DRV:64bit: - (motccgp) – C:\Windows\SysNative\DRIVERS\motccgp.sys (Motorola)
DRV:64bit: - (motmodem) – C:\Windows\SysNative\DRIVERS\motmodem.sys (Motorola)
DRV:64bit: - (MSHUSBVideo) – C:\Windows\SysNative\Drivers\nx6000.sys (Microsoft Corporation)
DRV:64bit: - (RTL8169) – C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek )
DRV:64bit: - (timounter) – C:\Windows\SysNative\DRIVERS\timntr.sys (Acronis)
DRV:64bit: - (tifsfilter) – C:\Windows\SysNative\DRIVERS\tifsfilt.sys (Acronis)
DRV:64bit: - (Motousbnet) – C:\Windows\SysNative\DRIVERS\Motousbnet.sys (Motorola)
DRV:64bit: - (ATIAVPCI) – C:\Windows\SysNative\DRIVERS\atinavrr.sys (ATI Technologies Inc.)
DRV:64bit: - (WpdUsb) – C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (AuviPCI) – C:\Windows\SysNative\DRIVERS\AuviPCI64.sys (Auvitek Corp.)
DRV:64bit: - (motccgpfl) – C:\Windows\SysNative\DRIVERS\motccgpfl.sys (Motorola)
DRV:64bit: - (BTCFilterService) – C:\Windows\SysNative\DRIVERS\motfilt.sys (Motorola Inc)
DRV:64bit: - (RimVSerPort) – C:\Windows\SysNative\DRIVERS\RimSerial_AMD64.sys (Research in Motion Ltd)
DRV:64bit: - (igfx) – C:\Windows\SysNative\DRIVERS\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iastor.sys (Intel Corporation)
DRV:64bit: - (SQTECH9052) – C:\Windows\SysNative\Drivers\Capt9052.sys (Service & Quality Technology.)
DRV:64bit: - (ROOTMODEM) – C:\Windows\SysNative\Drivers\RootMdm.sys (Microsoft Corporation)
DRV:64bit: - (e1express) Intel® – C:\Windows\SysNative\DRIVERS\e1e6032e.sys (Intel Corporation)
DRV:64bit: - (MotoSwitchService) – C:\Windows\SysNative\DRIVERS\motswch.sys (Motorola)
DRV:64bit: - (FlyUsb) – C:\Windows\SysNative\DRIVERS\FlyUsb.sys (LeapFrog)
DRV:64bit: - (SQTECH905C) – C:\Windows\SysNative\Drivers\Capt905c.sys (Service & Quality Technology.)
DRV:64bit: - (LVPr2Mon) – C:\Windows\SysNative\DRIVERS\LVPr2Mon.sys ()
DRV:64bit: - (LVMVDrv) – C:\Windows\SysNative\DRIVERS\LVMVDrv.sys (Logitech Inc.)
DRV:64bit: - (LVcKap64) – C:\Windows\SysNative\DRIVERS\LVcKap64.sys (Logitech Inc.)
DRV:64bit: - (LVUSBS64) – C:\Windows\SysNative\drivers\LVUSBS64.sys (Logitech Inc.)
DRV:64bit: - (CamDrL64) Logitech QuickCam Pro 3000(PID_08B0) – C:\Windows\SysNative\DRIVERS\CamDrL64.sys (Logitech Inc.)
DRV:64bit: - (wanatw) WAN Miniport (ATW) – C:\Windows\SysNative\DRIVERS\wanatw64.sys (America Online, Inc.)
DRV:64bit: - (R300) – C:\Windows\SysNative\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (Ntfs) – C:\Windows\SysNative\Wbem\ntfs.mof ()

========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.nickjr.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.techsupportalert.com/"
FF - prefs.js..extensions.enabledItems: {FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}:1.3.5
FF - prefs.js..extensions.enabledItems: [removed]:[removed]
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.5.21amo
FF - prefs.js..extensions.enabledItems: {AF445D67-154C-4c69-A17B-7F392BCC36A3}:1.0.16
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {340c2bbc-ce74-4362-90b5-7c26312808ef}:1.7
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22


FF - HKLM\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/18 22:25:00 | 000,000,000 | —D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/11/11 21:11:04 | 000,000,000 | —D | M]

[2009/01/16 15:36:21 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Extensions
[2012/02/26 23:18:57 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions
[2011/08/28 17:33:30 | 000,000,000 | —D | M] (Garmin Communicator) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
[2011/03/09 20:15:19 | 000,000,000 | —D | M] (No name found) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}-trash
[2011/12/23 20:38:17 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2009/09/14 13:04:52 | 000,000,000 | —D | M] (IE View Lite) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\{FDD8ECF0-451A-414D-8C8F-7B7F78B0ECD3}
[2011/08/16 19:19:29 | 000,000,000 | —D | M] (Разпознаване на устройство Logitech) – C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tu1flxa4.default\extensions\[removed]
[2011/11/13 10:17:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
File not found (No name found) –
() (No name found) – C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TU1FLXA4.DEFAULT\EXTENSIONS\[removed]
() (No name found) – C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\TU1FLXA4.DEFAULT\EXTENSIONS\[removed]
[2012/03/18 22:25:00 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
[2011/06/19 10:00:07 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\Mozilla Firefox\plugins\NPcol400.dll
[2011/06/19 10:00:07 | 000,466,944 | —- | M] (Catalina Marketing Corporation) – C:\Program Files (x86)\Mozilla Firefox\plugins\NPcol500.dll
[2011/07/03 12:41:05 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
[2011/11/13 10:17:14 | 000,002,252 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\bing.xml
[2011/11/13 10:17:13 | 000,002,040 | —- | M] () – C:\Program Files (x86)\Mozilla Firefox\searchplugins\twitter.xml

O1 HOSTS File: ([2006/09/18 16:37:24 | 000,000,761 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Carbonite Backup] C:\Program Files (x86)\Carbonite\Carbonite Backup\CarboniteUI.exe (Carbonite, Inc.)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O4 - Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files (x86)\ERUNT\AUTOBACK.EXE ()
O4 - Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stoic Joker's T-Clock x64.lnk = C:\Program Files (x86)\Tclock\tclock-x64\Clock.exe (Stoic Joker's Network)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15:64bit: - ..Trusted Domains: localhost ([]http in Local intranet)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwa…director/sw.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 10.1.0)
O16 - DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Java Plug-in 1.7.0_01)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-…indows-i586.cab (Reg Error: Key error.)
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files%20(x86)/Virtual%20Families/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwa…director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {8714912E-380D-11D5-B8AA-00D0B78F3D48} http://chat.yahoo.com/cab/yuplapp.cab (Yahoo! Webcam Upload Wrapper)
O16 - DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} http://support.dell.com/systemprofiler/DellSystemLite.CAB (DellSystemLite.Scanner)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files%20(x86)/Peggle/Images/armhelper.ocx (ArmHelper Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = [removed] [removed] 192.168.1.1
O18:64bit: - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - Reg Error: Key error. File not found
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img36.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img36.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/03/21 06:27:31 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2012/03/21 06:27:29 | 000,000,000 | —D | C] – C:\Program Files (x86)\ERUNT
[2012/03/13 20:20:28 | 001,555,968 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\DWrite.dll
[2012/03/13 20:20:28 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\DWrite.dll
[2012/03/13 20:20:27 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10warp.dll
[2012/03/13 20:20:27 | 000,327,680 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1core.dll
[2012/03/13 20:20:27 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1core.dll
[2012/03/13 20:20:23 | 002,002,944 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10warp.dll
[2012/03/13 20:20:19 | 000,683,008 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d2d1.dll
[2012/03/13 20:20:18 | 000,834,048 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d2d1.dll
[2012/03/13 20:20:14 | 000,196,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\d3d10_1.dll
[2012/03/13 20:20:14 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\d3d10_1.dll
[2012/03/13 20:14:32 | 000,708,096 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\rdpencom.dll
[2012/03/13 20:14:20 | 000,613,376 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\rdpencom.dll
[2012/02/27 12:09:00 | 000,000,000 | —D | C] – C:\Users\kevin\AppData\Roaming\Yahoo!
[2012/02/24 15:44:33 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Yahoo! Messenger
[2012/02/20 10:18:20 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avidemux
[2012/02/20 10:18:08 | 000,000,000 | —D | C] – C:\Program Files\Avidemux 2.5
[2002/03/11 04:06:30 | 001,822,520 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\instmsiw.exe
[2002/03/11 03:45:04 | 001,708,856 | —- | C] (Microsoft Corporation) – C:\Program Files (x86)\instmsia.exe

========== Files - Modified Within 30 Days ==========

[2012/03/21 06:47:09 | 000,763,778 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/03/21 06:47:09 | 000,645,624 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/03/21 06:47:09 | 000,120,716 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/03/21 06:41:39 | 000,000,406 | —- | M] () – C:\Windows\tasks\AutoSmartDefrag.job
[2012/03/21 06:40:51 | 000,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/21 06:40:51 | 000,003,744 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/21 06:40:46 | 000,000,510 | —- | M] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job
[2012/03/21 06:40:46 | 000,000,510 | —- | M] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/21 06:40:45 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/03/21 06:27:53 | 000,000,945 | —- | M] () – C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/03/21 06:27:33 | 000,000,765 | —- | M] () – C:\Users\kevin\Desktop\NTREGOPT.lnk
[2012/03/21 06:27:33 | 000,000,746 | —- | M] () – C:\Users\kevin\Desktop\ERUNT.lnk
[2012/03/20 15:01:20 | 670,005,447 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/03/15 10:05:30 | 000,002,643 | —- | M] () – C:\Users\kevin\Desktop\Microsoft Outlook 2010.lnk
[2012/03/15 09:30:11 | 000,016,262 | —- | M] () – C:\Users\kevin\Documents\2012TagRenewal.PDF
[2012/03/13 20:50:09 | 000,406,552 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT
[2012/03/11 12:05:14 | 000,002,637 | —- | M] () – C:\Users\kevin\Desktop\Microsoft Word 2010.lnk
[2012/03/04 21:40:26 | 000,003,053 | —- | M] () – C:\Users\kevin\Desktop\Macrium Reflect.lnk
[2012/02/21 11:30:28 | 000,001,326 | —- | M] () – C:\Users\kevin\Documents\passwords-txt.axx
[2012/02/20 15:23:50 | 000,414,368 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/02/20 10:18:20 | 000,000,797 | —- | M] () – C:\Users\Public\Desktop\Avidemux 2.5.lnk

========== Files Created - No Company Name ==========

[2012/03/21 06:27:53 | 000,000,945 | —- | C] () – C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/03/21 06:27:33 | 000,000,765 | —- | C] () – C:\Users\kevin\Desktop\NTREGOPT.lnk
[2012/03/21 06:27:33 | 000,000,746 | —- | C] () – C:\Users\kevin\Desktop\ERUNT.lnk
[2012/03/21 06:25:36 | 000,000,510 | —- | C] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task a00d761c-5b80-4a6f-8e41-11857ef8a885.job
[2012/03/21 06:25:35 | 000,000,510 | —- | C] () – C:\Windows\tasks\SUPERAntiSpyware Scheduled Task 8b753a4f-7f81-44f0-93e1-52469fd63d88.job
[2012/03/20 15:01:20 | 670,005,447 | —- | C] () – C:\Windows\MEMORY.DMP
[2012/03/15 09:30:10 | 000,016,262 | —- | C] () – C:\Users\kevin\Documents\2012TagRenewal.PDF
[2012/03/04 21:40:26 | 000,003,053 | —- | C] () – C:\Users\kevin\Desktop\Macrium Reflect.lnk
[2012/02/20 10:18:20 | 000,000,797 | —- | C] () – C:\Users\Public\Desktop\Avidemux 2.5.lnk
[2011/08/11 15:23:35 | 000,000,185 | —- | C] () – C:\Windows\WININIT.INI
[2011/08/11 15:19:23 | 000,000,000 | —- | C] () – C:\Windows\setup32.INI
[2011/07/28 16:51:56 | 000,000,510 | —- | C] () – C:\Windows\WORDPAD.INI
[2011/04/11 17:06:44 | 000,000,732 | —- | C] () – C:\Users\kevin\AppData\Local\d3d9caps64.dat
[2011/02/20 15:30:36 | 000,000,056 | -H– | C] () – C:\Windows\SysWow64\ezsidmv.dat
[2010/12/28 20:51:23 | 000,057,344 | —- | C] () – C:\Windows\SysWow64\ff_vfw.dll
[2010/12/24 10:01:53 | 000,758,692 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI
[2010/11/20 13:39:48 | 000,000,173 | —- | C] () – C:\Users\kevin\AppData\Local\rahistory.xml
[2010/07/16 12:10:49 | 000,000,256 | —- | C] () – C:\Windows\SysWow64\pool.bin
[2010/04/11 10:39:24 | 000,000,004 | —- | C] () – C:\Windows\msoffice.ini
[2009/12/23 13:27:26 | 000,000,094 | —- | C] () – C:\Windows\family.ini
[2009/11/22 12:27:51 | 000,117,248 | —- | C] () – C:\Windows\SysWow64\EhStorAuthn.dll
[2009/11/22 12:27:30 | 000,107,612 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchema.bin
[2009/11/22 12:27:11 | 000,368,640 | —- | C] () – C:\Windows\SysWow64\msjetoledb40.dll
[2009/01/26 17:17:15 | 000,000,154 | —- | C] () – C:\Windows\[removed]
[2009/01/26 12:23:01 | 000,000,376 | —- | C] () – C:\Windows\ODBC.INI
[2009/01/25 18:15:36 | 000,000,411 | —- | C] () – C:\Windows\COOK'N5.INI
[2009/01/17 11:17:05 | 000,210,944 | —- | C] () – C:\Windows\SysWow64\Msvcrt10.dll
[2009/01/17 10:50:20 | 000,073,220 | —- | C] () – C:\Windows\SysWow64\EPPICPrinterDB.dat
[2009/01/17 10:50:20 | 000,031,053 | —- | C] () – C:\Windows\SysWow64\EPPICPattern131.dat
[2009/01/17 10:50:20 | 000,029,114 | —- | C] () – C:\Windows\SysWow64\EPPICPattern1.dat
[2009/01/17 10:50:20 | 000,027,417 | —- | C] () – C:\Windows\SysWow64\EPPICPattern121.dat
[2009/01/17 10:50:20 | 000,021,021 | —- | C] () – C:\Windows\SysWow64\EPPICPattern3.dat
[2009/01/17 10:50:20 | 000,015,670 | —- | C] () – C:\Windows\SysWow64\EPPICPattern5.dat
[2009/01/17 10:50:20 | 000,013,280 | —- | C] () – C:\Windows\SysWow64\EPPICPattern2.dat
[2009/01/17 10:50:20 | 000,010,673 | —- | C] () – C:\Windows\SysWow64\EPPICPattern4.dat
[2009/01/17 10:50:20 | 000,004,943 | —- | C] () – C:\Windows\SysWow64\EPPICPattern6.dat
[2009/01/17 10:50:20 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2009/01/17 10:50:20 | 000,001,140 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2009/01/17 10:50:20 | 000,001,137 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2009/01/17 10:50:20 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2009/01/17 10:50:20 | 000,001,130 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2009/01/17 10:50:20 | 000,001,104 | —- | C] () – C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2009/01/17 10:50:20 | 000,000,097 | —- | C] () – C:\Windows\SysWow64\PICSDK.ini
[2009/01/17 10:23:27 | 000,005,216 | —- | C] () – C:\Users\kevin\AppData\Local\d3d9caps.dat
[2009/01/16 16:30:17 | 000,000,335 | —- | C] () – C:\Windows\nsreg.dat
[2009/01/14 02:07:05 | 000,018,904 | —- | C] () – C:\Windows\SysWow64\StructuredQuerySchemaTrivial.bin
[2008/09/30 12:06:06 | 128,535,711 | —- | C] () – C:\Program Files (x86)\openofficeorg1.cab
[2008/09/30 11:29:36 | 000,000,217 | —- | C] () – C:\Program Files (x86)\setup.ini
[2008/09/30 11:29:32 | 009,772,544 | —- | C] () – C:\Program Files (x86)\openofficeorg30.msi
[2008/09/18 11:08:54 | 000,424,728 | —- | C] () – C:\Program Files (x86)\setup.exe
[2008/01/20 21:50:05 | 000,060,124 | —- | C] () – C:\Windows\SysWow64\tcpmon.ini
[2006/11/02 10:37:05 | 000,067,584 | –S- | C] () – C:\Windows\bootstat.dat
[2006/11/02 07:37:14 | 000,215,943 | —- | C] () – C:\Windows\SysWow64\dssec.dat
[2006/11/02 07:24:17 | 000,000,741 | —- | C] () – C:\Windows\SysWow64\NOISE.DAT
[2006/11/02 07:18:17 | 000,673,088 | —- | C] () – C:\Windows\SysWow64\mlang.dat
[2006/11/02 04:47:54 | 000,043,131 | —- | C] () – C:\Windows\mib.bin

========== Alternate Data Streams ==========

@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:7E927D7D
@Alternate Data Stream - 96 bytes -> C:\ProgramData\TEMP:E962FBDB
@Alternate Data Stream - 239 bytes -> C:\ProgramData\TEMP:F0A06891
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:E7B4296D
@Alternate Data Stream - 236 bytes -> C:\ProgramData\TEMP:BACB6B6C
@Alternate Data Stream - 235 bytes -> C:\ProgramData\TEMP:38FF076E
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:E5BA9ADD
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:CC4C59B4
@Alternate Data Stream - 234 bytes -> C:\ProgramData\TEMP:09867A8B
@Alternate Data Stream - 227 bytes -> C:\ProgramData\TEMP:D93AABC7
@Alternate Data Stream - 226 bytes -> C:\ProgramData\TEMP:571CCF8E
@Alternate Data Stream - 224 bytes -> C:\ProgramData\TEMP:92EDCBF3
@Alternate Data Stream - 223 bytes -> C:\ProgramData\TEMP:BEB6D0B2
@Alternate Data Stream - 223 bytes -> C:\ProgramData\TEMP:2D3CB929
@Alternate Data Stream - 222 bytes -> C:\ProgramData\TEMP:15E76ABF
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:F5FC5DCE
@Alternate Data Stream - 218 bytes -> C:\ProgramData\TEMP:A774141A
@Alternate Data Stream - 217 bytes -> C:\ProgramData\TEMP:EA7D76BE
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:8F067037
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:30DA8392
@Alternate Data Stream - 216 bytes -> C:\ProgramData\TEMP:0ACF1AF5
@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:E222F217
@Alternate Data Stream - 215 bytes -> C:\ProgramData\TEMP:BD27B7FC
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:70B3C619
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:35629AE6
@Alternate Data Stream - 213 bytes -> C:\ProgramData\TEMP:0E22C5DB
@Alternate Data Stream - 211 bytes -> C:\ProgramData\TEMP:ACCFA538
@Alternate Data Stream - 210 bytes -> C:\ProgramData\TEMP:98DFF516
@Alternate Data Stream - 203 bytes -> C:\ProgramData\TEMP:84E7BFEB
@Alternate Data Stream - 200 bytes -> C:\ProgramData\TEMP:EAFDF1CF
@Alternate Data Stream - 200 bytes -> C:\ProgramData\TEMP:9ACB70D7
@Alternate Data Stream - 192 bytes -> C:\ProgramData\TEMP:95775248
@Alternate Data Stream - 191 bytes -> C:\ProgramData\TEMP:3473F385
@Alternate Data Stream - 149 bytes -> C:\ProgramData\TEMP:D667795F
@Alternate Data Stream - 142 bytes -> C:\ProgramData\TEMP:EE7AAC75
@Alternate Data Stream - 141 bytes -> C:\ProgramData\TEMP:A652BC99
@Alternate Data Stream - 134 bytes -> C:\ProgramData\TEMP:4A448DB2
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:98F0614F
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:EF5B3572
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:6C08335F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:B8AF0F0F
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:8944C195
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:322D2CD3
@Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:22313216
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:D2C51E3D
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:89C6F032
@Alternate Data Stream - 121 bytes -> C:\ProgramData\TEMP:567FC9C2
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:EA701346
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:1B7E2022
@Alternate Data Stream - 113 bytes -> C:\ProgramData\TEMP:45F3AD49
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:CB16385F
@Alternate Data Stream - 108 bytes -> C:\ProgramData\TEMP:99A29126

< End of report >

Here is OTL log file.

OTL Extras logfile created on: 3/21/2012 3:39:45 PM - Run 7
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\kevin\Desktop\highjackthis
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

4.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 46.00% Memory free
8.00 Gb Paging File | 6.00 Gb Available in Paging File | 75.00% Paging File free
Paging file location(s): ?:\pagefile.sys

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 901.41 Gb Total Space | 321.26 Gb Free Space | 35.64% Space Free | Partition Type: NTFS
Drive D: | 30.00 Gb Total Space | 23.74 Gb Free Space | 79.15% Space Free | Partition Type: NTFS
Drive E: | 465.76 Gb Total Space | 16.89 Gb Free Space | 3.63% Space Free | Partition Type: NTFS
Drive F: | 232.88 Gb Total Space | 77.93 Gb Free Space | 33.46% Space Free | Partition Type: NTFS
Drive H: | 1.23 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: UDF

Computer Name: CZARNOTA-FAMILY | User Name: kevin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Extra Registry (All) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.chm[@ = chm.file] – C:\Windows\hh.exe (Microsoft Corporation)
.cpl[@ = cplfile] – C:\Windows\SysNative\control.exe (Microsoft Corporation)
.hlp[@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta[@ = htafile] – C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
.html[@ = htmlfile] – C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf[@ = inffile] – C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.ini[@ = inifile] – C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.js[@ = JSFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.jse[@ = JSEFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.reg[@ = regfile] – C:\Windows\regedit.exe (Microsoft Corporation)
.txt[@ = txtfile] – C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.vbe[@ = VBEFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.vbs[@ = VBSFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsf[@ = WSFFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsh[@ = WSHFile] – C:\Windows\SysNative\WScript.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.chm [@ = chm.file] – C:\Windows\hh.exe (Microsoft Corporation)
.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] – C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
.html [@ = htmlfile] – C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf [@ = inffile] – C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] – C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] – C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] – C:\Windows\SysWOW64\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] – C:\Windows\SysWOW64\WScript.exe (Microsoft Corporation)
.reg [@ = regfile] – C:\Windows\SysWow64\regedit.exe (Microsoft Corporation)
.txt [@ = txtfile] – C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] – C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] – C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] – C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] – C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile – %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] – "%1" %* File not found
batfile [print] – %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] – "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile – %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] – "%1" %* File not found
cmdfile [print] – %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] – "%1" %* File not found
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %* File not found
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] – C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile – "C:\Program Files (x86)\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files (x86)\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile – C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] – C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] – C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile – C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] – C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] – C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] – "%1" %* File not found
regfile – %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] – regedit.exe "%1" (Microsoft Corporation)
regfile [merge] – Reg Error: Key error.
regfile [print] – %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] – "%1" File not found
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] – "%1" /S File not found
txtfile – Reg Error: Key error.
txtfile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] – %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile – "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] – "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbefile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile – "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] – "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbsfile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile – "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] – "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] – "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile – %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] – "%1" %*
batfile [print] – %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] – "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile – %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] – "%1" %*
cmdfile [print] – %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] – C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile – "C:\Program Files (x86)\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files (x86)\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] – "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile – C:\Windows\SysWOW64\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] – C:\Windows\SysWOW64\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] – C:\Windows\SysWOW64\Notepad.exe /p %1 (Microsoft Corporation)
jsefile – C:\Windows\SysWOW64\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] – C:\Windows\SysWOW64\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] – C:\Windows\SysWOW64\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] – "%1" %*
regfile – %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] – regedit.exe "%1" (Microsoft Corporation)
regfile [merge] – Reg Error: Key error.
regfile [print] – %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
txtfile [open] – %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] – %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] – %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile – "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] – "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbefile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile – "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] – "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbsfile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile – "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] – "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] – "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] – "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = 9F 9E 16 8C DC 5B C8 01 [binary data]
"VistaSp2" = D0 17 6B 77 7C A5 CB 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2707694908-3892883027-3287269716-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2707694908-3892883027-3287269716-1001]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2707694908-3892883027-3287269716-1002]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2707694908-3892883027-3287269716-1005]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0E1EF8EC-16E3-49EF-A978-CBBE3175B863}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1C290D66-9AA2-4C3A-98E1-D9582916D4F4}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe |
"{2195B02D-E5B4-475F-8019-EDE937C3D557}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{223C5938-789E-4166-B264-FD57ACFE23C7}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{30712CBB-DBDD-49D8-A074-F3C4289523AA}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{38709E37-F949-40B9-8286-A31203F14F22}" = lport=137 | protocol=17 | dir=in | app=system |
"{39F7A54A-7C92-46E1-A8BE-2005A7A73C69}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{43BC22A0-A39C-49D3-912D-E58319392207}" = rport=137 | protocol=17 | dir=out | app=system |
"{4AE0C567-1B00-4E1A-A386-DFC859681055}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5D586DCC-7605-42E9-9C03-98613C722D0E}" = lport=138 | protocol=17 | dir=in | app=system |
"{6296E2BE-32A1-49DB-A3C4-4D8A604289CD}" = lport=10243 | protocol=6 | dir=in | app=system |
"{6AF4A105-9248-4D04-ABEF-8805F1B4A70C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{8C3BCE74-1367-40F6-9096-332061580E6D}" = rport=445 | protocol=6 | dir=out | app=system |
"{9B77C410-58A2-44CD-BEF1-6C57CBA891FE}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{B0329C6E-ECB4-4F1B-8C16-20DF1826E68B}" = lport=2869 | protocol=6 | dir=in | app=system |
"{B3D6400C-C9E2-413F-B0E0-44802BDAE0A8}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CCD3663C-07C6-4C23-8A07-BE69FFB44C01}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{CCD6FF76-9B5A-445A-8E6A-34300753D851}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{CD4BD2DD-97C8-4906-82E5-0D8FACC4DC99}" = rport=139 | protocol=6 | dir=out | app=system |
"{D694B041-AFD5-4EBE-A2A0-DB6F2A615F5C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DDF0869C-0439-4B6D-AF49-1962F2B72F9B}" = rport=138 | protocol=17 | dir=out | app=system |
"{E004028B-A4F1-403D-8FBD-F08E3871D643}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{ED33C5AF-6D9C-4641-AAB4-D917AEC8BD9D}" = lport=139 | protocol=6 | dir=in | app=system |
"{EE8F97CA-8CBA-40E1-B85A-0DA69F47850A}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{F2D4F5A7-4DA9-4524-ACA1-B790793871A7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F4230420-BEEE-4A52-A8E5-D3B01563D070}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{F4970C15-8227-44B1-86D2-07268B1AB85D}" = rport=10243 | protocol=6 | dir=out | app=system |
"{F61D7799-3679-4DD9-8F6E-0A9ACD6D0151}" = lport=445 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{073BA189-0E9B-42B2-AE37-8059208B68C8}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{0744FBC4-6759-48EC-8247-5377F631498F}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{10848531-2AC4-4535-BED6-7B1C65E971F7}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{123C2650-B668-4F30-A00F-478B4486D1EE}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\acs\aoldial.exe |
"{1B159589-22BB-468D-88EE-0A6131A0BD7F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{1B86D6A5-E562-4480-B587-6AA9886B5E65}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{201447F7-C94C-4F19-8A6A-9CBEBCF11466}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2BB5E974-5DB3-4348-B4DF-682D01D8E68B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2BC9E8ED-E515-4C7C-A845-8BDE2CE666D5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2F891CB0-7C4F-47E8-80A8-4A9F43EEDA6E}" = protocol=6 | dir=in | app=c:\program files (x86)\aol\rc\regclient.exe |
"{31874077-827B-4A77-9690-928AA4069D26}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\1232141495\ee\aolsoftware.exe |
"{32664F06-F112-4428-983C-BB487FD989B5}" = protocol=17 | dir=in | app=c:\program files (x86)\aol\rc\regclient.exe |
"{33304D56-E7C4-48E6-8759-FF780CB4E312}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{37764531-6E9D-4FA6-B50C-AE9A8E86587F}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\acs\aoldial.exe |
"{3F4C9975-5D94-4874-9318-2599E1A36E54}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4935A08E-61CA-4FC0-95DE-8AFAB3595DFE}" = protocol=6 | dir=out | app=system |
"{4A475C82-9E60-41F1-8C26-94FD418C1AFE}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{52446383-EB1E-44CB-B229-9466864E1CA4}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\acs\aolacsd.exe |
"{53414FA1-76A3-46AD-9A1C-2CBF391C9907}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{5B0E40C0-457E-4D78-82A8-FBA70DB655F6}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{68069E08-93F5-44E4-9A49-C639E0B9717B}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\1232141495\ee\aolsoftware.exe |
"{69CAF74F-11FD-4A0D-AD4A-2871D2E969D4}" = protocol=17 | dir=in | app=c:\program files (x86)\turbotax\deluxe 2007\32bit\updatemgr.exe |
"{701D3036-223E-462E-BC3B-05B24E90C09B}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{77DC9DB6-D43F-4BC5-AFFE-71CB09D379A0}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{786A89AC-7382-42C5-8995-A1BB3C4FF0EB}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{79500043-0A0D-4DCD-A99A-6FB9AC403A86}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{80EA83E5-E73F-4DA6-8F59-7E9F2B45B0B2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{833D8E85-053C-4893-83E7-2A865EF5F2C6}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{88074342-9B2A-4D25-9142-9D4FC81399C3}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\system information\sinf.exe |
"{8B3EBBFD-ADC9-4924-B044-7AB9ECFBD564}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{9087A743-725C-402C-8C3A-4C8BA3DC2337}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifecam.exe |
"{90CB494A-0B17-4F23-BE34-0759BFECB0F0}" = protocol=6 | dir=in | app=c:\program files (x86)\turbotax\deluxe 2007\32bit\ttax.exe |
"{91CCB26D-62AF-41D7-A797-99A7742DF428}" = protocol=17 | dir=in | app=c:\program files (x86)\turbotax\deluxe 2007\32bit\ttax.exe |
"{9541A512-CF2B-43EF-8684-1B0DF35E3FA4}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{979CD5F0-1435-45BD-B848-29B8498D3D5C}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifetray.exe |
"{9EA68B67-E14F-4EBB-BD6B-8E4432EA2BFC}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeexp.exe |
"{B076CC63-8C72-4E54-8148-5ABD727375D4}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{B91CA37F-9A77-4F1E-A439-10B9477A4F83}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{B9293E13-55BD-4A2E-A3B5-C50C16A7713F}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\acs\aolacsd.exe |
"{C3BF0126-1417-4396-8E53-884FF29C26E7}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{C5D61622-9B7A-4D1F-82C9-2BB5A04541C5}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{C9862E01-34EB-4469-A50C-2886E9B56929}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{CBD56F31-F7C6-4B95-88A4-194304D76AC5}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{CC1F8189-E632-4FE8-8A1A-1F6C026AB42F}" = protocol=6 | dir=in | app=c:\program files (x86)\turbotax\deluxe 2007\32bit\updatemgr.exe |
"{CDD754AB-A656-4C74-BCC9-3E21D93379CA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{CE773278-B3F3-4D32-A3A0-FFC0F8E9DC48}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft lifecam\lifeenc2.exe |
"{D25FA0A3-E17A-4DB6-93BA-A778F85C0D2D}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\loader\aolload.exe |
"{D3274B82-A534-4B2E-A517-08854397AF70}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{D640FF2D-A6E7-42F0-89D2-76B954CAF8C8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DCEDEDCB-57C1-449C-A55B-75BB1EECB214}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\topspeed\3.0\aoltpsd3.exe |
"{E2D329A3-C66A-4D9A-BA03-03E43AC66DAD}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\aol\loader\aolload.exe |
"{E7380564-AB33-475B-A820-6D95D0A9CB28}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\aol\system information\sinf.exe |
"{E9CFF871-4EA8-4DBE-8445-FBC940CB2663}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{EB49668E-1279-4911-859E-F12098951B83}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{EFE99A99-D5BE-4BAF-94C1-AFEA71EABECC}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{F803A81D-AF21-4D09-A3D8-69B9C66CACA9}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"TCP Query User{1A0F73DA-0325-45C7-80A7-888DE5A94650}C:\program files (x86)\yahoo!\messenger\yahoomessenger.exe" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{2261661E-457B-4FBE-841C-6FD93E4F967F}H:\dsrc\i486_nt\obj\ptcsetup.exe" = protocol=6 | dir=in | app=h:\dsrc\i486_nt\obj\ptcsetup.exe |
"TCP Query User{4D7F1C8B-398F-4ED8-A190-EDE77457843C}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"TCP Query User{6515AF63-2CB3-4744-B063-FA7344C62321}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe |
"TCP Query User{6E960754-DAC4-4FE2-A963-20C5352183F6}C:\program files (x86)\aol desktop 9.6\waol.exe" = protocol=6 | dir=in | app=c:\program files (x86)\aol desktop 9.6\waol.exe |
"TCP Query User{6F5D3A5B-CA1C-4638-B775-017487E23328}C:\program files (x86)\aol desktop 9.6\waol.exe" = protocol=6 | dir=in | app=c:\program files (x86)\aol desktop 9.6\waol.exe |
"UDP Query User{A43C941E-DF0D-454A-9BF8-AC8101BB7C82}C:\program files (x86)\aol desktop 9.6\waol.exe" = protocol=17 | dir=in | app=c:\program files (x86)\aol desktop 9.6\waol.exe |
"UDP Query User{AA483D86-14A4-4611-ACF9-64276D62288A}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"UDP Query User{CB3F0A0F-F4E1-4A16-B710-E8AD045553BC}H:\dsrc\i486_nt\obj\ptcsetup.exe" = protocol=17 | dir=in | app=h:\dsrc\i486_nt\obj\ptcsetup.exe |
"UDP Query User{D99B7ACA-8072-4206-9676-BC31E8035247}C:\program files (x86)\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\videolan\vlc\vlc.exe |
"UDP Query User{EB2FB0C2-B523-47B0-8843-071501E4A452}C:\program files (x86)\yahoo!\messenger\yahoomessenger.exe" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"UDP Query User{F041A59A-BAE0-4A44-841B-761F2D6FE744}C:\program files (x86)\aol desktop 9.6\waol.exe" = protocol=17 | dir=in | app=c:\program files (x86)\aol desktop 9.6\waol.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{05BFB060-4F22-4710-B0A2-2801A1B606C5}" = Microsoft Antimalware
"{07EEE598-5F21-4B57-B40B-46592625B3D9}" = Zune Language Pack (PTB)
"{192E85C6-2B8A-4217-AD30-ECA5CE19DB23}" = Logitech QuickCam
"{22ABA92B-6C1B-46D8-AC2B-C48EEAE172A9}" = VD64Inst
"{26A24AE4-039D-4CA4-87B4-2F86417001FF}" = Java™ 7 Update 1 (64-bit)
"{2A9DFFD8-4E09-4B91-B957-454805B0D7C4}" = Zune Language Pack (CHS)
"{3589A659-F732-4E65-A89A-5438C332E59D}" = Zune Language Pack (ELL)
"{42738DB0-FC3E-4672-A99B-9372F5696E30}" = Microsoft Security Client
"{4316E318-85EC-42C3-9535-C7B49B8CAD21}" = AxCrypt 1.7.2126.0
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{51C839E1-2BE4-4E77-A1BA-CCEA5DAFA741}" = Zune Language Pack (KOR)
"{57C51D56-B287-4C11-9192-EC3C46EF76A4}" = Zune Language Pack (RUS)
"{5C93E291-A1CC-4E51-85C6-E194209FCDB4}" = Zune Language Pack (PTG)
"{5CE7E3F5-9803-4F32-AA89-2D8848A80109}" = Microsoft LifeCam
"{5DEFD397-4012-46C3-B6DA-E8013E660772}" = Zune Language Pack (NOR)
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{655107BA-F557-4B0E-B344-BA1C85B08488}" = Motorola Mobile Drivers Installation 4.8.0
"{6740BCB0-5863-47F4-80F4-44F394DE4FE2}" = Zune Language Pack (NLD)
"{6B33492E-FBBC-4EC3-8738-09E16E395A10}" = Zune Language Pack (ESP)
"{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6EB931CD-A7DA-4A44-B74A-89C8EB50086F}" = Zune Language Pack (SVE)
"{76BA306B-2AA0-47C0-AB6B-F313AB56C136}" = Zune Language Pack (MSL)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8960A0A1-BB5A-479E-92CF-65AB9D684B43}" = Zune Language Pack (PLK)
"{8B112338-2B08-4851-AF84-E7CAD74CEB32}" = Zune Language Pack (DAN)
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{92ECE3F9-591E-4C12-8A62-B9FCE38BF646}" = Zune Language Pack (IND)
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B75648B-6C30-4A0D-9DE6-0D09D20AF5A5}" = Zune
"{9C5A08BF-BB99-4998-81BD-F6CC32483B34}" = Microsoft Corporation
"{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1" = PDF-Viewer
"{A5A53EA8-A11E-49F0-BDF5-AE536426A31A}" = Zune Language Pack (CHT)
"{A8F2E50B-86E2-4D96-9BD2-9758BCC6F9B3}" = Zune Language Pack (CSY)
"{AC1B58BB-55ED-43F0-98D9-6CEB24C2C5CD}" = Macrium Reflect - Free Edition
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B4870774-5F3A-46D9-9DFE-06FB5599E26B}" = Zune Language Pack (FIN)
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{BE236D9A-52EC-4A17-82DA-84B5EAD31E3E}" = Zune Language Pack (DEU)
"{C5D37FFA-7483-410B-982B-91E93FD3B7DA}" = Zune Language Pack (ITA)
"{C68D33B1-0204-4EBE-BC45-A6E432B1D13A}" = Zune Language Pack (FRA)
"{C6BE19C6-B102-4038-B2A6-1C313872DBB4}" = Zune Language Pack (HUN)
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D1EF69B7-7A97-40FC-9AF1-6D6656FF874F}" = ATI AVIVO64 Codecs
"{D8A781C9-3892-4E2E-9320-480CF896CFBB}" = Zune Language Pack (JPN)
"{F2CB8C3C-9C9E-4FAB-9067-655601C5F748}" = Windows Mobile Device Updater Component
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6CB42B9-F033-4152-8813-FF11DA8E6A78}" = Dell Dock
"8F14F2ECEDE68D26EA515B48DC25B39103C4FE8D" = Windows Driver Package - Leapfrog (Leapfrog-USBLAN) Net (09/10/2009 02.03.05.012)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"CCleaner" = CCleaner
"EPSON Printer and Utilities" = EPSON Printer Software
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
"NVIDIA Drivers" = NVIDIA Drivers
"Print to PDF Annotator_is1" = Print to PDF Annotator (novaPDF OEM 7.4 printer)
"sp6" = Logitech SetPoint 6.30
"Zune" = Zune

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{230B46CD-A035-484C-BB8B-1FE46DA0724F}" = ShowAnalyzerSuite
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{44CDBD1B-89FB-4E02-8319-2A4C550F664A}" = RTC Client API v1.2
"{4E868D3D-6EEB-4273-926C-2287236B5B79}" = 3DVIA player 5.0
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{73966F0C-0541-4B1B-B352-6012ABC17D9F}" = ShopSafe
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{797EE0CA-8165-405C-B5CE-F11EC20F1BB0}" = Microsoft VC9 runtime libraries
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83d96ed0-98aa-4515-8ddc-816f3efdd104}" = DB CIF Cam
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUSR_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUSR_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0116-0409-1000-0000000FF1CE}_Office14.PROPLUSR_{D6C6B46A-6CE1-4561-84A0-EFD58B8AB979}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUSR_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{91140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{94CAC2F1-C856-47F4-AF24-65A1E75AEDB9}" = MotoHelper MergeModules
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{AA027AE9-DD20-4677-AA72-D760A358320B}" = Microsoft VC9 runtime libraries
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{E7ECD072-02DF-4F24-B5C9-7928A2867B14}" = DVRMSToolbox
"{EA516024-D84D-41F1-814F-83175A6188F2}" = Logitech Video Enumerator
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F5346614-B7C4-4E94-826A-E2363155233D}" = EasyCleaner
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AOL Regclient" = AOL Registration
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"Avidemux 2.5 (64-bit)" = Avidemux 2.5
"BFG-10 Talismans" = 10 Talismans
"BFG-Agatha Christie - 450 from Paddington" = Agatha Christie: 4:50 from Paddington
"BFG-Age of Emerald" = Age of Emerald
"BFG-Age Of Oracles - Taras Journey" = Age Of Oracles: Tara`s Journey
"BFG-Amazing Adventures - The Caribbean Secret" = Amazing Adventures: The Caribbean Secret
"BFG-Amazing Pyramids" = Amazing Pyramids
"BFG-Atlantis" = Atlantis
"BFG-Big City Adventure - Sydney Australia" = Big City Adventure: Sydney, Australia
"BFGC" = Big Fish Games: Game Manager
"BFG-Fabulous Finds" = Fabulous Finds
"BFG-Farm Frenzy 3 - Madagascar" = Farm Frenzy 3: Madagascar
"BFG-Gardenscapes" = Gardenscapes
"BFG-Geisha - The Secret Garden" = Geisha: The Secret Garden
"BFG-Gemsweeper" = Gemsweeper
"BFG-Great Escapes Solitaire Collection" = Great Escapes Solitaire Collection
"BFG-Hidden Expedition - Everest" = Hidden Expedition: Everest ™
"BFG-Jar of Marbles" = Jar of Marbles
"BFG-Liong - The Dragon Dance" = Liong: The Dragon Dance
"BFG-Million Dollar Quest" = Million Dollar Quest
"BFG-My Kingdom for the Princess II" = My Kingdom for the Princess II
"BFG-My Kingdom for the Princess III" = My Kingdom for the Princess III
"BFG-Nick Jr. Bingo" = Nick Jr. Bingo
"BFG-Pac-Man" = Pac-Man
"BFG-Pantheon" = Pantheon
"BFG-Paradise Quest" = Paradise Quest
"BFG-Peggle Deluxe" = Peggle Deluxe
"BFG-Pioneer Lands" = Pioneer Lands
"BFG-Puzzle Park" = Puzzle Park
"BFG-Season of Mystery - The Cherry Blossom Murders" = Season of Mystery: The Cherry Blossom Murders
"BFG-Slingo Quest" = Slingo Quest
"BFG-The Timebuilders - Caveman's Prophecy" = The Timebuilders: Caveman's Prophecy
"BFG-The Timebuilders - Pyramid Rising" = The Timebuilders: Pyramid Rising
"BFG-Trinklit Supreme" = Trinklit Supreme
"BFG-Youda Farmer 2 - Save the Village" = Youda Farmer 2: Save the Village
"BFG-Youda Survivor" = Youda Survivor
"Carbonite Backup" = Carbonite
"Cisco Connect" = Cisco Connect
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"DVD Flick_is1" = DVD Flick 1.3.0.7
"EPSON Scanner" = EPSON Scan
"ERUNT_is1" = ERUNT 1.1j
"EssentialPIM" = EssentialPIM
"Exact Audio Copy" = Exact Audio Copy 0.99pb5
"ffdshow_is1" = ffdshow [rev 2527] [2008-12-19]
"I Want This" = I Want This
"MotoHelper" = MotoHelper 2.0.40 Driver 4.8.0
"Mozilla Firefox 11.0 (x86 en-US)" = Mozilla Firefox 11.0 (x86 en-US)
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"PDFAnnotator_is1" = PDF Annotator 3.0.0.333
"Peggle" = Peggle
"QcDrv" = Logitech® Camera Driver
"TurboTax Deluxe 2007" = TurboTax Deluxe 2007
"ViewpointMediaPlayer" = Viewpoint Media Player
"Virtual Families" = Virtual Families
"VLC media player" = VLC media player 1.0.1
"WinGimp-2.0_is1" = GIMP 2.4.7
"WinZip" = WinZip
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"Yahoo! Messenger" = Yahoo! Messenger

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

Error - 3/21/2012 10:42:13 AM | Computer Name = czarnota-family | Source = Windows Search Service | ID = 3013
Description =

[ Media Center Events ]
Error - 12/2/2011 10:27:58 AM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 12/5/2011 8:14:08 PM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 12/19/2011 10:00:38 AM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerAccumulate failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 12/19/2011 10:05:49 AM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerAccumulate failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 12/19/2011 10:07:57 AM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerAccumulate failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 12/19/2011 10:18:54 AM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerAccumulate failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 12/23/2011 8:02:01 PM | Computer Name = czarnota-family | Source = Recording | ID = 19
Description = The recording schedule has been corrupted and was automatically deleted
on 12/23/2011 18:02:01. You may need to reschedule your recordings.

Error - 12/26/2011 8:23:21 PM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerAccumulate failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 12/26/2011 8:23:44 PM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerAccumulate failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 1/14/2012 7:51:33 PM | Computer Name = czarnota-family | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

[ System Events ]
Error - 3/14/2012 9:35:50 PM | Computer Name = czarnota-family | Source = Service Control Manager | ID = 7011
Description =

Error - 3/15/2012 4:53:35 AM | Computer Name = czarnota-family | Source = HTTP | ID = 15021
Description =

Error - 3/15/2012 4:25:31 PM | Computer Name = czarnota-family | Source = Dhcp | ID = 1002
Description = The IP address lease 192.168.1.142 for the Network Card with network
address 00219B1934BA has been denied by the DHCP server 192.168.1.1 (The DHCP Server
sent a DHCPNACK message).

Error - 3/18/2012 3:24:57 PM | Computer Name = czarnota-family | Source = Service Control Manager | ID = 7000
Description =

Error - 3/18/2012 9:07:42 PM | Computer Name = czarnota-family | Source = HTTP | ID = 15021
Description =

Error - 3/20/2012 4:01:36 PM | Computer Name = czarnota-family | Source = EventLog | ID = 6008
Description = The previous system shutdown at 2:59:31 PM on 3/20/2012 was unexpected.

Error - 3/20/2012 4:01:38 PM | Computer Name = czarnota-family | Source = HTTP | ID = 15021
Description =

Error - 3/21/2012 7:39:02 AM | Computer Name = czarnota-family | Source = Service Control Manager | ID = 7034
Description =

Error - 3/21/2012 7:40:46 AM | Computer Name = czarnota-family | Source = HTTP | ID = 15021
Description =

Error - 3/21/2012 10:10:17 AM | Computer Name = czarnota-family | Source = HTTP | ID = 15021
Description =


< End of report >

After installing and running Malwarebytes AntiMalware, I tried doing the following and could not accomplish it because directions did not work as indicated.
Vista users: You will need to to right-click on the either the IE or FF icon in the Start Menu or Quick Launch Bar on the Taskbar and select Run as

I then installed ESET online but never go to these steps:

When prompted allow the Add-On/Active X to install.
Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
Now click on Advanced Settings and select the following:

Scan for potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth Technology

I just selected start and it downloaded and scanned.



Here is the Maleware Antimalware file:
Malwarebytes Anti-Malware (Trial) 1.60.1.1000
www.malwarebytes.org

Database version: v2012.03.22.03

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
kevin :: CZARNOTA-FAMILY [administrator]

Protection: Enabled

3/22/2012 1:39:59 PM
mbam-log-2012-03-22 (13-39-59).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 277496
Time elapsed: 5 minute(s), 13 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 47
HKCR\CLSID\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\TypeLib\{44444444-4444-4444-4444-440044224458} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\Interface\{55555555-5555-5555-5555-550055225558} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0002258.BHO.1 (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CLSID\{22222222-2222-2222-2222-220022222258} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0002258.Sandbox.1 (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0002258.Sandbox (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CLSID\{33333333-3333-3333-3333-330033223358} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0002258.FBApi.1 (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0002258.FBApi (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65bcd620-07dd-012f-819f-073cf1b8f7c6} (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4D7B-9389-0F166788785A} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E720452-B472-4954-B7AA-33069EB53906} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63D0ED2C-B45B-4458-8B3B-60C69BBBD83C} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473D294-B7BB-4f24-AE82-7E2CE94BB6A9} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-D73B-42D5-8C85-4469CDA897AB} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9FF05104-B030-46FC-94B8-81276E4E27DF} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E79DFBCA-5697-4fbd-94E5-5B2A9C7C1612} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0002258.BHO (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I Want This (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\Software\Cr_Installer\2258 (Adware.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\VÍTIMA (Backdoor.Trace) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\TypeLib\{44444444-4444-4444-4444-440044224458} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\Interface\{55555555-5555-5555-5555-550055225558} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCR\CrossriderApp0002258.BHO.1 (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158} (PUP.GamePlayLab) -> Quarantined and deleted successfully.

Registry Values Detected: 4
HKCU\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search| (Adware.Hotbar) -> Data: http://edits.mywebsearch.com/toolbaredits/…US_ZUxdm722YYUS -> Quarantined and deleted successfully.
HKCU\Software\vítima|FirstExecution (Backdoor.Trace) -> Data: 03/06/2011 – 18:57 -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform|FunWebProducts (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\I Want This|Publisher (Adware.GamePlayLab) -> Data: 215 Apps -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 4
C:\Program Files (x86)\I Want This (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed] (PUP.PlaySushi) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed]\chrome (PUP.PlaySushi) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed]\components (PUP.PlaySushi) -> Quarantined and deleted successfully.

Files Detected: 19
C:\Users\kevin\AppData\Local\Temp\50or.exe (PUP.GamePlayLab.NSIS) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\I Want This.ini (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\appAPIinternalWrapper.js (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\fb.js (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\I Want This.exe (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\I Want This.ico (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\I Want ThisGui.exe (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\I Want ThisInstaller.log (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\jquery.js (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\json.js (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Program Files (x86)\I Want This\Uninstall.exe (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Users\kevin\Local Settings\Application Data\I Want This\Chrome\I Want This.crx (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Users\kevin\AppData\Local\I Want This\Chrome\I Want This.crx (Adware.GamePlayLab) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed]\chrome.manifest (PUP.PlaySushi) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed]\install.rdf (PUP.PlaySushi) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed]\chrome\pstextlinks.jar (PUP.PlaySushi) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed]\components\PlaySushiFF.dll (PUP.PlaySushi) -> Quarantined and deleted successfully.
C:\Users\Carla\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[removed]\components\PSTextLinks.xpt (PUP.PlaySushi) -> Quarantined and deleted successfully.

(end)


Can you clear up instruction for ESET before i run it?