Browser Search Redirect [Solved]

When I do a Google search and click a link from the results, I will get redirected to something like vipsearch or theclickcheck. Usually I can go back and click the link again and it will go there.

Hijackthis.log:
netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%PROGRAMFILES%\Internet Explorer\*.dat
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

DDS.txt:
netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%PROGRAMFILES%\Internet Explorer\*.dat
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

DDS attach.txt:
netsvcs
drivers32
%SYSTEMDRIVE%\*.*
%systemroot%\Fonts\*.com
%systemroot%\Fonts\*.dll
%systemroot%\Fonts\*.ini
%systemroot%\Fonts\*.ini2
%systemroot%\Fonts\*.exe
%systemroot%\system32\spool\prtprocs\w32x86\*.*
%systemroot%\REPAIR\*.bak1
%systemroot%\REPAIR\*.ini
%systemroot%\system32\*.jpg
%systemroot%\*.jpg
%systemroot%\*.png
%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%PROGRAMFILES%\Internet Explorer\*.dat
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

OTL.txt:
OTL logfile created on: 3/28/2012 11:23:46 PM - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = c:\Users\owner\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.93 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 52.02% Memory free
4.09 Gb Paging File | 2.42 Gb Available in Paging File | 59.03% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 69.52 Gb Total Space | 17.38 Gb Free Space | 25.00% Space Free | Partition Type: NTFS
Drive E: | 69.52 Gb Total Space | 66.36 Gb Free Space | 95.45% Space Free | Partition Type: NTFS

Computer Name: TECHBRI | User Name: owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\owner\Downloads\dds.scr ()
PRC - c:\Users\owner\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
PRC - C:\Users\owner\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc)
PRC - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe ()
PRC - C:\Program Files\AVG Secure Search\vprot.exe ()
PRC - C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Steam\Steam.exe (Valve Corporation)
PRC - C:\Program Files\AVG\AVG2012\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2012\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\SUPERAntiSpyware\SASCore.exe (SUPERAntiSpyware.com)
PRC - C:\Program Files\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Users\owner\AppData\Local\Temp\RtkBtMnt.exe (Realtek Semiconductor Corp.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Inc.)
PRC - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
PRC - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (Egis Incorporated)
PRC - C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe ()
PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems)
PRC - C:\Windows\System32\cmd.exe (Microsoft Corporation)
PRC - C:\ACER\Mobility Center\MobilityService.exe ()


========== Modules (No Company Name) ==========

MOD - C:\Users\owner\Downloads\dds.scr ()
MOD - C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll ()
MOD - C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll ()
MOD - C:\Program Files\Steam\bin\libcef.dll ()
MOD - C:\Program Files\Steam\bin\chromehtml.dll ()
MOD - C:\Program Files\Steam\bin\avcodec-53.dll ()
MOD - C:\Program Files\Steam\bin\avformat-53.dll ()
MOD - C:\Program Files\Steam\bin\avutil-51.dll ()
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files\AVG Secure Search\vprot.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\d0cf808e33a5123b33010b933d3b1597\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\5c3bfd69e0c268baff0d169e11a6a784\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\65450889f3742aada2a6c0cf8e6173e3\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\137696d0416b65dbc1561152971488b4\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c50133cb67d7c013fa31e1ffb942060b\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll ()
MOD - C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL ()
MOD - C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3009.0__4df5dcab8860d239\Framework.Utility.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3009.0__3036420f80dd6947\Framework.Library.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.3009.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll ()
MOD - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ShowErrMsg.dll ()
MOD - C:\Program Files\Launch Manager\PowerUtl.dll ()


========== Win32 Services (SafeList) ==========

SRV - (Spooler) – C:\Windows\System32\spoolsv.exe File not found
SRV - (Steam Client Service) – C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Akamai) – c:\program files\common files\akamai/netsession_win_6c825ce.dll ()
SRV - (vToolbarUpdater10.2.0) – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe ()
SRV - (avast! Antivirus) – C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (WinHttpAutoProxySvc) – winhttp.dll (Microsoft Corporation)
SRV - (AVGIDSAgent) – C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (!SASCORE) – C:\Program Files\SUPERAntiSpyware\SASCore.exe (SUPERAntiSpyware.com)
SRV - (avgwd) – C:\Program Files\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (npggsvc) – C:\Windows\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (AVG Security Toolbar Service) – C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe ()
SRV - (eDataSecurity Service) – C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
SRV - (ETService) – C:\Program Files\Acer\Empowering Technology\Service\ETService.exe ()
SRV - (AgereModemAudio) – C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (MobilityService) – C:\ACER\Mobility Center\MobilityService.exe ()


========== Driver Services (SafeList) ==========

DRV - (XDva391) – C:\Windows\system32\XDva391.sys File not found
DRV - (XDva383) – C:\Windows\system32\XDva383.sys File not found
DRV - (XDva370) – C:\Windows\system32\XDva370.sys File not found
DRV - (NwlnkFwd) – system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) – system32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) – system32\DRIVERS\ipinip.sys File not found
DRV - (EagleXNt) – C:\Windows\system32\drivers\EagleXNt.sys File not found
DRV - (EagleNT) – C:\Windows\system32\drivers\EagleNT.sys File not found
DRV - (b5ace8a4) – C:\Windows\TEMP\ED4B.tmp File not found
DRV - (aswSnx) – C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) – C:\Windows\System32\drivers\aswSP.sys (AVAST Software)
DRV - (AswRdr) – C:\Windows\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswTdi) – C:\Windows\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMonFlt) – C:\Windows\System32\drivers\aswMonFlt.sys (AVAST Software)
DRV - (aswFsBlk) – C:\Windows\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (dtsoftbus01) – C:\Windows\System32\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV - (XDva285) – C:\Windows\System32\XDva285.sys (www.wiselogic.co.kr)
DRV - (Avgldx86) – C:\Windows\System32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) – C:\Windows\System32\drivers\AVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgrkx86) – C:\Windows\System32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) – C:\Windows\System32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (Avgtdix) – C:\Windows\System32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSFilter) – C:\Windows\System32\drivers\AVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSEH) – C:\Windows\System32\drivers\AVGIDSEH.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSDriver) – C:\Windows\System32\drivers\AVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (BVRPMPR5) – C:\Windows\System32\drivers\BVRPMPR5.SYS (Avanquest Software)
DRV - (RTL8169) – C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation )
DRV - (int15) – C:\Windows\System32\drivers\int15.sys (Acer, Inc.)
DRV - (JMCR) – C:\Windows\System32\drivers\jmcr.sys (JMicron Technology Corp.)
DRV - (athr) – C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (AgereSoftModem) – C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (ApfiltrService) – C:\Windows\System32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (DritekPortIO) – C:\Program Files\Launch Manager\DPortIO.sys (Dritek System Inc.)
DRV - (NPPTNT2) – C:\Windows\System32\npptNT2.sys (INCA Internet Co., Ltd.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_4730z
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://toolbar.inbox.com/help/sa_customize.aspx?tbid=80051
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylon.com/?babsrc=SP_ss&am;…amp;affID=19591
IE - HKLM\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - SOFTWARE\Classes\CLSID\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}\InprocServer32 File not found
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKLM\..\SearchScopes\{44f44034-6036-4f06-9336-74ec4620edab}: "URL" = http://search.mywebsearch.com/mywebsearch/…r={searchTerms}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT2304157
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?…p={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&a;…;m=aspire_4730z
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://toolbar.inbox.com/search/dispatcher…d&%language
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss&am;…amp;affID=19591
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - SOFTWARE\Classes\CLSID\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}\InprocServer32 File not found
IE - HKCU\..\URLSearchHook: {D3D233D5-9F6D-436C-B6C7-E63F77503B30} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=i…1F-EF06539892F7
IE - HKCU\..\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: "URL" = http://search.babylon.com/?babsrc=SP_ss&am;…amp;affID=19591
IE - HKCU\..\SearchScopes\{44f44034-6036-4f06-9336-74ec4620edab}: "URL" = http://search.mywebsearch.com/mywebsearch/…r={searchTerms}
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…;rlz=1I7ACAW_en
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={4A6B441…mp;d=2011-09-26 11:10:25&v;=9.0.0.18&sap;=dsp&q;={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT2304157
IE - HKCU\..\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}: "URL" = http://toolbar.inbox.com/search/dispatcher…0051&lng;=en
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 127.0.0.1:9421;

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.param.yahoo-fr: "chrf-ytbm"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm"
FF - prefs.js..browser.search.param.yahoo-type: "${8}"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:home"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.1.3.20100310105313
FF - prefs.js..extensions.enabledItems: avg@igeared:6.103.018.001
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1319
FF - prefs.js..keyword.URL: "chrome://browser-region/locale/region.properties"


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@CelebSauce.com/Plugin: C:\Program Files\CelebSauce\bar\1.bin\NPkaStub.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@ogplanet.com/npOGPPlugin: C:\Windows\system32\npOGPPlugin.dll (OGPlanet)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG10\Toolbar\Firefox\avg@igeared [2011/09/16 20:38:02 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\CelebSauce\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}: C:\Program Files\Crawler\Toolbar\firefox\
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/02/01 14:01:00 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\10.2.0.3\ [2012/03/12 13:41:09 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/03/17 18:25:27 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/03/19 16:54:10 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/03/19 17:00:45 | 000,000,000 | —D | M]

[2010/10/19 21:59:56 | 000,000,000 | —D | M] (No name found) – C:\Users\owner\AppData\Roaming\mozilla\Extensions
[2012/03/19 16:54:22 | 000,000,000 | —D | M] (No name found) – C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gfepp4a8.default\extensions
[2011/02/04 16:36:56 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gfepp4a8.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/02/18 01:02:43 | 000,000,000 | —D | M] (XfireXO) – C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gfepp4a8.default\extensions\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
[2012/01/28 13:22:33 | 000,000,000 | —D | M] (Yahoo! Toolbar) – C:\Users\owner\AppData\Roaming\mozilla\Firefox\Profiles\gfepp4a8.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/12/15 15:37:38 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
() (No name found) – C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GFEPP4A8.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI
() (No name found) – C:\USERS\OWNER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\GFEPP4A8.DEFAULT\EXTENSIONS\[removed]
[2012/03/19 16:54:09 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/05/04 04:52:23 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/03/12 13:40:01 | 000,003,766 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\avg-secure-search.xml
[2011/06/22 02:59:05 | 000,002,423 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012/01/09 13:35:34 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2007/07/26 14:05:16 | 000,001,329 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\crawlersrch.xml
[2012/01/09 13:35:34 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\17.0.963.83\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\17.0.963.83\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\17.0.963.83\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: AVG Internet Security (Enabled) = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\plugins/avgnpss.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: downloadUpdater (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdnu.dll
CHR - plugin: downloadUpdater2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: OGPlanet Game Plugin (Enabled) = C:\Windows\system32\npOGPPlugin.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google Search = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.18_0\
CHR - Extension: avast! WebRep = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: AVG Safe Search = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla\12.0.0.1901_0\
CHR - Extension: Gmail = C:\Users\owner\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012/03/11 19:55:10 | 000,000,882 | RH– | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 94.63.147.16 www.google.com
O1 - Hosts: 94.63.147.17 www.bing.com
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll File not found
O2 - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (XfireXO Toolbar) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll File not found
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O4 - HKLM..\Run: [Acer Assist Launcher] C:\Program Files\Acer\Acer Assist\launcher.exe ()
O4 - HKLM..\Run: [Acer Product Registration] C:\Program Files\Acer\Acer Registration\ACE1.exe (Leader Technologies)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (Egis Incorporated)
O4 - HKLM..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe (Acer Inc.)
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [ROC_roc_dec12] C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [vProt] C:\Program Files\AVG Secure Search\vprot.exe ()
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\owner\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\Steam.exe (Valve Corporation)
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com)
O8 - Extra context menu item: E&xport; to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 File not found
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O16 - DPF: {0D8004AA-A1CB-4F92-BBEB-0A824B1EE2A2} http://ws.nopp.co.kr/Game/Common/HGLauncher.cab (HGLauncher Control)
O16 - DPF: {4F29DE54-5EB7-4D76-B610-A86B5CD2A234} Reg Error: Key error. (GameTap Player)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_26)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E1BD7CF8-B47C-432F-8A67-91E6B0CE79A9}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll ()
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - igfxdev.dll (Intel Corporation)
O24 - Desktop WallPaper: C:\Users\owner\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\owner\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O33 - MountPoints2\{5d366434-590a-11e1-aeb9-001eeccdfbb0}\Shell - "" = AutoRun
O33 - MountPoints2\{5d366434-590a-11e1-aeb9-001eeccdfbb0}\Shell\AutoRun\command - "" = D:\OblivionLauncher.exe
O33 - MountPoints2\{684ee796-c7bd-11df-a28d-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{684ee796-c7bd-11df-a28d-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Start.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: aux - wdmaud.drv (Microsoft Corporation)
Drivers32: midi - wdmaud.drv (Microsoft Corporation)
Drivers32: midimapper - midimap.dll (Microsoft Corporation)
Drivers32: mixer - wdmaud.drv (Microsoft Corporation)
Drivers32: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msadpcm - msadp32.acm (Microsoft Corporation)
Drivers32: msacm.msg711 - msg711.acm (Microsoft Corporation)
Drivers32: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation)
Drivers32: MSVideo8 - VfWWDM32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - iccvid.dll (Radius Inc.)
Drivers32: vidc.i420 - iyuv_32.dll (Microsoft Corporation)
Drivers32: VIDC.IYUV - iyuv_32.dll (Microsoft Corporation)
Drivers32: vidc.mrle - msrle32.dll (Microsoft Corporation)
Drivers32: vidc.msvc - msvidc32.dll (Microsoft Corporation)
Drivers32: VIDC.UYVY - msyuv.dll (Microsoft Corporation)
Drivers32: VIDC.YUY2 - msyuv.dll (Microsoft Corporation)
Drivers32: VIDC.YVU9 - tsbyuv.dll (Microsoft Corporation)
Drivers32: VIDC.YVYU - msyuv.dll (Microsoft Corporation)
Drivers32: wave - wdmaud.drv (Microsoft Corporation)
Drivers32: wavemapper - msacm32.drv (Microsoft Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/03/28 15:37:51 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/03/19 17:47:43 | 000,000,000 | —D | C] – C:\Users\owner\Documents\Black & White 2
[2012/03/17 20:04:55 | 002,044,416 | —- | C] (Microsoft Corporation) – C:\Windows\System32\win32k.sys
[2012/03/17 20:04:37 | 000,613,376 | —- | C] (Microsoft Corporation) – C:\Windows\System32\rdpencom.dll
[2012/03/17 20:04:33 | 001,068,544 | —- | C] (Microsoft Corporation) – C:\Windows\System32\DWrite.dll
[2012/03/17 20:04:32 | 000,219,648 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1core.dll
[2012/03/17 20:04:31 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10warp.dll
[2012/03/17 20:04:31 | 000,160,768 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d3d10_1.dll
[2012/03/17 20:04:30 | 000,683,008 | —- | C] (Microsoft Corporation) – C:\Windows\System32\d2d1.dll
[2012/03/17 18:30:18 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012/03/17 18:27:12 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012/03/17 18:27:11 | 000,020,696 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswFsBlk.sys
[2012/03/17 18:27:10 | 000,337,880 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswSP.sys
[2012/03/17 18:27:00 | 000,035,672 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswRdr.sys
[2012/03/17 18:26:59 | 000,053,848 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswTdi.sys
[2012/03/17 18:26:57 | 000,612,184 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswSnx.sys
[2012/03/17 18:26:52 | 000,057,688 | —- | C] (AVAST Software) – C:\Windows\System32\drivers\aswMonFlt.sys
[2012/03/17 18:24:16 | 000,041,184 | —- | C] (AVAST Software) – C:\Windows\avastSS.scr
[2012/03/17 18:24:10 | 000,201,352 | —- | C] (AVAST Software) – C:\Windows\System32\aswBoot.exe
[2012/03/17 18:22:48 | 000,000,000 | —D | C] – C:\ProgramData\AVAST Software
[2012/03/17 18:22:48 | 000,000,000 | —D | C] – C:\Program Files\AVAST Software
[2012/03/17 18:11:34 | 000,000,000 | —D | C] – C:\Windows\System32\tdsskiller
[2012/03/08 00:47:27 | 000,000,000 | —D | C] – C:\Windows\Minidump
[2012/03/05 18:33:07 | 000,000,000 | —D | C] – C:\Users\owner\Desktop\New Folder
[2010/10/31 16:48:23 | 000,094,208 | —- | C] (VSO Software) – C:\Users\owner\AppData\Roaming\ezplay.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/03/28 22:48:00 | 000,000,884 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/03/28 22:21:10 | 000,003,344 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/03/28 22:21:10 | 000,003,344 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/03/28 18:48:00 | 000,000,880 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/03/28 18:32:45 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/03/28 18:30:04 | 000,663,868 | —- | M] () – C:\Windows\System32\perfh009.dat
[2012/03/28 18:30:03 | 000,128,476 | —- | M] () – C:\Windows\System32\perfc009.dat
[2012/03/28 18:29:03 | 092,911,584 | —- | M] () – C:\Windows\System32\drivers\AVG\incavi.avm
[2012/03/28 18:23:06 | 000,001,833 | —- | M] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012/03/28 18:22:44 | 000,002,577 | —- | M] () – C:\Windows\System32\config.nt
[2012/03/28 18:22:36 | 000,000,433 | —- | M] () – C:\Windows\System32\drivers\etc\hosts.ics
[2012/03/28 18:21:54 | 000,000,000 | —- | M] () – C:\Windows\System32\LogConfigTemp.xml
[2012/03/25 14:05:49 | 000,019,934 | —- | M] () – C:\Users\owner\AppData\Roaming\wklnhst.dat
[2012/03/25 14:05:46 | 000,009,728 | —- | M] () – C:\Users\owner\Documents\dragon.wps
[2012/03/23 23:27:26 | 000,001,975 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2012/03/23 23:24:28 | 000,337,070 | —- | M] () – C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/03/19 16:47:21 | 003,647,504 | —- | M] () – C:\Windows\System32\FNTCACHE.DAT
[2012/03/17 18:34:56 | 000,001,959 | —- | M] () – C:\Users\owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/03/15 19:26:49 | 000,000,023 | —- | M] () – C:\Windows\BlendSettings.ini
[2012/03/12 14:28:27 | 171,272,174 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/03/12 14:17:37 | 000,000,680 | —- | M] () – C:\Users\owner\AppData\Local\d3d9caps.dat
[2012/03/11 19:55:10 | 000,000,882 | RH– | M] () – C:\Windows\System32\drivers\etc\hosts
[2012/03/06 19:15:19 | 000,041,184 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[2012/03/06 19:15:14 | 000,201,352 | —- | M] (AVAST Software) – C:\Windows\System32\aswBoot.exe
[2012/03/06 19:03:51 | 000,612,184 | —- | M] (AVAST Software) – C:\Windows\System32\drivers\aswSnx.sys
[2012/03/06 19:03:38 | 000,337,880 | —- | M] (AVAST Software) – C:\Windows\System32\drivers\aswSP.sys
[2012/03/06 19:02:00 | 000,035,672 | —- | M] (AVAST Software) – C:\Windows\System32\drivers\aswRdr.sys
[2012/03/06 19:01:53 | 000,053,848 | —- | M] (AVAST Software) – C:\Windows\System32\drivers\aswTdi.sys
[2012/03/06 19:01:48 | 000,057,688 | —- | M] (AVAST Software) – C:\Windows\System32\drivers\aswMonFlt.sys
[2012/03/06 19:01:30 | 000,020,696 | —- | M] (AVAST Software) – C:\Windows\System32\drivers\aswFsBlk.sys
[2012/03/01 22:57:32 | 000,011,264 | —- | M] () – C:\Users\owner\Documents\dreamplane.wps
[2012/02/29 22:21:19 | 000,011,264 | —- | M] () – C:\Users\owner\Desktop\resumebio.wps
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/03/19 17:00:46 | 000,001,804 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2012/03/17 18:30:18 | 000,001,975 | —- | C] () – C:\Users\Public\Desktop\Google Chrome.lnk
[2012/03/17 18:30:18 | 000,001,959 | —- | C] () – C:\Users\owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/03/17 18:28:48 | 000,000,884 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/03/17 18:28:46 | 000,000,880 | —- | C] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/03/17 18:27:13 | 000,001,833 | —- | C] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012/03/08 00:46:58 | 171,272,174 | —- | C] () – C:\Windows\MEMORY.DMP
[2012/03/01 22:57:31 | 000,011,264 | —- | C] () – C:\Users\owner\Documents\dreamplane.wps
[2012/02/29 22:21:18 | 000,011,264 | —- | C] () – C:\Users\owner\Desktop\resumebio.wps
[2012/02/17 21:49:48 | 000,000,023 | —- | C] () – C:\Windows\BlendSettings.ini
[2011/12/26 15:51:57 | 000,001,458 | -HS- | C] () – C:\Users\owner\AppData\Local\50nc5456n24wpwv40apjm20h41r31h6e
[2011/12/26 15:51:57 | 000,001,458 | -HS- | C] () – C:\ProgramData\50nc5456n24wpwv40apjm20h41r31h6e
[2011/06/11 21:40:28 | 000,000,258 | RHS- | C] () – C:\ProgramData\ntuser.pol
[2011/05/30 16:37:38 | 000,000,000 | —- | C] () – C:\Windows\PROTOCOL.INI
[2011/05/25 12:33:25 | 000,000,510 | —- | C] () – C:\Windows\WORDPAD.INI
[2011/05/12 15:50:11 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat
[2011/02/04 06:40:15 | 000,000,064 | —- | C] () – C:\Windows\GPlrLanc.dat
[2010/11/27 03:11:10 | 000,230,752 | —- | C] () – C:\Windows\patchw32.dll
[2010/11/27 03:11:09 | 000,118,176 | —- | C] () – C:\Windows\patchw.dll
[2010/10/31 16:48:23 | 000,087,608 | —- | C] () – C:\Users\owner\AppData\Roaming\inst.exe
[2010/10/31 16:48:23 | 000,007,861 | —- | C] () – C:\Users\owner\AppData\Roaming\ezplay.cat
[2010/10/31 16:48:23 | 000,001,103 | —- | C] () – C:\Users\owner\AppData\Roaming\ezplay.inf
[2010/10/31 16:48:23 | 000,000,125 | —- | C] () – C:\Users\owner\AppData\Roaming\ezplay.ini
[2010/10/26 19:48:53 | 000,000,284 | —- | C] () – C:\Windows\entpack.ini
[2010/10/25 19:25:52 | 000,117,248 | —- | C] () – C:\Windows\System32\EhStorAuthn.dll
[2010/10/25 19:25:52 | 000,107,612 | —- | C] () – C:\Windows\System32\StructuredQuerySchema.bin
[2010/10/25 19:25:11 | 000,018,904 | —- | C] () – C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010/10/21 10:44:26 | 000,000,093 | —- | C] () – C:\Users\owner\AppData\Local\fusioncache.dat
[2010/10/20 16:17:47 | 000,005,120 | —- | C] () – C:\Users\owner\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/20 09:34:39 | 000,000,680 | —- | C] () – C:\Users\owner\AppData\Local\d3d9caps.dat
[2010/10/19 21:59:51 | 000,000,000 | —- | C] () – C:\Windows\nsreg.dat
[2010/10/19 19:50:07 | 000,019,934 | —- | C] () – C:\Users\owner\AppData\Roaming\wklnhst.dat
[2010/08/25 20:30:02 | 000,439,308 | —- | C] () – C:\Windows\System32\igcompkrng500.bin
[2010/08/25 20:30:00 | 000,982,240 | —- | C] () – C:\Windows\System32\igkrng500.bin
[2010/08/25 20:30:00 | 000,092,356 | —- | C] () – C:\Windows\System32\igfcg500m.bin
[2010/08/25 19:59:08 | 000,004,096 | —- | C] ( ) – C:\Windows\System32\IGFXDEVLib.dll
[2010/08/25 19:57:00 | 000,000,151 | —- | C] () – C:\Windows\System32\GfxUI.exe.config
[2010/08/25 19:52:00 | 000,208,896 | —- | C] () – C:\Windows\System32\iglhsip32.dll
[2010/08/25 19:52:00 | 000,143,360 | —- | C] () – C:\Windows\System32\iglhcp32.dll

========== LOP Check ==========

[2012/02/14 11:39:13 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\acccore
[2010/09/24 05:36:22 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\Acer
[2010/09/24 05:49:16 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\Acer GameZone Console
[2012/03/28 16:36:25 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\AVG
[2011/09/26 11:08:00 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\AVG2012
[2011/05/12 02:05:39 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\DAEMON Tools
[2012/02/17 21:01:12 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\DAEMON Tools Lite
[2011/05/15 22:22:07 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\GetRightToGo
[2010/09/24 05:36:20 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\Leadertech
[2011/10/13 20:56:13 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\Opera
[2011/05/31 05:05:32 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\Philipp Winterberg
[2010/10/19 19:50:08 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\Template
[2010/10/21 10:45:20 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\Turbine
[2012/03/19 17:36:40 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\uTorrent
[2010/10/31 16:52:25 | 000,000,000 | —D | M] – C:\Users\owner\AppData\Roaming\Vso
[2012/03/20 01:54:17 | 000,032,610 | —- | M] () – C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2006/09/18 17:43:36 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/04/11 02:36:36 | 000,333,257 | RHS- | M] () – C:\bootmgr
[2006/09/18 17:43:37 | 000,000,010 | —- | M] () – C:\config.sys
[2010/11/23 16:45:49 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2012/02/14 11:38:54 | 000,001,112 | -H– | M] () – C:\IPH.PH
[2010/11/23 16:45:49 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/03/28 18:21:02 | 2387,886,080 | -HS- | M] () – C:\pagefile.sys
[2012/01/09 16:55:01 | 000,075,382 | —- | M] () – C:\TDSSKiller.2.6.25.0_09.01.2012_15.50.06_log.txt
[2012/01/09 16:55:24 | 000,001,850 | —- | M] () – C:\TDSSKiller.2.6.25.0_09.01.2012_15.55.09_log.txt
[2012/01/10 12:55:34 | 000,000,354 | —- | M] () – C:\TDSSKiller.2.6.25.0_10.01.2012_11.55.30_log.txt
[2012/01/12 14:34:38 | 000,000,348 | —- | M] () – C:\TDSSKiller.2.6.25.0_12.01.2012_13.34.33_log.txt
[2012/01/10 12:59:49 | 000,075,720 | —- | M] () – C:\TDSSKiller.2.7.0.0_10.01.2012_11.59.02_log.txt
[2012/01/12 14:38:10 | 000,076,058 | —- | M] () – C:\TDSSKiller.2.7.0.0_12.01.2012_13.37.12_log.txt
[2012/03/16 16:30:00 | 000,074,720 | —- | M] () – C:\TDSSKiller.2.7.0.0_16.03.2012_16.28.43_log.txt
[2012/03/17 18:11:09 | 000,000,346 | —- | M] () – C:\TDSSKiller.2.7.0.0_17.03.2012_18.11.06_log.txt
[2012/03/17 18:15:26 | 000,074,720 | —- | M] () – C:\TDSSKiller.2.7.0.0_17.03.2012_18.12.16_log.txt
[2012/01/19 13:39:07 | 000,074,952 | —- | M] () – C:\TDSSKiller.2.7.0.0_19.01.2012_12.38.31_log.txt
[2012/03/28 15:39:37 | 000,000,346 | —- | M] () – C:\TDSSKiller.2.7.0.0_28.03.2012_15.39.15_log.txt
[2012/03/28 15:42:27 | 000,076,034 | —- | M] () – C:\TDSSKiller.2.7.0.0_28.03.2012_15.41.21_log.txt
[2012/01/30 23:50:34 | 000,073,630 | —- | M] () – C:\TDSSKiller.2.7.0.0_30.01.2012_22.49.39_log.txt

< %systemroot%\Fonts\*.com >
[2006/11/02 08:37:12 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont
[2006/11/02 08:37:12 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont
[2006/11/02 08:37:12 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont
[2010/11/17 21:38:18 | 000,037,665 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2006/09/18 17:37:34 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2006/11/02 08:35:48 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\jnwppr.dll
[2006/10/26 22:56:12 | 000,033,104 | —- | M] (Microsoft Corporation) – C:\Windows\system32\spool\prtprocs\w32x86\msonpppr.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2012/03/06 19:15:19 | 000,041,184 | —- | M] (AVAST Software) – C:\Windows\avastSS.scr
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2008/01/20 22:43:21 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >
[2008/01/20 23:14:18 | 016,846,848 | —- | M] () – C:\Windows\System32\config\COMPONENTS.SAV
[2008/01/20 23:14:08 | 000,106,496 | —- | M] () – C:\Windows\System32\config\DEFAULT.SAV
[2008/01/20 23:14:18 | 000,020,480 | —- | M] () – C:\Windows\System32\config\SECURITY.SAV
[2006/11/02 06:34:08 | 010,133,504 | —- | M] () – C:\Windows\System32\config\SOFTWARE.SAV
[2006/11/02 06:34:08 | 001,826,816 | —- | M] () – C:\Windows\System32\config\SYSTEM.SAV

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2011/06/15 03:23:01 | 000,000,286 | -HS- | M] () – C:\Users\owner\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2010/10/29 19:27:54 | 000,118,784 | —- | M] () – C:\Users\owner\Desktop\ski32.exe
[2012/01/10 10:14:56 | 001,972,528 | —- | M] (Kaspersky Lab ZAO) – C:\Users\owner\Desktop\TDSSKiller.exe
[2012/01/23 14:01:11 | 000,647,168 | —- | M] (Chapley) – C:\Users\owner\Desktop\TerrariViewer.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-03-18 00:08:04

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\Windows\$NtUninstallKB59234$] -> Error: Cannot create file handle -> Unknown point type

========== Alternate Data Streams ==========

@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:0B4227B4
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:F880DE59
@Alternate Data Stream - 115 bytes -> C:\ProgramData\Temp:C946DB94
@Alternate Data Stream - 103 bytes -> C:\ProgramData\Temp:9F683177
@Alternate Data Stream - 100 bytes -> C:\ProgramData\Temp:753F86A9

< End of report >

%systemroot%\*.scr
%systemroot%\*._sy
%APPDATA%\Adobe\Update\*.*
%ALLUSERSPROFILE%\Favorites\*.*
%APPDATA%\Microsoft\*.*
%PROGRAMFILES%\*.*
%APPDATA%\Update\*.*
%systemroot%\*. /mp /s
CREATERESTOREPOINT
%systemroot%\System32\config\*.sav
%PROGRAMFILES%\bak. /s
%systemroot%\system32\bak. /s
%ALLUSERSPROFILE%\Start Menu\*.lnk /x
%systemroot%\system32\config\systemprofile\*.dat /x
%systemroot%\*.config
%systemroot%\system32\*.db
%PROGRAMFILES%\Internet Explorer\*.dat
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x
%USERPROFILE%\Desktop\*.exe
%PROGRAMFILES%\Common Files\*.*
%systemroot%\*.src
%systemroot%\install\*.*
%systemroot%\system32\DLL\*.*
%systemroot%\system32\HelpFiles\*.*
%systemroot%\system32\rundll\*.*
%systemroot%\winn32\*.*
%systemroot%\Java\*.*
%systemroot%\system32\test\*.*
%systemroot%\system32\Rundll32\*.*
%systemroot%\AppPatch\Custom\*.*
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs

OTL extras.txt:
OTL Extras logfile created on: 3/28/2012 11:23:46 PM - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = c:\Users\owner\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

1.93 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 52.02% Memory free
4.09 Gb Paging File | 2.42 Gb Available in Paging File | 59.03% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 69.52 Gb Total Space | 17.38 Gb Free Space | 25.00% Space Free | Partition Type: NTFS
Drive E: | 69.52 Gb Total Space | 66.36 Gb Free Space | 95.45% Space Free | Partition Type: NTFS

Computer Name: TECHBRI | User Name: owner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] – "C:\Program Files\Opera\Opera.exe" "%1"

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] – "C:\Program Files\Opera\Opera.exe" "%1"
https [open] – "C:\Program Files\Opera\Opera.exe" "%1"
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"VistaSp2" = Reg Error: Unknown registry data type – File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-1559993289-1454041753-2218286212-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{70940C33-E03F-46C4-8EAD-1DCEFBD95E2B}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{96C1CBB1-AC98-445F-BD90-4F3590E9E36D}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9834084B-5F0A-47F3-B4B5-D00F662E8364}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{B8C77B59-2240-4F4E-96FB-0DB5F3063B8D}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{BACA2B96-F097-4CA3-AD49-0D95679BEF20}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{D07DC4A1-CA9B-42ED-9B37-DFB70282C77D}" = rport=2869 | protocol=6 | dir=out | app=system |
"{E4B69E3F-E399-4E8B-BA5C-0612C490905C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{EB0F1CB0-1431-41D9-BBD7-C6F7E7FDD03F}" = lport=2869 | protocol=6 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{010373F7-002D-4F0B-8E5A-FA46453726E9}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgdiagex.exe |
"{05643ED2-08C1-4DF3-BAF5-316565784AEE}" = protocol=6 | dir=in | app=e:\edeneternal\_launcher.exe |
"{074DC4E9-A6C5-45F6-8CB9-7CE712DC9C8D}" = protocol=6 | dir=in | app=c:\nexon\maplestory\maplestory.exe |
"{0E105507-C57C-458B-A63A-5A71D8F84320}" = protocol=6 | dir=in | app=e:\edeneternal\launcher.exe |
"{15992752-C6B0-4CE5-AC27-275D973FC4A5}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
"{212021B2-5441-471A-8322-DFA61DCA7C04}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{24480BAF-E533-42B6-AE18-2590B80DE362}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\schedulersvc.exe |
"{27D5B60E-2A72-4B7D-82E0-633ECC694C36}" = protocol=17 | dir=in | app=e:\nwn\neverwinter nights\nwn.exe |
"{2E372193-B70E-47A0-8485-CC6558B42EF0}" = protocol=6 | dir=in | app=e:\edeneternal\launcher.exe |
"{37CBF8CE-57B1-4904-AF21-4F3DB2B0F3A3}" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"{38711D7F-C209-4BDE-AEA1-B5C909FCCC28}" = protocol=17 | dir=in | app=c:\users\owner\appdata\local\akamai\netsession_win.exe |
"{39B86860-9729-4298-9F29-99649CC050E9}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{3A6D8954-E9BF-434D-BDD5-AE8B0F00B2EF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{444BCDB0-9634-4541-9A20-3A245954F136}" = protocol=17 | dir=in | app=e:\edeneternal\launcher.exe |
"{491478BF-40B0-49EA-9ED8-C53EF5B28035}" = protocol=17 | dir=in | app=c:\program files\steam\steam.exe |
"{561B53E0-3416-46BC-9304-565E533325ED}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe |
"{677EDC98-53EE-42D8-8694-D50D4D5CEE74}" = protocol=6 | dir=in | app=c:\nexon\maplestory\gamelauncher.exe |
"{6D88527C-ABED-4785-A483-BF63AE6C9A68}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe |
"{74204A2A-4874-436C-B984-F607474D8A6E}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgnsx.exe |
"{7805AB2F-CE5F-4626-B819-E7617FFAA4DF}" = protocol=6 | dir=in | app=e:\edeneternal\_launcher.exe |
"{79FEAC0D-DAEE-4050-8361-A099BF0A9ED1}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7BE104AB-CB4B-4396-885B-C7A90C8D650C}" = protocol=6 | dir=in | app=c:\users\owner\appdata\local\akamai\netsession_win.exe |
"{7FFEC254-AB30-4B71-A060-7DD9C820B619}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{846D20B2-1517-44A2-BA4F-E24F08E580CB}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe |
"{850C1C87-0FB8-4EB5-8463-B5BB0F0B97C7}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{850E9334-DAA1-4789-B204-7E6B8F5A7333}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{8A2F0077-6ED4-46BE-90D8-CC157FAC2EE2}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{915E6C2A-1406-4681-911E-187B5065C50D}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgnsx.exe |
"{94D4229A-A365-4498-B139-F2A629222664}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{950AAD36-C789-44C1-85D5-02D0439A43C8}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
"{99DD92B3-D5A7-4D7F-B9B6-802F28EB85E8}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe |
"{A381F1AF-ABA0-45D7-9C47-40A12DDD3C20}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{B57BC056-A2D5-482D-AA16-267DD8968C56}" = protocol=17 | dir=in | app=c:\nexon\maplestory\gamelauncher.exe |
"{B846E99B-D7F6-4DA6-9EEF-EBD8639EDA1F}" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"{C0F13B39-12A7-43FB-B0A9-DE1AB8AACAFD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C2231707-12CA-4A78-AA53-0C087DF0A1DD}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{C48B4355-4D6F-485A-A378-6DB83D246B58}" = protocol=17 | dir=in | app=c:\nexon\maplestory\maplestory.exe |
"{C78AAAAB-E2D2-4060-B914-B09D61667E07}" = protocol=17 | dir=in | app=e:\edeneternal\_launcher.exe |
"{C7C4B8BC-F560-464E-8565-8FF4AC03F1C5}" = protocol=17 | dir=in | app=e:\edeneternal\_launcher.exe |
"{CE0135AE-0AA4-4825-98B9-BFAEA91E6672}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{CEF640AF-8562-4D3A-BDAF-CBE6924B9C0E}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgdiagex.exe |
"{D03363D1-56FF-440B-82C7-67F92957888E}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{D0963233-E123-40E5-BA86-BDF15D15B9FB}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{D0F32F58-FC0F-4695-861C-9868C3DA4E4A}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{D1A1FCE8-BFE5-44A5-A5BD-74667348CB1E}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{D3FA2E4E-D252-40C7-96E3-0B85167C9AF7}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{D6673894-518F-496E-BAEB-172F849B0EB3}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{DB8BC91B-DB62-4057-AB7F-1ED63001EAFC}" = protocol=6 | dir=in | app=e:\nwn\neverwinter nights\nwn.exe |
"{DC429A48-0BD5-4FAC-9C85-563438A2016A}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{DD9B5440-75E2-4C87-92FE-D88A50BB8710}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{E38078CE-45D9-4F70-9830-120C0E5A51AC}" = protocol=17 | dir=in | app=e:\edeneternal\launcher.exe |
"{ECC5182A-3E0E-450F-BF0C-0B6EA981B8A4}" = protocol=6 | dir=in | app=c:\program files\steam\steam.exe |
"{EE769D23-D801-4C47-960B-CF4F8A17420D}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe |
"{F180B61C-03F1-45D8-ABB8-EFED81AE5ED3}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{F42F3A82-1443-4AF2-9769-5E3777BF0C43}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{F531E34F-E39D-402A-B865-E8E8A9F5DD28}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\schedulersvc.exe |
"{F93E176E-BECC-43E8-9BFA-B1DA2BA534C9}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{F9FDADBC-199A-4613-9CF4-947671D43E6F}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{FED01425-9EF6-42F5-81AF-C3307948929F}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe |
"TCP Query User{282A3CB7-F267-4A2E-ABEB-C7F438B2307D}E:\bw\runblack.exe" = protocol=6 | dir=in | app=e:\bw\runblack.exe |
"TCP Query User{6C2E55ED-4F43-4083-8AE4-AFFA6F05DFE6}C:\ignitedgames\windslayer2\windslayers.exe" = protocol=6 | dir=in | app=c:\ignitedgames\windslayer2\windslayers.exe |
"TCP Query User{75BA8733-398E-49C9-BADC-D2E5464478FF}E:\bw\runblack.exe" = protocol=6 | dir=in | app=e:\bw\runblack.exe |
"TCP Query User{C629677D-579A-43B3-9D31-E8156EC2789B}C:\users\owner\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\owner\appdata\local\akamai\netsession_win.exe |
"TCP Query User{E552E1BE-AAF1-4866-A24D-1A152BD4E652}E:\dc\unreal3\binaries\win32\dcgame.exe" = protocol=6 | dir=in | app=e:\dc\unreal3\binaries\win32\dcgame.exe |
"TCP Query User{F5DE5B0E-8A81-410F-ABD7-399AC215C07F}E:\new folder\ws2\windslayers.exe" = protocol=6 | dir=in | app=e:\new folder\ws2\windslayers.exe |
"TCP Query User{FB4A9A7A-2E58-4F2C-9B96-C63A97231A88}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe |
"TCP Query User{FD78AB4E-3780-41E0-9A7A-CBFA0885D95B}C:\program files\aim\aim.exe" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"UDP Query User{0163CF71-6497-40C7-AAE6-2160A50E0936}E:\dc\unreal3\binaries\win32\dcgame.exe" = protocol=17 | dir=in | app=e:\dc\unreal3\binaries\win32\dcgame.exe |
"UDP Query User{0C1B8B2A-7423-4DCA-8960-2C005BD05009}C:\program files\aim\aim.exe" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"UDP Query User{180C2025-07D5-40A9-A980-D2393317193D}E:\bw\runblack.exe" = protocol=17 | dir=in | app=e:\bw\runblack.exe |
"UDP Query User{199A63A9-6405-42E2-8024-2E0F7BE4CEFE}C:\users\owner\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\owner\appdata\local\akamai\netsession_win.exe |
"UDP Query User{1FA42D3F-BFC3-497F-8D60-D2C7C54396F4}E:\bw\runblack.exe" = protocol=17 | dir=in | app=e:\bw\runblack.exe |
"UDP Query User{3FF66637-6CEE-449A-894D-3F29B32B5486}C:\ignitedgames\windslayer2\windslayers.exe" = protocol=17 | dir=in | app=c:\ignitedgames\windslayer2\windslayers.exe |
"UDP Query User{5AD5A773-557B-4C55-A952-59520E5E83D4}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe |
"UDP Query User{CC1B5DFB-F839-4345-AAC2-FEAE625BBEE8}E:\new folder\ws2\windslayers.exe" = protocol=17 | dir=in | app=e:\new folder\ws2\windslayers.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{08C5815C-2C6E-44f8-8748-0E61BC9AFB06}" = La Tale
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{11316260-6666-467B-AC34-183FCB5D4335}" = Acer Mobility Center Plug-In
"{13D85C14-2B85-419F-AC41-C7F21E68B25D}" = Acer eSettings Management
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26604C7E-A313-4D12-867F-7C6E7820BE4C}" = JMicron JMB38X Flash Media Controller
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java™ 6 Update 26
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4EFC72DA-2314-4E5D-AC8E-1C954CDB8BBF}" = AVG 2012
"{58E5844B-7CE2-413D-83D1-99294BF6C74F}" = Acer ePower Management
"{5B63A470-9334-44D1-AF61-6CE2DB565AE9}" = Orion
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D52C408-B09A-4520-9B18-475B81D393F1}" = Microsoft Works
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72E80496-C446-4389-B4F2-CC46DF704A7F}" = Terrafirma
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8F1B6239-FEA0-450A-A950-B05276CE177C}" = Acer Empowering Technology
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{95140000-00AF-0409-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = ALPS Touch Pad Driver
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A5633652-3795-4829-BB0B-644F0279E279}" = Acer eDataSecurity Management
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A95000000001}" = Adobe Reader 9.5.0
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E7E84E23-C5C0-4B15-B13A-C63149E59C98}" = AVG 2012
"{EA2DB6E0-72C5-4ef9-A3A0-E6705F4A6A9E}" = Nexon Game Manager
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Acer Assist" = Acer Assist
"Acer Registration" = Acer Registration
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Agere Systems Soft Modem" = Agere Systems HDA Modem
"AIM_7" = AIM 7
"Akamai" = Akamai NetSession Interface Service
"avast" = avast! Free Antivirus
"AVG" = AVG 2012
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"conduitEngine" = Conduit Engine
"DAEMON Tools Lite" = DAEMON Tools Lite
"Google Chrome" = Google Chrome
"GridVista" = Acer GridVista
"HDMI" = Intel® Graphics Media Accelerator Driver
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"LManager" = Launch Manager
"MapleStory" = MapleStory
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 11.0 (x86 en-US)" = Mozilla Firefox 11.0 (x86 en-US)
"OGPlanet Game Launcher US" = OGPlanet Game Launcher
"RarZilla Free Unrar" = RarZilla Free Unrar
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"Steam App 105600" = Terraria
"uTorrent" = µTorrent
"YTdetect" = Yahoo! Detect

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 3/13/2012 7:46:57 AM | Computer Name = Techbri | Source = Windows Search Service | ID = 3013
Description =

Error - 3/15/2012 9:32:47 PM | Computer Name = Techbri | Source = WinMgmt | ID = 10
Description =

Error - 3/16/2012 2:02:46 PM | Computer Name = Techbri | Source = WinMgmt | ID = 10
Description =

Error - 3/16/2012 3:27:55 PM | Computer Name = Techbri | Source = Microsoft-Windows-CAPI2 | ID = 131585
Description =

Error - 3/16/2012 3:28:03 PM | Computer Name = Techbri | Source = SPP | ID = 16387
Description =

Error - 3/16/2012 3:28:03 PM | Computer Name = Techbri | Source = System Restore | ID = 8193
Description =

Error - 3/16/2012 3:28:03 PM | Computer Name = Techbri | Source = System Restore | ID = 8210
Description =

Error - 3/16/2012 4:21:15 PM | Computer Name = Techbri | Source = VSS | ID = 8194
Description =

Error - 3/16/2012 4:21:19 PM | Computer Name = Techbri | Source = Microsoft-Windows-CAPI2 | ID = 131585
Description =

Error - 3/16/2012 4:21:27 PM | Computer Name = Techbri | Source = SPP | ID = 16387
Description =

[ Media Center Events ]
Error - 10/21/2010 7:57:38 PM | Computer Name = owner-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.SqmFlushSession failed; Win32 GetLastError
returned 0D Process: DefaultDomain Object Name: Media Center Guide

Error - 10/21/2010 7:59:37 PM | Computer Name = owner-PC | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsTemplate.

Error - 10/29/2010 10:15:50 PM | Computer Name = owner-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

Error - 12/16/2010 6:19:40 PM | Computer Name = owner-PC | Source = Media Center Guide | ID = 0
Description = Event Info: ERROR: SqmApiWrapper.TimerRecord failed; Win32 GetLastError
returned 10000105 Process: DefaultDomain Object Name: Media Center Guide

[ System Events ]
Error - 3/28/2012 6:16:19 PM | Computer Name = Techbri | Source = Service Control Manager | ID = 7001
Description =

Error - 3/28/2012 6:21:24 PM | Computer Name = Techbri | Source = Microsoft-Windows-WLAN-AutoConfig | ID = 10000
Description =

Error - 3/28/2012 6:22:36 PM | Computer Name = Techbri | Source = ipnathlp | ID = 34001
Description = The ICS_IPV6 failed to configure IPv6 stack.

Error - 3/28/2012 6:22:36 PM | Computer Name = Techbri | Source = ipnathlp | ID = 30013
Description = The DHCP allocator has disabled itself on IP address 192.168.1.3,
since the IP address is outside the 192.168.0.0/255.255.255.0 scope from which addresses
are being allocated to DHCP clients. To enable the DHCP allocator on this IP address,
change the scope to include the IP address, or change the IP address to fall within
the scope.

Error - 3/28/2012 6:22:45 PM | Computer Name = Techbri | Source = Service Control Manager | ID = 7000
Description =

Error - 3/28/2012 6:22:45 PM | Computer Name = Techbri | Source = Service Control Manager | ID = 7011
Description =

Error - 3/28/2012 6:22:55 PM | Computer Name = Techbri | Source = ipnathlp | ID = 31004
Description = The DNS proxy agent was unable to allocate 0 bytes of memory. This
may indicate that the system is low on virtual memory, or that the memory manager
has encountered an internal error.

Error - 3/28/2012 6:27:55 PM | Computer Name = Techbri | Source = Service Control Manager | ID = 7022
Description =

Error - 3/28/2012 6:30:41 PM | Computer Name = Techbri | Source = Service Control Manager | ID = 7009
Description =

Error - 3/28/2012 6:30:41 PM | Computer Name = Techbri | Source = Service Control Manager | ID = 7000
Description =


< End of report >

I can definitely see infections in your machine, but I have to get an overview of how far the damage has been done. I also wish to see this TDSS Killer log : C:\TDSSKiller.2.7.0.0_28.03.2012_15.41.21_log.txt

Please download aswMBR.exe and save it to your desktop.

• Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
• Allow it to update where necessary
• Click Scan
  
  
• Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
• You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

===================================================

On your next reply please post :
TDSS Killer log
aswMBR log


Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

Here is the TDSS Killer Log you asked for:
15:41:21.0866 3104 TDSS rootkit removing tool 2.7.0.0 Jan 10 2012 09:14:26
15:41:25.0250 3104 ============================================================
15:41:25.0250 3104 Current date / time: 2012/03/28 15:41:25.0250
15:41:25.0250 3104 SystemInfo:
15:41:25.0250 3104
15:41:25.0250 3104 OS Version: 6.0.6002 ServicePack: 2.0
15:41:25.0250 3104 Product type: Workstation
15:41:25.0250 3104 ComputerName: TECHBRI
15:41:25.0250 3104 UserName: owner
15:41:25.0250 3104 Windows directory: C:\Windows
15:41:25.0250 3104 System windows directory: C:\Windows
15:41:25.0250 3104 Processor architecture: Intel x86
15:41:25.0250 3104 Number of processors: 2
15:41:25.0250 3104 Page size: 0x1000
15:41:25.0250 3104 Boot type: Normal boot
15:41:25.0250 3104 ============================================================
15:41:28.0229 3104 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000, SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K', Flags 0x00000050
15:41:28.0978 3104 Initialize success
15:41:31.0177 4208 ============================================================
15:41:31.0177 4208 Scan started
15:41:31.0177 4208 Mode: Manual;
15:41:31.0177 4208 ============================================================
15:41:32.0971 4208 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
15:41:32.0986 4208 ACPI - ok
15:41:33.0049 4208 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
15:41:33.0189 4208 adp94xx - ok
15:41:33.0267 4208 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
15:41:33.0595 4208 adpahci - ok
15:41:33.0626 4208 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
15:41:33.0673 4208 adpu160m - ok
15:41:33.0751 4208 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
15:41:33.0751 4208 adpu320 - ok
15:41:33.0907 4208 AFD (3911b972b55fea0478476b2e777b29fa) C:\Windows\system32\drivers\afd.sys
15:41:33.0953 4208 AFD - ok
15:41:34.0078 4208 AgereSoftModem (38325c6aa8eae011897d61ce48ec6435) C:\Windows\system32\DRIVERS\AGRSM.sys
15:41:34.0141 4208 AgereSoftModem - ok
15:41:34.0328 4208 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
15:41:34.0328 4208 agp440 - ok
15:41:34.0577 4208 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
15:41:34.0577 4208 aic78xx - ok
15:41:34.0640 4208 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
15:41:34.0640 4208 aliide - ok
15:41:34.0702 4208 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
15:41:34.0702 4208 amdagp - ok
15:41:34.0733 4208 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
15:41:34.0733 4208 amdide - ok
15:41:34.0780 4208 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
15:41:34.0811 4208 AmdK7 - ok
15:41:34.0842 4208 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\drivers\amdk8.sys
15:41:34.0842 4208 AmdK8 - ok
15:41:34.0920 4208 ApfiltrService (0ed1a5b7a8ae5939a92ea1ec39e16d21) C:\Windows\system32\DRIVERS\Apfiltr.sys
15:41:34.0936 4208 ApfiltrService - ok
15:41:34.0998 4208 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
15:41:34.0998 4208 arc - ok
15:41:35.0295 4208 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
15:41:35.0295 4208 arcsas - ok
15:41:35.0482 4208 aswFsBlk (0ae43c6c411254049279c2ee55630f95) C:\Windows\system32\drivers\aswFsBlk.sys
15:41:35.0560 4208 aswFsBlk - ok
15:41:36.0184 4208 aswMonFlt (6693141560b1615d8dccf0d8eb00087e) C:\Windows\system32\drivers\aswMonFlt.sys
15:41:36.0308 4208 aswMonFlt - ok
15:41:37.0026 4208 AswRdr (da12626fd9a67f4e917e2f2fbe1e1764) C:\Windows\system32\drivers\AswRdr.sys
15:41:37.0026 4208 AswRdr - ok
15:41:37.0119 4208 aswSnx (dcb199b967375753b5019ec15f008f53) C:\Windows\system32\drivers\aswSnx.sys
15:41:37.0166 4208 aswSnx - ok
15:41:37.0307 4208 aswSP (b32873e5a1443c0a1e322266e203bf10) C:\Windows\system32\drivers\aswSP.sys
15:41:37.0322 4208 aswSP - ok
15:41:37.0369 4208 aswTdi (6ff544175a9180c5d88534d3d9c9a9f7) C:\Windows\system32\drivers\aswTdi.sys
15:41:37.0416 4208 aswTdi - ok
15:41:37.0634 4208 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
15:41:37.0650 4208 AsyncMac - ok
15:41:37.0712 4208 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
15:41:37.0728 4208 atapi - ok
15:41:38.0008 4208 athr (997e25f5b7d53c94c0ad2dc080f6868e) C:\Windows\system32\DRIVERS\athr.sys
15:41:38.0055 4208 athr - ok
15:41:38.0648 4208 AVGIDSDriver (4cbb56fbc9c0cbc517e6e3a6889ebddc) C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys
15:41:38.0710 4208 AVGIDSDriver - ok
15:41:38.0741 4208 AVGIDSEH (459bce188232e2fe6152423efef65d76) C:\Windows\system32\DRIVERS\AVGIDSEH.Sys
15:41:38.0757 4208 AVGIDSEH - ok
15:41:38.0819 4208 AVGIDSFilter (91d9abe7e88eac7c167cba4ed4d983bf) C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys
15:41:38.0819 4208 AVGIDSFilter - ok
15:41:38.0913 4208 AVGIDSShim (3fc2714e185c04308215d46730d41a94) C:\Windows\system32\DRIVERS\AVGIDSShim.Sys
15:41:38.0929 4208 AVGIDSShim - ok
15:41:39.0163 4208 Avgldx86 (bf8118cd5e2255387b715b534d64acd1) C:\Windows\system32\DRIVERS\avgldx86.sys
15:41:39.0163 4208 Avgldx86 - ok
15:41:39.0412 4208 Avgmfx86 (1c77ef67f196466adc9924cb288afe87) C:\Windows\system32\DRIVERS\avgmfx86.sys
15:41:39.0443 4208 Avgmfx86 - ok
15:41:39.0740 4208 Avgrkx86 (f2038ed7284b79dcef581468121192a9) C:\Windows\system32\DRIVERS\avgrkx86.sys
15:41:39.0755 4208 Avgrkx86 - ok
15:41:39.0896 4208 Avgtdix (a6d562b612216d8d02a35ebeb92366bd) C:\Windows\system32\DRIVERS\avgtdix.sys
15:41:39.0958 4208 Avgtdix - ok
15:41:40.0020 4208 b5ace8a4 - ok
15:41:40.0208 4208 BCM43XX (e22abcaa7b6ff580feb0d49545dc4263) C:\Windows\system32\DRIVERS\bcmwl6.sys
15:41:40.0270 4208 BCM43XX - ok
15:41:40.0364 4208 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
15:41:40.0364 4208 Beep - ok
15:41:40.0426 4208 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
15:41:40.0535 4208 blbdrive - ok
15:41:40.0660 4208 bowser (35f376253f687bde63976ccb3f2108ca) C:\Windows\system32\DRIVERS\bowser.sys
15:41:40.0660 4208 bowser - ok
15:41:40.0753 4208 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
15:41:40.0753 4208 BrFiltLo - ok
15:41:40.0816 4208 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
15:41:40.0847 4208 BrFiltUp - ok
15:41:40.0878 4208 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
15:41:40.0878 4208 Brserid - ok
15:41:40.0941 4208 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
15:41:40.0941 4208 BrSerWdm - ok
15:41:40.0972 4208 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
15:41:40.0972 4208 BrUsbMdm - ok
15:41:41.0034 4208 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
15:41:41.0034 4208 BrUsbSer - ok
15:41:41.0128 4208 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
15:41:41.0143 4208 BTHMODEM - ok
15:41:41.0237 4208 BVRPMPR5 (248dfa5762dde38dfddbbd44149e9d7a) C:\Windows\system32\drivers\BVRPMPR5.SYS
15:41:41.0237 4208 BVRPMPR5 - ok
15:41:41.0299 4208 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
15:41:41.0299 4208 cdfs - ok
15:41:41.0440 4208 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
15:41:41.0471 4208 cdrom - ok
15:41:41.0596 4208 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\drivers\circlass.sys
15:41:41.0596 4208 circlass - ok
15:41:41.0674 4208 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
15:41:41.0736 4208 CLFS - ok
15:41:41.0892 4208 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
15:41:41.0908 4208 CmBatt - ok
15:41:41.0939 4208 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
15:41:41.0939 4208 cmdide - ok
15:41:41.0970 4208 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
15:41:41.0970 4208 Compbatt - ok
15:41:42.0001 4208 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
15:41:42.0017 4208 crcdisk - ok
15:41:42.0048 4208 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
15:41:42.0048 4208 Crusoe - ok
15:41:42.0188 4208 DfsC (622c41a07ca7e6dd91770f50d532cb6c) C:\Windows\system32\Drivers\dfsc.sys
15:41:42.0188 4208 DfsC - ok
15:41:42.0297 4208 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
15:41:42.0297 4208 disk - ok
15:41:42.0422 4208 DKbFltr (73baf270d24fe726b9cd7f80bb17a23d) C:\Windows\system32\DRIVERS\DKbFltr.sys
15:41:42.0469 4208 DKbFltr - ok
15:41:42.0641 4208 DritekPortIO (5c918d413f5837e67a85775c9873775e) C:\PROGRA~1\LAUNCH~1\DPortIO.sys
15:41:42.0765 4208 DritekPortIO - ok
15:41:43.0327 4208 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
15:41:43.0327 4208 drmkaud - ok
15:41:43.0436 4208 dtsoftbus01 (687af6bb383885ff6a64071b189a7f3e) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
15:41:43.0436 4208 dtsoftbus01 - ok
15:41:43.0748 4208 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
15:41:43.0795 4208 DXGKrnl - ok
15:41:43.0826 4208 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
15:41:43.0826 4208 E1G60 - ok
15:41:43.0873 4208 EagleNT - ok
15:41:43.0935 4208 EagleXNt - ok
15:41:44.0029 4208 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
15:41:44.0278 4208 Ecache - ok
15:41:44.0590 4208 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
15:41:45.0448 4208 elxstor - ok
15:41:45.0729 4208 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
15:41:45.0729 4208 ErrDev - ok
15:41:45.0916 4208 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
15:41:46.0041 4208 exfat - ok
15:41:46.0197 4208 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
15:41:46.0259 4208 fastfat - ok
15:41:46.0321 4208 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
15:41:46.0321 4208 fdc - ok
15:41:46.0477 4208 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
15:41:46.0477 4208 FileInfo - ok
15:41:46.0493 4208 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
15:41:46.0509 4208 Filetrace - ok
15:41:46.0524 4208 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
15:41:46.0540 4208 flpydisk - ok
15:41:46.0664 4208 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
15:41:46.0711 4208 FltMgr - ok
15:41:46.0774 4208 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
15:41:46.0774 4208 Fs_Rec - ok
15:41:46.0836 4208 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
15:41:46.0836 4208 gagp30kx - ok
15:41:46.0914 4208 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
15:41:47.0023 4208 HdAudAddService - ok
15:41:47.0101 4208 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
15:41:47.0164 4208 HDAudBus - ok
15:41:47.0210 4208 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
15:41:47.0210 4208 HidBth - ok
15:41:47.0366 4208 HidIr (ff3160c3a2445128c5a6d9b076da519e) C:\Windows\system32\drivers\hidir.sys
15:41:47.0366 4208 HidIr - ok
15:41:47.0413 4208 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
15:41:47.0413 4208 HidUsb - ok
15:41:47.0491 4208 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
15:41:47.0491 4208 HpCISSs - ok
15:41:47.0647 4208 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
15:41:47.0663 4208 HTTP - ok
15:41:47.0694 4208 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
15:41:47.0694 4208 i2omp - ok
15:41:47.0819 4208 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
15:41:47.0834 4208 i8042prt - ok
15:41:47.0912 4208 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
15:41:47.0928 4208 iaStorV - ok
15:41:48.0598 4208 igfx (8266ae06df974e5ba047b3e9e9e70b3f) C:\Windows\system32\DRIVERS\igdkmd32.sys
15:41:49.0066 4208 igfx - ok
15:41:49.0441 4208 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
15:41:49.0472 4208 iirsp - ok
15:41:49.0581 4208 int15 (c6e5276c00ebdeb096bb5ef4b797d1b6) C:\Windows\system32\drivers\int15.sys
15:41:49.0581 4208 int15 - ok
15:41:49.0909 4208 IntcAzAudAddService (cf2219a2fed4f8f2e0817a2bf1658799) C:\Windows\system32\drivers\RTKVHDA.sys
15:41:50.0096 4208 IntcAzAudAddService - ok
15:41:50.0392 4208 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
15:41:50.0408 4208 intelide - ok
15:41:50.0548 4208 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
15:41:50.0548 4208 intelppm - ok
15:41:50.0829 4208 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
15:41:50.0829 4208 IpFilterDriver - ok
15:41:50.0907 4208 IpInIp - ok
15:41:50.0954 4208 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
15:41:50.0985 4208 IPMIDRV - ok
15:41:51.0032 4208 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
15:41:51.0047 4208 IPNAT - ok
15:41:51.0063 4208 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
15:41:51.0063 4208 IRENUM - ok
15:41:51.0094 4208 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
15:41:51.0094 4208 isapnp - ok
15:41:51.0172 4208 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
15:41:51.0172 4208 iScsiPrt - ok
15:41:51.0250 4208 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
15:41:51.0281 4208 iteatapi - ok
15:41:51.0343 4208 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
15:41:51.0343 4208 iteraid - ok
15:41:51.0437 4208 JMCR (fa4a5b32cae6074205b26971191efee4) C:\Windows\system32\DRIVERS\jmcr.sys
15:41:51.0796 4208 JMCR - ok
15:41:52.0076 4208 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
15:41:52.0123 4208 kbdclass - ok
15:41:52.0342 4208 kbdhid (18247836959ba67e3511b62846b9c2e0) C:\Windows\system32\drivers\kbdhid.sys
15:41:52.0342 4208 kbdhid - ok
15:41:52.0560 4208 KSecDD (2b2f1638466e8cb091400c9019cc730e) C:\Windows\system32\Drivers\ksecdd.sys
15:41:52.0576 4208 KSecDD - ok
15:41:52.0778 4208 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
15:41:52.0841 4208 lltdio - ok
15:41:52.0903 4208 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
15:41:52.0919 4208 LSI_FC - ok
15:41:53.0028 4208 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
15:41:53.0043 4208 LSI_SAS - ok
15:41:53.0293 4208 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
15:41:53.0293 4208 LSI_SCSI - ok
15:41:53.0355 4208 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
15:41:53.0355 4208 luafv - ok
15:41:53.0730 4208 MBAMSwissArmy (0db7527db188c7d967a37bb51bbf3963) C:\Windows\system32\drivers\mbamswissarmy.sys
15:41:53.0730 4208 MBAMSwissArmy - ok
15:41:53.0854 4208 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
15:41:53.0854 4208 megasas - ok
15:41:54.0026 4208 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
15:41:54.0073 4208 MegaSR - ok
15:41:54.0166 4208 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
15:41:54.0166 4208 Modem - ok
15:41:54.0276 4208 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
15:41:54.0276 4208 monitor - ok
15:41:54.0307 4208 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
15:41:54.0322 4208 mouclass - ok
15:41:54.0369 4208 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
15:41:54.0369 4208 mouhid - ok
15:41:54.0400 4208 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
15:41:54.0400 4208 MountMgr - ok
15:41:54.0463 4208 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
15:41:54.0494 4208 mpio - ok
15:41:54.0556 4208 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
15:41:54.0572 4208 mpsdrv - ok
15:41:54.0634 4208 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
15:41:54.0634 4208 Mraid35x - ok
15:41:54.0697 4208 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
15:41:54.0712 4208 MRxDAV - ok
15:41:54.0821 4208 mrxsmb (1e94971c4b446ab2290deb71d01cf0c2) C:\Windows\system32\DRIVERS\mrxsmb.sys
15:41:54.0837 4208 mrxsmb - ok
15:41:54.0884 4208 mrxsmb10 (4fccb34d793b116423209c0f8b7a3b03) C:\Windows\system32\DRIVERS\mrxsmb10.sys
15:41:54.0884 4208 mrxsmb10 - ok
15:41:54.0915 4208 mrxsmb20 (c3cb1b40ad4a0124d617a1199b0b9d7c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
15:41:54.0931 4208 mrxsmb20 - ok
15:41:55.0009 4208 msahci (5457dcfa7c0da43522f4d9d4049c1472) C:\Windows\system32\drivers\msahci.sys
15:41:55.0024 4208 msahci - ok
15:41:55.0087 4208 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
15:41:55.0102 4208 msdsm - ok
15:41:55.0149 4208 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
15:41:55.0149 4208 Msfs - ok
15:41:55.0196 4208 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
15:41:55.0196 4208 msisadrv - ok
15:41:55.0274 4208 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
15:41:55.0289 4208 MSKSSRV - ok
15:41:55.0399 4208 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
15:41:55.0414 4208 MSPCLOCK - ok
15:41:55.0461 4208 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
15:41:55.0461 4208 MSPQM - ok
15:41:55.0508 4208 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
15:41:55.0601 4208 MsRPC - ok
15:41:55.0648 4208 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
15:41:55.0648 4208 mssmbios - ok
15:41:55.0710 4208 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
15:41:55.0710 4208 MSTEE - ok
15:41:55.0773 4208 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
15:41:55.0773 4208 Mup - ok
15:41:55.0929 4208 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
15:41:55.0944 4208 NativeWifiP - ok
15:41:56.0038 4208 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
15:41:56.0132 4208 NDIS - ok
15:41:56.0194 4208 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
15:41:56.0210 4208 NdisTapi - ok
15:41:56.0241 4208 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
15:41:56.0256 4208 Ndisuio - ok
15:41:56.0334 4208 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
15:41:56.0334 4208 NdisWan - ok
15:41:56.0443 4208 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
15:41:56.0443 4208 NDProxy - ok
15:41:56.0490 4208 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
15:41:56.0521 4208 NetBIOS - ok
15:41:56.0568 4208 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
15:41:56.0568 4208 netbt - ok
15:41:56.0787 4208 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
15:41:56.0787 4208 nfrd960 - ok
15:41:56.0880 4208 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
15:41:56.0880 4208 Npfs - ok
15:41:57.0005 4208 NPPTNT2 (9131fe60adfab595c8da53ad6a06aa31) C:\Windows\system32\npptNT2.sys
15:41:57.0052 4208 NPPTNT2 - ok
15:41:57.0161 4208 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
15:41:57.0161 4208 nsiproxy - ok
15:41:57.0332 4208 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
15:41:57.0379 4208 Ntfs - ok
15:41:57.0488 4208 NTIDrvr (2757d2ba59aee155209e24942ab127c9) C:\Windows\system32\DRIVERS\NTIDrvr.sys
15:41:57.0488 4208 NTIDrvr - ok
15:41:57.0676 4208 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
15:41:57.0676 4208 ntrigdigi - ok
15:41:57.0738 4208 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
15:41:57.0738 4208 Null - ok
15:41:57.0769 4208 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
15:41:57.0769 4208 nvraid - ok
15:41:57.0816 4208 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
15:41:57.0816 4208 nvstor - ok
15:41:57.0847 4208 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
15:41:57.0925 4208 nv_agp - ok
15:41:57.0941 4208 NwlnkFlt - ok
15:41:57.0972 4208 NwlnkFwd - ok
15:41:58.0034 4208 ohci1394 (be32da025a0be1878f0ee8d6d9386cd5) C:\Windows\system32\drivers\ohci1394.sys
15:41:58.0050 4208 ohci1394 - ok
15:41:58.0206 4208 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
15:41:58.0206 4208 Parport - ok
15:41:58.0346 4208 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
15:41:58.0377 4208 partmgr - ok
15:41:58.0471 4208 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
15:41:58.0471 4208 Parvdm - ok
15:41:58.0518 4208 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
15:41:58.0533 4208 pci - ok
15:41:58.0565 4208 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
15:41:58.0565 4208 pciide - ok
15:41:58.0596 4208 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
15:41:58.0611 4208 pcmcia - ok
15:41:58.0877 4208 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
15:41:58.0908 4208 PEAUTH - ok
15:41:59.0079 4208 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
15:41:59.0095 4208 PptpMiniport - ok
15:41:59.0173 4208 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
15:41:59.0173 4208 Processor - ok
15:41:59.0266 4208 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
15:41:59.0282 4208 PSched - ok
15:41:59.0360 4208 PSDFilter (628321c8dd76ad369b362b202e655a68) C:\Windows\system32\DRIVERS\psdfilter.sys
15:41:59.0360 4208 PSDFilter - ok
15:41:59.0391 4208 PSDNServ (79d7117e62709c7690cf3dd55acead37) C:\Windows\system32\DRIVERS\PSDNServ.sys
15:41:59.0391 4208 PSDNServ - ok
15:41:59.0454 4208 psdvdisk (cae5e82827990cf4bd4a49576bde3a43) C:\Windows\system32\DRIVERS\PSDVdisk.sys
15:41:59.0454 4208 psdvdisk - ok
15:41:59.0610 4208 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
15:41:59.0641 4208 ql2300 - ok
15:41:59.0672 4208 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
15:41:59.0703 4208 ql40xx - ok
15:41:59.0781 4208 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
15:41:59.0844 4208 QWAVEdrv - ok
15:41:59.0890 4208 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
15:41:59.0890 4208 RasAcd - ok
15:41:59.0922 4208 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
15:41:59.0937 4208 Rasl2tp - ok
15:42:00.0031 4208 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
15:42:00.0171 4208 RasPppoe - ok
15:42:00.0811 4208 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
15:42:00.0904 4208 RasSstp - ok
15:42:01.0388 4208 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
15:42:01.0403 4208 rdbss - ok
15:42:01.0497 4208 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
15:42:01.0606 4208 RDPCDD - ok
15:42:01.0715 4208 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
15:42:01.0715 4208 rdpdr - ok
15:42:01.0746 4208 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
15:42:01.0746 4208 RDPENCDD - ok
15:42:01.0824 4208 RDPWD (79c6df8477250f5c54f7c5ae1d6b814e) C:\Windows\system32\drivers\RDPWD.sys
15:42:02.0074 4208 RDPWD - ok
15:42:02.0386 4208 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
15:42:02.0401 4208 rspndr - ok
15:42:02.0573 4208 RTL8169 (125c504a34d0a2e152517e342e7e432c) C:\Windows\system32\DRIVERS\Rtlh86.sys
15:42:02.0604 4208 RTL8169 - ok
15:42:02.0807 4208 SASDIFSV (39763504067962108505bff25f024345) C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
15:42:02.0838 4208 SASDIFSV - ok
15:42:02.0854 4208 SASKUTIL (77b9fc20084b48408ad3e87570eb4a85) C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
15:42:02.0854 4208 SASKUTIL - ok
15:42:03.0337 4208 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
15:42:03.0337 4208 sbp2port - ok
15:42:03.0571 4208 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys
15:42:03.0587 4208 sdbus - ok
15:42:03.0649 4208 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
15:42:03.0649 4208 secdrv - ok
15:42:03.0696 4208 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
15:42:03.0727 4208 Serenum - ok
15:42:03.0821 4208 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
15:42:03.0836 4208 Serial - ok
15:42:03.0852 4208 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
15:42:03.0867 4208 sermouse - ok
15:42:03.0945 4208 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
15:42:03.0945 4208 sffdisk - ok
15:42:04.0179 4208 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
15:42:04.0179 4208 sffp_mmc - ok
15:42:04.0211 4208 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
15:42:04.0211 4208 sffp_sd - ok
15:42:04.0242 4208 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
15:42:04.0242 4208 sfloppy - ok
15:42:04.0351 4208 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
15:42:04.0382 4208 sisagp - ok
15:42:04.0445 4208 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
15:42:04.0460 4208 SiSRaid2 - ok
15:42:04.0522 4208 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
15:42:04.0538 4208 SiSRaid4 - ok
15:42:04.0600 4208 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
15:42:04.0600 4208 Smb - ok
15:42:04.0710 4208 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
15:42:04.0710 4208 spldr - ok
15:42:04.0788 4208 srv (41987f9fc0e61adf54f581e15029ad91) C:\Windows\system32\DRIVERS\srv.sys
15:42:04.0803 4208 srv - ok
15:42:04.0881 4208 srv2 (ff33aff99564b1aa534f58868cbe41ef) C:\Windows\system32\DRIVERS\srv2.sys
15:42:04.0897 4208 srv2 - ok
15:42:05.0053 4208 srvnet (7605c0e1d01a08f3ecd743f38b834a44) C:\Windows\system32\DRIVERS\srvnet.sys
15:42:05.0053 4208 srvnet - ok
15:42:05.0146 4208 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
15:42:05.0146 4208 swenum - ok
15:42:05.0209 4208 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
15:42:05.0240 4208 Symc8xx - ok
15:42:05.0302 4208 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
15:42:05.0318 4208 Sym_hi - ok
15:42:05.0396 4208 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
15:42:05.0411 4208 Sym_u3 - ok
15:42:05.0786 4208 Tcpip (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\drivers\tcpip.sys
15:42:05.0833 4208 Tcpip - ok
15:42:06.0534 4208 Tcpip6 (814a1c66fbd4e1b310a517221f1456bf) C:\Windows\system32\DRIVERS\tcpip.sys
15:42:06.0550 4208 Tcpip6 - ok
15:42:06.0753 4208 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
15:42:06.0753 4208 tcpipreg - ok
15:42:06.0846 4208 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
15:42:06.0846 4208 TDPIPE - ok
15:42:06.0940 4208 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
15:42:06.0940 4208 TDTCP - ok
15:42:07.0018 4208 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
15:42:07.0018 4208 tdx - ok
15:42:07.0080 4208 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
15:42:07.0080 4208 TermDD - ok
15:42:07.0189 4208 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
15:42:07.0205 4208 tssecsrv - ok
15:42:07.0252 4208 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
15:42:07.0252 4208 tunmp - ok
15:42:07.0330 4208 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
15:42:07.0330 4208 tunnel - ok
15:42:07.0377 4208 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
15:42:07.0423 4208 uagp35 - ok
15:42:07.0501 4208 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
15:42:07.0517 4208 udfs - ok
15:42:07.0595 4208 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
15:42:07.0595 4208 uliagpkx - ok
15:42:07.0673 4208 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
15:42:07.0798 4208 uliahci - ok
15:42:07.0891 4208 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
15:42:08.0359 4208 UlSata - ok
15:42:08.0562 4208 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
15:42:08.0656 4208 ulsata2 - ok
15:42:08.0702 4208 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
15:42:08.0718 4208 umbus - ok
15:42:08.0796 4208 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
15:42:08.0812 4208 usbccgp - ok
15:42:08.0890 4208 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
15:42:08.0936 4208 usbcir - ok
15:42:08.0999 4208 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
15:42:08.0999 4208 usbehci - ok
15:42:09.0061 4208 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
15:42:09.0217 4208 usbhub - ok
15:42:09.0264 4208 usbohci (38dbc7dd6cc5a72011f187425384388b) C:\Windows\system32\drivers\usbohci.sys
15:42:09.0295 4208 usbohci - ok
15:42:09.0311 4208 usbprint (b51e52acf758be00ef3a58ea452fe360) C:\Windows\system32\drivers\usbprint.sys
15:42:09.0326 4208 usbprint - ok
15:42:09.0482 4208 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
15:42:09.0545 4208 USBSTOR - ok
15:42:09.0638 4208 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
15:42:09.0638 4208 usbuhci - ok
15:42:09.0701 4208 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
15:42:09.0716 4208 usbvideo - ok
15:42:09.0950 4208 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
15:42:09.0966 4208 vga - ok
15:42:10.0059 4208 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
15:42:10.0059 4208 VgaSave - ok
15:42:10.0090 4208 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
15:42:10.0106 4208 viaagp - ok
15:42:10.0168 4208 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
15:42:10.0168 4208 ViaC7 - ok
15:42:10.0200 4208 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
15:42:10.0215 4208 viaide - ok
15:42:10.0246 4208 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
15:42:10.0246 4208 volmgr - ok
15:42:10.0340 4208 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
15:42:10.0371 4208 volmgrx - ok
15:42:10.0434 4208 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
15:42:10.0512 4208 volsnap - ok
15:42:10.0574 4208 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
15:42:10.0590 4208 vsmraid - ok
15:42:10.0777 4208 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
15:42:10.0777 4208 WacomPen - ok
15:42:10.0823 4208 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
15:42:10.0823 4208 Wanarp - ok
15:42:10.0933 4208 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
15:42:10.0933 4208 Wanarpv6 - ok
15:42:11.0011 4208 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
15:42:11.0011 4208 Wd - ok
15:42:11.0057 4208 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
15:42:11.0089 4208 Wdf01000 - ok
15:42:11.0260 4208 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
15:42:11.0260 4208 WmiAcpi - ok
15:42:11.0354 4208 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
15:42:11.0369 4208 ws2ifsl - ok
15:42:11.0447 4208 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
15:42:11.0479 4208 WUDFRd - ok
15:42:11.0557 4208 XDva285 (4792a245dced40070bea0b9bfc047c14) C:\Windows\system32\XDva285.sys
15:42:11.0650 4208 XDva285 - ok
15:42:11.0837 4208 XDva370 - ok
15:42:11.0868 4208 XDva383 - ok
15:42:11.0884 4208 XDva391 - ok
15:42:11.0978 4208 MBR (0x1B8) (ef9cdc51b437d322d54016b68f003416) \Device\Harddisk0\DR0
15:42:18.0076 4208 \Device\Harddisk0\DR0 - ok
15:42:18.0091 4208 Boot (0x1200) (a4a19ee4193e64aab30254842d1aeede) \Device\Harddisk0\DR0\Partition0
15:42:18.0091 4208 \Device\Harddisk0\DR0\Partition0 - ok
15:42:18.0216 4208 Boot (0x1200) (26a5a1e1af78f2b66a4226134288ad7e) \Device\Harddisk0\DR0\Partition1
15:42:18.0247 4208 \Device\Harddisk0\DR0\Partition1 - ok
15:42:18.0247 4208 ============================================================
15:42:18.0247 4208 Scan finished
15:42:18.0247 4208 ============================================================
15:42:18.0279 4808 Detected object count: 0
15:42:18.0279 4808 Actual detected object count: 0
15:42:27.0933 5072 Deinitialize success

And Here is the aswMBR.txt:
aswMBR version 0.9.9.1665 Copyright© 2011 AVAST Software
Run date: 2012-03-29 09:46:23
—————————–
09:46:23.924 OS Version: Windows 6.0.6002 Service Pack 2
09:46:23.924 Number of processors: 2 586 0xF0D
09:46:23.927 ComputerName: TECHBRI UserName: owner
09:46:29.540 Initialize success
09:46:30.005 AVAST engine defs: 12032900
09:46:51.095 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
09:46:51.107 Disk 0 Vendor: WDC_WD1600BEVT-22ZCT0 11.01A11 Size: 152627MB BusType: 3
09:46:51.147 Disk 0 MBR read successfully
09:46:51.153 Disk 0 MBR scan
09:46:51.161 Disk 0 unknown MBR code
09:46:51.172 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 10244 MB offset 63
09:46:51.228 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 71192 MB offset 20981760
09:46:51.265 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 71189 MB offset 166782976
09:46:51.285 Disk 0 scanning sectors +312578048
09:46:51.375 Disk 0 scanning C:\Windows\system32\drivers
09:47:07.568 Service scanning
09:47:35.028 Modules scanning
09:47:44.430 Disk 0 trace - called modules:
09:47:44.958 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll ataport.SYS PCIIDEX.SYS msahci.sys
09:47:44.971 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85343490]
09:47:44.992 3 CLASSPNP.SYS[87ba08b3] -> nt!IofCallDriver -> [0x84b87918]
09:47:45.014 5 acpi.sys[806926bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x84be71b0]
09:47:48.229 AVAST engine scan C:\Windows
09:47:57.202 AVAST engine scan C:\Windows\system32
09:52:39.110 AVAST engine scan C:\Windows\system32\drivers
09:53:00.580 AVAST engine scan C:\Users\owner
09:56:18.423 AVAST engine scan C:\ProgramData
09:57:32.971 Scan finished successfully
09:58:14.674 Disk 0 MBR has been saved successfully to "C:\Users\owner\Desktop\MBR.dat"
09:58:14.707 The log file has been saved successfully to "C:\Users\owner\Desktop\aswMBR.txt"

I have also Attached the MBR.zip folder. Thanks for your help. I'm glad to know there are people out there that will do this kind of thing.