Trojan horse Hider.MPR [Solved]

Hi I have an old HP NC8000 running windows98, AVG free & Google Chrome for internet browser
1. AVG 'Found threat' Trojan horse Hider.MPR in C:documents and SettingsMy ComputerLocal SettingsTempwqciyuax.sys
2. Google Chrome would not open (internet explorer will) (have removed Google Chrome from the computer
3. AVG anti virus run it starts scan then immediately finishes saying no threats found
4 I have started using Firefox as internet browser
5 none of the internet browsers will find avg web site
6 iexplore.com seems to hold up computer shutting down
7 Also running AVG Tune Up (still functioning)
8 Should I get the full AVG Internet protection software? (if I can fix this malware problem with your help!!)
Your assistance would be most appreciated thanks Greg

Hi forgot to paste the logfiles in the original post So here they are!

OTL logfile created on: 1/05/2012 10:58:57 PM - Run 1
OTL by OldTimer - Version 3.2.42.2 Folder = C:Documents and SettingsMy ComputerDesktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

1023.36 Mb Total Physical Memory | 414.87 Mb Available Physical Memory | 40.54% Memory free
2.41 Gb Paging File | 1.78 Gb Available in Paging File | 73.89% Paging File free
Paging file location(s): C:pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 55.88 Gb Total Space | 5.26 Gb Free Space | 9.42% Space Free | Partition Type: NTFS

Computer Name: HP-9AE5D5147A63 | User Name: My Computer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:Documents and SettingsMy ComputerDesktopOTL.exe (OldTimer Tools)
PRC - C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:Program FilesCommon FilesAVG Secure SearchvToolbarUpdater10.2.0ToolbarUpdater.exe ()
PRC - C:Program FilesAVG Secure Searchvprot.exe ()
PRC - C:Program FilesAVGAVG2012avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:Program FilesAVGAVG2012avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:Program FilesAVGAVG2012AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:Program FilesAVGAVG2012avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:Program FilesAVGAVG2012avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:Program FilesAVGAVG2012avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:Program FilesDivXDivX UpdateDivXUpdate.exe ()
PRC - C:Program Files3G USB ModemHSDPALauncher.exe ()
PRC - C:WINDOWSexplorer.exe (Microsoft Corporation)
PRC - C:Program FilesBrotherBrmfcmonBrMfcMon.exe (Brother Industries, Ltd.)
PRC - C:Program FilesSynapticsSynTPSynTPLpr.exe (Synaptics, Inc.)
PRC - C:Program FilesWIDCOMMBluetooth SoftwareBTStackServer.exe (WIDCOMM, Inc.)
PRC - C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe (WIDCOMM, Inc.)


========== Modules (No Company Name) ==========

MOD - C:Program FilesCommon FilesAVG Secure SearchvToolbarUpdater10.2.0ToolbarUpdater.exe ()
MOD - C:Program FilesAVG Secure Searchvprot.exe ()
MOD - C:Program FilesDivXDivX UpdateDivXUpdateCheck.dll ()
MOD - C:Program FilesDivXDivX UpdateDivXUpdate.exe ()
MOD - C:Program Files3G USB ModemHSDPALauncher.exe ()


========== Win32 Services (SafeList) ==========

SRV - (vkvzwma) – C:WINDOWSsystem32ybykm.dll File not found
SRV - (HidServ) – %SystemRoot%System32hidserv.dll File not found
SRV - (ampqi) – C:WINDOWSsystem32ybykm.dll File not found
SRV - (MozillaMaintenance) – C:Program FilesMozilla Maintenance Servicemaintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (TuneUp.UtilitiesSvc) – C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (UxTuneUp) – C:WINDOWSsystem32uxtuneup.dll (TuneUp Software)
SRV - (vToolbarUpdater10.2.0) – C:Program FilesCommon FilesAVG Secure SearchvToolbarUpdater10.2.0ToolbarUpdater.exe ()
SRV - (AVGIDSAgent) – C:Program FilesAVGAVG2012AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.)
SRV - (avgwd) – C:Program FilesAVGAVG2012avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (ServiceLayer) – C:Program FilesPC Connectivity SolutionServiceLayer.exe (Nokia)
SRV - (FLEXnet Licensing Service) – C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (LVPrcSrv) – C:Program FilesCommon FileslogishrdLVMVFMLVPrcSrv.exe (Logitech Inc.)
SRV - (SoundMAX Agent Service (default)) – C:Program FilesAnalog DevicesSoundMAXSMAgent.exe (Analog Devices, Inc.)


========== Driver Services (SafeList) ==========

DRV - (WDICA) – File not found
DRV - (SymIMMP) – system32DRIVERSSymIM.sys File not found
DRV - (SymIM) – system32DRIVERSSymIM.sys File not found
DRV - (PDRFRAME) – File not found
DRV - (PDRELI) – File not found
DRV - (PDFRAME) – File not found
DRV - (PDCOMP) – File not found
DRV - (PCIDump) – File not found
DRV - (lbrtfdc) – File not found
DRV - (i2omgmt) – File not found
DRV - (Changer) – File not found
DRV - (TuneUpUtilitiesDrv) – C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (Avgldx86) – C:WINDOWSsystem32driversavgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) – C:WINDOWSsystem32driversAVGIDSShim.sys (AVG Technologies CZ, s.r.o. )
DRV - (Avgrkx86) – C:WINDOWSsystem32driversavgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) – C:WINDOWSsystem32driversavgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgtdix) – C:WINDOWSsystem32driversavgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSFilter) – C:WINDOWSsystem32driversAVGIDSFilter.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSEH) – C:WINDOWSsystem32driversAVGIDSEH.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSDriver) – C:WINDOWSsystem32driversAVGIDSDriver.sys (AVG Technologies CZ, s.r.o. )
DRV - (FilterService) – C:WINDOWSsystem32driverslvuvcflt.sys (Logitech Inc.)
DRV - (LVUVC) Logitech Webcam 120(UVC) – C:WINDOWSsystem32driverslvuvc.sys (Logitech Inc.)
DRV - (LVPr2Mon) – C:WINDOWSsystem32driversLVPr2Mon.sys ()
DRV - (ewusbnet) – C:WINDOWSsystem32driversewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) – C:WINDOWSsystem32driversewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (hwusbdev) – C:WINDOWSsystem32driversewusbdev.sys (Huawei Technologies Co., Ltd.)
DRV - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) – C:WINDOWSsystem32driversLV302V32.SYS (Logitech Inc.)
DRV - (pccsmcfd) – C:WINDOWSsystem32driverspccsmcfd.sys (Nokia)
DRV - (qcusbser) – C:WINDOWSsystem32driverscmusbser.sys (Mobile Connector)
DRV - (ati2mtag) – C:WINDOWSsystem32driversati2mtag.sys (ATI Technologies Inc.)
DRV - (AgereSoftModem) – C:WINDOWSsystem32driversAGRSM.sys (Agere Systems)
DRV - (WLAN_400_500_SERVICE) – C:WINDOWSsystem32driversar5211.sys (Atheros Communications, Inc.)
DRV - (BTWUSB) – C:WINDOWSsystem32driversbtwusb.sys (WIDCOMM, Inc.)
DRV - (BTSERIAL) – C:WINDOWSsystem32driversbtserial.sys ()
DRV - (BTSLBCSP) – C:WINDOWSsystem32driversbtslbcsp.sys (WIDCOMM, Inc.)
DRV - (BTKRNL) – C:WINDOWSsystem32driversbtkrnl.sys (WIDCOMM, Inc.)
DRV - (BTWDNDIS) – C:WINDOWSsystem32driversbtwdndis.sys (WIDCOMM, Inc.)
DRV - (BTDriver) – C:WINDOWSsystem32driversbtport.sys (WIDCOMM, Inc.)
DRV - (CONAN) – C:WINDOWSsystem32driverso2mmb.sys (O2 Micro )
DRV - (MbxStby) – C:WINDOWSsystem32driversMbxStby.sys (O2 Micro)
DRV - (b57w2k) – C:WINDOWSsystem32driversb57xp32.sys (Broadcom Corporation)
DRV - (SMCIRDA) – C:WINDOWSsystem32driverssmcirda.sys (SMC)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM..SearchScopes,DefaultScope = {33DD4D71-821E-4722-833B-5012240CD9D9}
IE - HKLM..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}
IE - HKLM..SearchScopes{33DD4D71-821E-4722-833B-5012240CD9D9}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE - HKLM..SearchScopes{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?…p={searchTerms}

IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.aapt.net.au
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.google.com.au/
IE - HKCU..URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKCU..SearchScopes,DefaultScope = {33DD4D71-821E-4722-833B-5012240CD9D9}
IE - HKCU..SearchScopes{33DD4D71-821E-4722-833B-5012240CD9D9}: "URL" = http://www.google.com/search?q={searchTerm…1I7GZEU_enAU482
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..extensions.enabledItems: avg@toolbar:10.0.0.7
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.145
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}:6.0.30
FF - prefs.js..extensions.enabledItems: [removed]:1.0
FF - prefs.js..keyword.URL: "http://isearch.avg.com/search?cid=%7B5ad7c0b3-f743-491a-b719-0c2eef580b54%7D&mid=cc82cbd21c2d378c78fc81509292dd59-5c46549e7e8f8d9dac266ad135ecf7d993edd173&ds=AVG&v=10.2.0.3&lang=en&pr=fr&d=2011-12-15%2011%3A05%3A12&sap=ku&q="


FF - [removed]/FlashPlayer: C:WINDOWSsystem32MacromedFlashNPSWF32_11_2_202_233.dll ()
FF - [removed]/iTunes,version=: File not found
FF - [removed]/iTunes,version=1.0: C:itunesMozilla Pluginsnpitunes.dll ()
FF - [removed]/CsiPlugin: C:Program FilesCommon-Use Signing InterfacebinnpCsiPlugin.dll (Commonwealth Government of Australia)
FF - [removed]/DivX Browser Plugin,version=1.0.0: C:Program FilesDivXDivX Plus Web Playernpdivx32.dll (DivX, LLC)
FF - [removed]/DivX Player Plugin,version=1.0.0: C:Program FilesDivXDivX PlayernpDivxPlayerPlugin.dll File not found
FF - [removed]/DivX VOD Helper,version=1.0.0: C:Program FilesDivXDivX OVS Helpernpovshelper.dll (DivX, LLC.)
FF - [removed]/JavaPlugin: C:Program FilesJavajre6binnew_pluginnpjp2.dll (Sun Microsystems, Inc.)
FF - [removed]/BigPondMediaDownloader,version=1.0.0: C:Documents and SettingsAll UsersApplication DataDownloadernpBigPondMediaDownloaderDetector.dll (Mammoth Media)
FF - [removed]/NpCtrl,version=1.0: c:Program FilesMicrosoft Silverlight4.1.10111.0npctrl.dll ( Microsoft Corporation)
FF - [removed]/WPF,version=3.5: c:WINDOWSMicrosoft.NETFrameworkv3.5Windows Presentation FoundationNPWPF.dll (Microsoft Corporation)
FF - [removed]/rayvplugin: C:Program FilesRayVRayVpluginsnprayvplugin.dll (RayV)
FF - [removed]/nppl3260;version=15.0.0.198: C:Program FilesRealRealPlayerNetscape6nppl3260.dll (RealNetworks, Inc.)
FF - [removed]/nprjplug;version=15.0.0.198: C:Program FilesRealRealPlayerNetscape6nprjplug.dll (RealNetworks, Inc.)
FF - [removed]/nprpchromebrowserrecordext;version=15.0.0.198: C:Documents and SettingsAll UsersApplication DataRealRealPlayerBrowserRecordPluginMozillaPluginsnprpchromebrowserrecorde
xt.dll (RealNetworks, Inc.)
FF - [removed]/nprphtml5videoshim;version=15.0.0.198: C:Documents and SettingsAll UsersApplication DataRealRealPlayerBrowserRecordPluginMozillaPluginsnprphtml5videoshim.dll (RealNetworks, Inc.)
FF - [removed]/nprpjplug;version=15.0.0.198: C:Program FilesRealRealPlayerNetscape6nprpjplug.dll (RealNetworks, Inc.)
FF - [removed]/nsJSRealPlayerPlugin;version=: File not found
FF - [removed]/Google Update;version=3: C:Program FilesGoogleUpdate1.3.21.111npGoogleUpdate3.dll (Google Inc.)
FF - [removed]/Google Update;version=9: C:Program FilesGoogleUpdate1.3.21.111npGoogleUpdate3.dll (Google Inc.)
FF - HKLMSoftwareMozillaPluginsAdobe Reader: C:Program FilesAdobeReader 10.0ReaderAIRnppdf32.dll (Adobe Systems Inc.)
FF - [removed]/KeyMgmtPlugin: C:Documents and SettingsMy ComputerLocal SettingsApplication DataABRPlug-InbinnpAUSkeyPlugin.dll (Commonwealth Government of Australia)
FF - [removed]/Google Update;version=3: C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleUpdate1.3.21.57npGoogleUpdate3.dll File not found
FF - [removed]/Google Update;version=9: C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleUpdate1.3.21.57npGoogleUpdate3.dll File not found
FF - HKCUSoftwareMozillaPluginsmammothmedia.com.au/BigPondMediaDownloaderDetector: C:Documents and SettingsAll UsersApplication DataDownloadernpBigPondMediaDownloaderDetector.dll (Mammoth Media)

FF - HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensions{3f963a5b-e555-4543-90e2-c3908898db71}: C:Program FilesAVGAVG2012Firefox [2012/02/02 06:24:51 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensions{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:Program FilesAVGAVG2012Firefox4 [2012/02/02 06:25:02 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensions{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:Documents and SettingsAll UsersApplication DataRealRealPlayerBrowserRecordPluginFirefoxExt [2011/12/14 09:33:59 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensionsavg@toolbar: C:Documents and SettingsAll UsersApplication DataAVG Secure Search10.2.0.3 [2012/03/15 19:54:58 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaFirefoxExtensions{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:Program FilesDivXDivX Plus Web PlayerfirefoxDivXHTML5 [2012/04/17 10:12:14 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 12.0extensionsComponents: C:Program FilesMozilla Firefoxcomponents [2012/05/01 21:03:55 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 12.0extensionsPlugins: C:Program FilesMozilla Firefoxplugins [2012/05/01 21:03:50 | 000,000,000 | —D | M]

[2009/04/02 21:40:25 | 000,000,000 | —D | M] (No name found) – C:Documents and SettingsMy ComputerApplication DataMozillaExtensions
[2012/04/20 11:10:34 | 000,000,000 | —D | M] (No name found) – C:Documents and SettingsMy ComputerApplication DataMozillaFirefoxProfilesofqanqlc.defaultextensions
[2012/04/20 11:10:32 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:Documents and SettingsMy ComputerApplication DataMozillaFirefoxProfilesofqanqlc.defaultextensions{20a82645-c095-46ed-80e3-08825760534b}
[2012/05/01 21:03:55 | 000,000,000 | —D | M] (No name found) – C:Program FilesMozilla Firefoxextensions
[2012/04/21 11:19:34 | 000,097,208 | —- | M] (Mozilla Foundation) – C:Program Filesmozilla firefoxcomponentsbrowsercomps.dll
[2011/11/10 05:54:13 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:Program Filesmozilla firefoxpluginsnpdeployJava1.dll
[2012/03/15 19:54:06 | 000,003,766 | —- | M] () – C:Program Filesmozilla firefoxsearchpluginsavg-secure-search.xml
[2012/04/21 11:18:25 | 000,002,252 | —- | M] () – C:Program Filesmozilla firefoxsearchpluginsbing.xml
[2012/04/21 11:18:25 | 000,002,040 | —- | M] () – C:Program Filesmozilla firefoxsearchpluginstwitter.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}source
id=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleChromeApplication12.0.742.122pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleChromeApplication12.0.742.122gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleChromeApplication12.0.742.122gcswf32.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:Program FilesAdobeReader 9.0ReaderBrowsernppdf32.dll
CHR - plugin: Java™ Platform SE 6 U20 (Enabled) = C:Program FilesJavajre6binnew_pluginnpjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:Program FilesMozilla FirefoxpluginsnpdeployJava1.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:Program FilesMozilla FirefoxpluginsnpDivxPlayerPlugin.dll
CHR - plugin: Microsoft Office 2003 (Enabled) = C:Program FilesMozilla FirefoxpluginsNPOFFICE.DLL
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:Program FilesMozilla Firefoxpluginsnpqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:Program FilesMozilla Firefoxpluginsnpqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:Program FilesMozilla Firefoxpluginsnpqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:Program FilesMozilla Firefoxpluginsnpqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:Program FilesMozilla Firefoxpluginsnpqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:Program FilesMozilla Firefoxpluginsnpqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:Program FilesMozilla Firefoxpluginsnpqtplugin7.dll
CHR - plugin: Microsoftu00AE DRM (Enabled) = C:Program FilesWindows Media Playernpdrmv2.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:Program FilesWindows Media Playernpdsplay.dll
CHR - plugin: Microsoftu00AE DRM (Enabled) = C:Program FilesWindows Media Playernpwmsdrm.dll
CHR - plugin: ABR_AUSkey Mozilla Plugin (Enabled) = C:Documents and SettingsMy ComputerLocal SettingsApplication DataABRPlug-InbinnpAUSkeyPlugin.dll
CHR - plugin: Google Update (Enabled) = C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleUpdate1.2.183.39npGoogleOneClick8.dll
CHR - plugin: CSI Mozilla Plugin (Enabled) = C:Program FilesCommon-Use Signing InterfacebinnpCsiPlugin.dll
CHR - plugin: DivX Web Player (Enabled) = C:Program FilesDivXDivX Plus Web Playernpdivx32.dll
CHR - plugin: RayV Plugin (Enabled) = C:Program FilesRayVRayVpluginsnprayvplugin.dll
CHR - plugin: Shockwave Flash (Enabled) = C:WINDOWSsystem32MacromedFlashNPSWF32.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:itunesMozilla Pluginsnpitunes.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:Program FilesMicrosoft Silverlight4.0.50917.0npctrl.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsjfmjfhklogoienhpfnppmbcbjfjnkonk1.5_0
CHR - Extension: AVG Safe Search = C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsjmfkcklnlgedgbglfkkgedjfmejoahla12.0.0.1901_0
CHR - Extension: DivX Plus Web Player HTML5 u003Cvideou003E = C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleChromeUser DataDefaultExtensionsnneajnkjbffgblleaoojgaacokifdkhm2.1.2.145_0

O1 HOSTS File: ([2004/08/04 22:00:00 | 000,000,734 | —- | M]) - C:WINDOWSsystem32driversetchosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Documents and SettingsAll UsersApplication DataRealRealPlayerBrowserRecordPluginIErpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:Program FilesDivXDivX Plus Web PlayerieDivXHTML5DivXHTML5.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:Program FilesAVGAVG2012avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre6binssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:Program FilesAVG Secure Search10.2.0.3AVG Secure Search_toolbar.dll ()
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.7.7227.1100swg.dll (Google Inc.)
O3 - HKLM..Toolbar: (no name) - - No CLSID value found.
O3 - HKLM..Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:Program FilesAVG Secure Search10.2.0.3AVG Secure Search_toolbar.dll ()
O3 - HKLM..Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU..ToolbarWebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU..ToolbarWebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O3 - HKCU..ToolbarWebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU..ToolbarWebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..Run: [] File not found
O4 - HKLM..Run: [AVG_TRAY] C:Program FilesAVGAVG2012avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..Run: [ControlCenter3] C:Program FilesBrotherControlCenter3brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..Run: [DivXUpdate] C:Program FilesDivXDivX UpdateDivXUpdate.exe ()
O4 - HKLM..Run: [HSDPALauncher] C:Program Files3G USB ModemHSDPALauncher.exe ()
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k File not found
O4 - HKLM..Run: [LogitechQuickCamRibbon] C:Program FilesLogitechLogitech WebCam SoftwareLWS.exe ()
O4 - HKLM..Run: [ROC_roc_dec12] C:Program FilesAVG Secure SearchROC_roc_dec12.exe ()
O4 - HKLM..Run: [SynTPLpr] C:Program FilesSynapticsSynTPSynTPLpr.exe (Synaptics, Inc.)
O4 - HKLM..Run: [TkBellExe] C:Program FilesRealRealPlayerupdaterealsched.exe (RealNetworks, Inc.)
O4 - HKLM..Run: [vProt] C:Program FilesAVG Secure Searchvprot.exe ()
O4 - HKCU..Run: [Logitech Vid] C:Program FilesLogitechVid HDVid.exe (Logitech Inc.)
O4 - HKCU..Run: [PfbByxel] C:Documents and SettingsMy ComputerLocal SettingsApplication Datahyjooxxupfbbyxel.exe File not found
O4 - HKCU..Run: [RayV] C:Program FilesRayVRayVRayV.exe (RayV)
O4 - Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupBTTray.lnk = C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe (WIDCOMM, Inc.)
O4 - Startup: C:Documents and SettingsAll UsersStart MenuProgramsStartupWinZip Quick Pick.lnk = C:Program FilesWinZipWZQKPICK.EXE (WinZip Computing, S.L.)
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: HonorAutoRunSetting = 1
O7 - HKCUSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Send To &Bluetooth - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm ()
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm ()
O10 - NameSpace_Catalog5Catalog_Entries\000000000004 [] - C:Program FilesBonjourmdnsNSP.dll (Apple Inc.)
O15 - HKCU..Trusted Domains: abr.gov.au ([www] http in Trusted sites)
O15 - HKCU..Trusted Domains: ato.gov.au ([]http in Trusted sites)
O15 - HKCU..Trusted Domains: ato.gov.au ([bp] https in Trusted sites)
O15 - HKCU..Trusted Domains: ato.gov.au ([www] http in Trusted sites)
O15 - HKCU..Trusted Domains: business.gov.au ([www] http in Trusted sites)
O15 - HKCU..Trusted Domains: mozilla.org ([www] http in Trusted sites)
O15 - HKCU..Trusted Domains: ntis.gov.au ([www] http in Trusted sites)
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} http://h50203.www5.hp.com/HPISWeb/Customer…DataManager.CAB (Hewlett-Packard Online Support Services)
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab (GMNRev Class)
O16 - DPF: {861FDA2A-2B57-4BDA-8B8B-305C9D5D8604} http://stream.pussyharem.com/stream/mmp3.cab (_Multimedia Player)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_30)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{0475DD96-39B1-4987-B090-62AFE42FE3F0}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{CD00420F-A40C-46E4-9D04-2347766F1D32}: Domain = aapt.net.au
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{E5D42B33-B4AA-4C94-8650-D641BE63B4BA}: Domain = aapt.net.au
O18 - ProtocolHandlerlinkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG2012avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - ProtocolHandlerskype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program FilesCommon FilesSkypeSkype4COM.dll (Skype Technologies)
O18 - ProtocolHandlerviprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:Program FilesCommon FilesAVG Secure SearchViProtocolInstaller10.2.0ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:WINDOWSexplorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:WINDOWSsystem32userinit.exe) - C:WINDOWSsystem32userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:Documents and SettingsMy ComputerLocal SettingsApplication Datahyjooxxupfbbyxel.exe) - C:Documents and SettingsMy ComputerLocal SettingsApplication Datahyjooxxupfbbyxel.exe File not found
O20 - WinlogonNotifyAtiExtEvent: DllName - (Ati2evxx.dll) - C:WINDOWSSystem32ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop WallPaper: C:Documents and SettingsMy ComputerLocal SettingsApplication DataMicrosoftWallpaper1.bmp
O24 - Desktop BackupWallPaper: C:Documents and SettingsMy ComputerLocal SettingsApplication DataMicrosoftWallpaper1.bmp
O27 - HKLM IFEOAcroRd32.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOhpwucli.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOitunes.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOjavaws.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOlws.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOpaprport.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOpppagevw.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOrealconverter.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOrealplay.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOrealtrimmer.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOrnxproc.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOscannerwizard.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOsoftwareupdate.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOuninstall.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOvid.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O27 - HKLM IFEOwinzip32.exe: Debugger - C:Program FilesTuneUp Utilities 2012TUAutoReactivator32.exe (TuneUp Software)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/09/17 15:12:46 | 000,000,000 | —- | M] () - C:AUTOEXEC.BAT – [ NTFS ]
O33 - MountPoints2{0656de90-9241-11e1-8d0a-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{0656de90-9241-11e1-8d0a-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{0656de90-9241-11e1-8d0a-000fb36b5636}ShellAutoRuncommand - "" = E:AutoRun.exe
O33 - MountPoints2{27440092-479c-11e1-8c8f-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{27440092-479c-11e1-8c8f-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{27440092-479c-11e1-8c8f-000fb36b5636}ShellAutoRuncommand - "" = F:AutoRun.exe
O33 - MountPoints2{6374dd60-0697-11e0-89a4-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{6374dd60-0697-11e0-89a4-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{6374dd60-0697-11e0-89a4-000fb36b5636}ShellAutoRuncommand - "" = F:autorun.exe
O33 - MountPoints2{6374dd61-0697-11e0-89a4-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{6374dd61-0697-11e0-89a4-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{6374dd61-0697-11e0-89a4-000fb36b5636}ShellAutoRuncommand - "" = F:autorun.exe
O33 - MountPoints2{82139810-0ecd-11e0-89b5-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{82139810-0ecd-11e0-89b5-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{82139810-0ecd-11e0-89b5-000fb36b5636}ShellAutoRuncommand - "" = E:autorun.exe
O33 - MountPoints2{a9043ae0-06ae-11e0-89a5-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{a9043ae0-06ae-11e0-89a5-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{a9043ae0-06ae-11e0-89a5-000fb36b5636}ShellAutoRuncommand - "" = F:autorun.exe
O33 - MountPoints2{a9043ae1-06ae-11e0-89a5-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{a9043ae1-06ae-11e0-89a5-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{a9043ae1-06ae-11e0-89a5-000fb36b5636}ShellAutoRuncommand - "" = E:autorun.exe
O33 - MountPoints2{bfc5cc20-06fb-11e0-89a6-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{bfc5cc20-06fb-11e0-89a6-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{bfc5cc20-06fb-11e0-89a6-000fb36b5636}ShellAutoRuncommand - "" = E:autorun.exe
O33 - MountPoints2{bfc5cc21-06fb-11e0-89a6-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{bfc5cc21-06fb-11e0-89a6-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{bfc5cc21-06fb-11e0-89a6-000fb36b5636}ShellAutoRuncommand - "" = E:autorun.exe
O33 - MountPoints2{bfc5cc22-06fb-11e0-89a6-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{bfc5cc22-06fb-11e0-89a6-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{bfc5cc22-06fb-11e0-89a6-000fb36b5636}ShellAutoRuncommand - "" = F:autorun.exe
O33 - MountPoints2{bfc5cc23-06fb-11e0-89a6-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{bfc5cc23-06fb-11e0-89a6-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{bfc5cc23-06fb-11e0-89a6-000fb36b5636}ShellAutoRuncommand - "" = F:autorun.exe
O33 - MountPoints2{d5cdf160-46de-11e1-8c8c-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{d5cdf160-46de-11e1-8c8c-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{d5cdf160-46de-11e1-8c8c-000fb36b5636}ShellAutoRuncommand - "" = F:AutoRun.exe
O33 - MountPoints2{f8024191-9108-11e1-8d09-000fb36b5636}Shell - "" = AutoRun
O33 - MountPoints2{f8024191-9108-11e1-8d09-000fb36b5636}ShellAutoRun - "" = Auto&Play
O33 - MountPoints2{f8024191-9108-11e1-8d09-000fb36b5636}ShellAutoRuncommand - "" = "F:WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:PROGRA~1AVGAVG2012avgrsx.exe /sync /restart)
O35 - HKLM..comfile [open] – "%1" %*
O35 - HKLM..exefile [open] – "%1" %*
O37 - HKLM…com [@ = comfile] – "%1" %*
O37 - HKLM…exe [@ = exefile] – "%1" %*
O38 - SubSystemsWindows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystemsWindows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - %SystemRoot%System32hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: UxTuneUp - C:WINDOWSsystem32uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp - File not found
NetSvcs: vkvzwma - C:WINDOWSsystem32ybykm.dll File not found
NetSvcs: ampqi - C:WINDOWSsystem32ybykm.dll File not found

Drivers32: msacm.iac2 - C:WINDOWSsystem32iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:WINDOWSsystem32l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:WINDOWSSystem32sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:WINDOWSSystem32tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo - C:WINDOWSSystem32vfwwdm32.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:WINDOWSSystem32vfwwdm32.dll (Microsoft Corporation)
Drivers32: VIDC.ACDV - C:WINDOWSSystem32ACDV.dll (ACD Systems)
Drivers32: vidc.cvid - C:WINDOWSSystem32iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:WINDOWSSystem32DivX.dll (DivX, Inc.)
Drivers32: VIDC.I420 - C:WINDOWSSystem32lvcodec2.dll (Logitech Inc.)
Drivers32: vidc.iv31 - C:WINDOWSSystem32ir32_32.dll ()
Drivers32: vidc.iv32 - C:WINDOWSSystem32ir32_32.dll ()
Drivers32: vidc.iv41 - C:WINDOWSSystem32ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:WINDOWSSystem32ir50_32.dll (Intel Corporation)
Drivers32: vidc.yv12 - C:WINDOWSSystem32DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Unable to start System Restore Service. Error code 1056

========== Files/Folders - Created Within 30 Days ==========

[2012/05/01 22:54:09 | 000,595,456 | —- | C] (OldTimer Tools) – C:Documents and SettingsMy ComputerDesktopOTL.exe
[2012/05/01 21:04:02 | 000,000,000 | —D | C] – C:Program FilesMozilla Maintenance Service
[2012/05/01 21:04:02 | 000,000,000 | —D | C] – C:Documents and SettingsAll UsersApplication DataMozilla
[2012/05/01 20:57:13 | 016,339,280 | —- | C] (Mozilla) – C:Documents and SettingsMy ComputerDesktopFirefox Setup 12.0(2).exe
[2012/05/01 17:36:20 | 013,475,749 | —- | C] (Mozilla) – C:Documents and SettingsMy ComputerDesktopFirefox Setup 12.0.exe.part
[2012/05/01 16:30:36 | 000,000,000 | —D | C] – C:Documents and SettingsMy ComputerApplication DataGoogle
[2012/05/01 16:28:32 | 000,000,000 | —D | C] – C:Program FilesGoogle
[2012/05/01 16:28:32 | 000,000,000 | —D | C] – C:Documents and SettingsAll UsersApplication DataGoogle
[2012/05/01 11:15:02 | 000,000,000 | —D | C] – C:Documents and SettingsMy ComputerLocal SettingsApplication Datahyjooxxu
[2012/05/01 11:09:06 | 000,000,000 | —D | C] – C:Documents and SettingsAll UsersApplication DataPremium
[2012/05/01 11:08:11 | 000,000,000 | —D | C] – C:Documents and SettingsAll UsersApplication DataInstallMate
[2012/04/30 10:07:38 | 000,000,000 | —D | C] – C:Documents and SettingsMy ComputerMy Documentsgotalk prepaid SIM Webstore Receipt_files
[2012/04/28 18:07:11 | 000,000,000 | —D | C] – C:Documents and SettingsMy ComputerLocal SettingsApplication DataWestern Digital
[2012/04/17 22:12:52 | 004,139,680 | —- | C] (Adobe Systems Incorporated) – C:WINDOWSSystem32FlashPlayerInstaller.exe
[2012/04/17 10:13:52 | 000,000,000 | —D | C] – C:Documents and SettingsMy ComputerApplication DataDDMSettings
[2012/04/17 09:47:58 | 000,000,000 | —D | C] – C:Documents and SettingsAll UsersApplication DataDownloader
[2012/04/17 09:47:58 | 000,000,000 | —D | C] – C:Documents and SettingsAll UsersStart MenuProgramsBigPond
[2012/04/17 09:47:57 | 000,000,000 | —D | C] – C:Documents and SettingsMy ComputerLocal SettingsApplication DataDownloader
[2012/04/17 09:47:57 | 000,000,000 | —D | C] – C:Program FilesBigPond
[2012/04/16 12:19:40 | 000,000,000 | —D | C] – C:Documents and SettingsAll UsersStart MenuProgramsVirgin Mobile pocket wifi
[2012/04/16 12:19:27 | 000,112,640 | —- | C] (Huawei Technologies Co., Ltd.) – C:WINDOWSSystem32driversewusbnet.sys
[2012/04/16 12:19:27 | 000,102,528 | —- | C] (Huawei Technologies Co., Ltd.) – C:WINDOWSSystem32driversewusbmdm.sys
[2012/04/16 12:19:27 | 000,100,480 | —- | C] (Huawei Technologies Co., Ltd.) – C:WINDOWSSystem32driversewusbdev.sys
[2012/04/16 12:19:27 | 000,024,448 | —- | C] (Huawei Tech. Co., Ltd.) – C:WINDOWSSystem32driversewdcsc.sys
[2012/04/13 14:09:27 | 000,028,992 | —- | C] (TuneUp Software) – C:WINDOWSSystem32uxtuneup.dll
[2012/04/11 06:56:42 | 000,000,000 | —D | C] – C:WINDOWSMinidump
[2012/04/02 13:24:42 | 000,418,464 | —- | C] (Adobe Systems Incorporated) – C:WINDOWSSystem32FlashPlayerApp.exe
[6 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]
[1 C:WINDOWSSystem32*.tmp files -> C:WINDOWSSystem32*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/05/01 22:53:02 | 000,595,456 | —- | M] (OldTimer Tools) – C:Documents and SettingsMy ComputerDesktopOTL.exe
[2012/05/01 22:41:00 | 000,000,896 | —- | M] () – C:WINDOWStasksGoogleUpdateTaskMachineUA.job
[2012/05/01 22:13:00 | 000,001,002 | —- | M] () – C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1220945662-1060284298-1343024091-1003UA.job
[2012/05/01 22:12:00 | 000,000,830 | —- | M] () – C:WINDOWStasksAdobe Flash Player Updater.job
[2012/05/01 21:04:05 | 000,000,742 | —- | M] () – C:Documents and SettingsMy ComputerApplication DataMicrosoftInternet ExplorerQuick LaunchMozilla Firefox.lnk
[2012/05/01 21:04:05 | 000,000,724 | —- | M] () – C:Documents and SettingsAll UsersDesktopMozilla Firefox.lnk
[2012/05/01 21:00:49 | 016,339,280 | —- | M] (Mozilla) – C:Documents and SettingsMy ComputerDesktopFirefox Setup 12.0(2).exe
[2012/05/01 20:48:42 | 000,000,290 | —- | M] () – C:WINDOWStasksRealUpgradeLogonTaskS-1-5-21-1220945662-1060284298-1343024091-1003.job
[2012/05/01 20:48:22 | 000,013,646 | —- | M] () – C:WINDOWSSystem32wpa.dbl
[2012/05/01 20:47:25 | 000,000,892 | —- | M] () – C:WINDOWStasksGoogleUpdateTaskMachineCore.job
[2012/05/01 20:47:05 | 000,000,236 | —- | M] () – C:WINDOWStasksOGALogon.job
[2012/05/01 20:46:55 | 000,002,048 | –S- | M] () – C:WINDOWSbootstat.dat
[2012/05/01 17:40:52 | 013,475,749 | —- | M] (Mozilla) – C:Documents and SettingsMy ComputerDesktopFirefox Setup 12.0.exe.part
[2012/05/01 17:36:38 | 000,000,000 | —- | M] () – C:Documents and SettingsMy ComputerDesktopFirefox Setup 12.0.exe
[2012/05/01 13:14:46 | 000,000,204 | —- | M] () – C:WINDOWSMYOBP.INI
[2012/05/01 13:14:37 | 000,000,127 | —- | M] () – C:WINDOWSSwDrvs.ini
[2012/05/01 13:14:37 | 000,000,039 | —- | M] () – C:WINDOWSMYOB.INI
[2012/05/01 08:32:43 | 096,774,938 | —- | M] () – C:WINDOWSSystem32driversAVGincavi.avm
[2012/04/30 20:23:29 | 000,000,298 | —- | M] () – C:WINDOWStasksRealUpgradeScheduledTaskS-1-5-21-1220945662-1060284298-1343024091-1003.job
[2012/04/30 10:07:38 | 000,045,470 | —- | M] () – C:Documents and SettingsMy ComputerMy Documentsgotalk prepaid SIM Webstore Receipt.htm
[2012/04/30 07:38:06 | 000,052,109 | —- | M] () – C:WINDOWSSystem32driversAVGiavichjg.avm
[2012/04/28 21:00:53 | 000,092,672 | —- | M] () – C:Documents and SettingsMy ComputerLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/04/28 19:13:00 | 000,000,950 | —- | M] () – C:WINDOWStasksGoogleUpdateTaskUserS-1-5-21-1220945662-1060284298-1343024091-1003Core.job
[2012/04/26 08:44:13 | 000,002,265 | —- | M] () – C:Documents and SettingsAll UsersDesktopSkype.lnk
[2012/04/26 08:39:39 | 000,000,000 | —- | M] () – C:WINDOWSSystem32driverslvuvc.hs
[2012/04/26 08:39:38 | 000,000,000 | —- | M] () – C:WINDOWSSystem32driverslogiflt.iad
[2012/04/17 22:12:56 | 000,418,464 | —- | M] (Adobe Systems Incorporated) – C:WINDOWSSystem32FlashPlayerApp.exe
[2012/04/17 22:12:56 | 000,070,304 | —- | M] (Adobe Systems Incorporated) – C:WINDOWSSystem32FlashPlayerCPLApp.cpl
[2012/04/17 22:12:52 | 004,139,680 | —- | M] (Adobe Systems Incorporated) – C:WINDOWSSystem32FlashPlayerInstaller.exe
[2012/04/17 10:12:24 | 000,001,487 | —- | M] () – C:Documents and SettingsMy ComputerDesktopDivX Movies.lnk
[2012/04/17 10:11:35 | 000,000,777 | —- | M] () – C:Documents and SettingsAll UsersDesktopDivX Plus Player.lnk
[2012/04/16 12:19:42 | 000,000,742 | —- | M] () – C:Documents and SettingsAll UsersDesktopgotalk Mobile.lnk
[2012/04/13 21:10:31 | 000,439,690 | —- | M] () – C:WINDOWSSystem32perfh009.dat
[2012/04/13 21:10:31 | 000,070,822 | —- | M] () – C:WINDOWSSystem32perfc009.dat
[2012/04/13 21:06:14 | 000,000,284 | —- | M] () – C:WINDOWStasksAppleSoftwareUpdate.job
[2012/04/10 14:05:54 | 000,002,347 | —- | M] () – C:Documents and SettingsAll UsersDesktopHSDPA USB Modem.lnk
[2012/04/05 21:08:34 | 000,031,552 | —- | M] (TuneUp Software) – C:WINDOWSSystem32TURegOpt.exe
[2012/04/05 21:08:24 | 000,028,992 | —- | M] (TuneUp Software) – C:WINDOWSSystem32uxtuneup.dll
[6 C:WINDOWS*.tmp files -> C:WINDOWS*.tmp -> ]
[1 C:WINDOWSSystem32*.tmp files -> C:WINDOWSSystem32*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/05/01 21:04:05 | 000,000,724 | —- | C] () – C:Documents and SettingsAll UsersDesktopMozilla Firefox.lnk
[2012/05/01 21:04:04 | 000,000,730 | —- | C] () – C:Documents and SettingsAll UsersStart MenuProgramsMozilla Firefox.lnk
[2012/05/01 17:36:38 | 000,000,000 | —- | C] () – C:Documents and SettingsMy ComputerDesktopFirefox Setup 12.0.exe
[2012/05/01 16:29:47 | 000,000,896 | —- | C] () – C:WINDOWStasksGoogleUpdateTaskMachineUA.job
[2012/05/01 16:29:46 | 000,000,892 | —- | C] () – C:WINDOWStasksGoogleUpdateTaskMachineCore.job
[2012/04/30 10:07:36 | 000,045,470 | —- | C] () – C:Documents and SettingsMy ComputerMy Documentsgotalk prepaid SIM Webstore Receipt.htm
[2012/04/17 10:12:24 | 000,001,487 | —- | C] () – C:Documents and SettingsMy ComputerDesktopDivX Movies.lnk
[2012/04/17 10:11:35 | 000,000,777 | —- | C] () – C:Documents and SettingsAll UsersDesktopDivX Plus Player.lnk
[2012/04/16 12:19:42 | 000,000,742 | —- | C] () – C:Documents and SettingsAll UsersDesktopgotalk Mobile.lnk
[2012/04/02 13:24:51 | 000,000,830 | —- | C] () – C:WINDOWStasksAdobe Flash Player Updater.job
[2012/03/08 06:47:29 | 000,003,072 | —- | C] () – C:WINDOWSSystem32iacenc.dll
[2011/10/20 14:34:12 | 000,180,624 | —- | C] () – C:WINDOWSSystem32Primomonnt.dll
[2011/08/17 23:31:55 | 000,040,800 | -H– | C] () – C:WINDOWSSystem32mlfcache.dat
[2011/02/09 12:37:55 | 000,092,672 | —- | C] () – C:Documents and SettingsMy ComputerLocal SettingsApplication DataDCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== LOP Check ==========

[2009/11/10 13:17:25 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataACD Systems
[2012/03/15 19:54:58 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataAVG Secure Search
[2011/12/15 11:18:01 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataAVG2012
[2009/11/19 10:10:57 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Dataavg9
[2010/10/19 21:26:08 | 000,000,000 | -H-D | M] – C:Documents and SettingsAll UsersApplication DataCommon Files
[2012/04/23 22:50:12 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataDownloader
[2012/02/14 21:20:49 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataInstallations
[2012/05/01 11:09:09 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataInstallMate
[2012/05/01 08:32:51 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataMFAData
[2009/02/12 14:43:01 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataNokia
[2009/01/26 20:40:29 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataPC Suite
[2012/05/01 11:09:06 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataPremium
[2011/01/26 22:47:07 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataRosetta Stone
[2010/09/30 09:05:37 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataScanSoft
[2012/03/12 22:58:02 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataTuneUp Software
[2011/04/03 12:52:51 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication DataWinZip
[2012/03/12 22:55:05 | 000,000,000 | -HSD | M] – C:Documents and SettingsAll UsersApplication Data{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2010/12/03 20:14:55 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Data{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010/02/16 10:23:01 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Data{4C0DBD62-F011-4A41-B11D-BE5CFA6DEDD7}
[2010/01/29 19:56:03 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Data{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/06/07 21:45:00 | 000,000,000 | —D | M] – C:Documents and SettingsAll UsersApplication Data{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/11/10 13:20:12 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataACD Systems
[2012/04/20 11:24:33 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataAUSkey
[2011/12/15 11:05:14 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataAVG Secure Search
[2011/12/15 11:00:35 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataAVG2012
[2012/04/17 10:13:52 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataDDMSettings
[2010/01/29 09:25:06 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataImage Zone Express
[2008/09/21 14:48:02 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataInterVideo
[2010/04/12 19:21:57 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataLeadertech
[2009/01/26 21:03:33 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataNokia
[2009/01/26 20:40:44 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataPC Suite
[2010/07/16 13:37:53 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataPC-FAX TX
[2011/10/21 09:49:23 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataPrimoPDF
[2012/03/28 21:16:45 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataRayV
[2012/03/12 22:57:20 | 000,000,000 | —D | M] – C:Documents and SettingsMy ComputerApplication DataTuneUp Software
[2012/05/01 20:47:05 | 000,000,236 | —- | M] () – C:WINDOWSTasksOGALogon.job

========== Purity Check ==========



========== Custom Scans ==========

< >

< %SYSTEMDRIVE%*.* >
[2008/09/17 15:12:46 | 000,000,000 | —- | M] () – C:AUTOEXEC.BAT
[2008/09/17 15:06:01 | 000,000,211 | -HS- | M] () – C:boot.ini
[2008/09/17 15:12:46 | 000,000,000 | —- | M] () – C:CONFIG.SYS
[2008/09/17 15:12:46 | 000,000,000 | RHS- | M] () – C:IO.SYS
[2010/04/29 07:46:42 | 000,731,188 | —- | M] () – C:mombi.log
[2008/09/17 15:12:46 | 000,000,000 | RHS- | M] () – C:MSDOS.SYS
[2004/08/04 22:00:00 | 000,047,564 | RHS- | M] () – C:NTDETECT.COM
[2009/03/20 07:15:16 | 000,250,048 | RHS- | M] () – C:ntldr
[2012/05/01 20:46:48 | 1610,612,736 | -HS- | M] () – C:pagefile.sys

< %systemroot%Fonts*.com >
[2006/04/18 15:39:28 | 000,026,040 | —- | M] () – C:WINDOWSFontsGlobalMonospace.CompositeFont
[2006/06/29 14:53:56 | 000,026,489 | —- | M] () – C:WINDOWSFontsGlobalSansSerif.CompositeFont
[2006/04/18 15:39:28 | 000,029,779 | —- | M] () – C:WINDOWSFontsGlobalSerif.CompositeFont
[2006/06/29 14:58:52 | 000,030,808 | —- | M] () – C:WINDOWSFontsGlobalUserInterface.CompositeFont

< %systemroot%Fonts*.dll >

< %systemroot%Fonts*.ini >
[2008/09/17 15:12:11 | 000,000,067 | -HS- | M] () – C:WINDOWSFontsdesktop.ini

< %systemroot%Fonts*.ini2 >

< %systemroot%Fonts*.exe >

< %systemroot%system32spoolprtprocsw32x86*.* >
[2008/07/06 22:06:10 | 000,089,088 | —- | M] (Microsoft Corporation) – C:WINDOWSsystem32spoolprtprocsw32x86filterpipelineprintproc.dll
[2006/07/03 11:54:12 | 000,091,648 | —- | M] (Hewlett-Packard Corporation) – C:WINDOWSsystem32spoolprtprocsw32x86hpzpp4sa.dll
[2007/04/09 13:23:54 | 000,028,552 | —- | M] (Microsoft Corporation) – C:WINDOWSsystem32spoolprtprocsw32x86mdippr.dll
[2008/07/06 20:50:03 | 000,597,504 | —- | M] (Microsoft Corporation) – C:WINDOWSsystem32spoolprtprocsw32x86printfilterpipelinesvc.exe

< %systemroot%REPAIR*.bak1 >

< %systemroot%REPAIR*.ini >

< %systemroot%system32*.jpg >

< %systemroot%*.jpg >

< %systemroot%*.png >

< %systemroot%*.scr >

< %systemroot%*._sy >

< %APPDATA%AdobeUpdate*.* >

< %ALLUSERSPROFILE%Favorites*.* >

< %APPDATA%Microsoft*.* >
[2012/04/10 14:04:33 | 000,001,754 | -H– | M] () – C:Documents and SettingsMy ComputerApplication DataMicrosoftLastFlashConfig.WFC

< %PROGRAMFILES%*.* >

< %APPDATA%Update*.* >

< %systemroot%*. /mp /s >

< %systemroot%System32config*.sav >
[2008/09/18 00:45:16 | 000,094,208 | —- | M] () – C:WINDOWSSystem32configdefault.sav
[2008/09/18 00:45:16 | 000,659,456 | —- | M] () – C:WINDOWSSystem32configsoftware.sav
[2008/09/18 00:45:16 | 000,901,120 | —- | M] () – C:WINDOWSSystem32configsystem.sav

< %PROGRAMFILES%bak. /s >

< %systemroot%system32bak. /s >

< %ALLUSERSPROFILE%Start Menu*.lnk /x >
[2009/04/04 10:01:23 | 000,000,272 | -HS- | M] () – C:Documents and SettingsAll UsersStart Menudesktop.ini

< %systemroot%system32configsystemprofile*.dat /x >

< %systemroot%*.config >

< %systemroot%system32*.db >

< %PROGRAMFILES%Internet Explorer*.dat >

< %APPDATA%MicrosoftInternet ExplorerQuick Launch*.lnk /x >
[2008/09/17 15:20:36 | 000,000,119 | -HS- | M] () – C:Documents and SettingsMy ComputerApplication DataMicrosoftInternet ExplorerQuick Launchdesktop.ini
[2008/09/17 15:20:35 | 000,000,079 | —- | M] () – C:Documents and SettingsMy ComputerApplication DataMicrosoftInternet ExplorerQuick LaunchShow Desktop.scf

< %USERPROFILE%Desktop*.exe >
[2012/05/01 21:00:49 | 016,339,280 | —- | M] (Mozilla) – C:Documents and SettingsMy ComputerDesktopFirefox Setup 12.0(2).exe
[2012/05/01 17:36:38 | 000,000,000 | —- | M] () – C:Documents and SettingsMy ComputerDesktopFirefox Setup 12.0.exe
[2012/05/01 22:53:02 | 000,595,456 | —- | M] (OldTimer Tools) – C:Documents and SettingsMy ComputerDesktopOTL.exe

< %PROGRAMFILES%Common Files*.* >

< %systemroot%*.src >

< %systemroot%install*.* >

< %systemroot%system32DLL*.* >

< %systemroot%system32HelpFiles*.* >

< %systemroot%system32rundll*.* >

< %systemroot%winn32*.* >

< %systemroot%Java*.* >

< %systemroot%system32test*.* >

< %systemroot%system32Rundll32*.* >

< %systemroot%AppPatchCustom*.* >

< HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU >
"NoAutoUpdate" = 0

< HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstall|LastSuccessTime /rs >
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstallLastSuccessTime: 2012-04-18 11:20:11

< End of report >


OTL Extras logfile created on: 1/05/2012 10:58:57 PM - Run 1
OTL by OldTimer - Version 3.2.42.2 Folder = C:Documents and SettingsMy ComputerDesktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

1023.36 Mb Total Physical Memory | 414.87 Mb Available Physical Memory | 40.54% Memory free
2.41 Gb Paging File | 1.78 Gb Available in Paging File | 73.89% Paging File free
Paging file location(s): C:pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:WINDOWS | %ProgramFiles% = C:Program Files
Drive C: | 55.88 Gb Total Space | 5.26 Gb Free Space | 9.42% Space Free | Partition Type: NTFS

Computer Name: HP-9AE5D5147A63 | User Name: My Computer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINESOFTWAREClasses]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USERSOFTWAREClasses]
.html [@ = FirefoxHTML] – C:Program FilesMozilla Firefoxfirefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINESOFTWAREClassesshell[command]command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [ACDSee 9.0.Browse] – "C:Program FilesACD SystemsACDSee9.0ACDSeeQV.exe" "%1" (ACD Systems Ltd.)
Directory [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringAhnlabAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringKasperskyAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringMcAfeeFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringPandaFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSophosAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringSymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTinyFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendAntiVirus]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringTrendFirewall]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoringZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSr]
"Start" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyDomainProfile]
"EnableFirewall" = 0
"" =
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyDomainProfileGloballyOpenPortsList]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"10243:TCP" = 10243:TCP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10280:UDP" = 10280:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10281:UDP" = 10281:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10282:UDP" = 10282:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10283:UDP" = 10283:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10284:UDP" = 10284:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"" =

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfileGloballyOpenPortsList]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"10283:UDP" = 10283:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"10243:TCP" = 10243:TCP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10280:UDP" = 10280:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10281:UDP" = 10281:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10282:UDP" = 10282:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"10284:UDP" = 10284:UDP:LocalSubNet:Enabled:Windows Media Player Network Sharing Service
"" =
"1799:UDP" = 1799:UDP:*:Enabled:Windows Media Format SDK (chrome.exe)
"1812:UDP" = 1812:UDP:*:Enabled:Windows Media Format SDK (chrome.exe)

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyDomainProfileAuthorizedApplicationsList]
"C:Program FilesRosetta StoneRosetta Stone V3RosettaStoneVersion3.exe" = C:Program FilesRosetta StoneRosetta Stone V3RosettaStoneVersion3.exe:*:Enabled:Rosetta Stone V3 Application – ()
"C:Program FilesRosetta StoneRosetta Stone V3supportbinwinRosettaStoneLtdServices.exe" = C:Program FilesRosetta StoneRosetta Stone V3supportbinwinRosettaStoneLtdServices.exe:*:Enabled:Rosetta Stone Ltd Services – ()

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfileAuthorizedApplicationsList]
"C:Program FilesJavajre6binjava.exe" = C:Program FilesJavajre6binjava.exe:*:Disabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe" = C:Program FilesCommon FilesNokiaService LayerAnsl_host_process.exe:*:Disabled:Nokia Service Layer Host Process – (Nokia Corporation)
"C:Program FilesNokiaNokia Software Updaternsu_ui_client.exe" = C:Program FilesNokiaNokia Software Updaternsu_ui_client.exe:*:Disabled:Nokia Software Updater – (Nokia Corporation)
"C:Program FilesRayVRayVRayV.exe" = C:Program FilesRayVRayVRayV.exe:*:Enabled:RayV – (RayV)
"C:Program FilesRayVRayVRayV.dll" = C:Program FilesRayVRayVRayV.dll:*:Enabled:RayV – (RayV)
"C:Program FilesRosetta StoneRosetta Stone V3RosettaStoneVersion3.exe" = C:Program FilesRosetta StoneRosetta Stone V3RosettaStoneVersion3.exe:*:Enabled:Rosetta Stone V3 Application – ()
"C:Program FilesRosetta StoneRosetta Stone V3supportbinwinRosettaStoneLtdServices.exe" = C:Program FilesRosetta StoneRosetta Stone V3supportbinwinRosettaStoneLtdServices.exe:*:Enabled:Rosetta Stone Ltd Services – ()
"C:Documents and SettingsMy ComputerApplication DataRayVViewerRayV.dll" = C:Documents and SettingsMy ComputerApplication DataRayVViewerRayV.dll:*:Enabled:RayV – (RayV)
"C:Program FilesAVGAVG2012avgmfapx.exe" = C:Program FilesAVGAVG2012avgmfapx.exe:*:Enabled:AVG Installer – (AVG Technologies CZ, s.r.o.)
"C:Program FilesLogitechVid HDVid.exe" = C:Program FilesLogitechVid HDVid.exe:*:Enabled:Logitech Vid HD – (Logitech Inc.)
"C:Program FilesAVGAVG2012avgnsx.exe" = C:Program FilesAVGAVG2012avgnsx.exe:*:Enabled:Online Shield – (AVG Technologies CZ, s.r.o.)
"C:Program FilesAVGAVG2012avgdiagex.exe" = C:Program FilesAVGAVG2012avgdiagex.exe:*:Enabled:AVG Diagnostics 2012 – (AVG Technologies CZ, s.r.o.)
"C:Program FilesAVGAVG2012avgemcx.exe" = C:Program FilesAVGAVG2012avgemcx.exe:*:Enabled:Personal E-mail Scanner – (AVG Technologies CZ, s.r.o.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{069C1AD7-AC72-40E0-A156-7442EA6A48D7}" = AVG 2012
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1976B721-8F15-4B86-92D2-725364AF8CE0}" = AUSkey software 1.4.0.3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java™ 6 Update 30
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour
"{2BC2781A-F7F6-452E-95EB-018A522F1B2C}" = PaperPort Image Printer
"{2D99A593-C841-43A7-B7C9-D6F3AE70B756}" = Nokia Connectivity Cable Driver
"{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support
"{32364CEA-7855-4A3C-B674-53D8E9B97936}" = TuneUp Utilities 2012
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3A08B59E-A9F0-4F4D-B7E5-6875D7F13327}" = Brother MFL-Pro Suite MFC-250C
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBD31CE-51DF-43C4-B3EC-7CCBAB0CD083}" = O2Micro MemoryCardBus Windows Driver
"{4EFC72DA-2314-4E5D-AC8E-1C954CDB8BBF}" = AVG 2012
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{59367F7E-D7C1-4629-8AEC-71AA24A68F31}" = Nokia Software Updater
"{5C3DA2A1-03B2-44BD-B5AA-A44BD6E0C0C1}" = HP Integrated Wireless LAN W400-W500 Driver
"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6E0865B4-97BF-4397-9D0A-0B66E253C2CC}" = BigPond Media Downloader
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7210BCFE-ED8D-4261-8537-81B5A4BDFA2A}" = Rosetta Stone V3
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7A8FF745-BBC5-482B-88E4-18D3178249A9}" = ScanSoft PaperPort 11
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{92022F8E-2E55-4A16-88EB-B4778B35E942}" = ACDSee for PENTAX 3.0
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{98E8A2EF-4EAE-43B8-A172-74842B764777}" = InterVideo WinDVD
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A95A76C9-6F65-477E-83A0-9F884B6DC21B}" = TuneUp Utilities Language Pack (en-US)
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3)
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{BE6890C7-31EF-478C-812E-1E2899ABFCA9}" = Broadcom Gigabit Integrated Controller
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C27BC2A2-30DD-4014-B22E-63EB0DB572F9}" = Logitech Webcam Software
"{C373F7C4-05D2-4047-96D1-6AF30661C6AA}" = PC Connectivity Solution
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240C1}" = WinZip 15.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{E837279E-4C3F-411A-8E3D-0EFD97F818E3}" = Bluetooth by hp
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F042F206-13CF-43DB-BDF5-FFFE46357E5A}" = 3G USB Modem
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F2545484-7B1C-484A-89B8-B0F8B38BC67F}" = O2Micro SmartCardBus Reader Windows Driver Installer
"{F6A0AD89-3302-4798-A4D1-79209AC86B3D}" = MYOB Accounting v16
"{FAE36873-1941-4076-A9A5-48812B5EA0B7}" = iTunes
"{FB3BE405-6BF0-490A-84B3-00611385EA0D}" = Common-Use Signing Interface
"504244733D18C8F63FF584AEB290E3904E791693" = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Agere Systems Soft Modem" = Agere Systems AC'97 Modem
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"AVG" = AVG 2012
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Common-Use Signing Interface" = Common-Use Signing Interface
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX Setup
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{4CBD31CE-51DF-43C4-B3EC-7CCBAB0CD083}" = O2Micro MemoryCardBus Windows Driver
"InstallShield_{BE6890C7-31EF-478C-812E-1E2899ABFCA9}" = Broadcom Gigabit Integrated Controller
"InstallShield_{F042F206-13CF-43DB-BDF5-FFFE46357E5A}" = 3G USB Modem
"InstallShield_{F6A0AD89-3302-4798-A4D1-79209AC86B3D}" = MYOB Accounting v16
"Logitech Vid" = Logitech Vid HD
"lvdrivers_12.10" = Logitech Webcam Software Driver Package
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 12.0 (x86 en-US)" = Mozilla Firefox 12.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"RayV" = sportube Player
"RealPlayer 15.0" = RealPlayer
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TuneUp Utilities 2012" = TuneUp Utilities 2012
"Virgin Mobile" = Virgin Mobile
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:35:12 PM, on 1/05/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:PROGRA~1AVGAVG2012avgrsx.exe
C:Program FilesAVGAVG2012avgcsrvx.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSAGRSMMSG.exe
C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
C:Program FilesSynapticsSynTPSynTPLpr.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesBrotherBrmfcmonBrMfcWnd.exe
C:Program FilesAVGAVG2012avgtray.exe
C:PROGRA~13GUSBM~1HSDPAL~1.EXE
C:Program FilesAVG Secure Searchvprot.exe
C:Program FilesDivXDivX UpdateDivXUpdate.exe
C:Program FilesBrotherControlCenter3brccMCtl.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
C:Program FilesAVGAVG2012avgwdsvc.exe
C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
C:PROGRA~1WIDCOMMBLUETO~1BTSTAC~1.EXE
C:Program FilesBrotherBrmfcmonBrMfcmon.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesAVGAVG2012avgnsx.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesService32.exe
C:Program FilesCommon FilesAVG Secure SearchvToolbarUpdater10.2.0ToolbarUpdater.exe
C:Program FilesAVGAVG2012AVGIDSAgent.exe
C:Program FilesWindows Media PlayerWMPNetwk.exe
C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesApp32.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Documents and SettingsMy ComputerDesktopHiJackThis.exe
C:WINDOWSsystem32wbemwmiprvse.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.aapt.net.au
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = AAPT
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
F2 - REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,,C:Documents and SettingsMy ComputerLocal SettingsApplication Datahyjooxxupfbbyxel.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Documents and SettingsAll UsersApplication DataRealRealPlayerBrowserRecordPluginIErpbrowserrecordplugin.dll
O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:Program FilesDivXDivX Plus Web PlayerieDivXHTML5DivXHTML5.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:Program FilesAVGAVG2012avgssie.dll
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre6binssv.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:Program FilesAVG Secure Search10.2.0.3AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.7.7227.1100swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:Program FilesAVG Secure Search10.2.0.3AVG Secure Search_toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O4 - HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM..Run: [ATIPTA] C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
O4 - HKLM..Run: [SynTPLpr] C:Program FilesSynapticsSynTPSynTPLpr.exe
O4 - HKLM..Run: [SynTPEnh] C:Program FilesSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [HP Software Update] C:Program FilesHPHP Software UpdateHPWuSchd2.exe
O4 - HKLM..Run: [LogitechQuickCamRibbon] "C:Program FilesLogitechLogitech WebCam SoftwareLWS.exe" /hide
O4 - HKLM..Run: [SSBkgdUpdate] "C:Program FilesCommon FilesScansoft SharedSSBkgdUpdateSSBkgdupdate.exe" -Embedding -boot
O4 - HKLM..Run: [PaperPort PTD] "C:Program FilesScanSoftPaperPortpptd40nt.exe"
O4 - HKLM..Run: [IndexSearch] "C:Program FilesScanSoftPaperPortIndexSearch.exe"
O4 - HKLM..Run: [BrMfcWnd] C:Program FilesBrotherBrmfcmonBrMfcWnd.exe /AUTORUN
O4 - HKLM..Run: [ControlCenter3] C:Program FilesBrotherControlCenter3brctrcen.exe /autorun
O4 - HKLM..Run: [AVG_TRAY] "C:Program FilesAVGAVG2012avgtray.exe"
O4 - HKLM..Run: [HSDPALauncher] C:PROGRA~13GUSBM~1HSDPAL~1.EXE
O4 - HKLM..Run: [Adobe ARM] "C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe"
O4 - HKLM..Run: [TkBellExe] "C:Program FilesRealRealPlayerupdaterealsched.exe" -osboot
O4 - HKLM..Run: [vProt] "C:Program FilesAVG Secure Searchvprot.exe"
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesCommon FilesJavaJava Updatejusched.exe"
O4 - HKLM..Run: [ROC_roc_dec12] "C:Program FilesAVG Secure SearchROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [DivXUpdate] "C:Program FilesDivXDivX UpdateDivXUpdate.exe" /CHECKNOW
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [RayV] C:Program FilesRayVRayVRayV.exe /background
O4 - HKCU..Run: [Google Update] "C:Documents and SettingsMy ComputerLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe" /c
O4 - HKCU..Run: [Logitech Vid] "C:Program FilesLogitechVid HDVid.exe" -bootmode
O4 - HKCU..Run: [swg] "C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
O4 - HKCU..Run: [PfbByxel] C:Documents and SettingsMy ComputerLocal SettingsApplication Datahyjooxxupfbbyxel.exe
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:Program FilesWinZipWZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie_ctx.htm
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:Program FilesSkypeToolbarsInternet ExplorerSkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Program FilesWIDCOMMBluetooth Softwarebtsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O15 - Trusted Zone: http://www.abr.gov.au
O15 - Trusted Zone: http://www.ato.gov.au
O15 - Trusted Zone: http://*.ato.gov.au
O15 - Trusted Zone: http://www.business.gov.au
O15 - Trusted Zone: http://www.mozilla.org
O15 - Trusted Zone: http://www.ntis.gov.au
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} (Hewlett-Packard Online Support Services) - http://h50203.www5.hp.com/HPISWeb/Customer…DataManager.CAB
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/inst…tDetection2.cab
O16 - DPF: {861FDA2A-2B57-4BDA-8B8B-305C9D5D8604} (_Multimedia Player) - http://stream.pussyharem.com/stream/mmp3.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc…ash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLMSystemCCSServicesTcpip..{CD00420F-A40C-46E4-9D04-2347766F1D32}: Domain = aapt.net.au
O17 - HKLMSystemCCSServicesTcpip..{E5D42B33-B4AA-4C94-8650-D641BE63B4BA}: Domain = aapt.net.au
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:Program FilesAVGAVG2012avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1COMMON~1SkypeSKYPE4~1.DLL
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:Program FilesCommon FilesAVG Secure SearchViProtocolInstaller10.2.0ViProtocol.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:Program FilesAVGAVG2012AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:Program FilesAVGAVG2012avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:Program FilesMozilla Maintenance Servicemaintenanceservice.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesService32.exe
O23 - Service: vToolbarUpdater10.2.0 - Unknown owner - C:Program FilesCommon FilesAVG Secure SearchvToolbarUpdater10.2.0ToolbarUpdater.exe

–
End of file - 15252 bytes


.
DDS (Ver_11-03-05.01) - NTFSx86
Run by [removed] at 23:38:37.81 on Tue 01/05/2012
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_30
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.298 [GMT 10:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:PROGRA~1AVGAVG2012avgrsx.exe
C:Program FilesAVGAVG2012avgcsrvx.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost -k DcomLaunch
C:WINDOWSsystem32svchost -k rpcss
C:WINDOWSSystem32svchost.exe -k netsvcs
C:WINDOWSsystem32svchost.exe -k WudfServiceGroup
C:WINDOWSsystem32svchost.exe -k NetworkService
C:WINDOWSsystem32svchost.exe -k LocalService
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSAGRSMMSG.exe
C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
C:Program FilesSynapticsSynTPSynTPLpr.exe
C:Program FilesSynapticsSynTPSynTPEnh.exe
C:Program FilesBrotherBrmfcmonBrMfcWnd.exe
C:Program FilesAVGAVG2012avgtray.exe
C:PROGRA~13GUSBM~1HSDPAL~1.EXE
C:Program FilesAVG Secure Searchvprot.exe
C:Program FilesDivXDivX UpdateDivXUpdate.exe
C:Program FilesBrotherControlCenter3brccMCtl.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:Program FilesWIDCOMMBluetooth SoftwareBTTray.exe
C:Program FilesAVGAVG2012avgwdsvc.exe
C:Program FilesWIDCOMMBluetooth Softwarebinbtwdins.exe
C:PROGRA~1WIDCOMMBLUETO~1BTSTAC~1.EXE
C:Program FilesBrotherBrmfcmonBrMfcmon.exe
C:WINDOWSSystem32svchost.exe -k HTTPFilter
C:Program FilesAVGAVG2012avgnsx.exe
C:WINDOWSSystem32svchost.exe -k HPZ12
C:WINDOWSSystem32svchost.exe -k HPZ12
C:WINDOWSsystem32svchost.exe -k imgsvc
C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesService32.exe
C:Program FilesCommon FilesAVG Secure SearchvToolbarUpdater10.2.0ToolbarUpdater.exe
C:Program FilesAVGAVG2012AVGIDSAgent.exe
C:Program FilesWindows Media PlayerWMPNetwk.exe
C:Program FilesTuneUp Utilities 2012TuneUpUtilitiesApp32.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSsystem32wuauclt.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesInternet Exploreriexplore.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:WINDOWSsystem32NOTEPAD.EXE
C:Documents and SettingsMy ComputerDesktopdds.scr
C:WINDOWSsystem32wbemwmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com.au/
uWindow Title = AAPT
uDefault_Page_URL = hxxp://www.aapt.net.au
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: H - No File
mWinlogon: Userinit=c:windowssystem32userinit.exe,,c:documents and settingsmy computerlocal settingsapplication datahyjooxxupfbbyxel.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:program filescommon filesadobeacrobatactivexAcroIEHelperShim.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:program filesskypetoolbarsinternet explorerSkypeIEPlugin.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:documents and settingsall usersapplication datarealrealplayerbrowserrecordpluginierpbrowserrecordplugin.dll
BHO: DivX Plus Web Player HTML5 : {326e768d-4182-46fd-9c16-1449a49795f4} - c:program filesdivxdivx plus web playeriedivxhtml5DivXHTML5.dll
BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:program filesavgavg2012avgssie.dll
BHO: Java™ Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:program filesjavajre6binssv.dll
BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:program filesavg secure search10.2.0.3AVG Secure Search_toolbar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:program filesgooglegoogle toolbarGoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:program filesgooglegoogletoolbarnotifier5.7.7227.1100swg.dll
BHO: Java™ Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:program filesjavajre6binjp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:program filesjavajre6libdeployjqsiejqs_plugin.dll
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:program filesavg secure search10.2.0.3AVG Secure Search_toolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:program filesgooglegoogle toolbarGoogleToolbar_32.dll
TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
TB: {A057A204-BACC-4D26-9990-79A187E2698E} - No File
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
uRun: [CTFMON.EXE] c:windowssystem32ctfmon.exe
uRun: [RayV] c:program filesrayvrayvRayV.exe /background
uRun: [Google Update] "c:documents and settingsmy computerlocal settingsapplication datagoogleupdateGoogleUpdate.exe" /c
uRun: [Logitech Vid] "c:program fileslogitechvid hdVid.exe" -bootmode
uRun: [swg] "c:program filesgooglegoogletoolbarnotifierGoogleToolbarNotifier.exe"
uRun: [PfbByxel] c:documents and settingsmy computerlocal settingsapplication datahyjooxxupfbbyxel.exe
mRun: [AGRSMMSG] AGRSMMSG.exe
mRun: [ATIPTA] c:program filesati technologiesati control panelatiptaxx.exe
mRun: [SynTPLpr] c:program filessynapticssyntpSynTPLpr.exe
mRun: [SynTPEnh] c:program filessynapticssyntpSynTPEnh.exe
mRun: [HP Software Update] c:program fileshphp software updateHPWuSchd2.exe
mRun: []
mRun: [LogitechQuickCamRibbon] "c:program fileslogitechlogitech webcam softwareLWS.exe" /hide
mRun: [SSBkgdUpdate] "c:program filescommon filesscansoft sharedssbkgdupdateSSBkgdupdate.exe" -Embedding -boot
mRun: [PaperPort PTD] "c:program filesscansoftpaperportpptd40nt.exe"
mRun: [IndexSearch] "c:program filesscansoftpaperportIndexSearch.exe"
mRun: [BrMfcWnd] c:program filesbrotherbrmfcmonBrMfcWnd.exe /AUTORUN
mRun: [ControlCenter3] c:program filesbrothercontrolcenter3brctrcen.exe /autorun
mRun: [AVG_TRAY] "c:program filesavgavg2012avgtray.exe"
mRun: [HSDPALauncher] c:progra~13gusbm~1HSDPAL~1.EXE
mRun: [Adobe ARM] "c:program filescommon filesadobearm1.0AdobeARM.exe"
mRun: [TkBellExe] "c:program filesrealrealplayerupdaterealsched.exe" -osboot
mRun: [vProt] "c:program filesavg secure searchvprot.exe"
mRun: [SunJavaUpdateSched] "c:program filescommon filesjavajava updatejusched.exe"
mRun: [ROC_roc_dec12] "c:program filesavg secure searchROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
mRun: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
mRun: [DivXUpdate] "c:program filesdivxdivx updateDivXUpdate.exe" /CHECKNOW
dRun: [CTFMON.EXE] c:windowssystem32CTFMON.EXE
StartupFolder: c:docume~1alluse~1startm~1programsstartupbttray.lnk - c:program fileswidcommbluetooth softwareBTTray.exe
StartupFolder: c:docume~1alluse~1startm~1programsstartupwinzip~1.lnk - c:program fileswinzipWZQKPICK.EXE
IE: E&xport to Microsoft Excel - c:progra~1micros~2office11EXCEL.EXE/3000
IE: Send To &Bluetooth - c:program fileswidcommbluetooth softwarebtsendto_ie_ctx.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:program fileswidcommbluetooth softwarebtsendto_ie.htm
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe
IE: {5067A26B-1337-4436-8AFE-EE169C2DA79F} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:program filesskypetoolbarsinternet explorerSkypeIEPlugin.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:program filesskypetoolbarsinternet explorerSkypeIEPlugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:progra~1micros~2office11REFIEBAR.DLL
Trusted Zone: abr.gov.auwww
Trusted Zone: ato.gov.au
Trusted Zone: ato.gov.aubp
Trusted Zone: ato.gov.auwww
Trusted Zone: business.gov.auwww
Trusted Zone: mozilla.orgwww
Trusted Zone: ntis.gov.auwww
DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} - hxxp://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {861FDA2A-2B57-4BDA-8B8B-305C9D5D8604} - hxxp://stream.pussyharem.com/stream/mmp3.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:program filesavgavg2012avgpp.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:progra~1common~1skypeSKYPE4~1.DLL
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:program filescommon filesavg secure searchviprotocolinstaller10.2.0ViProtocol.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:windowssystem32WPDShServiceObj.dll
IFEO: AcroRd32.exe - "c:program filestuneup utilities 2012TUAutoReactivator32.exe"
IFEO: hpwucli.exe - "c:program filestuneup utilities 2012TUAutoReactivator32.exe"
IFEO: itunes.exe - "c:program filestuneup utilities 2012TUAutoReactivator32.exe"
IFEO: javaws.exe - "c:program filestuneup utilities 2012TUAutoReactivator32.exe"
IFEO: lws.exe - "c:program filestuneup utilities 2012TUAutoReactivator32.exe"
.
Note: multiple IFEO entries found. Please refer to Attach.txt
.
================= FIREFOX ===================
.
FF - ProfilePath - c:docume~1mycomp~1applic~1mozillafirefoxprofilesofqanqlc.default
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7B5ad7c0b3-f743-491a-b719-0c2eef580b54%7D&mid=cc82cbd21c2d378c78fc81509292dd59-5c46549e7e8f8d9dac266ad135ecf7d993edd173&ds=AVG&v=10.2.0.3&lang=en&pr=fr&d=2011-12-15%2011%3A05%3A12&sap=ku&q=
FF - plugin: c:documents and settingsall usersapplication datadownloadernpBigPondMediaDownloaderDetector.dll
FF - plugin: c:documents and settingsall usersapplication datarealrealplayerbrowserrecordpluginmozillapluginsnprpchromebrowserrecorde
xt.dll
FF - plugin: c:documents and settingsall usersapplication datarealrealplayerbrowserrecordpluginmozillapluginsnprphtml5videoshim.dll
FF - plugin: c:documents and settingsmy computerlocal settingsapplication dataabrplug-inbinnpAUSkeyPlugin.dll
FF - plugin: c:itunesmozilla pluginsnpitunes.dll
FF - plugin: c:program filesadobereader 10.0readerairnppdf32.dll
FF - plugin: c:program filesadobereader 9.0readerairnppdf32.dll
FF - plugin: c:program filescommon-use signing interfacebinnpCsiPlugin.dll
FF - plugin: c:program filesdivxdivx ovs helpernpovshelper.dll
FF - plugin: c:program filesdivxdivx plus web playernpdivx32.dll
FF - plugin: c:program filesgoogleupdate1.3.21.111npGoogleUpdate3.dll
FF - plugin: c:program filesjavajre6binnew_pluginnpdeployJava1.dll
FF - plugin: c:program filesmicrosoft silverlight4.1.10111.0npctrlui.dll
FF - plugin: c:program filesmozilla firefoxpluginsnpdeployJava1.dll
FF - plugin: c:program filesrayvrayvpluginsnprayvplugin.dll
FF - plugin: c:windowssystem32macromedflashNPSWF32_11_2_202_233.dll
.
—- FIREFOX POLICIES —-
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSEH;AVGIDSEH;c:windowssystem32driversAVGIDSEH.sys [2010-9-13 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:windowssystem32driversavgrkx86.sys [2010-9-7 32592]
R1 Avgldx86;AVG AVI Loader Driver;c:windowssystem32driversavgldx86.sys [2010-9-7 230608]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:windowssystem32driversavgmfx86.sys [2010-9-7 40016]
R1 Avgtdix;AVG TDI Driver;c:windowssystem32driversavgtdix.sys [2010-9-7 295248]
R2 AVGIDSAgent;AVGIDSAgent;c:program filesavgavg2012AVGIDSAgent.exe [2011-10-12 4433248]
R2 avgwd;AVG WatchDog;c:program filesavgavg2012avgwdsvc.exe [2011-8-2 192776]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:program filestuneup utilities 2012TuneUpUtilitiesService32.exe [2012-4-5 1529152]
R2 vToolbarUpdater10.2.0;vToolbarUpdater10.2.0;c:program filescommon filesavg secure searchvtoolbarupdater10.2.0ToolbarUpdater.exe [2012-3-15 918880]
R3 AVGIDSDriver;AVGIDSDriver;c:windowssystem32driversAVGIDSDriver.sys [2010-8-19 134608]
R3 AVGIDSFilter;AVGIDSFilter;c:windowssystem32driversAVGIDSFilter.sys [2010-8-19 24272]
R3 AVGIDSShim;AVGIDSShim;c:windowssystem32driversAVGIDSShim.sys [2010-8-19 16720]
R3 CONAN;CONAN;c:windowssystem32driverso2mmb.sys [2008-9-17 182101]
R3 MbxStby;MbxStby;c:windowssystem32driversMbxStby.sys [2008-9-17 5689]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:program filestuneup utilities 2012TuneUpUtilitiesDriver32.sys [2012-2-9 10064]
R3 WLAN_400_500_SERVICE;HP WLAN W400/W500 Wireless Network Adapter Service;c:windowssystem32driversar5211.sys [2008-9-17 380160]
S2 ampqi;Update Image;c:windowssystem32svchost.exe -k netsvcs [2004-8-4 14336]
S2 gupdate;Google Update Service (gupdate);c:program filesgoogleupdateGoogleUpdate.exe [2012-5-1 136176]
S2 vkvzwma;Server Center;c:windowssystem32svchost.exe -k netsvcs [2004-8-4 14336]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:windowssystem32macromedflashFlashPlayerUpdateService.exe [2012-4-2 253088]
S3 ewusbnet;HUAWEI USB-NDIS miniport;c:windowssystem32driversewusbnet.sys [2012-4-16 112640]
S3 gupdatem;Google Update Service (gupdatem);c:program filesgoogleupdateGoogleUpdate.exe [2012-5-1 136176]
S3 hwusbdev;Huawei DataCard USB PNP Device;c:windowssystem32driversewusbdev.sys [2012-4-16 100480]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:program filesmozilla maintenance servicemaintenanceservice.exe [2012-5-1 129976]
S3 qcusbser;Mobile Connector USB Device for Legacy Serial Communication;c:windowssystem32driverscmusbser.sys [2010-12-13 97408]
.
=============== Created Last 30 ================
.
.
==================== Find3M ====================
.
2012-04-17 12:12:56 70304 —-a-w- c:windowssystem32FlashPlayerCPLApp.cpl
2012-04-05 11:08:34 31552 —-a-w- c:windowssystem32TURegOpt.exe
.
============= FINISH: 23:40:05.74 ===============
Hope this helps!