Help needed with my laptop please [Closed]

Hi,

I am having big problems with my laptop. It is running very very slow! My partner suggested I come here for assistance and is also helping me to run scans etc. I have run OTL and here firstly is otl.txt

OTL logfile created on: 5/6/2012 2:26:24 PM - Run 1
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Users\Denga\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

2.87 Gb Total Physical Memory | 1.67 Gb Available Physical Memory | 58.04% Memory free
5.75 Gb Paging File | 4.40 Gb Available in Paging File | 76.55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 286.42 Gb Total Space | 244.42 Gb Free Space | 85.34% Space Free | Partition Type: NTFS

Computer Name: DENGA | User Name: Denga | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Denga\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
PRC - C:\totalcmd\TOTALCMD.EXE (Ghisler Software GmbH)
PRC - C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TECO\TEco.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe (TOSHIBA CORPORATION)
PRC - C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe (TOSHIBA Corporation)
PRC - C:\Program Files\LSI SoftModem\agrsmsvc.exe (LSI Corporation)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)
PRC - C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)


========== Modules (No Company Name) ==========

MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\507b4ca18da9d2fde2e51a1f04593443\System.Web.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\262285b3d0afafc5059f3fe9be69bff5\System.Windows.Forms.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8177623eac8f15cf95b587625439eac7\System.Drawing.ni.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_11_2_202_228.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a1c4a635721f85bef0ea4194b888b871\System.Runtime.Remoting.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38831__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38814__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38880__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38822__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38863__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38867__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38828__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38823__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38923__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38875__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38861__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38860__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38819__90ba9c70f846762e\CLI.Component.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38827__90ba9c70f846762e\CLI.Component.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38894__90ba9c70f846762e\MOM.Implementation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38892__90ba9c70f846762e\LOG.Foundation.Implementation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38813__90ba9c70f846762e\CLI.Component.SkinFactory.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38812__90ba9c70f846762e\CLI.Component.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38904__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38810__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll ()
MOD - C:\windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38811__90ba9c70f846762e\APM.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38810__90ba9c70f846762e\AEM.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38893__90ba9c70f846762e\CCC.Implementation.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll ()
MOD - C:\Program Files\TOSHIBA\TBS\NotifyTBS.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll ()
MOD - C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll ()
MOD - C:\Program Files\TOSHIBA\PCDiag\NotifyPCD.dll ()


========== Win32 Services (SafeList) ==========

SRV - (MozillaMaintenance) – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (WatAdminSvc) – C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (AVP) – C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
SRV - (TMachInfo) – C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (TOSHIBA Corporation)
SRV - (TOSHIBA eco Utility Service) – C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA Corporation)
SRV - (cfWiMAXService) – C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION)
SRV - (TPCHSrv) – C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation)
SRV - (TosCoSrv) – C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
SRV - (TOSHIBA HDD SSD Alert Service) – C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation)
SRV - (AMD External Events Utility) – C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (TODDSrv) – C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (RSELSVC) – C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe (TOSHIBA Corporation)
SRV - (GameConsoleService) – C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (AgereModemAudio) – C:\Program Files\LSI SoftModem\agrsmsvc.exe (LSI Corporation)
SRV - (ConfigFree Service) – C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
SRV - (BcmSqlStartupSvc) – C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (USBCCID) – system32\DRIVERS\RtsUCcid.sys File not found
DRV - (RtsUIR) – system32\DRIVERS\Rts516xIR.sys File not found
DRV - (RSUSBSTOR) – System32\Drivers\RtsUStor.sys File not found
DRV - (TsUsbFlt) – C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (KLIF) – C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (kl2) – C:\Windows\System32\drivers\kl2.sys (Kaspersky Lab ZAO)
DRV - (KL1) – C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (KLIM6) – C:\Windows\System32\drivers\klim6.sys (Kaspersky Lab ZAO)
DRV - (klmouflt) – C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (RTL8187Se) – C:\Windows\System32\drivers\RTL8187Se.sys (Realtek Semiconductor Corporation )
DRV - (tdcmdpst) – C:\Windows\System32\drivers\tdcmdpst.sys (TOSHIBA Corporation.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (tos_sps32) – C:\Windows\System32\drivers\tos_sps32.sys (TOSHIBA Corporation)
DRV - (AgereSoftModem) – C:\Windows\System32\drivers\AGRSM.sys (LSI Corporation)
DRV - (TVALZ) – C:\Windows\System32\drivers\TVALZ_O.SYS (TOSHIBA Corporation)
DRV - (vwifimp) – C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (LPCFilter) – C:\Windows\System32\drivers\LPCFilter.sys (COMPAL ELECTRONIC INC.)
DRV - (PGEffect) – C:\Windows\System32\drivers\PGEffect.sys (TOSHIBA Corporation)
DRV - (TVALZFL) – C:\Windows\System32\drivers\TVALZFL.sys (TOSHIBA Corporation)
DRV - (AtiPcie) AMD PCI Express (3GIO) – C:\Windows\System32\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7TSAU
IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT1320680

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1320680
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\..\URLSearchHook: {f92a9fe4-2850-4198-b9d5-279880e49b16} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…1I7TSAU_enAU388
IE - HKCU\..\SearchScopes\{9A752DB3-9D0A-4C97-BA96-D76C3D2FEF7E}: "URL" = http://websearch.ask.com/redirect?client=i…0D-0677B7D7F311
IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT1320680
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "A Free Ride Games Bar Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1320680&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:blank"
FF - prefs.js..extensions.enabledItems: [removed]:4.0.2
FF - prefs.js..extensions.enabledItems: [removed]:11.0.1.400
FF - prefs.js..extensions.enabledItems: [removed]:11.0.1.400
FF - prefs.js..extensions.enabledItems: {f92a9fe4-2850-4198-b9d5-279880e49b16}:3.6.0.10
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=SP_ss&mntrId=e6ecb9fd00000000000070f1a1848e9a&tlver=1.4.31.2&instlRef=sst&affID=100488&q="
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/05/03 17:23:12 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/12/09 21:16:38 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2010/08/18 13:41:20 | 000,000,000 | —D | M]

[2010/07/15 07:55:22 | 000,000,000 | —D | M] (No name found) – C:\Users\Denga\AppData\Roaming\Mozilla\Extensions
[2012/05/02 17:16:28 | 000,000,000 | —D | M] (No name found) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions
[2012/04/25 18:06:13 | 000,000,000 | —D | M] (A Free Ride Games Bar Community Toolbar) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\{f92a9fe4-2850-4198-b9d5-279880e49b16}
[2012/03/02 05:55:19 | 000,000,000 | —D | M] (Babylon) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\[removed]
[2012/03/14 05:43:08 | 000,000,000 | —D | M] ("Xmarks") – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\[removed]
[2012/04/05 19:50:43 | 000,000,000 | —D | M] (Ask Toolbar) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\[removed]
[2012/05/02 17:16:28 | 000,000,000 | —D | M] (No name found) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\trash
[2012/01/03 16:27:44 | 000,002,333 | —- | M] () – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\searchplugins\askcom.xml
[2012/05/03 17:26:31 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/08/18 13:42:06 | 000,000,000 | —D | M] (Anti-Banner) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2010/08/18 13:42:04 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2012/05/03 17:23:11 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/04/05 19:41:17 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/05/03 17:23:04 | 000,001,525 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2012/02/27 21:07:26 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/05/03 17:23:04 | 000,000,935 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2012/05/03 17:23:04 | 000,001,166 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2012/05/03 17:23:12 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml
[2012/05/03 17:23:04 | 000,001,121 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2009/06/11 05:39:37 | 000,000,824 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {F92A9FE4-2850-4198-B9D5-279880E49B16} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)
O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [SmartFaceVWatcher] C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatcher.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [Teco] C:\Program Files\TOSHIBA\TECO\Teco.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosNC] C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosReelTimeMonitor] C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosWaitSrv] C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TWebCamera] C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Jewel%20Quest%20Mysteries%20-%20The%20Seventh%20Gate%20Collector's%20Edition/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialo…osoft/wrc32.ocx (WRC Class)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Dream%20Inn%20-%20Driftwood/Images/armhelper.ocx (ArmHelper Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E2A94E7E-6C8D-4529-8835-B662394D565C}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EDF2AD7D-4EBF-4FF7-863E-3EC18DA707A8}: DhcpNameServer = 10.0.0.138
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mzvkbd3.dll (Kaspersky Lab ZAO)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\kloehk.dll (Kaspersky Lab ZAO)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\klogon: DllName - (C:\windows\system32\klogon.dll) - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 05:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

Drivers32: msacm.dvacm - C:\Program Files\Common Files\Ulead Systems\vio\DVACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.mpegacm - C:\Program Files\Common Files\Ulead Systems\MPEG\MPEGACM.acm (Ulead Systems, Inc.)
Drivers32: msacm.ulmp3acm - C:\Program Files\Common Files\Ulead Systems\MPEG\ulmp3acm.acm (Ulead systems)
Drivers32: MSVideo8 - C:\windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv50 - C:\windows\System32\ir50_32.dll (Intel Corporation)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/05/06 14:23:44 | 000,595,456 | —- | C] (OldTimer Tools) – C:\Users\Denga\Desktop\OTL.exe
[2012/05/06 08:19:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{7D3BA413-E4FA-4225-AA51-72D0880EF9F5}
[2012/05/06 08:19:43 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{68B73191-28A3-4808-AE67-EA30AEFF8E3F}
[2012/05/05 08:28:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A5259A30-2B9D-46DA-B76B-1C0F52291D38}
[2012/05/05 08:27:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2410DECA-07F8-430D-BCDE-868AB87F3DE9}
[2012/05/04 15:51:09 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DEA9D97A-9371-44F2-84DB-EF44C507C1D4}
[2012/05/04 15:50:51 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A1AFD265-480D-4DAE-A94E-0226EA38CE65}
[2012/05/04 05:44:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3ABC95D7-07F8-4753-867E-D1B7CC39BF71}
[2012/05/04 05:43:59 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{AFE288EF-095C-43C3-9BB6-63BFEB9947C6}
[2012/05/03 17:26:59 | 000,000,000 | —D | C] – C:\ProgramData\Mozilla
[2012/05/03 17:26:52 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Maintenance Service
[2012/05/03 16:54:31 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{CE30DE96-6711-41CF-A325-DC79DCB9E044}
[2012/05/03 16:54:13 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{764D686A-AADC-4774-A2BD-FAED085E7DA0}
[2012/05/03 05:54:08 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DADE0297-D635-4A20-B35F-BC39FBAE1543}
[2012/05/03 05:53:53 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E787E59D-BC40-4980-891B-6FCBFABF6856}
[2012/05/02 17:02:06 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2FBC31AC-ACD1-46B5-8111-EF842CBC614D}
[2012/05/02 17:01:49 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3FB2C1A8-5F44-4590-B8B4-B27796A9D1F5}
[2012/05/02 05:26:26 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{59E4C892-EC52-4C00-92D5-F7B225624BB5}
[2012/05/02 05:26:14 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C946DE55-AEEC-4012-A02B-D2E832D6F6B8}
[2012/05/01 16:13:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{08C8BB7D-0E29-4822-B8AA-E37D9061E825}
[2012/05/01 16:12:58 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3C4C3056-137F-47EA-B12B-F3E22D763340}
[2012/05/01 05:51:36 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{78553350-144A-45F0-91CD-69B908DBE18E}
[2012/05/01 05:51:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{4EA5F9DF-F5D5-4BE3-93E8-62DD8E34BA48}
[2012/04/30 16:39:09 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{013311D5-FCA3-41A8-BA17-00DCB6280DF1}
[2012/04/30 16:38:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E692596B-6435-4C6C-824D-8961DE5F10A7}
[2012/04/29 08:50:15 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{09B0AE8F-A423-444D-A7BB-0DDA13E454AE}
[2012/04/29 08:49:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{4B49B7B6-D2EA-4B9A-8BAA-E221F638EE80}
[2012/04/28 07:01:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{6BB667C1-D6C7-4CD6-82B5-FF9E8109A139}
[2012/04/28 07:00:49 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{266592E4-AEB8-485A-B3DE-3DB75E9E6D77}
[2012/04/27 16:18:45 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1730BA28-5E49-411A-B8EE-328FA634D3F4}
[2012/04/27 16:18:32 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DE1EA5DD-10A5-4E20-86AB-18BE68DC1E5C}
[2012/04/27 05:24:39 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C8AFD88A-2632-4CBE-B008-6EFB1F0391B8}
[2012/04/27 05:24:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DC3682A4-FCF0-48A8-9CAE-496BC06016A1}
[2012/04/26 18:52:35 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C4E78DEE-E815-4224-9DBF-7AE478BD78A0}
[2012/04/26 18:52:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{755F0A00-9ED5-4496-A72D-5D91EE156EDD}
[2012/04/26 05:59:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B2D4E0A8-7375-4D1C-9276-F2BFD24F2248}
[2012/04/26 05:58:44 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{0E75EDB5-6431-4539-9E4A-DA0AE4100F01}
[2012/04/25 06:44:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{F3A85FBC-7D4A-4342-953B-BCA1D5C92532}
[2012/04/25 06:44:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{10847AB6-C6E6-4492-BACC-38B8B194FFC3}
[2012/04/24 16:26:28 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3F32746D-F72F-4E52-9B8E-7553F351FD26}
[2012/04/24 16:26:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1AB77C07-BF8F-4262-A2EE-BDA9FE49AFB5}
[2012/04/24 05:41:01 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{15AFD5BD-4197-44EF-AC0B-21DE56F1547E}
[2012/04/24 05:40:25 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8DF13A70-B80E-42BB-B89C-13DCC0B938DC}
[2012/04/23 15:52:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2A69D7E8-FA97-4C4C-AD00-D350178BC7AD}
[2012/04/23 15:51:50 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{21DA24FD-0BF8-4932-9ED4-045D6F1E27D3}
[2012/04/22 17:40:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{D2FED567-41EC-46BF-AB49-02E2DEF0A2E8}
[2012/04/22 17:40:19 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8AE55C7D-D4AC-4A7E-9220-96C31B9B63B4}
[2012/04/20 06:00:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A3C8FC74-C68C-43E5-933F-3E434B007C51}
[2012/04/20 05:59:58 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{409DF24A-DCF8-4A57-803F-B0661A958BFA}
[2012/04/18 17:37:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B4EC3551-4CA9-4328-89D4-BF2741A8AA8D}
[2012/04/18 17:37:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3094E139-40DC-4163-8EB5-DCD95546243D}
[2012/04/18 14:43:51 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C4F03A4C-EAFA-49DC-9B63-BBC7D2148213}
[2012/04/18 14:43:32 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B62EF05C-4973-4E7C-89D6-4603AC06FFBD}
[2012/04/18 11:57:50 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E8ECDBF5-555D-481C-9515-8750CC02A04F}
[2012/04/18 11:57:29 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8D80D9BD-C482-47DC-A7EE-11769F5022F4}
[2012/04/17 21:27:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/04/17 21:26:03 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2012/04/17 21:26:02 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2012/04/17 17:22:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{5CB05B77-C54B-4B60-BF0F-3E6ADAA3363D}
[2012/04/17 17:21:55 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{820FBE8E-8215-4753-B09E-8B4CAF0CC3C7}
[2012/04/17 05:51:35 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{6E15E341-08BC-4283-AFF6-633E448BD640}
[2012/04/17 05:51:06 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8FA49671-7EED-4BD8-AF5A-D83DE516CE4A}
[2012/04/16 05:31:02 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A44D8195-E954-4E3D-B470-A971A40E26BF}
[2012/04/16 05:30:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{D96D5F24-F5D9-45B1-871C-49028A58C582}
[2012/04/15 06:12:36 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E59957EC-2A72-4605-98CB-03E1A8D566B4}
[2012/04/15 06:12:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3360BADB-A9DE-477F-ADBA-FA5702320C8B}
[2012/04/14 08:21:19 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{7765F57A-5829-4F9B-A422-218DD3C6C001}
[2012/04/14 08:20:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E7BA213D-A8BB-470A-AC41-FD769B46CA3F}
[2012/04/13 05:38:10 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E54E18B4-8FA9-4852-AC5E-C87AC52EDA55}
[2012/04/13 05:37:52 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{9B1D3589-DADC-4322-BBF6-6185735F5ACA}
[2012/04/12 20:19:55 | 003,968,368 | —- | C] (Microsoft Corporation) – C:\windows\System32\ntkrnlpa.exe
[2012/04/12 20:19:55 | 003,913,072 | —- | C] (Microsoft Corporation) – C:\windows\System32\ntoskrnl.exe
[2012/04/12 17:15:16 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\windows\System32\msfeeds.dll
[2012/04/12 17:15:16 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\windows\System32\ieui.dll
[2012/04/12 17:15:11 | 001,638,912 | —- | C] (Microsoft Corporation) – C:\windows\System32\mshtml.tlb
[2012/04/12 17:15:11 | 000,132,096 | —- | C] (Microsoft Corporation) – C:\windows\System32\url.dll
[2012/04/12 17:15:11 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\windows\System32\jsproxy.dll
[2012/04/12 05:41:10 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{80DDBA6A-F244-46F5-ABE3-64B7914B0565}
[2012/04/12 05:40:54 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{AD0E9592-424F-4B7F-8CFC-D63ED390DCEE}
[2012/04/11 05:40:33 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{7BC80FB7-C1E0-42EC-AA48-7D7C7742E5E1}
[2012/04/11 05:40:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{15C5B07D-CAAC-44E8-9BCB-4897C74510CB}
[2012/04/10 20:43:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{FBB2EF3D-1B35-4BCA-9988-141E551950E7}
[2012/04/10 20:43:42 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{89E3DEA0-FCDE-487C-8B37-F3519521C6D0}
[2012/04/10 08:11:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{75E2C35E-FC0E-4DBA-9FDA-E7AA4C7B4661}
[2012/04/10 08:11:29 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{55265642-A77D-4F5E-81C2-91AFD48222DF}
[2012/04/09 07:05:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{EDD48B50-93D3-49E4-A7CF-C9EF047527DA}
[2012/04/09 07:04:54 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1018C32A-E013-4521-9891-231653A49504}
[2012/04/08 06:22:23 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{CC397416-E7B3-4056-B5B6-36D60AE4F05C}
[2012/04/08 06:22:08 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{5A3F2271-3A0E-4851-A14E-13245569B9A6}
[2012/04/07 08:33:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{0BE7A798-33EE-4B8C-9355-C42DE163C4AC}
[2012/04/07 08:32:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{D72063CC-CB14-4E01-9243-3854228E4C53}

========== Files - Modified Within 30 Days ==========

[2012/05/06 16:21:21 | 000,000,830 | —- | M] () – C:\windows\tasks\Adobe Flash Player Updater.job
[2012/05/06 16:08:13 | 000,000,886 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/06 14:22:30 | 000,595,456 | —- | M] (OldTimer Tools) – C:\Users\Denga\Desktop\OTL.exe
[2012/05/06 08:24:33 | 000,016,304 | -H– | M] () – C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/05/06 08:24:33 | 000,016,304 | -H– | M] () – C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/05/06 08:15:45 | 000,000,882 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/06 08:15:34 | 000,067,584 | –S- | M] () – C:\windows\bootstat.dat
[2012/05/06 08:15:28 | 2313,965,568 | -HS- | M] () – C:\hiberfil.sys
[2012/04/17 21:27:46 | 000,001,794 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2012/04/12 20:28:22 | 000,709,658 | —- | M] () – C:\windows\System32\perfh009.dat
[2012/04/12 20:28:22 | 000,141,786 | —- | M] () – C:\windows\System32\perfc009.dat

========== Files Created - No Company Name ==========

[2012/04/17 21:27:46 | 000,001,794 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2012/01/19 06:59:38 | 000,000,088 | —- | C] () – C:\windows\Ejigman2.ini
[2012/01/19 06:53:36 | 000,000,088 | —- | C] () – C:\windows\Mbwp.ini
[2011/08/27 09:20:25 | 000,000,064 | —- | C] () – C:\windows\GPlrLanc.dat
[2010/08/18 13:41:57 | 000,115,369 | —- | C] () – C:\windows\System32\drivers\klin.dat
[2010/08/18 13:41:57 | 000,097,961 | —- | C] () – C:\windows\System32\drivers\klick.dat
[2010/05/18 05:50:52 | 000,000,000 | —- | C] () – C:\windows\NDSTray.INI
[2010/05/18 05:28:13 | 000,073,728 | —- | C] () – C:\windows\System32\RtNicProp32.dll
[2010/05/18 05:26:09 | 000,000,520 | —- | C] () – C:\windows\System32\drivers\RTEQEX1.dat
[2010/05/18 05:26:09 | 000,000,520 | —- | C] () – C:\windows\System32\drivers\RTEQEX0.dat
[2010/05/18 05:21:27 | 000,000,000 | —- | C] () – C:\windows\ativpsrm.bin
[2010/05/18 05:19:18 | 000,197,654 | —- | C] () – C:\windows\System32\atiicdxx.dat
[2010/05/18 05:16:22 | 000,045,056 | —- | C] () – C:\windows\System32\HWS_Ctrl.dll

========== LOP Check ==========

[2011/08/26 05:44:16 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Alawar
[2011/08/27 08:05:09 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Awem
[2011/08/07 12:30:20 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Babylon
[2012/02/02 15:03:37 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Cat's Eye Games
[2011/08/22 18:20:36 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Crown
[2012/01/21 05:44:19 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Flood Light Games
[2011/09/13 18:48:53 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Gold Casual Games
[2012/02/15 18:08:30 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Lazy Turtle Games
[2012/03/13 20:34:09 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Merscom
[2012/02/12 14:21:39 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Mysteryville2
[2012/02/02 08:48:46 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Shape games
[2011/08/27 20:59:45 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\SpinTop
[2012/01/26 08:52:24 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\SpinTop Games
[2012/01/18 17:35:05 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\TitanicMystery
[2010/08/15 13:35:01 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Toshiba
[2011/10/13 11:37:45 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\WildTangent
[2010/09/16 18:21:35 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Windows Live Writer
[2012/04/09 07:00:46 | 000,032,552 | —- | M] () – C:\windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2009/06/11 05:42:20 | 000,000,024 | —- | M] () – C:\autoexec.bat
[2009/07/14 09:38:58 | 000,383,562 | RHS- | M] () – C:\bootmgr
[2009/08/22 07:07:19 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK
[2009/06/11 05:42:20 | 000,000,010 | —- | M] () – C:\config.sys
[2012/05/06 08:15:28 | 2313,965,568 | -HS- | M] () – C:\hiberfil.sys
[2012/01/19 06:50:15 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2012/01/19 06:50:15 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2012/05/06 08:15:32 | 3085,287,424 | -HS- | M] () – C:\pagefile.sys

< %systemroot%\Fonts\*.com >
[2009/07/14 12:52:25 | 000,026,040 | —- | M] () – C:\windows\Fonts\GlobalMonospace.CompositeFont
[2009/07/14 12:52:25 | 000,026,489 | —- | M] () – C:\windows\Fonts\GlobalSansSerif.CompositeFont
[2009/07/14 12:52:25 | 000,029,779 | —- | M] () – C:\windows\Fonts\GlobalSerif.CompositeFont
[2009/07/14 12:52:25 | 000,043,318 | —- | M] () – C:\windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >
[2009/06/11 05:31:19 | 000,000,065 | —- | M] () – C:\windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >
[2009/07/14 09:15:35 | 000,022,528 | —- | M] (Microsoft Corporation) – C:\windows\system32\spool\prtprocs\w32x86\jnwppr.dll
[2010/11/20 20:21:36 | 000,030,208 | —- | M] (Microsoft Corporation) – C:\windows\system32\spool\prtprocs\w32x86\winprint.dll

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >
[2011/05/13 15:42:24 | 000,302,448 | —- | M] (Microsoft Corporation) – C:\windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >
[2009/07/14 12:41:57 | 000,000,174 | -HS- | M] () – C:\Program Files\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >
[2010/07/15 07:40:44 | 000,000,221 | -HS- | M] () – C:\Users\Denga\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >
[2012/05/06 14:22:30 | 000,595,456 | —- | M] (OldTimer Tools) – C:\Users\Denga\Desktop\OTL.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-05-05 09:28:36

========== Alternate Data Streams ==========

@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:C63E7DE2
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:389F7E97
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:2C91353A
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:ADE2C1A6
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:77A023CE
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:F57D2F43
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:98DFF516
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:3B5038B1

< End of report >

And here is extras.txt

OTL Extras logfile created on: 5/6/2012 2:26:24 PM - Run 1
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Users\Denga\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

2.87 Gb Total Physical Memory | 1.67 Gb Available Physical Memory | 58.04% Memory free
5.75 Gb Paging File | 4.40 Gb Available in Paging File | 76.55% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 286.42 Gb Total Space | 244.42 Gb Free Space | 85.34% Space Free | Partition Type: NTFS

Computer Name: DENGA | User Name: Denga | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – C:\windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] – C:\windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile – "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] – "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type – File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05FD955B-79A7-4DF6-A684-7F8D8EFDEC6B}" = rport=10243 | protocol=6 | dir=out | app=system |
"{08BDEA16-E042-4766-BACB-D1E50114F314}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1A270A1B-CE6D-4496-BE99-A4C3DCA08849}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{250E9612-5007-4AB7-97DA-1D51A859B409}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2D9D8685-A82B-4694-AC29-AE029B633C9E}" = rport=138 | protocol=17 | dir=out | app=system |
"{344E752A-D8F0-4F00-AF9A-6C1955AEFCCC}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{50738137-6DB4-4951-B29A-13C2D8B9DD2D}" = lport=138 | protocol=17 | dir=in | app=system |
"{56BAD922-A903-48DD-9C69-53F0F6CFF54E}" = lport=10243 | protocol=6 | dir=in | app=system |
"{57CD430C-A6DD-4769-BCE2-EB59713300CF}" = rport=137 | protocol=17 | dir=out | app=system |
"{60FF7A54-BA4D-440C-828A-18799CDCCCDE}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{618849CB-34E6-4F54-AB32-03DC569A0423}" = lport=2869 | protocol=6 | dir=in | app=system |
"{64DB4D16-81AF-4014-8B82-7C4CFB728F5C}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{650F4BA0-469A-46E2-84E6-43A338860E9A}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{73C2E517-D174-4FE5-8798-3D700D21A090}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7C479D2F-F99D-41CD-821C-01B868A0734D}" = lport=137 | protocol=17 | dir=in | app=system |
"{84EA4A52-D8A7-4D2C-93DA-40FA2619E2FA}" = lport=2869 | protocol=6 | dir=in | app=system |
"{877D913B-0E45-4660-AFE7-47BBCBF41E12}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A247B1C4-C33E-4949-BC4D-2AAA47A75DDE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{A83C0FD9-7279-4E60-9F09-7C36572BDAC2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DB76B422-4F58-4B05-8479-8495DC679372}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{E1E39FB3-88E3-4D87-BF54-101D598241D0}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{E5190282-EAEF-4FAB-836C-E8E98E421337}" = lport=445 | protocol=6 | dir=in | app=system |
"{E8CE541C-9BDF-4211-A266-4A309121B18C}" = lport=139 | protocol=6 | dir=in | app=system |
"{E9B74EEA-5265-44F1-9F92-2392BFEACAEC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{ED52C3E5-0FD3-4FEA-9BC3-45D3A64DFD84}" = rport=139 | protocol=6 | dir=out | app=system |
"{F8D7624B-ADC7-436A-845D-651B19B0BA50}" = rport=445 | protocol=6 | dir=out | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02837A3A-4F8B-434E-B502-A626EFD2B901}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{21E8D5BE-406D-4A8A-AA9C-A79BF16B8056}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{2CB7FA29-FBBF-4CC8-BD60-B7754D01E36B}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2F80B2CB-47E3-4E92-B901-44228A58C719}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3ABD130E-31CF-4831-88C9-6E17A85110F3}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{5237474A-C5AE-4AAE-AB27-F011AEC67B62}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5549A6D1-782A-4376-A855-FC427BFE7581}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{586E5A2C-E528-4E66-BDFA-33E06B14653E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5990972C-C49D-4EE4-AFD3-C1AB8BF5BDC6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5B98C747-61AC-4C90-A288-CBCAC4EC8F2A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{5DAA0CF5-1408-450E-8045-3D5B046F2853}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{6237EADF-BFF0-4FC9-9885-E8E2DEBB7717}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{7562B71A-B41D-4A07-9C1B-22953ED72DDF}" = protocol=6 | dir=out | app=system |
"{7F7DB846-F181-4303-964B-6353915FEA41}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{801FA818-21CE-4B43-985B-CF5D78CEE7BB}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{99293524-3A72-4F31-A5B6-6C56E4A01F36}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{B58C3BBA-02CC-4D03-BB58-2ED50CEAD17E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{BCE79EED-B387-47CA-B105-4C1829151B36}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BD475FA1-EC60-4186-8C03-8FE0134D0731}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{C034CBB7-65F7-42BE-8BF2-B5CA5EEE08A7}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{CA2FAB79-7D7F-4ABA-9980-DE2D6A92C02A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{D07AA234-AB41-42D1-ADE4-4BFE1EB8F083}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{DC41934C-3F46-4381-BB97-3B9782E7379D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{E7A0D6B8-D98A-44FC-A620-E1D4E7FFADEC}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{F1F4007A-4E0A-46D2-88BA-F2F8E3EEE1F7}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{008D69EB-70FF-46AB-9C75-924620DF191A}" = TOSHIBA Speech System SR Engine(U.S.) Version1.0
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0DB8F853-899A-8628-E0D7-29FB190CF848}" = Catalyst Control Center Graphics Full Existing
"{0FB630AB-7BD8-40AE-B223-60397D57C3C9}" = Realtek WLAN Driver
"{117BCF94-6A1E-6741-39F5-09444381445E}" = CCC Help Italian
"{1211D6B0-B7B5-CB9A-99A2-066473FC35CA}" = CCC Help Swedish
"{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
"{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
"{14956199-1890-C3D4-F8B8-3C0C6FD82993}" = ccc-core-static
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1D210042-41EE-4472-2219-6A900366B9A3}" = CCC Help French
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{22CADDC7-6ADD-439C-B313-8D53DC8D86ED}" = Eureka's Jigsaw Mania
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{23B8A91D-680B-462B-87AD-3D70F7341731}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}" = Microsoft SQL Server 2005 Tools Express Edition
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2ABB6396-785C-E2CB-579E-79BAF98E0527}" = Catalyst Control Center Graphics Previews Vista
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{342126B2-10D5-409E-884B-245347A497E1}" = TOSHIBA Bulletin Board
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{38C6F1F2-42E9-4544-BAFC-E9C48B1BA246}" = 3D Landscape for Everyone
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E1B8E31-9692-207B-77B7-A8339AF03795}" = Catalyst Control Center Graphics Full New
"{3FBF6F99-8EC6-41B4-8527-0A32241B5496}" = TOSHIBA Speech System TTS Engine(U.S.) Version1.0
"{42451051-52B5-4D74-920A-BB49861D7253}" = TOSHIBA ReelTime
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{50F68032-B5B7-4513-9116-C978DBD8F27A}" = DVD MovieFactory for TOSHIBA
"{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password
"{51C77E17-3337-6409-16A9-A90CA8B9BBF6}" = ccc-utility
"{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"{53536479-DFB0-47ED-9D10-43F3708C222D}" = TOSHIBA eco Utility
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{58630658-9DF7-E873-9F5D-0EAF87D25DAA}" = CCC Help Norwegian
"{594A3C2C-19B3-E02E-359C-B8D134F6B939}" = CCC Help Korean
"{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
"{5E6F6CF3-BACC-4144-868C-E14622C658F3}" = TOSHIBA Web Camera Application
"{6055830B-40E4-C794-3F04-2D0CD8AF1AAC}" = CCC Help Russian
"{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
"{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
"{6DEF11C0-35FF-4160-A543-FDD336C4DAE5}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
"{6E932CA6-FD17-7694-FD7C-14CE25770EA5}" = Catalyst Control Center Graphics Previews Common
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{739A6E9D-5D7D-8A5D-EC8A-4BD11E5749AA}" = CCC Help Hungarian
"{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7B15D70E-9449-4CFB-B9BC-798465B2BD5C}" = Norton Internet Security
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{884C2DC2-4D20-4F34-8088-01FD4CEBABBF}" = NavDesk 2008
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{89F7D66C-777D-473B-AA11-319C0F190EAC}" = TOSHIBA Internal Modem Region Select Utility
"{8C72927B-7410-131A-E641-B9C505F4973C}" = CCC Help Japanese
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.SingleImage_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.SingleImage_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.SingleImage_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.SingleImage_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90A40409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{911AB6CA-E04C-1E98-523D-8FCFAB4F456C}" = CCC Help Czech
"{9216C6A7-694A-4437-BD00-BD1CF58E1839}" = CCC Help Spanish
"{92DE68CE-BC3E-7323-EA53-99490C8BD34D}" = Catalyst Control Center Graphics Light
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9668AE11-E05C-8169-F6D8-FBF7B507D7DB}" = CCC Help German
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{979587FD-F264-3C71-B0BE-6FC8DA993790}" = CCC Help Thai
"{999307CD-D57D-8C98-27ED-07F384ACFAA1}" = CCC Help Turkish
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}" = TOSHIBA PC Health Monitor
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A7594D38-0B7E-BCF7-A938-1AC03A6477FB}" = CCC Help English
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AC6569FA-6919-442A-8552-073BE69E247A}" = TOSHIBA Service Station
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1
"{AC7BE07B-14D3-6EB5-814A-EB0A63CBFB47}" = CCC Help Polish
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B1CDB3C6-8DD8-4864-8589-BDFBDA033941}" = CCC Help Chinese Traditional
"{B32C4059-6E7A-41EF-AD20-56DF1872B923}" = Business Contact Manager for Outlook 2007 SP2
"{B4BB4CF2-F475-FB20-7AFA-F8AED032BFF8}" = ATI Catalyst Install Manager
"{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Media Creator
"{BDABF8CD-7436-EC6C-DD82-439225E22557}" = CCC Help Finnish
"{C5A15C68-0DF3-8A13-352E-E605491D7E3D}" = Catalyst Control Center InstallProxy
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFAE78A9-A7A4-537E-7CC0-5A794FFBF73F}" = Catalyst Control Center Core Implementation
"{D19A1978-2FB2-B39A-5D30-C1EA38F788DD}" = CCC Help Danish
"{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D8634D93-03DD-01F1-AC7D-EE468AA24F45}" = CCC Help Dutch
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E151E679-4EC8-36F9-A691-C7600688A1CA}" = CCC Help Chinese Standard
"{E3D63B95-4B21-414A-A2C7-D6D6A6AC6D79}" = Catalyst Control Center - Branding
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E7084B89-69E0-46B3-A118-8F99D06988CD}" = Microsoft SQL Server VSS Writer
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{EBC6193C-ED23-E332-9A9C-D5CB83CDDE2B}" = Catalyst Control Center Localization All
"{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
"{EE033C1F-443E-41EC-A0E2-559B539A4E4D}" = TOSHIBA Speech System Applications
"{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}" = Apple Mobile Device Support
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2004B8D-7791-4B35-A3FA-D8CA8BB4DD81}" = Direct DiscRecorder
"{F3529665-D75E-4D6D-98F0-745C78C68E9B}" = TOSHIBA ConfigFree
"{F4195CD3-A0B9-445D-BAA9-CE7EFE093FEE}" = Mind Bending Word Puzzles
"{F544CA20-6810-E275-D288-F0D92CFADE4A}" = CCC Help Greek
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"{FEED29DD-7BF3-582C-3353-1F2634C2323D}" = CCC Help Portuguese
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Advanced Diary_is1" = Advanced Diary v2.1
"Bejeweled 2 Deluxe 1.1" = Bejeweled 2 Deluxe 1.1
"Business Contact Manager" = Business Contact Manager for Outlook 2007 SP2
"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition
"InstallShield_{342126B2-10D5-409E-884B-245347A497E1}" = TOSHIBA Bulletin Board
"InstallShield_{42451051-52B5-4D74-920A-BB49861D7253}" = TOSHIBA ReelTime
"InstallShield_{50F68032-B5B7-4513-9116-C978DBD8F27A}" = DVD MovieFactory for TOSHIBA
"InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password
"InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
"InstallShield_{53536479-DFB0-47ED-9D10-43F3708C222D}" = TOSHIBA eco Utility
"InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
"InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
"InstallShield_{89F7D66C-777D-473B-AA11-319C0F190EAC}" = TOSHIBA Internal Modem Region Select Utility
"InstallShield_{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition
"InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}" = TOSHIBA HDD/SSD Alert
"InstallShield_{F2004B8D-7791-4B35-A3FA-D8CA8BB4DD81}" = Direct DiscRecorder
"InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
"InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}" = Kaspersky Internet Security 2011
"LTMOH" = LSI V92 MOH Application
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox 12.0 (x86 en-GB)" = Mozilla Firefox 12.0 (x86 en-GB)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Mysterious City: Cairo" = Mysterious City: Cairo (remove only)
"Mysteryville" = Mysteryville (remove only)
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"The Mysterious City: Golden Prague" = The Mysterious City: Golden Prague (remove only)
"TOSHIBA Software Modem" = TOSHIBA Software Modem
"Totalcmd" = Total Commander (Remove or Repair)
"WildTangent toshiba Master Uninstall" = WildTangent Games
"WinLiveSuite" = Windows Live Essentials

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Ask Toolbar Updater
"Bingo Cafe" = Bingo Cafe

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 5/15/2011 8:34:07 AM | Computer Name = Denga | Source = VSS | ID = 13
Description =

Error - 5/15/2011 8:34:07 AM | Computer Name = Denga | Source = VSS | ID = 8193
Description =

Error - 5/17/2011 4:46:37 AM | Computer Name = Denga | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

Error - 5/22/2011 7:00:01 AM | Computer Name = Denga | Source = Windows Backup | ID = 4103
Description =

Error - 5/22/2011 7:03:09 AM | Computer Name = Denga | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

Error - 5/22/2011 6:15:55 PM | Computer Name = Denga | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

Error - 5/24/2011 12:30:50 AM | Computer Name = Denga | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

Error - 5/26/2011 7:06:24 AM | Computer Name = Denga | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

Error - 5/31/2011 7:16:47 AM | Computer Name = Denga | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

Error - 6/4/2011 2:51:01 AM | Computer Name = Denga | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

[ Media Center Events ]
Error - 5/2/2011 1:22:50 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 1:22:50 PM - Error connecting to the internet. 1:22:50 PM - Unable
to contact server..

Error - 5/2/2011 1:23:01 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 1:22:55 PM - Error connecting to the internet. 1:22:55 PM - Unable
to contact server..

Error - 5/2/2011 2:23:06 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 2:23:06 PM - Error connecting to the internet. 2:23:06 PM - Unable
to contact server..

Error - 5/2/2011 2:23:12 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 2:23:11 PM - Error connecting to the internet. 2:23:11 PM - Unable
to contact server..

Error - 5/2/2011 3:23:17 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 3:23:17 PM - Error connecting to the internet. 3:23:17 PM - Unable
to contact server..

Error - 5/2/2011 3:23:24 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 3:23:22 PM - Error connecting to the internet. 3:23:22 PM - Unable
to contact server..

Error - 5/5/2011 5:27:18 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 5:27:18 PM - Error connecting to the internet. 5:27:18 PM - Unable
to contact server..

Error - 5/5/2011 5:27:33 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 5:27:23 PM - Error connecting to the internet. 5:27:23 PM - Unable
to contact server..

Error - 5/15/2011 1:01:11 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 1:01:11 PM - Error connecting to the internet. 1:01:11 PM - Unable
to contact server..

Error - 5/15/2011 1:01:24 AM | Computer Name = Denga | Source = MCUpdate | ID = 0
Description = 1:01:17 PM - Error connecting to the internet. 1:01:17 PM - Unable
to contact server..

[ System Events ]
Error - 5/3/2012 7:28:29 PM | Computer Name = Denga | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office PowerPoint 2007 (KB2596764).

Error - 5/4/2012 3:45:27 AM | Computer Name = Denga | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 5/4/2012 3:45:27 AM | Computer Name = Denga | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 5/4/2012 3:48:28 AM | Computer Name = Denga | Source = WMPNetworkSvc | ID = 866300
Description =

Error - 5/4/2012 10:04:30 AM | Computer Name = Denga | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office PowerPoint 2007 (KB2596764).

Error - 5/4/2012 8:21:14 PM | Computer Name = Denga | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 5/4/2012 8:21:14 PM | Computer Name = Denga | Source = atikmdag | ID = 43029
Description = Display is not active

Error - 5/5/2012 5:28:36 AM | Computer Name = Denga | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installation Failure: Windows failed to install the following update
with error 0x80070643: Security Update for Microsoft Office PowerPoint 2007 (KB2596764).

Error - 5/5/2012 8:15:34 PM | Computer Name = Denga | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter

Error - 5/5/2012 8:15:34 PM | Computer Name = Denga | Source = atikmdag | ID = 43029
Description = Display is not active


< End of report >

Hi,

Please download TDSSKiller

• Right-click and Run as Administrator TDSSKiller.exe
• Press Change Parameters
• Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
• Click on the Start Scan button
  
  • Only if Malicious objects are found then ensure Cure is selected
  • Then click Continue > Reboot now
  • Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
• Copy and paste the log in your next reply
  
  • A report will be created in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste its contents on your next reply.

———-

Please download and run ERUNT (Emergency Recovery Utility NT). This program allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed. **Remember if you are using Windows Vista as your operating system right-click the executable and Run as Administrator.
———-

Run OTL.exe

• Copy/paste the following text written inside of the code box into the Custom Scans/Fixes box located at the bottom of OTL
  
  

  :Services
  
  :OTL
  PRC - C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
  IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
  IE - HKLM\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT1320680
  IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT1320680
  IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
  IE - HKCU\..\URLSearchHook: {f92a9fe4-2850-4198-b9d5-279880e49b16} - No CLSID value found
  IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
  IE - HKCU\..\SearchScopes\{9A752DB3-9D0A-4C97-BA96-D76C3D2FEF7E}: "URL" = http://websearch.ask.com/redirect?client=i…0D-0677B7D7F311
  IE - HKCU\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?…;ctid=CT1320680
  FF - prefs.js..browser.search.defaultengine: "Ask.com"
  FF - prefs.js..browser.search.defaultenginename: "Ask.com"
  FF - prefs.js..browser.search.defaultthis.engineName: "A Free Ride Games Bar Customized Web Search"
  FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1320680&SearchSource=3&q={searchTerms}"
  FF - prefs.js..browser.search.order.1: "Ask.com"
  FF - prefs.js..extensions.enabledItems: {f92a9fe4-2850-4198-b9d5-279880e49b16}:3.6.0.10
  FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=SP_ss&mntrId=e6ecb9fd00000000000070f1a1848e9a&tlver=1.4.31.2&instlRef=sst&affID=100488&q="
  [2012/04/25 18:06:13 | 000,000,000 | —D | M] (A Free Ride Games Bar Community Toolbar) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\{f92a9fe4-2850-4198-b9d5-279880e49b16}
  [2012/03/02 05:55:19 | 000,000,000 | —D | M] (Babylon) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\[removed]
  [2012/04/05 19:50:43 | 000,000,000 | —D | M] (Ask Toolbar) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\[removed]
  [2012/01/03 16:27:44 | 000,002,333 | —- | M] () – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\searchplugins\askcom.xml
  O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
  O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
  O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
  O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {F92A9FE4-2850-4198-B9D5-279880E49B16} - No CLSID value found.
  O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
  [2011/08/07 12:30:20 | 000,000,000 | —D | M] – C:\Users\Denga\AppData\Roaming\Babylon
  
  :Commands
  [purity]
  [start explorer]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot when it is done
• Then run a new scan and post a new OTL log ( don't check the boxes beside LOP Check or Purity this time )

———-

In your next reply please post the log made by TDSSKiller and the logs made by OTL.

Have done all you asked so far. Here is the TDSSKiller.txt file 18:51:31.0956 4308 TDSS rootkit removing tool 2.7.34.0 May 2 2012 09:59:18 18:51:33.0469 4308 ============================================================ 18:51:33.0469 4308 Current date / time: 2012/05/07 18:51:33.0469 18:51:33.0469 4308 SystemInfo: 18:51:33.0469 4308 18:51:33.0469 4308 OS Version: 6.1.7601 ServicePack: 1.0 18:51:33.0469 4308 Product type: Workstation 18:51:33.0469 4308 ComputerName: DENGA 18:51:33.0485 4308 UserName: Denga 18:51:33.0485 4308 Windows directory: C:\windows 18:51:33.0485 4308 System windows directory: C:\windows 18:51:33.0485 4308 Processor architecture: Intel x86 18:51:33.0485 4308 Number of processors: 2 18:51:33.0485 4308 Page size: 0x1000 18:51:33.0485 4308 Boot type: Normal boot 18:51:33.0485 4308 ============================================================ 18:51:43.0797 4308 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050 18:51:43.0812 4308 ============================================================ 18:51:43.0812 4308 \Device\Harddisk0\DR0: 18:51:43.0812 4308 MBR partitions: 18:51:43.0812 4308 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x2EE800, BlocksNum 0x23CD6000 18:51:43.0812 4308 ============================================================ 18:51:43.0844 4308 C: <-> \Device\Harddisk0\DR0\Partition0 18:51:43.0844 4308 ============================================================ 18:51:43.0844 4308 Initialize success 18:51:43.0844 4308 ============================================================ 18:52:30.0831 0192 ============================================================ 18:52:30.0831 0192 Scan started 18:52:30.0831 0192 Mode: Manual; SigCheck; TDLFS; 18:52:30.0831 0192 ============================================================ 18:52:33.0264 0192 1394ohci (1b133875b8aa8ac48969bd3458afe9f5) C:\windows\system32\drivers\1394ohci.sys 18:52:34.0216 0192 1394ohci - ok 18:52:34.0497 0192 ACPI (cea80c80bed809aa0da6febc04733349) C:\windows\system32\drivers\ACPI.sys 18:52:34.0622 0192 ACPI - ok 18:52:34.0653 0192 AcpiPmi (1efbc664abff416d1d07db115dcb264f) C:\windows\system32\drivers\acpipmi.sys 18:52:34.0871 0192 AcpiPmi - ok 18:52:34.0996 0192 AdobeFlashPlayerUpdateSvc (0d4c486a24a711a45fd83acdf4d18506) C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe 18:52:35.0043 0192 AdobeFlashPlayerUpdateSvc - ok 18:52:35.0136 0192 adp94xx (21e785ebd7dc90a06391141aac7892fb) C:\windows\system32\DRIVERS\adp94xx.sys 18:52:35.0199 0192 adp94xx - ok 18:52:35.0230 0192 adpahci (0c676bc278d5b59ff5abd57bbe9123f2) C:\windows\system32\DRIVERS\adpahci.sys 18:52:35.0308 0192 adpahci - ok 18:52:35.0324 0192 adpu320 (7c7b5ee4b7b822ec85321fe23a27db33) C:\windows\system32\DRIVERS\adpu320.sys 18:52:35.0386 0192 adpu320 - ok 18:52:35.0433 0192 AeLookupSvc (8b5eefeec1e6d1a72a06c526628ad161) C:\windows\System32\aelupsvc.dll 18:52:35.0511 0192 AeLookupSvc - ok 18:52:35.0589 0192 AFD (9ebbba55060f786f0fcaa3893bfa2806) C:\windows\system32\drivers\afd.sys 18:52:35.0901 0192 AFD - ok 18:52:35.0979 0192 AgereModemAudio (6416f9b6b220f0a890525c38235afad7) C:\Program Files\LSI SoftModem\agrsmsvc.exe 18:52:36.0166 0192 AgereModemAudio - ok 18:52:36.0291 0192 AgereSoftModem (07758c2196a62f207f77556311e7459a) C:\windows\system32\DRIVERS\AGRSM.sys 18:52:36.0494 0192 AgereSoftModem - ok 18:52:36.0556 0192 agp440 (507812c3054c21cef746b6ee3d04dd6e) C:\windows\system32\drivers\agp440.sys 18:52:36.0774 0192 agp440 - ok 18:52:36.0821 0192 aic78xx (8b30250d573a8f6b4bd23195160d8707) C:\windows\system32\DRIVERS\djsvs.sys 18:52:36.0915 0192 aic78xx - ok 18:52:36.0977 0192 ALG (18a54e132947cd98fea9accc57f98f13) C:\windows\System32\alg.exe 18:52:37.0227 0192 ALG - ok 18:52:37.0242 0192 aliide (0d40bcf52ea90fc7df2aeab6503dea44) C:\windows\system32\drivers\aliide.sys 18:52:37.0430 0192 aliide - ok 18:52:37.0476 0192 AMD External Events Utility (0bc6704f6fb4c63cdcb85401e8263a1b) C:\windows\system32\atiesrxx.exe 18:52:37.0726 0192 AMD External Events Utility - ok 18:52:37.0742 0192 amdagp (3c6600a0696e90a463771c7422e23ab5) C:\windows\system32\drivers\amdagp.sys 18:52:37.0976 0192 amdagp - ok 18:52:38.0069 0192 amdide (cd5914170297126b6266860198d1d4f0) C:\windows\system32\drivers\amdide.sys 18:52:38.0350 0192 amdide - ok 18:52:38.0366 0192 AmdK8 (00dda200d71bac534bf56a9db5dfd666) C:\windows\system32\DRIVERS\amdk8.sys 18:52:38.0459 0192 AmdK8 - ok 18:52:38.0490 0192 AmdPPM (3cbf30f5370fda40dd3e87df38ea53b6) C:\windows\system32\DRIVERS\amdppm.sys 18:52:38.0584 0192 AmdPPM - ok 18:52:38.0631 0192 amdsata (d320bf87125326f996d4904fe24300fc) C:\windows\system32\drivers\amdsata.sys 18:52:38.0693 0192 amdsata - ok 18:52:38.0740 0192 amdsbs (ea43af0c423ff267355f74e7a53bdaba) C:\windows\system32\DRIVERS\amdsbs.sys 18:52:38.0787 0192 amdsbs - ok 18:52:38.0802 0192 amdxata (46387fb17b086d16dea267d5be23a2f2) C:\windows\system32\drivers\amdxata.sys 18:52:39.0021 0192 amdxata - ok 18:52:39.0068 0192 AppID (aea177f783e20150ace5383ee368da19) C:\windows\system32\drivers\appid.sys 18:52:39.0192 0192 AppID - ok 18:52:39.0239 0192 AppIDSvc (62a9c86cb6085e20db4823e4e97826f5) C:\windows\System32\appidsvc.dll 18:52:39.0380 0192 AppIDSvc - ok 18:52:39.0442 0192 Appinfo (fb1959012294d6ad43e5304df65e3c26) C:\windows\System32\appinfo.dll 18:52:39.0598 0192 Appinfo - ok 18:52:39.0723 0192 Apple Mobile Device (7ef47644b74ebe721cc32211d3c35e76) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe 18:52:39.0863 0192 Apple Mobile Device - ok 18:52:39.0926 0192 arc (2932004f49677bd84dbc72edb754ffb3) C:\windows\system32\DRIVERS\arc.sys 18:52:40.0004 0192 arc - ok 18:52:40.0019 0192 arcsas (5d6f36c46fd283ae1b57bd2e9feb0bc7) C:\windows\system32\DRIVERS\arcsas.sys 18:52:40.0113 0192 arcsas - ok 18:52:40.0128 0192 AsyncMac (add2ade1c2b285ab8378d2daaf991481) C:\windows\system32\DRIVERS\asyncmac.sys 18:52:40.0284 0192 AsyncMac - ok 18:52:40.0316 0192 atapi (338c86357871c167a96ab976519bf59e) C:\windows\system32\drivers\atapi.sys 18:52:41.0080 0192 atapi - ok 18:52:41.0610 0192 atikmdag (c97be8350fbcb1960b22fad2e6c2b514) C:\windows\system32\DRIVERS\atikmdag.sys 18:52:41.0985 0192 atikmdag - ok 18:52:42.0141 0192 AtiPcie (b73c832088dd54b55e04ff6f9646ad8c) C:\windows\system32\DRIVERS\AtiPcie.sys 18:52:42.0437 0192 AtiPcie - ok 18:52:42.0546 0192 AudioEndpointBuilder (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll 18:52:42.0640 0192 AudioEndpointBuilder - ok 18:52:42.0656 0192 Audiosrv (ce3b4e731638d2ef62fcb419be0d39f0) C:\windows\System32\Audiosrv.dll 18:52:42.0765 0192 Audiosrv - ok 18:52:42.0890 0192 AVP (946d70667b0119f2beeae0849e1d46a2) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe 18:52:42.0952 0192 AVP - ok 18:52:42.0999 0192 AxInstSV (6e30d02aac9cac84f421622e3a2f6178) C:\windows\System32\AxInstSV.dll 18:52:43.0170 0192 AxInstSV - ok 18:52:43.0248 0192 b06bdrv (1a231abec60fd316ec54c66715543cec) C:\windows\system32\DRIVERS\bxvbdx.sys 18:52:43.0373 0192 b06bdrv - ok 18:52:43.0420 0192 b57nd60x (bd8869eb9cde6bbe4508d869929869ee) C:\windows\system32\DRIVERS\b57nd60x.sys 18:52:43.0498 0192 b57nd60x - ok 18:52:43.0576 0192 BcmSqlStartupSvc (6163664c7e9cd110af70180c126c3fdc) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe 18:52:43.0623 0192 BcmSqlStartupSvc - ok 18:52:43.0670 0192 BDESVC (ee1e9c3bb8228ae423dd38db69128e71) C:\windows\System32\bdesvc.dll 18:52:43.0857 0192 BDESVC - ok 18:52:43.0888 0192 Beep (505506526a9d467307b3c393dedaf858) C:\windows\system32\drivers\Beep.sys 18:52:44.0028 0192 Beep - ok 18:52:44.0122 0192 BFE (1e2bac209d184bb851e1a187d8a29136) C:\windows\System32\bfe.dll 18:52:44.0231 0192 BFE - ok 18:52:44.0325 0192 BITS (e585445d5021971fae10393f0f1c3961) C:\windows\System32\qmgr.dll 18:52:44.0434 0192 BITS - ok 18:52:44.0465 0192 blbdrive (2287078ed48fcfc477b05b20cf38f36f) C:\windows\system32\DRIVERS\blbdrive.sys 18:52:44.0543 0192 blbdrive - ok 18:52:44.0855 0192 Bonjour Service (db5bea73edaf19ac68b2c0fad0f92b1a) C:\Program Files\Bonjour\mDNSResponder.exe 18:52:44.0933 0192 Bonjour Service - ok 18:52:44.0964 0192 bowser (8f2da3028d5fcbd1a060a3de64cd6506) C:\windows\system32\DRIVERS\bowser.sys 18:52:45.0120 0192 bowser - ok 18:52:45.0152 0192 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\windows\system32\DRIVERS\BrFiltLo.sys 18:52:45.0276 0192 BrFiltLo - ok 18:52:45.0292 0192 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\windows\system32\DRIVERS\BrFiltUp.sys 18:52:45.0386 0192 BrFiltUp - ok 18:52:45.0432 0192 Browser (6e11f33d14d020f58d5e02e4d67dfa19) C:\windows\System32\browser.dll 18:52:45.0542 0192 Browser - ok 18:52:45.0588 0192 Brserid (845b8ce732e67f3b4133164868c666ea) C:\windows\System32\Drivers\Brserid.sys 18:52:45.0666 0192 Brserid - ok 18:52:45.0682 0192 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\windows\System32\Drivers\BrSerWdm.sys 18:52:45.0791 0192 BrSerWdm - ok 18:52:45.0807 0192 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\windows\System32\Drivers\BrUsbMdm.sys 18:52:45.0885 0192 BrUsbMdm - ok 18:52:45.0900 0192 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\windows\System32\Drivers\BrUsbSer.sys 18:52:45.0994 0192 BrUsbSer - ok 18:52:46.0010 0192 BTHMODEM (ed3df7c56ce0084eb2034432fc56565a) C:\windows\system32\DRIVERS\bthmodem.sys 18:52:46.0088 0192 BTHMODEM - ok 18:52:46.0119 0192 bthserv (1df19c96eef6c29d1c3e1a8678e07190) C:\windows\system32\bthserv.dll 18:52:46.0306 0192 bthserv - ok 18:52:46.0337 0192 cdfs (77ea11b065e0a8ab902d78145ca51e10) C:\windows\system32\DRIVERS\cdfs.sys 18:52:46.0634 0192 cdfs - ok 18:52:46.0680 0192 cdrom (be167ed0fdb9c1fa1133953c18d5a6c9) C:\windows\system32\drivers\cdrom.sys 18:52:46.0899 0192 cdrom - ok 18:52:46.0946 0192 CertPropSvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll 18:52:47.0211 0192 CertPropSvc - ok 18:52:47.0336 0192 cfWiMAXService (1f8a319d29394f9ce1b7ae020df2ebbf) C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe 18:52:47.0492 0192 cfWiMAXService - ok 18:52:47.0523 0192 circlass (3fe3fe94a34df6fb06e6418d0f6a0060) C:\windows\system32\DRIVERS\circlass.sys 18:52:47.0632 0192 circlass - ok 18:52:47.0679 0192 CLFS (635181e0e9bbf16871bf5380d71db02d) C:\windows\system32\CLFS.sys 18:52:47.0710 0192 CLFS - ok 18:52:47.0788 0192 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 18:52:47.0850 0192 clr_optimization_v2.0.50727_32 - ok 18:52:47.0960 0192 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe 18:52:47.0991 0192 clr_optimization_v4.0.30319_32 - ok 18:52:48.0006 0192 CmBatt (dea805815e587dad1dd2c502220b5616) C:\windows\system32\DRIVERS\CmBatt.sys 18:52:48.0131 0192 CmBatt - ok 18:52:48.0147 0192 cmdide (c537b1db64d495b9b4717b4d6d9edbf2) C:\windows\system32\drivers\cmdide.sys 18:52:48.0334 0192 cmdide - ok 18:52:48.0396 0192 CNG (6427525d76f61d0c519b008d3680e8e7) C:\windows\system32\Drivers\cng.sys 18:52:48.0490 0192 CNG - ok 18:52:48.0521 0192 Compbatt (a6023d3823c37043986713f118a89bee) C:\windows\system32\DRIVERS\compbatt.sys 18:52:48.0537 0192 Compbatt - ok 18:52:48.0584 0192 CompositeBus (cbe8c58a8579cfe5fccf809e6f114e89) C:\windows\system32\drivers\CompositeBus.sys 18:52:48.0755 0192 CompositeBus - ok 18:52:48.0771 0192 COMSysApp - ok 18:52:48.0896 0192 ConfigFree Service (cab0eeaf5295fc96ddd3e19dce27e131) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe 18:52:49.0098 0192 ConfigFree Service - ok 18:52:49.0114 0192 crcdisk (2c4ebcfc84a9b44f209dff6c6e6c61d1) C:\windows\system32\DRIVERS\crcdisk.sys 18:52:49.0192 0192 crcdisk - ok 18:52:49.0239 0192 CryptSvc (a585bebf7d054bd9618eda0922d5484a) C:\windows\system32\cryptsvc.dll 18:52:49.0410 0192 CryptSvc - ok 18:52:49.0504 0192 DcomLaunch (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll 18:52:49.0676 0192 DcomLaunch - ok 18:52:49.0722 0192 defragsvc (8d6e10a2d9a5eed59562d9b82cf804e1) C:\windows\System32\defragsvc.dll 18:52:49.0847 0192 defragsvc - ok 18:52:49.0956 0192 DfsC (f024449c97ec1e464aaffda18593db88) C:\windows\system32\Drivers\dfsc.sys 18:52:50.0112 0192 DfsC - ok 18:52:50.0175 0192 Dhcp (e9e01eb683c132f7fa27cd607b8a2b63) C:\windows\system32\dhcpcore.dll 18:52:50.0315 0192 Dhcp - ok 18:52:50.0346 0192 discache (1a050b0274bfb3890703d490f330c0da) C:\windows\system32\drivers\discache.sys 18:52:50.0424 0192 discache - ok 18:52:50.0471 0192 Disk (565003f326f99802e68ca78f2a68e9ff) C:\windows\system32\DRIVERS\disk.sys 18:52:50.0487 0192 Disk - ok 18:52:50.0534 0192 Dnscache (33ef4861f19a0736b11314aad9ae28d0) C:\windows\System32\dnsrslvr.dll 18:52:50.0674 0192 Dnscache - ok 18:52:50.0721 0192 dot3svc (366ba8fb4b7bb7435e3b9eacb3843f67) C:\windows\System32\dot3svc.dll 18:52:50.0830 0192 dot3svc - ok 18:52:50.0861 0192 DPS (8ec04ca86f1d68da9e11952eb85973d6) C:\windows\system32\dps.dll 18:52:51.0033 0192 DPS - ok 18:52:51.0080 0192 drmkaud (b918e7c5f9bf77202f89e1a9539f2eb4) C:\windows\system32\drivers\drmkaud.sys 18:52:51.0158 0192 drmkaud - ok 18:52:51.0251 0192 DXGKrnl (23f5d28378a160352ba8f817bd8c71cb) C:\windows\System32\drivers\dxgkrnl.sys 18:52:51.0298 0192 DXGKrnl - ok 18:52:51.0345 0192 EapHost (8600142fa91c1b96367d3300ad0f3f3a) C:\windows\System32\eapsvc.dll 18:52:51.0423 0192 EapHost - ok 18:52:51.0704 0192 ebdrv (024e1b5cac09731e4d868e64dbfb4ab0) C:\windows\system32\DRIVERS\evbdx.sys 18:52:51.0844 0192 ebdrv - ok 18:52:51.0969 0192 EFS (81951f51e318aecc2d68559e47485cc4) C:\windows\System32\lsass.exe 18:52:52.0109 0192 EFS - ok 18:52:52.0203 0192 ehRecvr (a8c362018efc87beb013ee28f29c0863) C:\windows\ehome\ehRecvr.exe 18:52:52.0499 0192 ehRecvr - ok 18:52:52.0546 0192 ehSched (d389bff34f80caede417bf9d1507996a) C:\windows\ehome\ehsched.exe 18:52:52.0749 0192 ehSched - ok 18:52:52.0827 0192 elxstor (0ed67910c8c326796faa00b2bf6d9d3c) C:\windows\system32\DRIVERS\elxstor.sys 18:52:52.0967 0192 elxstor - ok 18:52:52.0998 0192 ErrDev (8fc3208352dd3912c94367a206ab3f11) C:\windows\system32\drivers\errdev.sys 18:52:53.0482 0192 ErrDev - ok 18:52:53.0544 0192 EventSystem (f6916efc29d9953d5d0df06882ae8e16) C:\windows\system32\es.dll 18:52:53.0747 0192 EventSystem - ok 18:52:53.0778 0192 exfat (2dc9108d74081149cc8b651d3a26207f) C:\windows\system32\drivers\exfat.sys 18:52:53.0856 0192 exfat - ok 18:52:53.0888 0192 fastfat (7e0ab74553476622fb6ae36f73d97d35) C:\windows\system32\drivers\fastfat.sys 18:52:53.0981 0192 fastfat - ok 18:52:54.0059 0192 Fax (967ea5b213e9984cbe270205df37755b) C:\windows\system32\fxssvc.exe 18:52:54.0293 0192 Fax - ok 18:52:54.0293 0192 fdc (e817a017f82df2a1f8cfdbda29388b29) C:\windows\system32\DRIVERS\fdc.sys 18:52:54.0356 0192 fdc - ok 18:52:54.0371 0192 fdPHost (f3222c893bd2f5821a0179e5c71e88fb) C:\windows\system32\fdPHost.dll 18:52:54.0527 0192 fdPHost - ok 18:52:54.0543 0192 FDResPub (7dbe8cbfe79efbdeb98c9fb08d3a9a5b) C:\windows\system32\fdrespub.dll 18:52:54.0683 0192 FDResPub - ok 18:52:54.0699 0192 FileInfo (6cf00369c97f3cf563be99be983d13d8) C:\windows\system32\drivers\fileinfo.sys 18:52:54.0730 0192 FileInfo - ok 18:52:54.0746 0192 Filetrace (42c51dc94c91da21cb9196eb64c45db9) C:\windows\system32\drivers\filetrace.sys 18:52:54.0839 0192 Filetrace - ok 18:52:54.0870 0192 flpydisk (87907aa70cb3c56600f1c2fb8841579b) C:\windows\system32\DRIVERS\flpydisk.sys 18:52:54.0980 0192 flpydisk - ok 18:52:55.0011 0192 FltMgr (7520ec808e0c35e0ee6f841294316653) C:\windows\system32\drivers\fltmgr.sys 18:52:55.0026 0192 FltMgr - ok 18:52:55.0136 0192 FontCache (b3a5ec6b6b6673db7e87c2bcdbddc074) C:\windows\system32\FntCache.dll 18:52:55.0916 0192 FontCache - ok 18:52:56.0009 0192 FontCache3.0.0.0 (e56f39f6b7fda0ac77a79b0fd3de1a2f) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 18:52:56.0103 0192 FontCache3.0.0.0 - ok 18:52:56.0103 0192 FsDepends (1a16b57943853e598cff37fe2b8cbf1d) C:\windows\system32\drivers\FsDepends.sys 18:52:56.0212 0192 FsDepends - ok 18:52:56.0243 0192 Fs_Rec (7dae5ebcc80e45d3253f4923dc424d05) C:\windows\system32\drivers\Fs_Rec.sys 18:52:56.0368 0192 Fs_Rec - ok 18:52:56.0430 0192 fvevol (8a73e79089b282100b9393b644cb853b) C:\windows\system32\DRIVERS\fvevol.sys 18:52:56.0477 0192 fvevol - ok 18:52:56.0524 0192 gagp30kx (65ee0c7a58b65e74ae05637418153938) C:\windows\system32\DRIVERS\gagp30kx.sys 18:52:56.0586 0192 gagp30kx - ok 18:52:56.0680 0192 GameConsoleService (c44d560e441f091ea3b72f778ec60de2) C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe 18:52:56.0774 0192 GameConsoleService - ok 18:52:56.0820 0192 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\windows\system32\DRIVERS\GEARAspiWDM.sys 18:52:56.0961 0192 GEARAspiWDM - ok 18:52:57.0039 0192 gpsvc (e897eaf5ed6ba41e081060c9b447a673) C:\windows\System32\gpsvc.dll 18:52:57.0226 0192 gpsvc - ok 18:52:57.0304 0192 gupdate (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe 18:52:57.0335 0192 gupdate - ok 18:52:57.0382 0192 gupdatem (8f0de4fef8201e306f9938b0905ac96a) C:\Program Files\Google\Update\GoogleUpdate.exe 18:52:57.0413 0192 gupdatem - ok 18:52:57.0460 0192 gusvc (cc839e8d766cc31a7710c9f38cf3e375) C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe 18:52:57.0554 0192 gusvc - ok 18:52:57.0569 0192 hcw85cir (c44e3c2bab6837db337ddee7544736db) C:\windows\system32\drivers\hcw85cir.sys 18:52:57.0710 0192 hcw85cir - ok 18:52:57.0772 0192 HdAudAddService (a5ef29d5315111c80a5c1abad14c8972) C:\windows\system32\drivers\HdAudio.sys 18:52:57.0959 0192 HdAudAddService - ok 18:52:58.0006 0192 HDAudBus (9036377b8a6c15dc2eec53e489d159b5) C:\windows\system32\drivers\HDAudBus.sys 18:52:58.0412 0192 HDAudBus - ok 18:52:58.0443 0192 HidBatt (1d58a7f3e11a9731d0eaaaa8405acc36) C:\windows\system32\DRIVERS\HidBatt.sys 18:52:58.0583 0192 HidBatt - ok 18:52:58.0599 0192 HidBth (89448f40e6df260c206a193a4683ba78) C:\windows\system32\DRIVERS\hidbth.sys 18:52:58.0708 0192 HidBth - ok 18:52:58.0739 0192 HidIr (cf50b4cf4a4f229b9f3c08351f99ca5e) C:\windows\system32\DRIVERS\hidir.sys 18:52:58.0911 0192 HidIr - ok 18:52:58.0942 0192 hidserv (2bc6f6a1992b3a77f5f41432ca6b3b6b) C:\windows\system32\hidserv.dll 18:52:59.0020 0192 hidserv - ok 18:52:59.0051 0192 HidUsb (10c19f8290891af023eaec0832e1eb4d) C:\windows\system32\drivers\hidusb.sys 18:52:59.0722 0192 HidUsb - ok 18:52:59.0784 0192 hkmsvc (196b4e3f4cccc24af836ce58facbb699) C:\windows\system32\kmsvc.dll 18:52:59.0925 0192 hkmsvc - ok 18:52:59.0972 0192 HomeGroupListener (6658f4404de03d75fe3ba09f7aba6a30) C:\windows\system32\ListSvc.dll 18:53:00.0252 0192 HomeGroupListener - ok 18:53:00.0299 0192 HomeGroupProvider (dbc02d918fff1cad628acbe0c0eaa8e8) C:\windows\system32\provsvc.dll 18:53:00.0518 0192 HomeGroupProvider - ok 18:53:00.0549 0192 HpSAMD (295fdc419039090eb8b49ffdbb374549) C:\windows\system32\drivers\HpSAMD.sys 18:53:00.0705 0192 HpSAMD - ok 18:53:00.0783 0192 HTTP (871917b07a141bff43d76d8844d48106) C:\windows\system32\drivers\HTTP.sys 18:53:00.0892 0192 HTTP - ok 18:53:00.0923 0192 hwpolicy (0c4e035c7f105f1299258c90886c64c5) C:\windows\system32\drivers\hwpolicy.sys 18:53:01.0001 0192 hwpolicy - ok 18:53:01.0064 0192 i8042prt (f151f0bdc47f4a28b1b20a0818ea36d6) C:\windows\system32\drivers\i8042prt.sys 18:53:01.0500 0192 i8042prt - ok 18:53:01.0578 0192 iaStorV (5cd5f9a5444e6cdcb0ac89bd62d8b76e) C:\windows\system32\drivers\iaStorV.sys 18:53:01.0750 0192 iaStorV - ok 18:53:01.0906 0192 idsvc (c521d7eb6497bb1af6afa89e322fb43c) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe 18:53:02.0062 0192 idsvc - ok 18:53:02.0093 0192 iirsp (4173ff5708f3236cf25195fecd742915) C:\windows\system32\DRIVERS\iirsp.sys 18:53:02.0140 0192 iirsp - ok 18:53:02.0234 0192 IKEEXT (f95622f161474511b8d80d6b093aa610) C:\windows\System32\ikeext.dll 18:53:02.0343 0192 IKEEXT - ok 18:53:02.0624 0192 IntcAzAudAddService (e4a2e810cb2607c9c159c0dfb0bd4c88) C:\windows\system32\drivers\RTKVHDA.sys 18:53:02.0904 0192 IntcAzAudAddService - ok 18:53:03.0045 0192 intelide (a0f12f2c9ba6c72f3987ce780e77c130) C:\windows\system32\drivers\intelide.sys 18:53:03.0232 0192 intelide - ok 18:53:03.0279 0192 intelppm (3b514d27bfc4accb4037bc6685f766e0) C:\windows\system32\DRIVERS\intelppm.sys 18:53:03.0341 0192 intelppm - ok 18:53:03.0388 0192 IPBusEnum (acb364b9075a45c0736e5c47be5cae19) C:\windows\system32\ipbusenum.dll 18:53:03.0513 0192 IPBusEnum - ok 18:53:03.0528 0192 IpFilterDriver (709d1761d3b19a932ff0238ea6d50200) C:\windows\system32\DRIVERS\ipfltdrv.sys 18:53:03.0606 0192 IpFilterDriver - ok 18:53:03.0669 0192 iphlpsvc (4d65a07b795d6674312f879d09aa7663) C:\windows\System32\iphlpsvc.dll 18:53:03.0794 0192 iphlpsvc - ok 18:53:03.0825 0192 IPMIDRV (4bd7134618c1d2a27466a099062547bf) C:\windows\system32\drivers\IPMIDrv.sys 18:53:04.0137 0192 IPMIDRV - ok 18:53:04.0168 0192 IPNAT (a5fa468d67abcdaa36264e463a7bb0cd) C:\windows\system32\drivers\ipnat.sys 18:53:04.0293 0192 IPNAT - ok 18:53:04.0480 0192 iPod Service (57edb35ea2feca88f8b17c0c095c9a56) C:\Program Files\iPod\bin\iPodService.exe 18:53:04.0527 0192 iPod Service - ok 18:53:04.0558 0192 IRENUM (42996cff20a3084a56017b7902307e9f) C:\windows\system32\drivers\irenum.sys 18:53:04.0745 0192 IRENUM - ok 18:53:04.0808 0192 isapnp (1f32bb6b38f62f7df1a7ab7292638a35) C:\windows\system32\drivers\isapnp.sys 18:53:05.0213 0192 isapnp - ok 18:53:05.0260 0192 iScsiPrt (cb7a9abb12b8415bce5d74994c7ba3ae) C:\windows\system32\drivers\msiscsi.sys 18:53:05.0432 0192 iScsiPrt - ok 18:53:05.0463 0192 kbdclass (adef52ca1aeae82b50df86b56413107e) C:\windows\system32\drivers\kbdclass.sys 18:53:05.0681 0192 kbdclass - ok 18:53:05.0806 0192 kbdhid (9e3ced91863e6ee98c24794d05e27a71) C:\windows\system32\drivers\kbdhid.sys 18:53:06.0009 0192 kbdhid - ok 18:53:06.0056 0192 KeyIso (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 18:53:06.0165 0192 KeyIso - ok 18:53:06.0243 0192 KL1 (94d67d49bd9503bb1d838405d80f2058) C:\windows\system32\DRIVERS\kl1.sys 18:53:06.0290 0192 KL1 - ok 18:53:06.0321 0192 kl2 (713576569667ac9e0f8556076004a96b) C:\windows\system32\DRIVERS\kl2.sys 18:53:06.0477 0192 kl2 - ok 18:53:06.0570 0192 KLIF (2b7064ff5681b8dde96b98709bb78884) C:\windows\system32\DRIVERS\klif.sys 18:53:06.0648 0192 KLIF - ok 18:53:06.0680 0192 KLIM6 (cf88b4985d957eee45c9939092e87c92) C:\windows\system32\DRIVERS\klim6.sys 18:53:06.0804 0192 KLIM6 - ok 18:53:06.0851 0192 klmouflt (3de1771c135328420315e21dde229bba) C:\windows\system32\DRIVERS\klmouflt.sys 18:53:06.0976 0192 klmouflt - ok 18:53:07.0007 0192 KSecDD (f4647bb23db9038a7536cf6b68f4207f) C:\windows\system32\Drivers\ksecdd.sys 18:53:07.0101 0192 KSecDD - ok 18:53:07.0116 0192 KSecPkg (e73cae53bbb72ba26918492c6b4c229d) C:\windows\system32\Drivers\ksecpkg.sys 18:53:07.0194 0192 KSecPkg - ok 18:53:07.0257 0192 KtmRm (89a7b9cc98d0d80c6f31b91c0a310fcd) C:\windows\system32\msdtckrm.dll 18:53:07.0460 0192 KtmRm - ok 18:53:07.0506 0192 LanmanServer (d64af876d53eca3668bb97b51b4e70ab) C:\windows\system32\srvsvc.dll 18:53:07.0865 0192 LanmanServer - ok 18:53:07.0928 0192 LanmanWorkstation (58405e4f68ba8e4057c6e914f326aba2) C:\windows\System32\wkssvc.dll 18:53:08.0052 0192 LanmanWorkstation - ok 18:53:08.0084 0192 lltdio (f7611ec07349979da9b0ae1f18ccc7a6) C:\windows\system32\DRIVERS\lltdio.sys 18:53:08.0193 0192 lltdio - ok 18:53:08.0240 0192 lltdsvc (5700673e13a2117fa3b9020c852c01e2) C:\windows\System32\lltdsvc.dll 18:53:08.0349 0192 lltdsvc - ok 18:53:08.0380 0192 lmhosts (55ca01ba19d0006c8f2639b6c045e08b) C:\windows\System32\lmhsvc.dll 18:53:08.0520 0192 lmhosts - ok 18:53:08.0552 0192 LPCFilter (6e3d3816749e107883eec5734ce44493) C:\windows\system32\DRIVERS\LPCFilter.sys 18:53:08.0630 0192 LPCFilter - ok 18:53:08.0661 0192 LSI_FC (eb119a53ccf2acc000ac71b065b78fef) C:\windows\system32\DRIVERS\lsi_fc.sys 18:53:08.0739 0192 LSI_FC - ok 18:53:08.0770 0192 LSI_SAS (8ade1c877256a22e49b75d1cc9161f9c) C:\windows\system32\DRIVERS\lsi_sas.sys 18:53:08.0801 0192 LSI_SAS - ok 18:53:08.0832 0192 LSI_SAS2 (dc9dc3d3daa0e276fd2ec262e38b11e9) C:\windows\system32\DRIVERS\lsi_sas2.sys 18:53:08.0910 0192 LSI_SAS2 - ok 18:53:08.0926 0192 LSI_SCSI (0a036c7d7cab643a7f07135ac47e0524) C:\windows\system32\DRIVERS\lsi_scsi.sys 18:53:09.0004 0192 LSI_SCSI - ok 18:53:09.0035 0192 luafv (6703e366cc18d3b6e534f5cf7df39cee) C:\windows\system32\drivers\luafv.sys 18:53:09.0129 0192 luafv - ok 18:53:09.0160 0192 Mcx2Svc (bfb9ee8ee977efe85d1a3105abef6dd1) C:\windows\system32\Mcx2Svc.dll 18:53:09.0269 0192 Mcx2Svc - ok 18:53:09.0285 0192 megasas (0fff5b045293002ab38eb1fd1fc2fb74) C:\windows\system32\DRIVERS\megasas.sys 18:53:09.0332 0192 megasas - ok 18:53:09.0363 0192 MegaSR (dcbab2920c75f390caf1d29f675d03d6) C:\windows\system32\DRIVERS\MegaSR.sys 18:53:09.0425 0192 MegaSR - ok 18:53:09.0456 0192 MMCSS (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll 18:53:09.0597 0192 MMCSS - ok 18:53:09.0612 0192 Modem (f001861e5700ee84e2d4e52c712f4964) C:\windows\system32\drivers\modem.sys 18:53:09.0706 0192 Modem - ok 18:53:09.0737 0192 monitor (79d10964de86b292320e9dfe02282a23) C:\windows\system32\DRIVERS\monitor.sys 18:53:09.0800 0192 monitor - ok 18:53:09.0862 0192 mouclass (fb18cc1d4c2e716b6b903b0ac0cc0609) C:\windows\system32\drivers\mouclass.sys 18:53:10.0205 0192 mouclass - ok 18:53:10.0361 0192 mouhid (2c388d2cd01c9042596cf3c8f3c7b24d) C:\windows\system32\DRIVERS\mouhid.sys 18:53:10.0533 0192 mouhid - ok 18:53:10.0580 0192 mountmgr (fc8771f45ecccfd89684e38842539b9b) C:\windows\system32\drivers\mountmgr.sys 18:53:10.0658 0192 mountmgr - ok 18:53:10.0782 0192 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe 18:53:11.0032 0192 MozillaMaintenance - ok 18:53:11.0079 0192 mpio (2d699fb6e89ce0d8da14ecc03b3edfe0) C:\windows\system32\drivers\mpio.sys 18:53:11.0204 0192 mpio - ok 18:53:11.0235 0192 mpsdrv (ad2723a7b53dd1aacae6ad8c0bfbf4d0) C:\windows\system32\drivers\mpsdrv.sys 18:53:11.0391 0192 mpsdrv - ok 18:53:11.0484 0192 MpsSvc (9835584e999d25004e1ee8e5f3e3b881) C:\windows\system32\mpssvc.dll 18:53:11.0656 0192 MpsSvc - ok 18:53:11.0687 0192 MRxDAV (ceb46ab7c01c9f825f8cc6babc18166a) C:\windows\system32\drivers\mrxdav.sys 18:53:11.0843 0192 MRxDAV - ok 18:53:11.0874 0192 mrxsmb (5d16c921e3671636c0eba3bbaac5fd25) C:\windows\system32\DRIVERS\mrxsmb.sys 18:53:12.0046 0192 mrxsmb - ok 18:53:12.0093 0192 mrxsmb10 (6d17a4791aca19328c685d256349fefc) C:\windows\system32\DRIVERS\mrxsmb10.sys 18:53:12.0592 0192 mrxsmb10 - ok 18:53:12.0654 0192 mrxsmb20 (b81f204d146000be76651a50670a5e9e) C:\windows\system32\DRIVERS\mrxsmb20.sys 18:53:12.0810 0192 mrxsmb20 - ok 18:53:12.0826 0192 msahci (012c5f4e9349e711e11e0f19a8589f0a) C:\windows\system32\drivers\msahci.sys 18:53:12.0982 0192 msahci - ok 18:53:13.0013 0192 msdsm (55055f8ad8be27a64c831322a780a228) C:\windows\system32\drivers\msdsm.sys 18:53:13.0310 0192 msdsm - ok 18:53:13.0341 0192 MSDTC (e1bce74a3bd9902b72599c0192a07e27) C:\windows\System32\msdtc.exe 18:53:13.0575 0192 MSDTC - ok 18:53:13.0622 0192 Msfs (daefb28e3af5a76abcc2c3078c07327f) C:\windows\system32\drivers\Msfs.sys 18:53:13.0668 0192 Msfs - ok 18:53:13.0684 0192 mshidkmdf (3e1e5767043c5af9367f0056295e9f84) C:\windows\System32\drivers\mshidkmdf.sys 18:53:13.0809 0192 mshidkmdf - ok 18:53:13.0824 0192 msisadrv (0a4e5757ae09fa9622e3158cc1aef114) C:\windows\system32\drivers\msisadrv.sys 18:53:14.0152 0192 msisadrv - ok 18:53:14.0199 0192 MSiSCSI (90f7d9e6b6f27e1a707d4a297f077828) C:\windows\system32\iscsiexe.dll 18:53:14.0339 0192 MSiSCSI - ok 18:53:14.0339 0192 msiserver - ok 18:53:14.0370 0192 MSKSSRV (8c0860d6366aaffb6c5bb9df9448e631) C:\windows\system32\drivers\MSKSSRV.sys 18:53:14.0480 0192 MSKSSRV - ok 18:53:14.0495 0192 MSPCLOCK (3ea8b949f963562cedbb549eac0c11ce) C:\windows\system32\drivers\MSPCLOCK.sys 18:53:14.0604 0192 MSPCLOCK - ok 18:53:14.0604 0192 MSPQM (f456e973590d663b1073e9c463b40932) C:\windows\system32\drivers\MSPQM.sys 18:53:14.0682 0192 MSPQM - ok 18:53:14.0698 0192 MsRPC (0e008fc4819d238c51d7c93e7b41e560) C:\windows\system32\drivers\MsRPC.sys 18:53:14.0729 0192 MsRPC - ok 18:53:14.0760 0192 mssmbios (fc6b9ff600cc585ea38b12589bd4e246) C:\windows\system32\drivers\mssmbios.sys 18:53:14.0994 0192 mssmbios - ok 18:53:15.0088 0192 MSSQL$MSSMLBIZ - ok 18:53:15.0150 0192 MSSQL$SQLEXPRESS - ok 18:53:15.0182 0192 MSSQLServerADHelper (1d89eb4e2a99cabd4e81225f4f4c4b25) c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe 18:53:15.0275 0192 MSSQLServerADHelper - ok 18:53:15.0306 0192 MSTEE (b42c6b921f61a6e55159b8be6cd54a36) C:\windows\system32\drivers\MSTEE.sys 18:53:15.0400 0192 MSTEE - ok 18:53:15.0447 0192 MTConfig (33599130f44e1f34631cea241de8ac84) C:\windows\system32\DRIVERS\MTConfig.sys 18:53:15.0525 0192 MTConfig - ok 18:53:15.0540 0192 Mup (159fad02f64e6381758c990f753bcc80) C:\windows\system32\Drivers\mup.sys 18:53:15.0572 0192 Mup - ok 18:53:15.0634 0192 napagent (61d57a5d7c6d9afe10e77dae6e1b445e) C:\windows\system32\qagentRT.dll 18:53:15.0774 0192 napagent - ok 18:53:15.0821 0192 NativeWifiP (26384429fcd85d83746f63e798ab1480) C:\windows\system32\DRIVERS\nwifi.sys 18:53:15.0977 0192 NativeWifiP - ok 18:53:16.0071 0192 NDIS (e7c54812a2aaf43316eb6930c1ffa108) C:\windows\system32\drivers\ndis.sys 18:53:16.0133 0192 NDIS - ok 18:53:16.0164 0192 NdisCap (0e1787aa6c9191d3d319e8bafe86f80c) C:\windows\system32\DRIVERS\ndiscap.sys 18:53:16.0289 0192 NdisCap - ok 18:53:16.0320 0192 NdisTapi (e4a8aec125a2e43a9e32afeea7c9c888) C:\windows\system32\DRIVERS\ndistapi.sys 18:53:16.0508 0192 NdisTapi - ok 18:53:16.0554 0192 Ndisuio (d8a65dafb3eb41cbb622745676fcd072) C:\windows\system32\DRIVERS\ndisuio.sys 18:53:16.0742 0192 Ndisuio - ok 18:53:16.0788 0192 NdisWan (38fbe267e7e6983311179230facb1017) C:\windows\system32\DRIVERS\ndiswan.sys 18:53:17.0038 0192 NdisWan - ok 18:53:17.0147 0192 NDProxy (a4bdc541e69674fbff1a8ff00be913f2) C:\windows\system32\drivers\NDProxy.sys 18:53:17.0303 0192 NDProxy - ok 18:53:17.0334 0192 NetBIOS (80b275b1ce3b0e79909db7b39af74d51) C:\windows\system32\DRIVERS\netbios.sys 18:53:17.0412 0192 NetBIOS - ok 18:53:17.0459 0192 NetBT (280122ddcf04b378edd1ad54d71c1e54) C:\windows\system32\DRIVERS\netbt.sys 18:53:17.0662 0192 NetBT - ok 18:53:17.0709 0192 Netlogon (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 18:53:17.0896 0192 Netlogon - ok 18:53:17.0958 0192 Netman (7cccfca7510684768da22092d1fa4db2) C:\windows\System32\netman.dll 18:53:18.0083 0192 Netman - ok 18:53:18.0130 0192 netprofm (8c338238c16777a802d6a9211eb2ba50) C:\windows\System32\netprofm.dll 18:53:18.0208 0192 netprofm - ok 18:53:18.0302 0192 NetTcpPortSharing (f476ec40033cdb91efbe73eb99b8362d) C:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe 18:53:18.0395 0192 NetTcpPortSharing - ok 18:53:18.0426 0192 nfrd960 (1d85c4b390b0ee09c7a46b91efb2c097) C:\windows\system32\DRIVERS\nfrd960.sys 18:53:18.0489 0192 nfrd960 - ok 18:53:18.0536 0192 NlaSvc (912084381d30d8b89ec4e293053f4710) C:\windows\System32\nlasvc.dll 18:53:18.0707 0192 NlaSvc - ok 18:53:18.0723 0192 Npfs (1db262a9f8c087e8153d89bef3d2235f) C:\windows\system32\drivers\Npfs.sys 18:53:18.0785 0192 Npfs - ok 18:53:18.0801 0192 nsi (ba387e955e890c8a88306d9b8d06bf17) C:\windows\system32\nsisvc.dll 18:53:18.0941 0192 nsi - ok 18:53:18.0972 0192 nsiproxy (e9a0a4d07e53d8fea2bb8387a3293c58) C:\windows\system32\drivers\nsiproxy.sys 18:53:19.0066 0192 nsiproxy - ok 18:53:19.0222 0192 Ntfs (81189c3d7763838e55c397759d49007a) C:\windows\system32\drivers\Ntfs.sys 18:53:19.0300 0192 Ntfs - ok 18:53:19.0300 0192 Null (f9756a98d69098dca8945d62858a812c) C:\windows\system32\drivers\Null.sys 18:53:19.0440 0192 Null - ok 18:53:19.0487 0192 nvraid (b3e25ee28883877076e0e1ff877d02e0) C:\windows\system32\drivers\nvraid.sys 18:53:19.0846 0192 nvraid - ok 18:53:19.0908 0192 nvstor (4380e59a170d88c4f1022eff6719a8a4) C:\windows\system32\drivers\nvstor.sys 18:53:20.0205 0192 nvstor - ok 18:53:20.0267 0192 nv_agp (5a0983915f02bae73267cc2a041f717d) C:\windows\system32\drivers\nv_agp.sys 18:53:20.0423 0192 nv_agp - ok 18:53:20.0642 0192 ohci1394 (08a70a1f2cdde9bb49b885cb817a66eb) C:\windows\system32\drivers\ohci1394.sys 18:53:20.0735 0192 ohci1394 - ok 18:53:20.0844 0192 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 18:53:20.0891 0192 ose - ok 18:53:21.0375 0192 osppsvc (358a9cca612c68eb2f07ddad4ce1d8d7) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE 18:53:21.0515 0192 osppsvc - ok 18:53:21.0656 0192 p2pimsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll 18:53:21.0796 0192 p2pimsvc - ok 18:53:21.0843 0192 p2psvc (59c3ddd501e39e006dac31bf55150d91) C:\windows\system32\p2psvc.dll 18:53:21.0952 0192 p2psvc - ok 18:53:21.0983 0192 Parport (2ea877ed5dd9713c5ac74e8ea7348d14) C:\windows\system32\DRIVERS\parport.sys 18:53:22.0077 0192 Parport - ok 18:53:22.0124 0192 partmgr (bf8f6af06da75b336f07e23aef97d93b) C:\windows\system32\drivers\partmgr.sys 18:53:22.0202 0192 partmgr - ok 18:53:22.0217 0192 Parvdm (eb0a59f29c19b86479d36b35983daadc) C:\windows\system32\DRIVERS\parvdm.sys 18:53:22.0280 0192 Parvdm - ok 18:53:22.0295 0192 PcaSvc (358ab7956d3160000726574083dfc8a6) C:\windows\System32\pcasvc.dll 18:53:22.0529 0192 PcaSvc - ok 18:53:22.0560 0192 pci (673e55c3498eb970088e812ea820aa8f) C:\windows\system32\drivers\pci.sys 18:53:22.0872 0192 pci - ok 18:53:22.0935 0192 pciide (afe86f419014db4e5593f69ffe26ce0a) C:\windows\system32\drivers\pciide.sys 18:53:23.0481 0192 pciide - ok 18:53:23.0543 0192 pcmcia (f396431b31693e71e8a80687ef523506) C:\windows\system32\DRIVERS\pcmcia.sys 18:53:23.0637 0192 pcmcia - ok 18:53:23.0652 0192 pcw (250f6b43d2b613172035c6747aeeb19f) C:\windows\system32\drivers\pcw.sys 18:53:23.0684 0192 pcw - ok 18:53:23.0762 0192 PEAUTH (9e0104ba49f4e6973749a02bf41344ed) C:\windows\system32\drivers\peauth.sys 18:53:23.0949 0192 PEAUTH - ok 18:53:24.0011 0192 PGEffect (1b5011dd8d57f53aed31ff0f7d635802) C:\windows\system32\DRIVERS\pgeffect.sys 18:53:24.0230 0192 PGEffect - ok 18:53:24.0401 0192 pla (414bba67a3ded1d28437eb66aeb8a720) C:\windows\system32\pla.dll 18:53:24.0557 0192 pla - ok 18:53:24.0729 0192 PlugPlay (ec7bc28d207da09e79b3e9faf8b232ca) C:\windows\system32\umpnpmgr.dll 18:53:25.0010 0192 PlugPlay - ok 18:53:25.0088 0192 PNRPAutoReg (63ff8572611249931eb16bb8eed6afc8) C:\windows\system32\pnrpauto.dll 18:53:25.0181 0192 PNRPAutoReg - ok 18:53:25.0228 0192 PNRPsvc (82a8521ddc60710c3d3d3e7325209bec) C:\windows\system32\pnrpsvc.dll 18:53:25.0337 0192 PNRPsvc - ok 18:53:25.0400 0192 PolicyAgent (53946b69ba0836bd95b03759530c81ec) C:\windows\System32\ipsecsvc.dll 18:53:25.0556 0192 PolicyAgent - ok 18:53:25.0602 0192 Power (f87d30e72e03d579a5199ccb3831d6ea) C:\windows\system32\umpo.dll 18:53:25.0790 0192 Power - ok 18:53:25.0899 0192 PptpMiniport (631e3e205ad6d86f2aed6a4a8e69f2db) C:\windows\system32\DRIVERS\raspptp.sys 18:53:26.0039 0192 PptpMiniport - ok 18:53:26.0055 0192 Processor (85b1e3a0c7585bc4aae6899ec6fcf011) C:\windows\system32\DRIVERS\processr.sys 18:53:26.0117 0192 Processor - ok 18:53:26.0164 0192 ProfSvc (43ca4ccc22d52fb58e8988f0198851d0) C:\windows\system32\profsvc.dll 18:53:26.0304 0192 ProfSvc - ok 18:53:26.0336 0192 ProtectedStorage (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 18:53:26.0445 0192 ProtectedStorage - ok 18:53:26.0492 0192 Psched (6270ccae2a86de6d146529fe55b3246a) C:\windows\system32\DRIVERS\pacer.sys 18:53:26.0570 0192 Psched - ok 18:53:26.0726 0192 ql2300 (ab95ecf1f6659a60ddc166d8315b0751) C:\windows\system32\DRIVERS\ql2300.sys 18:53:26.0819 0192 ql2300 - ok 18:53:26.0960 0192 ql40xx (b4dd51dd25182244b86737dc51af2270) C:\windows\system32\DRIVERS\ql40xx.sys 18:53:27.0006 0192 ql40xx - ok 18:53:27.0053 0192 QWAVE (31ac809e7707eb580b2bdb760390765a) C:\windows\system32\qwave.dll 18:53:27.0178 0192 QWAVE - ok 18:53:27.0194 0192 QWAVEdrv (584078ca1b95ca72df2a27c336f9719d) C:\windows\system32\drivers\qwavedrv.sys 18:53:27.0334 0192 QWAVEdrv - ok 18:53:27.0350 0192 RasAcd (30a81b53c766d0133bb86d234e5556ab) C:\windows\system32\DRIVERS\rasacd.sys 18:53:27.0474 0192 RasAcd - ok 18:53:27.0521 0192 RasAgileVpn (57ec4aef73660166074d8f7f31c0d4fd) C:\windows\system32\DRIVERS\AgileVpn.sys 18:53:27.0708 0192 RasAgileVpn - ok 18:53:27.0740 0192 RasAuto (a60f1839849c0c00739787fd5ec03f13) C:\windows\System32\rasauto.dll 18:53:27.0802 0192 RasAuto - ok 18:53:27.0818 0192 Rasl2tp (d9f91eafec2815365cbe6d167e4e332a) C:\windows\system32\DRIVERS\rasl2tp.sys 18:53:27.0942 0192 Rasl2tp - ok 18:53:28.0020 0192 RasMan (cb9e04dc05eacf5b9a36ca276d475006) C:\windows\System32\rasmans.dll 18:53:28.0192 0192 RasMan - ok 18:53:28.0223 0192 RasPppoe (0fe8b15916307a6ac12bfb6a63e45507) C:\windows\system32\DRIVERS\raspppoe.sys 18:53:28.0426 0192 RasPppoe - ok 18:53:28.0457 0192 RasSstp (44101f495a83ea6401d886e7fd70096b) C:\windows\system32\DRIVERS\rassstp.sys 18:53:28.0707 0192 RasSstp - ok 18:53:28.0754 0192 rdbss (d528bc58a489409ba40334ebf96a311b) C:\windows\system32\DRIVERS\rdbss.sys 18:53:28.0972 0192 rdbss - ok 18:53:28.0988 0192 rdpbus (0d8f05481cb76e70e1da06ee9f0da9df) C:\windows\system32\DRIVERS\rdpbus.sys 18:53:29.0066 0192 rdpbus - ok 18:53:29.0097 0192 RDPCDD (23dae03f29d253ae74c44f99e515f9a1) C:\windows\system32\DRIVERS\RDPCDD.sys 18:53:29.0284 0192 RDPCDD - ok 18:53:29.0315 0192 RDPENCDD (5a53ca1598dd4156d44196d200c94b8a) C:\windows\system32\drivers\rdpencdd.sys 18:53:29.0549 0192 RDPENCDD - ok 18:53:29.0565 0192 RDPREFMP (44b0a53cd4f27d50ed461dae0c0b4e1f) C:\windows\system32\drivers\rdprefmp.sys 18:53:29.0721 0192 RDPREFMP - ok 18:53:29.0768 0192 RDPWD (244c83332f44589ae98fc347f11b2693) C:\windows\system32\drivers\RDPWD.sys 18:53:30.0064 0192 RDPWD - ok 18:53:30.0126 0192 rdyboost (518395321dc96fe2c9f0e96ac743b656) C:\windows\system32\drivers\rdyboost.sys 18:53:30.0189 0192 rdyboost - ok 18:53:30.0236 0192 RemoteAccess (7b5e1419717fac363a31cc302895217a) C:\windows\System32\mprdim.dll 18:53:30.0438 0192 RemoteAccess - ok 18:53:30.0501 0192 RemoteRegistry (cb9a8683f4ef2bf99e123d79950d7935) C:\windows\system32\regsvc.dll 18:53:30.0672 0192 RemoteRegistry - ok 18:53:30.0688 0192 RpcEptMapper (78d072f35bc45d9e4e1b61895c152234) C:\windows\System32\RpcEpMap.dll 18:53:30.0813 0192 RpcEptMapper - ok 18:53:30.0828 0192 RpcLocator (94d36c0e44677dd26981d2bfeef2a29d) C:\windows\system32\locator.exe 18:53:30.0953 0192 RpcLocator - ok 18:53:31.0016 0192 RpcSs (7660f01d3b38aca1747e397d21d790af) C:\windows\system32\rpcss.dll 18:53:31.0203 0192 RpcSs - ok 18:53:31.0281 0192 RSELSVC - ok 18:53:31.0328 0192 rspndr (032b0d36ad92b582d869879f5af5b928) C:\windows\system32\DRIVERS\rspndr.sys 18:53:31.0452 0192 rspndr - ok 18:53:31.0484 0192 RSUSBSTOR - ok 18:53:31.0515 0192 RTL8167 (26a9d6227d12b9d9da5a81bb9b55d810) C:\windows\system32\DRIVERS\Rt86win7.sys 18:53:31.0874 0192 RTL8167 - ok 18:53:31.0936 0192 RTL8187Se (5bd298bdf62e6a8a0fc69f73a82a52bb) C:\windows\system32\DRIVERS\RTL8187Se.sys 18:53:32.0295 0192 RTL8187Se - ok 18:53:32.0342 0192 RtsUIR - ok 18:53:32.0373 0192 SamSs (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 18:53:32.0482 0192 SamSs - ok 18:53:32.0529 0192 sbp2port (05d860da1040f111503ac416ccef2bca) C:\windows\system32\drivers\sbp2port.sys 18:53:32.0638 0192 sbp2port - ok 18:53:32.0685 0192 SCardSvr (8fc518ffe9519c2631d37515a68009c4) C:\windows\System32\SCardSvr.dll 18:53:32.0888 0192 SCardSvr - ok 18:53:32.0919 0192 scfilter (0693b5ec673e34dc147e195779a4dcf6) C:\windows\system32\DRIVERS\scfilter.sys 18:53:33.0028 0192 scfilter - ok 18:53:33.0137 0192 Schedule (a04bb13f8a72f8b6e8b4071723e4e336) C:\windows\system32\schedsvc.dll 18:53:33.0262 0192 Schedule - ok 18:53:33.0293 0192 SCPolicySvc (319c6b309773d063541d01df8ac6f55f) C:\windows\System32\certprop.dll 18:53:33.0418 0192 SCPolicySvc - ok 18:53:33.0465 0192 SDRSVC (08236c4bce5edd0a0318a438af28e0f7) C:\windows\System32\SDRSVC.dll 18:53:33.0590 0192 SDRSVC - ok 18:53:33.0636 0192 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\windows\system32\drivers\secdrv.sys 18:53:33.0730 0192 secdrv - ok 18:53:33.0761 0192 seclogon (a59b3a4442c52060cc7a85293aa3546f) C:\windows\system32\seclogon.dll 18:53:33.0839 0192 seclogon - ok 18:53:33.0870 0192 SENS (dcb7fcdcc97f87360f75d77425b81737) C:\windows\System32\sens.dll 18:53:33.0933 0192 SENS - ok 18:53:33.0948 0192 SensrSvc (50087fe1ee447009c9cc2997b90de53f) C:\windows\system32\sensrsvc.dll 18:53:34.0073 0192 SensrSvc - ok 18:53:34.0105 0192 Serenum (9ad8b8b515e3df6acd4212ef465de2d1) C:\windows\system32\DRIVERS\serenum.sys 18:53:34.0198 0192 Serenum - ok 18:53:34.0245 0192 Serial (5fb7fcea0490d821f26f39cc5ea3d1e2) C:\windows\system32\DRIVERS\serial.sys 18:53:34.0339 0192 Serial - ok 18:53:34.0354 0192 sermouse (79bffb520327ff916a582dfea17aa813) C:\windows\system32\DRIVERS\sermouse.sys 18:53:34.0619 0192 sermouse - ok 18:53:34.0697 0192 SessionEnv (4ae380f39a0032eab7dd953030b26d28) C:\windows\system32\sessenv.dll 18:53:34.0838 0192 SessionEnv - ok 18:53:34.0853 0192 sffdisk (9f976e1eb233df46fce808d9dea3eb9c) C:\windows\system32\drivers\sffdisk.sys 18:53:34.0978 0192 sffdisk - ok 18:53:34.0994 0192 sffp_mmc (932a68ee27833cfd57c1639d375f2731) C:\windows\system32\drivers\sffp_mmc.sys 18:53:35.0197 0192 sffp_mmc - ok 18:53:35.0228 0192 sffp_sd (6d4ccaedc018f1cf52866bbbaa235982) C:\windows\system32\drivers\sffp_sd.sys 18:53:35.0509 0192 sffp_sd - ok 18:53:35.0540 0192 sfloppy (db96666cc8312ebc45032f30b007a547) C:\windows\system32\DRIVERS\sfloppy.sys 18:53:35.0680 0192 sfloppy - ok 18:53:35.0743 0192 SharedAccess (d1a079a0de2ea524513b6930c24527a2) C:\windows\System32\ipnathlp.dll 18:53:35.0852 0192 SharedAccess - ok 18:53:36.0148 0192 ShellHWDetection (414da952a35bf5d50192e28263b40577) C:\windows\System32\shsvcs.dll 18:53:36.0257 0192 ShellHWDetection - ok 18:53:36.0304 0192 sisagp (2565cac0dc9fe0371bdce60832582b2e) C:\windows\system32\drivers\sisagp.sys 18:53:36.0507 0192 sisagp - ok 18:53:36.0554 0192 SiSRaid2 (a9f0486851becb6dda1d89d381e71055) C:\windows\system32\DRIVERS\SiSRaid2.sys 18:53:36.0601 0192 SiSRaid2 - ok 18:53:36.0616 0192 SiSRaid4 (3727097b55738e2f554972c3be5bc1aa) C:\windows\system32\DRIVERS\sisraid4.sys 18:53:36.0679 0192 SiSRaid4 - ok 18:53:36.0710 0192 Smb (3e21c083b8a01cb70ba1f09303010fce) C:\windows\system32\DRIVERS\smb.sys 18:53:36.0788 0192 Smb - ok 18:53:36.0835 0192 SNMPTRAP (6a984831644eca1a33ffeae4126f4f37) C:\windows\System32\snmptrap.exe 18:53:36.0928 0192 SNMPTRAP - ok 18:53:36.0928 0192 spldr (95cf1ae7527fb70f7816563cbc09d942) C:\windows\system32\drivers\spldr.sys 18:53:36.0959 0192 spldr - ok 18:53:37.0022 0192 Spooler (866a43013535dc8587c258e43579c764) C:\windows\System32\spoolsv.exe 18:53:37.0193 0192 Spooler - ok 18:53:37.0505 0192 sppsvc (cf87a1de791347e75b98885214ced2b8) C:\windows\system32\sppsvc.exe 18:53:37.0693 0192 sppsvc - ok 18:53:37.0817 0192 sppuinotify (b0180b20b065d89232a78a40fe56eaa6) C:\windows\system32\sppuinotify.dll 18:53:38.0020 0192 sppuinotify - ok 18:53:38.0129 0192 SQLBrowser (86ebd8b1f23e743aad21f4d5b4d40985) c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe 18:53:38.0270 0192 SQLBrowser - ok 18:53:38.0317 0192 SQLWriter (d89083c4eb02daca8f944b0e05e57f9d) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 18:53:38.0488 0192 SQLWriter - ok 18:53:38.0566 0192 srv (e4c2764065d66ea1d2d3ebc28fe99c46) C:\windows\system32\DRIVERS\srv.sys 18:53:38.0800 0192 srv - ok 18:53:38.0847 0192 srv2 (03f0545bd8d4c77fa0ae1ceedfcc71ab) C:\windows\system32\DRIVERS\srv2.sys 18:53:39.0159 0192 srv2 - ok 18:53:39.0190 0192 srvnet (be6bd660caa6f291ae06a718a4fa8abc) C:\windows\system32\DRIVERS\srvnet.sys 18:53:39.0424 0192 srvnet - ok 18:53:39.0455 0192 SSDPSRV (d887c9fd02ac9fa880f6e5027a43e118) C:\windows\System32\ssdpsrv.dll 18:53:39.0596 0192 SSDPSRV - ok 18:53:39.0627 0192 SstpSvc (d318f23be45d5e3a107469eb64815b50) C:\windows\system32\sstpsvc.dll 18:53:39.0752 0192 SstpSvc - ok 18:53:39.0783 0192 stexstor (db32d325c192b801df274bfd12a7e72b) C:\windows\system32\DRIVERS\stexstor.sys 18:53:39.0845 0192 stexstor - ok 18:53:39.0923 0192 StiSvc (e1fb3706030fb4578a0d72c2fc3689e4) C:\windows\System32\wiaservc.dll 18:53:40.0079 0192 StiSvc - ok 18:53:40.0095 0192 swenum (e58c78a848add9610a4db6d214af5224) C:\windows\system32\drivers\swenum.sys 18:53:40.0469 0192 swenum - ok 18:53:40.0516 0192 swprv (a28bd92df340e57b024ba433165d34d7) C:\windows\System32\swprv.dll 18:53:40.0657 0192 swprv - ok 18:53:40.0735 0192 SynTP (8bd10dc8809dc69a1c5a795cb10add76) C:\windows\system32\DRIVERS\SynTP.sys 18:53:40.0891 0192 SynTP - ok 18:53:41.0031 0192 SysMain (36650d618ca34c9d357dfd3d89b2c56f) C:\windows\system32\sysmain.dll 18:53:41.0171 0192 SysMain - ok 18:53:41.0312 0192 TabletInputService (763fecdc3d30c815fe72dd57936c6cd1) C:\windows\System32\TabSvc.dll 18:53:41.0531 0192 TabletInputService - ok 18:53:41.0578 0192 TapiSrv (613bf4820361543956909043a265c6ac) C:\windows\System32\tapisrv.dll 18:53:41.0796 0192 TapiSrv - ok 18:53:41.0828 0192 TBS (b799d9fdb26111737f58288d8dc172d9) C:\windows\System32\tbssvc.dll 18:53:41.0952 0192 TBS - ok 18:53:42.0140 0192 Tcpip (65d10b191c59c5501a1263fc33f6894b) C:\windows\system32\drivers\tcpip.sys 18:53:42.0311 0192 Tcpip - ok 18:53:42.0327 0192 TCPIP6 (65d10b191c59c5501a1263fc33f6894b) C:\windows\system32\DRIVERS\tcpip.sys 18:53:42.0514 0192 TCPIP6 - ok 18:53:42.0545 0192 tcpipreg (cca24162e055c3714ce5a88b100c64ed) C:\windows\system32\drivers\tcpipreg.sys 18:53:42.0701 0192 tcpipreg - ok 18:53:42.0748 0192 tdcmdpst (4084ea00d50c858d6f9038f86ae2e2d0) C:\windows\system32\DRIVERS\tdcmdpst.sys 18:53:42.0857 0192 tdcmdpst - ok 18:53:42.0873 0192 TDPIPE (1cb91b2bd8f6dd367dfc2ef26fd751b2) C:\windows\system32\drivers\tdpipe.sys 18:53:42.0998 0192 TDPIPE - ok 18:53:43.0044 0192 TDTCP (2c2c5afe7ee4f620d69c23c0617651a8) C:\windows\system32\drivers\tdtcp.sys 18:53:43.0278 0192 TDTCP - ok 18:53:43.0310 0192 tdx (b459575348c20e8121d6039da063c704) C:\windows\system32\DRIVERS\tdx.sys 18:53:43.0481 0192 tdx - ok 18:53:43.0528 0192 TermDD (04dbf4b01ea4bf25a9a3e84affac9b20) C:\windows\system32\drivers\termdd.sys 18:53:43.0762 0192 TermDD - ok 18:53:43.0902 0192 TermService (382c804c92811be57829d8e550a900e2) C:\windows\System32\termsrv.dll 18:53:44.0074 0192 TermService - ok 18:53:44.0090 0192 Themes (42fb6afd6b79d9fe07381609172e7ca4) C:\windows\system32\themeservice.dll 18:53:44.0230 0192 Themes - ok 18:53:44.0261 0192 THREADORDER (146b6f43a673379a3c670e86d89be5ea) C:\windows\system32\mmcss.dll 18:53:44.0386 0192 THREADORDER - ok 18:53:44.0464 0192 TMachInfo (32577b987ae5401038451bb392cb8d89) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe 18:53:44.0542 0192 TMachInfo - ok 18:53:44.0589 0192 TODDSrv (fe65d33b7d4ff07dd1d29526a48df810) C:\windows\system32\TODDSrv.exe 18:53:44.0698 0192 TODDSrv - ok 18:53:44.0776 0192 TosCoSrv (451b09ba1a0d019ba0b5a27229559d55) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe 18:53:44.0901 0192 TosCoSrv - ok 18:53:44.0948 0192 TOSHIBA eco Utility Service (0b5fa26e0c8a8e07a6df3df4e5711da8) C:\Program Files\TOSHIBA\TECO\TecoService.exe 18:53:45.0041 0192 TOSHIBA eco Utility Service - ok 18:53:45.0088 0192 TOSHIBA HDD SSD Alert Service (94ecabe1ba3559214fe6c3ce6c9677eb) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe 18:53:45.0197 0192 TOSHIBA HDD SSD Alert Service - ok 18:53:45.0260 0192 tos_sps32 (969377943fe7284609babbab4e06b93c) C:\windows\system32\DRIVERS\tos_sps32.sys 18:53:45.0338 0192 tos_sps32 - ok 18:53:45.0431 0192 TPCHSrv (31d2881b0647f2b09b118b9b50c02888) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe 18:53:45.0572 0192 TPCHSrv - ok 18:53:45.0618 0192 TrkWks (4792c0378db99a9bc2ae2de6cfff0c3a) C:\windows\System32\trkwks.dll 18:53:45.0696 0192 TrkWks - ok 18:53:45.0759 0192 TrustedInstaller (2c49b175aee1d4364b91b531417fe583) C:\windows\servicing\TrustedInstaller.exe 18:53:45.0868 0192 TrustedInstaller - ok 18:53:45.0884 0192 tssecsrv (254bb140eee3c59d6114c1a86b636877) C:\windows\system32\DRIVERS\tssecsrv.sys 18:53:45.0977 0192 tssecsrv - ok 18:53:46.0024 0192 TsUsbFlt (fd1d6c73e6333be727cbcc6054247654) C:\windows\system32\drivers\tsusbflt.sys 18:53:46.0196 0192 TsUsbFlt - ok 18:53:46.0258 0192 tunnel (b2fa25d9b17a68bb93d58b0556e8c90d) C:\windows\system32\DRIVERS\tunnel.sys 18:53:46.0476 0192 tunnel - ok 18:53:46.0539 0192 TVALZ (fc24015b4052600c324c43e3a79c0664) C:\windows\system32\DRIVERS\TVALZ_O.SYS 18:53:46.0664 0192 TVALZ - ok 18:53:46.0710 0192 TVALZFL (866462f5ae3f375ef83ef9dce436031c) C:\windows\system32\DRIVERS\TVALZFL.sys 18:53:46.0835 0192 TVALZFL - ok 18:53:46.0866 0192 uagp35 (750fbcb269f4d7dd2e420c56b795db6d) C:\windows\system32\DRIVERS\uagp35.sys 18:53:46.0929 0192 uagp35 - ok 18:53:46.0976 0192 udfs (ee43346c7e4b5e63e54f927babbb32ff) C:\windows\system32\DRIVERS\udfs.sys 18:53:47.0100 0192 udfs - ok 18:53:47.0147 0192 UI0Detect (8344fd4fce927880aa1aa7681d4927e5) C:\windows\system32\UI0Detect.exe 18:53:47.0334 0192 UI0Detect - ok 18:53:47.0350 0192 uliagpkx (44e8048ace47befbfdc2e9be4cbc8880) C:\windows\system32\drivers\uliagpkx.sys 18:53:47.0678 0192 uliagpkx - ok 18:53:47.0771 0192 umbus (d295bed4b898f0fd999fcfa9b32b071b) C:\windows\system32\drivers\umbus.sys 18:53:48.0161 0192 umbus - ok 18:53:48.0177 0192 UmPass (7550ad0c6998ba1cb4843e920ee0feac) C:\windows\system32\DRIVERS\umpass.sys 18:53:48.0255 0192 UmPass - ok 18:53:48.0302 0192 upnphost (833fbb672460efce8011d262175fad33) C:\windows\System32\upnphost.dll 18:53:48.0380 0192 upnphost - ok 18:53:48.0426 0192 USBAAPL (83cafcb53201bbac04d822f32438e244) C:\windows\system32\Drivers\usbaapl.sys 18:53:48.0504 0192 USBAAPL ( UnsignedFile.Multi.Generic ) - warning 18:53:48.0504 0192 USBAAPL - detected UnsignedFile.Multi.Generic (1) 18:53:48.0536 0192 usbccgp (bd9c55d7023c5de374507acc7a14e2ac) C:\windows\system32\DRIVERS\usbccgp.sys 18:53:48.0894 0192 usbccgp - ok 18:53:48.0894 0192 USBCCID - ok 18:53:48.0941 0192 usbcir (04ec7cec62ec3b6d9354eee93327fc82) C:\windows\system32\drivers\usbcir.sys 18:53:49.0066 0192 usbcir - ok 18:53:49.0097 0192 usbehci (f92de757e4b7ce9c07c5e65423f3ae3b) C:\windows\system32\DRIVERS\usbehci.sys 18:53:49.0737 0192 usbehci - ok 18:53:49.0815 0192 usbhub (8dc94aec6a7e644a06135ae7506dc2e9) C:\windows\system32\DRIVERS\usbhub.sys 18:53:50.0330 0192 usbhub - ok 18:53:50.0376 0192 usbohci (e185d44fac515a18d9deddc23c2cdf44) C:\windows\system32\DRIVERS\usbohci.sys 18:53:50.0720 0192 usbohci - ok 18:53:50.0751 0192 usbprint (797d862fe0875e75c7cc4c1ad7b30252) C:\windows\system32\DRIVERS\usbprint.sys 18:53:50.0813 0192 usbprint - ok 18:53:50.0844 0192 USBSTOR (f991ab9cc6b908db552166768176896a) C:\windows\system32\drivers\USBSTOR.SYS 18:53:51.0250 0192 USBSTOR - ok 18:53:51.0281 0192 usbuhci (68df884cf41cdada664beb01daf67e3d) C:\windows\system32\drivers\usbuhci.sys 18:53:51.0484 0192 usbuhci - ok 18:53:51.0609 0192 usbvideo (45f4e7bf43db40a6c6b4d92c76cbc3f2) C:\windows\System32\Drivers\usbvideo.sys 18:53:51.0874 0192 usbvideo - ok 18:53:51.0905 0192 UxSms (081e6e1c91aec36758902a9f727cd23c) C:\windows\System32\uxsms.dll 18:53:51.0999 0192 UxSms - ok 18:53:52.0030 0192 VaultSvc (81951f51e318aecc2d68559e47485cc4) C:\windows\system32\lsass.exe 18:53:52.0139 0192 VaultSvc - ok 18:53:52.0170 0192 vdrvroot (a059c4c3edb09e07d21a8e5c0aabd3cb) C:\windows\system32\drivers\vdrvroot.sys 18:53:52.0748 0192 vdrvroot - ok 18:53:52.0857 0192 vds (c3cd30495687c2a2f66a65ca6fd89be9) C:\windows\System32\vds.exe 18:53:53.0216 0192 vds - ok 18:53:53.0294 0192 vga (17c408214ea61696cec9c66e388b14f3) C:\windows\system32\DRIVERS\vgapnp.sys 18:53:53.0403 0192 vga - ok 18:53:53.0418 0192 VgaSave (8e38096ad5c8570a6f1570a61e251561) C:\windows\System32\drivers\vga.sys 18:53:53.0481 0192 VgaSave - ok 18:53:53.0512 0192 vhdmp (5461686cca2fda57b024547733ab42e3) C:\windows\system32\drivers\vhdmp.sys 18:53:53.0590 0192 vhdmp - ok 18:53:53.0637 0192 viaagp (c829317a37b4bea8f39735d4b076e923) C:\windows\system32\drivers\viaagp.sys 18:53:53.0762 0192 viaagp - ok 18:53:53.0777 0192 ViaC7 (e02f079a6aa107f06b16549c6e5c7b74) C:\windows\system32\DRIVERS\viac7.sys 18:53:53.0855 0192 ViaC7 - ok 18:53:53.0871 0192 viaide (e43574f6a56a0ee11809b48c09e4fd3c) C:\windows\system32\drivers\viaide.sys 18:53:54.0105 0192 viaide - ok 18:53:54.0198 0192 volmgr (4c63e00f2f4b5f86ab48a58cd990f212) C:\windows\system32\drivers\volmgr.sys 18:53:54.0339 0192 volmgr - ok 18:53:54.0448 0192 volmgrx (b5bb72067ddddbbfb04b2f89ff8c3c87) C:\windows\system32\drivers\volmgrx.sys 18:53:54.0510 0192 volmgrx - ok 18:53:54.0557 0192 volsnap (f497f67932c6fa693d7de2780631cfe7) C:\windows\system32\drivers\volsnap.sys 18:53:54.0760 0192 volsnap - ok 18:53:54.0838 0192 vsmraid (9dfa0cc2f8855a04816729651175b631) C:\windows\system32\DRIVERS\vsmraid.sys 18:53:54.0885 0192 vsmraid - ok 18:53:54.0994 0192 VSS (209a3b1901b83aeb8527ed211cce9e4c) C:\windows\system32\vssvc.exe 18:53:55.0181 0192 VSS - ok 18:53:55.0197 0192 vwifibus (90567b1e658001e79d7c8bbd3dde5aa6) C:\windows\system32\DRIVERS\vwifibus.sys 18:53:55.0306 0192 vwifibus - ok 18:53:55.0353 0192 vwififlt (7090d3436eeb4e7da3373090a23448f7) C:\windows\system32\DRIVERS\vwififlt.sys 18:53:55.0602 0192 vwififlt - ok 18:53:55.0634 0192 vwifimp (a3f04cbea6c2a10e6cb01f8b47611882) C:\windows\system32\DRIVERS\vwifimp.sys 18:53:55.0805 0192 vwifimp - ok 18:53:55.0852 0192 W32Time (55187fd710e27d5095d10a472c8baf1c) C:\windows\system32\w32time.dll 18:53:55.0930 0192 W32Time - ok 18:53:55.0961 0192 WacomPen (de3721e89c653aa281428c8a69745d90) C:\windows\system32\DRIVERS\wacompen.sys 18:53:56.0055 0192 WacomPen - ok 18:53:56.0102 0192 WANARP (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys 18:53:56.0226 0192 WANARP - ok 18:53:56.0226 0192 Wanarpv6 (3c3c78515f5ab448b022bdf5b8ffdd2e) C:\windows\system32\DRIVERS\wanarp.sys 18:53:56.0320 0192 Wanarpv6 - ok 18:53:56.0507 0192 WatAdminSvc (353a04c273ec58475d8633e75ccd5604) C:\windows\system32\Wat\WatAdminSvc.exe 18:53:56.0601 0192 WatAdminSvc - ok 18:53:56.0850 0192 wbengine (691e3285e53dca558e1a84667f13e15a) C:\windows\system32\wbengine.exe 18:53:56.0991 0192 wbengine - ok 18:53:57.0038 0192 WbioSrvc (9614b5d29dc76ac3c29f6d2d3aa70e67) C:\windows\System32\wbiosrvc.dll 18:53:57.0147 0192 WbioSrvc - ok 18:53:57.0194 0192 wcncsvc (34eee0dfaadb4f691d6d5308a51315dc) C:\windows\System32\wcncsvc.dll 18:53:57.0350 0192 wcncsvc - ok 18:53:57.0365 0192 WcsPlugInService (5d930b6357a6d2af4d7653bdabbf352f) C:\windows\System32\WcsPlugInService.dll 18:53:57.0459 0192 WcsPlugInService - ok 18:53:57.0521 0192 Wd (1112a9badacb47b7c0bb0392e3158dff) C:\windows\system32\DRIVERS\wd.sys 18:53:57.0568 0192 Wd - ok 18:53:57.0630 0192 Wdf01000 (9950e3d0f08141c7e89e64456ae7dc73) C:\windows\system32\drivers\Wdf01000.sys 18:53:57.0662 0192 Wdf01000 - ok 18:53:57.0677 0192 WdiServiceHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll 18:53:57.0786 0192 WdiServiceHost - ok 18:53:57.0786 0192 WdiSystemHost (46ef9dc96265fd0b423db72e7c38c2a5) C:\windows\system32\wdi.dll 18:53:57.0864 0192 WdiSystemHost - ok 18:53:57.0896 0192 WebClient (a9d880f97530d5b8fee278923349929d) C:\windows\System32\webclnt.dll 18:53:58.0020 0192 WebClient - ok 18:53:58.0052 0192 Wecsvc (760f0afe937a77cff27153206534f275) C:\windows\system32\wecsvc.dll 18:53:58.0145 0192 Wecsvc - ok 18:53:58.0176 0192 wercplsupport (ac804569bb2364fb6017370258a4091b) C:\windows\System32\wercplsupport.dll 18:53:58.0301 0192 wercplsupport - ok 18:53:58.0332 0192 WerSvc (08e420d873e4fd85241ee2421b02c4a4) C:\windows\System32\WerSvc.dll 18:53:58.0395 0192 WerSvc - ok 18:53:58.0426 0192 WfpLwf (8b9a943f3b53861f2bfaf6c186168f79) C:\windows\system32\DRIVERS\wfplwf.sys 18:53:58.0582 0192 WfpLwf - ok 18:53:58.0691 0192 WIMMount (5cf95b35e59e2a38023836fff31be64c) C:\windows\system32\drivers\wimmount.sys 18:53:58.0832 0192 WIMMount - ok 18:53:59.0003 0192 WinDefend (3fae8f94296001c32eab62cd7d82e0fd) C:\Program Files\Windows Defender\mpsvc.dll 18:53:59.0190 0192 WinDefend - ok 18:53:59.0206 0192 WinHttpAutoProxySvc - ok 18:53:59.0268 0192 Winmgmt (f62e510b6ad4c21eb9fe8668ed251826) C:\windows\system32\wbem\WMIsvc.dll 18:53:59.0440 0192 Winmgmt - ok 18:53:59.0596 0192 WinRM (1b91cd34ea3a90ab6a4ef0550174f4cc) C:\windows\system32\WsmSvc.dll 18:53:59.0768 0192 WinRM - ok 18:53:59.0861 0192 WinUsb (a67e5f9a400f3bd1be3d80613b45f708) C:\windows\system32\DRIVERS\WinUsb.sys 18:54:00.0048 0192 WinUsb - ok 18:54:00.0158 0192 Wlansvc (16935c98ff639d185086a3529b1f2067) C:\windows\System32\wlansvc.dll 18:54:00.0298 0192 Wlansvc - ok 18:54:00.0563 0192 wlidsvc (fb01d4ae207b9efdbabfc55dc95c7e31) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE 18:54:00.0766 0192 wlidsvc - ok 18:54:00.0906 0192 WmiAcpi (0217679b8fca58714c3bf2726d2ca84e) C:\windows\system32\drivers\wmiacpi.sys 18:54:01.0125 0192 WmiAcpi - ok 18:54:01.0187 0192 wmiApSrv (6eb6b66517b048d87dc1856ddf1f4c3f) C:\windows\system32\wbem\WmiApSrv.exe 18:54:01.0406 0192 wmiApSrv - ok 18:54:01.0608 0192 WMPNetworkSvc (3b40d3a61aa8c21b88ae57c58ab3122e) C:\Program Files\Windows Media Player\wmpnetwk.exe 18:54:01.0796 0192 WMPNetworkSvc - ok 18:54:01.0827 0192 WPCSvc (a2f0ec770a92f2b3f9de6d518e11409c) C:\windows\System32\wpcsvc.dll 18:54:01.0983 0192 WPCSvc - ok 18:54:02.0014 0192 WPDBusEnum (aa53356d60af47eacc85bc617a4f3f66) C:\windows\system32\wpdbusenum.dll 18:54:02.0139 0192 WPDBusEnum - ok 18:54:02.0186 0192 ws2ifsl (6db3276587b853bf886b69528fdb048c) C:\windows\system32\drivers\ws2ifsl.sys 18:54:02.0295 0192 ws2ifsl - ok 18:54:02.0310 0192 wscsvc (6f5d49efe0e7164e03ae773a3fe25340) C:\windows\System32\wscsvc.dll 18:54:02.0466 0192 wscsvc - ok 18:54:02.0482 0192 WSearch - ok 18:54:02.0716 0192 wuauserv (3026418a50c5b4761befa632cedb7406) C:\windows\system32\wuaueng.dll 18:54:02.0872 0192 wuauserv - ok 18:54:03.0028 0192 WudfPf (e714a1c0354636837e20ccbf00888ee7) C:\windows\system32\drivers\WudfPf.sys 18:54:03.0122 0192 WudfPf - ok 18:54:03.0168 0192 WUDFRd (1023ee888c9b47178c5293ed5336ab69) C:\windows\system32\DRIVERS\WUDFRd.sys 18:54:03.0340 0192 WUDFRd - ok 18:54:03.0402 0192 wudfsvc (8d1e1e529a2c9e9b6a85b55a345f7629) C:\windows\System32\WUDFSvc.dll 18:54:03.0558 0192 wudfsvc - ok 18:54:03.0605 0192 WwanSvc (ff2d745b560f7c71b31f30f4d49f73d2) C:\windows\System32\wwansvc.dll 18:54:03.0761 0192 WwanSvc - ok 18:54:03.0792 0192 MBR (0x1B8) (5b5e648d12fcadc244c1ec30318e1eb9) \Device\Harddisk0\DR0 18:54:03.0948 0192 \Device\Harddisk0\DR0 - ok 18:54:03.0980 0192 Boot (0x1200) (fe2709e968e42d5ccbb7cdfce56d8f47) \Device\Harddisk0\DR0\Partition0 18:54:03.0980 0192 \Device\Harddisk0\DR0\Partition0 - ok 18:54:03.0980 0192 ============================================================ 18:54:03.0980 0192 Scan finished 18:54:03.0980 0192 ============================================================ 18:54:03.0995 5168 Detected object count: 1 18:54:03.0995 5168 Actual detected object count: 1 18:55:05.0568 5168 USBAAPL ( UnsignedFile.Multi.Generic ) - skipped by user 18:55:05.0568 5168 USBAAPL ( UnsignedFile.Multi.Generic ) - User select action: Skip 18:56:00.0045 5456 Deinitialize success

I realised that I didn't do the OTL scan afterwards. I've run it and here's the log file.

OTL logfile created on: 5/8/2012 6:31:06 PM - Run 2
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Users\Denga\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

2.87 Gb Total Physical Memory | 1.90 Gb Available Physical Memory | 66.04% Memory free
5.75 Gb Paging File | 4.57 Gb Available in Paging File | 79.57% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 286.42 Gb Total Space | 245.17 Gb Free Space | 85.60% Space Free | Partition Type: NTFS

Computer Name: DENGA | User Name: Denga | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Denga\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
PRC - C:\totalcmd\TOTALCMD.EXE (Ghisler Software GmbH)
PRC - C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TECO\TEco.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe (TOSHIBA CORPORATION)
PRC - C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe (TOSHIBA Corporation)
PRC - C:\Program Files\LSI SoftModem\agrsmsvc.exe (LSI Corporation)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)
PRC - C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)


========== Modules (No Company Name) ==========

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\507b4ca18da9d2fde2e51a1f04593443\System.Web.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\262285b3d0afafc5059f3fe9be69bff5\System.Windows.Forms.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8177623eac8f15cf95b587625439eac7\System.Drawing.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a1c4a635721f85bef0ea4194b888b871\System.Runtime.Remoting.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38831__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38814__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38880__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38822__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38863__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38867__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38828__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38823__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38923__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38875__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38861__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38860__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38819__90ba9c70f846762e\CLI.Component.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38827__90ba9c70f846762e\CLI.Component.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38894__90ba9c70f846762e\MOM.Implementation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38892__90ba9c70f846762e\LOG.Foundation.Implementation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38813__90ba9c70f846762e\CLI.Component.SkinFactory.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38812__90ba9c70f846762e\CLI.Component.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38904__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38810__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll ()
MOD - C:\windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38811__90ba9c70f846762e\APM.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38810__90ba9c70f846762e\AEM.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38893__90ba9c70f846762e\CCC.Implementation.dll ()
MOD - C:\totalcmd\UNRAR.DLL ()
MOD - C:\totalcmd\WCMZIP32.DLL ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll ()
MOD - C:\Program Files\TOSHIBA\TBS\NotifyTBS.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll ()
MOD - C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll ()
MOD - C:\Program Files\TOSHIBA\PCDiag\NotifyPCD.dll ()


========== Win32 Services (SafeList) ==========

SRV - (MozillaMaintenance) – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (WatAdminSvc) – C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (AVP) – C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
SRV - (TMachInfo) – C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (TOSHIBA Corporation)
SRV - (TOSHIBA eco Utility Service) – C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA Corporation)
SRV - (cfWiMAXService) – C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION)
SRV - (TPCHSrv) – C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation)
SRV - (TosCoSrv) – C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
SRV - (TOSHIBA HDD SSD Alert Service) – C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation)
SRV - (AMD External Events Utility) – C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (TODDSrv) – C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (RSELSVC) – C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe (TOSHIBA Corporation)
SRV - (GameConsoleService) – C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (AgereModemAudio) – C:\Program Files\LSI SoftModem\agrsmsvc.exe (LSI Corporation)
SRV - (ConfigFree Service) – C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
SRV - (BcmSqlStartupSvc) – C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (USBCCID) – system32\DRIVERS\RtsUCcid.sys File not found
DRV - (RtsUIR) – system32\DRIVERS\Rts516xIR.sys File not found
DRV - (RSUSBSTOR) – System32\Drivers\RtsUStor.sys File not found
DRV - (TsUsbFlt) – C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (KLIF) – C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (kl2) – C:\Windows\System32\drivers\kl2.sys (Kaspersky Lab ZAO)
DRV - (KL1) – C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (KLIM6) – C:\Windows\System32\drivers\klim6.sys (Kaspersky Lab ZAO)
DRV - (klmouflt) – C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (RTL8187Se) – C:\Windows\System32\drivers\RTL8187Se.sys (Realtek Semiconductor Corporation )
DRV - (tdcmdpst) – C:\Windows\System32\drivers\tdcmdpst.sys (TOSHIBA Corporation.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (tos_sps32) – C:\Windows\System32\drivers\tos_sps32.sys (TOSHIBA Corporation)
DRV - (AgereSoftModem) – C:\Windows\System32\drivers\AGRSM.sys (LSI Corporation)
DRV - (TVALZ) – C:\Windows\System32\drivers\TVALZ_O.SYS (TOSHIBA Corporation)
DRV - (vwifimp) – C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (LPCFilter) – C:\Windows\System32\drivers\LPCFilter.sys (COMPAL ELECTRONIC INC.)
DRV - (PGEffect) – C:\Windows\System32\drivers\PGEffect.sys (TOSHIBA Corporation)
DRV - (TVALZFL) – C:\Windows\System32\drivers\TVALZFL.sys (TOSHIBA Corporation)
DRV - (AtiPcie) AMD PCI Express (3GIO) – C:\Windows\System32\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7TSAU

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…1I7TSAU_enAU388
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:blank"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/05/03 17:23:12 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/12/09 21:16:38 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2010/08/18 13:41:20 | 000,000,000 | —D | M]

[2010/07/15 07:55:22 | 000,000,000 | —D | M] (No name found) – C:\Users\Denga\AppData\Roaming\Mozilla\Extensions
[2012/05/08 17:00:27 | 000,000,000 | —D | M] (No name found) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions
[2012/03/14 05:43:08 | 000,000,000 | —D | M] ("Xmarks") – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\[removed]
[2012/05/03 17:26:31 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/08/18 13:42:06 | 000,000,000 | —D | M] (Anti-Banner) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2010/08/18 13:42:04 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2012/05/03 17:23:11 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/04/05 19:41:17 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/05/03 17:23:04 | 000,001,525 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2012/02/27 21:07:26 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/05/03 17:23:04 | 000,000,935 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2012/05/03 17:23:04 | 000,001,166 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2012/05/03 17:23:12 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml
[2012/05/03 17:23:04 | 000,001,121 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

O1 HOSTS File: ([2009/06/11 05:39:37 | 000,000,824 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)
O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [SmartFaceVWatcher] C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatcher.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [Teco] C:\Program Files\TOSHIBA\TECO\Teco.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosNC] C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosReelTimeMonitor] C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosWaitSrv] C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TWebCamera] C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
O4 - Startup: C:\Users\Denga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Jewel%20Quest%20Mysteries%20-%20The%20Seventh%20Gate%20Collector's%20Edition/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialo…osoft/wrc32.ocx (WRC Class)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Dream%20Inn%20-%20Driftwood/Images/armhelper.ocx (ArmHelper Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E2A94E7E-6C8D-4529-8835-B662394D565C}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EDF2AD7D-4EBF-4FF7-863E-3EC18DA707A8}: DhcpNameServer = 10.0.0.138
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mzvkbd3.dll (Kaspersky Lab ZAO)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\kloehk.dll (Kaspersky Lab ZAO)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\klogon: DllName - (C:\windows\system32\klogon.dll) - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 05:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/05/08 16:21:13 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B9678CFD-879B-4E82-8543-2487D1BD1497}
[2012/05/08 16:21:00 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{41CFD5AD-5DFB-41FA-ACA6-8DB0060975CB}
[2012/05/07 19:10:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B1923C2D-5CB0-4B34-8C49-6BFCD1FDE348}
[2012/05/07 19:09:55 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DEDEFACE-20E9-410A-840D-37FBEC2B9D9C}
[2012/05/07 19:02:57 | 000,000,000 | —D | C] – C:\_OTL
[2012/05/07 19:00:39 | 000,000,000 | —D | C] – C:\windows\ERDNT
[2012/05/07 18:59:37 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2012/05/07 18:59:37 | 000,000,000 | —D | C] – C:\Program Files\ERUNT
[2012/05/07 16:38:20 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{387E30C1-663C-40DE-9A89-E15A065E72A9}
[2012/05/07 16:37:58 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{9FE5B1FF-279E-43D0-9C32-C11585EA7935}
[2012/05/06 22:44:06 | 004,731,392 | —- | C] (AVAST Software) – C:\Users\Denga\Desktop\aswMBR.exe
[2012/05/06 22:39:50 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{48EB5EE5-3EAF-46FD-80C4-CCBF5DA206AE}
[2012/05/06 22:39:32 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{247B569D-DF33-4369-83DA-5D7C7CA075F2}
[2012/05/06 14:23:44 | 000,595,456 | —- | C] (OldTimer Tools) – C:\Users\Denga\Desktop\OTL.exe
[2012/05/06 08:19:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{7D3BA413-E4FA-4225-AA51-72D0880EF9F5}
[2012/05/06 08:19:43 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{68B73191-28A3-4808-AE67-EA30AEFF8E3F}
[2012/05/05 08:28:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A5259A30-2B9D-46DA-B76B-1C0F52291D38}
[2012/05/05 08:27:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2410DECA-07F8-430D-BCDE-868AB87F3DE9}
[2012/05/04 15:51:09 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DEA9D97A-9371-44F2-84DB-EF44C507C1D4}
[2012/05/04 15:50:51 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A1AFD265-480D-4DAE-A94E-0226EA38CE65}
[2012/05/04 05:44:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3ABC95D7-07F8-4753-867E-D1B7CC39BF71}
[2012/05/04 05:43:59 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{AFE288EF-095C-43C3-9BB6-63BFEB9947C6}
[2012/05/03 17:26:59 | 000,000,000 | —D | C] – C:\ProgramData\Mozilla
[2012/05/03 17:26:52 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Maintenance Service
[2012/05/03 16:54:31 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{CE30DE96-6711-41CF-A325-DC79DCB9E044}
[2012/05/03 16:54:13 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{764D686A-AADC-4774-A2BD-FAED085E7DA0}
[2012/05/03 05:54:08 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DADE0297-D635-4A20-B35F-BC39FBAE1543}
[2012/05/03 05:53:53 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E787E59D-BC40-4980-891B-6FCBFABF6856}
[2012/05/02 17:02:06 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2FBC31AC-ACD1-46B5-8111-EF842CBC614D}
[2012/05/02 17:01:49 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3FB2C1A8-5F44-4590-B8B4-B27796A9D1F5}
[2012/05/02 05:26:26 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{59E4C892-EC52-4C00-92D5-F7B225624BB5}
[2012/05/02 05:26:14 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C946DE55-AEEC-4012-A02B-D2E832D6F6B8}
[2012/05/01 16:13:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{08C8BB7D-0E29-4822-B8AA-E37D9061E825}
[2012/05/01 16:12:58 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3C4C3056-137F-47EA-B12B-F3E22D763340}
[2012/05/01 05:51:36 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{78553350-144A-45F0-91CD-69B908DBE18E}
[2012/05/01 05:51:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{4EA5F9DF-F5D5-4BE3-93E8-62DD8E34BA48}
[2012/04/30 16:39:09 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{013311D5-FCA3-41A8-BA17-00DCB6280DF1}
[2012/04/30 16:38:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E692596B-6435-4C6C-824D-8961DE5F10A7}
[2012/04/29 08:50:15 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{09B0AE8F-A423-444D-A7BB-0DDA13E454AE}
[2012/04/29 08:49:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{4B49B7B6-D2EA-4B9A-8BAA-E221F638EE80}
[2012/04/28 07:01:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{6BB667C1-D6C7-4CD6-82B5-FF9E8109A139}
[2012/04/28 07:00:49 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{266592E4-AEB8-485A-B3DE-3DB75E9E6D77}
[2012/04/27 16:18:45 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1730BA28-5E49-411A-B8EE-328FA634D3F4}
[2012/04/27 16:18:32 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DE1EA5DD-10A5-4E20-86AB-18BE68DC1E5C}
[2012/04/27 05:24:39 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C8AFD88A-2632-4CBE-B008-6EFB1F0391B8}
[2012/04/27 05:24:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DC3682A4-FCF0-48A8-9CAE-496BC06016A1}
[2012/04/26 18:52:35 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C4E78DEE-E815-4224-9DBF-7AE478BD78A0}
[2012/04/26 18:52:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{755F0A00-9ED5-4496-A72D-5D91EE156EDD}
[2012/04/26 05:59:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B2D4E0A8-7375-4D1C-9276-F2BFD24F2248}
[2012/04/26 05:58:44 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{0E75EDB5-6431-4539-9E4A-DA0AE4100F01}
[2012/04/25 06:44:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{F3A85FBC-7D4A-4342-953B-BCA1D5C92532}
[2012/04/25 06:44:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{10847AB6-C6E6-4492-BACC-38B8B194FFC3}
[2012/04/24 16:26:28 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3F32746D-F72F-4E52-9B8E-7553F351FD26}
[2012/04/24 16:26:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1AB77C07-BF8F-4262-A2EE-BDA9FE49AFB5}
[2012/04/24 05:41:01 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{15AFD5BD-4197-44EF-AC0B-21DE56F1547E}
[2012/04/24 05:40:25 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8DF13A70-B80E-42BB-B89C-13DCC0B938DC}
[2012/04/23 15:52:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2A69D7E8-FA97-4C4C-AD00-D350178BC7AD}
[2012/04/23 15:51:50 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{21DA24FD-0BF8-4932-9ED4-045D6F1E27D3}
[2012/04/22 17:40:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{D2FED567-41EC-46BF-AB49-02E2DEF0A2E8}
[2012/04/22 17:40:19 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8AE55C7D-D4AC-4A7E-9220-96C31B9B63B4}
[2012/04/20 06:00:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A3C8FC74-C68C-43E5-933F-3E434B007C51}
[2012/04/20 05:59:58 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{409DF24A-DCF8-4A57-803F-B0661A958BFA}
[2012/04/18 17:37:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B4EC3551-4CA9-4328-89D4-BF2741A8AA8D}
[2012/04/18 17:37:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3094E139-40DC-4163-8EB5-DCD95546243D}
[2012/04/18 14:43:51 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C4F03A4C-EAFA-49DC-9B63-BBC7D2148213}
[2012/04/18 14:43:32 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B62EF05C-4973-4E7C-89D6-4603AC06FFBD}
[2012/04/18 11:57:50 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E8ECDBF5-555D-481C-9515-8750CC02A04F}
[2012/04/18 11:57:29 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8D80D9BD-C482-47DC-A7EE-11769F5022F4}
[2012/04/17 21:27:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/04/17 21:26:03 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2012/04/17 21:26:02 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2012/04/17 17:22:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{5CB05B77-C54B-4B60-BF0F-3E6ADAA3363D}
[2012/04/17 17:21:55 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{820FBE8E-8215-4753-B09E-8B4CAF0CC3C7}
[2012/04/17 05:51:35 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{6E15E341-08BC-4283-AFF6-633E448BD640}
[2012/04/17 05:51:06 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8FA49671-7EED-4BD8-AF5A-D83DE516CE4A}
[2012/04/16 05:31:02 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A44D8195-E954-4E3D-B470-A971A40E26BF}
[2012/04/16 05:30:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{D96D5F24-F5D9-45B1-871C-49028A58C582}
[2012/04/15 06:12:36 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E59957EC-2A72-4605-98CB-03E1A8D566B4}
[2012/04/15 06:12:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3360BADB-A9DE-477F-ADBA-FA5702320C8B}
[2012/04/14 08:21:19 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{7765F57A-5829-4F9B-A422-218DD3C6C001}
[2012/04/14 08:20:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E7BA213D-A8BB-470A-AC41-FD769B46CA3F}
[2012/04/13 05:38:10 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E54E18B4-8FA9-4852-AC5E-C87AC52EDA55}
[2012/04/13 05:37:52 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{9B1D3589-DADC-4322-BBF6-6185735F5ACA}
[2012/04/12 20:19:55 | 003,968,368 | —- | C] (Microsoft Corporation) – C:\windows\System32\ntkrnlpa.exe
[2012/04/12 20:19:55 | 003,913,072 | —- | C] (Microsoft Corporation) – C:\windows\System32\ntoskrnl.exe
[2012/04/12 17:15:16 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\windows\System32\msfeeds.dll
[2012/04/12 17:15:16 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\windows\System32\ieui.dll
[2012/04/12 17:15:11 | 001,638,912 | —- | C] (Microsoft Corporation) – C:\windows\System32\mshtml.tlb
[2012/04/12 17:15:11 | 000,132,096 | —- | C] (Microsoft Corporation) – C:\windows\System32\url.dll
[2012/04/12 17:15:11 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\windows\System32\jsproxy.dll
[2012/04/12 05:41:10 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{80DDBA6A-F244-46F5-ABE3-64B7914B0565}
[2012/04/12 05:40:54 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{AD0E9592-424F-4B7F-8CFC-D63ED390DCEE}
[2012/04/11 05:40:33 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{7BC80FB7-C1E0-42EC-AA48-7D7C7742E5E1}
[2012/04/11 05:40:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{15C5B07D-CAAC-44E8-9BCB-4897C74510CB}
[2012/04/10 20:43:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{FBB2EF3D-1B35-4BCA-9988-141E551950E7}
[2012/04/10 20:43:42 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{89E3DEA0-FCDE-487C-8B37-F3519521C6D0}
[2012/04/10 08:11:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{75E2C35E-FC0E-4DBA-9FDA-E7AA4C7B4661}
[2012/04/10 08:11:29 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{55265642-A77D-4F5E-81C2-91AFD48222DF}
[2012/04/09 07:05:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{EDD48B50-93D3-49E4-A7CF-C9EF047527DA}
[2012/04/09 07:04:54 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1018C32A-E013-4521-9891-231653A49504}

========== Files - Modified Within 30 Days ==========

[2012/05/08 19:21:12 | 000,000,830 | —- | M] () – C:\windows\tasks\Adobe Flash Player Updater.job
[2012/05/08 19:08:06 | 000,000,886 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/08 17:08:09 | 000,000,882 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/08 16:25:21 | 000,016,304 | -H– | M] () – C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/05/08 16:25:21 | 000,016,304 | -H– | M] () – C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/05/08 16:17:20 | 000,067,584 | –S- | M] () – C:\windows\bootstat.dat
[2012/05/08 16:17:15 | 2313,965,568 | -HS- | M] () – C:\hiberfil.sys
[2012/05/07 18:59:54 | 000,001,115 | —- | M] () – C:\Users\Denga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/05/07 18:59:37 | 000,000,935 | —- | M] () – C:\Users\Denga\Desktop\NTREGOPT.lnk
[2012/05/07 18:59:37 | 000,000,916 | —- | M] () – C:\Users\Denga\Desktop\ERUNT.lnk
[2012/05/07 05:54:29 | 000,000,512 | —- | M] () – C:\Users\Denga\Desktop\MBR.dat
[2012/05/06 22:44:43 | 004,731,392 | —- | M] (AVAST Software) – C:\Users\Denga\Desktop\aswMBR.exe
[2012/05/06 14:22:30 | 000,595,456 | —- | M] (OldTimer Tools) – C:\Users\Denga\Desktop\OTL.exe
[2012/04/17 21:27:46 | 000,001,794 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk
[2012/04/12 20:28:22 | 000,709,658 | —- | M] () – C:\windows\System32\perfh009.dat
[2012/04/12 20:28:22 | 000,141,786 | —- | M] () – C:\windows\System32\perfc009.dat

========== Files Created - No Company Name ==========

[2012/05/07 18:59:54 | 000,001,115 | —- | C] () – C:\Users\Denga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/05/07 18:59:37 | 000,000,935 | —- | C] () – C:\Users\Denga\Desktop\NTREGOPT.lnk
[2012/05/07 18:59:37 | 000,000,916 | —- | C] () – C:\Users\Denga\Desktop\ERUNT.lnk
[2012/05/07 05:54:29 | 000,000,512 | —- | C] () – C:\Users\Denga\Desktop\MBR.dat
[2012/04/17 21:27:46 | 000,001,794 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2012/01/19 06:59:38 | 000,000,088 | —- | C] () – C:\windows\Ejigman2.ini
[2012/01/19 06:53:36 | 000,000,088 | —- | C] () – C:\windows\Mbwp.ini
[2011/08/27 09:20:25 | 000,000,064 | —- | C] () – C:\windows\GPlrLanc.dat
[2010/08/18 13:41:57 | 000,115,369 | —- | C] () – C:\windows\System32\drivers\klin.dat
[2010/08/18 13:41:57 | 000,097,961 | —- | C] () – C:\windows\System32\drivers\klick.dat
[2010/05/18 05:50:52 | 000,000,000 | —- | C] () – C:\windows\NDSTray.INI
[2010/05/18 05:28:13 | 000,073,728 | —- | C] () – C:\windows\System32\RtNicProp32.dll
[2010/05/18 05:26:09 | 000,000,520 | —- | C] () – C:\windows\System32\drivers\RTEQEX1.dat
[2010/05/18 05:26:09 | 000,000,520 | —- | C] () – C:\windows\System32\drivers\RTEQEX0.dat
[2010/05/18 05:21:27 | 000,000,000 | —- | C] () – C:\windows\ativpsrm.bin
[2010/05/18 05:19:18 | 000,197,654 | —- | C] () – C:\windows\System32\atiicdxx.dat
[2010/05/18 05:16:22 | 000,045,056 | —- | C] () – C:\windows\System32\HWS_Ctrl.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:C63E7DE2
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:389F7E97
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:2C91353A
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:ADE2C1A6
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:77A023CE
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:F57D2F43
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:98DFF516
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:3B5038B1

< End of report >

Hi,

I ran the OTL fix with the parameters supplied. It took nearly forever to complete. It was started early evening and had to leave it run overnight to complete. There was an error message box stating it could not create or modify (can't remember which now) the HOSTS file. This is the file that was created afterwards


Files\Folders moved on Reboot…
File\Folder C:\windows\temp\kls1D2.tmp not found!
File\Folder C:\windows\System32\drivers\etc\Hosts not found!

Registry entries deleted on Reboot…

I then ran an OTL scan and here is the log file from that

OTL logfile created on: 5/11/2012 5:55:03 AM - Run 3
OTL by OldTimer - Version 3.2.42.2 Folder = C:\Users\Denga\Desktop
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000409 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

2.87 Gb Total Physical Memory | 1.78 Gb Available Physical Memory | 62.02% Memory free
5.75 Gb Paging File | 4.49 Gb Available in Paging File | 78.21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
Drive C: | 286.42 Gb Total Space | 245.21 Gb Free Space | 85.61% Space Free | Partition Type: NTFS

Computer Name: DENGA | User Name: Denga | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Denga\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
PRC - C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TECO\TEco.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe (TOSHIBA CORPORATION)
PRC - C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
PRC - C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe (TOSHIBA Corporation)
PRC - C:\Program Files\LSI SoftModem\agrsmsvc.exe (LSI Corporation)
PRC - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
PRC - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)
PRC - C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)


========== Modules (No Company Name) ==========

MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Web\1a690902e9a6293de228c16fab21e2f7\System.Web.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\03dee80574f4ec770b6f77ca030ded6c\System.Runtime.Remoting.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\90555968565afd59bce4b0974e9903bd\System.Windows.Forms.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\69f6e582cb79f107c61308b468c1a215\System.Drawing.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll ()
MOD - C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll ()
MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3497.38831__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3497.38814__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3497.38868__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3497.38880__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3497.38822__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3497.38863__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3497.38867__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3497.38899__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3497.38828__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3497.38823__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager2.Graphics.Dashboard\2.0.3497.38923__90ba9c70f846762e\CLI.Aspect.DisplaysManager2.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3497.38875__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3497.38833__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3497.38861__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3497.38855__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3497.38898__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3497.38837__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3497.38856__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3497.38860__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3497.38862__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3428.28302__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3428.28329__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3428.28311__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3428.28327__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3497.38819__90ba9c70f846762e\CLI.Component.Dashboard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3497.38827__90ba9c70f846762e\CLI.Component.Wizard.dll ()
MOD - C:\windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3497.38894__90ba9c70f846762e\MOM.Implementation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3428.28305__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3428.28298__90ba9c70f846762e\CLI.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3497.38892__90ba9c70f846762e\LOG.Foundation.Implementation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3428.28316__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3497.38813__90ba9c70f846762e\CLI.Component.SkinFactory.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3497.38812__90ba9c70f846762e\CLI.Component.Runtime.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3497.38904__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3428.28301__90ba9c70f846762e\CLI.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3428.28324__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3428.28315__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\LOG.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3428.28296__90ba9c70f846762e\LOG.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3428.28309__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3428.28297__90ba9c70f846762e\NEWAEM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3428.28354__90ba9c70f846762e\CLI.Foundation.XManifest.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3428.28323__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3428.28311__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3428.28311__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3428.28304__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3428.28314__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3428.28303__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3428.28310__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3428.28309__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3428.28302__90ba9c70f846762e\CLI.Component.Client.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\APM.Foundation\2.0.3428.28310__90ba9c70f846762e\APM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3428.28310__90ba9c70f846762e\MOM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3428.28324__90ba9c70f846762e\DEM.Graphics.dll ()
MOD - C:\windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3428.28303__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3428.28313__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3428.28312__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3428.28304__90ba9c70f846762e\AEM.Server.Shared.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3497.38810__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll ()
MOD - C:\windows\assembly\GAC_MSIL\APM.Server\2.0.3497.38811__90ba9c70f846762e\APM.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\AEM.Server\2.0.3497.38810__90ba9c70f846762e\AEM.Server.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3428.28308__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3428.28316__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll ()
MOD - C:\windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3497.38893__90ba9c70f846762e\CCC.Implementation.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll ()
MOD - C:\Program Files\TOSHIBA\TBS\NotifyTBS.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll ()
MOD - C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll ()
MOD - C:\Program Files\TOSHIBA\TOSHIBA Assist\NotifyX.dll ()
MOD - C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll ()
MOD - C:\Program Files\TOSHIBA\PCDiag\NotifyPCD.dll ()


========== Win32 Services (SafeList) ==========

SRV - (MozillaMaintenance) – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (WatAdminSvc) – C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (AVP) – C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
SRV - (TMachInfo) – C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (TOSHIBA Corporation)
SRV - (TOSHIBA eco Utility Service) – C:\Program Files\TOSHIBA\TECO\TecoService.exe (TOSHIBA Corporation)
SRV - (cfWiMAXService) – C:\Program Files\TOSHIBA\ConfigFree\CFIWmxSvcs.exe (TOSHIBA CORPORATION)
SRV - (TPCHSrv) – C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe (TOSHIBA Corporation)
SRV - (TosCoSrv) – C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe (TOSHIBA Corporation)
SRV - (TOSHIBA HDD SSD Alert Service) – C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe (TOSHIBA Corporation)
SRV - (AMD External Events Utility) – C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (TODDSrv) – C:\Windows\System32\TODDSrv.exe (TOSHIBA Corporation)
SRV - (SensrSvc) – C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (RSELSVC) – C:\Program Files\TOSHIBA\RSelect\RSelSvc.exe (TOSHIBA Corporation)
SRV - (GameConsoleService) – C:\Program Files\TOSHIBA Games\TOSHIBA Game Console\GameConsoleService.exe (WildTangent, Inc.)
SRV - (AgereModemAudio) – C:\Program Files\LSI SoftModem\agrsmsvc.exe (LSI Corporation)
SRV - (ConfigFree Service) – C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe (TOSHIBA CORPORATION)
SRV - (BcmSqlStartupSvc) – C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (USBCCID) – system32\DRIVERS\RtsUCcid.sys File not found
DRV - (RtsUIR) – system32\DRIVERS\Rts516xIR.sys File not found
DRV - (RSUSBSTOR) – System32\Drivers\RtsUStor.sys File not found
DRV - (TsUsbFlt) – C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) – C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (KLIF) – C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (kl2) – C:\Windows\System32\drivers\kl2.sys (Kaspersky Lab ZAO)
DRV - (KL1) – C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (KLIM6) – C:\Windows\System32\drivers\klim6.sys (Kaspersky Lab ZAO)
DRV - (klmouflt) – C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (RTL8187Se) – C:\Windows\System32\drivers\RTL8187Se.sys (Realtek Semiconductor Corporation )
DRV - (tdcmdpst) – C:\Windows\System32\drivers\tdcmdpst.sys (TOSHIBA Corporation.)
DRV - (atikmdag) – C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (tos_sps32) – C:\Windows\System32\drivers\tos_sps32.sys (TOSHIBA Corporation)
DRV - (AgereSoftModem) – C:\Windows\System32\drivers\AGRSM.sys (LSI Corporation)
DRV - (TVALZ) – C:\Windows\System32\drivers\TVALZ_O.SYS (TOSHIBA Corporation)
DRV - (vwifimp) – C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (LPCFilter) – C:\Windows\System32\drivers\LPCFilter.sys (COMPAL ELECTRONIC INC.)
DRV - (PGEffect) – C:\Windows\System32\drivers\PGEffect.sys (TOSHIBA Corporation)
DRV - (TVALZFL) – C:\Windows\System32\drivers\TVALZFL.sys (TOSHIBA Corporation)
DRV - (AtiPcie) AMD PCI Express (3GIO) – C:\Windows\System32\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…amp;rlz=1I7TSAU

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?br…U&bmod=TSAU
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&…1I7TSAU_enAU388
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "about:blank"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_2_202_228.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/05/03 17:23:12 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/12/09 21:16:38 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\THBExt [2010/08/18 13:41:20 | 000,000,000 | —D | M]

[2010/07/15 07:55:22 | 000,000,000 | —D | M] (No name found) – C:\Users\Denga\AppData\Roaming\Mozilla\Extensions
[2012/05/08 17:00:27 | 000,000,000 | —D | M] (No name found) – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions
[2012/03/14 05:43:08 | 000,000,000 | —D | M] ("Xmarks") – C:\Users\Denga\AppData\Roaming\Mozilla\Firefox\Profiles\sgokia19.default\extensions\[removed]
[2012/05/03 17:26:31 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2010/08/18 13:42:06 | 000,000,000 | —D | M] (Anti-Banner) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2010/08/18 13:42:04 | 000,000,000 | —D | M] (Kaspersky URL Advisor) – C:\Program Files\Mozilla Firefox\extensions\[removed]
[2012/05/03 17:23:11 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/04/05 19:41:17 | 000,476,904 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012/05/03 17:23:04 | 000,001,525 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2012/02/27 21:07:26 | 000,002,252 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012/05/03 17:23:04 | 000,000,935 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2012/05/03 17:23:04 | 000,001,166 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2012/05/03 17:23:12 | 000,002,040 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter.xml
[2012/05/03 17:23:04 | 000,001,121 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml

Hosts file not found
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.)
O4 - HKLM..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [SmartFaceVWatcher] C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatcher.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA CORPORATION)
O4 - HKLM..\Run: [Teco] C:\Program Files\TOSHIBA\TECO\Teco.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosNC] C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosReelTimeMonitor] C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TosWaitSrv] C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [TWebCamera] C:\Program Files\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.)
O4 - Startup: C:\Users\Denga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm ()
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Jewel%20Quest%20Mysteries%20-%20The%20Seventh%20Gate%20Collector's%20Edition/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialo…osoft/wrc32.ocx (WRC Class)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Dream%20Inn%20-%20Driftwood/Images/armhelper.ocx (ArmHelper Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E2A94E7E-6C8D-4529-8835-B662394D565C}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EDF2AD7D-4EBF-4FF7-863E-3EC18DA707A8}: DhcpNameServer = 10.0.0.138
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\mzvkbd3.dll (Kaspersky Lab ZAO)
O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\kloehk.dll (Kaspersky Lab ZAO)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\klogon: DllName - (C:\windows\system32\klogon.dll) - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 05:42:20 | 000,000,024 | —- | M] () - C:\autoexec.bat – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/05/11 05:51:23 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8A12531D-0CC6-4CA4-983B-D89B0C8CDC99}
[2012/05/11 05:51:11 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{03DFA9D0-08B5-4AF7-95B9-3EFD27A9A750}
[2012/05/11 03:08:13 | 000,000,000 | -HSD | C] – C:\Config.Msi
[2012/05/10 18:53:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{D55BF531-DBAD-4266-9EF1-85FD0865B5BD}
[2012/05/10 18:53:41 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{38234CA7-1534-48E6-BBEC-EF51433A8E33}
[2012/05/10 16:49:19 | 003,968,368 | —- | C] (Microsoft Corporation) – C:\windows\System32\ntkrnlpa.exe
[2012/05/10 16:49:18 | 003,913,072 | —- | C] (Microsoft Corporation) – C:\windows\System32\ntoskrnl.exe
[2012/05/10 16:49:17 | 002,343,424 | —- | C] (Microsoft Corporation) – C:\windows\System32\win32k.sys
[2012/05/10 16:49:06 | 001,077,248 | —- | C] (Microsoft Corporation) – C:\windows\System32\DWrite.dll
[2012/05/10 16:40:10 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{450109FD-0E8B-4DDB-AAB0-7621336DAC05}
[2012/05/10 16:39:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E89AD7D4-5156-444A-83A9-F2EFB33B5D12}
[2012/05/10 05:40:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1CF313CC-D16D-4D14-B51F-F0D33C333C4F}
[2012/05/10 05:40:00 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E7867996-E017-4F6C-9CEB-FF13B54CED42}
[2012/05/09 21:19:28 | 000,000,000 | —D | C] – C:\Program Files\ESET
[2012/05/09 21:18:34 | 002,322,184 | —- | C] (ESET) – C:\Users\Denga\Desktop\esetsmartinstaller_enu.exe
[2012/05/09 20:18:40 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Roaming\Malwarebytes
[2012/05/09 20:17:45 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/05/09 20:17:45 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/05/09 20:17:44 | 000,022,344 | —- | C] (Malwarebytes Corporation) – C:\windows\System32\drivers\mbam.sys
[2012/05/09 20:17:44 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/05/09 20:13:37 | 010,063,000 | —- | C] (Malwarebytes Corporation ) – C:\Users\Denga\Desktop\mbam-setup-1.61.0.1400.exe
[2012/05/09 05:43:00 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{9F61B771-3B4F-4E33-BB86-18D56EE381D7}
[2012/05/09 05:42:35 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E0F554F6-B8B0-44B1-9D44-4F6178AB5FF9}
[2012/05/08 21:56:11 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{68AC31F4-AF9B-4C9A-8966-D87D39F474D7}
[2012/05/08 21:55:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{BF655132-2398-434C-AF4E-B31C6517016C}
[2012/05/08 16:21:13 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B9678CFD-879B-4E82-8543-2487D1BD1497}
[2012/05/08 16:21:00 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{41CFD5AD-5DFB-41FA-ACA6-8DB0060975CB}
[2012/05/07 19:10:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B1923C2D-5CB0-4B34-8C49-6BFCD1FDE348}
[2012/05/07 19:09:55 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DEDEFACE-20E9-410A-840D-37FBEC2B9D9C}
[2012/05/07 19:02:57 | 000,000,000 | —D | C] – C:\_OTL
[2012/05/07 19:00:39 | 000,000,000 | —D | C] – C:\windows\ERDNT
[2012/05/07 18:59:37 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2012/05/07 18:59:37 | 000,000,000 | —D | C] – C:\Program Files\ERUNT
[2012/05/07 16:38:20 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{387E30C1-663C-40DE-9A89-E15A065E72A9}
[2012/05/07 16:37:58 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{9FE5B1FF-279E-43D0-9C32-C11585EA7935}
[2012/05/06 22:44:06 | 004,731,392 | —- | C] (AVAST Software) – C:\Users\Denga\Desktop\aswMBR.exe
[2012/05/06 22:39:50 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{48EB5EE5-3EAF-46FD-80C4-CCBF5DA206AE}
[2012/05/06 22:39:32 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{247B569D-DF33-4369-83DA-5D7C7CA075F2}
[2012/05/06 14:23:44 | 000,595,456 | —- | C] (OldTimer Tools) – C:\Users\Denga\Desktop\OTL.exe
[2012/05/06 08:19:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{7D3BA413-E4FA-4225-AA51-72D0880EF9F5}
[2012/05/06 08:19:43 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{68B73191-28A3-4808-AE67-EA30AEFF8E3F}
[2012/05/05 08:28:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A5259A30-2B9D-46DA-B76B-1C0F52291D38}
[2012/05/05 08:27:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2410DECA-07F8-430D-BCDE-868AB87F3DE9}
[2012/05/04 15:51:09 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DEA9D97A-9371-44F2-84DB-EF44C507C1D4}
[2012/05/04 15:50:51 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A1AFD265-480D-4DAE-A94E-0226EA38CE65}
[2012/05/04 05:44:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3ABC95D7-07F8-4753-867E-D1B7CC39BF71}
[2012/05/04 05:43:59 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{AFE288EF-095C-43C3-9BB6-63BFEB9947C6}
[2012/05/03 17:26:59 | 000,000,000 | —D | C] – C:\ProgramData\Mozilla
[2012/05/03 17:26:52 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Maintenance Service
[2012/05/03 16:54:31 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{CE30DE96-6711-41CF-A325-DC79DCB9E044}
[2012/05/03 16:54:13 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{764D686A-AADC-4774-A2BD-FAED085E7DA0}
[2012/05/03 05:54:08 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DADE0297-D635-4A20-B35F-BC39FBAE1543}
[2012/05/03 05:53:53 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E787E59D-BC40-4980-891B-6FCBFABF6856}
[2012/05/02 17:02:06 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2FBC31AC-ACD1-46B5-8111-EF842CBC614D}
[2012/05/02 17:01:49 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3FB2C1A8-5F44-4590-B8B4-B27796A9D1F5}
[2012/05/02 05:26:26 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{59E4C892-EC52-4C00-92D5-F7B225624BB5}
[2012/05/02 05:26:14 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C946DE55-AEEC-4012-A02B-D2E832D6F6B8}
[2012/05/01 16:13:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{08C8BB7D-0E29-4822-B8AA-E37D9061E825}
[2012/05/01 16:12:58 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3C4C3056-137F-47EA-B12B-F3E22D763340}
[2012/05/01 05:51:36 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{78553350-144A-45F0-91CD-69B908DBE18E}
[2012/05/01 05:51:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{4EA5F9DF-F5D5-4BE3-93E8-62DD8E34BA48}
[2012/04/30 16:39:09 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{013311D5-FCA3-41A8-BA17-00DCB6280DF1}
[2012/04/30 16:38:56 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E692596B-6435-4C6C-824D-8961DE5F10A7}
[2012/04/29 08:50:15 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{09B0AE8F-A423-444D-A7BB-0DDA13E454AE}
[2012/04/29 08:49:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{4B49B7B6-D2EA-4B9A-8BAA-E221F638EE80}
[2012/04/28 07:01:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{6BB667C1-D6C7-4CD6-82B5-FF9E8109A139}
[2012/04/28 07:00:49 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{266592E4-AEB8-485A-B3DE-3DB75E9E6D77}
[2012/04/27 16:18:45 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1730BA28-5E49-411A-B8EE-328FA634D3F4}
[2012/04/27 16:18:32 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DE1EA5DD-10A5-4E20-86AB-18BE68DC1E5C}
[2012/04/27 05:24:39 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C8AFD88A-2632-4CBE-B008-6EFB1F0391B8}
[2012/04/27 05:24:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{DC3682A4-FCF0-48A8-9CAE-496BC06016A1}
[2012/04/26 18:52:35 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C4E78DEE-E815-4224-9DBF-7AE478BD78A0}
[2012/04/26 18:52:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{755F0A00-9ED5-4496-A72D-5D91EE156EDD}
[2012/04/26 05:59:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B2D4E0A8-7375-4D1C-9276-F2BFD24F2248}
[2012/04/26 05:58:44 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{0E75EDB5-6431-4539-9E4A-DA0AE4100F01}
[2012/04/25 06:44:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{F3A85FBC-7D4A-4342-953B-BCA1D5C92532}
[2012/04/25 06:44:04 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{10847AB6-C6E6-4492-BACC-38B8B194FFC3}
[2012/04/24 16:26:28 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3F32746D-F72F-4E52-9B8E-7553F351FD26}
[2012/04/24 16:26:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{1AB77C07-BF8F-4262-A2EE-BDA9FE49AFB5}
[2012/04/24 05:41:01 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{15AFD5BD-4197-44EF-AC0B-21DE56F1547E}
[2012/04/24 05:40:25 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8DF13A70-B80E-42BB-B89C-13DCC0B938DC}
[2012/04/23 15:52:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{2A69D7E8-FA97-4C4C-AD00-D350178BC7AD}
[2012/04/23 15:51:50 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{21DA24FD-0BF8-4932-9ED4-045D6F1E27D3}
[2012/04/22 17:40:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{D2FED567-41EC-46BF-AB49-02E2DEF0A2E8}
[2012/04/22 17:40:19 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8AE55C7D-D4AC-4A7E-9220-96C31B9B63B4}
[2012/04/20 06:00:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A3C8FC74-C68C-43E5-933F-3E434B007C51}
[2012/04/20 05:59:58 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{409DF24A-DCF8-4A57-803F-B0661A958BFA}
[2012/04/18 17:37:17 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B4EC3551-4CA9-4328-89D4-BF2741A8AA8D}
[2012/04/18 17:37:03 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3094E139-40DC-4163-8EB5-DCD95546243D}
[2012/04/18 14:43:51 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{C4F03A4C-EAFA-49DC-9B63-BBC7D2148213}
[2012/04/18 14:43:32 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{B62EF05C-4973-4E7C-89D6-4603AC06FFBD}
[2012/04/18 11:57:50 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E8ECDBF5-555D-481C-9515-8750CC02A04F}
[2012/04/18 11:57:29 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8D80D9BD-C482-47DC-A7EE-11769F5022F4}
[2012/04/17 21:27:44 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/04/17 21:26:03 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2012/04/17 21:26:02 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2012/04/17 17:22:12 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{5CB05B77-C54B-4B60-BF0F-3E6ADAA3363D}
[2012/04/17 17:21:55 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{820FBE8E-8215-4753-B09E-8B4CAF0CC3C7}
[2012/04/17 05:51:35 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{6E15E341-08BC-4283-AFF6-633E448BD640}
[2012/04/17 05:51:06 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{8FA49671-7EED-4BD8-AF5A-D83DE516CE4A}
[2012/04/16 05:31:02 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{A44D8195-E954-4E3D-B470-A971A40E26BF}
[2012/04/16 05:30:48 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{D96D5F24-F5D9-45B1-871C-49028A58C582}
[2012/04/15 06:12:36 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E59957EC-2A72-4605-98CB-03E1A8D566B4}
[2012/04/15 06:12:21 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{3360BADB-A9DE-477F-ADBA-FA5702320C8B}
[2012/04/14 08:21:19 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{7765F57A-5829-4F9B-A422-218DD3C6C001}
[2012/04/14 08:20:57 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E7BA213D-A8BB-470A-AC41-FD769B46CA3F}
[2012/04/13 05:38:10 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{E54E18B4-8FA9-4852-AC5E-C87AC52EDA55}
[2012/04/13 05:37:52 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{9B1D3589-DADC-4322-BBF6-6185735F5ACA}
[2012/04/12 17:15:16 | 000,599,552 | —- | C] (Microsoft Corporation) – C:\windows\System32\msfeeds.dll
[2012/04/12 17:15:16 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\windows\System32\ieui.dll
[2012/04/12 17:15:11 | 001,638,912 | —- | C] (Microsoft Corporation) – C:\windows\System32\mshtml.tlb
[2012/04/12 17:15:11 | 000,132,096 | —- | C] (Microsoft Corporation) – C:\windows\System32\url.dll
[2012/04/12 17:15:11 | 000,048,128 | —- | C] (Microsoft Corporation) – C:\windows\System32\jsproxy.dll
[2012/04/12 05:41:10 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{80DDBA6A-F244-46F5-ABE3-64B7914B0565}
[2012/04/12 05:40:54 | 000,000,000 | —D | C] – C:\Users\Denga\AppData\Local\{AD0E9592-424F-4B7F-8CFC-D63ED390DCEE}

========== Files - Modified Within 30 Days ==========

[2012/05/11 06:21:14 | 000,000,830 | —- | M] () – C:\windows\tasks\Adobe Flash Player Updater.job
[2012/05/11 06:08:08 | 000,000,886 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/11 03:56:56 | 000,016,304 | -H– | M] () – C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/05/11 03:56:56 | 000,016,304 | -H– | M] () – C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/05/11 03:49:41 | 000,000,882 | —- | M] () – C:\windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/11 03:49:04 | 000,441,568 | —- | M] () – C:\windows\System32\FNTCACHE.DAT
[2012/05/11 03:48:57 | 000,067,584 | –S- | M] () – C:\windows\bootstat.dat
[2012/05/11 03:48:16 | 2313,965,568 | -HS- | M] () – C:\hiberfil.sys
[2012/05/11 03:21:55 | 000,709,658 | —- | M] () – C:\windows\System32\perfh009.dat
[2012/05/11 03:21:55 | 000,141,786 | —- | M] () – C:\windows\System32\perfc009.dat
[2012/05/09 21:17:50 | 002,322,184 | —- | M] (ESET) – C:\Users\Denga\Desktop\esetsmartinstaller_enu.exe
[2012/05/09 20:17:46 | 000,001,108 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/05/09 20:08:35 | 010,063,000 | —- | M] (Malwarebytes Corporation ) – C:\Users\Denga\Desktop\mbam-setup-1.61.0.1400.exe
[2012/05/07 18:59:54 | 000,001,115 | —- | M] () – C:\Users\Denga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/05/07 18:59:37 | 000,000,935 | —- | M] () – C:\Users\Denga\Desktop\NTREGOPT.lnk
[2012/05/07 18:59:37 | 000,000,916 | —- | M] () – C:\Users\Denga\Desktop\ERUNT.lnk
[2012/05/07 05:54:29 | 000,000,512 | —- | M] () – C:\Users\Denga\Desktop\MBR.dat
[2012/05/06 22:44:43 | 004,731,392 | —- | M] (AVAST Software) – C:\Users\Denga\Desktop\aswMBR.exe
[2012/05/06 14:22:30 | 000,595,456 | —- | M] (OldTimer Tools) – C:\Users\Denga\Desktop\OTL.exe
[2012/04/17 21:27:46 | 000,001,794 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk

========== Files Created - No Company Name ==========

[2012/05/09 20:17:46 | 000,001,108 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/05/07 18:59:54 | 000,001,115 | —- | C] () – C:\Users\Denga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ERUNT AutoBackup.lnk
[2012/05/07 18:59:37 | 000,000,935 | —- | C] () – C:\Users\Denga\Desktop\NTREGOPT.lnk
[2012/05/07 18:59:37 | 000,000,916 | —- | C] () – C:\Users\Denga\Desktop\ERUNT.lnk
[2012/05/07 05:54:29 | 000,000,512 | —- | C] () – C:\Users\Denga\Desktop\MBR.dat
[2012/04/17 21:27:46 | 000,001,794 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2012/01/19 06:59:38 | 000,000,088 | —- | C] () – C:\windows\Ejigman2.ini
[2012/01/19 06:53:36 | 000,000,088 | —- | C] () – C:\windows\Mbwp.ini
[2011/08/27 09:20:25 | 000,000,064 | —- | C] () – C:\windows\GPlrLanc.dat
[2010/08/18 13:41:57 | 000,115,369 | —- | C] () – C:\windows\System32\drivers\klin.dat
[2010/08/18 13:41:57 | 000,097,961 | —- | C] () – C:\windows\System32\drivers\klick.dat
[2010/05/18 05:50:52 | 000,000,000 | —- | C] () – C:\windows\NDSTray.INI
[2010/05/18 05:28:13 | 000,073,728 | —- | C] () – C:\windows\System32\RtNicProp32.dll
[2010/05/18 05:26:09 | 000,000,520 | —- | C] () – C:\windows\System32\drivers\RTEQEX1.dat
[2010/05/18 05:26:09 | 000,000,520 | —- | C] () – C:\windows\System32\drivers\RTEQEX0.dat
[2010/05/18 05:21:27 | 000,000,000 | —- | C] () – C:\windows\ativpsrm.bin
[2010/05/18 05:19:18 | 000,197,654 | —- | C] () – C:\windows\System32\atiicdxx.dat
[2010/05/18 05:16:22 | 000,045,056 | —- | C] () – C:\windows\System32\HWS_Ctrl.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 98 bytes -> C:\ProgramData\TEMP:C63E7DE2
@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:389F7E97
@Alternate Data Stream - 139 bytes -> C:\ProgramData\TEMP:2C91353A
@Alternate Data Stream - 138 bytes -> C:\ProgramData\TEMP:ADE2C1A6
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:77A023CE
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:F57D2F43
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:98DFF516
@Alternate Data Stream - 116 bytes -> C:\ProgramData\TEMP:3B5038B1

< End of report >