What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Infected Sony Laptop [Solved]

26 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Hello, The.txt document that you would like us to paste…we cannot find. Apologies. I could run the scan again (for the third time) and do a screen print of the results for you? We still have adverts in hotlinks by the way. Thanks for your time and patience!　
Post #17
You say that will be the third run. Why did you run it a second time?

Try this first:
  • click on Start and in the “Search” box type in ComboFix.txt
  • when it is found, right-click on it and choose Open
  • copy and paste it in your reply
If you still cant find it, as you have run it more than once, older logs are at c:\qoobox\combofix2.txt, c:\qoobox\ComboFix3.txt etc.
Post #19

there are no combofix.txt documents. is it because we didn`t run the scan in safe mode?

No, that makes no difference.

Please run CpmboFix again and post the log.
Post #20
YES!!! Finally I've done it! I'm so happy with it.
Here is the log.

omboFix 12-10-12.01 - Emi 2012/10/12 22:03:38.1.2 - x86
Running from: c:\users\[removed]\Desktop\デスクトップ\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Emi\GoToAssistDownloadHelper.exe
c:\windows\IsUn0411.exe
c:\windows\PFRO.log
c:\windows\system32\cnmF6AD.tmp
.
.
((((((((((((((((((((((((( Files Created from 2012-09-12 to 2012-10-12 )))))))))))))))))))))))))))))))
.
.
2012-10-12 21:18 . 2012-10-12 21:19 ——– d—–w- c:\users\Emi\AppData\Local\temp
2012-10-12 21:18 . 2012-10-12 21:18 ——– d—–w- c:\users\Default\AppData\Local\temp
2012-10-11 10:59 . 2012-10-11 10:59 ——– d—–w- c:\users\Emi\AppData\Roaming\Malwarebytes
2012-10-11 10:58 . 2012-10-11 10:58 ——– d—–w- c:\programdata\Malwarebytes
2012-10-11 10:58 . 2012-10-11 10:58 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2012-10-11 10:58 . 2012-09-07 16:04 22856 —-a-w- c:\windows\system32\drivers\mbam.sys
2012-10-09 15:40 . 2012-10-09 16:44 ——– d—–w- c:\programdata\Spybot - Search & Destroy
2012-10-09 15:40 . 2012-10-09 15:41 ——– d—–w- c:\program files\Spybot - Search & Destroy
2012-10-05 21:32 . 2012-10-05 21:32 ——– d—–w- c:\program files\SProtector
2012-10-05 21:31 . 2012-10-10 08:36 ——– d—–w- c:\programdata\ADDICT-THING
2012-10-05 20:52 . 2012-10-05 20:58 ——– d—–w- c:\users\Emi\dwhelper
2012-10-03 21:11 . 2012-10-03 21:11 ——– d—–w- c:\users\Emi\AppData\Local\Freecorder 6 Video
2012-10-03 21:10 . 2012-10-03 21:11 ——– d—–w- c:\users\Emi\AppData\Roaming\Freecorder 6 Video
2012-10-03 21:09 . 2012-10-03 21:09 ——– d—–w- c:\users\Emi\AppData\Local\Freecorder 6 Converter
2012-10-03 21:09 . 2012-10-03 21:09 ——– d—–w- c:\users\Emi\AppData\Roaming\Freecorder 6 Converter
2012-10-03 21:07 . 2012-10-03 21:07 ——– d—–w- c:\users\Emi\AppData\Local\Freecorder 6 Audio
2012-10-03 21:07 . 2012-10-03 21:07 ——– d—–w- c:\users\Emi\AppData\Roaming\Freecorder 6 Audio
2012-10-03 21:06 . 2012-10-03 21:10 ——– d—–w- c:\users\Emi\AppData\Local\Jaksta_Technologies_Pty_L
2012-10-03 21:00 . 2012-10-03 21:00 ——– d—–w- c:\program files\Applian Technologies
2012-10-03 19:03 . 2012-10-03 19:03 ——– d—–w- c:\users\Emi\AppData\Local\Abelssoft
2012-10-03 18:47 . 2009-11-08 17:55 99176 —-a-w- c:\windows\system32\PresentationHostProxy.dll
2012-10-03 18:47 . 2009-11-08 17:55 49472 —-a-w- c:\windows\system32\netfxperf.dll
2012-10-03 18:47 . 2009-11-08 17:55 297808 —-a-w- c:\windows\system32\mscoree.dll
2012-10-03 18:47 . 2009-11-08 17:55 295264 —-a-w- c:\windows\system32\PresentationHost.exe
2012-10-03 18:47 . 2009-11-08 17:55 1130824 —-a-w- c:\windows\system32\dfshim.dll
2012-09-23 18:59 . 2012-09-23 18:59 ——– d—–w- c:\users\Emi\AppData\Local\Unity
2012-09-15 11:15 . 2012-08-21 12:01 26840 —-a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2012-09-15 11:11 . 2012-09-15 11:11 ——– d—–w- c:\program files\iPod
2012-09-15 11:11 . 2012-09-15 11:14 ——– d—–w- c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2012-09-15 11:11 . 2012-09-15 11:14 ——– d—–w- c:\program files\iTunes
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-08 19:51 . 2012-04-20 07:01 696760 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-08 19:51 . 2011-05-19 06:32 73656 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-05 07:16 . 2012-09-05 07:17 477168 —-a-w- c:\windows\system32\npdeployJava1.dll
2012-09-05 07:16 . 2010-10-04 17:41 473072 —-a-w- c:\windows\system32\deployJava1.dll
2012-09-04 08:18 . 2012-09-04 08:18 27496 —-a-w- c:\windows\system32\drivers\avgtpx86.sys
2012-08-24 14:43 . 2012-08-24 14:43 301920 —-a-w- c:\windows\system32\drivers\avgtdix.sys
2012-08-21 12:01 . 2009-11-04 23:33 106928 —-a-w- c:\windows\system32\GEARAspi.dll
2012-07-26 02:21 . 2012-07-26 02:21 237408 —-a-w- c:\windows\system32\drivers\avgldx86.sys
2012-09-07 09:12 . 2012-09-07 09:12 266720 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-09 1232896]
"SsAAD.exe"="c:\progra~1\Sony\SONICS~1\SsAAD.exe" [2006-11-13 472632]
"TomTomHOME.exe"="c:\users\Emi\TomTom HOME 2\TomTomHOMERunner.exe" [2012-01-23 247728]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2006-11-13 98304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2006-11-13 106496]
"Persistence"="c:\windows\system32\igfxpers.exe" [2006-11-13 81920]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2006-09-11 118784]
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2006-11-11 43128]
"E-Flyer"="c:\program files\Sony\E-Flyer\SubFlyer.exe" [2006-10-16 456824]
"VAIOCameraUtility"="c:\program files\Sony\VAIO Camera Utility\VCUServe.exe" [2006-11-14 411768]
"SetGamma"="c:\program files\Sony\SetGamma\SetGamma.exe" [2006-10-13 448632]
"IME JPN 2007 Migration"="c:\progra~1\COMMON~1\MICROS~1\IME12\IMEJP\IMJPKLMG.EXE" [2011-09-19 63856]
"AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-10-06 59240]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]
"AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-07-31 2596984]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-09-09 421776]
.
c:\users\Emi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
かざそうFeliCa.lnk - c:\program files\Sony\FeliCa Sensing\FeliSen.exe [2007-3-16 4038656]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2007-1-18 2752512]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2006-11-24 01:36 73728 —-a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\keyboard layouts\e0200411]
Ime File REG_SZ imjp12.ime
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]
.
.
Contents of the 'Scheduled Tasks' folder
.
2012-10-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-20 19:51]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://search.searchonme.com/
mStart Page = hxxp://search.searchonme.com/
uInternet Settings,ProxyOverride = *.local
IE: Easy-WebPrint プレビュー - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
IE: Easy-WebPrint 印刷 - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
IE: Easy-WebPrint 印刷リストに追加 - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
IE: Easy-WebPrint 高速印刷 - c:\program files\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
IE: Microsoft Excel にエクスポート(&X) - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
LSP: c:\windows\system32\iflsp.dll
TCP: DhcpNameServer = 192.168.1.1
DPF: {91DFB26C-AFD7-47C2-A07D-D22AF3548169} - hxxp://beauty.geocities.yahoo.co.jp/namo/geocreator/NamoWec6.cab
FF - ProfilePath - c:\users\Emi\AppData\Roaming\Mozilla\Firefox\Profiles\bw6pfu9s.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.searchonme.com/?l=1&q=
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.co.jp/
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-MobileDocuments - c:\program files\Common Files\Apple\Internet Services\ubd.exe
HKLM-Run-vProt - c:\program files\AVG Secure Search\vprot.exe
HKLM-Run-ROC_ROC_JULY_P1 - c:\program files\AVG Secure Search\ROC_ROC_JULY_P1.exe
AddRemove-Easy-WebPrint - c:\windows\IsUn0411.exe
AddRemove-{2460923D-1AA6-47FE-A375-76308780D20F} - c:\program files\InstallShield Installation Information\{2460923D-1AA6-47FE-A375-76308780D20F}\setup.exe
AddRemove-{71277DC4-4217-462A-9FF4-62D7815B2C69} - c:\programdata\ADDICT-THING\uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-12 22:19
Windows 6.0.6000 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\Software\A-one\・ﾙ0・K\U0・H*O*M*E*\DialogSize]
@Allowed: (Read) (RestrictedCode)
"環境設定"="0166 0007 0618 0501"
"用紙の選択"="0068 -012 0716 0521"
"リンク設定"="0127 0050 0658 0459"
.
[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\Software\A-one\・ﾙ0・K\U0・H*O*M*E*\ENVObject]
@Allowed: (Read) (RestrictedCode)
"ShowTopMenu"=dword:00000001
"GridEnable"=dword:00000000
"GridWidth"=dword:00000032
"NetOrThick"=dword:00000001
"EasyPrint"=dword:00000001
"UniDrv"=dword:00000000
"DpiFix"=dword:00000001
"AutoUpdate"=dword:00000001
"RssEnable"=dword:00000001
.
[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\Software\A-one\・ﾙ0・K\U0・H*O*M*E*\Recent File List]
@Allowed: (Read) (RestrictedCode)
"File1"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\OK saze's azuki scrub soap normal name.lhd"
"File2"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\azuki scrub soap.lhd"
"File3"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\OK saze's soap shea olive with shikon.lhd"
"File4"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\OK saze's soap citrus soap.lhd"
"File5"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\OK Saze's soap 贅沢な石けん 馬油　印刷.lhd"
"File6"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\OK saze's soap baby soap.lhd"
"File7"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\OK saze's soap base red palm.lhd"
"File8"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\OK Saze's soap カモミール.lhd"
"File9"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\OK saze's soap マルセイユカモミール.lhd"
"File10"="c:\\Users\\Emi\\Documents\\ラベル屋さんHOME\\マルセイユ　カモミール nomal name.lhd"
.
[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\Software\A-one\・ﾙ0・K\U0・H*O*M*E*\Settings]
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\Software\A-one\・ﾙ0・K\U0・H*O*M*E*\SysField]
@Allowed: (Read) (RestrictedCode)
"1:"=""
"2:"=""
"3:"=""
"4:"=""
"5:"=""
"6:"=""
"7:"=""
"8:"=""
"9:"=""
"10:"=""
.
[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\Software\A-one\・ﾙ0・K\U0・H*O*M*E*\Window size]
@Allowed: (Read) (RestrictedCode)
"Rect"="0103 0102 1255 0721"
"icon"=dword:00000000
"max"=dword:00000000
.
[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\Software\Microsoft\Office\12.0\Common\Open Find\Microsoft Office Word\Settings\ﾇ0・ｿ0 *ﾕ0｡0､0・n0x裾b]
"ClientGUID"=hex:a9,f0,eb,c8,f5,d6,8c,4c,86,33,f9,fd,05,77,3f,56
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\Forms\2*L*$R]
"FormKeyword"=hex:
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\Forms\L*$R]
"FormKeyword"=hex:
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Print\Forms\ mb_6*]
"FormKeyword"=hex:
.
Completion time: 2012-10-12 22:24:43
ComboFix-quarantined-files.txt 2012-10-12 21:24
.
Pre-Run: 19,309,907,968 バイトの空き領域
Post-Run: 19,450,032,128 バイトの空き領域
.
- - End Of File - - 1242CF5C9D87D899FE20EE37EACF43EB
Post #21 last edited
Well done on getting the ComboFix log.

I see some things in that log but I'd like to see the result of a different one.

Download and run OTL
  • download OTL to your desktop.
  • double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • click Scan all users.
  • under Custom Scan paste this in


    netsvcs
    %SYSTEMDRIVE%\*.exe
    /md5start
    explorer.exe
    winlogon.exe
    Userinit.exe
    svchost.exe
    services.exe
    /md5stop
    %systemroot%\*. /rp /s
    DRIVES
    CREATERESTOREPOINT

  • click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan won’t take long.
  • when the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  • please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.
  • you may need two posts to fit them both in.
Can you look in this folder and tell me what is in it:

c:\users\Emi\dwhelper

Logs to include with next post:

OTL.txt
Extras.txt

Thanks

Satchfan
Post #22 last edited
Hiya, I accidentally run scan without doing ' custom scan', does it matter? I can do it again if it does.
Post #24
Hi,
I ran it twice and the second time there was only OTL file, not extras. SO, I'll paste those files.

OTL 1st attempt
OTL logfile created on: 2012/10/13 16:32:58 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Emi\Desktop\デスクトップ
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format: yyyy/MM/dd

1013.56 Mb Total Physical Memory | 483.23 Mb Available Physical Memory | 47.68% Memory free
2.24 Gb Paging File | 0.98 Gb Available in Paging File | 43.79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 85.71 Gb Total Space | 17.37 Gb Free Space | 20.27% Space Free | Partition Type: NTFS

Computer Name: EMI-PC | User Name: Emi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/10/13 15:51:17 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Emi\Desktop\デスクトップ\OTL.exe
PRC - [2012/08/13 03:24:48 | 005,167,736 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgidsagent.exe
PRC - [2012/07/31 03:37:02 | 002,596,984 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2012/07/26 03:23:08 | 000,758,392 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2012/06/13 03:48:24 | 001,255,544 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2012/02/14 04:53:38 | 000,193,288 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2012/02/14 04:52:38 | 000,338,784 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2012/01/23 05:43:08 | 000,247,728 | —- | M] (TomTom) – C:\Users\Emi\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2012/01/23 05:43:08 | 000,092,592 | —- | M] (TomTom) – C:\Users\Emi\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2011/11/03 17:20:58 | 000,803,144 | —- | M] (AVG) – C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe
PRC - [2011/07/29 00:08:12 | 001,259,376 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2009/01/26 15:31:10 | 001,153,368 | —- | M] (Safer Networking Ltd.) – C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/10/29 07:20:29 | 002,923,520 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
PRC - [2008/08/24 12:59:10 | 000,870,240 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
PRC - [2007/02/06 04:36:22 | 000,090,112 | —- | M] (SigmaTel, Inc.) – C:\Program Files\SigmaTel\C-Major Audio\WDM\stacsv.exe
PRC - [2007/01/18 06:48:42 | 002,752,512 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2007/01/16 02:53:08 | 002,170,880 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
PRC - [2007/01/12 15:14:34 | 000,278,528 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
PRC - [2007/01/12 14:41:40 | 000,278,528 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2006/11/28 11:27:46 | 000,274,432 | —- | M] (Sony Corporation) – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
PRC - [2006/11/28 11:09:58 | 000,135,168 | —- | M] (Sony Corporation) – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
PRC - [2006/11/28 11:09:46 | 000,172,032 | —- | M] (Sony Corporation) – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
PRC - [2006/11/27 13:15:30 | 000,465,016 | —- | M] (Sony Corporation) – C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
PRC - [2006/11/24 09:58:38 | 000,919,672 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
PRC - [2006/11/24 02:36:54 | 000,182,392 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
PRC - [2006/11/24 02:36:54 | 000,100,472 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
PRC - [2006/11/14 02:46:24 | 000,411,768 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
PRC - [2006/11/13 10:43:36 | 000,472,632 | —- | M] () – C:\Program Files\Sony\SonicStage\SSAAD.exe
PRC - [2006/11/11 07:35:36 | 000,043,128 | —- | M] (Sony Corporation) – C:\Program Files\Sony\ISB Utility\ISBMgr.exe
PRC - [2006/11/02 10:44:59 | 000,068,608 | —- | M] (Microsoft Corporation) – C:\Windows\System32\conime.exe
PRC - [2006/10/31 14:40:16 | 000,077,824 | —- | M] (TOSHIBA CORPORATION) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2006/10/27 12:13:48 | 000,270,336 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2006/10/13 02:34:56 | 000,448,632 | —- | M] (Sony Corporation) – C:\Program Files\Sony\SetGamma\SetGamma.exe
PRC - [2006/10/01 04:00:00 | 000,045,056 | —- | M] (Texim Corporarion.) – C:\Program Files\Justsystem\PersonalShelter\TxVDrvSvc.exe
PRC - [2006/09/27 07:25:40 | 004,038,656 | —- | M] (Sony Corporation) – C:\Program Files\Sony\FeliCa Sensing\FeliSen.exe
PRC - [2006/09/11 08:23:22 | 000,118,784 | —- | M] (Alps Electric Co., Ltd.) – C:\Program Files\Apoint\Apoint.exe
PRC - [2006/09/08 07:06:08 | 000,040,960 | —- | M] (Alps Electric Co., Ltd.) – C:\Program Files\Apoint\ApntEx.exe
PRC - [2006/09/08 06:54:30 | 000,042,544 | —- | M] (Alps Electric Co., Ltd.) – C:\Program Files\Apoint\ApMsgFwd.exe
PRC - [2006/02/06 15:00:20 | 000,311,296 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe
PRC - [2006/01/23 15:14:10 | 000,069,632 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe


========== Modules (No Company Name) ==========

MOD - [2011/11/03 17:21:06 | 000,350,024 | —- | M] () – C:\Program Files\AVG\AVG PC Tuneup\madExcept_.bpl
MOD - [2011/11/03 17:21:06 | 000,184,136 | —- | M] () – C:\Program Files\AVG\AVG PC Tuneup\madBasic_.bpl
MOD - [2011/11/03 17:21:06 | 000,050,504 | —- | M] () – C:\Program Files\AVG\AVG PC Tuneup\madDisAsm_.bpl
MOD - [2011/07/29 00:09:42 | 000,096,112 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011/07/29 00:08:12 | 001,259,376 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2006/11/14 02:46:24 | 000,040,960 | —- | M] () – C:\Program Files\Sony\VAIO Camera Utility\VCULib.dll
MOD - [2006/11/13 10:43:36 | 000,472,632 | —- | M] () – C:\Program Files\Sony\SonicStage\SSAAD.exe
MOD - [2006/11/13 06:20:07 | 000,061,440 | —- | M] () – C:\Windows\System32\igfxTMM.dll
MOD - [2006/11/13 06:20:00 | 000,077,824 | —- | M] () – C:\Windows\System32\hccutils.dll
MOD - [2006/09/29 14:20:18 | 000,096,352 | —- | M] () – C:\Program Files\Common Files\Sony Shared\FeliCaLibrary\plugins\device\usb.gp
MOD - [2006/09/29 14:20:10 | 000,137,312 | —- | M] () – C:\Program Files\Common Files\Sony Shared\FeliCaLibrary\plugins\command\basic.gp
MOD - [2006/09/29 14:20:00 | 000,383,072 | —- | M] () – C:\Program Files\Common Files\Sony Shared\FeliCaLibrary\rw.dll
MOD - [2006/09/29 14:19:56 | 000,190,560 | —- | M] () – C:\Program Files\Common Files\Sony Shared\FeliCaLibrary\felica.dll
MOD - [2005/07/22 13:30:20 | 000,065,536 | —- | M] () – C:\Windows\System32\TosCommAPI.dll
MOD - [2004/10/14 02:18:24 | 000,040,960 | —- | M] () – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtAfh.dll


========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe – (vToolbarUpdater12.2.6)
SRV - File not found [Auto | Running] – C:\Program Files\Spybot – (SBSDWSCService)
SRV - [2012/10/08 20:51:56 | 000,250,808 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2012/09/07 10:12:53 | 000,114,144 | —- | M] (Mozilla Foundation) [On_Demand | Stopped] – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe – (MozillaMaintenance)
SRV - [2012/08/13 03:24:48 | 005,167,736 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] – C:\Program Files\AVG\AVG2012\avgidsagent.exe – (AVGIDSAgent)
SRV - [2012/07/13 13:28:36 | 000,160,944 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2012/02/14 04:53:38 | 000,193,288 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] – C:\Program Files\AVG\AVG2012\avgwdsvc.exe – (avgwd)
SRV - [2012/01/23 05:43:08 | 000,092,592 | —- | M] (TomTom) [Auto | Running] – C:\Users\Emi\TomTom HOME 2\TomTomHOMEService.exe – (TomTomHOMEService)
SRV - [2007/06/29 04:00:04 | 000,265,912 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2007/02/06 04:36:22 | 000,090,112 | —- | M] (SigmaTel, Inc.) [Auto | Running] – C:\Program Files\SigmaTel\C-Major Audio\WDM\stacsv.exe – (STacSV)
SRV - [2007/01/10 08:51:06 | 000,745,472 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe – (VAIOMediaPlatform-UCLS-AppServer)
SRV - [2007/01/10 02:43:24 | 000,073,728 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe – (VAIO Entertainment TV Device Arbitration Service)
SRV - [2007/01/08 09:06:40 | 001,089,536 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe – (VAIOMediaPlatform-UCLS-UPnP)
SRV - [2007/01/08 09:06:40 | 001,089,536 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe – (VAIOMediaPlatform-IntegratedServer-UPnP)
SRV - [2007/01/08 09:06:40 | 000,397,312 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe – (VAIOMediaPlatform-UCLS-HTTP)
SRV - [2007/01/08 09:06:40 | 000,397,312 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe – (VAIOMediaPlatform-IntegratedServer-HTTP)
SRV - [2006/11/28 11:27:46 | 000,274,432 | —- | M] (Sony Corporation) [On_Demand | Running] – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe – (Vcsw)
SRV - [2006/11/28 11:09:58 | 000,135,168 | —- | M] (Sony Corporation) [Auto | Running] – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe – (VzFw)
SRV - [2006/11/28 11:09:46 | 000,172,032 | —- | M] (Sony Corporation) [Auto | Running] – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe – (VzCdbSvc)
SRV - [2006/11/27 09:14:44 | 000,413,696 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\Smart Network\BeService.exe – (BeService)
SRV - [2006/11/24 02:36:54 | 000,182,392 | —- | M] (Sony Corporation) [Auto | Running] – C:\Program Files\Sony\VAIO Event Service\VESMgr.exe – (VAIO Event Service)
SRV - [2006/11/13 09:31:22 | 000,069,632 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\AvLib\SSScsiSV.exe – (SSScsiSV)
SRV - [2006/10/31 14:40:16 | 000,077,824 | —- | M] (TOSHIBA CORPORATION) [Auto | Running] – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe – (TOSHIBA Bluetooth Service)
SRV - [2006/10/24 02:32:08 | 002,523,136 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe – (VAIOMediaPlatform-IntegratedServer-AppServer)
SRV - [2006/10/04 10:25:00 | 000,057,344 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\AvLib\MSCSPTISRV.exe – (MSCSPTISRV)
SRV - [2006/10/04 10:15:30 | 000,057,344 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\AvLib\PACSPTISVR.exe – (PACSPTISVR)
SRV - [2006/10/04 10:06:58 | 000,069,632 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\AvLib\SPTISRV.exe – (SPTISRV)
SRV - [2006/10/01 04:00:00 | 000,045,056 | —- | M] (Texim Corporarion.) [Auto | Running] – C:\Program Files\Justsystem\PersonalShelter\TxVDrvSvc.exe – (TxVDrvSvc)
SRV - [2006/08/28 13:38:04 | 000,491,520 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe – (VAIOMediaPlatform-Mobile-Gateway)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\SymIM.sys – (SymIMMP)
DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\nwlnkfwd.sys – (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\nwlnkflt.sys – (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\ipinip.sys – (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\Users\Emi\AppData\Local\Temp\catchme.sys – (catchme)
DRV - File not found [Kernel | Disabled | Stopped] – C:\Windows\system32\drivers\blbdrive.sys – (blbdrive)
DRV - [2012/09/04 09:18:29 | 000,027,496 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\Windows\System32\drivers\avgtpx86.sys – (avgtp)
DRV - [2012/08/24 15:43:18 | 000,301,920 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\Windows\System32\drivers\avgtdix.sys – (Avgtdix)
DRV - [2012/07/26 03:21:30 | 000,237,408 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\Windows\System32\drivers\avgldx86.sys – (Avgldx86)
DRV - [2012/04/19 04:50:26 | 000,024,896 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] – C:\Windows\System32\drivers\avgidshx.sys – (AVGIDSHX)
DRV - [2012/01/31 04:46:50 | 000,031,952 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] – C:\Windows\System32\drivers\avgrkx86.sys – (Avgrkx86)
DRV - [2011/12/23 13:32:14 | 000,041,040 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] – C:\Windows\System32\drivers\avgmfx86.sys – (Avgmfx86)
DRV - [2011/12/23 13:32:08 | 000,017,232 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\avgidsshimx.sys – (AVGIDSShim)
DRV - [2011/12/23 13:32:06 | 000,024,144 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\avgidsfilterx.sys – (AVGIDSFilter)
DRV - [2011/12/23 13:32:00 | 000,139,856 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\avgidsdriverx.sys – (AVGIDSDriver)
DRV - [2008/04/22 18:33:30 | 000,038,856 | —- | M] (Teruten Co. LTD.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\GDISpy.sys – (GDISpyDevice)
DRV - [2007/02/06 04:36:48 | 000,650,240 | —- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\stwrt.sys – (STHDA)
DRV - [2007/01/12 13:41:32 | 000,113,792 | —- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfbd.sys – (tosrfbd)
DRV - [2007/01/12 13:16:54 | 000,040,576 | —- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfusb.sys – (tosrfusb)
DRV - [2006/11/20 09:55:16 | 000,036,480 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfbnp.sys – (tosrfbnp)
DRV - [2006/11/07 03:51:50 | 000,506,368 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\ExpasAG.sys – (LEX_AS_NIC_SERVICE_YNOS)
DRV - [2006/11/06 14:56:03 | 000,227,328 | —- | M] (Texas Instruments) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\ti21sony.sys – (ti21sony)
DRV - [2006/11/02 08:30:55 | 000,200,704 | —- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\e1e6032.sys – (e1express)
DRV - [2006/11/01 05:31:46 | 000,017,328 | —- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] – C:\Windows\System32\drivers\SiWinAcc.sys – (SiFilter)
DRV - [2006/11/01 05:31:14 | 000,012,464 | —- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] – C:\Windows\System32\drivers\SiRemFil.sys – (SiRemFil)
DRV - [2006/11/01 05:30:34 | 000,074,672 | —- | M] (Silicon Image, Inc.) [Kernel | Disabled | Stopped] – C:\Windows\System32\drivers\SI3132.sys – (SI3132)
DRV - [2006/10/30 01:42:28 | 001,786,880 | —- | M] (Intel® Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\NETw3v32.sys – (NETw3v32)
DRV - [2006/10/27 14:08:36 | 000,072,704 | —- | M] (Ricoh) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\R5U870FLx86.sys – (R5U870FLx86)
DRV - [2006/10/27 14:08:32 | 000,043,904 | —- | M] (Ricoh) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\R5U870FUx86.sys – (R5U870FUx86)
DRV - [2006/10/25 12:53:00 | 000,058,112 | —- | M] (Sony Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\Sonyddpu.sys – (Sonyddpu)
DRV - [2006/10/18 03:56:30 | 000,010,216 | —- | M] (Sony Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\DMICall.sys – (DMICall)
DRV - [2006/10/13 12:34:22 | 000,027,520 | —- | M] (Sony Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\SonyNC.sys – (SNC)
DRV - [2006/10/10 11:33:00 | 000,041,600 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosporte.sys – (tosporte)
DRV - [2006/10/05 08:07:46 | 000,073,600 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\Tosrfhid.sys – (Tosrfhid)
DRV - [2006/10/01 04:00:00 | 000,022,272 | —- | M] (Texim Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\TxVDrv.sys – (TxVDrv)
DRV - [2006/09/06 10:44:52 | 000,030,976 | —- | M] (Sony Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\SonyImgF.sys – (SonyImgF)
DRV - [2006/08/30 01:35:58 | 000,140,800 | —- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\Apfiltr.sys – (ApfiltrService)
DRV - [2006/08/04 09:39:10 | 000,008,192 | —- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] – C:\Windows\System32\drivers\XAudio.sys – (XAudio)
DRV - [2005/08/01 08:45:00 | 000,064,896 | —- | M] (TOSHIBA Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\tosrfcom.sys – (Tosrfcom)
DRV - [2005/01/06 05:42:00 | 000,018,612 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfnds.sys – (tosrfnds)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.searchonme.com/
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{624F0464-C722-4EC7-99FB-E4BCC314E2B3}: "URL" = http://search.yahoo.co.jp/search?&p={s…e7&ei=utf-8


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.searchonme.com/
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{09A8233A-8B2D-4B39-A897-A6E585EBE661}: "URL" = http://uk.search.yahoo.com/search/audio?ei…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{4D5CB369-D501-4641-AA1C-B3F63C4AF055}: "URL" = http://uk.news.search.yahoo.com/search/new…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{5E48C6CC-FEF8-491C-91C7-7EC8DEFBA5B2}: "URL" = http://uk.search.yahoo.com/search/video?ei…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{624F0464-C722-4EC7-99FB-E4BCC314E2B3}: "URL" = http://search.yahoo.co.jp/search?&p={s…e7&ei=utf-8
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{6397F18E-6073-409C-BADF-780E6508CBCE}: "URL" = http://uk.local.yahoo.com/search.html?p={s…s=&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{698A4840-AA4B-4577-BCBE-B05816A91D6F}: "URL" = http://uk.search.yahoo.com/search/images?e…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{C04AFA50-AFA3-4421-A83C-703F6E1E7144}: "URL" = http://uk.search.yahoo.com/search/dir?ei=U…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://uk.search.yahoo.com/search?p={searc…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{F211E784-4A3A-4E2C-874E-B6DA5D0CB473}: "URL" = http://shopping.yahoo.co.uk/ctl/do/search?…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "SearchOnMe"
FF - prefs.js..browser.search.defaultenginename,S: S", "SearchOnMe"
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: "http://search.searchonme.com/?l=1&q="
FF - prefs.js..browser.search.order.1: "SearchOnMe"
FF - prefs.js..browser.search.order.1,S: S", "SearchOnMe"
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.selectedEngine,S: S", "SearchOnMe"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.co.jp/"
FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}:6.0.35
FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.10
FF - prefs.js..extensions.enabledAddons: {8b5bea8c-6194-4c7c-a440-d5ca181480c3}:1.300.430
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:5.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: [removed]:1.1.3
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Emi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/09/11 10:43:42 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/07/02 16:58:35 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/09/07 10:12:56 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/09/07 10:12:27 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/09/07 10:12:56 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/09/07 10:12:27 | 000,000,000 | —D | M]

[2008/10/22 12:00:56 | 000,000,000 | —D | M] (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\Extensions
[2008/10/22 12:00:56 | 000,000,000 | —D | M] (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\Extensions\[removed]
[2012/10/11 11:37:14 | 000,000,000 | —D | M] (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions
[2010/05/11 06:52:16 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/10/05 20:35:39 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012/10/05 22:33:26 | 000,000,000 | —D | M] (ADDICT-THING) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\[removed]
[2012/10/07 22:18:22 | 000,000,000 | —D | M] (ADDICT-THING) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\[removed]
[2012/10/07 22:30:20 | 000,000,000 | —D | M] (ADDICT-THING) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\[removed]
[2012/10/09 12:21:27 | 000,684,162 | —- | M] () (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\firefox\profiles\bw6pfu9s.default\extensions\{8b5bea8c-6194-4c7c-a440-d5ca181480c3}.xpi
[2012/07/31 09:28:39 | 000,375,811 | —- | M] () (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\firefox\profiles\bw6pfu9s.default\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}.xpi
[2012/10/11 11:43:54 | 000,007,756 | —- | M] () – C:\Users\Emi\AppData\Roaming\mozilla\firefox\profiles\bw6pfu9s.default\searchplugins\SearchOnMe.xml
[2012/09/07 10:12:21 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2012/09/07 10:12:22 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012/10/13 15:04:56 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\updated\extensions
[2012/10/13 15:05:48 | 000,000,000 | —D | M] (Default) – C:\Program Files\Mozilla Firefox\updated\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2012/10/13 15:04:56 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\updated\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012/09/07 10:12:56 | 000,266,720 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/06/15 01:16:46 | 000,001,842 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazon-jp.xml
[2012/07/18 17:47:02 | 000,003,869 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google-jp.xml
[2012/06/15 01:16:46 | 000,001,269 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\oshiete-goo.xml
[2012/06/15 01:16:46 | 000,000,814 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\rakuten.xml
[2012/06/15 01:16:46 | 000,002,058 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter-ja.xml
[2012/06/15 01:16:46 | 000,001,179 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia-ja.xml
[2012/06/15 01:16:46 | 000,000,889 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-jp-auctions.xml
[2012/06/15 01:16:46 | 000,000,696 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-jp.xml

========== Chrome ==========

CHR - homepage: http://search.searchonme.com/

O1 HOSTS File: ([2012/10/12 22:19:06 | 000,000,027 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (かんたん登録2) - {0DD41AE7-6196-42E7-BDE5-4F393997449E} - C:\Program Files\Justsystem\SimpleAutoInput\AtInBnd.dll (株式会社ジャストシステム)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll ()
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (かんたん登録2 ツールバー) - {833CFE4E-05BD-43A3-97A7-A4E80D742F0F} - C:\Program Files\Justsystem\SimpleAutoInput\AtInBnd.dll (株式会社ジャストシステム)
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [E-Flyer] C:\Program Files\Sony\E-Flyer\SubFlyer.exe ()
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [SetGamma] C:\Program Files\Sony\SetGamma\SetGamma.exe (Sony Corporation)
O4 - HKLM..\Run: [VAIOCameraUtility] C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe (Sony Corporation)
O4 - HKU\S-1-5-21-739007543-2237649779-995633458-1004..\Run: [SsAAD.exe] C:\Program Files\Sony\SonicStage\SSAAD.exe ()
O4 - HKU\S-1-5-21-739007543-2237649779-995633458-1004..\Run: [TomTomHOME.exe] C:\Users\Emi\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - Startup: C:\Users\Emi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\かざそうFeliCa.lnk = C:\Program Files\Sony\FeliCa Sensing\FeliSen.exe (Sony Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-739007543-2237649779-995633458-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Easy-WebPrint プレビュー - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint 印刷 - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint 印刷リストに追加 - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint 高速印刷 - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {91DFB26C-AFD7-47C2-A07D-D22AF3548169} http://beauty.geocities.yahoo.co.jp/namo/g…or/NamoWec6.cab (NamoWeCtl 6.0 for YahooJpn)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_35)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22CD1543-C312-4180-8903-388A87EEC278}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85066FAF-0A01-4877-ADDD-EB81ECE91A6C}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\Emi\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows フォト ギャラリー壁紙.jpg
O24 - Desktop BackupWallPaper: C:\Users\Emi\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows フォト ギャラリー壁紙.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012/10/12 22:25:00 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2012/10/12 22:24:46 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\temp
[2012/10/12 21:59:18 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2012/10/12 21:59:18 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2012/10/12 21:59:17 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2012/10/12 21:59:17 | 000,212,480 | —- | C] (SteelWerX) – C:\Windows\SWXCACLS.exe
[2012/10/12 21:59:03 | 000,000,000 | —D | C] – C:\ComboFix
[2012/10/12 21:55:24 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\デスクトップ
[2012/10/11 22:15:47 | 000,000,000 | —D | C] – C:\Qoobox
[2012/10/11 22:14:35 | 000,000,000 | —D | C] – C:\Windows\erdnt
[2012/10/11 11:59:16 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Roaming\Malwarebytes
[2012/10/11 11:58:49 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/10/11 11:58:47 | 000,022,856 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2012/10/11 11:58:47 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/10/10 16:07:52 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\RK_Quarantine
[2012/10/09 16:40:35 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012/10/09 16:40:19 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2012/10/09 16:40:19 | 000,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2012/10/07 22:07:01 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\favorite songs 2
[2012/10/05 22:32:52 | 000,000,000 | —D | C] – C:\Program Files\SProtector
[2012/10/05 22:32:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ADDICT-THING
[2012/10/05 22:31:54 | 000,000,000 | —D | C] – C:\ProgramData\ADDICT-THING
[2012/10/05 21:52:06 | 000,000,000 | —D | C] – C:\Users\Emi\dwhelper
[2012/10/03 22:11:46 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Freecorder 6 Video
[2012/10/03 22:10:41 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Roaming\Freecorder 6 Video
[2012/10/03 22:09:21 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Freecorder 6 Converter
[2012/10/03 22:09:04 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Roaming\Freecorder 6 Converter
[2012/10/03 22:07:42 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Freecorder 6 Audio
[2012/10/03 22:07:16 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Roaming\Freecorder 6 Audio
[2012/10/03 22:07:16 | 000,000,000 | —D | C] – C:\Users\Emi\Documents\Freecorder
[2012/10/03 22:06:38 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Jaksta_Technologies_Pty_L
[2012/10/03 22:00:49 | 000,000,000 | —D | C] – C:\Program Files\Applian Technologies
[2012/10/03 20:52:05 | 000,000,000 | —D | C] – C:\Users\Emi\Documents\Abelssoft
[2012/10/03 20:03:27 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Abelssoft
[2012/10/03 19:47:05 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationHost.exe
[2012/10/03 19:47:05 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationHostProxy.dll
[2012/10/03 19:47:05 | 000,049,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netfxperf.dll
[2012/10/03 15:26:32 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\favorite music
[2012/09/29 08:22:30 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
[2012/09/27 18:12:09 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\photos from ray
[2012/09/23 19:59:33 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Unity
[2012/09/15 12:15:53 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/09/15 12:11:45 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2012/09/15 12:11:09 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2012/09/15 12:11:09 | 000,000,000 | —D | C] – C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

========== Files - Modified Within 30 Days ==========

[2012/10/13 16:33:15 | 000,003,456 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/10/13 16:33:14 | 000,003,456 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/10/13 15:51:54 | 000,000,626 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/10/13 11:33:31 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/10/13 08:30:50 | 097,246,195 | —- | M] () – C:\Windows\System32\drivers\AVG\incavi.avm
[2012/10/12 22:19:06 | 000,000,027 | —- | M] () – C:\Windows\System32\drivers\etc\hosts
[2012/10/11 11:58:50 | 000,000,906 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/10 18:31:20 | 000,000,512 | —- | M] () – C:\Users\Emi\Documents\MBR.dat
[2012/10/10 18:22:02 | 000,467,173 | —- | M] () – C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/10/09 16:41:01 | 000,001,079 | —- | M] () – C:\Users\Emi\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2012/10/09 16:41:01 | 000,001,055 | —- | M] () – C:\Users\Emi\Desktop\Spybot - Search & Destroy.lnk
[2012/10/09 07:48:55 | 000,446,406 | —- | M] () – C:\Windows\System32\perfh011.dat
[2012/10/09 07:48:55 | 000,140,234 | —- | M] () – C:\Windows\System32\perfc011.dat
[2012/10/09 07:48:54 | 000,704,984 | —- | M] () – C:\Windows\System32\perfh009.dat
[2012/10/09 07:48:54 | 000,140,134 | —- | M] () – C:\Windows\System32\perfc009.dat
[2012/10/08 20:51:54 | 000,696,760 | —- | M] (Adobe Systems Incorporated) – C:\Windows\System32\FlashPlayerApp.exe
[2012/10/08 20:51:54 | 000,073,656 | —- | M] (Adobe Systems Incorporated) – C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012/10/07 12:25:33 | 000,000,932 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/10/05 22:12:41 | 000,118,272 | —- | M] () – C:\Users\Emi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/19 09:20:26 | 158,419,261 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/09/15 12:15:57 | 000,001,664 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk

========== Files Created - No Company Name ==========

[2012/10/12 21:59:18 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2012/10/12 21:59:18 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2012/10/12 21:59:18 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2012/10/12 21:59:18 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2012/10/12 21:59:18 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2012/10/11 11:58:50 | 000,000,906 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/10 18:31:20 | 000,000,512 | —- | C] () – C:\Users\Emi\Documents\MBR.dat
[2012/10/09 16:41:01 | 000,001,079 | —- | C] () – C:\Users\Emi\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2012/10/09 16:41:01 | 000,001,055 | —- | C] () – C:\Users\Emi\Desktop\Spybot - Search & Destroy.lnk
[2012/09/15 12:15:57 | 000,001,664 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2012/06/06 10:54:02 | 000,034,814 | —- | C] () – C:\Users\Emi\AppData\Local\dt.dat
[2011/02/08 12:48:55 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/10/28 08:04:15 | 000,001,940 | —- | C] () – C:\Users\Emi\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/09/26 11:01:28 | 000,000,680 | —- | C] () – C:\Users\Emi\AppData\Local\d3d9caps.dat
[2009/10/16 13:41:04 | 000,700,572 | —- | C] () – C:\ProgramData\LUUnInstall.LiveUpdate
[2009/02/10 18:49:02 | 000,000,104 | —- | C] () – C:\Users\Emi\コンピュータ - ショートカット.lnk
[2007/06/27 14:16:13 | 000,118,272 | —- | C] () – C:\Users\Emi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2006/11/02 13:54:22 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2008/11/06 13:57:06 | 011,315,712 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/03/03 05:16:12 | 000,614,912 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2006/11/02 10:46:13 | 000,348,672 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== Alternate Data Streams ==========

@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:0B4227B4

< End of report >
Post #25
OTL 2nd attempt
OTL logfile created on: 2012/10/13 17:02:21 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Emi\Desktop\デスクトップ
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format: yyyy/MM/dd

1013.56 Mb Total Physical Memory | 413.91 Mb Available Physical Memory | 40.84% Memory free
2.24 Gb Paging File | 0.95 Gb Available in Paging File | 42.29% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 85.71 Gb Total Space | 17.42 Gb Free Space | 20.32% Space Free | Partition Type: NTFS

Computer Name: EMI-PC | User Name: Emi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/10/13 15:51:17 | 000,602,112 | —- | M] (OldTimer Tools) – C:\Users\Emi\Desktop\デスクトップ\OTL.exe
PRC - [2012/08/13 03:24:48 | 005,167,736 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgidsagent.exe
PRC - [2012/07/31 03:37:02 | 002,596,984 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgtray.exe
PRC - [2012/07/26 03:23:08 | 000,758,392 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgrsx.exe
PRC - [2012/06/13 03:48:24 | 001,255,544 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgnsx.exe
PRC - [2012/02/14 04:53:38 | 000,193,288 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgwdsvc.exe
PRC - [2012/02/14 04:52:38 | 000,338,784 | —- | M] (AVG Technologies CZ, s.r.o.) – C:\Program Files\AVG\AVG2012\avgcsrvx.exe
PRC - [2012/01/23 05:43:08 | 000,247,728 | —- | M] (TomTom) – C:\Users\Emi\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2012/01/23 05:43:08 | 000,092,592 | —- | M] (TomTom) – C:\Users\Emi\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2011/11/03 17:20:58 | 000,803,144 | —- | M] (AVG) – C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe
PRC - [2011/07/29 00:08:12 | 001,259,376 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2009/01/26 15:31:10 | 001,153,368 | —- | M] (Safer Networking Ltd.) – C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/10/29 07:20:29 | 002,923,520 | —- | M] (Microsoft Corporation) – C:\Windows\explorer.exe
PRC - [2008/08/24 12:59:10 | 000,870,240 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
PRC - [2007/02/06 04:36:22 | 000,090,112 | —- | M] (SigmaTel, Inc.) – C:\Program Files\SigmaTel\C-Major Audio\WDM\stacsv.exe
PRC - [2007/01/18 06:48:42 | 002,752,512 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2007/01/16 02:53:08 | 002,170,880 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
PRC - [2007/01/12 15:14:34 | 000,278,528 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
PRC - [2007/01/12 14:41:40 | 000,278,528 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2006/11/28 11:27:46 | 000,274,432 | —- | M] (Sony Corporation) – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
PRC - [2006/11/28 11:09:58 | 000,135,168 | —- | M] (Sony Corporation) – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
PRC - [2006/11/28 11:09:46 | 000,172,032 | —- | M] (Sony Corporation) – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
PRC - [2006/11/27 13:15:30 | 000,465,016 | —- | M] (Sony Corporation) – C:\Program Files\Sony\Wireless Switch Setting Utility\Switcher.exe
PRC - [2006/11/24 09:58:38 | 000,919,672 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
PRC - [2006/11/24 02:36:54 | 000,182,392 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
PRC - [2006/11/24 02:36:54 | 000,100,472 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
PRC - [2006/11/14 02:46:24 | 000,411,768 | —- | M] (Sony Corporation) – C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe
PRC - [2006/11/13 10:43:36 | 000,472,632 | —- | M] () – C:\Program Files\Sony\SonicStage\SSAAD.exe
PRC - [2006/11/11 07:35:36 | 000,043,128 | —- | M] (Sony Corporation) – C:\Program Files\Sony\ISB Utility\ISBMgr.exe
PRC - [2006/11/02 10:44:59 | 000,068,608 | —- | M] (Microsoft Corporation) – C:\Windows\System32\conime.exe
PRC - [2006/10/31 14:40:16 | 000,077,824 | —- | M] (TOSHIBA CORPORATION) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
PRC - [2006/10/27 12:13:48 | 000,270,336 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2006/10/13 02:34:56 | 000,448,632 | —- | M] (Sony Corporation) – C:\Program Files\Sony\SetGamma\SetGamma.exe
PRC - [2006/10/01 04:00:00 | 000,045,056 | —- | M] (Texim Corporarion.) – C:\Program Files\Justsystem\PersonalShelter\TxVDrvSvc.exe
PRC - [2006/09/27 07:25:40 | 004,038,656 | —- | M] (Sony Corporation) – C:\Program Files\Sony\FeliCa Sensing\FeliSen.exe
PRC - [2006/09/11 08:23:22 | 000,118,784 | —- | M] (Alps Electric Co., Ltd.) – C:\Program Files\Apoint\Apoint.exe
PRC - [2006/09/08 07:06:08 | 000,040,960 | —- | M] (Alps Electric Co., Ltd.) – C:\Program Files\Apoint\ApntEx.exe
PRC - [2006/09/08 06:54:30 | 000,042,544 | —- | M] (Alps Electric Co., Ltd.) – C:\Program Files\Apoint\ApMsgFwd.exe
PRC - [2006/02/06 15:00:20 | 000,311,296 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe
PRC - [2006/01/23 15:14:10 | 000,069,632 | —- | M] (TOSHIBA CORPORATION.) – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe


========== Modules (No Company Name) ==========

MOD - [2011/11/03 17:21:06 | 000,350,024 | —- | M] () – C:\Program Files\AVG\AVG PC Tuneup\madExcept_.bpl
MOD - [2011/11/03 17:21:06 | 000,184,136 | —- | M] () – C:\Program Files\AVG\AVG PC Tuneup\madBasic_.bpl
MOD - [2011/11/03 17:21:06 | 000,050,504 | —- | M] () – C:\Program Files\AVG\AVG PC Tuneup\madDisAsm_.bpl
MOD - [2011/07/29 00:09:42 | 000,096,112 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011/07/29 00:08:12 | 001,259,376 | —- | M] () – C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2011/06/24 22:56:36 | 000,087,328 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | —- | M] () – C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2006/11/14 02:46:24 | 000,040,960 | —- | M] () – C:\Program Files\Sony\VAIO Camera Utility\VCULib.dll
MOD - [2006/11/13 10:43:36 | 000,472,632 | —- | M] () – C:\Program Files\Sony\SonicStage\SSAAD.exe
MOD - [2006/11/13 06:20:07 | 000,061,440 | —- | M] () – C:\Windows\System32\igfxTMM.dll
MOD - [2006/11/13 06:20:00 | 000,077,824 | —- | M] () – C:\Windows\System32\hccutils.dll
MOD - [2006/09/29 14:20:18 | 000,096,352 | —- | M] () – C:\Program Files\Common Files\Sony Shared\FeliCaLibrary\plugins\device\usb.gp
MOD - [2006/09/29 14:20:10 | 000,137,312 | —- | M] () – C:\Program Files\Common Files\Sony Shared\FeliCaLibrary\plugins\command\basic.gp
MOD - [2006/09/29 14:20:00 | 000,383,072 | —- | M] () – C:\Program Files\Common Files\Sony Shared\FeliCaLibrary\rw.dll
MOD - [2006/09/29 14:19:56 | 000,190,560 | —- | M] () – C:\Program Files\Common Files\Sony Shared\FeliCaLibrary\felica.dll
MOD - [2005/07/22 13:30:20 | 000,065,536 | —- | M] () – C:\Windows\System32\TosCommAPI.dll
MOD - [2004/10/14 02:18:24 | 000,040,960 | —- | M] () – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtAfh.dll


========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe – (vToolbarUpdater12.2.6)
SRV - File not found [Auto | Running] – C:\Program Files\Spybot – (SBSDWSCService)
SRV - [2012/10/13 15:05:47 | 000,115,168 | —- | M] (Mozilla Foundation) [On_Demand | Stopped] – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe – (MozillaMaintenance)
SRV - [2012/10/08 20:51:56 | 000,250,808 | —- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] – C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe – (AdobeFlashPlayerUpdateSvc)
SRV - [2012/08/13 03:24:48 | 005,167,736 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] – C:\Program Files\AVG\AVG2012\avgidsagent.exe – (AVGIDSAgent)
SRV - [2012/07/13 13:28:36 | 000,160,944 | R— | M] (Skype Technologies) [Auto | Stopped] – C:\Program Files\Skype\Updater\Updater.exe – (SkypeUpdate)
SRV - [2012/02/14 04:53:38 | 000,193,288 | —- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] – C:\Program Files\AVG\AVG2012\avgwdsvc.exe – (avgwd)
SRV - [2012/01/23 05:43:08 | 000,092,592 | —- | M] (TomTom) [Auto | Running] – C:\Users\Emi\TomTom HOME 2\TomTomHOMEService.exe – (TomTomHOMEService)
SRV - [2007/06/29 04:00:04 | 000,265,912 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Program Files\Windows Defender\MpSvc.dll – (WinDefend)
SRV - [2007/02/06 04:36:22 | 000,090,112 | —- | M] (SigmaTel, Inc.) [Auto | Running] – C:\Program Files\SigmaTel\C-Major Audio\WDM\stacsv.exe – (STacSV)
SRV - [2007/01/10 08:51:06 | 000,745,472 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe – (VAIOMediaPlatform-UCLS-AppServer)
SRV - [2007/01/10 02:43:24 | 000,073,728 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe – (VAIO Entertainment TV Device Arbitration Service)
SRV - [2007/01/08 09:06:40 | 001,089,536 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe – (VAIOMediaPlatform-UCLS-UPnP)
SRV - [2007/01/08 09:06:40 | 001,089,536 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe – (VAIOMediaPlatform-IntegratedServer-UPnP)
SRV - [2007/01/08 09:06:40 | 000,397,312 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe – (VAIOMediaPlatform-UCLS-HTTP)
SRV - [2007/01/08 09:06:40 | 000,397,312 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe – (VAIOMediaPlatform-IntegratedServer-HTTP)
SRV - [2006/11/28 11:27:46 | 000,274,432 | —- | M] (Sony Corporation) [On_Demand | Running] – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe – (Vcsw)
SRV - [2006/11/28 11:09:58 | 000,135,168 | —- | M] (Sony Corporation) [Auto | Running] – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe – (VzFw)
SRV - [2006/11/28 11:09:46 | 000,172,032 | —- | M] (Sony Corporation) [Auto | Running] – C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe – (VzCdbSvc)
SRV - [2006/11/27 09:14:44 | 000,413,696 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\Smart Network\BeService.exe – (BeService)
SRV - [2006/11/24 02:36:54 | 000,182,392 | —- | M] (Sony Corporation) [Auto | Running] – C:\Program Files\Sony\VAIO Event Service\VESMgr.exe – (VAIO Event Service)
SRV - [2006/11/13 09:31:22 | 000,069,632 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\AvLib\SSScsiSV.exe – (SSScsiSV)
SRV - [2006/10/31 14:40:16 | 000,077,824 | —- | M] (TOSHIBA CORPORATION) [Auto | Running] – C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe – (TOSHIBA Bluetooth Service)
SRV - [2006/10/24 02:32:08 | 002,523,136 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe – (VAIOMediaPlatform-IntegratedServer-AppServer)
SRV - [2006/10/04 10:25:00 | 000,057,344 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\AvLib\MSCSPTISRV.exe – (MSCSPTISRV)
SRV - [2006/10/04 10:15:30 | 000,057,344 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\AvLib\PACSPTISVR.exe – (PACSPTISVR)
SRV - [2006/10/04 10:06:58 | 000,069,632 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Common Files\Sony Shared\AvLib\SPTISRV.exe – (SPTISRV)
SRV - [2006/10/01 04:00:00 | 000,045,056 | —- | M] (Texim Corporarion.) [Auto | Running] – C:\Program Files\Justsystem\PersonalShelter\TxVDrvSvc.exe – (TxVDrvSvc)
SRV - [2006/08/28 13:38:04 | 000,491,520 | —- | M] (Sony Corporation) [On_Demand | Stopped] – C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe – (VAIOMediaPlatform-Mobile-Gateway)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\SymIM.sys – (SymIMMP)
DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\nwlnkfwd.sys – (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\nwlnkflt.sys – (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] – system32\DRIVERS\ipinip.sys – (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] – C:\Users\Emi\AppData\Local\Temp\catchme.sys – (catchme)
DRV - File not found [Kernel | Disabled | Stopped] – C:\Windows\system32\drivers\blbdrive.sys – (blbdrive)
DRV - [2012/09/04 09:18:29 | 000,027,496 | —- | M] (AVG Technologies) [Kernel | System | Running] – C:\Windows\System32\drivers\avgtpx86.sys – (avgtp)
DRV - [2012/08/24 15:43:18 | 000,301,920 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\Windows\System32\drivers\avgtdix.sys – (Avgtdix)
DRV - [2012/07/26 03:21:30 | 000,237,408 | —- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] – C:\Windows\System32\drivers\avgldx86.sys – (Avgldx86)
DRV - [2012/04/19 04:50:26 | 000,024,896 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] – C:\Windows\System32\drivers\avgidshx.sys – (AVGIDSHX)
DRV - [2012/01/31 04:46:50 | 000,031,952 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] – C:\Windows\System32\drivers\avgrkx86.sys – (Avgrkx86)
DRV - [2011/12/23 13:32:14 | 000,041,040 | —- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] – C:\Windows\System32\drivers\avgmfx86.sys – (Avgmfx86)
DRV - [2011/12/23 13:32:08 | 000,017,232 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\avgidsshimx.sys – (AVGIDSShim)
DRV - [2011/12/23 13:32:06 | 000,024,144 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\avgidsfilterx.sys – (AVGIDSFilter)
DRV - [2011/12/23 13:32:00 | 000,139,856 | —- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\avgidsdriverx.sys – (AVGIDSDriver)
DRV - [2008/04/22 18:33:30 | 000,038,856 | —- | M] (Teruten Co. LTD.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\GDISpy.sys – (GDISpyDevice)
DRV - [2007/02/06 04:36:48 | 000,650,240 | —- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\stwrt.sys – (STHDA)
DRV - [2007/01/12 13:41:32 | 000,113,792 | —- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfbd.sys – (tosrfbd)
DRV - [2007/01/12 13:16:54 | 000,040,576 | —- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfusb.sys – (tosrfusb)
DRV - [2006/11/20 09:55:16 | 000,036,480 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfbnp.sys – (tosrfbnp)
DRV - [2006/11/07 03:51:50 | 000,506,368 | —- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\ExpasAG.sys – (LEX_AS_NIC_SERVICE_YNOS)
DRV - [2006/11/06 14:56:03 | 000,227,328 | —- | M] (Texas Instruments) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\ti21sony.sys – (ti21sony)
DRV - [2006/11/02 08:30:55 | 000,200,704 | —- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] – C:\Windows\System32\drivers\e1e6032.sys – (e1express)
DRV - [2006/11/01 05:31:46 | 000,017,328 | —- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] – C:\Windows\System32\drivers\SiWinAcc.sys – (SiFilter)
DRV - [2006/11/01 05:31:14 | 000,012,464 | —- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] – C:\Windows\System32\drivers\SiRemFil.sys – (SiRemFil)
DRV - [2006/11/01 05:30:34 | 000,074,672 | —- | M] (Silicon Image, Inc.) [Kernel | Disabled | Stopped] – C:\Windows\System32\drivers\SI3132.sys – (SI3132)
DRV - [2006/10/30 01:42:28 | 001,786,880 | —- | M] (Intel® Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\NETw3v32.sys – (NETw3v32)
DRV - [2006/10/27 14:08:36 | 000,072,704 | —- | M] (Ricoh) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\R5U870FLx86.sys – (R5U870FLx86)
DRV - [2006/10/27 14:08:32 | 000,043,904 | —- | M] (Ricoh) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\R5U870FUx86.sys – (R5U870FUx86)
DRV - [2006/10/25 12:53:00 | 000,058,112 | —- | M] (Sony Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\Sonyddpu.sys – (Sonyddpu)
DRV - [2006/10/18 03:56:30 | 000,010,216 | —- | M] (Sony Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\DMICall.sys – (DMICall)
DRV - [2006/10/13 12:34:22 | 000,027,520 | —- | M] (Sony Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\SonyNC.sys – (SNC)
DRV - [2006/10/10 11:33:00 | 000,041,600 | —- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosporte.sys – (tosporte)
DRV - [2006/10/05 08:07:46 | 000,073,600 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\Tosrfhid.sys – (Tosrfhid)
DRV - [2006/10/01 04:00:00 | 000,022,272 | —- | M] (Texim Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\TxVDrv.sys – (TxVDrv)
DRV - [2006/09/06 10:44:52 | 000,030,976 | —- | M] (Sony Corporation) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\SonyImgF.sys – (SonyImgF)
DRV - [2006/08/30 01:35:58 | 000,140,800 | —- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\Apfiltr.sys – (ApfiltrService)
DRV - [2006/08/04 09:39:10 | 000,008,192 | —- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] – C:\Windows\System32\drivers\XAudio.sys – (XAudio)
DRV - [2005/08/01 08:45:00 | 000,064,896 | —- | M] (TOSHIBA Corporation) [Kernel | System | Running] – C:\Windows\System32\drivers\tosrfcom.sys – (Tosrfcom)
DRV - [2005/01/06 05:42:00 | 000,018,612 | —- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] – C:\Windows\System32\drivers\tosrfnds.sys – (tosrfnds)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.searchonme.com/
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{624F0464-C722-4EC7-99FB-E4BCC314E2B3}: "URL" = http://search.yahoo.co.jp/search?&p={s…e7&ei=utf-8


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.searchonme.com/
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{09A8233A-8B2D-4B39-A897-A6E585EBE661}: "URL" = http://uk.search.yahoo.com/search/audio?ei…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{4D5CB369-D501-4641-AA1C-B3F63C4AF055}: "URL" = http://uk.news.search.yahoo.com/search/new…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{5E48C6CC-FEF8-491C-91C7-7EC8DEFBA5B2}: "URL" = http://uk.search.yahoo.com/search/video?ei…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{624F0464-C722-4EC7-99FB-E4BCC314E2B3}: "URL" = http://search.yahoo.co.jp/search?&p={s…e7&ei=utf-8
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{6397F18E-6073-409C-BADF-780E6508CBCE}: "URL" = http://uk.local.yahoo.com/search.html?p={s…s=&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{698A4840-AA4B-4577-BCBE-B05816A91D6F}: "URL" = http://uk.search.yahoo.com/search/images?e…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{C04AFA50-AFA3-4421-A83C-703F6E1E7144}: "URL" = http://uk.search.yahoo.com/search/dir?ei=U…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{DECA3892-BA8F-44b8-A993-A466AD694AE4}: "URL" = http://uk.search.yahoo.com/search?p={searc…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\..\SearchScopes\{F211E784-4A3A-4E2C-874E-B6DA5D0CB473}: "URL" = http://shopping.yahoo.co.uk/ctl/do/search?…s}&fr=yessv
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-739007543-2237649779-995633458-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "SearchOnMe"
FF - prefs.js..browser.search.defaultenginename,S: S", "SearchOnMe"
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: "http://search.searchonme.com/?l=1&q="
FF - prefs.js..browser.search.order.1: "SearchOnMe"
FF - prefs.js..browser.search.order.1,S: S", "SearchOnMe"
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.selectedEngine,S: S", "SearchOnMe"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.co.jp/"
FF - prefs.js..extensions.enabledAddons: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.9.10
FF - prefs.js..extensions.enabledAddons: {8b5bea8c-6194-4c7c-a440-d5ca181480c3}:1.300.430
FF - prefs.js..extensions.enabledAddons: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}:6.0.35
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:5.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..extensions.enabledItems: [removed]:1.1.3
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_35: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Emi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{1E73965B-8B48-48be-9C8D-68B920ABC1C4}: C:\Program Files\AVG\AVG2012\Firefox4\ [2012/09/11 10:43:42 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/07/02 16:58:35 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/10/13 15:05:51 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/10/13 15:05:03 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/10/13 15:05:51 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/10/13 15:05:03 | 000,000,000 | —D | M]

[2008/10/22 12:00:56 | 000,000,000 | —D | M] (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\Extensions
[2008/10/22 12:00:56 | 000,000,000 | —D | M] (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\Extensions\[removed]
[2012/10/11 11:37:14 | 000,000,000 | —D | M] (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions
[2010/05/11 06:52:16 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/10/05 20:35:39 | 000,000,000 | —D | M] (DownloadHelper) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2012/10/05 22:33:26 | 000,000,000 | —D | M] (ADDICT-THING) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\[removed]
[2012/10/07 22:18:22 | 000,000,000 | —D | M] (ADDICT-THING) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\[removed]
[2012/10/07 22:30:20 | 000,000,000 | —D | M] (ADDICT-THING) – C:\Users\Emi\AppData\Roaming\mozilla\Firefox\Profiles\bw6pfu9s.default\extensions\[removed]
[2012/10/09 12:21:27 | 000,684,162 | —- | M] () (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\firefox\profiles\bw6pfu9s.default\extensions\{8b5bea8c-6194-4c7c-a440-d5ca181480c3}.xpi
[2012/07/31 09:28:39 | 000,375,811 | —- | M] () (No name found) – C:\Users\Emi\AppData\Roaming\mozilla\firefox\profiles\bw6pfu9s.default\extensions\{AE93811A-5C9A-4d34-8462-F7B864FC4696}.xpi
[2012/10/11 11:43:54 | 000,007,756 | —- | M] () – C:\Users\Emi\AppData\Roaming\mozilla\firefox\profiles\bw6pfu9s.default\searchplugins\SearchOnMe.xml
[2012/10/13 15:04:56 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2012/10/13 15:04:56 | 000,000,000 | —D | M] (Java Console) – C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012/10/13 15:05:50 | 000,261,600 | —- | M] (Mozilla Foundation) – C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012/10/13 15:05:40 | 000,002,016 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\amazon-jp.xml
[2012/10/13 15:05:40 | 000,004,043 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\google-jp.xml
[2012/10/13 15:05:40 | 000,001,443 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\oshiete-goo.xml
[2012/10/13 15:05:40 | 000,000,988 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\rakuten.xml
[2012/10/13 15:05:40 | 000,002,271 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\twitter-ja.xml
[2012/10/13 15:05:39 | 000,001,392 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\wikipedia-ja.xml
[2012/10/13 15:05:39 | 000,001,063 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-jp-auctions.xml
[2012/10/13 15:05:39 | 000,000,870 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\yahoo-jp.xml

========== Chrome ==========

CHR - homepage: http://search.searchonme.com/

O1 HOSTS File: ([2012/10/12 22:19:06 | 000,000,027 | —- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (かんたん登録2) - {0DD41AE7-6196-42E7-BDE5-4F393997449E} - C:\Program Files\Justsystem\SimpleAutoInput\AtInBnd.dll (株式会社ジャストシステム)
O2 - BHO: (DivX Plus Web Player HTML5 ) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (EWPBrowseObject Class) - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll ()
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (かんたん登録2 ツールバー) - {833CFE4E-05BD-43A3-97A7-A4E80D742F0F} - C:\Program Files\Justsystem\SimpleAutoInput\AtInBnd.dll (株式会社ジャストシステム)
O4 - HKLM..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [E-Flyer] C:\Program Files\Sony\E-Flyer\SubFlyer.exe ()
O4 - HKLM..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe (Sony Corporation)
O4 - HKLM..\Run: [SetGamma] C:\Program Files\Sony\SetGamma\SetGamma.exe (Sony Corporation)
O4 - HKLM..\Run: [VAIOCameraUtility] C:\Program Files\Sony\VAIO Camera Utility\VCUServe.exe (Sony Corporation)
O4 - HKU\S-1-5-21-739007543-2237649779-995633458-1004..\Run: [SsAAD.exe] C:\Program Files\Sony\SonicStage\SSAAD.exe ()
O4 - HKU\S-1-5-21-739007543-2237649779-995633458-1004..\Run: [TomTomHOME.exe] C:\Users\Emi\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - Startup: C:\Users\Emi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\かざそうFeliCa.lnk = C:\Program Files\Sony\FeliCa Sensing\FeliSen.exe (Sony Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-739007543-2237649779-995633458-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Easy-WebPrint プレビュー - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint 印刷 - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint 印刷リストに追加 - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O8 - Extra context menu item: Easy-WebPrint 高速印刷 - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\iflsp.dll (デジタルアーツ株式会社)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {91DFB26C-AFD7-47C2-A07D-D22AF3548169} http://beauty.geocities.yahoo.co.jp/namo/g…or/NamoWec6.cab (NamoWeCtl 6.0 for YahooJpn)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_35)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_35)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{22CD1543-C312-4180-8903-388A87EEC278}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85066FAF-0A01-4877-ADDD-EB81ECE91A6C}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\Windows\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop WallPaper: C:\Users\Emi\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows フォト ギャラリー壁紙.jpg
O24 - Desktop BackupWallPaper: C:\Users\Emi\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows フォト ギャラリー壁紙.jpg
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/10/13 15:04:53 | 000,000,000 | —D | C] – C:\Program Files\Mozilla Firefox
[2012/10/12 22:25:00 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2012/10/12 22:24:46 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\temp
[2012/10/12 21:59:18 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2012/10/12 21:59:18 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2012/10/12 21:59:17 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2012/10/12 21:59:17 | 000,212,480 | —- | C] (SteelWerX) – C:\Windows\SWXCACLS.exe
[2012/10/12 21:59:03 | 000,000,000 | —D | C] – C:\ComboFix
[2012/10/12 21:55:24 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\デスクトップ
[2012/10/11 22:15:47 | 000,000,000 | —D | C] – C:\Qoobox
[2012/10/11 22:14:35 | 000,000,000 | —D | C] – C:\Windows\erdnt
[2012/10/11 11:59:16 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Roaming\Malwarebytes
[2012/10/11 11:58:49 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/10/11 11:58:47 | 000,022,856 | —- | C] (Malwarebytes Corporation) – C:\Windows\System32\drivers\mbam.sys
[2012/10/11 11:58:47 | 000,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2012/10/10 16:07:52 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\RK_Quarantine
[2012/10/09 16:40:35 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012/10/09 16:40:19 | 000,000,000 | —D | C] – C:\ProgramData\Spybot - Search & Destroy
[2012/10/09 16:40:19 | 000,000,000 | —D | C] – C:\Program Files\Spybot - Search & Destroy
[2012/10/07 22:07:01 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\favorite songs 2
[2012/10/05 22:32:52 | 000,000,000 | —D | C] – C:\Program Files\SProtector
[2012/10/05 22:32:02 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ADDICT-THING
[2012/10/05 22:31:54 | 000,000,000 | —D | C] – C:\ProgramData\ADDICT-THING
[2012/10/05 21:52:06 | 000,000,000 | —D | C] – C:\Users\Emi\dwhelper
[2012/10/03 22:11:46 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Freecorder 6 Video
[2012/10/03 22:10:41 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Roaming\Freecorder 6 Video
[2012/10/03 22:09:21 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Freecorder 6 Converter
[2012/10/03 22:09:04 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Roaming\Freecorder 6 Converter
[2012/10/03 22:07:42 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Freecorder 6 Audio
[2012/10/03 22:07:16 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Roaming\Freecorder 6 Audio
[2012/10/03 22:07:16 | 000,000,000 | —D | C] – C:\Users\Emi\Documents\Freecorder
[2012/10/03 22:06:38 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Jaksta_Technologies_Pty_L
[2012/10/03 22:00:49 | 000,000,000 | —D | C] – C:\Program Files\Applian Technologies
[2012/10/03 20:52:05 | 000,000,000 | —D | C] – C:\Users\Emi\Documents\Abelssoft
[2012/10/03 20:03:27 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Abelssoft
[2012/10/03 19:47:05 | 000,295,264 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationHost.exe
[2012/10/03 19:47:05 | 000,099,176 | —- | C] (Microsoft Corporation) – C:\Windows\System32\PresentationHostProxy.dll
[2012/10/03 19:47:05 | 000,049,472 | —- | C] (Microsoft Corporation) – C:\Windows\System32\netfxperf.dll
[2012/10/03 15:26:32 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\favorite music
[2012/09/29 08:22:30 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
[2012/09/27 18:12:09 | 000,000,000 | —D | C] – C:\Users\Emi\Desktop\photos from ray
[2012/09/23 19:59:33 | 000,000,000 | —D | C] – C:\Users\Emi\AppData\Local\Unity
[2012/09/15 12:15:53 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/09/15 12:11:45 | 000,000,000 | —D | C] – C:\Program Files\iPod
[2012/09/15 12:11:09 | 000,000,000 | —D | C] – C:\Program Files\iTunes
[2012/09/15 12:11:09 | 000,000,000 | —D | C] – C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1

========== Files - Modified Within 30 Days ==========

[2012/10/13 16:51:23 | 000,000,626 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/10/13 16:33:15 | 000,003,456 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/10/13 16:33:14 | 000,003,456 | -H– | M] () – C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/10/13 11:33:31 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/10/13 08:30:50 | 097,246,195 | —- | M] () – C:\Windows\System32\drivers\AVG\incavi.avm
[2012/10/12 22:19:06 | 000,000,027 | —- | M] () – C:\Windows\System32\drivers\etc\hosts
[2012/10/11 11:58:50 | 000,000,906 | —- | M] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/10 18:31:20 | 000,000,512 | —- | M] () – C:\Users\Emi\Documents\MBR.dat
[2012/10/10 18:22:02 | 000,467,173 | —- | M] () – C:\Windows\System32\drivers\AVG\iavichjg.avm
[2012/10/09 16:41:01 | 000,001,079 | —- | M] () – C:\Users\Emi\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2012/10/09 16:41:01 | 000,001,055 | —- | M] () – C:\Users\Emi\Desktop\Spybot - Search & Destroy.lnk
[2012/10/09 07:48:55 | 000,446,406 | —- | M] () – C:\Windows\System32\perfh011.dat
[2012/10/09 07:48:55 | 000,140,234 | —- | M] () – C:\Windows\System32\perfc011.dat
[2012/10/09 07:48:54 | 000,704,984 | —- | M] () – C:\Windows\System32\perfh009.dat
[2012/10/09 07:48:54 | 000,140,134 | —- | M] () – C:\Windows\System32\perfc009.dat
[2012/10/08 20:51:54 | 000,696,760 | —- | M] (Adobe Systems Incorporated) – C:\Windows\System32\FlashPlayerApp.exe
[2012/10/08 20:51:54 | 000,073,656 | —- | M] (Adobe Systems Incorporated) – C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012/10/07 12:25:33 | 000,000,932 | —- | M] () – C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2012/10/05 22:12:41 | 000,118,272 | —- | M] () – C:\Users\Emi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/19 09:20:26 | 158,419,261 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/09/15 12:15:57 | 000,001,664 | —- | M] () – C:\Users\Public\Desktop\iTunes.lnk

========== Files Created - No Company Name ==========

[2012/10/12 21:59:18 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2012/10/12 21:59:18 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2012/10/12 21:59:18 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2012/10/12 21:59:18 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2012/10/12 21:59:18 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2012/10/11 11:58:50 | 000,000,906 | —- | C] () – C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/10/10 18:31:20 | 000,000,512 | —- | C] () – C:\Users\Emi\Documents\MBR.dat
[2012/10/09 16:41:01 | 000,001,079 | —- | C] () – C:\Users\Emi\Application Data\Microsoft\Internet Explorer\Quick Launch\Spybot - Search & Destroy.lnk
[2012/10/09 16:41:01 | 000,001,055 | —- | C] () – C:\Users\Emi\Desktop\Spybot - Search & Destroy.lnk
[2012/09/15 12:15:57 | 000,001,664 | —- | C] () – C:\Users\Public\Desktop\iTunes.lnk
[2012/06/06 10:54:02 | 000,034,814 | —- | C] () – C:\Users\Emi\AppData\Local\dt.dat
[2011/02/08 12:48:55 | 000,000,056 | -H– | C] () – C:\ProgramData\ezsidmv.dat
[2010/10/28 08:04:15 | 000,001,940 | —- | C] () – C:\Users\Emi\AppData\Local\{96C87F53-AC72-4604-A9CC-186A49F17F3C}.ini
[2010/09/26 11:01:28 | 000,000,680 | —- | C] () – C:\Users\Emi\AppData\Local\d3d9caps.dat
[2009/10/16 13:41:04 | 000,700,572 | —- | C] () – C:\ProgramData\LUUnInstall.LiveUpdate
[2009/02/10 18:49:02 | 000,000,104 | —- | C] () – C:\Users\Emi\コンピュータ - ショートカット.lnk
[2007/06/27 14:16:13 | 000,118,272 | —- | C] () – C:\Users\Emi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2006/11/02 13:54:22 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll – [2008/11/06 13:57:06 | 011,315,712 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/03/03 05:16:12 | 000,614,912 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2006/11/02 10:46:13 | 000,348,672 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< MD5 for: EXPLORER.EXE >
[2008/10/29 07:20:29 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE – C:\Windows\erdnt\cache\explorer.exe
[2008/10/29 07:20:29 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE – C:\Windows\explorer.exe
[2008/10/29 07:20:29 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008/10/29 07:29:41 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008/10/30 04:59:17 | 002,927,616 | —- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2007/11/15 01:37:26 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=6D06CD98D954FE87FB2DB8108793B399 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16549_none_4fac29707cae347a\explorer.exe
[2007/11/15 01:37:26 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=BD06F0BF753BC704B653C3A50F89D362 – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20668_none_501f261995dcf2cf\explorer.exe
[2008/10/28 03:15:02 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2006/11/02 10:45:07 | 002,923,520 | —- | M] (Microsoft Corporation) MD5=FD8C53FB002217F6F888BCF6F5D7084D – C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16386_none_4f7de5167cd15deb\explorer.exe
[2008/01/19 08:33:10 | 002,927,104 | —- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F – C:\Windows\SoftwareDistribution\Download\df81987ce1972154ab659b2f560f1610\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

< MD5 for: SERVICES.EXE >
[2008/01/19 08:33:28 | 000,279,040 | —- | M] (Microsoft Corporation) MD5=2B336AB6286D6C81FA02CBAB914E3C6C – C:\Windows\SoftwareDistribution\Download\df81987ce1972154ab659b2f560f1610\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe
[2006/11/02 10:45:40 | 000,279,552 | —- | M] (Microsoft Corporation) MD5=329CF3C97CE4C19375C8ABCABAE258B0 – C:\Windows\erdnt\cache\services.exe
[2006/11/02 10:45:40 | 000,279,552 | —- | M] (Microsoft Corporation) MD5=329CF3C97CE4C19375C8ABCABAE258B0 – C:\Windows\System32\services.exe
[2006/11/02 10:45:40 | 000,279,552 | —- | M] (Microsoft Corporation) MD5=329CF3C97CE4C19375C8ABCABAE258B0 – C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6000.16386_none_cd28fe6bd05df036\services.exe

< MD5 for: SVCHOST.EXE >
[2006/11/02 10:45:47 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=10DA15933D582D2FEDCF705EFE394B09 – C:\Windows\erdnt\cache\svchost.exe
[2006/11/02 10:45:47 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=10DA15933D582D2FEDCF705EFE394B09 – C:\Windows\System32\svchost.exe
[2006/11/02 10:45:47 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=10DA15933D582D2FEDCF705EFE394B09 – C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6000.16386_none_b38497a50862ad11\svchost.exe
[2008/01/19 08:33:32 | 000,021,504 | —- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF – C:\Windows\SoftwareDistribution\Download\df81987ce1972154ab659b2f560f1610\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe
[2012/09/07 17:04:42 | 000,218,696 | —- | M] () MD5=4E0D8C9F83B7FD82393F7D8CCC27E7AE – C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe

< MD5 for: USERINIT.EXE >
[2008/01/19 08:33:33 | 000,025,088 | —- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 – C:\Windows\SoftwareDistribution\Download\df81987ce1972154ab659b2f560f1610\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe
[2006/11/02 10:45:50 | 000,024,576 | —- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 – C:\Windows\erdnt\cache\userinit.exe
[2006/11/02 10:45:50 | 000,024,576 | —- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 – C:\Windows\System32\userinit.exe
[2006/11/02 10:45:50 | 000,024,576 | —- | M] (Microsoft Corporation) MD5=22027835939F86C3E47AD8E3FBDE3D11 – C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6000.16386_none_d9f1f819d4c4e737\userinit.exe

< MD5 for: WINLOGON.EXE >
[2012/09/07 17:04:42 | 000,218,696 | —- | M] () MD5=4E0D8C9F83B7FD82393F7D8CCC27E7AE – C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2006/11/02 10:45:57 | 000,308,224 | —- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD – C:\Windows\erdnt\cache\winlogon.exe
[2006/11/02 10:45:57 | 000,308,224 | —- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD – C:\Windows\System32\winlogon.exe
[2006/11/02 10:45:57 | 000,308,224 | —- | M] (Microsoft Corporation) MD5=9F75392B9128A91ABAFB044EA350BAAD – C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6000.16386_none_6d8c3f1ad8066b21\winlogon.exe
[2008/01/19 08:33:37 | 000,314,880 | —- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 – C:\Windows\SoftwareDistribution\Download\df81987ce1972154ab659b2f560f1610\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< %systemroot%\*. /rp /s >

========== Drive Information ==========

Physical Drives
—————

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: TOSHIBA MK1034GSX ATA Device
Partitions: 2
Status: OK
Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE1 -
Interface type:
Media Type:
Model: MemoryStick0 Device
Partitions: 0
Status: OK
Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE2 -
Interface type: USB
Media Type:
Model: Sony USB HS-CARD USB Device
Partitions: 0
Status: OK
Status Info: 0

Partitions
—————

DeviceID: Disk #0, Partition #0
PartitionType: Unknown
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 7.00GB
Starting Offset: 1048576
Hidden sectors: 0


DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 86.00GB
Starting Offset: 8000634880
Hidden sectors: 0


========== Alternate Data Streams ==========

@Alternate Data Stream - 145 bytes -> C:\ProgramData\TEMP:0B4227B4
@Alternate Data Stream - 133 bytes -> C:\ProgramData\TEMP:0B4227B4

< End of report >
Post #26
Extras
OTL Extras logfile created on: 2012/10/13 16:32:58 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Emi\Desktop\デスクトップ
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format: yyyy/MM/dd

1013.56 Mb Total Physical Memory | 483.23 Mb Available Physical Memory | 47.68% Memory free
2.24 Gb Paging File | 0.98 Gb Available in Paging File | 43.79% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 85.71 Gb Total Space | 17.37 Gb Free Space | 20.27% Space Free | Partition Type: NTFS

Computer Name: EMI-PC | User Name: Emi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] – C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Reg Error: Key error.] – Reg Error: Key error. File not found
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
hlpfile [open] – %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
https [open] – Reg Error: Key error.
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – C:\Program Files\VideoLAN\VLC\vlc.exe –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – C:\Program Files\VideoLAN\VLC\vlc.exe –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{13C2E2FA-4FE8-4E05-A3BD-F6D76258051B}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{52C2C7F4-19B8-4242-A30B-F27E77837B4A}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{6561AE65-99D3-4ABD-A4B9-AF65FE0DA0C4}" = lport=2869 | protocol=6 | dir=in | app=system |
"{95A557F2-0970-492A-BFCB-354F64510F01}" = lport=10243 | protocol=6 | dir=in | app=system |
"{9E18C9D2-00AB-492E-9053-F8E10674599A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{BC529414-FD06-41BF-AECF-38897A9021E8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{D1FD8668-E630-4D45-88B7-CF327C926478}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DE936CBA-89EE-4953-82F6-A010C3CA916C}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{ED2937D1-2BB8-499D-AD4E-1B9EFD40C669}" = rport=10243 | protocol=6 | dir=out | app=system |
"{F1CE7524-A1B3-4816-B13B-BA053380FEEB}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{06B7DBE1-CA0B-4CED-8E0D-AB11BD2B4E43}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{12E38EF9-7EE7-4C86-BAD0-57E0FFA17A33}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{16968E37-4C07-45DF-802F-5BD5CFB3C16C}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{1CAA5896-11F3-4663-9A78-841EA169C8B0}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{1DD02F9F-40A2-4281-BC16-A92F22F45D6A}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{1E32BD13-2C20-49BE-9AD3-60B652B7CBCB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{1F353943-2AF0-4C4F-8253-4A8E8078E5FE}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{2C2B971A-05BA-4449-902D-2F7BC24850A9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{303C27F4-92EE-4E23-A059-D44D40DB488D}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{3300E784-2823-42F1-A509-4082343DF6B1}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{405C95D4-3FFD-44A1-953E-11B6A07FA0DC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4A0F98CF-D727-44AB-B304-BDE792EBCEFE}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{552D2517-5E33-4294-9653-BB44F04458B9}" = protocol=17 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{60328D75-E343-4A64-BE60-AFA34A25F6A9}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6524FF5A-91E1-4C06-943B-E32874602B65}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{6A75A808-D5C0-4579-B260-A7C0C0C34DDF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6BEB5D4B-7BA2-4084-B9CF-977ADB7EB099}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgnsx.exe |
"{6EC6F50B-33E5-4387-AB1E-634AB600557A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{73FF8368-8EBF-4A96-AF87-B68A66D40142}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7F4B956F-977D-4C8E-ADD0-9A4FEF148F7A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{864CC152-A928-4457-AD51-A62D95F55745}" = protocol=6 | dir=out | app=system |
"{878170A0-9829-45A3-BC39-9599C9514B35}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{93FB9737-8AF7-4C4F-A8B2-83C0BC219A09}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{A014AB32-904E-47F3-907E-5908BD600176}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{BE8A5D13-194A-4FC4-B486-009E81E7A3ED}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgdiagex.exe |
"{C44A271F-D2C5-4FB5-BFEA-46A459C8C1AE}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgemcx.exe |
"{C4C212EB-27AC-42FF-B056-622752E1BD2C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CD7258FA-6458-48EF-ACDD-901A9119BEE9}" = protocol=6 | dir=in | app=c:\program files\avg\avg2012\avgmfapx.exe |
"{D87883E2-0C91-40A3-80C4-94558137DB81}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"TCP Query User{BF133DDF-405D-42BA-93AC-864C9F244072}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe |
"UDP Query User{873A877B-5A4A-43DE-B46C-E4E473BD7751}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{009E7FB7-1775-4D89-8956-F5C9A1C019FC}" = DSD Playback Plug-in
"{01FDC9FC-4D4F-4DB0-ACD1-D3E8E1D52902}" = Sony Video Shared Library
"{0312BD0D-A1FE-4E1A-9208-D436F566D867}" = VAIO Azure Float Wallpaper
"{05FBEE3C-CFAA-47D2-96C4-866201D34C03}" = ATLAS 翻訳パーソナル 2007 LE
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B59411E-1900-463C-AE64-AA106BB2BD58}" = えいご漬け 改訂版（体験版）
"{0B8B8160-11F9-4175-A4A4-DCAE95941727}" = 筆ぐるめ Ver.14
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0F6F6876-6334-4977-B5DD-CFC12E193420}" = iTunes
"{11A8E27C-9C60-40D5-9924-D7E81DF165E3}" = Microsoft SQL Server VSS Writer
"{11D2C5F8-F379-4659-85BE-DCE1D8D60FB8}" = OpenOffice.org Installer 1.0
"{1417F599-1DBD-4499-9375-B2813E9F890C}" = VAIO Camera Utility
"{14B79826-8E53-30C2-8D88-28B8726C90FF}" = Microsoft .NET Framework 4 Client Profile JPN Language Pack
"{156E4680-CA1F-4D45-AE9F-D6731E37C175}" = FeliCa Port Software
"{166799F1-5C97-404A-9EAF-EDF17835713E}" = Microsoft SQL Server 2005 Express Edition (VAIO_VEDB)
"{17C7703E-0B2A-4593-9CB7-E2FE14B6F8EA}" = Sony Snymsico for Vista
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"{2063C2E8-3812-4BBD-9998-6610F80C1DD4}" = VAIO Media AC3 Decoder 1.0
"{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"{235915A8-1C0D-4920-95EA-FE8B773E5F57}" = VAIO Teal Whisper Wallpaper
"{26A24AE4-039D-4CA4-87B4-2F83216035FF}" = Java™ 6 Update 35
"{2A0F3EF9-68EE-49E9-A05B-ED5B82DF63E5}" = Wireless Switch Setting Utility
"{2A2FF7F5-6F0E-4A5D-A881-39365E718BD6}" = VAIO Cozy Orange Wallpaper
"{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}" = EPSON Scan Assistant
"{2EB81825-E9EE-44F4-8F51-1240C3898DC6}" = EPSON File Manager
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java™ 6 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{326DC400-1FC4-4D7D-946D-06D1EAB93200}" = VAIOナビ
"{38580E5E-AF78-4536-AD1E-6A62661372C5}" = AVG 2012
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D79DB6E-73DA-46C9-B8FA-DAE52108246F}" = OpenMG Secure Module 4.6.01
"{463F8033-9083-4DCE-8A1A-CA588D8EF9AF}" = 静止画色補正
"{48D2C608-6E46-4978-A2D4-67E34F95E971}" = かんたん登録2
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{500162A0-4DD5-460A-BAFD-895AAE48C532}" = VAIO Media Content Collection 6.0
"{50316C0A-CC2A-460A-9EA5-F486E54AC17D}_is1" = AVG PC Tuneup
"{55B781F0-060E-11D4-99D7-00C04FCCB775}" =
"{560F6B2E-F0DF-44E5-8190-A4A161F0E205}" = VAIO Media 6.0
"{5855C127-1F20-404D-B7FB-1FD84D7EAB5E}" = VAIO Media (再配布) 6.0
"{59452470-A902-477F-9338-9B88101681BD}" = Setting Utility Series
"{5958CAC6-373E-402F-84FE-0A699AA920B9}" = LAN Setting Utility
"{5BEB5AA0-7B78-4D85-8D98-F84CA1E063E9}" = かざポン for VAIO
"{5E343EF6-D27C-4CFC-9FAE-9AAFB541BCEE}" = VAIO Photo 2007
"{5E862EC5-40B2-4A7E-A87D-B504E141318A}" = スクリーンセーバーロック2
"{6332AFF1-9D9A-429C-AA03-F82749FA4F49}" = SonicStage Mastering Studio
"{63BE6BE8-C96D-4CCD-B6E3-416FEC883D59}" = i-フィルター 4
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{67EDD823-135A-4D59-87BD-950616D6E857}" = EPSON Copy Utility 3
"{68A69CFF-130D-4CDE-AB0E-7374ECB144C8}" = VAIO Video & Photo ユーティリティ
"{69E7A57D-89ED-4C16-A37C-AA53EF059F9A}" = かざしてログオン
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B1F20F2-6321-4669-A58C-33DF8E7517FF}" = VAIO Entertainment Platform
"{6D2576EC-A0E9-418A-A09A-409933A3B6F4}" = VAIO Camera Capture Utility
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{785EB1D4-ECEC-4195-99B4-73C47E187721}" = VAIO Media Integrated Server 6.0
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7F41D91F-F0A9-3DD8-91DF-FC86E00F5DC2}" = Microsoft .NET Framework 4 Extended JPN Language Pack
"{802AE695-3C5A-48A2-99B4-066298E659A8}" = Smart Network
"{82D5BACA-3619-4D34-99DB-3A65CFB4DA33}" = DSD Direct
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83CDA18E-0BF3-4ACA-872C-B4CDABF2360E}" = VAIO Update 4
"{87246AC6-09F0-46FA-8DCA-E425D51EFEAA}" = ホットスポット・ツール
"{8941893C-32A6-4C03-A71B-DA72A715F5DC}" = Microsoft SQL Server セットアップ サポート ファイル (英語)
"{8A0401AB-20DB-4A74-BD56-EAFC643CD660}" =
"{8CC68433-5837-4075-B81F-EA7E4F14CE60}" = iCloud
"{8DAC1AE4-33D1-4A78-8A42-00E09EDECC3E}" = Camera RAW Plug-In for EPSON Creativity Suite
"{8DF01556-CD47-418B-88AA-CBCADA8A8D6F}" = ドラネットキッズ入学準備　体験版
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0016-0411-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Japanese) 2007
"{90120000-0016-0411-0000-0000000FF1CE}_PERSONALR_{209FA1DF-E70E-436A-BB71-9ECB81FC3776}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0411-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Japanese) 2007
"{90120000-001A-0411-0000-0000000FF1CE}_PERSONALR_{209FA1DF-E70E-436A-BB71-9ECB81FC3776}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0411-0000-0000000FF1CE}" = Microsoft Office Word MUI (Japanese) 2007
"{90120000-001B-0411-0000-0000000FF1CE}_PERSONALR_{209FA1DF-E70E-436A-BB71-9ECB81FC3776}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PERSONALR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0411-0000-0000000FF1CE}" = Microsoft Office Proof (Japanese) 2007
"{90120000-001F-0411-0000-0000000FF1CE}_PERSONALR_{8B0BBAAA-BB10-41E1-B27E-24CF08CBB253}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-0028-0411-0000-0000000FF1CE}" = Microsoft Office IME (Japanese) 2007
"{90120000-0028-0411-0000-0000000FF1CE}_PERSONALR_{277B1BCF-97A7-40F2-87A5-3CACB0E9714B}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0411-0000-0000000FF1CE}" = Microsoft Office Proofing (Japanese) 2007
"{90120000-006E-0411-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Japanese) 2007
"{90120000-006E-0411-0000-0000000FF1CE}_PERSONALR_{84C84010-F698-443E-84B4-A82DD01A17FE}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{91120000-0033-0000-0000-0000000FF1CE}" = Microsoft Office Personal 2007
"{91120000-0033-0000-0000-0000000FF1CE}_PERSONALR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}" = MobileMe Control Panel
"{932245FB-2F3B-3E2E-B8AB-BDE96E434F21}" = Microsoft .NET Framework 3.5 Language Pack SP1 - jpn
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{97BCD719-6ECB-458F-97D6-F38D2E07375E}" = VAIO Aqua Breeze Wallpaper
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C1C8A04-F8CA-4472-A92D-4288CE32DE86}" = SonicStage Mastering Studio プラグイン
"{9C665D73-1F28-470A-AB62-5A45B8B4172C}" = 時事通信社　医学・健康コンテンツ
"{9DE175E1-F3A5-4112-9A17-2A219CE27CCC}" = VAIO Video & Photo Utilities
"{9E319E96-ED8E-4B01-9775-C521A1869A25}" = VAIO Power Management
"{9E407618-D9CD-4F39-9490-9ED45294073D}" = Click to DVD 2.0.05 Menu Data
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Alps Pointing-device for VAIO
"{A0EB195B-5876-48E6-879D-33D4B2102610}" = SonicStage 4.2
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{A5F3B2A6-CB42-11D6-9161-00E02975BB40}" = 一太郎ﾋﾞｭｰｱ
"{A947C2B3-7445-42C4-9063-EE704CACCB22}" = VAIO Hardware Diagnostics
"{A991D480-1349-4FDD-983C-19241910A9E1}" = Microsoft Office ナビ 2007
"{AC76BA86-7AD7-1041-7B44-A81300000003}" = Adobe Reader 8.1.3 - Japanese
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{AD650226-3335-45BB-9640-D8C973366A1A}" = パーソナルシェルター
"{ADAB8F0D-D35B-4792-80A0-EF8749D8CF74}" = VAIO Guide Movie Components
"{AF9A04EB-7D8E-41DE-9EDE-4AB9BB2B71B6}" = VAIO Media Registration Tool 6.0
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B59B3DA8-06F8-4B4C-AE94-5180753EF108}" = VAIO Floral Dusk Wallpaper
"{B66E665A-DF96-4C38-9422-C7F74BC1B4E5}" = EPSON Easy Photo Print
"{B69C390B-826F-473C-86EB-7AD4950818C3}" = AVG 2012
"{B8C8E26C-D3DD-4B5B-A4A5-2BD5922C5169}" = バイオ電子マニュアル
"{C121D295-D9C5-4002-A970-4479D5850818}" = AQUAZONE OpenWater 体験版
"{C183A21C-395A-490F-99D4-CCAB35E32859}" =
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{C99E6F22-FD0E-4D6E-925A-268AD1C050D6}" = its-moNavi PC
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
"{D30F9503-071B-4354-827D-C72D8E75BB05}" = Edy Viewer
"{D3B16DA0-1E93-11D5-A26F-009027CB933C}" = So-netサービス紹介
"{D4DDFAA1-EC37-4529-AD5B-A433ADE68662}" = Apple Mobile Device Support
"{D5EEF793-8357-456B-B793-F7753115CF42}" = Microsoft SQL Server Native Client
"{DF7DB916-90E5-40F2-9010-B8125EB5FD6F}" = SonicStage Mastering Studio オーディオフィルタ機能
"{E5E329DF-6C0D-4B6C-8D96-AF0B3F2A40DA}" = バイオ電子マニュアル データベース
"{E6AD2F37-3B4A-4EEC-ACDB-28BC08A81648}" = ドラネット小学一年生　体験版
"{E809063C-51A3-4269-8984-D1EB742F2151}" = Click to DVD 2.6.00
"{EC37A846-53AC-4DA7-98FA-76A4E74AA900}" = SonicStage Mastering Studio オーディオフィルタ機能 カスタムプリセット
"{ED46C765-9EB0-4D4A-AD6C-29CF7E8007B0}" = SFCard Viewer 2
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EF3D45BB-2260-4008-88EA-492E7744A9DF}" = Sony Utilities DLL
"{EFF25239-571D-44EC-B811-7A4CCBBB05B3}" = VAIO データリストアツール
"{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}" = VAIO Event Service
"{F41C96F8-3D72-4F94-9E9E-0B4E8F2B0C61}" = かざそうFeliCa
"{FC37C108-821D-4EDE-8F40-D5B497586805}" = バイオの設定
"{FCCB0B43-7A6D-49A4-A5B3-B10F592F4EB6}" = LAN-Express AS IEEE 802.11 Wireless LAN
"{FD836E74-7923-4174-A055-F97CD0F3BB46}" =
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"AVG" = AVG 2012
"CANON iMAGE GATEWAY 無料会員登録 iP4300" = CANON iMAGE GATEWAY 無料会員登録 iP4300
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"CX4300_5500_DX4400 manual" = CX4300_5500_DX4400 manual
"DivX Setup" = DivXセットアップ
"ELECOM RAKUTIN PRINT" = エレコムらくちんプリント
"EPSON Printer and Utilities" = EPSON Printer Software
"EPSON Scanner" = EPSON Scan
"HDMI" = Intel® Graphics Media Accelerator Driver
"Hoppysoft QTConverter 1.3.0" = Hoppysoft QTConverter 1.3.0
"InstallShield_{20471B27-D702-4FE8-8DEC-0702CC8C0A85}" = WinDVD for VAIO
"InstallShield_{20C45B32-5AB6-46A4-94EF-58950CAF05E5}" = EPSON Attach To Email
"InstallShield_{3D79DB6E-73DA-46C9-B8FA-DAE52108246F}" = OpenMG Secure Module 4.6.01
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.65.0.1400
"Microsoft .NET Framework 3.5 Language Pack SP1 - jpn" = Microsoft .NET Framework 3.5 Language Pack SP1 - 日本語
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile JPN Language Pack" = Microsoft .NET Framework 4 Client Profile Language Pack - 日本語
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended JPN Language Pack" = Microsoft .NET Framework 4 Extended Language Pack - 日本語
"Microsoft Office Navi 2007 12.0.2213.0" = Microsoft Office ナビ 2007
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Mozilla Firefox 15.0 (x86 ja)" = Mozilla Firefox 15.0 (x86 ja)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"PERSONALR" = Microsoft Office Personal 2007
"PROSet" = Intel® PRO Network Connections Drivers
"ShockwaveFlash" = Adobe Flash Player 9 ActiveX
"SProtector" = sprotector 1.62
"TomTom HOME" = TomTom HOME 2.8.3.2499
"VLC media player" = VLC media player 0.9.8a
"Yahoo!ツールバー" = Yahoo!ツールバー
"てきぱき家計簿マム５" = てきぱき家計簿マム５
"ラベル屋さんHOME" = ラベル屋さんHOME
"英単語名人10000" = 英単語名人10000

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-739007543-2237649779-995633458-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Mozilla Firefox 15.0.1 (x86 ja)" = Mozilla Firefox 15.0.1 (x86 ja)
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 2012/10/13 5:24:24 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 23978

Error - 2012/10/13 5:24:25 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2012/10/13 5:24:25 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 24976

Error - 2012/10/13 5:24:25 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 24976

Error - 2012/10/13 5:24:26 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2012/10/13 5:24:26 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 25990

Error - 2012/10/13 5:24:26 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 25990

Error - 2012/10/13 5:24:27 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2012/10/13 5:24:27 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 27004

Error - 2012/10/13 5:24:27 | Computer Name = Emi-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 27004

[ System Events ]
Error - 2012/10/13 3:21:55 | Computer Name = Emi-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 2012/10/13 3:22:36 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =

Error - 2012/10/13 3:22:46 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =

Error - 2012/10/13 3:22:46 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =

Error - 2012/10/13 3:22:46 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =

Error - 2012/10/13 3:22:46 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =

Error - 2012/10/13 10:50:20 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =

Error - 2012/10/13 10:50:27 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =

Error - 2012/10/13 11:30:56 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =

Error - 2012/10/13 11:31:34 | Computer Name = Emi-PC | Source = DCOM | ID = 10016
Description =


< End of report >
Post #27
There is one MPEG4 music file that I downloaded with free software which may have caused the problem to convert youtube to MP3 in dwhelper.(I have used a few other similar free software for the same purpose.)
Post #28
Hello Penpen

You did well with those logs and thanks for the extra information..

I’d like a look at the dwhelper folder before we continue so that I have all the details I need.

Open OTL
  • make sure all other windows are closed and to let it run uninterrupted.
  • when the window appears, click the None button near the top (it may looked greyed out)
  • in the window under Custom Scans/Fixes copy and paste the following


    c:\users\Emi\dwhelper\*.* /s

  • click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open a notepad window, OTL.Txt. Please post this log.

Satchfan
Post #29
Hi there, please have a look :)


OTL logfile created on: 2012/10/13 22:27:42 - Run 3
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Emi\Desktop\デスクトップ
Windows Vista Home Premium Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.17037)
Locale: 00000411 | Country: 日本 | Language: JPN | Date Format: yyyy/MM/dd

1013.56 Mb Total Physical Memory | 425.28 Mb Available Physical Memory | 41.96% Memory free
2.24 Gb Paging File | 0.81 Gb Available in Paging File | 36.27% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 85.71 Gb Total Space | 17.32 Gb Free Space | 20.20% Space Free | Partition Type: NTFS

Computer Name: EMI-PC | User Name: Emi | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days

========== Custom Scans ==========

< c:\users\Emi\dwhelper\*.* /s >
[2012/10/05 21:57:18 | 003,639,624 | —- | M] () – c:\users\Emi\dwhelper\なごり雪-山崎まさよし_スガシカオ.mp4

< End of report >

Thank you!
Post #30
Sorry Penpen :smack: I apologise also for the fact that due to time difference I shall have to send the reply tomorrow, (10.45pm here and I still haven't tidied up after dinner or taken the dog out). :wacko: Don't think we are far from sorting this out though. ;) Satchfan

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI