microsoft distribution service 3.0 and PUP [Solved]

OTL logfile created on: 23/08/2013 4:45:29 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\User\Desktop\Diognosing
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 66.66% Memory free
4.84 Gb Paging File | 3.89 Gb Available in Paging File | 80.39% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111.78 Gb Total Space | 15.69 Gb Free Space | 14.03% Space Free | Partition Type: NTFS

Computer Name: ACER_TM6460 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\User\Desktop\Diognosing\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe (Siber Systems)
PRC - C:\Program Files\AVG\AVG2013\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files\AVG\AVG2013\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2013\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2013\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\DriverUpdate\DriverUpdate.exe (SlimWare Utilities, Inc.)
PRC - c:\Program Files\Real\RealPlayer\realplay.exe (RealNetworks, Inc.)
PRC - C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files\Real\RealPlayer\Update\realonemessagecenter.exe (RealNetworks, Inc.)
PRC - C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe (RealNetworks, Inc.)
PRC - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files\AVG\AVG2013\avgemcx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - C:\Program Files\ControlCenter4\BrCcUxSys.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\ControlCenter4\BrCtrlCntr.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nuance Communications, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\WebUpdateSvc4.exe (Data Perceptions / PowerProgrammer)
PRC - C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe (Intel Corporation)
PRC - C:\Program Files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe (TP-LINK TECHNOLOGIES CO., LTD.)
PRC - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (O2Micro International)


========== Modules (No Company Name) ==========

MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\b14359470744c840c59fbe4e58034fd6\mscorlib.ni.dll ()
MOD - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files\Brother\BrUtilities\BrLogAPI.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\Libeay32.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\iWMSProv.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\IntStngs.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\acAuth.dll ()


========== Services (SafeList) ==========

SRV - (vToolbarUpdater15.4.0) – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe File not found
SRV - (MsMpSvc) – c:\Program Files\Microsoft Security Client\MsMpEng.exe File not found
SRV - (Allin1Convert_8hService) – C:\PROGRA~1\ALLIN1~2\bar\1.bin\8hbarsvc.exe File not found
SRV - (ACDaemon) – File not found
SRV - (AdobeFlashPlayerUpdateSvc) – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (avgwd) – C:\Program Files\AVG\AVG2013\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (Skype C2C Service) – C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (AVGIDSAgent) – C:\Program Files\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
SRV - (SkypeUpdate) – C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (RealNetworks Downloader Resolver Service) – C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
SRV - (MBAMService) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (JavaQuickStarterService) – C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (rpcapd) – C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (PDFProFiltSrvPP) – C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nuance Communications, Inc.)
SRV - (BrYNSvc) – C:\Program Files\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
SRV - (WebUpdate4) – C:\WINDOWS\system32\WebUpdateSvc4.exe (Data Perceptions / PowerProgrammer)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\hpzipm12.exe (HP)
SRV - (O2Flash) – C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (O2Micro International)


========== Driver Services (SafeList) ==========

DRV - (WDICA) – File not found
DRV - (PDRFRAME) – File not found
DRV - (PDRELI) – File not found
DRV - (PDFRAME) – File not found
DRV - (PDCOMP) – File not found
DRV - (PCIDump) – File not found
DRV - (MpKsle033037d) – c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{996C69FE-556B-47DA-AD95-1E462181B36C}\MpKsle033037d.sys File not found
DRV - (MpFilter) – system32\DRIVERS\MpFilter.sys File not found
DRV - (lbrtfdc) – File not found
DRV - (i2omgmt) – File not found
DRV - (hwdatacard) – File not found
DRV - (GAGPDrv) – File not found
DRV - (Changer) – File not found
DRV - (catchme) – C:\DOCUME~1\User\LOCALS~1\Temp\catchme.sys File not found
DRV - (SWDUMon) – C:\WINDOWS\system32\drivers\SWDUMon.sys ()
DRV - (hitmanpro37) – C:\WINDOWS\system32\drivers\hitmanpro37.sys ()
DRV - (avgtp) – C:\WINDOWS\system32\drivers\avgtpx86.sys (AVG Technologies)
DRV - (Avglogx) – C:\WINDOWS\system32\drivers\avglogx.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSDriver) – C:\WINDOWS\system32\drivers\avgidsdriverx.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSHX) – C:\WINDOWS\system32\drivers\avgidshx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgldx86) – C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgrkx86) – C:\WINDOWS\system32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) – C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (MBAMProtector) – C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (Avgtdix) – C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) – C:\WINDOWS\system32\drivers\avgidsshimx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Apowersoft_AudioDevice) – C:\WINDOWS\system32\drivers\Apowersoft_AudioDevice.sys (Wondershare)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (tap0901) – C:\WINDOWS\system32\drivers\tap0901.sys (The OpenVPN Project)
DRV - (NPF) – C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (SCDEmu) – C:\WINDOWS\System32\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV - (Afc) – C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (smihlp) – C:\Program Files\Protector Suite QL\smihlp.sys (UPEK Inc.)
DRV - (btaudio) – C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.)
DRV - (BTSERIAL) – C:\WINDOWS\system32\drivers\btserial.sys (Broadcom Corporation.)
DRV - (BTKRNL) – C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.)
DRV - (BTDriver) – C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.)
DRV - (BTWUSB) – C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.)
DRV - (BTWDNDIS) – C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.)
DRV - (btwhid) – C:\WINDOWS\system32\drivers\btwhid.sys (Broadcom Corporation.)
DRV - (ipasintf) – C:\WINDOWS\system32\drivers\pas2k.sys ()
DRV - (b57w2k) – C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (s24trans) – C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (w39n51) – C:\WINDOWS\system32\drivers\w39n51.sys (Intel® Corporation)
DRV - (SMCIRDA) – C:\WINDOWS\system32\drivers\smcirda.sys (SMSC)
DRV - (RT73) – C:\WINDOWS\system32\drivers\rt73.sys (Ralink Technology, Corp.)
DRV - (UIUSys) – C:\WINDOWS\system32\drivers\UIUSYS.SYS (Conexant Systems, Inc)
DRV - (IFXTPM) – C:\WINDOWS\system32\drivers\ifxtpm.sys (Infineon Technologies AG)
DRV - (AFS2K) – C:\WINDOWS\System32\drivers\AFS2K.SYS (Oak Technology Inc.)
DRV - (GVCplDrv) – C:\WINDOWS\System32\drivers\GVCplDrv.sys ()
DRV - (atirage3) – C:\WINDOWS\system32\drivers\atimpae.sys (ATI Technologies Inc.)
DRV - (NETwLx32) – C:\WINDOWS\system32\drivers\NETwLx32.sys (Intel Corporation)
DRV - (IntcAzAudAddService) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (Ambfilt) – C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (Monfilt) – C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (HSF_DPV) – C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) – C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (O2SCBUS) – C:\WINDOWS\system32\drivers\ozscr.sys (O2Micro)
DRV - (O2MDRDR) – C:\WINDOWS\system32\drivers\o2media.sys (O2Micro )
DRV - (O2SDRDR) – C:\WINDOWS\system32\drivers\o2sd.sys (O2Micro )


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}
IE - HKLM\..\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf}: "URL" = http://search.mywebsearch.com/mywebsearch/…r={searchTerms}
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?…p={searchTerms}
IE - HKLM\..\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}: "URL" = http://search.tb.ask.com/search/GGmain.jht…r={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKCU\..\SearchScopes,DefaultScope = {CCC7A320-B3CA-4199-B1A6-9F516DD69829}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD23}: "URL" = http://search.shareazaweb.com//web?src=ieb…q={searchTerms}
IE - HKCU\..\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf}: "URL" = http://search.mywebsearch.com/mywebsearch/…r={searchTerms}
IE - HKCU\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://search.avg.com/route/?d=4cb7c0c8&am;…y=&ychte;=us
IE - HKCU\..\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}: "URL" = http://search.tb.ask.com/search/GGmain.jht…r={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://www.google.com.au/"
FF - prefs.js..extensions.enabledAddons: %7Be001c731-5e37-4538-a5cb-8168736a2360%7D:0.9.9.119
FF - prefs.js..extensions.enabledAddons: %7B20a82645-c095-46ed-80e3-08825760534b%7D:0.0.0
FF - prefs.js..extensions.enabledAddons: ffxtlbr%40mixidj.com:1.5.0
FF - prefs.js..extensions.enabledAddons: testpilot%40labs.mozilla.com:1.2.2
FF - prefs.js..extensions.enabledAddons: %7BFCE04E1F-9378-4f39-96F6-5689A9159E45%7D:1.3.2
FF - prefs.js..extensions.enabledAddons: 8hffxtbr%40Allin1Convert_8h.com:5.24.2.284
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
FF - prefs.js..keyword.enabled: false
FF - prefs.js..browser.startup.homepage: "http://www.google.com.au/"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@Allin1Convert_8h.com/Plugin: C:\Program Files\Allin1Convert_8h\bar\1.bin\NP8hStub.dll File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@FromDocToPDF_65.com/Plugin: C:\Program Files\FromDocToPDF_65\bar\1.bin\NP65Stub.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.2.32: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.2: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.2: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.2: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.2.32: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@UtilityChest_49.com/Plugin: C:\Program Files\UtilityChest_49\bar\1.bin\NP49Stub.dll File not found
FF - HKLM\Software\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin: C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Documents and Settings\User\Local Settings\Application Data\Citrix\Plugins\97\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Documents and Settings\User\Application Data\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Documents and Settings\User\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\User\Local Settings\Application Data\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\User\Local Settings\Application Data\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\49ffxtbr@UtilityChest_49.com: C:\Program Files\UtilityChest_49\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013/06/20 08:04:48 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\65ffxtbr@FromDocToPDF_65.com: C:\Program Files\FromDocToPDF_65\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FCE04E1F-9378-4f39-96F6-5689A9159E45}: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/06/20 08:04:48 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\4zffxtbr@VideoDownloadConverter_4z.com: C:\Program Files\VideoDownloadConverter_4z\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files\Siber Systems\AI RoboForm\Firefox [2013/08/18 07:12:10 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\8hffxtbr@Allin1Convert_8h.com: C:\Program Files\Allin1Convert_8h\bar\1.bin [2013/08/22 11:55:52 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/06/03 21:42:50 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/08/11 10:53:31 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\FindLyrics\FF\

[2013/03/21 22:36:02 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Extensions
[2013/01/13 08:16:16 | 000,000,000 | —D | M] (Smiley Bar for Facebook) – C:\Documents and Settings\User\Application Data\Mozilla\Extensions\statuswinks@StatusWinks
[2013/08/20 19:06:37 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions
[2012/12/10 15:00:23 | 000,000,000 | —D | M] (Bitdefender QuickScan) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2011/11/11 08:33:39 | 000,000,000 | —D | M] (AVG Security Toolbar) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\avg@toolbar(2)
[2013/03/20 17:02:41 | 000,000,000 | —D | M] (MixiDJ Toolbar) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\[removed]
[2011/11/11 08:33:32 | 000,000,000 | —D | M] (Cooliris) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\piclens@cooliris(2).com
[2013/04/28 14:17:27 | 000,615,445 | —- | M] () (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\[removed]
[2013/07/28 14:18:41 | 000,012,103 | —- | M] () (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\{B40794A0-7477-4335-95C5-8CB9BBC5C4A5}.xpi
[2013/02/13 17:42:07 | 000,001,145 | —- | M] () – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\searchplugins\urlcom.xml
[2013/05/18 10:03:24 | 000,001,492 | —- | M] () – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\searchplugins\web-search-powered-by-google.xml
[2013/03/21 22:36:02 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2013/07/24 22:32:31 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/04/28 14:16:08 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\browser\extensions
[2013/07/24 22:32:31 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/08/18 07:26:29 | 000,000,000 | —D | M] (Default) – C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/05/25 08:38:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\browser\distribution\extensions
[2013/06/20 08:04:48 | 000,000,000 | —D | M] (RealDownloader) – C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT
[2013/08/22 11:55:52 | 000,000,000 | —D | M] (Allin1Convert) – C:\PROGRAM FILES\ALLIN1CONVERT_8H\BAR\1.BIN
[2010/10/27 10:45:15 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/01/03 05:40:28 | 000,104,448 | —- | M] (Crawler, LLC) – C:\Program Files\mozilla firefox\plugins\NPCrwPd.dll
[2013/06/20 08:03:22 | 000,124,504 | —- | M] (RealPlayer) – C:\Program Files\mozilla firefox\plugins\nprpplugin.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:ins
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Documents and Settings\User\Application Data\Mozilla\plugins\np-mswmp.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Documents and Settings\User\Application Data\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Documents and Settings\User\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Crawler Products Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPCrwPd.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpplugin.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: RealNetworks™ RealDownloader Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
CHR - plugin: RealNetworks™ RealDownloader HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
CHR - plugin: RealNetworks™ RealDownloader PepperFlashVideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll
CHR - plugin: RealDownloader Plugin (Enabled) = C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
CHR - plugin: Citrix Online Web Deployment Plugin 1.0.0.97 (Enabled) = C:\Documents and Settings\User\Local Settings\Application Data\Citrix\Plugins\97\npappdetector.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\User\Local Settings\Application Data\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U13 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: RealDownloader = C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0\
CHR - Extension: Torch Share = C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kiplfnciaokpcennlkldkdaeaaomamof\1.0.0.2504_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.10.0.13089_0\

O1 HOSTS File: ([2013/08/22 23:54:06 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll (Zeon Corporation)
O2 - BHO: (RoboForm Toolbar Helper) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (ChromeFrame BHO) - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files\Google\Chrome\Application\29.0.1547.57\npchrome_frame.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (&RoboForm; Toolbar) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (&RoboForm; Toolbar) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter4] C:\Program Files\ControlCenter4\BrCcBoot.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe (Intel Corporation)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files\Nuance\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [PPort12reminder] C:\Program Files\Nuance\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PSQLLauncher] C:\Program Files\Protector Suite QL\launcher.exe (UPEK Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Adobe Reader Synchronizer] C:\Program Files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [DriverUpdate] C:\Program Files\DriverUpdate\DriverUpdate.exe (SlimWare Utilities, Inc.)
O4 - HKCU..\Run: [RoboForm] C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\TL-WN321G Wireless Utility.lnk = C:\Program Files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe (TP-LINK TECHNOLOGIES CO., LTD.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Customize Menu - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
O8 - Extra context menu item: Fill Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O8 - Extra context menu item: Open with PDF Viewer Plus - C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O8 - Extra context menu item: Save Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O8 - Extra context menu item: Send to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Show RoboForm Toolbar - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: Options - {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : RoboForm Options - {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Show RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1364512205890 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BA44A5F-843B-4E98-BDC6-56E16580901F}: DhcpNameServer = 192.168.0.1 192.168.1.1
O18 - Protocol\Handler\gcf {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files\Google\Chrome\Application\29.0.1547.57\npchrome_frame.dll (Google Inc.)
O18 - Protocol\Handler\linkscanner - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\psfus: DllName - (psqlpwd.dll) - C:\WINDOWS\System32\psqlpwd.dll (UPEK Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/11 20:34:05 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2011/10/31 17:28:00 | 000,000,000 | —D | M] - C:\AutoSave SoundsAndMusic 1 – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2013\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/08/22 23:57:01 | 000,000,000 | —D | C] – C:\WINDOWS\LastGood
[2013/08/22 23:12:10 | 000,000,000 | —D | C] – C:\ComboFix
[2013/08/22 09:56:39 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\Firefox takes a long time to start up _ Firefox Help_files
[2013/08/22 00:12:20 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/08/21 17:20:42 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/08/21 17:20:42 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/08/21 17:20:42 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/08/21 17:20:42 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/08/21 17:15:45 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Local Settings\Application Data\IAC
[2013/08/21 16:56:44 | 000,000,000 | —D | C] – C:\Qoobox
[2013/08/21 16:55:25 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt
[2013/08/19 07:20:48 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\Diognosing
[2013/08/18 23:56:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Social Lead Fox
[2013/08/18 23:55:35 | 000,000,000 | —D | C] – C:\WINDOWS\Social Lead Fox
[2013/08/18 23:55:28 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office
[2013/08/18 23:55:06 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Works
[2013/08/18 23:51:41 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio
[2013/08/18 23:51:40 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DESIGNER
[2013/08/18 23:46:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Visual Studio 2005
[2013/08/18 23:46:04 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Local Settings\Application Data\Microsoft Help
[2013/08/18 23:45:20 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\PowerISO
[2013/08/18 23:44:32 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\HitmanPro
[2013/08/18 23:44:21 | 000,000,000 | —D | C] – C:\Program Files\HitmanPro
[2013/08/18 14:27:38 | 000,000,000 | —D | C] – C:\WINDOWS\CSC
[2013/08/17 20:00:40 | 000,000,000 | —D | C] – C:\Avenger
[2013/08/17 19:18:22 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\Malwarebytes Solve Your Malware Problems With Our Help_files
[2013/08/17 18:55:26 | 000,204,496 | —- | C] (Malwarebytes) – C:\Documents and Settings\User\Desktop\startuplite-setup-1.07.exe
[2013/08/16 07:50:47 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\New Folder
[2013/08/15 09:41:41 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\Allin1Convert_8h
[2013/08/15 09:41:17 | 000,000,000 | —D | C] – C:\Program Files\Allin1Convert_8h
[2013/08/11 14:27:53 | 000,000,000 | —D | C] – C:\Program Files\SocialLeadFox
[2013/08/11 10:55:16 | 000,029,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mdimon.dll
[2013/08/11 10:48:50 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio 8
[2013/08/11 10:47:56 | 000,000,000 | —D | C] – C:\WINDOWS\SHELLNEW
[2013/08/11 10:47:05 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2013/08/11 10:47:04 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2013/08/11 10:46:23 | 000,000,000 | R–D | C] – C:\MSOCache
[2013/08/11 10:19:23 | 000,000,000 | —D | C] – C:\Program Files\PowerISO
[2013/08/09 22:53:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HitmanPro
[2013/08/09 08:54:38 | 009,167,352 | —- | C] (SurfRight B.V.) – C:\Documents and Settings\User\Desktop\HitmanPro.exe
[2013/08/09 07:52:35 | 013,391,216 | —- | C] (Siber Systems) – C:\Documents and Settings\User\Desktop\RoboForm-Setup.exe
[2013/08/08 13:57:31 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\converted PDFs
[2013/08/08 13:42:28 | 000,000,000 | —D | C] – C:\Program Files\UPDF
[2013/08/04 15:44:49 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\AWeber Communications_files
[2013/08/04 13:59:10 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\OpenOffice.org
[2013/08/04 13:43:18 | 000,000,000 | –SD | C] – C:\Documents and Settings\User\Start Menu\Programs\OpenOffice.org 3.4.1
[2013/08/04 13:42:13 | 000,000,000 | —D | C] – C:\Program Files\OpenOffice.org 3
[2013/08/04 13:39:56 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\OpenOffice.org 3.4.1 (en-US) Installation Files
[2013/08/04 13:14:55 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\Realplaer recordings
[2013/08/02 22:54:40 | 000,000,000 | R–D | C] – C:\Documents and Settings\User\Desktop\New Briefcase
[2013/08/01 15:17:10 | 000,000,000 | —D | C] – C:\Documents and Settings\User\My Documents\Leadskimmer
[2013/08/01 14:01:10 | 000,000,000 | —D | C] – C:\Program Files\Zula Games
[2013/08/01 12:57:18 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\zulagames
[2013/08/01 12:57:11 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\SUPERAntiSpyware.com
[2013/08/01 12:56:59 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware
[2013/08/01 12:56:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2013/08/01 12:56:53 | 000,000,000 | —D | C] – C:\Program Files\SUPERAntiSpyware
[2013/08/01 09:55:59 | 000,255,488 | R— | C] (Ralink Technology Inc.) – C:\WINDOWS\System32\drivers\netr73.sys
[2013/07/31 15:53:17 | 000,000,000 | —D | C] – C:\Documents and Settings\User\My Documents\BANNERS
[2013/07/31 10:07:41 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\AVG
[2013/07/31 08:29:01 | 000,238,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/08/23 00:22:17 | 000,000,276 | —- | M] () – C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/23 00:22:16 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/23 00:14:00 | 000,000,974 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-1409082233-725345543-1003UA.job
[2013/08/22 23:59:15 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/08/22 23:58:00 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/08/22 23:56:01 | 000,013,464 | —- | M] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2013/08/22 23:54:06 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/08/22 23:53:31 | 000,000,298 | —- | M] () – C:\WINDOWS\tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/22 23:52:58 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/08/22 23:52:49 | 000,000,878 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/08/22 23:50:09 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/08/22 12:14:01 | 000,000,922 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-1409082233-725345543-1003Core.job
[2013/08/22 09:56:46 | 000,033,793 | —- | M] () – C:\Documents and Settings\User\Desktop\Firefox takes a long time to start up _ Firefox Help.htm
[2013/08/22 07:29:23 | 000,030,464 | —- | M] () – C:\WINDOWS\System32\drivers\hitmanpro37.sys
[2013/08/22 07:14:12 | 000,001,829 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2013/08/22 06:25:10 | 000,399,216 | —- | M] () – C:\Documents and Settings\User\Desktop\BullGuardDownloaderBPP.exe
[2013/08/22 06:22:26 | 000,373,384 | —- | M] () – C:\Documents and Settings\User\Desktop\BullGuardDownloader_microsoftlpdefault.exe
[2013/08/22 00:12:34 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2013/08/21 12:00:44 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/08/21 12:00:43 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/08/21 07:35:49 | 000,000,306 | —- | M] () – C:\WINDOWS\tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/19 16:29:10 | 000,666,633 | —- | M] () – C:\Documents and Settings\User\Desktop\AdwCleaner.exe
[2013/08/19 09:32:17 | 000,001,626 | —- | M] () – C:\Documents and Settings\All Users\Desktop\HitmanPro.lnk
[2013/08/17 19:18:25 | 000,014,236 | —- | M] () – C:\Documents and Settings\User\Desktop\Malwarebytes Solve Your Malware Problems With Our Help.htm
[2013/08/17 18:55:31 | 000,204,496 | —- | M] (Malwarebytes) – C:\Documents and Settings\User\Desktop\startuplite-setup-1.07.exe
[2013/08/15 16:36:45 | 000,772,868 | —- | M] () – C:\Documents and Settings\User\Desktop\Module+1.pdf
[2013/08/15 13:43:37 | 000,000,448 | —- | M] () – C:\0
[2013/08/15 10:47:23 | 000,000,144 | —- | M] () – C:\WINDOWS\ANS2000.INI
[2013/08/15 09:19:27 | 000,397,353 | —- | M] () – C:\Documents and Settings\User\Desktop\3-Steps-2-Profit.pdf
[2013/08/15 08:37:20 | 034,162,021 | —- | M] () – C:\Documents and Settings\User\Desktop\mijacko_1080p video mttb.mp4
[2013/08/15 08:28:07 | 034,162,021 | —- | M] () – C:\Documents and Settings\User\Desktop\mijacko_1080p.mp4
[2013/08/14 16:48:32 | 000,505,862 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/08/14 16:48:32 | 000,089,542 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/08/12 21:06:01 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/08/12 07:48:58 | 000,360,136 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/08/11 14:27:58 | 000,001,644 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Social Lead Fox.lnk
[2013/08/11 10:19:24 | 000,000,698 | —- | M] () – C:\Documents and Settings\All Users\Desktop\PowerISO.lnk
[2013/08/10 07:50:24 | 000,001,996 | —- | M] () – C:\WINDOWS\System32\.crusader
[2013/08/09 21:38:03 | 001,024,992 | —- | M] () – C:\Documents and Settings\User\Desktop\statuswinks.exe
[2013/08/09 19:02:01 | 000,000,324 | —- | M] () – C:\WINDOWS\tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/09 08:57:51 | 009,167,352 | —- | M] (SurfRight B.V.) – C:\Documents and Settings\User\Desktop\HitmanPro.exe
[2013/08/09 07:57:44 | 013,391,216 | —- | M] (Siber Systems) – C:\Documents and Settings\User\Desktop\RoboForm-Setup.exe
[2013/08/08 13:58:11 | 000,000,000 | —- | M] () – C:\Documents and Settings\User\Application Data\pdfperformer
[2013/08/06 17:31:45 | 004,476,508 | —- | M] () – C:\Documents and Settings\User\Desktop\wordpress-3.6.zip
[2013/08/05 18:06:14 | 000,015,593 | —- | M] () – C:\Documents and Settings\User\Desktop\Top Tier imabe.jpg
[2013/08/04 15:44:50 | 000,067,589 | —- | M] () – C:\Documents and Settings\User\Desktop\AWeber Communications.htm
[2013/08/04 15:22:58 | 000,001,186 | —- | M] () – C:\Documents and Settings\User\Desktop\29Leadsources.htm
[2013/08/04 14:59:40 | 002,014,159 | —- | M] () – C:\Documents and Settings\User\My Documents\MY PAGE power pont.odp
[2013/08/04 14:26:11 | 000,008,860 | —- | M] () – C:\Documents and Settings\User\My Documents\A Test Test traffic costs ect.ods
[2013/08/04 13:43:22 | 000,000,933 | —- | M] () – C:\Documents and Settings\User\Desktop\OpenOffice.org 3.4.1.lnk
[2013/08/03 22:31:04 | 000,000,758 | —- | M] () – C:\Documents and Settings\User\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2013/08/03 22:31:04 | 000,000,740 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2013/08/03 10:07:42 | 000,025,521 | —- | M] () – C:\Documents and Settings\User\My Documents\TrafficExchangeSecrets-PLR.zip
[2013/08/01 14:00:56 | 000,001,130 | —- | M] () – C:\Documents and Settings\User\Desktop\SpeedAnalysis.lnk
[2013/08/01 12:56:59 | 000,001,694 | —- | M] () – C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2013/08/01 11:42:44 | 000,001,945 | —- | M] () – C:\WINDOWS\epplauncher.mif
[2013/07/31 10:07:41 | 000,000,718 | —- | M] () – C:\Documents and Settings\All Users\Desktop\AVG 2013.lnk
[2013/07/30 15:11:28 | 000,003,715 | —- | M] () – C:\Program Files\Mozilla Firefoxavg-secure-search.xml
[2013/07/30 15:11:10 | 000,037,664 | —- | M] (AVG Technologies) – C:\WINDOWS\System32\drivers\avgtpx86.sys
[2013/07/26 12:47:17 | 001,215,488 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2013/07/26 12:47:17 | 000,920,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2013/07/26 12:47:17 | 000,759,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vgx.dll
[2013/07/26 12:47:17 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2013/07/26 12:47:17 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\url.dll
[2013/07/26 12:47:17 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\url.dll
[2013/07/26 12:47:16 | 006,017,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/07/26 12:47:16 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2013/07/26 12:47:16 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2013/07/26 12:47:16 | 000,067,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmled.dll
[2013/07/26 12:47:14 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2013/07/26 12:47:14 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2013/07/26 12:47:14 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2013/07/26 12:47:14 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2013/07/26 12:47:13 | 000,522,240 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2013/07/26 12:47:13 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\licmgr10.dll
[2013/07/26 12:47:13 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\licmgr10.dll
[2013/07/26 12:47:13 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2013/07/26 12:47:13 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2013/07/26 12:47:12 | 002,005,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2013/07/26 12:47:12 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2013/07/26 12:47:12 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2013/07/26 12:47:11 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2013/07/26 12:47:11 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2013/07/26 12:47:10 | 011,113,472 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2013/07/26 12:47:06 | 000,743,424 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2013/07/26 12:47:06 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2013/07/26 12:47:06 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2013/07/26 01:52:59 | 000,385,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec
[2013/07/25 21:23:02 | 000,174,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2013/07/25 21:23:02 | 000,174,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2013/07/25 17:48:32 | 000,015,821 | —- | M] () – C:\Documents and Settings\User\Desktop\attachment.jpg
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/08/22 09:56:37 | 000,033,793 | —- | C] () – C:\Documents and Settings\User\Desktop\Firefox takes a long time to start up _ Firefox Help.htm
[2013/08/22 07:29:22 | 000,030,464 | —- | C] () – C:\WINDOWS\System32\drivers\hitmanpro37.sys
[2013/08/22 07:21:09 | 000,000,276 | —- | C] () – C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/22 06:25:06 | 000,399,216 | —- | C] () – C:\Documents and Settings\User\Desktop\BullGuardDownloaderBPP.exe
[2013/08/22 06:22:16 | 000,373,384 | —- | C] () – C:\Documents and Settings\User\Desktop\BullGuardDownloader_microsoftlpdefault.exe
[2013/08/22 00:12:33 | 000,000,211 | —- | C] () – C:\Boot.bak
[2013/08/22 00:12:28 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/08/21 17:20:42 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/08/21 17:20:42 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/08/21 17:20:42 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/08/21 17:20:42 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/08/21 17:20:42 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/08/17 19:18:22 | 000,014,236 | —- | C] () – C:\Documents and Settings\User\Desktop\Malwarebytes Solve Your Malware Problems With Our Help.htm
[2013/08/15 16:36:36 | 000,772,868 | —- | C] () – C:\Documents and Settings\User\Desktop\Module+1.pdf
[2013/08/15 09:19:25 | 000,397,353 | —- | C] () – C:\Documents and Settings\User\Desktop\3-Steps-2-Profit.pdf
[2013/08/15 08:29:42 | 034,162,021 | —- | C] () – C:\Documents and Settings\User\Desktop\mijacko_1080p video mttb.mp4
[2013/08/15 08:21:34 | 034,162,021 | —- | C] () – C:\Documents and Settings\User\Desktop\mijacko_1080p.mp4
[2013/08/11 14:27:58 | 000,001,650 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Social Lead Fox.lnk
[2013/08/11 14:27:58 | 000,001,644 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Social Lead Fox.lnk
[2013/08/11 10:19:24 | 000,000,698 | —- | C] () – C:\Documents and Settings\All Users\Desktop\PowerISO.lnk
[2013/08/10 07:50:24 | 000,001,996 | —- | C] () – C:\WINDOWS\System32\.crusader
[2013/08/09 22:56:02 | 000,001,626 | —- | C] () – C:\Documents and Settings\All Users\Desktop\HitmanPro.lnk
[2013/08/09 08:49:45 | 000,666,633 | —- | C] () – C:\Documents and Settings\User\Desktop\AdwCleaner.exe
[2013/08/09 08:26:35 | 001,024,992 | —- | C] () – C:\Documents and Settings\User\Desktop\statuswinks.exe
[2013/08/08 13:58:11 | 000,000,000 | —- | C] () – C:\Documents and Settings\User\Application Data\pdfperformer
[2013/08/06 17:31:03 | 004,476,508 | —- | C] () – C:\Documents and Settings\User\Desktop\wordpress-3.6.zip
[2013/08/05 18:06:12 | 000,015,593 | —- | C] () – C:\Documents and Settings\User\Desktop\Top Tier imabe.jpg
[2013/08/04 15:44:49 | 000,067,589 | —- | C] () – C:\Documents and Settings\User\Desktop\AWeber Communications.htm
[2013/08/04 15:22:56 | 000,001,186 | —- | C] () – C:\Documents and Settings\User\Desktop\29Leadsources.htm
[2013/08/04 14:50:20 | 002,014,159 | —- | C] () – C:\Documents and Settings\User\My Documents\MY PAGE power pont.odp
[2013/08/04 14:01:49 | 000,008,860 | —- | C] () – C:\Documents and Settings\User\My Documents\A Test Test traffic costs ect.ods
[2013/08/04 13:43:22 | 000,000,933 | —- | C] () – C:\Documents and Settings\User\Desktop\OpenOffice.org 3.4.1.lnk
[2013/08/03 12:25:49 | 000,025,521 | —- | C] () – C:\Documents and Settings\User\My Documents\TrafficExchangeSecrets-PLR.zip
[2013/08/01 12:57:07 | 000,001,130 | —- | C] () – C:\Documents and Settings\User\Desktop\SpeedAnalysis.lnk
[2013/08/01 12:56:59 | 000,001,694 | —- | C] () – C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2013/07/31 08:24:28 | 000,001,945 | —- | C] () – C:\WINDOWS\epplauncher.mif
[2013/07/25 17:48:31 | 000,015,821 | —- | C] () – C:\Documents and Settings\User\Desktop\attachment.jpg
[2013/05/21 08:50:17 | 000,003,715 | —- | C] () – C:\Program Files\Mozilla Firefoxavg-secure-search.xml
[2013/04/20 12:16:37 | 000,000,049 | —- | C] () – C:\WINDOWS\DictionaryServiceProxy.INI
[2013/03/21 23:56:16 | 000,000,008 | —- | C] () – C:\Documents and Settings\User\Local Settings\Application Data\~wmrg
[2013/02/24 14:22:40 | 000,000,205 | —- | C] () – C:\WINDOWS\hbcikrnl.ini
[2013/02/24 11:19:23 | 000,025,816 | —- | C] () – C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013/02/24 09:33:54 | 000,013,464 | —- | C] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012/12/25 09:07:54 | 000,000,234 | —- | C] () – C:\WINDOWS\Brpfx04a.ini
[2012/12/25 09:07:54 | 000,000,094 | —- | C] () – C:\WINDOWS\brpcfx.ini
[2012/12/25 09:07:36 | 000,003,311 | —- | C] () – C:\WINDOWS\BRPARAM.INI
[2012/12/25 09:06:20 | 000,000,000 | —- | C] () – C:\WINDOWS\brdfxspd.dat
[2012/12/25 09:05:34 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\BRTCPCON.DLL
[2012/12/25 09:05:20 | 000,000,114 | —- | C] () – C:\WINDOWS\System32\BRLMW03A.INI
[2012/11/09 11:08:54 | 000,319,312 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1960408961-1409082233-725345543-1003-0.dat
[2012/10/11 06:18:49 | 000,000,031 | —- | C] () – C:\WINDOWS\WebUpdateSvc4.INI
[2012/10/11 06:18:03 | 000,047,631 | —- | C] () – C:\WINDOWS\System32\wuwuninst.exe
[2012/10/09 21:30:31 | 000,134,682 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2012/08/16 15:20:47 | 000,027,520 | —- | C] () – C:\Documents and Settings\User\Local Settings\Application Data\dt.dat
[2012/02/16 14:43:20 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/10/27 08:16:39 | 000,000,138 | —- | C] () – C:\WINDOWS\TomsRegistration.INI
[2011/03/16 07:09:18 | 000,096,768 | —- | C] () – C:\Documents and Settings\User\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/06 07:37:33 | 000,000,127 | —- | C] () – C:\Documents and Settings\User\Local Settings\Application Data\fusioncache.dat

========== ZeroAccess Check ==========

[2010/10/12 10:09:44 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2010/04/17 02:09:07 | 001,509,888 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 22:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/14 10:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013/06/10 22:27:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2011/06/27 09:27:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\2D1E4
[2011/04/19 10:40:23 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Anuko
[2011/10/24 08:13:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Avanquest
[2011/10/24 08:06:19 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Avanquest Software
[2013/08/21 17:24:01 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\AVG2013
[2011/10/13 09:19:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\avg9
[2011/10/24 08:07:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BVRP Software
[2011/03/15 09:32:13 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\Common Files
[2012/12/25 09:06:30 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ControlCenter4
[2013/08/06 08:26:26 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Datamngr
[2013/05/02 21:51:52 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\eForm
[2011/03/31 05:42:32 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FileCure
[2013/08/18 23:38:58 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HitmanPro
[2010/10/12 09:55:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Infineon
[2012/05/27 22:12:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IObit
[2012/01/26 18:44:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MetaQuotes
[2013/08/22 08:44:08 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MFAData
[2011/02/25 07:08:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MipKukSoft
[2013/03/29 08:22:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nuance
[2011/02/24 06:01:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RegWork
[2010/10/15 16:29:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RoboForm
[2013/03/29 08:21:22 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ScanSoft
[2013/03/21 22:37:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Wincert
[2011/03/31 05:54:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WinMaximizer
[2013/01/27 15:00:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WinZip
[2013/03/29 08:22:32 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\zeon
[2011/12/05 14:18:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2013/08/19 06:50:54 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Allin1Convert_8h
[2011/03/08 08:33:54 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Anuko World Clock
[2012/06/17 09:59:33 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Applian FLV and Media Player
[2012/09/27 09:44:40 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\AVG2013
[2012/12/14 12:41:09 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\com.desktoplightning.airapp.E46A8636380668D0309964F39136B84A726B34C4.1
[2011/02/28 08:15:32 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\CommissionBlueprint.KeywordBlueprint2.E611A7DFA7A14643DD636F3114ECD771F85A6
1E0.1
[2013/03/29 09:07:48 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\ControlCenter4
[2012/12/20 07:48:24 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\eFORM
[2013/05/02 21:51:54 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\EmailTool
[2013/03/02 13:04:13 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\FixCleaner
[2011/04/28 15:03:35 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\GCI Demo
[2011/11/11 09:46:08 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\imeshmediabartb
[2010/10/12 09:55:42 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Infineon
[2013/02/28 11:37:32 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\IObit
[2011/02/25 07:56:53 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Kybtec Software
[2012/03/20 10:17:59 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\LaunchPad
[2011/02/27 09:44:54 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\MassTrafficStorm.62ED8686F6EEA00B48E7DA2DA570FCEBCDA2BD9A.1
[2012/04/12 09:15:40 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\MetaQuotes
[2011/02/25 07:55:00 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\MipKukSoft
[2012/12/25 09:01:12 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Nuance
[2013/08/04 13:59:10 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\OpenOffice.org
[2011/10/23 18:33:37 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\PC Ultra Speed
[2013/08/19 06:51:36 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\QuickScan
[2011/03/29 15:31:09 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\RegistryKeys
[2011/03/07 14:38:20 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Reviversoft
[2011/05/24 15:33:51 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\RoboForm
[2011/07/04 14:41:23 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\The Market Toolbox
[2012/09/27 09:36:43 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\TuneUp Software
[2013/03/09 20:14:26 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\UltimateIncomeBooster
[2012/12/14 07:07:18 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\ViralSubmitter
[2013/07/03 10:38:59 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Zeon
[2013/08/01 14:01:35 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\zulagames

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\User\Desktop\statuswinks.exe:SummaryInformation

< End of report >

OTL Extras logfile created on: 23/08/2013 4:45:29 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\User\Desktop\Diognosing
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 66.66% Memory free
4.84 Gb Paging File | 3.89 Gb Available in Paging File | 80.39% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111.78 Gb Total Space | 15.69 Gb Free Space | 14.03% Space Free | Partition Type: NTFS

Computer Name: ACER_TM6460 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
https [open] – "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"54925:UDP" = 54925:UDP:*:Enabled:BrotherNetwork Scanner

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh
"C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe" = C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe:*:Enabled:Shareaza
"C:\Documents and Settings\User\Local Settings\Application Data\Torch\Plugins\Torrent\TorchTorrent.exe" = C:\Documents and Settings\User\Local Settings\Application Data\Torch\Plugins\Torrent\TorchTorrent.exe:*:Enabled:Torch Torrent – (Torch Media Inc.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\WINDOWS\system32\mshta.exe" = C:\WINDOWS\system32\mshta.exe:*:Enabled:Microsoft ® HTML Application host – (Microsoft Corporation)
"C:\Program Files\Movie Maker\moviemk.exe" = C:\Program Files\Movie Maker\moviemk.exe:*:Enabled:Windows Movie Maker – (Microsoft Corporation)
"C:\Program Files\7-Zip\7zFM.exe" = C:\Program Files\7-Zip\7zFM.exe:*:Enabled:7-Zip File Manager – (Igor Pavlov)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service – (Apple Inc.)
"C:\Documents and Settings\User\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe" = C:\Documents and Settings\User\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin – (Google)
"C:\Documents and Settings\User\Local Settings\Application Data\Torch\Plugins\Torrent\TorchTorrent.exe" = C:\Documents and Settings\User\Local Settings\Application Data\Torch\Plugins\Torrent\TorchTorrent.exe:*:Enabled:Torch Torrent – (Torch Media Inc.)
"C:\Program Files\AVG\AVG2013\avgmfapx.exe" = C:\Program Files\AVG\AVG2013\avgmfapx.exe:*:Enabled:AVG Installer – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit – (Apple Inc.)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)
"C:\Program Files\Google\Google Talk\googletalk.exe" = C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk – (Google)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype – (Skype Technologies S.A.)
"C:\Program Files\AVG\AVG2013\avgnsx.exe" = C:\Program Files\AVG\AVG2013\avgnsx.exe:*:Enabled:Online Shield – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2013\avgdiagex.exe" = C:\Program Files\AVG\AVG2013\avgdiagex.exe:*:Enabled:AVG Diagnostics 2013 – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2013\avgemcx.exe" = C:\Program Files\AVG\AVG2013\avgemcx.exe:*:Enabled:Personal E-mail Scanner – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook – (Microsoft Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{068724F8-D8BE-4B43-8DDD-B9FE9E49FD76}" = Scansoft PDF Professional
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{1798D459-6B8B-474B-868D-1229EADA3B95}" = Adobe AIR
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 11
"{28656860-4728-433C-8AD4-D1A930437BC8}" = Nuance PDF Viewer Plus
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2E132061-C78A-48D4-A899-1D13B9D189FA}" = Memories Disc Creator 2.0
"{34362F4A-8FA6-4903-8DE4-E91DAD995AA1}" = RF Wireless Mouse
"{34957B51-9676-41CE-9E52-44AE91B73F1C}" = HP Software Update
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3719E5A6-2083-4937-8040-63EEC6A811AA}" = O2Micro Flash Memory Card Windows Driver V2.03
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}" = RealDownloader
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{3F4EC965-28EF-45C3-B063-04B25D4E9679}" = WIDCOMM Bluetooth Software
"{446472DE-79C0-4708-B06E-0F8FAFDA6918}" = AVG 2013
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6
"{595D0DE8-C38A-4432-B851-47DECC1A99BD}" = HP Unload DLL Patch
"{59D268DF-CCA9-44C5-8F96-2E51BB34C829}" = Microsoft Security Client
"{5C3EA21C-22C0-4A44-BE58-D8CBB2F2B6B2}" = OZ711 SCR Driver
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{5FF27D65-35E5-4855-B7ED-59BCFBC85776}" = AVG 2013
"{60103DBD-B2E6-4C64-A409-36C856029364}_is1" = Article Spinner 5.0.0.0
"{61B9BC1E-F0E6-4A4F-98CB-A0D2EB2D7731}" = O2Micro Flash Memory Card Reader Driver (x86)
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6C0A559F-8583-4B5A-8B50-20BEE15D8E64}" = Nuance PaperPort 12
"{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}" = PaperPort Image Printer
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{737629F4-4111-4FD4-9071-29873B7C6426}" = Protector Suite 5.4
"{766273C1-A39B-47EB-ACE8-DEBDD8094BCC}" = overland
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7735BD50-87C5-4838-A276-4A3621BBD306}" = AVG 2013
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8C6BB412-D3A8-4AAE-A01B-35B681789D68}" = mHelp
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROPLUS_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{9181A86B-4E4F-465B-B101-C1F0E76849F7}" = ATI Catalyst Control Center
"{91FD46D2-4FB7-4A51-8637-556E1BE1DB7C}" = iTunes
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CC89556-3578-48DD-8408-04E66EBEF401}" = mXML
"{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}" = OpenOffice.org 3.4.1
"{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}" = mDriver
"{A1B36B88-AF90-43A3-8906-6DBEE89B4FBD}" = Brother MFL-Pro Suite MFC-J430W
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.7)
"{AD27C219-D678-40B0-9EB2-60589598B1E9}" = ForexCT
"{B468AE7B-C667-4073-BED8-EAD17D5EE08C}" = TL-WN321G Wireless Utility
"{B502B428-3386-40A9-98DB-079AAB72E64F}" = mEoU
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B9362DB5-C5E3-4AF2-9E74-D77339C81570}" = CardBus Installation Package V1.002
"{BEA2FF8E-50A3-4C6D-955E-5632C881753F}" = NetComm NB6 Series ADSL2+ Router USB Driver
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C67F5282-3EB4-4FE2-A5C7-ABEE4BE42F6D}" = DriverUpdate
"{C91DCB72-F5BB-410D-A91A-314F5D1B4284}" = Broadcom NetLink Controller
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBBB226E-2289-4D29-8E5C-1331E7D71ED9}" = AVG 2013
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240D6}" = WinZip 17.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D952C4F9-2488-3723-84BE-1BFA907DCAC9}" = Google Talk Plugin
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E295AEFC-FCD2-0482-4414-CEFA72467803}" = Keyword Blueprint 2
"{E6B43401-E818-4961-AFED-118DD8E87642}" = RAF
"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1B8DB67-D30E-4FF9-A85F-3CEE51825AA2}" = SMSC IrCC V5.1.3600.9
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}" = mDrWiFi
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"4075337D0FE522688DFAA4CB60A3ADEABF85FA32" = Windows Driver Package - Intel (NETwLx32) net (08/15/2010 13.3.0.137)
"7-Zip" = 7-Zip 9.20
"AdaURL v2.0" = AdaURL v2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AI RoboForm" = RoboForm 7-9-0-0 (All Users)
"All ATI Software" = ATI - Software Uninstall Utility
"Allin1Convert_8hbar Uninstall Firefox" = Allin1Convert Firefox Toolbar
"Allin1Convert_8hbar Uninstall Internet Explorer" = Allin1Convert Internet Explorer Toolbar
"ATI Display Driver" = ATI Display Driver
"AVG" = AVG 2013
"B5FBA308143CCBB31003CA0824ABABC9F7C89D21" = Windows Driver Package - Intel (NETwNx32) net (07/14/2010 13.3.0.24)
"CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP
"CommissionBlueprint.KeywordBlueprint2.E611A7DFA7A14643DD636F3114ECD771F85A6
1E0.1" = Keyword Blueprint 2
"Deal Spy" = Deal Spy
"eFORM_is1" = eFORM Dec 2.1.0.1
"Elemental Trader_is1" = Elemental Trader 1.5
"EmailToolv3 for eFORM_is1" = EmailToolv3.2.0.017 for eFORM
"FreeDirectoryBot_is1" = FreeDirectoryBot v2.0
"GCI Demo" = GCI Demo (remove only)
"Google Chrome" = Google Chrome
"Google Chrome Frame" = Google Chrome Frame
"HitmanPro37" = HitmanPro 3.7
"ie8" = Windows Internet Explorer 8
"InstallShield_{3719E5A6-2083-4937-8040-63EEC6A811AA}" = O2Micro Flash Memory Card Windows Driver V2.03
"InstallShield_{5C3EA21C-22C0-4A44-BE58-D8CBB2F2B6B2}" = OZ711 SCR Driver
"InstallShield_{B9362DB5-C5E3-4AF2-9E74-D77339C81570}" = CardBus Installation Package V1.002
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"MetaTrader - FXTG" = MetaTrader - FXTG
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 21.0 (x86 en-US)" = Mozilla Firefox 21.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"PC Ultra Speed_is1" = PC Ultra Speed v3.0
"PipKey" = PipKey
"PIXresizer_is1" = PIXresizer 2.0.4
"PowerISO" = PowerISO
"ProInst" = Intel® PROSet/Wireless Software
"PROPLUS" = Microsoft Office Professional Plus 2007
"RealPlayer 16.0" = RealPlayer
"Shareaza 3 MediaBar" = MediaBar
"Social Lead Fox1.0.1.0" = Social Lead Fox
"Software Update Wizard (Redistributable)" = Software Update Wizard (Redistributable) 4.5
"SqueezeBuzz_is1" = SqueezeBuzz
"SupportResistance" = SupportResistance
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"The Market Toolbox" = The Market Toolbox (remove only)
"Trend Bolt" = Trend Bolt
"Ultimate Income Booster_is1" = Ultimate Income Booster version 7
"VDC_is1" =
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinPcapInst" = WinPcap 4.1.2
"WM Capture 6" = WM Capture 6
"WM Recorder14.12.3" = WM Recorder

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting 5.7.0.1172

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 22/08/2013 4:26:56 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:26:56.296]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:27:26 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:27:26.265]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:27:26 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:27:26.328]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:27:56 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:27:56.296]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:27:56 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:27:56.375]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:28:26 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:28:26.328]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:28:26 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:28:26.406]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 6:20:57 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 20:20:57.875]: [00002748]: SendSKeySettingToDevice::
Snmp Load Error[0] To[192.168.1.101]

Error - 22/08/2013 7:35:21 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 21:35:21.281]: [00002748]: SendSKeySettingToDevice::
Snmp Load Error[0] To[192.168.1.101]

Error - 22/08/2013 8:01:16 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 22:01:16.281]: [00002296]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

[ System Events ]
Error - 22/08/2013 8:01:19 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The FromDocToPDFService service failed to start due to the following
error: %%3

Error - 22/08/2013 8:01:19 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The Utility ChestService service failed to start due to the following
error: %%3

Error - 22/08/2013 8:01:19 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The vToolbarUpdater15.4.0 service failed to start due to the following
error: %%2

Error - 22/08/2013 8:01:25 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
MpFilter

Error - 22/08/2013 9:07:49 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7034
Description = The Skype C2C Service service terminated unexpectedly. It has done
this 1 time(s).

Error - 22/08/2013 9:52:23 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The Microsoft Antimalware Service service failed to start due to the
following error: %%3

Error - 22/08/2013 9:52:23 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The Allin1ConvertService service failed to start due to the following
error: %%2

Error - 22/08/2013 9:52:23 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The vToolbarUpdater15.4.0 service failed to start due to the following
error: %%2

Error - 22/08/2013 9:53:06 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
MpFilter

Error - 22/08/2013 2:42:32 PM | Computer Name = ACER_TM6460 | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.1.100 on
the Network Card with network address 0019D2C6D852.


< End of report >

Hi Jeff
i couldnt turn of security essentials
removed AVG

ComboFix 13-08-22.01 - User 23/08/2013 23:53:42.3.2 - x86
Running from: c:\documents and settings\[removed]\Desktop\Diognosing\Under supervision\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
FW: AVG Firewall *Disabled* {8decf618-9569-4340-b34a-d78d28969b66}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
——-\Legacy_FROMDOCTOPDF_65SERVICE
——-\Legacy_UTILITYCHEST_49SERVICE
——-\Service_FromDocToPDF_65Service
——-\Service_mnagoil
——-\Service_UtilityChest_49Service
.
.
((((((((((((((((((((((((( Files Created from 2013-07-23 to 2013-08-23 )))))))))))))))))))))))))))))))
.
.
2013-08-23 13:36 . 2013-08-23 13:36 ——– d—–w- c:\windows\LastGood
2013-08-21 21:29 . 2013-08-21 21:29 30464 —-a-w- c:\windows\system32\drivers\hitmanpro37.sys
2013-08-21 07:15 . 2013-08-21 07:15 ——– d—–w- c:\documents and settings\User\Local Settings\Application Data\IAC
2013-08-11 00:55 . 2006-10-26 09:58 30512 —-a-w- c:\windows\system32\Spool\prtprocs\w32x86\mdippr.dll
2013-08-11 00:55 . 2009-02-26 09:18 29552 —-a-w- c:\windows\system32\mdimon.dll
2013-08-11 00:48 . 2013-08-18 13:35 ——– d—–w- c:\program files\Microsoft Visual Studio 8
2013-08-11 00:47 . 2013-08-11 00:52 ——– d—–w- c:\windows\SHELLNEW
2013-08-11 00:47 . 2013-08-18 13:36 ——– d—–w- c:\documents and settings\All Users\Application Data\Microsoft Help
2013-08-11 00:46 . 2013-08-11 00:46 ——– dc—-r- C:\MSOCache
2013-08-11 00:19 . 2013-08-18 13:36 ——– d—–w- c:\program files\PowerISO
2013-08-09 12:53 . 2013-08-18 13:38 ——– d—–w- c:\documents and settings\All Users\Application Data\HitmanPro
2013-08-08 03:42 . 2013-08-08 22:15 ——– d—–w- c:\program files\UPDF
2013-08-04 03:59 . 2013-08-04 03:59 ——– d—–w- c:\documents and settings\User\Application Data\OpenOffice.org
2013-08-04 03:42 . 2013-08-04 03:42 ——– d—–w- c:\program files\OpenOffice.org 3
2013-08-03 21:37 . 2013-08-03 21:37 ——– d—–w- c:\windows\system32\wbem\Repository
2013-08-01 04:01 . 2013-08-01 04:01 ——– d—–w- c:\program files\Zula Games
2013-08-01 02:57 . 2013-08-01 04:01 ——– d—–w- c:\documents and settings\User\Application Data\zulagames
2013-08-01 02:57 . 2013-08-01 02:57 ——– d—–w- c:\documents and settings\User\Application Data\SUPERAntiSpyware.com
2013-08-01 02:56 . 2013-08-17 21:05 ——– d—–w- c:\program files\SUPERAntiSpyware
2013-08-01 02:56 . 2013-08-01 02:56 ——– d—–w- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2013-07-31 23:55 . 2007-01-04 08:41 255488 —-a-r- c:\windows\system32\drivers\netr73.sys
2013-07-30 22:29 . 2013-05-02 15:28 238872 ——w- c:\windows\system32\MpSigStub.exe
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-08-23 13:35 . 2013-02-23 23:33 13464 —-a-w- c:\windows\system32\drivers\SWDUMon.sys
2013-08-21 02:00 . 2012-04-11 23:16 692104 —-a-w- c:\windows\system32\FlashPlayerApp.exe
2013-08-21 02:00 . 2011-06-06 00:08 71048 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-30 05:11 . 2012-08-30 21:33 37664 —-a-w- c:\windows\system32\drivers\avgtpx86.sys
2013-07-26 02:47 . 2004-08-04 12:00 920064 —-a-w- c:\windows\system32\wininet.dll
2013-07-26 02:47 . 2004-08-04 12:00 43520 ——w- c:\windows\system32\licmgr10.dll
2013-07-26 02:47 . 2004-08-04 12:00 1469440 ——w- c:\windows\system32\inetcpl.cpl
2013-07-25 15:52 . 2004-08-04 12:00 385024 ——w- c:\windows\system32\html.iec
2013-07-12 01:33 . 2013-05-13 21:05 0 —-a-w- c:\windows\system32\TempWmicBatchFile.bat
2013-07-10 10:37 . 2004-08-04 12:00 406016 —-a-w- c:\windows\system32\usp10.dll
2013-07-04 03:03 . 2004-08-04 12:00 2149888 —-a-w- c:\windows\system32\ntoskrnl.exe
2013-07-04 02:08 . 2004-08-03 22:59 2028544 —-a-w- c:\windows\system32\ntkrnlpa.exe
2013-06-04 07:23 . 2004-08-04 12:00 562688 —-a-w- c:\windows\system32\qedit.dll
2013-06-04 01:40 . 2004-08-04 12:00 1876736 —-a-w- c:\windows\system32\win32k.sys
2013-05-28 01:59 . 2004-08-04 12:00 590848 —-a-w- c:\windows\system32\rpcrt4.dll
2013-05-28 00:41 . 2010-10-15 10:52 6144 —-a-w- c:\windows\system32\xpsp4res.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1AMPCBOK]
@="{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}"
[HKEY_CLASSES_ROOT\CLSID\{04cd1f3e-81d5-4904-a3ab-e0f99a7d769d}]
2009-11-06 14:07 297808 —-a-w- c:\windows\system32\mscoree.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2013-08-08 109784]
"Adobe Reader Synchronizer"="c:\program files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe" [2013-05-10 1272912]
"DriverUpdate"="c:\program files\DriverUpdate\DriverUpdate.exe" [2013-06-22 34220352]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-04 208952]
"PSQLLauncher"="c:\program files\Protector Suite QL\launcher.exe" [2006-09-01 30208]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-04-14 667718]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-04-14 602182]
"EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2006-04-14 569413]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"ControlCenter4"="c:\program files\ControlCenter4\BrCcBoot.exe" [2011-04-20 139264]
"BrStsMon00"="c:\program files\Browny02\Brother\BrStMonW.exe" [2011-05-18 2629632]
"IndexSearch"="c:\program files\Nuance\PaperPort\IndexSearch.exe" [2010-03-08 46368]
"PPort12reminder"="c:\program files\Nuance\PaperPort\Ereg\Ereg.exe" [2010-02-09 328992]
"RTHDCPL"="RTHDCPL.EXE" [2000-01-01 20143688]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2013-05-31 152392]
"TkBellExe"="c:\program files\real\realplayer\update\realsched.exe" [2013-06-19 295512]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"GoogleChromeAutoLaunch_BB7E6CE705E9E15ABCB72D3060D30B1F"="c:\program files\Google\Chrome\Application\chrome.exe" [2013-08-16 829392]
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe -s [2011-1-26 622592]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2013-05-07 115440]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\psfus]
2006-09-01 00:59 39936 —-a-w- c:\windows\system32\psqlpwd.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli psqlpwd
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\mshta.exe"=
"c:\\Program Files\\Movie Maker\\moviemk.exe"=
"c:\\Program Files\\7-Zip\\7zFM.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Documents and Settings\\User\\Local Settings\\Application Data\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Documents and Settings\\User\\Local Settings\\Application Data\\Torch\\Plugins\\Torrent\\TorchTorrent.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"54925:UDP"= 54925:UDP:BrotherNetwork Scanner
.
R1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx86.sys [31/08/2012 7:33 AM 37664]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [23/07/2011 2:27 AM 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [13/07/2011 7:55 AM 67664]
R2 ipasintf;ipasintf;c:\windows\system32\drivers\pas2k.sys [10/07/2006 6:37 PM 78280]
R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [15/06/2013 9:42 AM 418376]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [15/06/2013 9:42 AM 701512]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [26/06/2010 3:07 AM 35088]
R2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files\Nuance\PaperPort\PDFProFiltSrvPP.exe [9/03/2010 12:40 AM 144672]
R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files\RealNetworks\RealDownloader\rndlresolversvc.exe [16/04/2013 3:07 AM 39056]
R2 smihlp;SMI helper driver;c:\program files\Protector Suite QL\smihlp.sys [1/09/2006 10:42 AM 3328]
R2 WebUpdate4;Web Update Wizard Service V4;c:\windows\system32\WebUpdateSvc4.exe [19/01/2008 2:12 AM 258264]
R3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys [20/03/2013 4:57 PM 26080]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [12/10/2010 9:55 AM 36352]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [15/06/2013 9:42 AM 22856]
R3 NETwLx32; Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit;c:\windows\system32\drivers\NETwLx32.sys [24/02/2013 12:46 PM 6607744]
R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [16/02/2006 5:36 PM 51288]
R3 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [20/02/2006 4:01 PM 43608]
S1 MpKsle033037d;MpKsle033037d;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{996C69FE-556B-47DA-AD95-1E462181B36C}\MpKsle033037d.sys –> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{996C69FE-556B-47DA-AD95-1E462181B36C}\MpKsle033037d.sys [?]
S2 Allin1Convert_8hService;Allin1ConvertService;c:\progra~1\ALLIN1~2\bar\1.bin\8hbarsvc.exe –> c:\progra~1\ALLIN1~2\bar\1.bin\8hbarsvc.exe [?]
S2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [12/07/2013 2:37 PM 3289472]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [21/06/2013 9:53 AM 162408]
S2 vToolbarUpdater15.4.0;vToolbarUpdater15.4.0;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe –> c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [24/02/2013 11:19 AM 1691480]
S3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [25/12/2012 9:06 AM 245760]
S3 GAGPDrv;GAGPDrv; [x]
S3 hitmanpro37;HitmanPro 3.7 Support Driver;c:\windows\system32\drivers\hitmanpro37.sys [22/08/2013 7:29 AM 30464]
S3 SWDUMon;SWDUMon;c:\windows\system32\drivers\SWDUMon.sys [24/02/2013 9:33 AM 13464]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-08-21 21:04 1177552 —-a-w- c:\program files\Google\Chrome\Application\29.0.1547.57\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-08-23 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 02:00]
.
2013-08-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 07:57]
.
2013-08-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-12-15 06:48]
.
2013-08-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-12-15 06:48]
.
2013-08-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-1409082233-725345543-1003Core.job
- c:\documents and settings\User\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-04-01 21:37]
.
2013-08-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-1409082233-725345543-1003UA.job
- c:\documents and settings\User\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-04-01 21:37]
.
2013-08-09 c:\windows\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
- c:\program files\RealNetworks\RealDownloader\recordingmanager.exe [2013-04-15 17:09]
.
2013-08-23 c:\windows\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
- c:\program files\RealNetworks\RealDownloader\realupgrade.exe [2013-04-15 17:07]
.
2013-08-20 c:\windows\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
- c:\program files\RealNetworks\RealDownloader\realupgrade.exe [2013-04-15 17:07]
.
2013-08-23 c:\windows\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-04-16 02:45]
.
2013-08-23 c:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
- c:\program files\Real\RealUpgrade\realupgrade.exe [2013-04-16 02:45]
.
.
——- Supplementary Scan ——-
.
uStart Page = hxxp://www.google.com
uInternet Settings,ProxyOverride = *.local
IE: Customize Menu - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Fill Forms - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
IE: Open with PDF Viewer Plus - c:\program files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll/PlusIEContextMenu.htm
IE: Save Forms - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
IE: Send to &Bluetooth Device… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Show RoboForm Toolbar - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
TCP: DhcpNameServer = 192.168.0.1 192.168.1.1
FF - ProfilePath - c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com.au/
FF - prefs.js: keyword.enabled - false
FF - ExtSQL: 2013-07-27 21:49; {B40794A0-7477-4335-95C5-8CB9BBC5C4A5}; c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\{B40794A0-7477-4335-95C5-8CB9BBC5C4A5}.xpi
FF - ExtSQL: 2013-08-15 09:41; 8hffxtbr@Allin1Convert_8h.com; c:\program files\Allin1Convert_8h\bar\1.bin
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-08-24 00:04
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes …
.
scanning hidden autostart entries …
.
scanning hidden files …
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————
.
[HKEY_USERS\S-1-5-21-1960408961-1409082233-725345543-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
——————— DLLs Loaded Under Running Processes ———————
.
- - - - - - - > 'winlogon.exe'(964)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\psqlpwd.dll
c:\program files\Protector Suite QL\infra.dll
c:\program files\Protector Suite QL\homefus2.dll
c:\windows\system32\biologon.dll
c:\program files\Protector Suite QL\homepass.dll
c:\program files\Protector Suite QL\bio.dll
c:\program files\Protector Suite QL\remote.dll
c:\windows\system32\MSVCP71.dll
c:\program files\Protector Suite QL\crypto.dll
.
- - - - - - - > 'lsass.exe'(1020)
c:\windows\system32\psqlpwd.dll
c:\program files\Protector Suite QL\infra.dll
c:\program files\Protector Suite QL\homefus2.dll
.
- - - - - - - > 'explorer.exe'(2900)
c:\windows\system32\WININET.dll
c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_44262b86\MSVCR80.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2013-08-24 00:07:55
ComboFix-quarantined-files.txt 2013-08-23 14:07
ComboFix2.txt 2013-08-21 14:33
.
Pre-Run: 12,963,946,496 bytes free
Post-Run: 12,973,084,672 bytes free
.
- - End Of File - - 3D7BC4D9B905A9D939550F58D031A08C
8F558EB6672622401DA993E1E865C861

Hi jeff
i cannot run it as administrator as i do not know the password ??
and OTL only gave me 1 report not the extras ?? i ran it 2 times and still no extras
i looked in computer c:
so iv posted yesterdays one ( i accidentally ran instead of the combo fix ) after i removed avg yesterday ( ??? )



OTL logfile created on: 24/08/2013 1:14:26 PM - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\User\Desktop\Diognosing
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 66.85% Memory free
4.84 Gb Paging File | 4.11 Gb Available in Paging File | 84.95% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111.78 Gb Total Space | 12.08 Gb Free Space | 10.81% Space Free | Partition Type: NTFS

Computer Name: ACER_TM6460 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Program Files\HitmanPro\hmpsched.exe (SurfRight B.V.)
PRC - C:\Documents and Settings\User\Desktop\Diognosing\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe (Siber Systems)
PRC - C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Program Files\DriverUpdate\DriverUpdate.exe (SlimWare Utilities, Inc.)
PRC - C:\Program Files\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe (RealNetworks, Inc.)
PRC - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - C:\Program Files\ControlCenter4\BrCcUxSys.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\ControlCenter4\BrCtrlCntr.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nuance Communications, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\WebUpdateSvc4.exe (Data Perceptions / PowerProgrammer)
PRC - C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe (Intel Corporation)
PRC - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (O2Micro International)


========== Modules (No Company Name) ==========

MOD - C:\Program Files\Mozilla Firefox\mozjs.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\b14359470744c840c59fbe4e58034fd6\mscorlib.ni.dll ()
MOD - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files\Brother\BrUtilities\BrLogAPI.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\Libeay32.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\iWMSProv.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\IntStngs.dll ()
MOD - C:\Program Files\Intel\Wireless\Bin\acAuth.dll ()
MOD - C:\WINDOWS\system32\tsd32.dll ()


========== Services (SafeList) ==========

SRV - (vToolbarUpdater15.4.0) – C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe File not found
SRV - (MsMpSvc) – c:\Program Files\Microsoft Security Client\MsMpEng.exe File not found
SRV - (Allin1Convert_8hService) – C:\PROGRA~1\ALLIN1~2\bar\1.bin\8hbarsvc.exe File not found
SRV - (ACDaemon) – File not found
SRV - (HitmanProScheduler) – C:\Program Files\HitmanPro\hmpsched.exe (SurfRight B.V.)
SRV - (AdobeFlashPlayerUpdateSvc) – C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) – C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (Skype C2C Service) – C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (SkypeUpdate) – C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (RealNetworks Downloader Resolver Service) – C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe ()
SRV - (MBAMService) – C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) – C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (JavaQuickStarterService) – C:\Program Files\Java\jre7\bin\jqs.exe (Oracle Corporation)
SRV - (rpcapd) – C:\Program Files\WinPcap\rpcapd.exe (CACE Technologies, Inc.)
SRV - (PDFProFiltSrvPP) – C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe (Nuance Communications, Inc.)
SRV - (BrYNSvc) – C:\Program Files\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
SRV - (WebUpdate4) – C:\WINDOWS\system32\WebUpdateSvc4.exe (Data Perceptions / PowerProgrammer)
SRV - (Pml Driver HPZ12) – C:\WINDOWS\system32\hpzipm12.exe (HP)
SRV - (O2Flash) – C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe (O2Micro International)


========== Driver Services (SafeList) ==========

DRV - (WDICA) – File not found
DRV - (PDRFRAME) – File not found
DRV - (PDRELI) – File not found
DRV - (PDFRAME) – File not found
DRV - (PDCOMP) – File not found
DRV - (PCIDump) – File not found
DRV - (MpKsle033037d) – c:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{996C69FE-556B-47DA-AD95-1E462181B36C}\MpKsle033037d.sys File not found
DRV - (MpFilter) – system32\DRIVERS\MpFilter.sys File not found
DRV - (mbr) – C:\ComboFix\mbr.sys File not found
DRV - (lbrtfdc) – File not found
DRV - (i2omgmt) – File not found
DRV - (hwdatacard) – File not found
DRV - (GAGPDrv) – File not found
DRV - (Changer) – File not found
DRV - (catchme) – C:\DOCUME~1\User\LOCALS~1\Temp\catchme.sys File not found
DRV - (SWDUMon) – C:\WINDOWS\system32\drivers\SWDUMon.sys ()
DRV - (avgtp) – C:\WINDOWS\system32\drivers\avgtpx86.sys (AVG Technologies)
DRV - (MBAMProtector) – C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (Apowersoft_AudioDevice) – C:\WINDOWS\system32\drivers\Apowersoft_AudioDevice.sys (Wondershare)
DRV - (SASDIFSV) – C:\Program Files\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASKUTIL) – C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (tap0901) – C:\WINDOWS\system32\drivers\tap0901.sys (The OpenVPN Project)
DRV - (NPF) – C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies, Inc.)
DRV - (SCDEmu) – C:\WINDOWS\System32\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV - (Afc) – C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (smihlp) – C:\Program Files\Protector Suite QL\smihlp.sys (UPEK Inc.)
DRV - (btaudio) – C:\WINDOWS\system32\drivers\btaudio.sys (Broadcom Corporation.)
DRV - (BTSERIAL) – C:\WINDOWS\system32\drivers\btserial.sys (Broadcom Corporation.)
DRV - (BTKRNL) – C:\WINDOWS\system32\drivers\btkrnl.sys (Broadcom Corporation.)
DRV - (BTDriver) – C:\WINDOWS\system32\drivers\btport.sys (Broadcom Corporation.)
DRV - (BTWUSB) – C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.)
DRV - (BTWDNDIS) – C:\WINDOWS\system32\drivers\btwdndis.sys (Broadcom Corporation.)
DRV - (btwhid) – C:\WINDOWS\system32\drivers\btwhid.sys (Broadcom Corporation.)
DRV - (ipasintf) – C:\WINDOWS\system32\drivers\pas2k.sys ()
DRV - (b57w2k) – C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (ati2mtag) – C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (s24trans) – C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (w39n51) – C:\WINDOWS\system32\drivers\w39n51.sys (Intel® Corporation)
DRV - (SMCIRDA) – C:\WINDOWS\system32\drivers\smcirda.sys (SMSC)
DRV - (RT73) – C:\WINDOWS\system32\drivers\rt73.sys (Ralink Technology, Corp.)
DRV - (UIUSys) – C:\WINDOWS\system32\drivers\UIUSYS.SYS (Conexant Systems, Inc)
DRV - (IFXTPM) – C:\WINDOWS\system32\drivers\ifxtpm.sys (Infineon Technologies AG)
DRV - (AFS2K) – C:\WINDOWS\System32\drivers\AFS2K.SYS (Oak Technology Inc.)
DRV - (GVCplDrv) – C:\WINDOWS\System32\drivers\GVCplDrv.sys ()
DRV - (atirage3) – C:\WINDOWS\system32\drivers\atimpae.sys (ATI Technologies Inc.)
DRV - (NETwLx32) – C:\WINDOWS\system32\drivers\NETwLx32.sys (Intel Corporation)
DRV - (IntcAzAudAddService) – C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (Ambfilt) – C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (Monfilt) – C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (HSF_DPV) – C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (winachsf) – C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) – C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (O2SCBUS) – C:\WINDOWS\system32\drivers\ozscr.sys (O2Micro)
DRV - (O2MDRDR) – C:\WINDOWS\system32\drivers\o2media.sys (O2Micro )
DRV - (O2SDRDR) – C:\WINDOWS\system32\drivers\o2sd.sys (O2Micro )


========== Standard Registry (All) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={sea…ferrer:source?}
IE - HKLM\..\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf}: "URL" = http://search.mywebsearch.com/mywebsearch/…r={searchTerms}
IE - HKLM\..\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}: "URL" = http://search.tb.ask.com/search/GGmain.jht…r={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?p…amp;ar=iesearch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com.au/
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…amp;FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM;=IE8SRC
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD23}: "URL" = http://search.shareazaweb.com//web?src=ieb…q={searchTerms}
IE - HKCU\..\SearchScopes\{a5b9c0f5-5616-47cd-a95f-e43b488faccf}: "URL" = http://search.mywebsearch.com/mywebsearch/…r={searchTerms}
IE - HKCU\..\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}: "URL" = http://search.tb.ask.com/search/GGmain.jht…r={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://www.google.com.au/"
FF - prefs.js..extensions.enabledAddons: %7Be001c731-5e37-4538-a5cb-8168736a2360%7D:0.9.9.119
FF - prefs.js..extensions.enabledAddons: %7B20a82645-c095-46ed-80e3-08825760534b%7D:0.0.0
FF - prefs.js..extensions.enabledAddons: ffxtlbr%40mixidj.com:1.5.0
FF - prefs.js..extensions.enabledAddons: testpilot%40labs.mozilla.com:1.2.2
FF - prefs.js..extensions.enabledAddons: %7BFCE04E1F-9378-4f39-96F6-5689A9159E45%7D:1.3.2
FF - prefs.js..extensions.enabledAddons: 8hffxtbr%40Allin1Convert_8h.com:5.24.2.284
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0.1
FF - prefs.js..keyword.enabled: false
FF - prefs.js..browser.startup.homepage: "http://www.google.com.au/"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF - HKLM\Software\MozillaPlugins\@Allin1Convert_8h.com/Plugin: C:\Program Files\Allin1Convert_8h\bar\1.bin\NP8hStub.dll File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@FromDocToPDF_65.com/Plugin: C:\Program Files\FromDocToPDF_65\bar\1.bin\NP65Stub.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.11.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=16.0.2.32: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.2: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.2: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.2: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=16.0.2.32: c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF - HKLM\Software\MozillaPlugins\@realnetworks.com/npdlplugin;version=1: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@UtilityChest_49.com/Plugin: C:\Program Files\UtilityChest_49\bar\1.bin\NP49Stub.dll File not found
FF - HKLM\Software\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin: C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@citrixonline.com/appdetectorplugin: C:\Documents and Settings\User\Local Settings\Application Data\Citrix\Plugins\97\npappdetector.dll (Citrix Online)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Documents and Settings\User\Application Data\Mozilla\plugins\npgoogletalk.dll (Google)
FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Documents and Settings\User\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\User\Local Settings\Application Data\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\User\Local Settings\Application Data\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2010/10/27 10:45:15 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\49ffxtbr@UtilityChest_49.com: C:\Program Files\UtilityChest_49\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013/06/20 08:04:48 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\65ffxtbr@FromDocToPDF_65.com: C:\Program Files\FromDocToPDF_65\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FCE04E1F-9378-4f39-96F6-5689A9159E45}: C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [2013/06/20 08:04:48 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\4zffxtbr@VideoDownloadConverter_4z.com: C:\Program Files\VideoDownloadConverter_4z\bar\1.bin
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{22119944-ED35-4ab1-910B-E619EA06A115}: C:\Program Files\Siber Systems\AI RoboForm\Firefox [2013/08/18 07:12:10 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\8hffxtbr@Allin1Convert_8h.com: C:\Program Files\Allin1Convert_8h\bar\1.bin [2013/08/22 11:55:52 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/06/03 21:42:50 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/08/11 10:53:31 | 000,000,000 | —D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\FindLyrics\FF\

[2013/03/21 22:36:02 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Extensions
[2010/10/15 19:30:52 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2013/01/13 08:16:16 | 000,000,000 | —D | M] (Smiley Bar for Facebook) – C:\Documents and Settings\User\Application Data\Mozilla\Extensions\statuswinks@StatusWinks
[2013/08/20 19:06:37 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions
[2012/12/10 15:00:23 | 000,000,000 | —D | M] (Bitdefender QuickScan) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2011/11/11 08:33:39 | 000,000,000 | —D | M] (AVG Security Toolbar) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\avg@toolbar(2)
[2013/03/20 17:02:41 | 000,000,000 | —D | M] (MixiDJ Toolbar) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\[removed]
[2011/11/11 08:33:32 | 000,000,000 | —D | M] (Cooliris) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\piclens@cooliris(2).com
[2013/04/28 14:17:27 | 000,615,445 | —- | M] () (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\[removed]
[2013/07/28 14:18:41 | 000,012,103 | —- | M] () (No name found) – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\extensions\{B40794A0-7477-4335-95C5-8CB9BBC5C4A5}.xpi
[2013/02/13 17:42:07 | 000,001,145 | —- | M] () – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\searchplugins\urlcom.xml
[2013/05/18 10:03:24 | 000,001,492 | —- | M] () – C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\ze604on3.default\searchplugins\web-search-powered-by-google.xml
[2013/03/21 22:36:02 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions
[2013/07/24 22:32:31 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/04/28 14:15:45 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/04/28 14:16:08 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\browser\extensions
[2013/07/24 22:32:31 | 000,000,000 | —D | M] (Skype Click to Call) – C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013/08/18 07:26:29 | 000,000,000 | —D | M] (Default) – C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/05/25 08:38:23 | 000,000,000 | —D | M] (No name found) – C:\Program Files\Mozilla Firefox\browser\distribution\extensions
[2013/06/20 08:04:48 | 000,000,000 | —D | M] (RealDownloader) – C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\REALNETWORKS\REALDOWNLOADER\BROWSERPLUGINS\FIREFOX\EXT
[2013/08/22 11:55:52 | 000,000,000 | —D | M] (Allin1Convert) – C:\PROGRAM FILES\ALLIN1CONVERT_8H\BAR\1.BIN
[2010/10/27 10:45:15 | 000,000,000 | —D | M] (Microsoft .NET Framework Assistant) – C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011/01/03 05:40:28 | 000,104,448 | —- | M] (Crawler, LLC) – C:\Program Files\mozilla firefox\plugins\NPCrwPd.dll
[2006/10/26 20:12:16 | 000,016,192 | —- | M] (Microsoft Corporation) – C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL
[2013/05/10 17:57:26 | 000,187,456 | —- | M] (Adobe Systems Inc.) – C:\Program Files\mozilla firefox\plugins\nppdf32.dll
[2013/06/20 08:03:30 | 000,153,736 | —- | M] (RealNetworks, Inc.) – C:\Program Files\mozilla firefox\plugins\nppl3260.dll
[2013/06/03 21:42:45 | 000,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin.dll
[2013/06/03 21:42:46 | 000,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll
[2013/06/03 21:42:47 | 000,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll
[2013/06/03 21:42:47 | 000,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll
[2013/06/03 21:42:50 | 000,159,744 | —- | M] (Apple Inc.) – C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll
[2013/06/20 08:03:22 | 000,124,504 | —- | M] (RealPlayer) – C:\Program Files\mozilla firefox\plugins\nprpplugin.dll
[2011/06/24 08:10:04 | 000,002,359 | —- | M] () – C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{g
oogle:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:in
s
tantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q;={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyPar
ameter}
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Documents and Settings\User\Application Data\Mozilla\plugins\np-mswmp.dll
CHR - plugin: Google Talk Plugin (Enabled) = C:\Documents and Settings\User\Application Data\Mozilla\plugins\npgoogletalk.dll
CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Documents and Settings\User\Application Data\Mozilla\plugins\npgtpo3dautoplugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Crawler Products Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPCrwPd.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: RealPlayer Download Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpplugin.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: RealNetworks™ RealDownloader Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll
CHR - plugin: RealNetworks™ RealDownloader HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll
CHR - plugin: RealNetworks™ RealDownloader PepperFlashVideoShim Plug-In (32-bit) (Enabled) = C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll
CHR - plugin: RealDownloader Plugin (Enabled) = C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll
CHR - plugin: Citrix Online Web Deployment Plugin 1.0.0.97 (Enabled) = C:\Documents and Settings\User\Local Settings\Application Data\Citrix\Plugins\97\npappdetector.dll
CHR - plugin: Google Update (Enabled) = C:\Documents and Settings\User\Local Settings\Application Data\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U13 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: RealDownloader = C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.2_0\
CHR - Extension: Torch Share = C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\kiplfnciaokpcennlkldkdaeaaomamof\1.0.0.2504_0\
CHR - Extension: Skype Click to Call = C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.10.0.13089_0\

O1 HOSTS File: ([2013/08/22 23:54:06 | 000,000,027 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (RealNetworks Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
O2 - BHO: (PlusIEEventHelper Class) - {551A852F-39A6-44A7-9C13-AFBEC9185A9D} - C:\Program Files\Nuance\PDF Viewer Plus\bin\PlusIEContextMenu.dll (Zeon Corporation)
O2 - BHO: (RoboForm Toolbar Helper) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (ChromeFrame BHO) - {ECB3C477-1A0A-44BD-BB57-78F9EFE34FA7} - C:\Program Files\Google\Chrome\Application\29.0.1547.57\npchrome_frame.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (&RoboForm; Toolbar) - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Address;) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Address;) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Links;) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&RoboForm; Toolbar) - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter4] C:\Program Files\ControlCenter4\BrCcBoot.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [EOUApp] C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe (Intel Corporation)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [IndexSearch] C:\Program Files\Nuance\PaperPort\IndexSearch.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [PPort12reminder] C:\Program Files\Nuance\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PSQLLauncher] C:\Program Files\Protector Suite QL\launcher.exe (UPEK Inc.)
O4 - HKLM..\Run: [RTHDCPL] C:\WINDOWS\RTHDCPL.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\program files\real\realplayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [Adobe Reader Synchronizer] C:\Program Files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [DriverUpdate] C:\Program Files\DriverUpdate\DriverUpdate.exe (SlimWare Utilities, Inc.)
O4 - HKCU..\Run: [RoboForm] C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe (Siber Systems)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\TL-WN321G Wireless Utility.lnk = C:\Program Files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe (TP-LINK TECHNOLOGIES CO., LTD.)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: verbosestatus = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInstrumentation = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Customize Menu - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html ()
O8 - Extra context menu item: E&xport; to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Fill Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html ()
O8 - Extra context menu item: Open with PDF Viewer Plus - C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O8 - Extra context menu item: Save Forms - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html ()
O8 - Extra context menu item: Send to &Bluetooth; Device… - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Show RoboForm Toolbar - C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html ()
O9 - Extra Button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: Options - {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : RoboForm Options - {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra 'Tools' menuitem : Show RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\wshbth.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftu…b?1364512205890 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BA44A5F-843B-4E98-BDC6-56E16580901F}: DhcpNameServer = 192.168.0.1 192.168.1.1
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gcf {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files\Google\Chrome\Application\29.0.1547.57\npchrome_frame.dll (Google Inc.)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\crypt32chain: DllName - (crypt32.dll) - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - (cryptnet.dll) - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - (cscdll.dll) - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\dimsntfy: DllName - (%SystemRoot%\System32\dimsntfy.dll) - C:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\psfus: DllName - (psqlpwd.dll) - C:\WINDOWS\System32\psqlpwd.dll (UPEK Inc.)
O20 - Winlogon\Notify\ScCertProp: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - (sclgntfy.dll) - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - (WlNotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - (WgaLogon.dll) - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - (wlnotify.dll) - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - C:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - C:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/11 20:34:05 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O32 - AutoRun File - [2011/10/31 17:28:00 | 000,000,000 | —D | M] - C:\AutoSave SoundsAndMusic 1 – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/08/23 23:36:00 | 000,000,000 | —D | C] – C:\WINDOWS\LastGood
[2013/08/22 09:56:39 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\Firefox takes a long time to start up _ Firefox Help_files
[2013/08/22 00:12:20 | 000,000,000 | RHSD | C] – C:\cmdcons
[2013/08/21 17:20:42 | 000,518,144 | —- | C] (SteelWerX) – C:\WINDOWS\SWREG.exe
[2013/08/21 17:20:42 | 000,406,528 | —- | C] (SteelWerX) – C:\WINDOWS\SWSC.exe
[2013/08/21 17:20:42 | 000,212,480 | —- | C] (SteelWerX) – C:\WINDOWS\SWXCACLS.exe
[2013/08/21 17:20:42 | 000,060,416 | —- | C] (NirSoft) – C:\WINDOWS\NIRCMD.exe
[2013/08/21 17:15:45 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Local Settings\Application Data\IAC
[2013/08/21 16:56:44 | 000,000,000 | —D | C] – C:\Qoobox
[2013/08/21 16:55:25 | 000,000,000 | —D | C] – C:\WINDOWS\erdnt
[2013/08/19 07:20:48 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\Diognosing
[2013/08/18 23:56:39 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Social Lead Fox
[2013/08/18 23:55:35 | 000,000,000 | —D | C] – C:\WINDOWS\Social Lead Fox
[2013/08/18 23:55:28 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Office
[2013/08/18 23:55:06 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Works
[2013/08/18 23:51:41 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio
[2013/08/18 23:51:40 | 000,000,000 | —D | C] – C:\Program Files\Common Files\DESIGNER
[2013/08/18 23:46:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Visual Studio 2005
[2013/08/18 23:46:04 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Local Settings\Application Data\Microsoft Help
[2013/08/18 23:45:20 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\PowerISO
[2013/08/18 23:44:32 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\HitmanPro
[2013/08/18 23:44:21 | 000,000,000 | —D | C] – C:\Program Files\HitmanPro
[2013/08/18 14:27:38 | 000,000,000 | —D | C] – C:\WINDOWS\CSC
[2013/08/17 20:00:40 | 000,000,000 | —D | C] – C:\Avenger
[2013/08/17 19:18:22 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\Malwarebytes Solve Your Malware Problems With Our Help_files
[2013/08/17 18:55:26 | 000,204,496 | —- | C] (Malwarebytes) – C:\Documents and Settings\User\Desktop\startuplite-setup-1.07.exe
[2013/08/16 07:50:47 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\New Folder
[2013/08/15 09:41:41 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\Allin1Convert_8h
[2013/08/15 09:41:17 | 000,000,000 | —D | C] – C:\Program Files\Allin1Convert_8h
[2013/08/11 14:27:53 | 000,000,000 | —D | C] – C:\Program Files\SocialLeadFox
[2013/08/11 10:55:16 | 000,029,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mdimon.dll
[2013/08/11 10:48:50 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Visual Studio 8
[2013/08/11 10:47:56 | 000,000,000 | —D | C] – C:\WINDOWS\SHELLNEW
[2013/08/11 10:47:05 | 000,000,000 | —D | C] – C:\Program Files\Microsoft Office
[2013/08/11 10:47:04 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Microsoft Help
[2013/08/11 10:46:23 | 000,000,000 | R–D | C] – C:\MSOCache
[2013/08/11 10:19:23 | 000,000,000 | —D | C] – C:\Program Files\PowerISO
[2013/08/09 22:53:58 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\HitmanPro
[2013/08/09 08:54:38 | 009,167,352 | —- | C] (SurfRight B.V.) – C:\Documents and Settings\User\Desktop\HitmanPro.exe
[2013/08/09 07:52:35 | 013,391,216 | —- | C] (Siber Systems) – C:\Documents and Settings\User\Desktop\RoboForm-Setup.exe
[2013/08/08 13:57:31 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\converted PDFs
[2013/08/08 13:42:28 | 000,000,000 | —D | C] – C:\Program Files\UPDF
[2013/08/04 15:44:49 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\AWeber Communications_files
[2013/08/04 13:59:10 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\OpenOffice.org
[2013/08/04 13:43:18 | 000,000,000 | –SD | C] – C:\Documents and Settings\User\Start Menu\Programs\OpenOffice.org 3.4.1
[2013/08/04 13:42:13 | 000,000,000 | —D | C] – C:\Program Files\OpenOffice.org 3
[2013/08/04 13:39:56 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\OpenOffice.org 3.4.1 (en-US) Installation Files
[2013/08/04 13:14:55 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Desktop\Realplaer recordings
[2013/08/02 22:54:40 | 000,000,000 | R–D | C] – C:\Documents and Settings\User\Desktop\New Briefcase
[2013/08/01 15:17:10 | 000,000,000 | —D | C] – C:\Documents and Settings\User\My Documents\Leadskimmer
[2013/08/01 14:01:10 | 000,000,000 | —D | C] – C:\Program Files\Zula Games
[2013/08/01 12:57:18 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\zulagames
[2013/08/01 12:57:11 | 000,000,000 | —D | C] – C:\Documents and Settings\User\Application Data\SUPERAntiSpyware.com
[2013/08/01 12:56:59 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Start Menu\Programs\SUPERAntiSpyware
[2013/08/01 12:56:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
[2013/08/01 12:56:53 | 000,000,000 | —D | C] – C:\Program Files\SUPERAntiSpyware
[2013/08/01 09:55:59 | 000,255,488 | R— | C] (Ralink Technology Inc.) – C:\WINDOWS\System32\drivers\netr73.sys
[2013/07/31 15:53:17 | 000,000,000 | —D | C] – C:\Documents and Settings\User\My Documents\BANNERS
[2013/07/31 08:29:01 | 000,238,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MpSigStub.exe
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/08/24 13:14:00 | 000,000,974 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-1409082233-725345543-1003UA.job
[2013/08/24 12:59:00 | 000,000,830 | —- | M] () – C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013/08/24 12:58:00 | 000,000,882 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2013/08/24 12:58:00 | 000,000,878 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2013/08/24 12:50:10 | 000,807,326 | —- | M] () – C:\Documents and Settings\User\Desktop\freesalesfunnel.pdf
[2013/08/24 12:14:00 | 000,000,922 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1960408961-1409082233-725345543-1003Core.job
[2013/08/24 07:34:58 | 000,013,646 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2013/08/23 23:35:30 | 000,013,464 | —- | M] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2013/08/23 23:33:45 | 000,000,276 | —- | M] () – C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/23 23:33:23 | 000,000,298 | —- | M] () – C:\WINDOWS\tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/23 23:30:39 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2013/08/23 13:43:40 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/22 23:54:06 | 000,000,027 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2013/08/22 09:56:46 | 000,033,793 | —- | M] () – C:\Documents and Settings\User\Desktop\Firefox takes a long time to start up _ Firefox Help.htm
[2013/08/22 07:14:12 | 000,001,829 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2013/08/22 06:25:10 | 000,399,216 | —- | M] () – C:\Documents and Settings\User\Desktop\BullGuardDownloaderBPP.exe
[2013/08/22 06:22:26 | 000,373,384 | —- | M] () – C:\Documents and Settings\User\Desktop\BullGuardDownloader_microsoftlpdefault.exe
[2013/08/22 00:12:34 | 000,000,327 | RHS- | M] () – C:\boot.ini
[2013/08/21 12:00:44 | 000,692,104 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerApp.exe
[2013/08/21 12:00:43 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013/08/21 07:35:49 | 000,000,306 | —- | M] () – C:\WINDOWS\tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/19 16:29:10 | 000,666,633 | —- | M] () – C:\Documents and Settings\User\Desktop\AdwCleaner.exe
[2013/08/19 09:32:17 | 000,001,626 | —- | M] () – C:\Documents and Settings\All Users\Desktop\HitmanPro.lnk
[2013/08/17 19:18:25 | 000,014,236 | —- | M] () – C:\Documents and Settings\User\Desktop\Malwarebytes Solve Your Malware Problems With Our Help.htm
[2013/08/17 18:55:31 | 000,204,496 | —- | M] (Malwarebytes) – C:\Documents and Settings\User\Desktop\startuplite-setup-1.07.exe
[2013/08/15 16:36:45 | 000,772,868 | —- | M] () – C:\Documents and Settings\User\Desktop\Module+1.pdf
[2013/08/15 13:43:37 | 000,000,448 | —- | M] () – C:\0
[2013/08/15 10:47:23 | 000,000,144 | —- | M] () – C:\WINDOWS\ANS2000.INI
[2013/08/15 09:19:27 | 000,397,353 | —- | M] () – C:\Documents and Settings\User\Desktop\3-Steps-2-Profit.pdf
[2013/08/15 08:37:20 | 034,162,021 | —- | M] () – C:\Documents and Settings\User\Desktop\mijacko_1080p video mttb.mp4
[2013/08/15 08:28:07 | 034,162,021 | —- | M] () – C:\Documents and Settings\User\Desktop\mijacko_1080p.mp4
[2013/08/14 16:48:32 | 000,505,862 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2013/08/14 16:48:32 | 000,089,542 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2013/08/12 21:06:01 | 000,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2013/08/12 07:48:58 | 000,360,136 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2013/08/11 14:27:58 | 000,001,644 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Social Lead Fox.lnk
[2013/08/11 10:19:24 | 000,000,698 | —- | M] () – C:\Documents and Settings\All Users\Desktop\PowerISO.lnk
[2013/08/10 07:50:24 | 000,001,996 | —- | M] () – C:\WINDOWS\System32\.crusader
[2013/08/09 21:38:03 | 001,024,992 | —- | M] () – C:\Documents and Settings\User\Desktop\statuswinks.exe
[2013/08/09 19:02:01 | 000,000,324 | —- | M] () – C:\WINDOWS\tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/09 08:57:51 | 009,167,352 | —- | M] (SurfRight B.V.) – C:\Documents and Settings\User\Desktop\HitmanPro.exe
[2013/08/09 07:57:44 | 013,391,216 | —- | M] (Siber Systems) – C:\Documents and Settings\User\Desktop\RoboForm-Setup.exe
[2013/08/08 13:58:11 | 000,000,000 | —- | M] () – C:\Documents and Settings\User\Application Data\pdfperformer
[2013/08/06 17:31:45 | 004,476,508 | —- | M] () – C:\Documents and Settings\User\Desktop\wordpress-3.6.zip
[2013/08/05 18:06:14 | 000,015,593 | —- | M] () – C:\Documents and Settings\User\Desktop\Top Tier imabe.jpg
[2013/08/04 15:44:50 | 000,067,589 | —- | M] () – C:\Documents and Settings\User\Desktop\AWeber Communications.htm
[2013/08/04 15:22:58 | 000,001,186 | —- | M] () – C:\Documents and Settings\User\Desktop\29Leadsources.htm
[2013/08/04 14:59:40 | 002,014,159 | —- | M] () – C:\Documents and Settings\User\My Documents\MY PAGE power pont.odp
[2013/08/04 14:26:11 | 000,008,860 | —- | M] () – C:\Documents and Settings\User\My Documents\A Test Test traffic costs ect.ods
[2013/08/04 13:43:22 | 000,000,933 | —- | M] () – C:\Documents and Settings\User\Desktop\OpenOffice.org 3.4.1.lnk
[2013/08/03 22:31:04 | 000,000,758 | —- | M] () – C:\Documents and Settings\User\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2013/08/03 22:31:04 | 000,000,740 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2013/08/03 10:07:42 | 000,025,521 | —- | M] () – C:\Documents and Settings\User\My Documents\TrafficExchangeSecrets-PLR.zip
[2013/08/01 14:00:56 | 000,001,130 | —- | M] () – C:\Documents and Settings\User\Desktop\SpeedAnalysis.lnk
[2013/08/01 12:56:59 | 000,001,694 | —- | M] () – C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2013/08/01 11:42:44 | 000,001,945 | —- | M] () – C:\WINDOWS\epplauncher.mif
[2013/07/30 15:11:28 | 000,003,715 | —- | M] () – C:\Program Files\Mozilla Firefoxavg-secure-search.xml
[2013/07/30 15:11:10 | 000,037,664 | —- | M] (AVG Technologies) – C:\WINDOWS\System32\drivers\avgtpx86.sys
[2013/07/26 12:47:17 | 001,215,488 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\urlmon.dll
[2013/07/26 12:47:17 | 000,920,064 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wininet.dll
[2013/07/26 12:47:17 | 000,759,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vgx.dll
[2013/07/26 12:47:17 | 000,206,848 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\occache.dll
[2013/07/26 12:47:17 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\url.dll
[2013/07/26 12:47:17 | 000,105,984 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\url.dll
[2013/07/26 12:47:16 | 006,017,536 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[2013/07/26 12:47:16 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mstime.dll
[2013/07/26 12:47:16 | 000,611,840 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mstime.dll
[2013/07/26 12:47:16 | 000,067,072 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtmled.dll
[2013/07/26 12:47:14 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeeds.dll
[2013/07/26 12:47:14 | 000,630,272 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeeds.dll
[2013/07/26 12:47:14 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\msfeedsbs.dll
[2013/07/26 12:47:14 | 000,055,296 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2013/07/26 12:47:13 | 000,522,240 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2013/07/26 12:47:13 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\licmgr10.dll
[2013/07/26 12:47:13 | 000,043,520 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\licmgr10.dll
[2013/07/26 12:47:13 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\jsproxy.dll
[2013/07/26 12:47:13 | 000,025,600 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jsproxy.dll
[2013/07/26 12:47:12 | 002,005,504 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iertutil.dll
[2013/07/26 12:47:12 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\inetcpl.cpl
[2013/07/26 12:47:12 | 001,469,440 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcpl.cpl
[2013/07/26 12:47:11 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iepeers.dll
[2013/07/26 12:47:11 | 000,184,320 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iepeers.dll
[2013/07/26 12:47:10 | 011,113,472 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieframe.dll
[2013/07/26 12:47:06 | 000,743,424 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedvtool.dll
[2013/07/26 12:47:06 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\iedkcs32.dll
[2013/07/26 12:47:06 | 000,387,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iedkcs32.dll
[2013/07/26 01:52:59 | 000,385,024 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec
[2013/07/25 21:23:02 | 000,174,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\ie4uinit.exe
[2013/07/25 21:23:02 | 000,174,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ie4uinit.exe
[2013/07/25 17:48:32 | 000,015,821 | —- | M] () – C:\Documents and Settings\User\Desktop\attachment.jpg
[6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/08/24 12:50:08 | 000,807,326 | —- | C] () – C:\Documents and Settings\User\Desktop\freesalesfunnel.pdf
[2013/08/22 09:56:37 | 000,033,793 | —- | C] () – C:\Documents and Settings\User\Desktop\Firefox takes a long time to start up _ Firefox Help.htm
[2013/08/22 07:21:09 | 000,000,276 | —- | C] () – C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1960408961-1409082233-725345543-1003.job
[2013/08/22 06:25:06 | 000,399,216 | —- | C] () – C:\Documents and Settings\User\Desktop\BullGuardDownloaderBPP.exe
[2013/08/22 06:22:16 | 000,373,384 | —- | C] () – C:\Documents and Settings\User\Desktop\BullGuardDownloader_microsoftlpdefault.exe
[2013/08/22 00:12:33 | 000,000,211 | —- | C] () – C:\Boot.bak
[2013/08/22 00:12:28 | 000,260,272 | RHS- | C] () – C:\cmldr
[2013/08/21 17:20:42 | 000,256,000 | —- | C] () – C:\WINDOWS\PEV.exe
[2013/08/21 17:20:42 | 000,208,896 | —- | C] () – C:\WINDOWS\MBR.exe
[2013/08/21 17:20:42 | 000,098,816 | —- | C] () – C:\WINDOWS\sed.exe
[2013/08/21 17:20:42 | 000,080,412 | —- | C] () – C:\WINDOWS\grep.exe
[2013/08/21 17:20:42 | 000,068,096 | —- | C] () – C:\WINDOWS\zip.exe
[2013/08/17 19:18:22 | 000,014,236 | —- | C] () – C:\Documents and Settings\User\Desktop\Malwarebytes Solve Your Malware Problems With Our Help.htm
[2013/08/15 16:36:36 | 000,772,868 | —- | C] () – C:\Documents and Settings\User\Desktop\Module+1.pdf
[2013/08/15 09:19:25 | 000,397,353 | —- | C] () – C:\Documents and Settings\User\Desktop\3-Steps-2-Profit.pdf
[2013/08/15 08:29:42 | 034,162,021 | —- | C] () – C:\Documents and Settings\User\Desktop\mijacko_1080p video mttb.mp4
[2013/08/15 08:21:34 | 034,162,021 | —- | C] () – C:\Documents and Settings\User\Desktop\mijacko_1080p.mp4
[2013/08/11 14:27:58 | 000,001,650 | —- | C] () – C:\Documents and Settings\All Users\Start Menu\Programs\Social Lead Fox.lnk
[2013/08/11 14:27:58 | 000,001,644 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Social Lead Fox.lnk
[2013/08/11 10:19:24 | 000,000,698 | —- | C] () – C:\Documents and Settings\All Users\Desktop\PowerISO.lnk
[2013/08/10 07:50:24 | 000,001,996 | —- | C] () – C:\WINDOWS\System32\.crusader
[2013/08/09 22:56:02 | 000,001,626 | —- | C] () – C:\Documents and Settings\All Users\Desktop\HitmanPro.lnk
[2013/08/09 08:49:45 | 000,666,633 | —- | C] () – C:\Documents and Settings\User\Desktop\AdwCleaner.exe
[2013/08/09 08:26:35 | 001,024,992 | —- | C] () – C:\Documents and Settings\User\Desktop\statuswinks.exe
[2013/08/08 13:58:11 | 000,000,000 | —- | C] () – C:\Documents and Settings\User\Application Data\pdfperformer
[2013/08/06 17:31:03 | 004,476,508 | —- | C] () – C:\Documents and Settings\User\Desktop\wordpress-3.6.zip
[2013/08/05 18:06:12 | 000,015,593 | —- | C] () – C:\Documents and Settings\User\Desktop\Top Tier imabe.jpg
[2013/08/04 15:44:49 | 000,067,589 | —- | C] () – C:\Documents and Settings\User\Desktop\AWeber Communications.htm
[2013/08/04 15:22:56 | 000,001,186 | —- | C] () – C:\Documents and Settings\User\Desktop\29Leadsources.htm
[2013/08/04 14:50:20 | 002,014,159 | —- | C] () – C:\Documents and Settings\User\My Documents\MY PAGE power pont.odp
[2013/08/04 14:01:49 | 000,008,860 | —- | C] () – C:\Documents and Settings\User\My Documents\A Test Test traffic costs ect.ods
[2013/08/04 13:43:22 | 000,000,933 | —- | C] () – C:\Documents and Settings\User\Desktop\OpenOffice.org 3.4.1.lnk
[2013/08/03 12:25:49 | 000,025,521 | —- | C] () – C:\Documents and Settings\User\My Documents\TrafficExchangeSecrets-PLR.zip
[2013/08/01 12:57:07 | 000,001,130 | —- | C] () – C:\Documents and Settings\User\Desktop\SpeedAnalysis.lnk
[2013/08/01 12:56:59 | 000,001,694 | —- | C] () – C:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2013/07/31 08:24:28 | 000,001,945 | —- | C] () – C:\WINDOWS\epplauncher.mif
[2013/07/25 17:48:31 | 000,015,821 | —- | C] () – C:\Documents and Settings\User\Desktop\attachment.jpg
[2013/05/21 08:50:17 | 000,003,715 | —- | C] () – C:\Program Files\Mozilla Firefoxavg-secure-search.xml
[2013/04/20 12:16:37 | 000,000,049 | —- | C] () – C:\WINDOWS\DictionaryServiceProxy.INI
[2013/03/21 23:56:16 | 000,000,008 | —- | C] () – C:\Documents and Settings\User\Local Settings\Application Data\~wmrg
[2013/02/24 14:22:40 | 000,000,205 | —- | C] () – C:\WINDOWS\hbcikrnl.ini
[2013/02/24 11:19:23 | 000,025,816 | —- | C] () – C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2013/02/24 09:33:54 | 000,013,464 | —- | C] () – C:\WINDOWS\System32\drivers\SWDUMon.sys
[2012/12/25 09:07:54 | 000,000,234 | —- | C] () – C:\WINDOWS\Brpfx04a.ini
[2012/12/25 09:07:54 | 000,000,094 | —- | C] () – C:\WINDOWS\brpcfx.ini
[2012/12/25 09:07:36 | 000,003,311 | —- | C] () – C:\WINDOWS\BRPARAM.INI
[2012/12/25 09:06:20 | 000,000,000 | —- | C] () – C:\WINDOWS\brdfxspd.dat
[2012/12/25 09:05:34 | 000,045,056 | —- | C] () – C:\WINDOWS\System32\BRTCPCON.DLL
[2012/12/25 09:05:20 | 000,000,114 | —- | C] () – C:\WINDOWS\System32\BRLMW03A.INI
[2012/11/09 11:08:54 | 000,319,312 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-S-1-5-21-1960408961-1409082233-725345543-1003-0.dat
[2012/10/11 06:18:49 | 000,000,031 | —- | C] () – C:\WINDOWS\WebUpdateSvc4.INI
[2012/10/11 06:18:03 | 000,047,631 | —- | C] () – C:\WINDOWS\System32\wuwuninst.exe
[2012/10/09 21:30:31 | 000,134,682 | —- | C] () – C:\Documents and Settings\LocalService\Local Settings\Application Data\WPFFontCache_v0400-System.dat
[2012/08/16 15:20:47 | 000,027,520 | —- | C] () – C:\Documents and Settings\User\Local Settings\Application Data\dt.dat
[2012/02/16 14:43:20 | 000,003,072 | —- | C] () – C:\WINDOWS\System32\iacenc.dll
[2011/10/27 08:16:39 | 000,000,138 | —- | C] () – C:\WINDOWS\TomsRegistration.INI
[2011/03/16 07:09:18 | 000,096,768 | —- | C] () – C:\Documents and Settings\User\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/06 07:37:33 | 000,000,127 | —- | C] () – C:\Documents and Settings\User\Local Settings\Application Data\fusioncache.dat

========== ZeroAccess Check ==========

[2010/10/12 10:09:44 | 000,000,227 | RHS- | M] () – C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll – [2010/04/17 02:09:07 | 001,509,888 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll – [2009/02/09 22:10:48 | 000,473,600 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll – [2008/04/14 10:12:08 | 000,273,920 | —- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013/06/10 22:27:31 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2011/06/27 09:27:45 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\2D1E4
[2011/04/19 10:40:23 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Anuko
[2011/10/24 08:13:25 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Avanquest
[2011/10/24 08:06:19 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Avanquest Software
[2011/10/13 09:19:07 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\avg9
[2011/10/24 08:07:05 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\BVRP Software
[2011/03/15 09:32:13 | 000,000,000 | -H-D | M] – C:\Documents and Settings\All Users\Application Data\Common Files
[2012/12/25 09:06:30 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ControlCenter4
[2013/08/06 08:26:26 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Datamngr
[2013/05/02 21:51:52 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\eForm
[2011/03/31 05:42:32 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\FileCure
[2013/08/18 23:38:58 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\HitmanPro
[2010/10/12 09:55:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Infineon
[2012/05/27 22:12:44 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\IObit
[2012/01/26 18:44:02 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MetaQuotes
[2011/02/25 07:08:50 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\MipKukSoft
[2013/03/29 08:22:42 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Nuance
[2011/02/24 06:01:09 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RegWork
[2010/10/15 16:29:56 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\RoboForm
[2013/03/29 08:21:22 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\ScanSoft
[2013/03/21 22:37:21 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\Wincert
[2011/03/31 05:54:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WinMaximizer
[2013/01/27 15:00:12 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\WinZip
[2013/03/29 08:22:32 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\zeon
[2011/12/05 14:18:24 | 000,000,000 | —D | M] – C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2013/08/19 06:50:54 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Allin1Convert_8h
[2011/03/08 08:33:54 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Anuko World Clock
[2012/06/17 09:59:33 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Applian FLV and Media Player
[2012/12/14 12:41:09 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\com.desktoplightning.airapp.E46A8636380668D0309964F39136B84A726B34C4.1
[2011/02/28 08:15:32 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\CommissionBlueprint.KeywordBlueprint2.E611A7DFA7A14643DD636F3114ECD771F85A6
1E0.1
[2013/03/29 09:07:48 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\ControlCenter4
[2012/12/20 07:48:24 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\eFORM
[2013/05/02 21:51:54 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\EmailTool
[2013/03/02 13:04:13 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\FixCleaner
[2011/04/28 15:03:35 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\GCI Demo
[2011/11/11 09:46:08 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\imeshmediabartb
[2010/10/12 09:55:42 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Infineon
[2013/02/28 11:37:32 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\IObit
[2011/02/25 07:56:53 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Kybtec Software
[2012/03/20 10:17:59 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\LaunchPad
[2011/02/27 09:44:54 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\MassTrafficStorm.62ED8686F6EEA00B48E7DA2DA570FCEBCDA2BD9A.1
[2012/04/12 09:15:40 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\MetaQuotes
[2011/02/25 07:55:00 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\MipKukSoft
[2012/12/25 09:01:12 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Nuance
[2013/08/04 13:59:10 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\OpenOffice.org
[2011/10/23 18:33:37 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\PC Ultra Speed
[2013/08/19 06:51:36 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\QuickScan
[2011/03/29 15:31:09 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\RegistryKeys
[2011/03/07 14:38:20 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Reviversoft
[2011/05/24 15:33:51 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\RoboForm
[2011/07/04 14:41:23 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\The Market Toolbox
[2012/09/27 09:36:43 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\TuneUp Software
[2013/03/09 20:14:26 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\UltimateIncomeBooster
[2012/12/14 07:07:18 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\ViralSubmitter
[2013/07/03 10:38:59 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\Zeon
[2013/08/01 14:01:35 | 000,000,000 | —D | M] – C:\Documents and Settings\User\Application Data\zulagames

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\Documents and Settings\User\Desktop\statuswinks.exe:SummaryInformation

< End of report >

OTL Extras logfile created on: 23/08/2013 4:45:29 AM - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\User\Desktop\Diognosing
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 66.66% Memory free
4.84 Gb Paging File | 3.89 Gb Available in Paging File | 80.39% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 111.78 Gb Total Space | 15.69 Gb Free Space | 14.03% Space Free | Partition Type: NTFS

Computer Name: ACER_TM6460 | User Name: User | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] – rundll32.exe ieframe.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] – C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
https [open] – "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] – rundll32.exe ieframe.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"54925:UDP" = 54925:UDP:*:Enabled:BrotherNetwork Scanner

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\Program Files\iMesh Applications\iMesh\iMesh.exe" = C:\Program Files\iMesh Applications\iMesh\iMesh.exe:*:Enabled:iMesh
"C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe" = C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe:*:Enabled:Shareaza
"C:\Documents and Settings\User\Local Settings\Application Data\Torch\Plugins\Torrent\TorchTorrent.exe" = C:\Documents and Settings\User\Local Settings\Application Data\Torch\Plugins\Torrent\TorchTorrent.exe:*:Enabled:Torch Torrent – (Torch Media Inc.)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 – (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 – (Microsoft Corporation)
"C:\WINDOWS\system32\mshta.exe" = C:\WINDOWS\system32\mshta.exe:*:Enabled:Microsoft ® HTML Application host – (Microsoft Corporation)
"C:\Program Files\Movie Maker\moviemk.exe" = C:\Program Files\Movie Maker\moviemk.exe:*:Enabled:Windows Movie Maker – (Microsoft Corporation)
"C:\Program Files\7-Zip\7zFM.exe" = C:\Program Files\7-Zip\7zFM.exe:*:Enabled:7-Zip File Manager – (Igor Pavlov)
"C:\Program Files\Bonjour\mDNSResponder.exe" = C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service – (Apple Inc.)
"C:\Documents and Settings\User\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe" = C:\Documents and Settings\User\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin – (Google)
"C:\Documents and Settings\User\Local Settings\Application Data\Torch\Plugins\Torrent\TorchTorrent.exe" = C:\Documents and Settings\User\Local Settings\Application Data\Torch\Plugins\Torrent\TorchTorrent.exe:*:Enabled:Torch Torrent – (Torch Media Inc.)
"C:\Program Files\AVG\AVG2013\avgmfapx.exe" = C:\Program Files\AVG\AVG2013\avgmfapx.exe:*:Enabled:AVG Installer – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit – (Apple Inc.)
"C:\Program Files\iTunes\iTunes.exe" = C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes – (Apple Inc.)
"C:\Program Files\Google\Google Talk\googletalk.exe" = C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk – (Google)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype – (Skype Technologies S.A.)
"C:\Program Files\AVG\AVG2013\avgnsx.exe" = C:\Program Files\AVG\AVG2013\avgnsx.exe:*:Enabled:Online Shield – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2013\avgdiagex.exe" = C:\Program Files\AVG\AVG2013\avgdiagex.exe:*:Enabled:AVG Diagnostics 2013 – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\AVG\AVG2013\avgemcx.exe" = C:\Program Files\AVG\AVG2013\avgemcx.exe:*:Enabled:Personal E-mail Scanner – (AVG Technologies CZ, s.r.o.)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook – (Microsoft Corporation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{068724F8-D8BE-4B43-8DDD-B9FE9E49FD76}" = Scansoft PDF Professional
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{1798D459-6B8B-474B-868D-1229EADA3B95}" = Adobe AIR
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java™ 6 Update 31
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 11
"{28656860-4728-433C-8AD4-D1A930437BC8}" = Nuance PDF Viewer Plus
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{2E132061-C78A-48D4-A899-1D13B9D189FA}" = Memories Disc Creator 2.0
"{34362F4A-8FA6-4903-8DE4-E91DAD995AA1}" = RF Wireless Mouse
"{34957B51-9676-41CE-9E52-44AE91B73F1C}" = HP Software Update
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3719E5A6-2083-4937-8040-63EEC6A811AA}" = O2Micro Flash Memory Card Windows Driver V2.03
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3DC873BB-FFE3-46BF-9701-26B9AE371F9F}" = RealDownloader
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{3F4EC965-28EF-45C3-B063-04B25D4E9679}" = WIDCOMM Bluetooth Software
"{446472DE-79C0-4708-B06E-0F8FAFDA6918}" = AVG 2013
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6
"{595D0DE8-C38A-4432-B851-47DECC1A99BD}" = HP Unload DLL Patch
"{59D268DF-CCA9-44C5-8F96-2E51BB34C829}" = Microsoft Security Client
"{5C3EA21C-22C0-4A44-BE58-D8CBB2F2B6B2}" = OZ711 SCR Driver
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{5FF27D65-35E5-4855-B7ED-59BCFBC85776}" = AVG 2013
"{60103DBD-B2E6-4C64-A409-36C856029364}_is1" = Article Spinner 5.0.0.0
"{61B9BC1E-F0E6-4A4F-98CB-A0D2EB2D7731}" = O2Micro Flash Memory Card Reader Driver (x86)
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6C0A559F-8583-4B5A-8B50-20BEE15D8E64}" = Nuance PaperPort 12
"{6EF2FDAB-7FBF-4AB9-92CD-594BDDB6A56B}" = PaperPort Image Printer
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{737629F4-4111-4FD4-9071-29873B7C6426}" = Protector Suite 5.4
"{766273C1-A39B-47EB-ACE8-DEBDD8094BCC}" = overland
"{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7735BD50-87C5-4838-A276-4A3621BBD306}" = AVG 2013
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8C6BB412-D3A8-4AAE-A01B-35B681789D68}" = mHelp
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROPLUS_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROPLUS_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{9181A86B-4E4F-465B-B101-C1F0E76849F7}" = ATI Catalyst Control Center
"{91FD46D2-4FB7-4A51-8637-556E1BE1DB7C}" = iTunes
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9CC89556-3578-48DD-8408-04E66EBEF401}" = mXML
"{9F1F2AEA-C72A-4DD6-991E-C5506A5625E4}" = OpenOffice.org 3.4.1
"{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}" = mDriver
"{A1B36B88-AF90-43A3-8906-6DBEE89B4FBD}" = Brother MFL-Pro Suite MFC-J430W
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.7)
"{AD27C219-D678-40B0-9EB2-60589598B1E9}" = ForexCT
"{B468AE7B-C667-4073-BED8-EAD17D5EE08C}" = TL-WN321G Wireless Utility
"{B502B428-3386-40A9-98DB-079AAB72E64F}" = mEoU
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B9362DB5-C5E3-4AF2-9E74-D77339C81570}" = CardBus Installation Package V1.002
"{BEA2FF8E-50A3-4C6D-955E-5632C881753F}" = NetComm NB6 Series ADSL2+ Router USB Driver
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C67F5282-3EB4-4FE2-A5C7-ABEE4BE42F6D}" = DriverUpdate
"{C91DCB72-F5BB-410D-A91A-314F5D1B4284}" = Broadcom NetLink Controller
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBBB226E-2289-4D29-8E5C-1331E7D71ED9}" = AVG 2013
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240D6}" = WinZip 17.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D952C4F9-2488-3723-84BE-1BFA907DCAC9}" = Google Talk Plugin
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E295AEFC-FCD2-0482-4414-CEFA72467803}" = Keyword Blueprint 2
"{E6B43401-E818-4961-AFED-118DD8E87642}" = RAF
"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1B8DB67-D30E-4FF9-A85F-3CEE51825AA2}" = SMSC IrCC V5.1.3600.9
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}" = mDrWiFi
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"4075337D0FE522688DFAA4CB60A3ADEABF85FA32" = Windows Driver Package - Intel (NETwLx32) net (08/15/2010 13.3.0.137)
"7-Zip" = 7-Zip 9.20
"AdaURL v2.0" = AdaURL v2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AI RoboForm" = RoboForm 7-9-0-0 (All Users)
"All ATI Software" = ATI - Software Uninstall Utility
"Allin1Convert_8hbar Uninstall Firefox" = Allin1Convert Firefox Toolbar
"Allin1Convert_8hbar Uninstall Internet Explorer" = Allin1Convert Internet Explorer Toolbar
"ATI Display Driver" = ATI Display Driver
"AVG" = AVG 2013
"B5FBA308143CCBB31003CA0824ABABC9F7C89D21" = Windows Driver Package - Intel (NETwNx32) net (07/14/2010 13.3.0.24)
"CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP
"CommissionBlueprint.KeywordBlueprint2.E611A7DFA7A14643DD636F3114ECD771F85A6
1E0.1" = Keyword Blueprint 2
"Deal Spy" = Deal Spy
"eFORM_is1" = eFORM Dec 2.1.0.1
"Elemental Trader_is1" = Elemental Trader 1.5
"EmailToolv3 for eFORM_is1" = EmailToolv3.2.0.017 for eFORM
"FreeDirectoryBot_is1" = FreeDirectoryBot v2.0
"GCI Demo" = GCI Demo (remove only)
"Google Chrome" = Google Chrome
"Google Chrome Frame" = Google Chrome Frame
"HitmanPro37" = HitmanPro 3.7
"ie8" = Windows Internet Explorer 8
"InstallShield_{3719E5A6-2083-4937-8040-63EEC6A811AA}" = O2Micro Flash Memory Card Windows Driver V2.03
"InstallShield_{5C3EA21C-22C0-4A44-BE58-D8CBB2F2B6B2}" = OZ711 SCR Driver
"InstallShield_{B9362DB5-C5E3-4AF2-9E74-D77339C81570}" = CardBus Installation Package V1.002
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"MetaTrader - FXTG" = MetaTrader - FXTG
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mozilla Firefox 21.0 (x86 en-US)" = Mozilla Firefox 21.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"PC Ultra Speed_is1" = PC Ultra Speed v3.0
"PipKey" = PipKey
"PIXresizer_is1" = PIXresizer 2.0.4
"PowerISO" = PowerISO
"ProInst" = Intel® PROSet/Wireless Software
"PROPLUS" = Microsoft Office Professional Plus 2007
"RealPlayer 16.0" = RealPlayer
"Shareaza 3 MediaBar" = MediaBar
"Social Lead Fox1.0.1.0" = Social Lead Fox
"Software Update Wizard (Redistributable)" = Software Update Wizard (Redistributable) 4.5
"SqueezeBuzz_is1" = SqueezeBuzz
"SupportResistance" = SupportResistance
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"The Market Toolbox" = The Market Toolbox (remove only)
"Trend Bolt" = Trend Bolt
"Ultimate Income Booster_is1" = Ultimate Income Booster version 7
"VDC_is1" =
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinPcapInst" = WinPcap 4.1.2
"WM Capture 6" = WM Capture 6
"WM Recorder14.12.3" = WM Recorder

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"GoToMeeting" = GoToMeeting 5.7.0.1172

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 22/08/2013 4:26:56 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:26:56.296]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:27:26 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:27:26.265]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:27:26 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:27:26.328]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:27:56 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:27:56.296]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:27:56 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:27:56.375]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:28:26 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:28:26.328]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 4:28:26 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 18:28:26.406]: [00002748]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

Error - 22/08/2013 6:20:57 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 20:20:57.875]: [00002748]: SendSKeySettingToDevice::
Snmp Load Error[0] To[192.168.1.101]

Error - 22/08/2013 7:35:21 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 21:35:21.281]: [00002748]: SendSKeySettingToDevice::
Snmp Load Error[0] To[192.168.1.101]

Error - 22/08/2013 8:01:16 AM | Computer Name = ACER_TM6460 | Source = Brother BrLog | ID = 1001
Description = STI BrtSTI: [2013/08/22 22:01:16.281]: [00002296]: GetDeviceIpAddress:
GetAddressByName [BRW68942356760A] Error

[ System Events ]
Error - 22/08/2013 8:01:19 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The FromDocToPDFService service failed to start due to the following
error: %%3

Error - 22/08/2013 8:01:19 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The Utility ChestService service failed to start due to the following
error: %%3

Error - 22/08/2013 8:01:19 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The vToolbarUpdater15.4.0 service failed to start due to the following
error: %%2

Error - 22/08/2013 8:01:25 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
MpFilter

Error - 22/08/2013 9:07:49 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7034
Description = The Skype C2C Service service terminated unexpectedly. It has done
this 1 time(s).

Error - 22/08/2013 9:52:23 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The Microsoft Antimalware Service service failed to start due to the
following error: %%3

Error - 22/08/2013 9:52:23 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The Allin1ConvertService service failed to start due to the following
error: %%2

Error - 22/08/2013 9:52:23 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7000
Description = The vToolbarUpdater15.4.0 service failed to start due to the following
error: %%2

Error - 22/08/2013 9:53:06 AM | Computer Name = ACER_TM6460 | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
MpFilter

Error - 22/08/2013 2:42:32 PM | Computer Name = ACER_TM6460 | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.1.100 on
the Network Card with network address 0019D2C6D852.


< End of report >