OTViewIt.txt
OTViewIt logfile created on: 2/14/2009 11:52:18 AM - Run
OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\Allison\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.38 Gb Available Physical Memory | 69.30% Memory free
3.85 Gb Paging File | 3.29 Gb Available in Paging File | 85.58% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 86.83 Gb Total Space | 4.83 Gb Free Space | 5.56% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: STETTLER
Current User Name: Allison
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Whitelist: On
File Age = 30 Days
========== Processes ==========
[2006/02/08 06:00:02 | 00,405,504 | —- | M] (ATI Technologies Inc.) – C:\WINDOWS\system32\ati2evxx.exe
[2005/12/28 11:45:02 | 00,114,753 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
[2005/12/28 11:47:10 | 00,540,745 | —- | M] (Intel Corporation ) – C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
[2005/12/28 12:04:56 | 00,262,217 | —- | M] (Intel® Corporation) – C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe
[2009/02/09 19:09:45 | 00,950,096 | —- | M] (Lavasoft) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
[2007/10/31 14:09:16 | 00,110,592 | —- | M] (Apple, Inc.) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
[2006/02/28 11:42:38 | 00,229,376 | —- | M] (Apple Computer, Inc.) – C:\Program Files\Bonjour\mDNSResponder.exe
[2006/10/09 15:16:56 | 00,237,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\ehome\ehrecvr.exe
[2005/08/05 13:56:32 | 00,102,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\ehome\ehSched.exe
[2006/02/08 06:00:02 | 00,405,504 | —- | M] (ATI Technologies Inc.) – C:\WINDOWS\system32\ati2evxx.exe
[2009/01/10 09:09:42 | 00,152,984 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Java\jre6\bin\jqs.exe
[2007/11/15 17:46:14 | 00,116,032 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\ramaint.exe
[2007/08/03 14:09:34 | 00,063,040 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\LogMeIn.exe
[2006/06/29 18:54:23 | 00,187,184 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft LifeCam\MSCamSvc.exe
[2005/12/15 10:44:52 | 00,380,928 | —- | M] (Dell Inc.) – C:\Program Files\Dell\NicConfigSvc\NicConfigSvc.exe
[2005/12/28 11:44:24 | 00,217,164 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
[2008/11/17 15:04:55 | 00,070,944 | —- | M] (PC Tools) – C:\Program Files\ThreatFire\TFService.exe
[2005/08/05 13:27:08 | 00,099,328 | —- | M] (Microsoft Corporation) – C:\WINDOWS\ehome\mcrdsvc.exe
[2005/09/29 14:01:14 | 00,067,584 | —- | M] (Microsoft Corporation) – C:\WINDOWS\ehome\ehtray.exe
[2005/11/29 04:56:30 | 00,761,947 | —- | M] (Synaptics, Inc.) – C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
[2005/12/28 11:55:40 | 00,667,718 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe
[2005/12/28 11:56:16 | 00,602,182 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Wireless\Bin\iFrmewrk.exe
[2005/11/16 21:35:16 | 00,397,312 | —- | M] (SigmaTel, Inc.) – C:\WINDOWS\stsystra.exe
[2005/08/12 14:43:58 | 00,045,056 | —- | M] (ATI Technologies Inc.) – C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
[2006/06/29 18:42:59 | 00,707,376 | —- | M] (Microsoft Corporation) – C:\WINDOWS\vVX1000.exe
[2008/11/17 15:04:59 | 00,263,456 | —- | M] (PC Tools) – C:\Program Files\ThreatFire\TFTray.exe
[2008/03/30 09:36:40 | 00,267,048 | —- | M] (Apple Inc.) – C:\Program Files\iTunes\iTunesHelper.exe
[2006/03/20 16:34:50 | 00,213,936 | —- | M] (Macrovision Corporation) – C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
[2009/01/10 09:09:42 | 00,148,888 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Java\jre6\bin\jusched.exe
[2008/12/04 08:54:10 | 01,370,000 | —- | M] (PC Tools Research Pty Ltd) – C:\Program Files\PC Tools AntiVirus\PCTAV.exe
[2009/02/09 19:09:47 | 00,509,784 | —- | M] (Lavasoft) – C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
[2007/07/13 16:48:55 | 00,068,856 | —- | M] (Google Inc.) – C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
[2008/09/02 17:52:09 | 00,133,104 | —- | M] (Google Inc.) – C:\Documents and Settings\Allison\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
[2008/07/08 17:41:02 | 02,828,184 | —- | M] (PC Tools) – C:\Program Files\Registry Mechanic\RegMech.exe
[2008/04/13 19:12:40 | 00,218,112 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\wbem\wmiprvse.exe
[2003/10/29 02:06:00 | 00,024,576 | —- | M] (BVRP Software) – C:\Program Files\Digital Line Detect\DLG.exe
[2004/08/10 05:00:00 | 00,016,896 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\wbem\unsecapp.exe
[2005/08/05 13:56:28 | 00,046,592 | —- | M] (Microsoft Corporation) – C:\WINDOWS\ehome\ehmsas.exe
[2005/12/28 11:52:32 | 00,397,381 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
[2008/03/30 09:36:30 | 00,504,104 | —- | M] (Apple Inc.) – C:\Program Files\iPod\bin\iPodService.exe
[2005/08/12 14:43:58 | 00,045,056 | —- | M] (ATI Technologies Inc.) – C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
[2008/04/13 19:12:33 | 00,033,280 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\rundll32.exe
[2006/05/16 22:15:10 | 00,071,288 | —- | M] (Adobe Systems Incorporated) – C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
[2009/02/14 11:50:32 | 00,422,912 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Allison\Desktop\OTViewIt.exe
========== (O23) Win32 Services ==========
[2006/04/13 19:52:56 | 00,072,704 | —- | M] (Adobe Systems) – C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe – (Adobe LM Service [On_Demand | Stopped])
[2007/10/31 14:09:16 | 00,110,592 | —- | M] (Apple, Inc.) – C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe – (Apple Mobile Device [Auto | Running])
[2007/10/24 00:47:22 | 00,033,800 | —- | M] (Microsoft Corporation) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe – (aspnet_state [On_Demand | Stopped])
[2006/02/08 06:00:02 | 00,405,504 | —- | M] (ATI Technologies Inc.) – C:\WINDOWS\system32\ati2evxx.exe – (Ati HotKey Poller [Auto | Running])
[2006/02/28 11:42:38 | 00,229,376 | —- | M] (Apple Computer, Inc.) – C:\Program Files\Bonjour\mDNSResponder.exe – (Bonjour Service [Auto | Running])
[2007/10/24 00:47:40 | 00,070,144 | —- | M] (Microsoft Corporation) – C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe – (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])
[2006/10/09 15:16:56 | 00,237,568 | —- | M] (Microsoft Corporation) – C:\WINDOWS\ehome\ehrecvr.exe – (ehRecvr [Auto | Running])
[2005/08/05 13:56:32 | 00,102,912 | —- | M] (Microsoft Corporation) – C:\WINDOWS\ehome\ehSched.exe – (ehSched [Auto | Running])
[2005/12/28 11:45:02 | 00,114,753 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Wireless\Bin\EvtEng.exe – (EvtEng [Auto | Running])
[2007/09/07 12:27:16 | 00,654,848 | —- | M] (Macrovision Europe Ltd.) – C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe – (FLEXnet Licensing Service [On_Demand | Stopped])
[2007/02/02 07:56:15 | 00,138,168 | —- | M] (Google) – C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe – (gusvc [On_Demand | Stopped])
[2005/04/03 23:41:10 | 00,069,632 | —- | M] (Macrovision Corporation) – C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe – (IDriverT [On_Demand | Stopped])
[2008/03/30 09:36:30 | 00,504,104 | —- | M] (Apple Inc.) – C:\Program Files\iPod\bin\iPodService.exe – (iPod Service [On_Demand | Running])
[2009/01/10 09:09:42 | 00,152,984 | —- | M] (Sun Microsystems, Inc.) – C:\Program Files\Java\jre6\bin\jqs.exe – (JavaQuickStarterService [Auto | Running])
[2009/02/09 19:09:45 | 00,950,096 | —- | M] (Lavasoft) – C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe – (Lavasoft Ad-Aware Service [Auto | Running])
[2007/11/15 17:46:14 | 00,116,032 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\ramaint.exe – (LMIMaint [Auto | Running])
[2007/08/03 14:09:34 | 00,063,040 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\LogMeIn.exe – (LogMeIn [Auto | Running])
[2007/04/13 14:53:13 | 00,068,096 | —- | M] () – C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe – (Macromedia Licensing Service [On_Demand | Stopped])
[2005/08/05 13:27:08 | 00,099,328 | —- | M] (Microsoft Corporation) – C:\WINDOWS\ehome\mcrdsvc.exe – (McrdSvc [Auto | Running])
[2006/06/29 18:54:23 | 00,187,184 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft LifeCam\MSCamSvc.exe – (MSCamSvc [Auto | Running])
[2008/04/17 18:13:44 | 05,750,784 | —- | M] () – C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe – (MySQL [On_Demand | Stopped])
[2005/12/15 10:44:52 | 00,380,928 | —- | M] (Dell Inc.) – C:\Program Files\Dell\NicConfigSvc\NicConfigSvc.exe – (NICCONFIGSVC [Auto | Running])
[2003/07/28 12:28:22 | 00,089,136 | —- | M] (Microsoft Corporation) – C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE – (ose [On_Demand | Stopped])
[2008/12/03 15:27:50 | 00,999,640 | —- | M] (PC Tools Research Pty Ltd) – C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe – (PCTAVSvc [Auto | Stopped])
[2005/12/28 11:44:24 | 00,217,164 | —- | M] (Intel Corporation) – C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe – (RegSrvc [Auto | Running])
[2005/12/28 11:47:10 | 00,540,745 | —- | M] (Intel Corporation ) – C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe – (S24EventMonitor [Auto | Running])
[2008/06/13 16:29:14 | 00,356,920 | —- | M] (PC Tools) – C:\Program Files\Spyware Doctor\pctsAuxs.exe – (sdAuxService [On_Demand | Stopped])
[2008/10/09 13:47:42 | 01,079,176 | —- | M] (PC Tools) – C:\Program Files\Spyware Doctor\pctsSvc.exe – (sdCoreService [On_Demand | Stopped])
[2008/11/17 15:04:55 | 00,070,944 | —- | M] (PC Tools) – C:\Program Files\ThreatFire\TFService.exe – (ThreatFire [Auto | Running])
[2008/01/28 17:39:38 | 00,057,344 | —- | M] (Apache Software Foundation) – C:\Program Files\Apache Software Foundation\Tomcat 6.0\bin\tomcat6.exe – (Tomcat6 [On_Demand | Stopped])
[2007/01/19 11:54:14 | 00,097,136 | —- | M] (Microsoft Corporation) – C:\Program Files\MSN Messenger\usnsvc.exe – (usnjsvc [On_Demand | Stopped])
[2005/12/28 12:04:56 | 00,262,217 | —- | M] (Intel® Corporation) – C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe – (WLANKEEPER [Auto | Running])
[2006/10/18 19:05:24 | 00,913,408 | —- | M] (Microsoft Corporation) – C:\Program Files\Windows Media Player\wmpnetwk.exe – (WMPNetworkSvc [On_Demand | Stopped])
========== Driver Services ==========
[2006/04/03 23:32:41 | 00,021,275 | —- | M] (Meetinghouse Data Communications) – C:\WINDOWS\system32\drivers\AegisP.sys – (AegisP [Auto | Running])
[2001/08/17 13:51:56 | 00,005,248 | —- | M] (Acer Laboratories Inc.) – C:\WINDOWS\system32\drivers\aliide.sys – (AliIde [Disabled | Stopped])
[2008/04/13 13:36:39 | 00,043,008 | —- | M] (Advanced Micro Devices, Inc.) – C:\WINDOWS\system32\drivers\amdagp.sys – (amdagp [Disabled | Stopped])
[2005/08/12 16:50:46 | 00,016,128 | —- | M] (Dell Inc) – C:\WINDOWS\system32\drivers\APPDRV.SYS – (APPDRV [System | Running])
[2001/08/17 13:52:00 | 00,026,496 | —- | M] (Advanced System Products, Inc.) – C:\WINDOWS\system32\drivers\asc.sys – (asc [Disabled | Stopped])
[2001/08/17 13:51:58 | 00,014,848 | —- | M] (Advanced System Products, Inc.) – C:\WINDOWS\system32\drivers\asc3550.sys – (asc3550 [Disabled | Stopped])
[2002/07/17 07:53:02 | 00,016,877 | —- | M] (Adaptec) – C:\WINDOWS\System32\drivers\ASPI32.SYS – (Aspi32 [Auto | Running])
[2006/02/08 06:05:58 | 01,421,312 | —- | M] (ATI Technologies Inc.) – C:\WINDOWS\system32\drivers\ati2mtag.sys – (ati2mtag [On_Demand | Running])
[2008/02/12 11:44:10 | 00,021,904 | —- | M] (PC Tools Research Pty Ltd) – C:\WINDOWS\system32\drivers\AVFilter.sys – (AVFilter [Auto | Running])
[2007/12/06 16:51:44 | 00,028,568 | —- | M] (PC Tools Research Pty Ltd.) – C:\WINDOWS\system32\drivers\AVHook.sys – (AVHook [On_Demand | Running])
[2007/12/06 16:51:44 | 00,021,912 | —- | M] (PC Tools Research Pty Ltd ) – C:\WINDOWS\system32\drivers\AVRec.sys – (AVRec [On_Demand | Running])
[2005/08/05 16:32:16 | 00,045,312 | —- | M] (Broadcom Corporation) – C:\WINDOWS\system32\drivers\bcm4sbxp.sys – (bcm4sbxp [On_Demand | Running])
[2001/08/17 13:51:54 | 00,006,656 | —- | M] (CMD Technology, Inc.) – C:\WINDOWS\system32\drivers\cmdide.sys – (CmdIde [Disabled | Stopped])
[2001/08/17 13:52:16 | 00,179,584 | —- | M] (Mylex Corporation) – C:\WINDOWS\system32\drivers\dac2w2k.sys – (dac2w2k [Disabled | Stopped])
[2001/08/17 12:12:10 | 00,117,760 | —- | M] (Intel Corporation) – C:\WINDOWS\system32\drivers\e100b325.sys – (E100B [On_Demand | Stopped])
[2008/01/29 11:01:28 | 00,016,168 | —- | M] (GEAR Software Inc.) – C:\WINDOWS\system32\drivers\GEARAspiWDM.sys – (GEARAspiWDM [On_Demand | Running])
[2008/04/13 11:36:05 | 00,144,384 | —- | M] (Windows ® Server 2003 DDK provider) – C:\WINDOWS\system32\drivers\hdaudbus.sys – (HDAudBus [On_Demand | Running])
[2005/12/01 07:40:56 | 00,936,960 | —- | M] (Conexant Systems, Inc.) – C:\WINDOWS\system32\drivers\HSX_DPV.sys – (HSF_DPV [On_Demand | Running])
[2005/12/01 07:40:12 | 00,192,512 | —- | M] (Conexant Systems, Inc.) – C:\WINDOWS\system32\drivers\HSXHWAZL.sys – (HSXHWAZL [On_Demand | Running])
[2008/08/25 12:36:28 | 00,040,840 | —- | M] (PCTools Research Pty Ltd.) – C:\WINDOWS\system32\drivers\ikfilesec.sys – (IKFileSec [On_Demand | Stopped])
[2008/08/25 12:36:28 | 00,066,952 | —- | M] (PCTools Research Pty Ltd.) – C:\WINDOWS\system32\drivers\iksysflt.sys – (IKSysFlt [On_Demand | Stopped])
[2008/08/25 12:36:30 | 00,081,288 | —- | M] (PCTools Research Pty Ltd.) – C:\WINDOWS\system32\drivers\iksyssec.sys – (IKSysSec [On_Demand | Stopped])
[2009/02/09 19:10:09 | 00,064,160 | —- | M] (Lavasoft AB) – C:\WINDOWS\system32\drivers\Lbd.sys – (Lbd [Boot | Running])
[2007/08/03 14:09:34 | 00,012,992 | —- | M] (LogMeIn, Inc.) – C:\Program Files\LogMeIn\x86\rainfo.sys – (LMIInfo [Auto | Running])
[2007/08/03 14:04:52 | 00,010,144 | —- | M] (LogMeIn, Inc.) – C:\WINDOWS\system32\drivers\lmimirr.sys – (lmimirr [On_Demand | Running])
[2007/11/15 17:46:40 | 00,083,288 | —- | M] (LogMeIn, Inc.) – C:\WINDOWS\System32\LMIRfsClientNP.dll – (LMIRfsClientNP [Disabled | Stopped])
[2007/08/03 14:09:34 | 00,046,112 | —- | M] (LogMeIn, Inc.) – C:\WINDOWS\system32\drivers\LMIRfsDriver.sys – (LMIRfsDriver [Auto | Running])
[2005/10/05 04:57:08 | 00,012,544 | —- | M] (Conexant) – C:\WINDOWS\system32\drivers\mdmxsdk.sys – (mdmxsdk [Auto | Running])
[2001/08/17 13:52:12 | 00,017,280 | —- | M] (American Megatrends Inc.) – C:\WINDOWS\system32\drivers\mraid35x.sys – (mraid35x [Disabled | Stopped])
[2004/08/03 22:29:56 | 01,897,408 | —- | M] (NVIDIA Corporation) – C:\WINDOWS\system32\drivers\nv4_mini.sys – (nv [On_Demand | Stopped])
[2004/02/13 16:46:00 | 00,017,153 | —- | M] (Dell Inc) – C:\WINDOWS\system32\drivers\omci.sys – (omci [System | Running])
[2009/02/08 18:36:15 | 00,160,792 | —- | M] (PC Tools) – C:\WINDOWS\system32\drivers\pctfw2.sys – (pctfw2 [System | Running])
[2004/08/10 05:00:00 | 00,017,792 | —- | M] (Parallel Technologies, Inc.) – C:\WINDOWS\system32\drivers\ptilink.sys – (Ptilink [On_Demand | Running])
[2007/03/07 18:51:00 | 00,043,528 | —- | M] (Sonic Solutions) – C:\WINDOWS\system32\drivers\pxhelp20.sys – (PxHelp20 [Boot | Running])
[2001/08/17 13:52:20 | 00,040,320 | —- | M] (QLogic Corporation) – C:\WINDOWS\system32\drivers\ql1080.sys – (ql1080 [Disabled | Stopped])
[2001/08/17 13:52:20 | 00,045,312 | —- | M] (QLogic Corporation) – C:\WINDOWS\system32\drivers\ql12160.sys – (ql12160 [Disabled | Stopped])
[2001/08/17 13:52:18 | 00,049,024 | —- | M] (QLogic Corporation) – C:\WINDOWS\system32\drivers\ql1280.sys – (ql1280 [Disabled | Stopped])
[2005/07/14 23:58:14 | 00,028,544 | —- | M] (REDC) – C:\WINDOWS\system32\drivers\rimmptsk.sys – (rimmptsk [On_Demand | Running])
[2005/07/13 00:00:30 | 00,051,328 | —- | M] (REDC) – C:\WINDOWS\system32\drivers\rimsptsk.sys – (rimsptsk [On_Demand | Running])
[2005/07/14 22:28:38 | 00,307,968 | —- | M] (REDC) – C:\WINDOWS\system32\drivers\rixdptsk.sys – (rismxdp [On_Demand | Running])
[2005/12/28 13:22:08 | 00,013,568 | —- | M] (Intel Corporation) – C:\WINDOWS\system32\drivers\s24trans.sys – (s24trans [Auto | Running])
[2008/04/13 13:36:44 | 00,079,232 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\drivers\sdbus.sys – (sdbus [On_Demand | Running])
[2007/11/13 05:25:53 | 00,020,480 | —- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) – C:\WINDOWS\system32\drivers\secdrv.sys – (Secdrv [Auto | Running])
[2008/04/13 13:36:39 | 00,040,960 | —- | M] (Silicon Integrated Systems Corporation) – C:\WINDOWS\system32\drivers\sisagp.sys – (sisagp [Disabled | Stopped])
[2001/08/17 12:56:16 | 00,007,552 | —- | M] (Sony Corporation) – C:\WINDOWS\system32\drivers\SONYPVU1.SYS – (SONYPVU1 [On_Demand | Stopped])
[2001/08/17 14:07:44 | 00,019,072 | —- | M] (Adaptec, Inc.) – C:\WINDOWS\system32\drivers\sparrow.sys – (Sparrow [Disabled | Stopped])
[2005/04/25 11:10:20 | 00,033,538 | —- | M] (Service & Quality Technology.) – C:\WINDOWS\system32\drivers\Capt905c.sys – (SQTECH905C [On_Demand | Stopped])
[2005/11/16 21:36:00 | 01,047,816 | —- | M] (SigmaTel, Inc.) – C:\WINDOWS\system32\drivers\sthda.sys – (STHDA [On_Demand | Running])
[2001/08/17 14:07:34 | 00,016,256 | —- | M] (Symbios Logic Inc.) – C:\WINDOWS\system32\drivers\symc810.sys – (symc810 [Disabled | Stopped])
[2001/08/17 14:07:36 | 00,032,640 | —- | M] (LSI Logic) – C:\WINDOWS\system32\drivers\symc8xx.sys – (symc8xx [Disabled | Stopped])
[2001/08/17 14:07:40 | 00,028,384 | —- | M] (LSI Logic) – C:\WINDOWS\system32\drivers\sym_hi.sys – (sym_hi [Disabled | Stopped])
[2001/08/17 14:07:42 | 00,030,688 | —- | M] (LSI Logic) – C:\WINDOWS\system32\drivers\sym_u3.sys – (sym_u3 [Disabled | Stopped])
[2005/11/29 04:36:56 | 00,191,936 | —- | M] (Synaptics, Inc.) – C:\WINDOWS\system32\drivers\SynTP.sys – (SynTP [On_Demand | Running])
[2008/10/15 15:19:52 | 00,043,552 | —- | M] (RapidSolution Software AG) – C:\WINDOWS\system32\drivers\tbhsd.sys – (tbhsd [On_Demand | Stopped])
[2008/11/17 15:05:08 | 00,051,488 | —- | M] (PC Tools) – C:\WINDOWS\system32\drivers\TfFsMon.sys – (TfFsMon [Boot | Running])
[2008/11/17 15:05:12 | 00,033,056 | —- | M] (PC Tools) – C:\WINDOWS\system32\drivers\TfNetMon.sys – (TfNetMon [On_Demand | Running])
[2008/11/17 15:05:14 | 00,039,200 | —- | M] (PC Tools) – C:\WINDOWS\system32\drivers\TfSysMon.sys – (TfSysMon [Boot | Running])
[2001/08/17 13:52:22 | 00,036,736 | —- | M] (Promise Technology, Inc.) – C:\WINDOWS\system32\drivers\ultra.sys – (ultra [Disabled | Stopped])
[2007/10/31 14:09:14 | 00,030,464 | —- | M] (Apple, Inc.) – C:\WINDOWS\system32\drivers\usbaapl.sys – (USBAAPL [On_Demand | Stopped])
[2008/04/13 13:45:12 | 00,060,032 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\drivers\usbaudio.sys – (usbaudio [On_Demand | Stopped])
[2001/12/19 10:45:00 | 00,008,576 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\drivers\VCdRom.sys – (vcdrom [System | Running])
[2006/06/29 18:42:59 | 01,965,872 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\drivers\VX1000.sys – (VX1000 [On_Demand | Stopped])
[2005/12/04 16:55:30 | 01,428,096 | —- | M] (Intel® Corporation) – C:\WINDOWS\system32\drivers\w39n51.sys – (w39n51 [On_Demand | Running])
[2005/12/01 07:40:08 | 00,669,696 | —- | M] (Conexant Systems, Inc.) – C:\WINDOWS\system32\drivers\HSX_CNXT.sys – (winachsf [On_Demand | Running])
[2004/08/10 05:00:00 | 00,012,032 | —- | M] (Microsoft Corporation) – C:\WINDOWS\system32\drivers\ws2ifsl.sys – (WS2IFSL [System | Running])
========== (R ) Internet Explorer ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://go.microsoft.com/fwlink/?LinkId=69157
"Default_Search_URL"=http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
"Default_Secondary_Page_URL"=
"Extensions Off Page"=about:NoAdd-ons
"Local Page"=%SystemRoot%\system32\blank.htm
"Search Page"=http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
"Security Risk Page"=about:SecurityRisk
"Start Page"=http://go.microsoft.com/fwlink/?LinkId=69157
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search]
"CustomizeSearch"=http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
"CustomSearch"=http://us.rd.yahoo.com/customize/ie/defaults/cs/msgr8/*http://www.yahoo.com/ext/search/search.html
"Default_Page_URL"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
"Default_Search_URL"=http://www.google.com/ie
"SearchAssistant"=http://www.google.com/ie
"Start Page"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
"Local Page"=C:\WINDOWS\system32\blank.htm
"Page_Transitions"=
"Search Page"=http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
"SearchMigratedDefaultName"=Google
"SearchMigratedDefaultURL"=http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
"Start Page"=http://my.yahoo.com/
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant"=http://www.google.com/ie
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchURL]
""=http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) – C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (HKLM) – C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
"ProxyOverride" = *.local
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
"Start Page"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
"Start Page"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main]
[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main]
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
"Local Page"=C:\WINDOWS\system32\blank.htm
"Page_Transitions"=
"Search Page"=http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
"SearchMigratedDefaultName"=Google
"SearchMigratedDefaultURL"=http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
"Start Page"=http://my.yahoo.com/
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\SOFTWARE\Microsoft\Internet Explorer\Search]
"SearchAssistant"=http://www.google.com/ie
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\SearchURL]
""=http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) – C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (HKLM) – C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
"ProxyOverride" = *.local
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
"First Home Page"=http://www.dell.com
"Local Page"=C:\WINDOWS\system32\blank.htm
"Search Page"=http://www.google.com/hws/sb/dell-inc/en/side.html?channel=us
"Start Page"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\Software\Microsoft\Internet Explorer\SearchURL]
"provider"=
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) – C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\SOFTWARE\Microsoft\Internet Explorer\Main]
"Default_Page_URL"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
"First Home Page"=http://www.dell.com
"Local Page"=C:\WINDOWS\system32\blank.htm
"Search Page"=http://www.google.com/hws/sb/dell-inc/en/side.html?channel=us
"Start Page"=http://www.google.com/ig/dell?hl=en&client=dell-inc&channel=us
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\Software\Microsoft\Internet Explorer\SearchURL]
"provider"=
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}" (HKLM) – C:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = 0
========== (O1) Hosts File ==========
HOSTS File = (734 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts
First 25 entries…
127.0.0.1 localhost
========== (O2) BHO's ==========
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\]
{02478D38-C3F9-4EFB-9B51-7695ECA05670} (HKLM) – C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (HKLM) – C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll File not found
{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} (HKLM) – C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} (HKLM) – C:\Program Files\Yahoo!\Common\yiesrvc.dll (Yahoo! Inc.)
{7E853D72-626A-48EC-A868-BA8D5E23E045} (HKLM) – Reg Error: Key does not exist or could not be opened. File not found
{9566395F-43D2-4c64-B525-B501FFA276E2} (HKLM) – C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
{AA58ED58-01DD-4d91-8333-CF10577473F7} (HKLM) – c:\Program Files\Google\GoogleToolbar4.dll (Google Inc.)
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (HKLM) – C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll (Google Inc.)
{CA6319C0-31B7-401E-A518-A07C3DB8F777} (HKLM) – c:\Program Files\BAE\BAE.dll (Dell Inc.)
{DBC80044-A445-435b-BC74-9C25C1C588A9} (HKLM) – C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} (HKLM) – C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
{FDD3B846-8D59-4ffb-8758-209B6AD74ACC} (HKLM) – Reg Error: Key does not exist or could not be opened. File not found
========== (O3) Toolbars ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" (HKLM) – c:\Program Files\Google\GoogleToolbar4.dll (Google Inc.)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
"{35065594-9169-4A34-B167-FC4865038E53}" (HKLM) – Reg Error: Key does not exist or could not be opened. File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
"{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}" (HKLM) – C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (HKLM) – C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) – c:\Program Files\Google\GoogleToolbar4.dll (Google Inc.)
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) – c:\Program Files\Google\GoogleToolbar4.dll (Google Inc.)
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{35065594-9169-4A34-B167-FC4865038E53}" (HKLM) – Reg Error: Key does not exist or could not be opened. File not found
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}" (HKLM) – C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (HKLM) – C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) – c:\Program Files\Google\GoogleToolbar4.dll (Google Inc.)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) – c:\Program Files\Google\GoogleToolbar4.dll (Google Inc.)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{35065594-9169-4A34-B167-FC4865038E53}" (HKLM) – Reg Error: Key does not exist or could not be opened. File not found
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}" (HKLM) – C:\Program Files\Winamp Toolbar\winamptb.dll (AOL LLC)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" (HKLM) – C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) – c:\Program Files\Google\GoogleToolbar4.dll (Google Inc.)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}" (HKLM) – c:\Program Files\Google\GoogleToolbar4.dll (Google Inc.)
========== (O4) Run Keys ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Ad-Watch"=C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay (ATI Technologies Inc.)
"ehTray"=C:\WINDOWS\ehome\ehtray.exe (Microsoft Corporation)
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless (Intel Corporation)
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" (Intel Corporation)
"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler (Macrovision Corporation)
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" (Apple Inc.)
"PCTAVApp"="C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCAN (PC Tools Research Pty Ltd)
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime (Apple Inc.)
"SigmatelSysTrayApp"=stsystra.exe (SigmaTel, Inc.)
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" (Sun Microsystems, Inc.)
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
"ThreatFire"=C:\Program Files\ThreatFire\TFTray.exe (PC Tools)
"VX1000"=C:\WINDOWS\vVX1000.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="C:\Documents and Settings\Allison\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c (Google Inc.)
"RegistryMechanic"=C:\Program Files\Registry Mechanic\RegMech.exe /H (PC Tools)
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
"Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet (Yahoo! Inc.)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="C:\Documents and Settings\Allison\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c (Google Inc.)
"RegistryMechanic"=C:\Program Files\Registry Mechanic\RegMech.exe /H (PC Tools)
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
"Yahoo! Pager"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet (Yahoo! Inc.)
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ModemOnHold"=C:\Program Files\NetWaiting\netWaiting.exe ()
"OE_OEM"="C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe" File not found
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ModemOnHold"=C:\Program Files\NetWaiting\netWaiting.exe ()
"OE_OEM"="C:\Program Files\Trend Micro\Internet Security 12\TMAS_OE\TMAS_OEMon.exe" File not found
========== (O4) RunOnce Keys ==========
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NeroHomeFirstStart"=C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe File not found
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"NeroHomeFirstStart"=C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe File not found
========== (O4) Startup Folders ==========
[2008/04/23 02:38:16 | 00,029,696 | —- | M] (Adobe Systems Incorporated) – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
[2003/10/29 02:06:00 | 00,024,576 | —- | M] (BVRP Software) – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
[2003/08/06 13:23:32 | 00,051,776 | —- | M] (Microsoft Corporation) – C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
[2005/03/16 18:16:50 | 00,113,664 | —- | M] (Adobe Systems, Inc.) – C:\Documents and Settings\Allison\Start Menu\Programs\Startup\Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
========== (O6 & O7) Current Version Policies ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.mss – File not found
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.the – File not found
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"NoDriveTypeAutoRun"=145
========== (O8) IE Context Menu Extensions ==========
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\]
&Winamp Toolbar Search: C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html [2006/09/07 15:59:50 | 00,000,747 | —- | M] ()
&Yahoo! Search: File not found
Download All Files by HiDownload: C:\Program Files\StreamingStar\HiDownload\HDGetAll.htm File not found
Download by HiDownload: C:\Program Files\StreamingStar\HiDownload\HDGet.htm File not found
E&xport to Microsoft Excel: C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE [2003/08/13 02:34:38 | 10,073,144 | —- | M] (Microsoft Corporation)
Yahoo! &Dictionary: File not found
Yahoo! &Maps: File not found
Yahoo! &SMS: File not found
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\Software\Microsoft\Internet Explorer\MenuExt\]
&Winamp Toolbar Search: C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html [2006/09/07 15:59:50 | 00,000,747 | —- | M] ()
&Yahoo! Search: File not found
Download All Files by HiDownload: C:\Program Files\StreamingStar\HiDownload\HDGetAll.htm File not found
Download by HiDownload: C:\Program Files\StreamingStar\HiDownload\HDGet.htm File not found
E&xport to Microsoft Excel: C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE [2003/08/13 02:34:38 | 10,073,144 | —- | M] (Microsoft Corporation)
Yahoo! &Dictionary: File not found
Yahoo! &Maps: File not found
Yahoo! &SMS: File not found
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1006\Software\Microsoft\Internet Explorer\MenuExt\]
&Google Search: C:\Program Files\Google\GoogleToolbar1.dll File not found
&Translate English Word: C:\Program Files\Google\GoogleToolbar1.dll File not found
Backward Links: C:\Program Files\Google\GoogleToolbar1.dll File not found
Cached Snapshot of Page: C:\Program Files\Google\GoogleToolbar1.dll File not found
Similar Pages: C:\Program Files\Google\GoogleToolbar1.dll File not found
Translate Page into English: C:\Program Files\Google\GoogleToolbar1.dll File not found
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-500\Software\Microsoft\Internet Explorer\MenuExt\]
&Google Search: C:\Program Files\Google\GoogleToolbar1.dll File not found
&Translate English Word: C:\Program Files\Google\GoogleToolbar1.dll File not found
Backward Links: C:\Program Files\Google\GoogleToolbar1.dll File not found
Cached Snapshot of Page: C:\Program Files\Google\GoogleToolbar1.dll File not found
Similar Pages: C:\Program Files\Google\GoogleToolbar1.dll File not found
Translate Page into English: C:\Program Files\Google\GoogleToolbar1.dll File not found
========== (O9) IE Extensions ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
{5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897}: Button: Yahoo! Services – %ProgramFiles%\Yahoo!\Common\yiesrvc.dll [2007/12/12 17:09:42 | 00,222,448 | —- | M] (Yahoo! Inc.)
{92780B25-18CC-41C8-B9BE-3C9C571A8263}: Button: Research – %ProgramFiles%\Microsoft Office\OFFICE11\REFIEBAR.DLL [2003/07/14 22:57:08 | 00,040,512 | —- | M] (Microsoft Corporation)
{e2e2dd38-d088-4134-82b7-f2ba38496583}: Menu: @xpsp3res.dll,-20001 – %SystemRoot%\network diagnostic\xpnetdiag.exe [2008/04/13 13:53:32 | 00,558,080 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}: Button: Messenger – %ProgramFiles%\Messenger\msmsgs.exe [2008/04/13 19:12:28 | 01,695,232 | —- | M] (Microsoft Corporation)
{FB5F1910-F110-11d2-BB9E-00C04F795683}: Menu: Windows Messenger – %ProgramFiles%\Messenger\msmsgs.exe [2008/04/13 19:12:28 | 01,695,232 | —- | M] (Microsoft Corporation)
[HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> [Reg Error: Value does not exist or could not be read.] -> File not found
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/13 19:12:28 | 01,695,232 | —- | M] (Microsoft Corporation)
[HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Extensions\]
CmdMapping\\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} [HKLM] -> [Reg Error: Value does not exist or could not be read.] -> File not found
CmdMapping\\{FB5F1910-F110-11d2-BB9E-00C04F795683} [HKLM] -> %ProgramFiles%\Messenger\msmsgs.exe [Messenger] -> [2008/04/13 19:12:28 | 01,695,232 | —- | M] (Microsoft Corporation)
========== (O12) Internet Explorer Plugins ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Plugins\]
PluginsPage: "" = http://activex.microsoft.com/controls/find…=%s&mime=%s
PluginsPageFriendlyName: "" = Microsoft ActiveX Gallery
========== (O13) Default Prefixes ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
""=http://
========== (O15) Trusted Sites ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
1 domain(s) and sub-domain(s) not assigned to a zone.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
26 domain(s) and sub-domain(s) not assigned to a zone.
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\]
26 domain(s) and sub-domain(s) not assigned to a zone.
========== (O16) DPF ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\]
{30528230-99f7-4bb4-88d8-fa1d4f56a2ab}: C:\Program Files\Yahoo!\Common\Yinsthelper.dll – Installation Support
{8AD9C840-044E-11D1-B3E9-00805F499D93}: http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab – Java Plug-in 1.6.0_12
{C02226EB-A5D7-4B1F-BD7E-635E46C2288D}:
http://a.download.toontown.com/sv1.0.37.10/ttinst.cab – Toontown Installer ActiveX Control
{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}: http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab – Reg Error: Key does not exist or could not be opened.
{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}: http://java.sun.com/update/1.5.0/jinstall-…indows-i586.cab – Reg Error: Key does not exist or could not be opened.
{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}: http://java.sun.com/products/plugin/autodl…indows-i586.cab – Reg Error: Key does not exist or could not be opened.
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab – Reg Error: Key does not exist or could not be opened.
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab – Java Plug-in 1.6.0_07
{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab – Java Plug-in 1.6.0_12
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}: http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab – Java Plug-in 1.6.0_12
{D27CDB6E-AE6D-11CF-96B8-444553540000}: http://fpdownload.macromedia.com/get/flash…ent/swflash.cab – Shockwave Flash Object
========== (O17) DNS Name Servers ==========
{AF8969A9-C1D7-4E07-BE90-693D2C6EA3BD} (Servers: | Description: )
{AFB6C120-402F-4ECA-9585-FF9E3960DC2B} (Servers: | Description: 1394 Net Adapter)
{C6135D1D-39E1-4318-8B38-7F37B30D63DC} (Servers: | Description: Intel® PRO/Wireless 3945ABG Network Connection)
{D27D5A31-05CB-4CE7-96AA-7046BB6D2F58} (Servers: | Description: Broadcom 440x 10/100 Integrated Controller)
========== (O20) Winlogon Notify Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\]
AtiExtEvent: "DllName" = Ati2evxx.dll – C:\WINDOWS\system32\ati2evxx.dll (ATI Technologies Inc.)
LMIinit: "DllName" = LMIinit.dll – C:\WINDOWS\system32\LMIinit.dll (LogMeIn, Inc.)
========== Safeboot Options ==========
"AlternateShell"=cmd.exe
========== CDRom AutoRun Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom]
"AutoRun" = 1
========== Autorun Files on Drives ==========
AUTOEXEC.BAT []
[2005/08/16 04:43:04 | 00,000,000 | —- | M] () – C:\AUTOEXEC.BAT – [ NTFS ]
========== MountPoints2 ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10334d98-43b0-11dc-a18a-001422f0d0ce}\Shell]
""=AutoRun
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10334d98-43b0-11dc-a18a-001422f0d0ce}\Shell\Auto\command]
""=E:\MicrosoftPowerPoint.exe – File not found
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10334d98-43b0-11dc-a18a-001422f0d0ce}\Shell\AutoRun]
""=Auto&Play
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10334d98-43b0-11dc-a18a-001422f0d0ce}\Shell\AutoRun\command]
""=C:\WINDOWS\system32\shell32.dll – [2008/04/13 19:12:05 | 08,461,312 | —- | M] (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell]
""=AutoRun
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun]
""=Auto&Play
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{361ac05d-0e0d-11da-9aa9-806d6172696f}\Shell\AutoRun\command]
""=E:\setup.exe – File not found
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4bced3d8-7c21-11dd-a24a-001422f0d0ce}\Shell]
""=AutoRun
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4bced3d8-7c21-11dd-a24a-001422f0d0ce}\Shell\AutoRun]
""=Auto&Play
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4bced3d8-7c21-11dd-a24a-001422f0d0ce}\Shell\AutoRun\command]
""=E:\LaunchU3.exe – File not found
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c8f225a6-fe4c-11db-a162-001422f0d0ce}\Shell]
""=AutoRun
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c8f225a6-fe4c-11db-a162-001422f0d0ce}\Shell\AutoRun]
""=Auto&Play
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c8f225a6-fe4c-11db-a162-001422f0d0ce}\Shell\AutoRun\command]
""=C:\WINDOWS\system32\shell32.dll – [2008/04/13 19:12:05 | 08,461,312 | —- | M] (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d883a44a-78b8-11dc-a19e-001422f0d0ce}\Shell]
""=AutoRun
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d883a44a-78b8-11dc-a19e-001422f0d0ce}\Shell\Auto\command]
""=E:\sxs.exe – File not found
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d883a44a-78b8-11dc-a19e-001422f0d0ce}\Shell\AutoRun]
""=Auto&Play
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d883a44a-78b8-11dc-a19e-001422f0d0ce}\Shell\AutoRun\command]
""=C:\WINDOWS\system32\shell32.dll – [2008/04/13 19:12:05 | 08,461,312 | —- | M] (Microsoft Corporation)
========== Files/Folders - Created Within 30 Days ==========
[2009/02/14 11:50:30 | 00,422,912 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Allison\Desktop\OTViewIt.exe
[2009/02/11 17:09:21 | 00,163,840 | —- | C] () – C:\Documents and Settings\Allison\Desktop\InstallAVg_880062.exe
[2009/02/10 17:56:54 | 00,348,160 | —- | C] (OldTimer Tools) – C:\Documents and Settings\Allison\Desktop\OTMoveIt3.exe
[2009/02/10 08:17:16 | 21,458,45248 | -HS- | C] () – C:\hiberfil.sys
[2009/02/09 19:46:07 | 00,015,688 | —- | C] () – C:\WINDOWS\System32\lsdelete.exe
[2009/02/09 19:13:18 | 00,064,160 | —- | C] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/02/09 19:13:14 | 00,000,472 | —- | C] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/02/09 19:08:15 | 00,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
[2009/02/09 19:08:13 | 00,000,867 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2009/02/09 19:07:59 | 00,000,000 | —D | C] – C:\Program Files\Lavasoft
[2009/02/09 19:07:59 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Lavasoft
[2009/02/09 19:03:56 | 00,000,690 | —- | C] () – C:\Documents and Settings\Allison\Desktop\SpywareBlaster.lnk
[2009/02/09 19:03:45 | 00,000,000 | —D | C] – C:\Program Files\SpywareBlaster
[2009/02/09 19:01:57 | 00,000,000 | —D | C] – C:\Documents and Settings\Allison\Application Data\Malwarebytes
[2009/02/09 19:01:47 | 00,015,504 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbam.sys
[2009/02/09 19:01:47 | 00,000,696 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/02/09 19:01:44 | 00,038,496 | —- | C] (Malwarebytes Corporation) – C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/02/09 19:01:34 | 00,000,000 | —D | C] – C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/02/09 19:01:33 | 00,000,000 | —D | C] – C:\Program Files\Malwarebytes' Anti-Malware
[2009/02/09 18:56:21 | 00,001,734 | —- | C] () – C:\Documents and Settings\Allison\Desktop\HijackThis.lnk
[2009/02/08 19:25:40 | 00,160,792 | —- | C] (PC Tools) – C:\WINDOWS\System32\drivers\pctfw2.sys
[2009/02/08 18:20:02 | 00,000,661 | —- | C] () – C:\Documents and Settings\All Users\Desktop\PC Tools AntiVirus.lnk
[2009/02/08 18:19:59 | 00,000,000 | —D | C] – C:\Program Files\Common Files\PC Tools
[2009/02/08 18:19:57 | 00,028,568 | —- | C] (PC Tools Research Pty Ltd.) – C:\WINDOWS\System32\drivers\AVHook.sys
[2009/02/08 18:19:57 | 00,021,912 | —- | C] (PC Tools Research Pty Ltd ) – C:\WINDOWS\System32\drivers\AVRec.sys
[2009/02/08 18:19:57 | 00,021,904 | —- | C] (PC Tools Research Pty Ltd) – C:\WINDOWS\System32\drivers\AVFilter.sys
[2009/02/08 18:19:34 | 00,000,000 | —D | C] – C:\Program Files\PC Tools AntiVirus
[2009/02/08 18:08:33 | 00,001,637 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Spyware Doctor.lnk
[2009/02/08 18:08:23 | 00,040,840 | —- | C] (PCTools Research Pty Ltd.) – C:\WINDOWS\System32\drivers\ikfilesec.sys
[2009/02/08 18:08:23 | 00,029,576 | —- | C] (PCTools Research Pty Ltd.) – C:\WINDOWS\System32\drivers\kcom.sys
[2009/02/08 18:08:22 | 00,081,288 | —- | C] (PCTools Research Pty Ltd.) – C:\WINDOWS\System32\drivers\iksyssec.sys
[2009/02/08 18:08:22 | 00,066,952 | —- | C] (PCTools Research Pty Ltd.) – C:\WINDOWS\System32\drivers\iksysflt.sys
[2009/02/08 18:07:51 | 00,000,000 | —D | C] – C:\Program Files\Spyware Doctor
[2009/02/08 18:07:51 | 00,000,000 | —D | C] – C:\Documents and Settings\Allison\Application Data\PC Tools
[2009/02/08 18:07:46 | 00,000,738 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Registry Mechanic.lnk
[2009/02/08 18:07:45 | 00,024,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\STKIT432.DLL
[2009/02/08 18:07:30 | 00,000,000 | —D | C] – C:\Program Files\Registry Mechanic
[2009/02/06 17:00:57 | 00,561,898 | —- | C] () – C:\Documents and Settings\Allison\Desktop\train cake.jpg
[2009/02/04 20:03:17 | 00,017,337 | —- | C] () – C:\Documents and Settings\Allison\Desktop\bookmarks.html
[2009/02/04 19:50:48 | 00,001,602 | —- | C] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2009/02/04 12:02:16 | 00,000,244 | -H– | C] () – C:\sqmnoopt19.sqm
[2009/02/04 12:02:16 | 00,000,232 | -H– | C] () – C:\sqmdata19.sqm
[2009/02/04 11:50:35 | 00,000,244 | -H– | C] () – C:\sqmnoopt18.sqm
[2009/02/04 11:50:35 | 00,000,232 | -H– | C] () – C:\sqmdata18.sqm
[2009/02/02 13:48:42 | 00,398,073 | —- | C] () – C:\Documents and Settings\Allison\Desktop\2009 Sock Hop Flyer.pdf
[2009/01/31 10:27:03 | 00,000,000 | —D | C] – C:\Program Files\StreamingStar
[2009/01/31 10:19:56 | 00,000,320 | —- | C] () – C:\WINDOWS\tasks\feejetji.job
[2009/01/30 11:53:49 | 00,609,343 | —- | C] () – C:\Documents and Settings\Allison\Desktop\jd_passport3.jpg
[2009/01/30 11:51:30 | 00,595,014 | —- | C] () – C:\Documents and Settings\Allison\Desktop\jd_passport2.jpg
[2009/01/30 11:49:33 | 00,299,774 | —- | C] () – C:\Documents and Settings\Allison\Desktop\JD 2.jpg
[2009/01/30 11:37:55 | 00,665,541 | —- | C] () – C:\Documents and Settings\Allison\Desktop\jd_passport.jpg
[2009/01/30 11:33:31 | 04,632,818 | —- | C] () – C:\Documents and Settings\Allison\Desktop\jd_passport.psd
[2009/01/30 11:30:53 | 00,321,500 | —- | C] () – C:\Documents and Settings\Allison\Desktop\JD 1.jpg
[2009/01/28 17:47:09 | 00,063,662 | —- | C] () – C:\Documents and Settings\Allison\Desktop\attachments_2009_01_28.zip
[2009/01/28 11:09:45 | 00,000,244 | -H– | C] () – C:\sqmnoopt17.sqm
[2009/01/28 11:09:45 | 00,000,232 | -H– | C] () – C:\sqmdata17.sqm
[2009/01/23 12:16:07 | 00,162,810 | —- | C] () – C:\Documents and Settings\Allison\Desktop\stettler_men.jpg
[2009/01/22 18:48:23 | 00,057,758 | —- | C] () – C:\Documents and Settings\Allison\Desktop\Base05.jpg
[2009/01/22 18:48:22 | 00,630,412 | —- | C] () – C:\Documents and Settings\Allison\Desktop\Base05.ttf
[2009/01/22 18:48:01 | 00,314,243 | —- | C] () – C:\Documents and Settings\Allison\Desktop\base_05.zip
[2009/01/18 07:32:19 | 00,977,841 | —- | C] () – C:\Documents and Settings\Allison\Desktop\Weekends.pdf
========== Files - Modified Within 30 Days ==========
[2 C:\*.tmp files]
[7 C:\WINDOWS\System32\*.tmp files]
[1 C:\WINDOWS\*.tmp files]
[2009/02/14 11:50:32 | 00,422,912 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Allison\Desktop\OTViewIt.exe
[2009/02/12 16:00:00 | 00,000,320 | —- | M] () – C:\WINDOWS\tasks\feejetji.job
[2009/02/12 15:23:48 | 00,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2009/02/12 15:23:02 | 00,054,156 | -H– | M] () – C:\WINDOWS\QTFont.qfn
[2009/02/12 15:22:54 | 00,000,006 | -H– | M] () – C:\WINDOWS\tasks\SA.DAT
[2009/02/12 15:22:51 | 00,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2009/02/12 15:22:47 | 21,458,45248 | -HS- | M] () – C:\hiberfil.sys
[2009/02/11 20:15:54 | 04,363,496 | -H– | M] () – C:\Documents and Settings\Allison\Local Settings\Application Data\IconCache.db
[2009/02/11 20:03:41 | 00,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2009/02/11 17:09:22 | 00,163,840 | —- | M] () – C:\Documents and Settings\Allison\Desktop\InstallAVg_880062.exe
[2009/02/10 22:44:00 | 00,000,302 | —- | M] () – C:\WINDOWS\tasks\Kayak.job
[2009/02/10 17:56:55 | 00,348,160 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Allison\Desktop\OTMoveIt3.exe
[2009/02/09 19:13:14 | 00,000,472 | —- | M] () – C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2009/02/09 19:10:42 | 00,015,688 | —- | M] () – C:\WINDOWS\System32\lsdelete.exe
[2009/02/09 19:10:09 | 00,064,160 | —- | M] (Lavasoft AB) – C:\WINDOWS\System32\drivers\Lbd.sys
[2009/02/09 19:08:13 | 00,000,867 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Ad-Aware.lnk
[2009/02/09 19:03:56 | 00,000,690 | —- | M] () – C:\Documents and Settings\Allison\Desktop\SpywareBlaster.lnk
[2009/02/09 19:01:47 | 00,000,696 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2009/02/09 18:56:21 | 00,001,734 | —- | M] () – C:\Documents and Settings\Allison\Desktop\HijackThis.lnk
[2009/02/09 13:49:36 | 00,216,576 | —- | M] () – C:\Documents and Settings\Allison\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/02/08 18:36:15 | 00,160,792 | —- | M] (PC Tools) – C:\WINDOWS\System32\drivers\pctfw2.sys
[2009/02/08 18:20:02 | 00,000,661 | —- | M] () – C:\Documents and Settings\All Users\Desktop\PC Tools AntiVirus.lnk
[2009/02/08 18:10:07 | 00,483,924 | —- | M] () – C:\WINDOWS\System32\PerfStringBackup.INI
[2009/02/08 18:10:07 | 00,411,142 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2009/02/08 18:10:07 | 00,065,446 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2009/02/08 18:08:33 | 00,001,637 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Spyware Doctor.lnk
[2009/02/08 18:07:46 | 00,000,738 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Registry Mechanic.lnk
[2009/02/06 17:01:04 | 00,561,898 | —- | M] () – C:\Documents and Settings\Allison\Desktop\train cake.jpg
[2009/02/06 11:58:30 | 00,025,088 | -HS- | M] () – C:\WINDOWS\Thumbs.db
@Alternate Data Stream - 0 bytes -> C:\WINDOWS\Thumbs.db:encryptable
[2009/02/04 20:03:17 | 00,017,337 | —- | M] () – C:\Documents and Settings\Allison\Desktop\bookmarks.html
[2009/02/04 19:50:48 | 00,001,602 | —- | M] () – C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2009/02/04 12:02:16 | 00,000,244 | -H– | M] () – C:\sqmnoopt19.sqm
[2009/02/04 12:02:16 | 00,000,232 | -H– | M] () – C:\sqmdata19.sqm
[2009/02/04 11:50:35 | 00,000,244 | -H– | M] () – C:\sqmnoopt18.sqm
[2009/02/04 11:50:35 | 00,000,232 | -H– | M] () – C:\sqmdata18.sqm
[2009/02/03 18:21:12 | 21,244,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\MRT.exe
[2009/02/02 13:48:42 | 00,398,073 | —- | M] () – C:\Documents and Settings\Allison\Desktop\2009 Sock Hop Flyer.pdf
[2009/01/30 11:53:52 | 00,609,343 | —- | M] () – C:\Documents and Settings\Allison\Desktop\jd_passport3.jpg
[2009/01/30 11:53:10 | 00,299,774 | —- | M] () – C:\Documents and Settings\Allison\Desktop\JD 2.jpg
[2009/01/30 11:51:32 | 00,595,014 | —- | M] () – C:\Documents and Settings\Allison\Desktop\jd_passport2.jpg
[2009/01/30 11:37:57 | 00,665,541 | —- | M] () – C:\Documents and Settings\Allison\Desktop\jd_passport.jpg
[2009/01/30 11:33:33 | 04,632,818 | —- | M] () – C:\Documents and Settings\Allison\Desktop\jd_passport.psd
[2009/01/30 11:31:49 | 00,321,500 | —- | M] () – C:\Documents and Settings\Allison\Desktop\JD 1.jpg
[2009/01/28 17:47:09 | 00,063,662 | —- | M] () – C:\Documents and Settings\Allison\Desktop\attachments_2009_01_28.zip
[2009/01/28 11:09:45 | 00,000,244 | -H– | M] () – C:\sqmnoopt17.sqm
[2009/01/28 11:09:45 | 00,000,232 | -H– | M] () – C:\sqmdata17.sqm
[2009/01/25 11:28:26 | 00,312,096 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/01/23 16:04:01 | 00,000,284 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/01/23 12:16:08 | 00,162,810 | —- | M] () – C:\Documents and Settings\Allison\Desktop\stettler_men.jpg
[2009/01/22 19:01:32 | 00,088,312 | —- | M] () – C:\Documents and Settings\Allison\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/01/22 18:48:03 | 00,314,243 | —- | M] () – C:\Documents and Settings\Allison\Desktop\base_05.zip
[2009/01/18 07:32:27 | 00,977,841 | —- | M] () – C:\Documents and Settings\Allison\Desktop\Weekends.pdf
[2009/01/16 21:35:14 | 03,594,752 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mshtml.dll
[2009/01/16 21:35:14 | 03,594,752 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
< End of report >
Extras.txt
OTViewIt Extras logfile created on: 2/14/2009 11:52:18 AM - Run
OTViewIt by OldTimer - Version 1.0.21.0 Folder = C:\Documents and Settings\Allison\Desktop
Windows XP Media Center Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.38 Gb Available Physical Memory | 69.30% Memory free
3.85 Gb Paging File | 3.29 Gb Available in Paging File | 85.58% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092;
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 86.83 Gb Total Space | 4.83 Gb Free Space | 5.56% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: STETTLER
Current User Name: Allison
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Whitelist: On
File Age = 30 Days
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.html [@ = Reg Error: Value does not exist or could not be read.] – Reg Error: Key does not exist or could not be opened. File not found
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=1
"AntiVirusDisableNotify"=0
"FirewallDisableNotify"=0
"UpdatesDisableNotify"=0
"AntiVirusOverride"=1
"FirewallOverride"=1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
"EnableFirewall"=0
"DisableNotifications"=0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[2008/04/13 19:12:34 | 00,141,312 | —- | M] (Microsoft Corporation) – %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
File not found – C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL
File not found – C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL
File not found – C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL
[2008/04/13 13:53:32 | 00,558,080 | —- | M] (Microsoft Corporation) – %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
[2007/01/19 11:54:56 | 05,674,352 | —- | M] (Microsoft Corporation) – C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1
[2007/01/04 15:10:02 | 00,297,752 | —- | M] (Microsoft Corporation) – C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
[2008/04/13 19:12:34 | 00,141,312 | —- | M] (Microsoft Corporation) – %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019
File not found – C:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL
File not found – C:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL
File not found – C:\Program Files\America Online 9.0\waol.exe:*:Enabled:AOL
[2008/04/13 19:12:28 | 01,695,232 | —- | M] (Microsoft Corporation) – C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger
[2007/08/30 16:43:18 | 04,670,704 | —- | M] (Yahoo! Inc.) – C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger
[2007/08/30 16:43:18 | 00,091,376 | —- | M] (Yahoo! Inc.) – C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server
File not found – C:\Program Files\NewsBin\nbpro.exe:*:Enabled:Newsbin
[2009/01/10 09:09:42 | 00,144,792 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\system32\javaw.exe:*:Enabled:javaw
File not found – C:\Documents and Settings\Allison\Desktop\AhnQiraj_English-downloader.exe:*:Enabled:Blizzard Downloader
[2006/10/18 20:46:20 | 00,064,000 | —- | M] (Microsoft Corporation) – C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:Windows Media Player
File not found – C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade
File not found – C:\Program Files\WebDrive\wdService.exe:*:Enabled:WebDrive
File not found – C:\Program Files\LeechFTP\Leechftp.exe:*:Enabled:LeechFTP
[2009/01/20 00:08:36 | 00,307,704 | —- | M] (Mozilla Corporation) – C:\Program Files\Mozilla Firefox\firefox.exe:*:Disabled:Firefox
[2008/12/19 00:25:25 | 00,634,024 | —- | M] (Microsoft Corporation) – C:\Program Files\Internet Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer
File not found – C:\Program Files\SmartFTP Client 2.0\SmartFTP.exe:*:Enabled:SmartFTP Client 2.0
File not found – C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent
[2008/04/13 13:53:32 | 00,558,080 | —- | M] (Microsoft Corporation) – %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000
[2009/01/10 09:09:42 | 00,144,792 | —- | M] (Sun Microsystems, Inc.) – C:\WINDOWS\system32\java.exe:*:Enabled:Java™ 2 Platform Standard Edition binary
File not found – C:\Documents and Settings\Allison\Local Settings\Temp\java_app_platform_sdk-5_02-windows.exe2\package\jre\bin\javaw.exe:*:Enabled:Java™ Platform SE binary
File not found – C:\Sun\SDK\jdk\bin\java.exe:*:Enabled:Java™ Platform SE binary
File not found – C:\Program Files\Java\jre1.5.0_10\bin\javaw.exe:*:Enabled:Java™ 2 Platform Standard Edition binary
File not found – C:\Program Files\Java\jre1.5.0_10\bin\java.exe:*:Enabled:Java™ 2 Platform Standard Edition binary
File not found – C:\Program Files\BitTorrent_DNA\dna.exe:*:Enabled:DNA
File not found – C:\Program Files\nusphere\phped\debugger\DbgListener.exe:*:Disabled:Listener for php debugger DBG
[2006/06/29 18:56:13 | 04,152,112 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft LifeCam\LifeCam.exe:*:Enabled:LifeCam.exe
[2006/06/29 18:54:45 | 00,269,104 | —- | M] (Microsoft Corporation) – C:\Program Files\Microsoft LifeCam\LifeExp.exe:*:Enabled:LifeExp.exe
[2008/08/23 14:11:08 | 00,267,056 | —- | M] (BitTorrent, Inc.) – C:\Documents and Settings\Allison\Desktop\utorrent.exe:*:Enabled:µTorrent
[2006/02/28 11:42:38 | 00,229,376 | —- | M] (Apple Computer, Inc.) – C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour
File not found – C:\Program Files\Free SMTP Server\localsrv.exe:*:Enabled:localsrv
[2004/03/02 08:55:28 | 12,169,216 | —- | M] (Macromedia, Inc.) – C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe:*:Enabled:Dreamweaver MX 2004
[2008/04/30 03:32:48 | 01,892,352 | —- | M] (www.sopcast.com) – C:\Program Files\SopCast\SopCast.exe:*:Disabled:SopCast Main Application
[2007/03/07 05:27:12 | 00,567,384 | —- | M] (www.sopcast.com) – C:\Program Files\SopCast\adv\SopAdver.exe:*:Disabled:SopCast Adver
File not found – C:\Program Files\Red Chair Software\Anapod Explorer\anamgr.exe:*:Enabled:Anapod Xtreamer
File not found – C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb
File not found – C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray
File not found – C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client
[2008/02/08 23:02:52 | 00,196,608 | —- | M] (FedEx Kinko's) – C:\Program Files\Kinko's\FPFK\FPKMain.exe:*:Enabled:File, Print FedEx Kinko's
[2008/02/08 23:02:52 | 00,483,328 | —- | M] ( ) – C:\Program Files\Kinko's\FPFK\Kinkos.Jupiter.GUI.Queue.exe:*:Enabled:File, Print FedEx Kinko's System Tray
[2008/03/30 09:36:34 | 20,638,504 | —- | M] (Apple Inc.) – C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes
[2007/05/28 13:52:54 | 23,458,344 | R— | M] (Skype Technologies S.A.) – C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype
[2007/12/03 19:28:42 | 00,254,976 | —- | M] (Azureus Inc) – C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus
[2008/10/02 18:27:09 | 00,176,128 | —- | M] (River Past Corporation) – C:\Program Files\River Past\Audio CD Ripper\AudioCDRipper.exe:*:Enabled:River Past Audio CD Ripper
File not found – C:\Program Files\RealVNC\VNC4\vncviewer.exe:*:Enabled:Run VNC Viewer
[2007/01/19 11:54:56 | 05,674,352 | —- | M] (Microsoft Corporation) – C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1
[2007/01/04 15:10:02 | 00,297,752 | —- | M] (Microsoft Corporation) – C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)
========== (O10) Winsock2 Catalogs ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\]
NameSpace_Catalog5\Catalog_Entries\000000000004 [mdnsNSP] – C:\Program Files\Bonjour\mdnsNSP.dll (Apple Computer, Inc.)
Protocol_Catalog9\Catalog_Entries\000000000001 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000002 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000003 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000004 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000005 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000006 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000007 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000008 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000009 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000010 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000011 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000012 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000013 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000014 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000015 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000016 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000017 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000018 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000019 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000020 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
Protocol_Catalog9\Catalog_Entries\000000000021 – C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
========== (O18) Protocol Handlers ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
ipp: [HKLM - No CLSID value]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2003/07/11 02:25:22 | 00,842,816 | —- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL ipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2007/01/19 12:53:24 | 00,063,344 | —- | M] (Microsoft Corporation) C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (livecall:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
msdaipp: [HKLM - No CLSID value]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2003/07/11 02:25:22 | 00,842,816 | —- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL msdaipp\0x00000001:{E1D2BF42-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAMON.BINDER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\] - Protocol Handlers
[2003/07/11 02:25:22 | 00,842,816 | —- | M] (Microsoft Corporation) C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL msdaipp\oledb:{E1D2BF40-A96B-11d1-9C6B-0000F875AC61} (HKLM) [HKLM - MSDAIPP.BINDER]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2007/01/19 12:53:24 | 00,063,344 | —- | M] (Microsoft Corporation) C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (msnim:{828030A1-22C1-4009-854F-8E305202313F} (HKLM) [Reg Error: Value does not exist or could not be read.])
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2003/08/04 13:19:34 | 07,330,360 | —- | M] (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (mso-offdap:{3D9F03FA-7A94-11D3-BE81-0050048385D1} (HKLM) [Data Page Pluggable Protocol mso-offdap Handler])
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2003/08/01 15:09:04 | 08,086,072 | —- | M] (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (mso-offdap11:{32505114-5902-49B2-880A-1F7738E5A384} (HKLM) [Data Page Plugable Protocal mso-offdap11 Handler])
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\]
[2007/05/28 13:52:54 | 01,828,440 | R— | M] (Skype Technologies) C:\Program Files\Common Files\Skype\Skype4COM.dll (skype4com:{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} (HKLM) [IEProtocolHandler Class])
========== (O18) Protocol Filters ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\] - Protocol Filters
[2003/07/14 22:45:12 | 00,039,488 | —- | M] (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL text/xml:{807553E5-5146-11D5-A672-00B0D022E945} (HKLM) [Reg Error: Value does not exist or could not be read.]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02DFF6B1-1654-411C-8D7B-FD6052EF016F}"=Apple Software Update
"{04AF207D-9A77-465A-8B76-991F6AB66245}"=Adobe Help Viewer CS3
"{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}"=Macromedia Dreamweaver MX 2004
"{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}"=mSSO
"{08B32819-6EEF-4057-AEDA-5AB681A36A23}"=Adobe Bridge Start Meeting
"{0D2E80C8-0875-43EB-9623-47118E2DFBCA}"=Quicken 2007
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}"=mLogView
"{0EB5D9B7-8E6C-4A9E-B74F-16B7EE89A67B}"=Microsoft Plus! Photo Story 2 LE
"{0F756CD9-4A1E-409B-B101-601DDC4C03AA}"=Qualxserve Service Agreement
"{1838C5A2-AB32-4145-85C1-BB9B8DFA24CD}"=QuickTime
"{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}"=Adobe WinSoft Linguistics Plugin
"{18D10072035C4515918F7E37EAFAACFC}"=AutoUpdate
"{1D643CD0-4DD6-11D7-A4E0-000874180BB3}"=Microsoft Money 2004
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}"=Google Earth
"{1F528948-0E80-4C96-B455-DE4167CB1DF7}"=Internal Network Card Power Management
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}"=Google Toolbar for Internet Explorer
"{236BB7C4-4419-42FD-0409-1E257A25E34D}"=Adobe Photoshop CS2
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}"=mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216012FF}"=Java™ 6 Update 12
"{26E1BFB0-E87E-4696-9F89-B467F01F81E5}"=Broadcom Management Programs
"{2EFFFC71-1E66-454E-A6E6-CEEC800B96D2}"=Adobe Flash Video Encoder
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}"=Sonic Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0150060}"=J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0150090}"=J2SE Runtime Environment 5.0 Update 9
"{3248F0A8-6813-11D6-A77B-00B0D0150100}"=J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0160020}"=Java™ 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160070}"=Java™ 6 Update 7
"{32A3A4F4-B792-11D6-A78A-00B0D0150120}"=J2SE Development Kit 5.0 Update 12
"{32A3A4F4-B792-11D6-A78A-00B0D0160120}"=Java™ SE Development Kit 6 Update 12
"{33BB4982-DC52-4886-A03B-F4C5C80BEE89}"=Windows Media Player 10
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}"=WebFldrs XP
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}"=mIWA
"{3EE33958-7381-4E7B-A4F3-6E43098E9E9C}"=URL Assistant
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}"=NetWaiting
"{44734179-8A79-4DEE-BB08-73037F065543}"=Apple Mobile Device Support
"{4667B940-BB01-428B-986E-A0CC46497BF7}"=ELIcon
"{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}"=mHlpDell
"{4DEE75B1-B201-4DA3-A50F-007CDB00DA23}"=Microsoft LifeCam
"{51846830-E7B2-4218-8968-B77F0FF475B8}"=Adobe Color EU Extra Settings
"{54793AA1-5001-42F4-ABB6-C364617C6078}"=Adobe Linguistics CS3
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}"=neroxml
"{571700F0-DB9D-4B3A-B03D-35A14BB5939F}"=Windows Live Messenger
"{585776BC-4BD6-4BD2-A19A-1D6CB44A403B}"=iTunes
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}"=Skype™ 3.2
"{62BD0AE0-4EB1-4BBB-8F43-B6400C8FEB2C}"=AOLIcon
"{63DB9CCD-2B56-4217-9A3D-507AC78320CA}"=mWMI
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}"=PowerDVD 5.7
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}"=Windows Media Player Firefox Plugin
"{6B52140A-F189-4945-BFFC-DB3F00B8C589}"=Adobe Flash CS3
"{6D5FCA42-1486-4E32-AFE8-1B7E2AA59D33}"=Digital Content Portal
"{6E45BA47-383C-4C1E-8ED0-0D4845C293D7}"=Microsoft Plus! Digital Media Edition Installer
"{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}"=Adobe Asset Services CS3
"{7299052b-02a4-4627-81f2-1818da5d550d}"=Microsoft Visual C++ 2005 Redistributable
"{74C9E91D-6B61-46FC-AC02-353DE157C4C7}"=ATI Catalyst Control Center
"{74F7662C-B1DB-489E-A8AC-07A06B24978B}"=Dell System Restore
"{786C5747-1033-0000-B58E-000000000001}"=Adobe Stock Photos 1.0
"{7B63B2922B174135AFC0E1377DD81EC2}"=DivX Codec
"{7C05EEDD-E565-4E2B-ADE4-0C784C17311C}"=Crystal Reports for .NET Framework 2.0 (x86)
"{7E7658A2-CD3F-48A7-93EA-0882BCA4FD2A}"=LogMeIn
"{7F142D56-3326-11D5-B229-002078017FBF}"=Modem Helper
"{83073C45-3003-4671-9A86-243AAADD915A}"=Microsoft Calculator Plus
"{83d96ed0-98aa-4515-8ddc-816f3efdd104}"=MyDSC2
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}"=Microsoft Silverlight
"{8A5F34E2-37CF-4AD4-808C-2D413786E31A}"=Microsoft Visual C Runtime
"{8ADFC4160D694100B5B8A22DE9DCABD9}"=DivX Player
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}"=mPfMgr
"{8C64E149-54BA-11D6-91B1-00500462BE80}"=Microsoft Money 2004 System Pack
"{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}"=Adobe Device Central CS3
"{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}"=Adobe Type Support
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}"=Adobe Common File Installer
"{90120000-0020-0409-0000-0000000FF1CE}"=Compatibility Pack for the 2007 Office system
"{90176341-0A8B-4CCC-A78D-F862228A6B95}"=Adobe Anchor Service CS3
"{90B0D222-8C21-4B35-9262-53B042F18AF9}"=mPfWiz
"{91A10409-6000-11D3-8CFE-0150048383C9}"=Microsoft Office OneNote 2003
"{91E30409-6000-11D3-8CFE-0150048383C9}"=Microsoft Office Professional Edition 2003
"{94658027-9F16-4509-BBD7-A59FE57C3023}"=mZConfig
"{94DB1FD3-10E1-4C2F-81FA-AFDE9DC06BF5}"=File, Print FedEx Kinko's
"{95655ED4-7CA5-46DF-907F-7144877A32E5}"=Adobe Color NA Recommended Settings
"{9941F0AA-B903-4AF4-A055-83A9815CC011}"=Sonic Encoders
"{998D6972-F58E-479D-9248-8F179E55AE38}"=Java DB 10.4.1.3
"{9C9824D9-9000-4373-A6A5-D0E5D4831394}"=Adobe Bridge CS3
"{9CC89556-3578-48DD-8408-04E66EBEF401}"=mXML
"{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}"=Adobe CMaps
"{A5BA14E0-7384-11D4-BAE7-00409631A2C8}"=Macromedia Extension Manager
"{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}"=PDF Settings
"{AC76BA86-7AD7-1033-7B44-A71000000002}"=Adobe Reader 7.1.0
"{B13A7C41581B411290FBC0395694E2A9}"=DivX Converter
"{B2C3BB6B-E005-4246-B8E5-DF0A4D073CDC}"=PixiePack Codec Pack
"{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}"=Adobe Camera Raw 4.0
"{B508B3F1-A24A-32C0-B310-85786919EF28}"=Microsoft .NET Framework 2.0 Service Pack 1
"{B510A987-487E-4C66-9F4F-D386AC275715}"=TextPad 4.7
"{B74D4E10-1033-0000-0000-000000000001}"=Adobe Bridge 1.0
"{B7F98125-4955-41E3-8A71-4CE11CE9C198}"=KODAK Gallery Upload Software
"{BCE72AED-3332-4863-9567-C5DCB9052CA2}"=Netflix Movie Viewer
"{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}"=Adobe ExtendScript Toolkit 2
"{C5074CC4-0E26-4716-A307-960272A90040}"=QuickSet
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}"=Microsoft .NET Framework 1.1
"{D0DFF92A-492E-4C40-B862-A74A173C25C5}"=Adobe Version Cue CS3 Client
"{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}"=Adobe PDF Library Files
"{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}"=Adobe Color Common Settings
"{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}"=Adobe Color JA Extra Settings
"{DE1AF137-C455-494A-A817-EFE44BCCFDEE}"=Works Upgrade
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}"=Ad-Aware
"{DF6A589A-7A1A-430C-9FF2-A0BDB42669DC}"=Search Assist
"{E5AED31E-3474-4C85-B492-42149DE37891}"=MySQL Server 5.0
"{E646DCF0-5A68-11D5-B229-002078017FBF}"=Digital Line Detect
"{E69AE897-9E0B-485C-8552-7841F48D42D8}"=Adobe Update Manager CS3
"{E81667C6-2856-46D6-ABEA-6A2F42166779}"=mCore
"{E9787678-1033-0000-8E67-000000000001}"=Adobe Help Center 1.0
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}"=mMHouse
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}"=Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01"=Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}"=mDrWiFi
"{F850707C-B6A0-4B56-8709-F89CF8F9AC6D}"=Eraser
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}"=mWlsSafe
"{FF0B0792-F6E7-4627-B820-EA50617E223B}"=QuarkXPress 6.1
"{FFC1ADE3-944B-4231-894E-3903C37271D2}"=Adobe Setup
"12133444-BF36-4d4e-B7FB-A3424C645DE4"=GemMaster Mystic
"3554AA4B-9B0B-451a-A269-2B5F53982209_is1"=ThreatFire 3.0
"Ad-Aware"=Ad-Aware
"Adobe Flash Player ActiveX"=Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin"=Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}"=Adobe Photoshop CS2
"Adobe Shockwave Player"=Adobe Shockwave Player
"Adobe_c3c7fe8b09d497ab2b3fd91c9353390"=Adobe Flash CS3 Professional
"Apache Tomcat 6.0"=Apache Tomcat 6.0 (remove only)
"ATI Display Driver"=ATI Display Driver
"Audio CD Ripper"=River Past Audio CD Ripper
"B3EE3001-DC24-4cd1-8743-5692C716659F"=Otto
"CCleaner"=CCleaner (remove only)
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3"=Conexant HDA D110 MDC V.92 Modem
"CutePDF Writer Installation"=CutePDF Writer 2.7
"Dell Digital Jukebox Driver"=Dell Digital Jukebox Driver
"Disney's Toontown Online"=Disney's Toontown Online
"Doro_is1"=Doro 1.35
"Easy Gif Animator Extension"=Easy Gif Animator Extension
"Easy GIF Animator_is1"=Easy GIF Animator 4.4
"EmeraldQFE2"=Windows Media Player 10 Hotfix [See EmeraldQFE2 for more information]
"Eraser"=Eraser
"FileZilla Client"=FileZilla Client 3.0.3
"FLAC"=FLAC 1.2.1b (remove only)
"HijackThis"=HijackThis 2.0.2
"IDNMitigationAPIs"=Microsoft Internationalized Domain Names Mitigation APIs
"ie7"=Windows Internet Explorer 7
"Malwarebytes' Anti-Malware_is1"=Malwarebytes' Anti-Malware
"MetaFrame Presentation Server Web Client for Win32"=MetaFrame Presentation Server Web Client for Win32
"Microsoft .NET Framework 1.1 (1033)"=Microsoft .NET Framework 1.1
"mkwACT"=mkw Audio Compression Toolkit
"Mozilla Firefox (3.0.6)"=Mozilla Firefox (3.0.6)
"MSCompPackV1"=Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping"=Microsoft National Language Support Downlevel APIs
"PC Tools AntiVirus_is1"=PC Tools AntiVirus 5.0
"ProInst"=Intel® PROSet/Wireless Software
"QuickPar"=QuickPar 0.9
"RealPlayer 6.0"=RealPlayer
"Registry Mechanic_is1"=Registry Mechanic 8.0
"SopCast"=SopCast 2.0.4
"Spyware Doctor"=Spyware Doctor 6.0
"SpywareBlaster_is1"=SpywareBlaster 4.1
"SynTPDeinstKey"=Synaptics Pointing Device Driver
"ViewpointMediaPlayer"=Viewpoint Media Player
"WildTangent CDA"=WildTangent Web Driver
"Winamp"=Winamp
"Winamp Toolbar"=Winamp Toolbar
"Windows Media Format Runtime"=Windows Media Format 11 runtime
"Windows Media Player"=Windows Media Player 11
"Windows XP Service Pack"=Windows XP Service Pack 3
"WinRAR archiver"=WinRAR archiver
"WinZip"=WinZip
"WMFDist11"=Windows Media Format 11 runtime
"wmp11"=Windows Media Player 11
"Wudf01000"=Microsoft User-Mode Driver Framework Feature Pack 1.0
"Yahoo! Companion"=Yahoo! Toolbar
"Yahoo! Customizations"=Yahoo! Browser Services
"Yahoo! Extras"=Yahoo! Browser Services
"Yahoo! Mail"=Yahoo! Internet Mail
"Yahoo! Messenger"=Yahoo! Messenger
"YInstHelper"=Yahoo! Install Manager
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome"=Google Chrome
"Sun Download Manager 2.0 (web)"=Sun Download Manager 2.0 (web)
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1329634060-3956839543-534635220-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome"=Google Chrome
"Sun Download Manager 2.0 (web)"=Sun Download Manager 2.0 (web)
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 1/31/2009 11:27:46 AM | Computer Name = STETTLER | Source = Application Hang | ID = 1002
Description = Hanging application is-89F89.tmp, version 51.42.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 2/8/2009 7:23:41 PM | Computer Name = STETTLER | Source = Application Error | ID = 1000
Description = Faulting application pctav.exe, version 5.0.1.1, faulting module pctav.exe,
version 5.0.1.1, fault address 0x0000148c.
Error - 2/8/2009 8:42:26 PM | Computer Name = STETTLER | Source = Application Error | ID = 1000
Description = Faulting application PCTAVSvc.exe, version 5.0.1.1, faulting module
PCTAVSvc.exe, version 5.0.1.1, fault address 0x00064710.
Error - 2/9/2009 8:08:32 PM | Computer Name = STETTLER | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
Error - 2/9/2009 8:46:32 PM | Computer Name = STETTLER | Source = Application Hang | ID = 1002
Description = Hanging application mbam.exe, version 1.33.0.0, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 2/9/2009 8:54:24 PM | Computer Name = STETTLER | Source = Application Error | ID = 1000
Description = Faulting application PCTAVSvc.exe, version 5.0.1.1, faulting module
PCTAVSvc.exe, version 5.0.1.1, fault address 0x00064710.
Error - 2/9/2009 8:55:56 PM | Computer Name = STETTLER | Source = Application Hang | ID = 1002
Description = Hanging application RegMech.exe, version 8.0.0.900, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 2/9/2009 8:55:57 PM | Computer Name = STETTLER | Source = Application Hang | ID = 1002
Description = Hanging application RegMech.exe, version 8.0.0.900, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 2/14/2009 12:47:51 PM | Computer Name = STETTLER | Source = Application Error | ID = 1000
Description = Faulting application PCTAVSvc.exe, version 5.0.1.1, faulting module
PCTAVSvc.exe, version 5.0.1.1, fault address 0x00064713.
Error - 2/14/2009 12:48:10 PM | Computer Name = STETTLER | Source = Application Error | ID = 1001
Description = Fault bucket 1090705339.
[ System Events ]
Error - 2/9/2009 9:04:33 PM | Computer Name = STETTLER | Source = Service Control Manager | ID = 7001
Description = The IPSEC Services service depends on the IPSEC driver service which
failed to start because of the following error: %%31
Error - 2/9/2009 9:04:33 PM | Computer Name = STETTLER | Source = Service Control Manager | ID = 7026
Description = The following boot-start or system-start driver(s) failed to load:
AFD APPDRV Fips intelppm IPSec MRxSmb NetBIOS NetBT pctfw2 RasAcd Rdbss Tcpip WS2IFSL
Error - 2/9/2009 9:05:06 PM | Computer Name = STETTLER | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service netman with
arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
Error - 2/10/2009 8:23:12 AM | Computer Name = STETTLER | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service netman with
arguments "" in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
Error - 2/10/2009 9:15:56 AM | Computer Name = STETTLER | Source = DCOM | ID = 10005
Description = DCOM got error "%1084" attempting to start the service EventSystem
with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
Error - 2/10/2009 6:59:42 PM | Computer Name = STETTLER | Source = Service Control Manager | ID = 7034
Description = The PC Tools Security Service service terminated unexpectedly. It
has done this 1 time(s).
Error - 2/11/2009 9:15:52 PM | Computer Name = STETTLER | Source = Service Control Manager | ID = 7009
Description = Timeout (30000 milliseconds) waiting for the ThreatFire service to
connect.
Error - 2/11/2009 9:15:52 PM | Computer Name = STETTLER | Source = Service Control Manager | ID = 7000
Description = The ThreatFire service failed to start due to the following error:
%%1053
Error - 2/14/2009 12:45:53 PM | Computer Name = STETTLER | Source = Dhcp | ID = 1000
Description = Your computer has lost the lease to its IP address 192.168.1.103 on
the Network Card with network address 0013021F6371.
Error - 2/14/2009 12:47:59 PM | Computer Name = STETTLER | Source = Service Control Manager | ID = 7034
Description = The PC Tools AntiVirus Engine service terminated unexpectedly. It
has done this 1 time(s).
< End of report >
Thanks!
