A very strange problem

shnos · September 11, 2011

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll File not found

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@Motive.com/NpMotive,version=1.0: C:\Program Files\Common Files\Motive\npMotive.dll (Motive, Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)

FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)

FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: File not found

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKLM\Software\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1: C:\PROGRA~1\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)

FF - HKCU\Software\MozillaPlugins\@entriq.com/Download Manager Plugin Version Chk,version=3.8.2.9: File not found

FF - HKCU\Software\MozillaPlugins\@entriq.com/Download Manager Plugin,version=3.8.2.9: File not found

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\1.3.21.53\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Update\1.3.21.53\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{98e34367-8df7-42b4-837b-20b892ff0849}: C:\Program Files\iWin Games\firefox\ [2010/07/18 11:22:47 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/05/12 06:54:04 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/07/02 10:54:44 | 000,000,000 | ---D | M]

[2009/11/08 17:34:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Extensions

[2009/11/08 17:34:08 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Extensions\IMVUClientXUL@imvu.com

[2008/05/09 10:26:12 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Extensions\prism@developer.mozilla.org

[2011/09/05 13:24:25 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\cvve6v4c.default\extensions

[2011/06/17 19:51:13 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\cvve6v4c.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

[2010/04/28 16:02:12 | 000,000,000 | ---D | M] (mediaplayerconnectivity) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\cvve6v4c.default\extensions\{84b24861-62f6-364b-eba5-2e5e2061d7e6}

[2011/04/11 20:47:14 | 000,000,000 | ---D | M] (ZoneAlarm Security Community Toolbar) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\cvve6v4c.default\extensions\{91da5e8a-3318-4f8c-b67e-5964de3ab546}

[2011/09/05 11:19:38 | 000,000,000 | ---D | M] (Microsoft Choice Guard) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\cvve6v4c.default\extensions\ChoiceGuard@Microsoft

[2011/09/05 13:24:26 | 000,000,000 | ---D | M] (Yontoo Layers) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\cvve6v4c.default\extensions\plugin@yontoo.com

[2011/09/05 13:24:26 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\xp55ggdv.default\extensions

[2009/11/27 13:19:51 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\xp55ggdv.default\extensions\{6c3a1de1-94ca-4ad6-acdf-c1324adc487b}

[2009/07/18 09:07:21 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\xp55ggdv.default\extensions\{d51d388b-f5dc-471a-a1ce-5e2d671091c0}

[2011/09/05 13:24:26 | 000,000,000 | ---D | M] (Yontoo Layers) -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\xp55ggdv.default\extensions\plugin@yontoo.com

[2010/08/19 22:08:14 | 000,000,939 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Mozilla\Firefox\Profiles\cvve6v4c.default\searchplugins\conduit.xml

[2011/09/05 19:52:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2010/01/01 13:00:37 | 000,000,000 | ---D | M] (Seekdns) -- C:\Program Files\Mozilla Firefox\extensions\{7BA9F755-DCD4-4B60-8AE8-EE3662C7C733}

[2010/08/25 20:06:42 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

[2010/08/26 09:35:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}

[2010/10/20 08:50:07 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

[2011/01/07 06:04:21 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

[2011/03/25 16:18:03 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}

[2011/03/20 13:33:41 | 000,000,000 | ---D | M] (Babylon) -- C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com

() (No name found) -- C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\CVVE6V4C.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI

[2010/08/25 20:06:25 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF

[2011/04/14 17:26:02 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll

[2009/08/27 21:25:26 | 000,308,096 | ---- | M] (British Telecommunications Plc) -- C:\Program Files\mozilla firefox\plugins\npBTEmailConfig.dll

[2011/02/02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll

[2011/03/20 13:33:43 | 000,002,423 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml

[2010/01/01 09:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml

shnos · September 11, 2011

O1 HOSTS File: ([2010/10/10 08:24:46 | 000,252,347 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: 127.0.0.1 http://www.007guard.com

O1 - Hosts: 127.0.0.1 007guard.com

O1 - Hosts: 127.0.0.1 008i.com

O1 - Hosts: 127.0.0.1 http://www.008k.com

O1 - Hosts: 127.0.0.1 008k.com

O1 - Hosts: 127.0.0.1 http://www.00hq.com

O1 - Hosts: 127.0.0.1 00hq.com

O1 - Hosts: 127.0.0.1 010402.com

O1 - Hosts: 127.0.0.1 http://www.032439.com

O1 - Hosts: 127.0.0.1 032439.com

O1 - Hosts: 127.0.0.1 http://www.1001-search.info

O1 - Hosts: 127.0.0.1 1001-search.info

O1 - Hosts: 127.0.0.1 http://www.100888290cs.com

O1 - Hosts: 127.0.0.1 100888290cs.com

O1 - Hosts: 127.0.0.1 http://www.100sexlinks.com

O1 - Hosts: 127.0.0.1 100sexlinks.com

O1 - Hosts: 127.0.0.1 http://www.10sek.com

O1 - Hosts: 127.0.0.1 10sek.com

O1 - Hosts: 127.0.0.1 http://www.123topsearch.com

O1 - Hosts: 127.0.0.1 123topsearch.com

O1 - Hosts: 127.0.0.1 http://www.132.com

O1 - Hosts: 127.0.0.1 132.com

O1 - Hosts: 127.0.0.1 http://www.136136.net

O1 - Hosts: 127.0.0.1 136136.net

O1 - Hosts: 8795 more lines...

O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - Reg Error: Value error. File not found

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - Reg Error: Value error. File not found

O2 - BHO: (Yontoo Layers) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Runtime\YontooIEClient.dll (Yontoo LLC)

O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)

O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - Reg Error: Value error. File not found

O3 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\..\Toolbar\ShellBrowser: (no name) - {97BCEB59-CFCD-4B16-A863-B3F72CF9F196} - No CLSID value found.

O3 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\..\Toolbar\ShellBrowser: (no name) - {C4069E3A-68F1-403E-B40E-20066696354B} - No CLSID value found.

O3 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.

O3 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\..\Toolbar\WebBrowser: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - Reg Error: Value error. File not found

O3 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Reg Error: Value error. File not found

O4 - HKLM..\Run: [Alcmtr] File not found

O4 - HKLM..\Run: [AOLSoftware] File not found

O4 - HKLM..\Run: [apdproxy] File not found

O4 - HKLM..\Run: [btbb_McciTrayApp] File not found

shnos · September 11, 2011

O4 - HKLM..\Run: [DivXUpdate] File not found

O4 - HKLM..\Run: [ftutil2] C:\WINDOWS\System32\ftutil2.dll (Promise Technology, Inc.)

O4 - HKLM..\Run: [HostManager] File not found

O4 - HKLM..\Run: [HP Software Update] File not found

O4 - HKLM..\Run: [HPBootOp] File not found

O4 - HKLM..\Run: [jusched] File not found

O4 - HKLM..\Run: [KBD] File not found

O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)

O4 - HKLM..\Run: [NvCpl] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMcTray] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz] File not found

O4 - HKLM..\Run: [QTTask] File not found

O4 - HKLM..\Run: [QuickTime Task] File not found

O4 - HKLM..\Run: [Recguard] File not found

O4 - HKLM..\Run: [RTHDCPL] File not found

O4 - HKLM..\Run: [rundll32] C:\WINDOWS\System32\ftutil2.dll (Promise Technology, Inc.)

O4 - HKLM..\Run: [snpstd3] File not found

O4 - HKLM..\Run: [sprtcmd] File not found

O4 - HKLM..\Run: [sunJavaUpdateSched] File not found

O4 - HKLM..\Run: [TkBellExe] File not found

O4 - HKLM..\Run: [vsnpstd3] File not found

O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [Advanced SystemCare 4] C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe (IObit)

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [AutoStartNPSAgent] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [ctfmon] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [Google Update] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [GoogleToolbarNotifier] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [Messenger (Yahoo!)] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [MSMSGS] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [PopUpStopperFreeEdition] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [PSFree] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [quwam] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [removeit] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [RemoveIT Pro v7Ent] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [swg] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [Yahoo! Pager] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [YAHOOM~1] File not found

O4 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008..\Run: [YahooMessenger] File not found

O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0

O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Suggested Sites present

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Suggested Sites present

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Suggested Sites present

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Suggested Sites present

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\Software\Policies\Microsoft\Internet Explorer\Suggested Sites present

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoNetHood = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoMovingBands = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCloseDragDropBands = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0

O7 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0

O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html ()

O9 - Extra Button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Reg Error: Value error. File not found

O9 - Extra 'Tools' menuitem : &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - Reg Error: Value error. File not found

O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe (PokerStars)

O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - Reg Error: Value error. File not found

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Value error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{01C79DFE-6A25-48C0-B0C4-B8881E914877}: DhcpNameServer = 16.92.3.242 16.92.3.243 16.81.3.243 16.118.3.243

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{937B74B4-D7B8-4990-8CB1-8F09C00CC8D2}: DhcpNameServer = 192.168.0.1

O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)

O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Value error. File not found

O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Value error. File not found

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Value error. File not found

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O20 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008 Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\GoToAssist: DllName - C:\Program Files\Citrix\GoToAssist\570\G2AWinLogon.dll - C:\Program Files\Citrix\GoToAssist\570\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)

O24 - Desktop WallPaper: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2005/12/06 00:32:08 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2001/07/27 15:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]

O32 - AutoRun File - [2004/04/30 07:01:14 | 000,000,053 | -HS- | M] () - D:\Autorun.inf -- [ FAT32 ]

O33 - MountPoints2\{1115977a-4c8c-11e0-88c3-001731ea9af1}\Shell - "" = AutoRun

O33 - MountPoints2\{1115977a-4c8c-11e0-88c3-001731ea9af1}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{1115977a-4c8c-11e0-88c3-001731ea9af1}\Shell\AutoRun\command - "" = J:\AutoRun.exe

O33 - MountPoints2\{75cfc51c-2258-11dd-b37c-001731ea9af1}\Shell - "" = AutoRun

shnos · September 11, 2011

fc51c-2258-11dd-b37c-001731ea9af1}\Shell - "" = AutoRun

O33 - MountPoints2\{75cfc51c-2258-11dd-b37c-001731ea9af1}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{78d894ae-4c03-11e0-88c1-001731ea9af1}\Shell - "" = AutoRun

O33 - MountPoints2\{78d894ae-4c03-11e0-88c1-001731ea9af1}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{78d894ae-4c03-11e0-88c1-001731ea9af1}\Shell\AutoRun\command - "" = J:\AutoRun.exe

O34 - HKLM BootExecute: (autocheck autochk *) - File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKU\S-1-5-21-2226935652-1042370167-1948720806-1008\...exe [@ = exefile] -- Reg Error: Key error. File not found

NetSvcs: 6to4 - File not found

NetSvcs: AppMgmt - File not found

NetSvcs: Ias - File not found

NetSvcs: Iprip - File not found

NetSvcs: Irmon - File not found

NetSvcs: NWCWorkstation - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^Compaq_Owner^Start Menu^Programs^Startup^iWin Desktop Alerts.lnk - Reg Error: Value error. - File not found

MsConfig - State: "system.ini" - 0

MsConfig - State: "win.ini" - 0

MsConfig - State: "bootini" - 0

MsConfig - State: "services" - 0

MsConfig - State: "startup" - 2

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2011/09/11 14:09:38 | 001,916,416 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Compaq_Owner\Desktop\aswMBR.exe

[2011/09/11 14:03:43 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\OTL (1).exe

[2011/09/10 18:01:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live

[2011/09/09 11:52:08 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Windows 7 Upgrade Advisor

[2011/09/08 20:05:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\iolo

[2011/09/06 14:44:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Start Menu\Programs\Ladbrokes Poker

[2011/09/05 20:54:09 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Compaq_Owner\Recent

[2011/09/05 15:06:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\jZip

[2011/09/05 15:06:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\jZip

[2011/09/05 15:06:21 | 000,000,000 | ---D | C] -- C:\Program Files\jZip

[2011/09/05 14:54:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Application Data\GetRightToGo

[2011/09/05 13:59:09 | 000,000,000 | ---D | C] -- C:\Program Files\ADLSoft UnCompressor

[2011/09/05 13:24:24 | 000,000,000 | ---D | C] -- C:\Program Files\Yontoo Layers Runtime

[2011/09/05 13:24:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer

[2011/09/05 13:18:39 | 000,000,000 | ---D | C] -- C:\UnknownFolder87023

[2011/09/05 11:13:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft

[2011/09/05 10:51:01 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8

[2011/09/01 21:56:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Game Booster 3

[2011/08/31 08:03:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Application Data\Search Settings

[2011/08/31 08:02:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Protected Folder

[2011/08/31 08:02:42 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Spigot

[2011/08/25 10:59:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Compaq_Owner\Application Data\Globe7

[2011/08/25 10:59:00 | 000,000,000 | ---D | C] -- C:\Program Files\Globe7

[2011/08/23 09:15:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Games

[2011/08/23 09:14:15 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games

[2007/03/12 12:41:52 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll

[2005/11/23 13:55:32 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll

[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/09/11 14:18:29 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job

[2011/09/11 14:13:36 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2011/09/11 14:13:36 | 000,000,294 | ---- | M] () -- C:\WINDOWS\tasks\SmartDefrag_Startup.job

[2011/09/11 14:13:36 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\ASC4_PerformanceMonitor.job

[2011/09/11 14:13:34 | 000,000,324 | -HS- | M] () -- C:\WINDOWS\tasks\Ridh.job

[2011/09/11 14:13:05 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011/09/11 14:13:04 | 1005,113,344 | -HS- | M] () -- C:\hiberfil.sys

[2011/09/11 14:09:27 | 001,916,416 | ---- | M] (AVAST Software) -- C:\Documents and Settings\Compaq_Owner\Desktop\aswMBR.exe

[2011/09/11 14:03:35 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Compaq_Owner\Desktop\OTL (1).exe

[2011/09/11 11:13:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2011/09/09 11:52:11 | 000,001,908 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Windows 7 Upgrade Advisor.lnk

[2011/09/06 14:44:07 | 000,000,789 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Ladbrokes Poker.lnk

[2011/09/05 15:06:31 | 000,000,634 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\jZip.lnk

[2011/09/05 15:06:31 | 000,000,608 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\jZip.lnk

[2011/09/05 13:27:27 | 000,446,234 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2011/09/05 13:27:27 | 000,074,068 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2011/09/05 12:01:05 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2011/09/05 11:15:57 | 000,000,932 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\My Documents\My Sharing Folders.lnk

[2011/09/05 10:59:55 | 000,000,823 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

[2011/09/01 21:56:41 | 000,000,841 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Booster 3.lnk

[2011/09/01 21:56:41 | 000,000,823 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Game Booster 3.lnk

[2011/08/31 08:02:47 | 000,000,897 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Protected Folder.lnk

[2011/08/31 08:02:46 | 000,000,879 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Protected Folder.lnk

[2011/08/31 08:01:03 | 000,000,916 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Quick Care.lnk

[2011/08/31 08:01:01 | 000,000,912 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Advanced SystemCare 4.lnk

[2011/08/25 13:06:51 | 000,001,287 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Application Data\QuickZip45.ini

[2011/08/24 07:37:09 | 000,220,040 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2011/08/23 09:15:40 | 000,001,812 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Age of Empires Expansion.lnk

[2011/08/23 09:15:40 | 000,001,805 | ---- | M] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Age of Empires.lnk

[2011/08/14 21:18:47 | 000,001,945 | ---- | M] () -- C:\WINDOWS\epplauncher.mif

[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/09/09 11:52:11 | 000,001,914 | ---- | C] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Windows 7 Upgrade Advisor.lnk

[2011/09/09 11:52:11 | 000,001,908 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Windows 7 Upgrade Advisor.lnk

[2011/09/06 14:44:07 | 000,000,789 | ---- | C] () -- C:\Document

shnos · September 11, 2011

and Settings\Compaq_Owner\Desktop\Ladbrokes Poker.lnk

[2011/09/05 15:06:31 | 000,000,634 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\jZip.lnk

[2011/09/05 15:06:31 | 000,000,608 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\jZip.lnk

[2011/09/01 21:56:41 | 000,000,841 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Game Booster 3.lnk

[2011/09/01 21:56:41 | 000,000,823 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Game Booster 3.lnk

[2011/08/31 08:02:46 | 000,000,897 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\Microsoft\Internet Explorer\Quick Launch\Protected Folder.lnk

[2011/08/31 08:02:46 | 000,000,879 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Protected Folder.lnk

[2011/08/23 09:15:40 | 000,001,812 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Age of Empires Expansion.lnk

[2011/08/23 09:15:40 | 000,001,805 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Desktop\Age of Empires.lnk

[2011/08/23 09:15:33 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll

[2011/08/14 21:28:13 | 000,000,424 | -H-- | C] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job

[2010/12/29 15:54:31 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll

[2010/12/29 15:54:30 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys

[2010/12/29 15:53:33 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\$_hpcst$.hpc

[2010/10/10 08:07:26 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll

[2010/10/10 08:07:26 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar3.dll

[2010/10/10 08:07:26 | 000,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll

[2010/10/10 08:07:26 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll

[2010/07/22 10:48:56 | 000,000,045 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\machpro.dat

[2010/04/18 13:51:55 | 000,000,000 | ---- | C] () -- C:\WINDOWS\popcreg.dat

[2010/04/17 19:51:37 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat

[2010/03/27 14:32:03 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\prvlcl.dat

[2010/02/03 20:23:05 | 000,000,053 | ---- | C] () -- C:\WINDOWS\popcinfot.dat

[2010/01/19 12:49:54 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\RemoveDevice.dll

[2010/01/19 12:49:54 | 000,466,944 | ---- | C] () -- C:\WINDOWS\RemoveDevice.dll

[2010/01/14 03:41:00 | 000,309,248 | ---- | C] () -- C:\WINDOWS\System32\sqlite36_engine.dll

[2009/07/16 19:12:45 | 000,000,035 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\TheHunterSettings.cfg

[2009/07/05 15:08:42 | 000,001,287 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\QuickZip45.ini

[2009/04/04 09:10:36 | 000,107,520 | ---- | C] () -- C:\WINDOWS\System32\UnCasino5.exe

[2009/01/08 10:08:51 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\LauncherAccess.dt

[2009/01/08 09:49:15 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys

[2008/12/16 12:27:41 | 000,000,723 | ---- | C] () -- C:\WINDOWS\aolback.exe.lnk

[2008/09/27 16:57:02 | 016,664,095 | ---- | C] () -- C:\WINDOWS\System32\ntx14896890.exe

[2008/09/27 16:56:54 | 016,664,095 | ---- | C] () -- C:\WINDOWS\System32\ntx14889453.exe

[2008/08/31 11:10:57 | 000,000,014 | ---- | C] () -- C:\WINDOWS\popcinfo.dat

[2008/08/03 13:45:46 | 000,000,040 | ---- | C] () -- C:\WINDOWS\ujf635.bin

[2008/06/20 16:31:07 | 000,000,335 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2008/06/18 14:00:39 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI

[2008/06/02 00:03:27 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat

[2008/05/24 14:58:16 | 000,000,024 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\MyPhrases.dta

[2008/05/23 09:11:05 | 000,001,541 | ---- | C] () -- C:\WINDOWS\mozver.dat

[2007/10/31 13:33:31 | 000,000,029 | ---- | C] () -- C:\WINDOWS\PControl.ini

[2007/10/16 13:48:20 | 000,034,308 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll

[2007/09/26 18:16:32 | 000,005,956 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat

[2007/08/17 14:12:13 | 000,000,004 | ---- | C] () -- C:\WINDOWS\System32\proc20744962.bin

[2007/08/06 20:50:49 | 000,003,840 | ---- | C] () -- C:\WINDOWS\System32\drivers\BANTExt.sys

[2007/05/02 21:12:04 | 000,000,020 | ---- | C] () -- C:\WINDOWS\powerplayer.ini

[2007/05/02 21:12:00 | 000,000,294 | ---- | C] () -- C:\WINDOWS\psnetwork.ini

[2006/12/14 23:23:13 | 000,000,015 | ---- | C] () -- C:\WINDOWS\campaignsave.INI

[2006/11/23 20:57:30 | 000,000,076 | ---- | C] () -- C:\WINDOWS\eregreg.ini

[2006/11/21 00:40:12 | 000,000,073 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini

[2006/11/20 18:49:48 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Hammerhead.INI

[2006/11/20 15:00:07 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat

[2006/11/20 14:57:06 | 000,000,016 | ---- | C] () -- C:\WINDOWS\bfpw.dat

[2006/11/01 13:44:13 | 000,000,017 | ---- | C] () -- C:\WINDOWS\crwbc.ini

[2006/10/24 07:16:44 | 000,000,736 | ---- | C] () -- C:\WINDOWS\cdplayer.ini

[2006/10/20 00:38:20 | 000,001,755 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\QTSBandwidthCache

[2006/09/27 15:18:20 | 000,000,017 | ---- | C] () -- C:\WINDOWS\crw.ini

[2006/09/19 10:07:28 | 000,827,392 | ---- | C] () -- C:\WINDOWS\vsnpstd3.exe

[2006/09/07 11:44:52 | 000,018,944 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2006/09/06 17:58:20 | 000,006,550 | ---- | C] () -- C:\WINDOWS\jautoexp.dat

[2006/09/01 15:33:18 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini

[2006/09/01 15:08:49 | 000,001,620 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Application Data\wklnhst.dat

[2006/09/01 08:56:05 | 000,000,135 | ---- | C] () -- C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\fusioncache.dat

[2006/05/25 05:03:44 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini

[2006/05/25 04:40:41 | 000,028,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys

[2006/05/25 04:36:15 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll

[2006/05/25 04:27:32 | 000,000,250 | ---- | C] () -- C:\WINDOWS\WININIT.INI

[2006/05/25 04:22:15 | 000,095,822 | ---- | C] () -- C:\WINDOWS\hpqins69.dat

[2006/05/25 04:19:04 | 000,036,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\AmdK8.sys

[2006/05/25 04:18:02 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll

[2006/05/25 04:18:02 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe

[2006/05/25 04:18:02 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll

[2006/05/25 04:18:02 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe

[2006/05/25 04:18:02 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll

[2006/05/25 04:18:02 | 000,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll

[2006/05/25 04:18:02 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll

[2006/05/25 04:18:02 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll

[2006/05/25 04:18:01 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe

[2006/05/25 04:18:01 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe

[2006/05/25 04:18:01 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll

[2006/05/25 04:02:40 | 000,000,883 | ---- | C] () -- C:\WINDOWS\orun32.ini

[2006/05/25 03:59:28 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll

[2006/05/25 03:59:11 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll

[2006/03/18 01:23:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini

[2005/12/06 00:49:08 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2005/12/06 00:36:34 | 000,446,234 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2005/12/06 00:36:34 | 000,074,068 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2005/12/06 00:34:46 | 000,220,040 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2005/12/06 00:31:48 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2005/12/06 00:30:02 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2004/08/04 12:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2004/08/04 12:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2004/08/04 12:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2004/08/04 12:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2004/08/04 12:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2004/08/04 12:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2004/08/04 12:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin

[2004/08/04 12:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

[2004/06/24 20:10:06 | 000,000,573 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini

[2004/02/27 17:36:18 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini

[2001/08/23 23:12:28 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2001/08/23 23:11:02 | 000,004,490 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

========== LOP Check ==========

[2009/05/22 13:59:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\@

[2009/11/25 21:20:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AGS

[2011/01/05 12:31:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software

[2008/05/05 16:42:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Arovax

[2009/07/29 17:18:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Artist Colony

[2011/05/09 08:04:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVAST Software

[2011/04/11 22:57:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AVG10

[2010/10/14 19:12:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\avg9

[2009/01/09 19:34:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Azureus

[2009/03/03 16:11:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Beanbag Studios

[2011/03/14 15:11:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Birdstep Technology

[2009/12/18 15:11:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BlockBreaker

[2006/09/08 07:19:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BOONTY

[2010/10/01 09:54:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Boss Media

[2007/12/17 21:02:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Christmasville

[2010/10/14 19:23:00 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Application Data\Common Files

[2007/05/11 14:01:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Downloaded Installations

[2009/04/27 19:44:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverCure

[2009/05/01 22:57:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DriverScanner

[2008/07/23 14:12:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Entriq

[2009/01/16 09:46:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ESET

[2009/09/11 10:54:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Flood Light Games

[2007/05/01 08:47:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FloodLightGames

[2009/10/07 19:19:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FreshGames

[2007/07/12 08:07:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FunGames

[2010/02/03 17:34:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\GameHouse

[2009/06/20 19:27:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Gogii

[2009/03/14 09:43:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Grisoft

[2009/09/22 10:02:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HipSoft

[2007/05/11 13:58:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Installations

[2009/07/29 20:05:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Intenium

[2011/09/01 21:56:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\IObit

[2011/09/09 11:19:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\iolo

[2009/01/09 15:05:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\iWin Games

[2007/03/02 16:52:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\jump kind pop eq

[2009/10/29 16:18:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Kontiki

[2007/05/02 12:35:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Legacy Interactive

[2008/05/05 11:41:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ludia

[2008/06/02 00:03:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MailFrontier

[2011/04/11 22:43:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MFAData

[2009/01/21 17:43:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MGS

[2009/01/21 17:34:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Microgaming

[2009/05/25 16:33:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MinigolfAdventures

[2010/01/31 17:12:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MumboJumbo

[2008/09/12 16:08:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MysteryChronicles

[2006/12/07 09:46:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Napster

[2011/03/22 17:07:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound

[2009/04/27 19:40:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ParetoLogic

[2009/05/10 16:35:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters

[2010/02/10 20:13:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Optimizer Pro

[2007/05/11 13:58:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite

[2009/10/29 16:18:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PCPitstop

[2009/11/20 15:07:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PlayFirst

[2011/05/23 11:59:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Playrix Entertainment

[2006/09/17 09:01:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap

[2010/02/10 20:24:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PopCap Games

[2008/05/18 23:25:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PrevxCSI

[2008/04/20 08:47:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PurePlay

[2010/02/10 20:22:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\qs

[2009/03/03 17:53:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ROWLUUUCYG

[2009/12/11 16:09:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Sandlot Games

[2010/10/10 08:07:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Simply Super Software

[2008/02/13 22:45:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SITEguard

[2006/09/28 19:53:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SkillJam

[2007/09/11 09:42:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SpinTop Games

[2010/10/30 05:53:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\STOPzilla!

[2009/06/26 09:32:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SupportSoft

[2011/09/05 13:24:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer

[2011/05/23 12:06:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP

[2010/02/09 15:27:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\The Mirror Mysteries

[2010/11/13 20:45:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TrueMoneyGames

[2009/04/22 09:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software

[2008/04/23 09:50:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Uniblue

[2009/05/11 17:15:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UTour Golf

[2008/12/16 12:25:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint

[2009/12/18 16:52:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WildTangent

[2008/03/31 13:03:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WinZip

[2006/12/14 12:36:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ZILLAbar

[2008/07/08 19:31:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ZqWare

[2008/01/08 02:11:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Zylom

[2009/06/05 18:55:07 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}

[2007/09/16 11:18:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\3DMailbox

[2009/09/28 15:03:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Absolute Poker

[2009/07/29 12:43:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Anabel

[2010/06/19 23:54:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Arkadium

[2008/02/13 10:52:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Auslogics

[2010/10/14 19:26:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\AVG10

[2007/04/17 14:35:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\AVSMedia

[2011/05/01 20:16:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Azureus

[2011/03/20 13:38:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\BabylonToolbar

[2010/06/15 13:05:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\BattlePunks

[2007/09/03 12:34:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Big Fish Games

[2008/04/16 19:38:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\BitZipper

[2009/11/10 09:48:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Blitware

[2009/06/18 14:18:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Cat's Eye Games

[2009/07/29 20:07:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\cerasus.media

[2010/10/14 23:25:49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\CheckPoint

[2009/03/03 20:13:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

[2008/02/18 14:12:06 | 000,000,000 | RH-D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\CrystalSpace

[2008/03/31 10:20:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\DAEMON Tools

[2009/10/29 16:17:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\DNA

[2009/04/27 19:41:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\DriverCure

[2010/09/09 07:47:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\FinalTorrent

[2009/09/11 10:54:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Flood Light Games

[2007/05/01 08:47:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\FloodLightGames

[2009/03/27 17:10:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Foxit

[2011/01/11 14:46:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Free Sound Recorder

[2008/09/22 07:33:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\funkitron

[2008/09/22 08:46:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\GamesCafe

[2008/09/09 10:10:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\GanymedeNet

[2011/09/05 14:55:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\GetRightToGo

[2008/06/25 20:47:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\GlarySoft

[2011/08/25 10:59:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Globe7

[2009/10/29 15:23:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\GTM_Bodie

[2010/08/20 16:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\HEM Data

[2008/04/30 16:19:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Hide IP NG

[2010/10/24 15:38:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\HighPulse

[2009/10/29 16:18:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\HTNetMeter

[2011/09/05 19:44:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\IObit

[2007/09/01 14:21:22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\ISE Games

[2008/09/22 08:54:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\ITTNord

[2009/08/02 09:22:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\iWin

[2009/07/29 10:51:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Iwin 3 Days Zoo Mystery

[2007/12/08 07:09:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\iWinArcade

[2007/04/11 13:52:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Kontiki

[2006/09/01 15:37:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Leadertech

[2008/08/28 12:43:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\LimeWire

[2009/01/08 17:29:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\LittlewoodsPoker

[2008/05/05 11:41:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Ludia

[2008/08/15 11:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Magic Academy

[2009/07/28 18:27:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\MagicBall4

[2011/09/10 12:17:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Microgaming

[2009/11/06 17:33:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Miranda

[2006/09/07 18:05:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\MSNInstaller

[2008/06/08 14:59:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\MysteryStudio

[2007/08/28 15:57:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Mysteryville2

[2007/05/11 14:05:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Nokia

[2007/03/02 16:52:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\ooze sixth more

[2010/08/25 23:40:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\OpenOffice.org

[2008/05/23 17:59:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Opera

[2011/04/09 07:46:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\PacificPoker

[2009/06/02 19:21:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Paltalk

[2007/05/11 13:57:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\PC Suite

[2009/06/25 19:40:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\PetShowCraze

[2009/11/20 15:07:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\PlayFirst

[2009/07/29 12:52:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Playrix Entertainment

[2009/01/21 15:46:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Pogo Games

[2010/02/10 20:24:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\PopCapv1001

[2007/10/31 14:54:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\PowerChallenge

[2007/05/02 21:00:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\PPMate

[2007/05/02 21:12:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\ppStream

[2006/11/09 08:41:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\psychorosie

[2010/01/07 21:52:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\qs

[2009/05/25 13:10:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Reflexivev1002

[2011/01/13 16:14:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Samsung

[2011/08/31 08:03:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Search Settings

[2009/07/30 11:22:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Shape games

[2006/10/03 15:08:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\shnos

[2010/10/10 08:13:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Simply Super Software

[2008/09/27 17:14:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Skip-Bo

[2007/08/22 15:30:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Snapfish

[2008/05/23 17:00:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Sports Interactive

[2010/09/12 19:06:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Stellarium

[2006/09/01 15:14:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Template

[2009/11/20 21:50:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\TitanicMystery

[2009/04/22 10:00:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\TuneUp Software

[2008/05/24 14:45:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\TypingMaster7

[2009/11/27 13:01:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Uniblue

[2010/05/26 14:36:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Unity

[2010/04/29 15:50:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\uTorrent

[2009/01/09 14:34:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Viewpoint

[2009/09/28 14:13:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Visual Poker

[2010/06/13 09:34:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Vivox

[2007/07/04 10:27:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\WinBatch

[2006/12/10 15:15:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\WinPatrol

[2009/07/28 12:33:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Winv1001

[2009/07/29 14:46:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Winv1005

[2007/08/25 07:15:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\World Market Watch, Inc

[2006/11/23 18:55:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\xDeantjx

[2006/10/31 14:09:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\xxDeanxx

[2008/05/09 10:26:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Compaq_Owner\Application Data\Zimbra Desktop

[2011/03/11 17:20:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Application Data\Birdstep Technology

[2011/03/11 18:08:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Application Data\Birdstep Technology

[2011/09/11 14:13:36 | 000,000,284 | ---- | M] () -- C:\WINDOWS\Tasks\ASC4_PerformanceMonitor.job

[2008/06/01 12:00:15 | 000,000,464 | ---- | M] () -- C:\WINDOWS\Tasks\Internet Services.job

[2011/09/11 14:18:29 | 000,000,424 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job

[2011/09/11 14:13:34 | 000,000,324 | -HS- | M] () -- C:\WINDOWS\Tasks\Ridh.job

[2011/09/11 11:40:41 | 000,032,446 | ---- | M] () -- C:\WINDOWS\Tasks\SCHEDLGU.TXT

[2011/09/11 14:13:36 | 000,000,294 | ---- | M] () -- C:\WINDOWS\Tasks\SmartDefrag_Startup.job

========== Purity Check ==========

shnos · September 11, 2011

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >

[2010/12/29 15:42:28 | 000,013,752 | ---- | M] () -- C:\0x0809.ini

[2011/04/12 09:36:23 | 000,008,704 | ---- | M] () -- C:\1457874.dat

[2010/12/29 15:43:02 | 000,069,632 | ---- | M] () -- C:\2057.MST

[2011/03/05 10:37:08 | 000,007,771 | ---- | M] () -- C:\2191502.dat

[2011/03/21 21:31:11 | 000,008,216 | ---- | M] () -- C:\3475768.dat

[2011/04/12 09:35:28 | 000,007,594 | ---- | M] () -- C:\3748053.dat

[2011/03/21 21:02:37 | 000,007,206 | ---- | M] () -- C:\3800736.dat

[2011/03/21 18:14:30 | 000,008,718 | ---- | M] () -- C:\3979047.dat

[2011/03/21 18:18:01 | 000,004,514 | ---- | M] () -- C:\4183667.dat

[2011/03/05 11:21:45 | 000,006,868 | ---- | M] () -- C:\5389770.dat

[2011/03/21 20:44:01 | 000,008,864 | ---- | M] () -- C:\5508831.dat

[2011/03/05 11:25:05 | 000,004,740 | ---- | M] () -- C:\6380098.dat

[2011/03/21 20:44:01 | 000,005,161 | ---- | M] () -- C:\6506091.dat

[2011/03/21 18:27:51 | 000,008,905 | ---- | M] () -- C:\6680678.dat

[2011/04/12 09:35:28 | 000,007,895 | ---- | M] () -- C:\6703808.dat

[2005/12/06 00:32:08 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT

[2007/07/26 11:34:25 | 000,000,211 | -HS- | M] () -- C:\BOOT.BAK

[2011/04/17 08:03:32 | 000,000,281 | -HS- | M] () -- C:\boot.ini

[2004/08/04 05:00:00 | 000,260,272 | RHS- | M] () -- C:\cmldr

[2005/12/06 00:32:08 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS

[2011/03/12 14:59:19 | 000,022,716 | ---- | M] () -- C:\debug.txt

[2006/08/18 15:49:08 | 000,000,004 | -HS- | M] () -- C:\dllimp_regmsft985

[2011/09/11 14:13:04 | 1005,113,344 | -HS- | M] () -- C:\hiberfil.sys

[2009/12/04 14:25:04 | 000,000,132 | ---- | M] () -- C:\ICSYSINF.log

[2005/12/06 00:32:08 | 000,000,000 | RHS- | M] () -- C:\IO.SYS

[2009/07/31 08:54:07 | 000,000,405 | -H-- | M] () -- C:\IPH.PH

[2005/12/06 00:32:08 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS

[2004/08/04 05:00:00 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM

[2008/06/24 18:06:24 | 000,250,048 | RHS- | M] () -- C:\ntldr

[2010/12/18 11:15:19 | 000,001,024 | -H-- | M] () -- C:\ntuser.dat.LOG

[2011/09/11 14:13:02 | 1509,949,440 | -HS- | M] () -- C:\pagefile.sys

[2010/12/29 15:48:45 | 097,979,392 | ---- | M] () -- C:\Samsung New PC Studio.msi

[2008/08/18 13:06:50 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm

[2008/12/03 15:05:13 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm

[2008/12/15 11:05:26 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm

[2009/01/15 06:13:19 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm

[2009/01/15 09:13:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm

[2009/01/16 09:36:56 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm

[2009/01/31 12:39:34 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm

[2009/02/14 18:56:02 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm

[2009/02/14 18:59:22 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm

[2009/02/14 19:02:34 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm

[2009/02/14 19:12:05 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm

[2009/03/04 13:31:23 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm

[2006/09/08 21:26:18 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm

[2006/09/08 21:27:02 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm

[2006/09/08 22:18:18 | 000,000,268 | -H-- | M] () -- C:\sqmdata14.sqm

[2006/09/09 07:49:33 | 000,000,268 | -H-- | M] () -- C:\sqmdata15.sqm

[2006/09/09 08:54:28 | 000,000,268 | -H-- | M] () -- C:\sqmdata16.sqm

[2006/09/09 23:33:07 | 000,000,268 | -H-- | M] () -- C:\sqmdata17.sqm

[2006/09/10 14:31:32 | 000,000,268 | -H-- | M] () -- C:\sqmdata18.sqm

[2006/09/10 14:34:57 | 000,000,268 | -H-- | M] () -- C:\sqmdata19.sqm

[2008/08/18 13:06:50 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm

[2008/12/03 15:05:13 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm

[2008/12/15 11:05:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm

[2009/01/15 06:13:19 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm

[2009/01/15 09:13:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm

[2009/01/16 09:36:56 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm

[2009/01/31 12:39:34 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm

[2009/02/14 18:56:02 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm

[2009/02/14 18:59:22 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm

[2009/02/14 19:02:34 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm

[2009/02/14 19:12:05 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm

[2009/03/04 13:31:23 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm

[2006/09/08 21:26:18 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm

[2006/09/08 21:27:02 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm

[2006/09/08 22:18:18 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm

[2006/09/09 07:49:33 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm

[2006/09/09 08:54:28 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm

[2006/09/09 23:33:07 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm

[2006/09/10 14:31:32 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm

[2006/09/10 14:34:57 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm

[2007/11/27 22:30:43 | 000,000,218 | -H-- | M] () -- C:\t8101.le

< %systemroot%\system32\Spool\prtprocs\w32x86\*.dll >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.sys /90 >

[7 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\*.dll /lockedfiles >

[7 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

[2011/09/11 14:13:34 | 000,000,324 | -HS- | M] () Unable to obtain MD5 -- C:\WINDOWS\Tasks\Ridh.job

< %systemroot%\system32\drivers\*.sys /lockedfiles >

[2008/03/31 10:20:18 | 000,717,296 | ---- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\drivers\sptd.sys

< %systemroot%\system32\*.exe /lockedfiles >

[7 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\System32\config\*.sav >

[2005/12/06 00:23:36 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav

[2005/12/06 00:23:36 | 000,634,880 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav

< %PROGRAMFILES%\* >

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate\AU >

< hklm\software\clients\startmenuinternet|command /rs >

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\aol.exe\InstallInfo\\ReinstallCommand: C:\PROGRA~1\AOL9~1.0VR\accdef.exe -rb [2006/11/10 13:11:59 | 000,016,944 | ---- | M] (AOL, LLC.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\aol.exe\InstallInfo\\HideIconsCommand: C:\PROGRA~1\AOL9~1.0VR\accdef.exe -hb [2006/11/10 13:11:59 | 000,016,944 | ---- | M] (AOL, LLC.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\aol.exe\InstallInfo\\ShowIconsCommand: C:\PROGRA~1\AOL9~1.0VR\accdef.exe -sb [2006/11/10 13:11:59 | 000,016,944 | ---- | M] (AOL, LLC.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\aol.exe\shell\open\command\\: C:\PROGRA~1\AOL9~1.0VR\aol.exe [2006/12/05 12:40:30 | 000,050,736 | ---- | M] (AOL, LLC.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\chrome.exe\shell\open\command\\: "C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2011/05/06 20:50:10 | 001,010,232 | ---- | M] (Google Inc.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2011/04/14 17:26:03 | 000,711,672 | ---- | M] (Mozilla Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2011/04/14 17:26:03 | 000,711,672 | ---- | M] (Mozilla Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2011/04/14 17:26:03 | 000,711,672 | ---- | M] (Mozilla Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: C:\Program Files\Mozilla Firefox\firefox.exe [2011/04/14 17:25:41 | 000,924,632 | ---- | M] (Mozilla Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2011/04/14 17:25:41 | 000,924,632 | ---- | M] (Mozilla Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2011/04/14 17:25:41 | 000,924,632 | ---- | M] (Mozilla Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ShowIconsCommand: "C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --show-icons [2011/05/06 20:50:10 | 001,010,232 | ---- | M] (Google Inc.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\HideIconsCommand: "C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --hide-icons [2011/05/06 20:50:10 | 001,010,232 | ---- | M] (Google Inc.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\InstallInfo\\ReinstallCommand: "C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --make-default-browser [2011/05/06 20:50:10 | 001,010,232 | ---- | M] (Google Inc.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\Google Chrome\shell\open\command\\: "C:\Documents and Settings\Compaq_Owner\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" [2011/05/06 20:50:10 | 001,010,232 | ---- | M] (Google Inc.)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\WINDOWS\system32\ie4uinit.exe" -reinstall [2011/06/23 13:05:37 | 000,173,568 | ---- | M] (Microsoft Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -hide [2011/06/23 13:05:37 | 000,173,568 | ---- | M] (Microsoft Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\WINDOWS\system32\ie4uinit.exe" -show [2011/06/23 13:05:37 | 000,173,568 | ---- | M] (Microsoft Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)

HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: C:\Program Files\Internet Explorer\iexplore.exe [2009/03/08 14:09:26 | 000,638,816 | ---- | M] (Microsoft Corporation)

< hklm\software\clients\startmenuinternet|command /64 /rs >