askey127, honestly I do not know whether I ever did anything like that, I do not think so because I simply would have thought that it was very strange to "update your codec" most likely I would have not done it. But I am not 100% sure.
I just followed the rest of the instructions and I tried entering another website into my browser and on the bottom left corner of the browser it says something like "http://cookonsea......" and then it takes me to a blank page with a small button in the top left hand corner then redirect to a random site, this time it was a music video on youtube and it also opened a grey box that said "One more thing! Please click ok to continue" which I just x'd out. The computer is running VERY well, very fast now.. I just have this problem with the browsers sporadically.
I logged into my router but I am not sure what I am looking for? Where do I find the ip addresses and what am I looking for? I just tried my wife's laptop over our same household wireless network and it is doing the same thing for the same domain!!!!!!!!!! Could it be something on the router? I unplugged and re-plugged in the router but I am having the same issue.
EDIT---> I hooked up directly to my modem..bypassing the router and the problem is gone!! Can I somehow re-set the router or something? BTW, yes, I never changed the password/username on the router.
EDIT again --------> I am sooooo happy you were 100% correct. I was able to find a strange IP in the router settings under DNS (started with 213.xxxxx) I thought it looked strange so I clicked allow ISP to automatically choose and it switched the numbers....problem solved! All the pc's in my house are no longer doing this problem!!!
How can I avoid this in the future? I already changed the password on the router.
Thanks a million!!!!!!!!!!!!!!!!!!!
Here is the OTL log:
OTL logfile created on: 10/28/2010 11:48:51 AM - Run 1
OTL by OldTimer - Version 3.2.17.1 Folder = H:\Documents and Settings\Kream\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 70.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): H:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Program Files
Drive H: | 149.04 Gb Total Space | 66.76 Gb Free Space | 44.79% Space Free | Partition Type: NTFS
Drive I: | 3.78 Gb Total Space | 1.93 Gb Free Space | 50.94% Space Free | Partition Type: FAT32
Computer Name: KREAM-MACHINE | User Name: Kream | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ========== PRC - [2010/10/28 11:48:03 | 000,575,488 | ---- | M] (OldTimer Tools) -- H:\Documents and Settings\Kream\My Documents\Downloads\OTL.exe
PRC - [2010/07/21 08:40:59 | 000,910,296 | ---- | M] (Mozilla Corporation) -- H:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2010/04/01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) -- H:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010/03/02 11:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- H:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/02/24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) -- H:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010/01/14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- H:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008/11/06 07:42:59 | 000,054,568 | ---- | M] (AOL, LLC.) -- H:\Program Files\AOL 9.1\shellmon.exe
PRC - [2008/11/06 07:42:59 | 000,039,208 | ---- | M] (AOL, LLC.) -- H:\Program Files\AOL 9.1\waol.exe
PRC - [2008/06/24 14:34:50 | 000,041,824 | ---- | M] (AOL LLC) -- H:\Program Files\Common Files\AOL\1205121144\ee\aolsoftware.exe
PRC - [2008/06/24 14:34:50 | 000,041,824 | ---- | M] (AOL LLC) -- H:\Program Files\Common Files\AOL\1205121144\ee\AOLDesktop.exe
PRC - [2008/04/13 20:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\explorer.exe
PRC - [2007/10/30 22:37:22 | 001,654,784 | ---- | M] (Belkin) -- H:\Program Files\Belkin\F5D7050v3\Belkinwcui.exe
PRC - [2006/10/23 08:50:35 | 000,046,640 | R--- | M] (AOL LLC) -- H:\Program Files\Common Files\AOL\ACS\AOLacsd.exe
PRC - [2001/09/10 19:08:50 | 000,032,256 | ---- | M] (C-Dilla Ltd) -- H:\WINDOWS\system32\drivers\CDANTSRV.EXE
========== Modules (SafeList) ========== MOD - [2010/10/28 11:48:03 | 000,575,488 | ---- | M] (OldTimer Tools) -- H:\Documents and Settings\Kream\My Documents\Downloads\OTL.exe
MOD - [2010/08/23 12:12:02 | 001,054,208 | ---- | M] (Microsoft Corporation) -- H:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Stopped] -- H:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2010/04/01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- H:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010/02/24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- H:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009/06/29 14:42:00 | 000,079,360 | ---- | M] (SolidWorks) [On_Demand | Stopped] -- H:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe -- (SolidWorks Licensing Service)
SRV - [2006/10/23 08:50:35 | 000,046,640 | R--- | M] (AOL LLC) [On_Demand | Stopped] -- H:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe -- (AOL ACS)
SRV - [2001/09/10 19:08:50 | 000,032,256 | ---- | M] (C-Dilla Ltd) [Auto | Running] -- H:\WINDOWS\system32\drivers\CDANTSRV.EXE -- (C-DillaSrv)
========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Stopped] -- H:\WINDOWS\System32\DRIVERS\sxuptp.sys -- (sxuptp)
DRV - File not found [Kernel | On_Demand | Stopped] -- H:\WINDOWS\System32\Drivers\AFGSp50.sys -- (AFGSp50)
DRV - File not found [Kernel | On_Demand | Stopped] -- H:\WINDOWS\System32\Drivers\AFGMp50.sys -- (AFGMp50)
DRV - [2010/03/01 10:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- H:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010/02/16 14:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- H:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/05/11 12:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- H:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009/05/11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- H:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/11 10:19:42 | 000,038,496 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2008/06/02 13:53:06 | 000,003,200 | ---- | M] (Altium Limited) [Kernel | Auto | Running] -- H:\Program Files\Altium Designer S09 Viewer\System\Drivers\altio.sys -- (altio)
DRV - [2008/04/13 14:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2007/10/02 04:06:40 | 000,451,968 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2007/01/25 13:31:34 | 000,042,000 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\npf.sys -- (NPF) WinPcap Packet Driver (NPF)
DRV - [2005/04/20 12:00:56 | 002,317,696 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2005/04/12 12:42:16 | 000,011,904 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] -- H:\WINDOWS\system32\drivers\srvkp.sys -- (SiSkp)
DRV - [2005/04/12 12:08:44 | 000,247,296 | ---- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\sisgrp.sys -- (SiS315)
DRV - [2004/08/03 18:31:36 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC)
DRV - [2004/06/29 09:07:18 | 001,268,204 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2003/09/25 22:15:32 | 000,015,872 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- H:\Program Files\Belkin\F5D7050v3\GTNDIS5.sys -- (GTNDIS5)
DRV - [2003/01/10 17:13:04 | 000,033,588 | R--- | M] (America Online, Inc.) [Kernel | On_Demand | Running] -- H:\WINDOWS\system32\drivers\wanatw4.sys -- (wanatw) WAN Miniport (ATW)
DRV - [2001/09/10 19:09:46 | 000,057,392 | ---- | M] (Macrovision) [Kernel | On_Demand | Stopped] -- H:\WINDOWS\system32\drivers\CDANT.SYS -- (C-Dilla)
========== Standard Registry (All) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = H:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
IE - HKLM\..\URLSearchHook: {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - H:\Program Files\AOL Toolbar\aoltb.dll (AOL LLC)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = H:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dl ... r=iesearchIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.aol.comIE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - H:\WINDOWS\system32\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\URLSearchHook: {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - H:\Program Files\AOL Toolbar\aoltb.dll (AOL LLC)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "AOL Search"
FF - prefs.js..browser.search.defaulturl: "http://search.aol.com/aolcom/search?invocationType=tb50ffTB50CLie7&query="
FF - prefs.js..browser.search.selectedEngine: "AOL Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.aol.com"
FF - prefs.js..extensions.enabledItems: {7affbfae-c4e2-4915-8c0f-00fa3ec610a1}:5.13.15.1
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.2.1
FF - prefs.js..extensions.enabledItems:
LDSI_plashcor@gmail.com:0.6.8
FF - prefs.js..extensions.enabledItems: {4D144BC3-23FB-47de-90C5-63CCB0139CCF}:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems:
jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.7
FF - prefs.js..keyword.URL: "http://search.aol.com/aolcom/search?invocationType=tb50ffTB50CLab&query="
FF - HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b}: h:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/09/01 22:27:40 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com: H:\Program Files\Java\jre6\lib\deploy\jqs\ff [2010/10/28 11:27:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.7\extensions\\Components: H:\Program Files\Mozilla Firefox\components [2010/09/08 17:46:00 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.7\extensions\\Plugins: H:\Program Files\Mozilla Firefox\plugins [2010/10/28 11:27:59 | 000,000,000 | ---D | M]
[2010/02/06 23:02:25 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\Mozilla\Extensions
[2009/03/12 02:07:22 | 000,000,000 | ---D | M] (No name found) -- H:\Documents and Settings\Kream\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2010/02/06 23:02:25 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\Mozilla\Extensions\mozswing@mozswing.org
[2010/10/28 11:41:30 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\Mozilla\Firefox\Profiles\0d8csdrr.default\extensions
[2010/10/24 01:58:45 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- H:\Documents and Settings\Kream\Application Data\Mozilla\Firefox\Profiles\0d8csdrr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/07/13 22:09:22 | 000,000,000 | ---D | M] (TradeManager-Plugin) -- H:\Documents and Settings\Kream\Application Data\Mozilla\Firefox\Profiles\0d8csdrr.default\extensions\{4D144BC3-23FB-47de-90C5-63CCB0139CCF}
[2009/06/30 11:31:09 | 000,000,000 | ---D | M] (No name found) -- H:\Documents and Settings\Kream\Application Data\Mozilla\Firefox\Profiles\0d8csdrr.default\extensions\{7affbfae-c4e2-4915-8c0f-00fa3ec610a1}
[2010/10/24 01:58:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\Mozilla\Firefox\Profiles\0d8csdrr.default\extensions\LDSI_plashcor@gmail.com
[2009/06/30 11:31:14 | 000,001,720 | ---- | M] () -- H:\Documents and Settings\Kream\Application Data\Mozilla\Firefox\Profiles\0d8csdrr.default\searchplugins\aol-search.xml
[2010/10/28 11:41:30 | 000,000,000 | ---D | M] -- H:\Program Files\Mozilla Firefox\extensions
[2010/07/21 08:41:07 | 000,000,000 | ---D | M] (Default) -- H:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2010/10/28 11:28:00 | 000,000,000 | ---D | M] (Java Console) -- H:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010/07/21 08:40:58 | 000,023,512 | ---- | M] (Mozilla Foundation) -- H:\Program Files\Mozilla Firefox\components\browserdirprovider.dll
[2010/07/21 08:40:58 | 000,138,712 | ---- | M] (Mozilla Foundation) -- H:\Program Files\Mozilla Firefox\components\brwsrcmp.dll
[2008/01/07 20:45:16 | 000,054,600 | ---- | M] (BitTorrent, Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npbittorrent.dll
[2010/10/28 11:27:43 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2008/09/26 12:40:34 | 000,053,248 | ---- | M] (AOL LLC) -- H:\Program Files\Mozilla Firefox\plugins\npdnu.dll
[2009/03/27 11:30:34 | 000,155,648 | ---- | M] (Dassault Systèmes SolidWorks Corp.) -- H:\Program Files\Mozilla Firefox\plugins\npEModelPlugin.dll
[2010/07/21 08:41:02 | 000,064,984 | ---- | M] (mozilla.org) -- H:\Program Files\Mozilla Firefox\plugins\npnul32.dll
[2003/07/14 21:56:52 | 000,013,888 | ---- | M] (Microsoft Corporation) -- H:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
[2010/09/22 18:10:52 | 000,103,864 | ---- | M] (Adobe Systems Inc.) -- H:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
[2009/07/28 17:09:09 | 000,143,360 | ---- | M] (Apple Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
[2009/07/28 17:09:09 | 000,143,360 | ---- | M] (Apple Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
[2009/07/28 17:09:09 | 000,143,360 | ---- | M] (Apple Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
[2009/07/28 17:09:09 | 000,143,360 | ---- | M] (Apple Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
[2009/07/28 17:09:09 | 000,143,360 | ---- | M] (Apple Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
[2009/07/28 17:09:09 | 000,143,360 | ---- | M] (Apple Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
[2009/07/28 17:09:09 | 000,143,360 | ---- | M] (Apple Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
[2007/08/21 20:42:32 | 000,057,344 | ---- | M] (America Online, Inc.) -- H:\Program Files\Mozilla Firefox\plugins\npunagi2.dll
[2010/07/13 21:54:08 | 000,001,394 | ---- | M] () -- H:\Program Files\Mozilla Firefox\searchplugins\amazondotcom.xml
[2010/07/13 21:54:09 | 000,002,193 | ---- | M] () -- H:\Program Files\Mozilla Firefox\searchplugins\answers.xml
[2010/07/13 21:54:09 | 000,001,534 | ---- | M] () -- H:\Program Files\Mozilla Firefox\searchplugins\creativecommons.xml
[2010/07/13 21:54:09 | 000,002,344 | ---- | M] () -- H:\Program Files\Mozilla Firefox\searchplugins\eBay.xml
[2010/07/13 21:54:09 | 000,002,371 | ---- | M] () -- H:\Program Files\Mozilla Firefox\searchplugins\google.xml
[2010/07/13 21:54:09 | 000,001,178 | ---- | M] () -- H:\Program Files\Mozilla Firefox\searchplugins\wikipedia.xml
[2010/07/13 21:54:09 | 000,001,096 | ---- | M] () -- H:\Program Files\Mozilla Firefox\searchplugins\yahoo.xml
O1 HOSTS File: ([2008/12/13 10:20:56 | 000,000,736 | ---- | M]) - H:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AOL Toolbar Loader) - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - H:\Program Files\AOL Toolbar\aoltb.dll (AOL LLC)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - H:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O3 - HKLM\..\Toolbar: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - H:\Program Files\AOL Toolbar\aoltb.dll (AOL LLC)
O3 - HKCU\..\Toolbar\ShellBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - H:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Address) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - H:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (&Links) - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - H:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (AOL Toolbar) - {DE9C389F-3316-41A7-809B-AA305ED9D922} - H:\Program Files\AOL Toolbar\aoltb.dll (AOL LLC)
O4 - HKLM..\Run: [Adobe ARM] H:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] H:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AGRSMMSG] H:\WINDOWS\AGRSMMSG.exe (Agere Systems)
O4 - HKLM..\Run: [AlcxMonitor] H:\WINDOWS\ALCXMNTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] H:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [F5D7050v3] H:\Program Files\Belkin\F5D7050v3\Belkinwcui.exe (Belkin)
O4 - HKLM..\Run: [HostManager] H:\Program Files\Common Files\AOL\1205121144\ee\aolsoftware.exe (AOL LLC)
O4 - HKLM..\Run: [iTunesHelper] H:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [QuickTime Task] H:\Program Files\QuickTime\qttask.exe (Apple Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] H:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [AOL Fast Start] H:\Program Files\AOL 9.1\AOL.EXE (AOL, LLC.)
O4 - HKCU..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe (Microsoft Corporation)
O4 - Startup: H:\Documents and Settings\Kream\Start Menu\Programs\Startup\AOL Desktop.lnk = H:\Program Files\Common Files\AOL\Launch\aollaunch.exe (AOL LLC)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &AOL Toolbar Search - H:\Documents and Settings\All Users\Application Data\AOL\ieToolbar\resources\en-US\local\search.html ()
O8 - Extra context menu item: E&xport to Microsoft Excel - H:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:\WINDOWS\network diagnostic\xpnetdiag.exe (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - H:\WINDOWS\system32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - H:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - H:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - H:\WINDOWS\system32\rsvpsp.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - H:\WINDOWS\system32\mswsock.dll (Microsoft Corporation)
O15 - HKCU\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83}
http://upload.facebook.com/controls/200 ... oader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {E5F5D008-DD2C-4D32-977D-1A0ADF03058B}
https://connect2.msmc.com/dana-cached/s ... tupSP1.cab (JuniperSetupSP1 Control)
O16 - DPF: {EF34051A-402A-4ABE-AA20-04E1B4422BD9}
http://ruizhome.webhop.net/RemoteDVR_D6.cab (RemoteDVR_D6 Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - H:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - H:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - H:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - H:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - H:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - H:\WINDOWS\system32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - H:\WINDOWS\system32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - H:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - H:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - H:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\sysimage {76E67A63-06E9-11D2-A840-006008059382} - H:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - H:\WINDOWS\system32\msvidctl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - H:\WINDOWS\system32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - H:\WINDOWS\system32\wiascr.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - H:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - H:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - H:\WINDOWS\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\Class Install Handler {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\deflate {8f6b0360-b80d-11d0-a9b3-006097942311} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\gzip {8f6b0360-b80d-11d0-a9b3-006097942311} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\lzdhtml {8f6b0360-b80d-11d0-a9b3-006097942311} - H:\WINDOWS\system32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/webviewhtml {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - H:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - H:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - H:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (H:\WINDOWS\system32\userinit.exe) - H:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (logonui.exe) - H:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - H:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - H:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation)
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - H:\WINDOWS\System32\crypt32.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - H:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation)
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - H:\WINDOWS\System32\cscdll.dll (Microsoft Corporation)
O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - H:\WINDOWS\system32\dimsntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - H:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll - H:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - H:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation)
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - H:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - H:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - H:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation)
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - H:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation)
O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - H:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - H:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - H:\WINDOWS\system32\stobject.dll (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - H:\WINDOWS\system32\webcheck.dll (Microsoft Corporation)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - H:\WINDOWS\system32\WPDShServiceObj.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - H:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - H:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O24 - Desktop WallPaper: H:\WINDOWS\Web\Wallpaper\Bliss.bmp
O24 - Desktop BackupWallPaper: H:\WINDOWS\Web\Wallpaper\Bliss.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - H:\WINDOWS\System32\shell32.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msapsspc.dll) - H:\WINDOWS\System32\msapsspc.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (schannel.dll) - H:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (digest.dll) - H:\WINDOWS\System32\digest.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (msnsspc.dll) - H:\WINDOWS\System32\msnsspc.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - H:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - H:\WINDOWS\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - H:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - H:\WINDOWS\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - H:\WINDOWS\System32\wdigest.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{0d7c057b-5fc8-11dd-a64f-00038a000015}\Shell\AutoRun\command - "" = C:\Launch.exe -- File not found
O33 - MountPoints2\{6fa87798-17e1-11dd-a60d-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{6fa87798-17e1-11dd-a60d-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{6fa87798-17e1-11dd-a60d-806d6172696f}\Shell\AutoRun\command - "" = H:\WINDOWS\System32\shell32.dll -- [2010/07/27 02:30:35 | 008,462,336 | ---- | M] (Microsoft Corporation)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ========== [2010/10/28 11:38:08 | 000,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Application Data\Sun
[2010/10/28 11:38:08 | 000,000,000 | ---D | C] -- H:\Program Files\Common Files\Java
[2010/10/28 11:27:59 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\deployJava1.dll
[2010/10/28 11:27:59 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\javaws.exe
[2010/10/28 11:27:59 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\javaw.exe
[2010/10/28 11:27:59 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\java.exe
[2010/10/28 11:27:59 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\javacpl.cpl
[2010/10/28 02:15:17 | 000,000,000 | ---D | C] -- H:\Documents and Settings\LocalService\Application Data\Mozilla
[2010/10/28 02:14:45 | 000,000,000 | ---D | C] -- H:\Documents and Settings\LocalService\Application Data\Adobe
[2010/10/28 01:47:20 | 000,000,000 | ---D | C] -- H:\WINDOWS\System32\NtmsData
[2010/10/28 01:46:39 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Kream\Application Data\Avira
[2010/10/28 01:32:44 | 000,000,000 | ---D | C] -- H:\WINDOWS\System32\appmgmt
[2010/10/27 23:56:37 | 000,028,520 | ---- | C] (Avira GmbH) -- H:\WINDOWS\System32\drivers\ssmdrv.sys
[2010/10/27 23:56:35 | 000,124,784 | ---- | C] (Avira GmbH) -- H:\WINDOWS\System32\drivers\avipbb.sys
[2010/10/27 23:56:35 | 000,060,936 | ---- | C] (Avira GmbH) -- H:\WINDOWS\System32\drivers\avgntflt.sys
[2010/10/27 23:56:35 | 000,045,416 | ---- | C] (Avira GmbH) -- H:\WINDOWS\System32\drivers\avgntdd.sys
[2010/10/27 23:56:35 | 000,022,360 | ---- | C] (Avira GmbH) -- H:\WINDOWS\System32\drivers\avgntmgr.sys
[2010/10/27 23:56:34 | 000,000,000 | ---D | C] -- H:\Program Files\Avira
[2010/10/27 23:56:34 | 000,000,000 | ---D | C] -- H:\Documents and Settings\All Users\Application Data\Avira
[2010/10/26 00:53:32 | 001,317,976 | ---- | C] (Kaspersky Lab ZAO) -- H:\Documents and Settings\Kream\Desktop\tdsskiller.exe
[2010/10/24 02:03:36 | 000,000,000 | ---D | C] -- H:\Program Files\Common Files\Adobe AIR
[2010/10/21 22:00:35 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Kream\My Documents\IPAD
[2010/10/13 19:43:56 | 000,974,848 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mfc42.dll
[2010/10/13 19:43:56 | 000,953,856 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\mfc40u.dll
[2010/10/13 19:43:47 | 000,617,472 | ---- | C] (Microsoft Corporation) -- H:\WINDOWS\System32\dllcache\comctl32.dll
[2010/10/08 13:29:16 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Kream\My Documents\ABS
[2010/10/07 13:20:54 | 000,000,000 | ---D | C] -- H:\Documents and Settings\Kream\My Documents\LED Car lights
[5 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[4 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[1 H:\WINDOWS\System32\drivers\*.tmp files -> H:\WINDOWS\System32\drivers\*.tmp -> ]
========== Files - Modified Within 30 Days ========== [2010/10/28 11:40:04 | 000,013,646 | ---- | M] () -- H:\WINDOWS\System32\wpa.dbl
[2010/10/28 11:39:25 | 000,002,048 | --S- | M] () -- H:\WINDOWS\bootstat.dat
[2010/10/28 11:27:42 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\javaws.exe
[2010/10/28 11:27:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\javaw.exe
[2010/10/28 11:27:42 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\java.exe
[2010/10/28 11:27:42 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\javacpl.cpl
[2010/10/28 11:27:41 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- H:\WINDOWS\System32\deployJava1.dll
[2010/10/28 00:28:03 | 000,000,000 | ---- | M] () -- H:\Documents and Settings\Kream\Local Settings\Application Data\prvlcl.dat
[2010/10/27 23:56:48 | 000,001,717 | ---- | M] () -- H:\Documents and Settings\All Users\Desktop\Avira AntiVir Control Center.lnk
[2010/10/26 01:16:54 | 000,002,030 | ---- | M] () -- H:\Documents and Settings\Kream\Desktop\HiJackThis.lnk
[2010/10/26 01:14:56 | 001,402,880 | ---- | M] () -- H:\Documents and Settings\Kream\Desktop\HiJackThis.msi
[2010/10/26 00:53:43 | 001,317,976 | ---- | M] (Kaspersky Lab ZAO) -- H:\Documents and Settings\Kream\Desktop\tdsskiller.exe
[2010/10/25 02:01:27 | 000,056,320 | ---- | M] () -- H:\Documents and Settings\Kream\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/24 22:32:49 | 000,352,748 | ---- | M] () -- H:\Documents and Settings\Kream\My Documents\aaa LEDNeonFlexpricelist.pdf
[2010/10/24 02:44:32 | 000,222,902 | ---- | M] () -- H:\Documents and Settings\Kream\My Documents\AAAAAAAA Quotationofledmarinelight.pdf
[2010/10/24 02:08:27 | 000,001,739 | ---- | M] () -- H:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/10/21 22:57:06 | 000,069,692 | ---- | M] () -- H:\Documents and Settings\Kream\My Documents\bulb.jpg
[2010/10/14 03:22:10 | 000,212,080 | ---- | M] () -- H:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/14 03:06:01 | 000,001,393 | ---- | M] () -- H:\WINDOWS\imsins.BAK
[2010/10/14 03:05:48 | 002,000,351 | ---- | M] () -- H:\WINDOWS\iis6.BAK
[2010/10/11 14:25:22 | 000,949,846 | ---- | M] () -- H:\Documents and Settings\Kream\My Documents\GTECH v VBOX PB_Test.pdf
[2010/10/08 03:04:13 | 000,432,356 | ---- | M] () -- H:\WINDOWS\System32\perfh009.dat
[2010/10/08 03:04:13 | 000,067,312 | ---- | M] () -- H:\WINDOWS\System32\perfc009.dat
[5 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[4 H:\WINDOWS\*.tmp files -> H:\WINDOWS\*.tmp -> ]
[1 H:\WINDOWS\System32\drivers\*.tmp files -> H:\WINDOWS\System32\drivers\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/10/27 23:56:48 | 000,001,717 | ---- | C] () -- H:\Documents and Settings\All Users\Desktop\Avira AntiVir Control Center.lnk
[2010/10/26 01:16:54 | 000,002,030 | ---- | C] () -- H:\Documents and Settings\Kream\Desktop\HiJackThis.lnk
[2010/10/26 01:14:51 | 001,402,880 | ---- | C] () -- H:\Documents and Settings\Kream\Desktop\HiJackThis.msi
[2010/10/24 22:32:49 | 000,352,748 | ---- | C] () -- H:\Documents and Settings\Kream\My Documents\aaa LEDNeonFlexpricelist.pdf
[2010/10/24 02:44:32 | 000,222,902 | ---- | C] () -- H:\Documents and Settings\Kream\My Documents\AAAAAAAA Quotationofledmarinelight.pdf
[2010/10/24 02:08:26 | 000,001,739 | ---- | C] () -- H:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2010/10/21 22:57:06 | 000,069,692 | ---- | C] () -- H:\Documents and Settings\Kream\My Documents\bulb.jpg
[2010/10/11 14:25:22 | 000,949,846 | ---- | C] () -- H:\Documents and Settings\Kream\My Documents\GTECH v VBOX PB_Test.pdf
[2010/04/27 16:00:45 | 000,000,000 | ---- | C] () -- H:\Documents and Settings\Kream\Local Settings\Application Data\prvlcl.dat
[2010/04/22 22:24:11 | 000,005,224 | ---- | C] () -- H:\WINDOWS\System32\ucuiinfo.ini
[2009/08/24 00:23:34 | 000,000,073 | ---- | C] () -- H:\WINDOWS\CAMDXP.INI
[2009/07/29 17:38:24 | 000,000,376 | ---- | C] () -- H:\WINDOWS\ODBC.INI
[2009/07/28 23:36:48 | 000,000,173 | ---- | C] () -- H:\WINDOWS\KPCMS.INI
[2009/07/28 23:36:30 | 000,210,944 | ---- | C] () -- H:\WINDOWS\System32\MSVCRT10.DLL
[2009/06/29 14:42:00 | 000,000,000 | ---- | C] () -- H:\WINDOWS\eDrawingOfficeAutomator.INI
[2008/10/13 17:57:25 | 001,105,920 | ---- | C] () -- H:\WINDOWS\System32\MGIIpl2P6.dll
[2008/10/13 17:57:24 | 001,228,800 | ---- | C] () -- H:\WINDOWS\System32\MGIIpl2M5.dll
[2008/10/13 17:57:23 | 001,294,336 | ---- | C] () -- H:\WINDOWS\System32\MGIIpl2A6.dll
[2008/10/13 17:57:23 | 001,261,568 | ---- | C] () -- H:\WINDOWS\System32\MGIIpl2M6.dll
[2008/10/13 17:57:21 | 001,052,672 | ---- | C] () -- H:\WINDOWS\System32\MGIIpl2P5.dll
[2008/10/13 17:55:39 | 000,000,002 | ---- | C] () -- H:\WINDOWS\PhotoSuite.ini
[2008/10/13 17:55:21 | 001,093,632 | ---- | C] () -- H:\WINDOWS\System32\MGIIpl2PX.dll
[2008/10/13 17:55:21 | 000,020,480 | ---- | C] () -- H:\WINDOWS\System32\MGIIpl2.dll
[2008/10/13 17:55:21 | 000,019,968 | ---- | C] () -- H:\WINDOWS\System32\CPUINF32.DLL
[2008/10/13 17:55:20 | 000,122,880 | ---- | C] () -- H:\WINDOWS\System32\JPEGLIB.DLL
[2008/10/13 17:55:20 | 000,122,880 | ---- | C] () -- H:\WINDOWS\System32\EnrouteStitch.dll
[2008/10/13 17:55:19 | 000,332,800 | ---- | C] () -- H:\WINDOWS\System32\FPXLIB.DLL
[2008/09/08 17:29:33 | 000,087,209 | ---- | C] () -- H:\WINDOWS\System32\iq012006.DLL
[2008/09/08 17:29:33 | 000,087,208 | ---- | C] () -- H:\WINDOWS\System32\iq032006.DLL
[2008/09/08 17:29:33 | 000,087,206 | ---- | C] () -- H:\WINDOWS\System32\iq022006.DLL
[2008/09/08 17:29:33 | 000,087,204 | ---- | C] () -- H:\WINDOWS\System32\iq042006.DLL
[2008/09/08 17:29:33 | 000,087,203 | ---- | C] () -- H:\WINDOWS\System32\sq022006.DLL
[2008/09/08 17:29:33 | 000,087,201 | ---- | C] () -- H:\WINDOWS\System32\sq012006.DLL
[2008/09/08 17:29:33 | 000,087,176 | ---- | C] () -- H:\WINDOWS\System32\sq042006.DLL
[2008/09/08 17:29:33 | 000,087,172 | ---- | C] () -- H:\WINDOWS\System32\sq032006.DLL
[2008/09/08 17:29:33 | 000,087,136 | ---- | C] () -- H:\WINDOWS\System32\IN993344.DLL
[2008/08/29 02:47:07 | 000,160,768 | ---- | C] () -- H:\WINDOWS\System32\unrar.dll
[2008/08/29 02:47:07 | 000,077,312 | ---- | C] () -- H:\WINDOWS\System32\UNACEV2.DLL
[2008/07/13 18:49:18 | 000,000,259 | ---- | C] () -- H:\WINDOWS\REMOTE~1.INI
[2008/03/24 10:05:54 | 001,936,528 | ---- | C] () -- H:\WINDOWS\System32\ltmm15.dll
[2008/03/08 00:49:19 | 000,056,320 | ---- | C] () -- H:\Documents and Settings\Kream\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/03/07 18:42:04 | 000,004,161 | ---- | C] () -- H:\WINDOWS\ODBCINST.INI
[2007/03/09 03:12:32 | 000,027,648 | -HS- | C] () -- H:\WINDOWS\System32\AVSredirect.dll
[2007/03/06 05:14:48 | 000,010,752 | ---- | C] () -- H:\WINDOWS\System32\ff_vfw.dll
[2007/01/25 13:31:36 | 000,057,395 | ---- | C] () -- H:\WINDOWS\System32\pthreadVC.dll
[2005/04/15 12:18:56 | 000,485,376 | ---- | C] () -- H:\WINDOWS\System32\DrRw40.dll
[2003/01/07 14:05:08 | 000,002,695 | ---- | C] () -- H:\WINDOWS\System32\OUTLPERF.INI
========== LOP Check ========== [2009/08/24 00:22:11 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\AltiumDesignerSummer09_Viewer
[2009/08/24 00:21:13 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\AltiumDesignerSummer09_ViewerSecurity
[2010/10/28 01:30:50 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\avg9
[2008/04/16 00:23:30 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Grisoft
[2008/12/13 10:07:45 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Juniper Networks
[2009/09/07 20:39:18 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\TEMP
[2008/03/09 23:52:50 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/03/20 13:06:13 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2009/05/09 17:50:35 | 000,000,000 | ---D | M] -- H:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/10/08 12:47:37 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\.oit
[2008/03/09 23:55:31 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\acccore
[2009/08/24 00:37:02 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\AltiumDesignerSummer09_Viewer
[2010/04/22 18:08:10 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\AMS
[2009/11/27 23:57:56 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\BitTorrent
[2008/04/18 01:27:42 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\CDRoller
[2009/06/29 14:43:25 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\EDrawings
[2008/07/25 18:25:33 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\Endicia
[2010/06/12 13:35:11 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\Facebook
[2008/03/24 10:05:18 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\GetRightToGo
[2008/03/08 00:31:22 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\GlobalSCAPE
[2008/06/04 16:20:50 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\IQS
[2008/12/13 10:05:46 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\Juniper Networks
[2009/08/23 23:17:50 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\PentaLogix
[2009/06/26 12:36:50 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\PGP
[2008/04/13 11:24:46 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\Viewpoint
[2009/03/14 17:52:15 | 000,000,000 | ---D | M] -- H:\Documents and Settings\Kream\Application Data\VOWSoft
========== Purity Check ========== < End of report >
OTL Extras logfile created on: 10/28/2010 11:48:51 AM - Run 1
OTL by OldTimer - Version 3.2.17.1 Folder = H:\Documents and Settings\Kream\My Documents\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 70.00% Memory free
3.00 Gb Paging File | 3.00 Gb Available in Paging File | 85.00% Paging File free
Paging file location(s): H:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Program Files
Drive H: | 149.04 Gb Total Space | 66.76 Gb Free Space | 44.79% Space Free | Partition Type: NTFS
Drive I: | 3.78 Gb Total Space | 1.93 Gb Free Space | 50.94% Space Free | Partition Type: FAT32
Computer Name: KREAM-MACHINE | User Name: Kream | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- H:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "H:\PROGRA~1\MEDIAM~1\MEDIAM~1.EXE" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "H:\PROGRA~1\MEDIAM~1\MEDIAM~1.EXE" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "H:\PROGRA~1\MEDIAM~1\MEDIAM~1.EXE" /ADD "%1" (Ventis Media Inc.)
Directory [UnzipThemAll] -- "H:\Program Files\UnzipThemAll\UnzipThemAll.exe" "%1" (Hervé Thouzard)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"H:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe" = H:\Program Files\Common Files\AOL\TopSpeed\3.0\aoltpsd3.exe:*:Enabled:AOL TopSpeed -- (AOL LLC)
"H:\Program Files\Common Files\AOL\ACS\AOLDial.exe" = H:\Program Files\Common Files\AOL\ACS\AOLDial.exe:*:Enabled:AOL Connectivity Service Dialer -- (AOL LLC)
"H:\Program Files\Common Files\AOL\ACS\AOLacsd.exe" = H:\Program Files\Common Files\AOL\ACS\AOLacsd.exe:*:Enabled:AOL Connectivity Service -- (AOL LLC)
"H:\Program Files\Common Files\AOL\1205121144\ee\aolsoftware.exe" = H:\Program Files\Common Files\AOL\1205121144\ee\aolsoftware.exe:*:Enabled:AOL Shared Components -- (AOL LLC)
"H:\Program Files\Common Files\AOL\Loader\aolload.exe" = H:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader -- (AOL LLC)
"H:\Program Files\Common Files\AOL\1205121144\ee\AOLDesktop.exe" = H:\Program Files\Common Files\AOL\1205121144\ee\AOLDesktop.exe:*:Enabled:AOL Desktop -- (AOL LLC)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"H:\Documents and Settings\Kream\Application Data\Juniper Networks\Juniper Terminal Services Client\dsTermServ.exe" = H:\Documents and Settings\Kream\Application Data\Juniper Networks\Juniper Terminal Services Client\dsTermServ.exe:*:Enabled:Juniper Terminal Services Client -- (Juniper Networks)
"H:\Program Files\LimeWire\LimeWire.exe" = H:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- File not found
"H:\Program Files\BitTorrent\bittorrent.exe" = H:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"H:\Program Files\TinCam\TinCam.exe" = H:\Program Files\TinCam\TinCam.exe:*:Enabled:TinCam -- ()
"H:\Program Files\Messenger\msmsgs.exe" = H:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger -- (Microsoft Corporation)
"H:\Program Files\Bonjour\mDNSResponder.exe" = H:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- (Apple Inc.)
"H:\Program Files\Mozilla Firefox\firefox.exe" = H:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation)
"H:\Program Files\AOL 9.1\waol.exe" = H:\Program Files\AOL 9.1\waol.exe:*:Enabled:AOL -- (AOL, LLC.)
"H:\Program Files\Common Files\AOL\System Information\sinf.exe" = H:\Program Files\Common Files\AOL\System Information\sinf.exe:*:Enabled:AOL System Information -- (AOL LLC)
"H:\Program Files\Altium Designer S09 Viewer\dxp.exe" = H:\Program Files\Altium Designer S09 Viewer\dxp.exe:*:Enabled:dxp -- ()
"H:\Program Files\trademanager\AliIM.exe" = H:\Program Files\trademanager\AliIM.exe:*:Enabled:AliIM -- File not found
"H:\Program Files\iTunes\iTunes.exe" = H:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"H:\WINDOWS\system32\spoolsv.exe" = H:\WINDOWS\system32\spoolsv.exe:*:Enabled:spoolsv.exe -- (Microsoft Corporation)
========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{18DF995F-2ACC-47E4-A33B-A703F4D39E92}" = CuteFTP 5.0 XP
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26916F85-3DB5-4848-A2F2-BC0E442A6BC8}" = ViewMate 10.6
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}" = GetDataBack for NTFS
"{5EFCBB42-36AB-4FF9-B90C-E78C7B9EE7B3}" = iTunes
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6E51D9B6-2366-40FD-9E96-3D34A2C3F34A}" = MYRIAD 8.1
"{797EE0CA-8165-405C-B5CE-F11EC20F1BB0}" = Microsoft VC9 runtime libraries
"{7E5FFD30-9EF9-4756-96C7-09F8FCFAD8D2}_is1" = TinCam 1.06
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{90110409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90840409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Excel Viewer 2003
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{9B881BCE-EDBF-4188-BA54-C9E03669E9E4}_is1" = Easy Photo Recovery
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.0
"{AC76BA86-7AD7-2447-0000-800000000003}" = Chinese Simplified Fonts Support For Adobe Reader 8
"{AFA20D47-69C3-4030-8DF8-D37466E70F13}" = Apple Mobile Device Support
"{B142B87D-5524-49D0-A385-E8B59CF5C69B}" = Altium Designer Summer 09 Viewer
"{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR
"{B72231BD-C86D-4FEF-BCD7-98832EC223E4}" = Alta Star FAR Forms
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{E217DFDD-C483-4736-821B-E3C10D21F67D}" = Recover Disc 2.0
"{F3759A9F-7AFA-4FB4-8DF1-53F26B979DEE}" = Belkin 54Mbps Wireless Network Adapter
"{F3D16C1B-4084-4764-BEEC-7C24428D8AAD}" = SolidWorks eDrawings 2009
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop 5.5" = Adobe Photoshop 5.5
"Agere Systems Soft Modem" = Agere Systems PCI Soft Modem
"AOL Regclient" = AOL Registration
"AOL Toolbar" = AOL Toolbar
"AOL Toolbar for Firefox" = AOL Toolbar for Firefox
"AOL Uninstaller" = AOL Uninstaller (Choose which Products to Remove)
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CDRoller_is1" = CDRoller version 7.50
"DAZzle" = DAZzle
"eMachineShop" = eMachineShop
"FreeKapture 2.00 - Freeware_is1" = FreeKapture 2.00 - Freeware
"GerbMagic_is1" = GerbMagic Version 3.6
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"IsoBuster_is1" = IsoBuster 2.4
"LMS" = C-Dilla Licence Management System
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MediaMonkey_is1" = MediaMonkey 3.1
"MGI_PRISM_V3_0" = MGI PhotoSuite III SE (Remove Only)
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.7)" = Mozilla Firefox (3.6.7)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"PicaLoader" = PicaLoader 1.7.1
"Picasa2" = Picasa 2
"Replay_Converter_1" = Replay Converter 2.8
"ScanMaker 3630" = ScanMaker 3630
"ScanModule V5.1" = ScanModule V5.1
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"Stellar Phoenix Photo Recovery_is1" = Stellar Phoenix Photo Recovery v3.2
"UnzipThemAll_is1" = UnzipThemAll 1.3
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VideoLAN VLC media player 0.8.6f
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinPcapInst" = WinPcap 4.0
"WM Recorder 12.1" = WM Recorder 12.1
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"78601cde3e748eeb" = IQS
"BitTorrent" = BitTorrent
"Facebook Plug-In" = Facebook Plug-In
"Juniper_Networks_Cache_Cleaner 5.5.0" = Juniper Networks Cache Cleaner 5.5.0
"Juniper_Term_Services" = Juniper Terminal Services Client
"Neoteris_Host_Checker" = Juniper Networks Host Checker
========== Last 10 Event Log Errors ========== [ Application Events ]
Error - 7/26/2010 10:38:25 AM | Computer Name = KREAM-MACHINE | Source = Application Hang | ID = 1002
Description = Hanging application ImageReady.exe, version 1.0.0.112, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 7/28/2010 11:21:17 PM | Computer Name = KREAM-MACHINE | Source = Application Hang | ID = 1002
Description = Hanging application msimn.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 7/29/2010 9:04:07 AM | Computer Name = KREAM-MACHINE | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.2.3846, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 8/16/2010 10:33:42 AM | Computer Name = KREAM-MACHINE | Source = Application Hang | ID = 1002
Description = Hanging application firefox.exe, version 1.9.2.3846, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
Error - 8/18/2010 1:32:54 PM | Computer Name = KREAM-MACHINE | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.
Error - 8/18/2010 1:32:54 PM | Computer Name = KREAM-MACHINE | Source = crypt32 | ID = 131083
Description = Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period when verifying
against the current system clock or the timestamp in the signed file.
Error - 8/19/2010 9:17:05 PM | Computer Name = KREAM-MACHINE | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 9/10/2010 3:57:14 PM | Computer Name = KREAM-MACHINE | Source = MsiInstaller | ID = 11706
Description = Product: Microsoft Office Professional Edition 2003 -- Error 1706.
Setup cannot find the required files. Check your connection to the network, or
CD-ROM drive. For other potential solutions to this problem, see H:\Program Files\Microsoft
Office\OFFICE11\1033\SETUP.CHM.
Error - 9/12/2010 2:25:58 AM | Computer Name = KREAM-MACHINE | Source = Application Hang | ID = 1002
Description = Hanging application iexplore.exe, version 8.0.6001.18702, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.
Error - 10/20/2010 10:39:56 PM | Computer Name = KREAM-MACHINE | Source = Application Hang | ID = 1002
Description = Hanging application TeaTimer.exe, version 1.5.2.16, hang module hungapp,
version 0.0.0.0, hang address 0x00000000.
[ System Events ]
Error - 10/28/2010 1:57:52 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 1:57:54 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 1:58:42 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 1:58:44 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 1:59:45 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 1:59:45 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 2:06:30 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 2:06:31 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 3:00:35 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
Error - 10/28/2010 3:00:36 AM | Computer Name = KREAM-MACHINE | Source = Removable Storage Service | ID = 262255
Description = RSM could not load media in drive Drive 0 of library Generic USB MS
Reader USB Device.
< End of report >
