Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

System runing very slow

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

System runing very slow

Unread postby kadeco » February 6th, 2011, 9:49 pm

My system has been running slow for the last few days and I'm not sure what's causing it. Here is my HyjackThis Log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:41:11 PM, on 2/6/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\IPSSVC.EXE
C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\ArcSoft\Magic-i 3\uMgiSvr.exe
C:\Program Files\IBM\Lotus\Notes\ntmulti.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
c:\program files\lenovo\system update\suservice.exe
C:\WINDOWS\System32\TPHDEXLG.exe
c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\system32\TpShocks.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
C:\PROGRA~1\THINKV~1\AMSG\amsg.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\HP\Button Manager\BM.exe
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe
C:\Program Files\Common Files\BSD\AppUpdater\BSDChecker.exe
C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\program files\companionlink\companionlink.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Evernote\Evernote\EvernoteClipper.exe
C:\Program Files\Documents To Go Desktop\DocsToGoDesktop.exe
C:\Program Files\Evernote\Evernote\EvernoteTray.exe
C:\WePrint\WePrint Server.exe
C:\Program Files\IBM\Lotus\Notes\nNOTESMM.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\iPod\bin\iPodService.exe
G:\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://m.www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Client for Internet Explorer\YontooIEClient.dll
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [TPFNF7] C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe /r
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [AMSG] C:\PROGRA~1\THINKV~1\AMSG\amsg.exe
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [BMISR] C:\Program Files\HP\Button Manager\BM.exe
O4 - HKLM\..\Run: [CarboniteSetupLite] "C:\Program Files\Carbonite\CarbonitePreinstaller.exe" /preinstalled /showonfirst /reshowat=1800
O4 - HKLM\..\Run: [Nikon Transfer Monitor] C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
O4 - HKLM\..\Run: [FUFAXSTM] "C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe"
O4 - HKLM\..\Run: [BSDAppUpdater] C:\Program Files\Common Files\BSD\AppUpdater\BSDChecker.exe
O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [iTunesHelper] "G:\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [EPSON WorkForce 610 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFJA.EXE /FU "C:\WINDOWS\TEMP\E_S138.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [WorkForce 610(Network)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFJA.EXE /FU "C:\WINDOWS\TEMP\E_S98.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [CompanionLink] c:\program files\companionlink\companionlink.exe -Icon
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RegistryBooster] "C:\Program Files\Uniblue\RegistryBooster\launcher.exe" delay 20000
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - Startup: Documents To Go Desktop.lnk = C:\Program Files\Documents To Go Desktop\DocsToGoDesktop.exe
O4 - Startup: EvernoteTray.lnk = C:\Program Files\Evernote\Evernote\EvernoteTray.exe
O4 - Startup: WePrint Server.lnk = C:\WePrint\WePrint Server.exe
O4 - Global Startup: Evernote Clipper.lnk = ?
O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files\Evernote\Evernote\EvernoteIE.dll/204
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files\Evernote\Evernote3.5\enbar.dll (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files\Evernote\Evernote3.5\enbar.dll (file missing) (HKCU)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... oader5.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocach ... .0.1.1.cab
O16 - DPF: {2DAD3559-2923-4935-AD49-B673D2539944} (IASRunner Class) - https://www-307.ibm.com/pc/support/acce ... /AcpIR.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {895D1291-D5BD-4982-BA84-AD11D29C1D6A} (Image Uploader Control) - http://community.weightwatchers.com/Scr ... oader6.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Amazon Unbox Video Service (ADVService) - Amazon.com - C:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE
O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: IPS Core Service (IPSSVC) - Lenovo Group Limited - C:\WINDOWS\system32\IPSSVC.EXE
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: MgiSvr - ArcSoft, Inc. - C:\Program Files\ArcSoft\Magic-i 3\uMgiSvr.exe
O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Program Files\IBM\Lotus\Notes\ntmulti.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: System Update (SUService) - - c:\program files\lenovo\system update\suservice.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\WINDOWS\System32\TPHDEXLG.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe

--
End of file - 15105 bytes
kadeco
Regular Member
 
Posts: 22
Joined: June 2nd, 2010, 8:05 pm
Advertisement
Register to Remove

Re: System runing very slow

Unread postby askey127 » February 9th, 2011, 7:22 am

Hi kadeco,
Please don't install, remove or scan with anything unless I ask, until we are through cleaning your machine.

  • You have Yontoo Layers attached to your browser. I would suggest not allowing it on your machine, but it's your call.
    Looks like it tracks you and provides ads. Yontoo's privacy policy is here: http://www.yontoo.com/privacypolicy.aspx
    Let me know if you would like to remove it.

  • Did you set this proxy ?
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171

  • Don't ever install or use a Registry booster, optimizer, or cleaner. They don't do any good, and they can be dangerous to your machine.
-----------------------------------------------------------
Remove Registry items with HijackThis. Start HijackThis.
Click Do System Scan Only. When the Scan is complete, Check the following entries:
(Some of these lines may be missing)
O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - (no file)
O4 - HKCU\..\Run: [RegistryBooster] "C:\Program Files\Uniblue\RegistryBooster\launcher.exe" delay 20000

Make sure Every other window except HJT is closed (No other tabs showing in the bottom tray), and Click Fix Checked
Click the "X" in the upper right corner of the HiJackThis window to close it.
-----------------------------------------------------------
Remove A Program Using Control Panel
From Start, Settings, Control Panel or Start, Control Panel, click Add/Remove Programs.
Highlight this Entry, if it exists, and choose Remove :

Uniblue Registry Booster

Take extra care in answering questions posed by any Uninstaller.
-----------------------------------------------------------
REBOOT (RESTART) Your Machine
---------------------------------------------
Run a Scan with OTL
Please download OTL.exe by OldTimer and save it to your desktop.
  • Double click on the icon to run it.
  • Make sure all other windows are closed to let it run uninterrupted.
  • Copy the text from the code box below and paste it into the Custom Scans/Fixes box. Do not copy the word "Code:"
    Code: Select all
    netsvcs
    drivers32 
    %SYSTEMDRIVE%\*.*
    /md5start
    explorer.exe
    winlogon.exe
    wininit.exe 
    userinit.exe
    sfc.dll   
    /md5stop
    
  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL. (on your desktop)
Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post them as a reply. Use separate replies if more convenient.

askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 13903
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: System runing very slow

Unread postby kadeco » February 10th, 2011, 4:19 am

No, I did not set this proxy:
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171

I will go ahead and follow your instructions now.
kadeco
Regular Member
 
Posts: 22
Joined: June 2nd, 2010, 8:05 pm

Re: System runing very slow

Unread postby kadeco » February 10th, 2011, 12:58 pm

I could not find Uniblue Registry Booster in my Control Panel. I did find a Uniblue file on my C: Drive and in that folder was Registry Booster, but that file was empty. I deleted both files. Hope this was ok. Also, OTL Quick Scan only produced an OTL.Txt file, Not an Extras.Txt file.


OTL logfile created on: 2/10/2011 10:31:50 AM - Run 4
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Administrator\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 60.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 73.00% Paging File free
Paging file location(s): C:\pagefile.sys 576 1152 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 106.21 Gb Total Space | 31.57 Gb Free Space | 29.73% Space Free | Partition Type: NTFS
Drive F: | 15.05 Gb Total Space | 2.50 Gb Free Space | 16.61% Space Free | Partition Type: FAT32
Drive G: | 298.01 Gb Total Space | 186.16 Gb Free Space | 62.47% Space Free | Partition Type: FAT32

Computer Name: KC | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Administrator\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
PRC - C:\Program Files\Evernote\Evernote\EvernoteTray.exe (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
PRC - C:\WePrint\WePrint Server.exe (EuroSmartz Ltd)
PRC - C:\Program Files\CompanionLink\CompanionLink.exe (CompanionLink Software, Inc.)
PRC - C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe (BillP Studios)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Common Files\BSD\AppUpdater\BSDChecker.exe (Bootstrap Software Development)
PRC - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
PRC - C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
PRC - C:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe (Amazon.com)
PRC - C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
PRC - C:\Program Files\EPSON Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\IBM\Lotus\Notes\ntmulti.exe (IBM Corp)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)
PRC - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\HP\Button Manager\BM.exe ()
PRC - C:\WINDOWS\system32\ibmpmsvc.exe (Lenovo)
PRC - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe (Intel Corporation)
PRC - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (Intel Corporation )
PRC - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe (Intel Corporation)
PRC - C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe (Lenovo Group Limited)
PRC - C:\WINDOWS\system32\TpShocks.exe (Lenovo.)
PRC - C:\Program Files\ThinkPad\Utilities\EZEJMNAP.EXE (Lenovo Group Ltd.)
PRC - C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited)
PRC - C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited)
PRC - C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited)
PRC - C:\WINDOWS\system32\TPHDEXLG.exe (Lenovo.)
PRC - C:\Program Files\ThinkVantage\AMSG\Amsg.exe (LENOVO)
PRC - C:\WINDOWS\system32\IPSSVC.EXE (Lenovo Group Limited)
PRC - C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
PRC - C:\Program Files\Google\Google Talk\googletalk.exe (Google)
PRC - C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe (SEIKO EPSON CORPORATION)
PRC - c:\Program Files\Lenovo\System Update\SUService.exe ( )
PRC - C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited)
PRC - c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe (Lenovo Group Limited)
PRC - C:\Program Files\ArcSoft\Magic-i 3\uMgiSvr.exe (ArcSoft, Inc.)
PRC - C:\Program Files\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited)
PRC - C:\Program Files\Lenovo\ZOOM\TpScrex.exe (Lenovo Group Limited)
PRC - C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Administrator\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Program Files\Alwil Software\Avast5\snxhk.dll (AVAST Software)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
MOD - C:\Program Files\BillP Studios\WinPatrol\patrolpro.dll (BillP Studios)


========== Win32 Services (SafeList) ==========

SRV - (avast! Antivirus) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (ACDaemon) -- C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (GoogleDesktopManager) -- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (ADVService) -- C:\Program Files\Amazon\Amazon Unbox Video\ADVWindowsClientService.exe (Amazon.com)
SRV - (Multi-user Cleanup Service) -- C:\Program Files\IBM\Lotus\Notes\ntmulti.exe (IBM Corp)
SRV - (BcmSqlStartupSvc) -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe (Microsoft Corporation)
SRV - (EPSON_EB_RPCV4_01) EPSON V5 Service4(01) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE (SEIKO EPSON CORPORATION)
SRV - (IBMPMSVC) -- C:\WINDOWS\system32\ibmpmsvc.exe (Lenovo)
SRV - (EvtEng) Intel(R) -- C:\Program Files\Intel\Wireless\Bin\EvtEng.exe (Intel Corporation)
SRV - (S24EventMonitor) Intel(R) -- C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe (Intel Corporation )
SRV - (RegSrvc) Intel(R) -- C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe (Intel Corporation)
SRV - (TPHDEXLGSVC) -- C:\WINDOWS\system32\TPHDEXLG.exe (Lenovo.)
SRV - (IPSSVC) -- C:\WINDOWS\system32\IPSSVC.EXE (Lenovo Group Limited)
SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) -- C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE (SEIKO EPSON CORPORATION)
SRV - (IviRegMgr) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
SRV - (EpsonBidirectionalService) -- C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe (SEIKO EPSON CORPORATION)
SRV - (SUService) -- c:\Program Files\Lenovo\System Update\SUService.exe ( )
SRV - (TVT Scheduler) -- c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe (Lenovo Group Limited)
SRV - (MgiSvr) -- C:\Program Files\ArcSoft\Magic-i 3\uMgiSvr.exe (ArcSoft, Inc.)


========== Driver Services (SafeList) ==========

DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (usbaudio) USB Audio Driver (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (amdagp) -- C:\WINDOWS\system32\DRIVERS\amdagp.sys (Advanced Micro Devices, Inc.)
DRV - (sisagp) -- C:\WINDOWS\system32\DRIVERS\sisagp.sys (Silicon Integrated Systems Corporation)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (ARCSOFTVIRTUALCAPTURE) -- C:\WINDOWS\system32\drivers\ArcSoftVirtualCapture.sys (ArcSoft, Inc.)
DRV - (TPPWRIF) -- C:\WINDOWS\system32\drivers\TPPWRIF.SYS ()
DRV - (IBMPMDRV) -- C:\WINDOWS\system32\drivers\ibmpmdrv.sys (Lenovo.)
DRV - (b57w2k) -- C:\WINDOWS\system32\drivers\b57xp32.sys (Broadcom Corporation)
DRV - (NETw4x32) Intel(R) -- C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation)
DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\CHDAudN.sys (Conexant Systems Inc.)
DRV - (TSMAPIP) -- C:\WINDOWS\system32\drivers\TSMAPIP.SYS ()
DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (rismxdp) -- C:\WINDOWS\system32\drivers\rixdptsk.sys (REDC)
DRV - (ApfiltrService) -- C:\WINDOWS\system32\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV - (Shockprf) -- C:\WINDOWS\System32\DRIVERS\Apsx86.sys (Lenovo.)
DRV - (TPDIGIMN) -- C:\WINDOWS\System32\DRIVERS\ApsHM86.sys (Lenovo.)
DRV - (ialm) -- C:\WINDOWS\system32\drivers\igxpmp32.sys (Intel Corporation)
DRV - (rimmptsk) -- C:\WINDOWS\system32\drivers\rimmptsk.sys (REDC)
DRV - (iaStor) -- C:\WINDOWS\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (rimsptsk) -- C:\WINDOWS\system32\drivers\rimsptsk.sys (REDC)
DRV - (Afc) -- C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (PROCDD) -- C:\WINDOWS\system32\drivers\PROCDD.SYS (Lenovo Group Limited)
DRV - (TPHKDRV) -- C:\WINDOWS\system32\drivers\TPHKDRV.sys (IBM Corporation)
DRV - (psadd) -- C:\WINDOWS\system32\drivers\psadd.sys (Lenovo (United States) Inc.)
DRV - (PMEM ) -- C:\WINDOWS\system32\drivers\pmemnt.sys (Microsoft Corporation)
DRV - (DRVMCDB) -- C:\WINDOWS\System32\Drivers\DRVMCDB.SYS (Sonic Solutions)
DRV - (DLAUDFAM) -- C:\WINDOWS\system32\DLA\DLAUDFAM.SYS (Sonic Solutions)
DRV - (DLAUDF_M) -- C:\WINDOWS\system32\DLA\DLAUDF_M.SYS (Sonic Solutions)
DRV - (DLAIFS_M) -- C:\WINDOWS\system32\DLA\DLAIFS_M.SYS (Sonic Solutions)
DRV - (DLABOIOM) -- C:\WINDOWS\system32\DLA\DLABOIOM.SYS (Sonic Solutions)
DRV - (DLAOPIOM) -- C:\WINDOWS\system32\DLA\DLAOPIOM.SYS (Sonic Solutions)
DRV - (DLAPoolM) -- C:\WINDOWS\system32\DLA\DLAPoolM.SYS (Sonic Solutions)
DRV - (DLADResN) -- C:\WINDOWS\system32\DLA\DLADResN.SYS (Sonic Solutions)
DRV - (DLACDBHM) -- C:\WINDOWS\system32\drivers\DLACDBHM.SYS (Sonic Solutions)
DRV - (DLARTL_N) -- C:\WINDOWS\system32\drivers\DLARTL_N.SYS (Sonic Solutions)
DRV - (DRVNDDM) -- C:\WINDOWS\system32\drivers\DRVNDDM.SYS (Sonic Solutions)
DRV - (atmeltpm) -- C:\WINDOWS\system32\drivers\atmeltpm.sys (Atmel, Inc.)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (Iviaspi) -- C:\WINDOWS\system32\drivers\iviaspi.sys (InterVideo, Inc.)
DRV - (Sparrow) -- C:\WINDOWS\system32\DRIVERS\sparrow.sys (Adaptec, Inc.)
DRV - (sym_u3) -- C:\WINDOWS\system32\DRIVERS\sym_u3.sys (LSI Logic)
DRV - (sym_hi) -- C:\WINDOWS\system32\DRIVERS\sym_hi.sys (LSI Logic)
DRV - (symc8xx) -- C:\WINDOWS\system32\DRIVERS\symc8xx.sys (LSI Logic)
DRV - (symc810) -- C:\WINDOWS\system32\DRIVERS\symc810.sys (Symbios Logic Inc.)
DRV - (ultra) -- C:\WINDOWS\system32\DRIVERS\ultra.sys (Promise Technology, Inc.)
DRV - (ql12160) -- C:\WINDOWS\system32\DRIVERS\ql12160.sys (QLogic Corporation)
DRV - (ql1080) -- C:\WINDOWS\system32\DRIVERS\ql1080.sys (QLogic Corporation)
DRV - (ql1280) -- C:\WINDOWS\system32\DRIVERS\ql1280.sys (QLogic Corporation)
DRV - (dac2w2k) -- C:\WINDOWS\system32\DRIVERS\dac2w2k.sys (Mylex Corporation)
DRV - (mraid35x) -- C:\WINDOWS\system32\DRIVERS\mraid35x.sys (American Megatrends Inc.)
DRV - (asc) -- C:\WINDOWS\system32\DRIVERS\asc.sys (Advanced System Products, Inc.)
DRV - (asc3550) -- C:\WINDOWS\system32\DRIVERS\asc3550.sys (Advanced System Products, Inc.)
DRV - (AliIde) -- C:\WINDOWS\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (CmdIde) -- C:\WINDOWS\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (ac97intc) Intel(r) 82801 Audio Driver Install Service (WDM) -- C:\WINDOWS\system32\drivers\ac97intc.sys (Intel Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>
IE - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=localhost:7171

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://m.www.yahoo.com/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=localhost:7171

========== FireFox ==========


FF - HKLM\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010/03/11 10:56:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/01/01 17:41:00 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/01/01 17:41:00 | 000,000,000 | ---D | M]

[2009/12/05 15:49:16 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions
[2009/12/05 15:49:16 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Extensions\uploadr@flickr.com
[2011/02/10 01:10:01 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pk0un51g.default\extensions
[2009/07/11 05:51:01 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pk0un51g.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/12/29 16:34:24 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pk0un51g.default\extensions\{C2DCA7EB-22D2-4FD2-86A9-F99FCC8122BB}
[2010/01/16 07:59:02 | 000,000,000 | ---D | M] (Cooliris) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pk0un51g.default\extensions\piclens@cooliris.com
[2010/01/16 07:59:02 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pk0un51g.default\extensions\piclens@cooliris.com-trash
[2010/11/25 09:54:47 | 000,000,000 | ---D | M] ("Ask Toolbar") -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pk0un51g.default\extensions\toolbar@ask.com
[2011/01/08 13:06:56 | 000,000,000 | ---D | M] (We-Care Reminder) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pk0un51g.default\extensions\wecarereminder@bryan
[2011/02/10 01:10:01 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/06/12 11:41:49 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/06/12 11:41:30 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2007/07/26 12:05:16 | 000,001,329 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\crawlersrch.xml
[2009/07/28 13:35:01 | 000,003,700 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.png
[2009/07/28 13:35:01 | 000,001,963 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\fast.xml

O1 HOSTS File: ([2009/05/17 18:48:30 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (DriveLetterAccess) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\DLA\DLASHX_W.DLL (Sonic Solutions)
O2 - BHO: (Yontoo Layers) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Client for Internet Explorer\YontooIEClient.dll (Yontoo Technology, Inc.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No CLSID value found.
O4 - HKLM..\Run: [AMSG] C:\Program Files\ThinkVantage\AMSG\Amsg.exe (LENOVO)
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [AwaySch] C:\Program Files\Lenovo\AwayTask\AwaySch.EXE (Lenovo Group Limited)
O4 - HKLM..\Run: [BLOG] C:\Program Files\ThinkPad\Utilities\BATLOGEX.DLL ()
O4 - HKLM..\Run: [BMISR] C:\Program Files\HP\Button Manager\BM.exe ()
O4 - HKLM..\Run: [BSDAppUpdater] C:\Program Files\Common Files\BSD\AppUpdater\BSDChecker.exe (Bootstrap Software Development)
O4 - HKLM..\Run: [CarboniteSetupLite] C:\Program Files\Carbonite\CarbonitePreinstaller.exe (Carbonite, Inc.)
O4 - HKLM..\Run: [DLA] C:\WINDOWS\system32\DLA\DLACTRLW.EXE (Sonic Solutions)
O4 - HKLM..\Run: [EEventManager] C:\Program Files\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [EZEJMNAP] C:\Program Files\ThinkPad\Utilities\EZEJMNAP.EXE (Lenovo Group Ltd.)
O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe (Google)
O4 - HKLM..\Run: [LPManager] C:\Program Files\ThinkVantage\PrdCtr\LPMGR.EXE (Lenovo Group Limited)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Nikon Transfer Monitor] C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
O4 - HKLM..\Run: [PWRMGRTR] C:\Program Files\ThinkPad\Utilities\PWRMGRTR.DLL (Lenovo Group Limited)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [TPFNF7] C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe (Lenovo Group Limited)
O4 - HKLM..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe (Lenovo Group Limited)
O4 - HKLM..\Run: [TpShocks] C:\WINDOWS\System32\TpShocks.exe (Lenovo.)
O4 - HKLM..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe (Lenovo Group Limited)
O4 - HKLM..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe (BillP Studios)
O4 - HKCU..\Run: [CompanionLink] c:\program files\companionlink\companionlink.exe (CompanionLink Software, Inc.)
O4 - HKCU..\Run: [EPSON WorkForce 610 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFJA.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [WorkForce 610(Network)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIFJA.EXE (SEIKO EPSON CORPORATION)
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\Documents To Go Desktop.lnk = C:\Program Files\Documents To Go Desktop\DocsToGoDesktop.exe (DataViz, Inc.)
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\EvernoteTray.lnk = C:\Program Files\Evernote\Evernote\EvernoteTray.exe (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O4 - Startup: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\WePrint Server.lnk = C:\WePrint\WePrint Server.exe (EuroSmartz Ltd)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Evernote Clipper.lnk = C:\WINDOWS\Installer\{F761359C-9CED-45AE-9A51-9D6605CD55C4}\Evernote.ico ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Evernote 4.0 - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @C:\Program Files\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: //@install.mar@/ ([]msni in My Computer)
O15 - HKCU\..Trusted Domains: //@mail.mar@/ ([]msni in Local intranet)
O15 - HKCU\..Trusted Domains: yahoo.com ([www] https in Trusted sites)
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} http://upload.facebook.com/controls/200 ... oader5.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} http://ak.exe.imgfarm.com/images/nocach ... .0.1.1.cab (Reg Error: Key error.)
O16 - DPF: {2DAD3559-2923-4935-AD49-B673D2539944} https://www-307.ibm.com/pc/support/acce ... /AcpIR.cab (IASRunner Class)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/200 ... ader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {895D1291-D5BD-4982-BA84-AD11D29C1D6A} http://community.weightwatchers.com/Scr ... oader6.cab (Image Uploader Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O20 - Winlogon\Notify\tpfnf2: DllName - C:\Program Files\Lenovo\HOTKEY\notifyf2.dll - C:\Program Files\Lenovo\HOTKEY\notifyf2.dll ()
O20 - Winlogon\Notify\tphotkey: DllName - C:\Program Files\Lenovo\HOTKEY\tphklock.dll - C:\Program Files\Lenovo\HOTKEY\tphklock.dll ()
O24 - Desktop WallPaper: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/04/29 23:13:35 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2008/04/01 15:12:10 | 000,000,071 | -H-- | M] () - G:\autorun.inf -- [ FAT32 ]
O32 - AutoRun File - [2008/07/12 16:09:12 | 000,000,000 | ---D | M] - G:\autorun -- [ FAT32 ]
O33 - MountPoints2\{7eb35f5e-2e2f-11de-ace7-001558c9ef11}\Shell\AutoRun\command - "" = H:\setupSNK.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: qhmpdtgj - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

========== Files/Folders - Created Within 30 Days ==========

[2011/02/10 10:09:46 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2011/02/09 14:13:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Application Data\smkits
[2011/02/05 16:56:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\iTunes
[2011/02/05 16:49:56 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2011/01/23 10:35:49 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2010/12/04 09:58:59 | 000,775,696 | ---- | C] (MyWebSearch.com) -- C:\Program Files\Uninstall Fun Web Products.dll
[2008/09/12 23:28:59 | 000,167,936 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnp2uvc.dll
[2008/09/12 23:28:59 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnp2uvc.dll
[2007/12/14 16:09:02 | 000,217,088 | ---- | C] ( ) -- C:\Documents and Settings\Administrator\Local Settings\Application Data\Interop.Microsoft.Office.Core.dll
[2007/08/09 15:50:38 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Administrator\Local Settings\Application Data\stdole.dll

========== Files - Modified Within 30 Days ==========

[2011/02/10 10:09:55 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Desktop\OTL.exe
[2011/02/10 09:15:21 | 000,002,349 | ---- | M] () -- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Evernote Clipper.lnk
[2011/02/10 09:14:52 | 000,000,294 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-3848440319-2639254245-2021335420-500.job
[2011/02/10 09:14:35 | 000,000,302 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-3848440319-2639254245-2021335420-500.job
[2011/02/10 09:14:24 | 000,000,316 | ---- | M] () -- C:\WINDOWS\tasks\PMTask.job
[2011/02/10 09:14:10 | 000,002,278 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/02/10 09:14:06 | 000,025,289 | ---- | M] () -- C:\WINDOWS\System32\PROCDB.INI
[2011/02/10 09:12:54 | 000,000,480 | ---- | M] () -- C:\WINDOWS\System32\IPSCtrl.INI
[2011/02/10 09:12:35 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/10 09:12:29 | 2137,305,088 | -HS- | M] () -- C:\hiberfil.sys
[2011/02/10 07:28:13 | 000,270,984 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011/02/10 03:10:07 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011/02/08 11:02:32 | 000,000,020 | -H-- | M] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2011/02/06 15:49:06 | 000,012,292 | -H-- | M] () -- C:\Documents and Settings\All Users\Documents\.DS_Store
[2011/02/05 16:56:26 | 000,001,267 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/02/04 07:10:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/02/02 06:50:09 | 000,000,817 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\2011 Full Cal.lnk
[2011/01/31 06:42:25 | 000,000,020 | -H-- | M] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLdw.DAT
[2011/01/23 08:57:42 | 000,002,626 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2011/01/21 15:37:07 | 000,129,024 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/01/13 00:47:35 | 000,038,848 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2011/01/13 00:47:32 | 000,188,216 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2011/01/13 00:41:29 | 000,357,968 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2011/01/13 00:41:16 | 000,294,608 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2011/01/13 00:40:16 | 000,047,440 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2011/01/13 00:40:04 | 000,100,176 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon2.sys
[2011/01/13 00:39:50 | 000,094,544 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswmon.sys
[2011/01/13 00:37:30 | 000,023,632 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2011/01/13 00:37:11 | 000,029,392 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aavmker4.sys
[2011/01/13 00:37:09 | 000,017,744 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys

========== Files Created - No Company Name ==========

[2011/02/05 16:56:26 | 000,001,267 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2011/01/17 15:08:42 | 000,000,817 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\2011 Full Cal.lnk
[2010/09/14 21:23:19 | 000,000,664 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\d3d9caps.dat
[2010/09/02 10:25:46 | 000,735,224 | ---- | C] () -- C:\Documents and Settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
[2010/02/10 15:40:25 | 000,000,000 | ---- | C] () -- C:\WINDOWS\EEventManager.INI
[2010/02/10 10:59:15 | 000,000,097 | ---- | C] () -- C:\WINDOWS\System32\PICSDK.ini
[2010/02/10 10:57:33 | 000,000,100 | ---- | C] () -- C:\WINDOWS\EPWF610.ini
[2009/12/25 14:02:27 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ViewNX.INI
[2009/12/24 20:35:58 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\All Users\Application Data\Tables
[2009/12/24 20:35:58 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\Administrator\Application Data\Synth Pads
[2009/12/24 20:35:58 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLdw.DAT
[2009/12/24 20:34:17 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\All Users\Application Data\System Image Utility
[2009/12/24 20:34:17 | 000,000,268 | RH-- | C] () -- C:\Documents and Settings\Administrator\Application Data\Synth Basics
[2009/12/24 20:34:17 | 000,000,020 | -H-- | C] () -- C:\Documents and Settings\All Users\Application Data\PKP_DLdu.DAT
[2009/11/08 10:56:45 | 000,000,045 | ---- | C] () -- C:\WINDOWS\EPSP820.ini
[2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2009/06/26 07:40:11 | 000,000,112 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2009/06/14 20:48:47 | 000,013,028 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Comma Separated Values (DOS).CAL
[2009/04/19 21:16:48 | 000,002,870 | ---- | C] () -- C:\Documents and Settings\NetworkService\Local Settings\Application Data\54514791-D97A-4B22-A190-FAED7BA83A99.txt
[2009/04/19 17:31:52 | 000,004,116 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\54514791-D97A-4B22-A190-FAED7BA83A99.txt
[2009/03/09 05:06:30 | 000,022,820 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Comma Separated Values (Windows).ADR
[2009/03/08 16:59:55 | 000,000,651 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2008/12/24 11:20:48 | 000,129,024 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/09/20 11:00:28 | 000,022,461 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Tab Separated Values (Windows).ADR
[2008/09/20 10:17:55 | 000,004,080 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\contacts.csv.314655921.xml
[2008/09/15 21:26:56 | 000,003,157 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\Cal 091508 yahoo_ab.csv.74204937.xml
[2008/09/15 21:26:54 | 000,001,007 | ---- | C] () -- C:\Documents and Settings\Administrator\Application Data\BCMMappings.xml
[2008/09/12 23:39:20 | 000,000,126 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008/09/12 23:37:28 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2008/09/12 23:37:28 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2008/09/12 23:37:28 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2008/09/12 23:37:28 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2008/09/12 23:37:28 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2008/09/12 23:37:28 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2008/09/12 23:31:36 | 000,701,840 | ---- | C] () -- C:\WINDOWS\System32\igmedkrn.dll
[2008/09/12 23:31:36 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4785.dll
[2008/09/12 23:29:45 | 000,012,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\TSMAPIP.SYS
[2008/09/12 23:29:38 | 000,004,442 | ---- | C] () -- C:\WINDOWS\System32\drivers\TPPWRIF.SYS
[2008/09/12 23:29:00 | 000,015,497 | ---- | C] () -- C:\WINDOWS\snp2uvc.ini
[2008/09/12 23:28:59 | 009,598,080 | ---- | C] () -- C:\WINDOWS\System32\drivers\snp2uvc.sys
[2008/09/12 23:16:38 | 000,016,480 | ---- | C] () -- C:\WINDOWS\System32\rixdicon.dll
[2007/09/27 09:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 09:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 09:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2007/03/02 04:15:36 | 000,025,289 | ---- | C] () -- C:\WINDOWS\System32\PROCDB.INI
[2007/03/02 04:15:25 | 000,000,480 | ---- | C] () -- C:\WINDOWS\System32\IPSCtrl.INI
[2007/01/16 07:12:12 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2006/09/05 13:20:36 | 000,079,400 | ---- | C] () -- C:\WINDOWS\System32\DEVMAN.DLL
[2006/04/29 23:31:51 | 000,004,670 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2006/04/29 23:22:10 | 000,000,799 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2006/04/29 16:04:28 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

========== LOP Check ==========

[2010/04/14 07:32:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\BSD
[2010/06/28 13:47:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\CompanionLink
[2010/07/05 13:07:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\DocumentsToGoDesktop
[2010/11/13 11:14:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Epson
[2009/12/05 15:49:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Flickr
[2011/02/02 07:45:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\FrostWire
[2010/09/25 17:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\GlarySoft
[2010/05/12 13:27:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\HandBrake
[2009/01/04 20:10:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\HotSync
[2009/07/27 11:59:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\iLike
[2009/08/22 15:37:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\InterVideo
[2009/01/04 21:44:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Leadertech
[2009/05/03 09:52:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Lenovo
[2010/06/07 06:00:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\LimeWire
[2010/05/12 14:07:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\MPEG Streamclip
[2009/05/03 11:47:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\MSNInstaller
[2010/04/20 10:55:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Nikon
[2011/01/08 12:57:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\OpenCandy
[2011/02/09 14:13:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\smkits
[2010/06/25 14:02:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\TuneUp Software
[2010/12/08 07:44:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Uniblue
[2008/09/30 10:11:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Windows Desktop Search
[2008/10/01 20:03:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\Windows Search
[2010/06/02 10:00:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\WinPatrol
[2009/01/19 05:24:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Application Data\XCPCSync.OEM
[2010/07/13 10:25:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Alwil Software
[2010/02/21 16:43:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Amazon
[2009/12/24 20:34:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ambience
[2009/12/24 20:35:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Audio Units
[2010/04/14 07:32:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\BSD
[2009/12/24 20:35:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EnterNHelp
[2010/02/10 11:33:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\EPSON
[2009/01/04 21:41:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\HotSync
[2009/04/20 20:07:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Lenovo
[2008/10/25 19:48:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Lotus
[2010/04/14 07:32:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MediaWidget
[2010/01/16 17:20:47 | 000,000,000 | --SD | M] -- C:\Documents and Settings\All Users\Application Data\Memeo
[2009/12/24 20:35:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Nikon
[2010/06/28 09:17:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2008/09/13 12:17:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC-Doctor
[2009/08/21 19:16:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tarma Installer
[2010/07/02 07:06:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software
[2010/06/28 09:17:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\UAB
[2009/12/24 20:35:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Ultima_T15
[2011/01/08 12:58:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WeCareReminder
[2010/02/11 11:49:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\WePrint
[2009/03/12 04:22:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
[2010/04/01 08:10:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/09/09 19:32:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/04/09 04:18:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2010/06/25 14:02:07 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2011/02/10 09:14:24 | 000,000,316 | ---- | M] () -- C:\WINDOWS\Tasks\PMTask.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.* >
[2009/01/28 21:42:06 | 000,006,835 | ---- | M] () -- C:\ads_err.dbf
[2007/03/08 06:54:26 | 099,403,776 | ---- | M] () -- C:\AUDITPE.ISO
[2006/04/29 23:13:35 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2008/09/12 23:44:08 | 000,000,210 | ---- | M] () -- C:\Boot.bak
[2010/06/03 09:10:50 | 000,000,281 | RHS- | M] () -- C:\boot.ini
[2004/08/03 22:00:00 | 000,260,272 | ---- | M] () -- C:\cmldr
[2006/04/29 23:13:35 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2011/02/10 09:30:25 | 000,000,192 | ---- | M] () -- C:\debug.log
[2008/12/28 12:53:25 | 000,002,494 | ---- | M] () -- C:\debug_KADECO_2008_12_28@12_47_20.log
[2008/12/28 13:15:43 | 000,000,530 | ---- | M] () -- C:\debug_KADECO_2008_12_28@13_05_50.log
[2008/12/28 15:53:00 | 000,049,573 | ---- | M] () -- C:\debug_KADECO_2008_12_28@13_16_20.log
[2008/12/29 17:32:16 | 000,000,312 | ---- | M] () -- C:\debug_KADECO_2008_12_28@18_44_11.log
[2009/01/01 09:53:51 | 000,010,283 | ---- | M] () -- C:\debug_KADECO_2008_12_30@08_39_56.log
[2009/01/04 08:27:18 | 000,006,559 | ---- | M] () -- C:\debug_KADECO_2009_01_02@17_22_20.log
[2009/01/04 21:39:13 | 000,026,515 | ---- | M] () -- C:\debug_KADECO_2009_01_04@18_22_56.log
[2009/01/12 05:33:24 | 000,007,581 | ---- | M] () -- C:\debug_KADECO_2009_01_04@21_45_55.log
[2009/01/17 16:23:48 | 000,003,573 | ---- | M] () -- C:\debug_KADECO_2009_01_17@16_17_28.log
[2009/01/17 18:55:15 | 000,036,103 | ---- | M] () -- C:\debug_KADECO_2009_01_17@16_24_07.log
[2009/01/19 16:16:51 | 000,000,316 | ---- | M] () -- C:\debug_KADECO_2009_01_19@16_12_37.log
[2009/01/21 21:51:10 | 000,001,326 | ---- | M] () -- C:\debug_KADECO_2009_01_21@21_28_56.log
[2009/01/24 10:49:54 | 000,001,503 | ---- | M] () -- C:\debug_KADECO_2009_01_21@21_55_48.log
[2009/01/24 11:21:02 | 000,001,970 | ---- | M] () -- C:\debug_KADECO_2009_01_24@11_06_45.log
[2009/01/31 08:35:09 | 000,012,996 | ---- | M] () -- C:\debug_KADECO_2009_01_30@05_56_36.log
[2009/02/01 21:22:35 | 000,023,870 | ---- | M] () -- C:\debug_KADECO_2009_01_31@08_35_10.log
[2009/02/03 05:36:57 | 000,042,842 | ---- | M] () -- C:\debug_KADECO_2009_02_01@21_22_39.log
[2009/02/03 06:28:02 | 000,009,599 | ---- | M] () -- C:\debug_KADECO_2009_02_03@05_42_43.log
[2009/02/03 21:47:25 | 000,078,126 | ---- | M] () -- C:\debug_KADECO_2009_02_03@07_26_47.log
[2009/02/03 22:05:49 | 000,003,083 | ---- | M] () -- C:\debug_KADECO_2009_02_03@21_54_31.log
[2009/02/03 22:30:30 | 000,015,537 | ---- | M] () -- C:\debug_KADECO_2009_02_03@22_05_56.log
[2009/02/05 20:30:06 | 000,105,212 | ---- | M] () -- C:\debug_KADECO_2009_02_04@19_58_16.log
[2009/02/05 20:43:32 | 000,007,876 | ---- | M] () -- C:\debug_KADECO_2009_02_05@20_30_08.log
[2009/02/05 22:25:47 | 000,023,532 | ---- | M] () -- C:\debug_KADECO_2009_02_05@20_43_33.log
[2009/02/12 03:13:42 | 000,482,831 | ---- | M] () -- C:\debug_KADECO_2009_02_08@13_26_16.log
[2009/02/18 05:16:55 | 001,408,586 | ---- | M] () -- C:\debug_KADECO_2009_02_12@06_02_58.log
[2009/02/24 05:06:37 | 000,673,580 | ---- | M] () -- C:\debug_KADECO_2009_02_21@12_39_28.log
[2009/02/24 05:18:12 | 000,006,346 | ---- | M] () -- C:\debug_KADECO_2009_02_24@05_16_17.log
[2009/03/01 17:08:31 | 000,264,573 | ---- | M] () -- C:\debug_KADECO_2009_02_28@16_23_05.log
[2009/03/04 20:47:32 | 000,800,221 | ---- | M] () -- C:\debug_KADECO_2009_03_01@18_05_37.log
[2009/03/08 09:05:18 | 001,550,724 | ---- | M] () -- C:\debug_KADECO_2009_03_07@12_23_12.log
[2009/03/08 10:48:39 | 000,033,756 | ---- | M] () -- C:\debug_KADECO_2009_03_08@11_37_16.log
[2009/03/08 17:04:45 | 000,692,427 | ---- | M] () -- C:\debug_KADECO_2009_03_08@12_01_34.log
[2009/03/09 05:45:20 | 000,066,656 | ---- | M] () -- C:\debug_KADECO_2009_03_08@19_27_36.log
[2009/03/13 20:56:48 | 000,053,642 | ---- | M] () -- C:\debug_KADECO_2009_03_12@05_50_46.log
[2009/03/15 12:07:17 | 000,290,128 | ---- | M] () -- C:\debug_KADECO_2009_03_14@12_44_54.log
[2009/03/22 18:45:14 | 005,321,503 | ---- | M] () -- C:\debug_KADECO_2009_03_15@14_42_56.log
[2009/03/23 05:00:04 | 000,011,376 | ---- | M] () -- C:\debug_KADECO_2009_03_23@05_53_50.log
[2009/03/29 21:14:27 | 007,542,256 | ---- | M] () -- C:\debug_KADECO_2009_03_23@20_33_29.log
[2009/04/02 08:20:08 | 000,057,989 | ---- | M] () -- C:\debug_KADECO_2009_04_01@09_48_45.log
[2009/04/02 09:38:19 | 002,422,139 | ---- | M] () -- C:\debug_KADECO_2009_04_02@10_38_00.log
[2009/04/06 11:53:41 | 002,722,597 | ---- | M] () -- C:\debug_KADECO_2009_04_04@15_47_26.log
[2009/04/09 04:25:57 | 000,024,556 | ---- | M] () -- C:\debug_KADECO_2009_04_09@05_23_43.log
[2009/04/15 02:11:26 | 008,764,817 | ---- | M] () -- C:\debug_KADECO_2009_04_09@05_30_35.log
[2009/04/15 17:44:19 | 000,565,455 | ---- | M] () -- C:\debug_KADECO_2009_04_15@18_44_01.log
[2009/04/19 12:47:48 | 000,305,936 | ---- | M] () -- C:\debug_KADECO_2009_04_19@10_25_08.log
[2009/04/19 15:48:10 | 000,247,984 | ---- | M] () -- C:\debug_KADECO_2009_04_19@14_07_15.log
[2009/04/19 17:32:06 | 000,158,934 | ---- | M] () -- C:\debug_KADECO_2009_04_19@16_48_12.log
[2009/04/21 05:09:44 | 000,038,498 | ---- | M] () -- C:\debug_KADECO_2009_04_21@05_34_27.log
[2009/04/21 19:24:11 | 000,189,553 | ---- | M] () -- C:\debug_KADECO_2009_04_21@12_37_50.log
[2009/04/23 13:04:22 | 000,013,300 | ---- | M] () -- C:\debug_KADECO_2009_04_23@14_00_29.log
[2009/04/26 19:19:46 | 000,202,185 | ---- | M] () -- C:\debug_KADECO_2009_04_26@18_13_27.log
[2009/04/27 05:21:11 | 000,048,334 | ---- | M] () -- C:\debug_KADECO_2009_04_27@05_22_17.log
[2009/05/01 16:53:14 | 000,061,844 | ---- | M] () -- C:\debug_KADECO_2009_05_01@17_23_31.log
[2009/05/02 16:02:57 | 000,076,568 | ---- | M] () -- C:\debug_KADECO_2009_05_02@16_06_05.log
[2009/05/03 09:48:59 | 000,017,141 | ---- | M] () -- C:\debug_KADECO_2009_05_03@10_46_58.log
[2009/05/03 10:53:19 | 000,017,752 | ---- | M] () -- C:\debug_KADECO_2009_05_03@11_49_05.log
[2009/05/03 13:38:21 | 000,098,309 | ---- | M] () -- C:\debug_KADECO_2009_05_03@13_32_30.log
[2009/05/03 19:34:03 | 000,136,867 | ---- | M] () -- C:\debug_KADECO_2009_05_03@19_07_21.log
[2009/05/06 05:31:05 | 000,050,582 | ---- | M] () -- C:\debug_KADECO_2009_05_06@05_30_35.log
[2009/05/07 05:29:32 | 000,014,427 | ---- | M] () -- C:\debug_KADECO_2009_05_07@06_26_02.log
[2009/05/08 17:33:28 | 003,778,929 | ---- | M] () -- C:\debug_KADECO_2009_05_08@18_33_11.log
[2009/05/11 05:20:25 | 000,016,524 | ---- | M] () -- C:\debug_KADECO_2009_05_11@06_10_59.log
[2009/05/12 19:37:50 | 000,037,514 | ---- | M] () -- C:\debug_KADECO_2009_05_12@20_21_43.log
[2009/05/12 20:24:18 | 000,046,289 | ---- | M] () -- C:\debug_KADECO_2009_05_12@20_57_32.log
[2009/05/13 05:38:02 | 000,046,905 | ---- | M] () -- C:\debug_KADECO_2009_05_13@05_36_31.log
[2009/05/15 19:38:12 | 001,458,931 | ---- | M] () -- C:\debug_KADECO_2009_05_14@22_28_13.log
[2009/05/15 21:05:43 | 000,097,040 | ---- | M] () -- C:\debug_KADECO_2009_05_15@21_07_15.log
[2009/05/16 12:00:21 | 000,805,992 | ---- | M] () -- C:\debug_KADECO_2009_05_15@22_05_47.log
[2009/05/16 12:30:25 | 000,031,388 | ---- | M] () -- C:\debug_KADECO_2009_05_16@13_14_58.log
[2009/05/16 12:42:18 | 000,023,986 | ---- | M] () -- C:\debug_KADECO_2009_05_16@13_34_54.log
[2009/05/16 13:17:24 | 000,028,165 | ---- | M] () -- C:\debug_KADECO_2009_05_16@14_05_57.log
[2009/05/17 17:06:34 | 000,399,227 | ---- | M] () -- C:\debug_KADECO_2009_05_17@13_35_01.log
[2009/05/18 05:38:06 | 000,079,505 | ---- | M] () -- C:\debug_KADECO_2009_05_17@20_53_24.log
[2009/05/18 21:49:09 | 000,016,397 | ---- | M] () -- C:\debug_KADECO_2009_05_18@22_38_32.log
[2009/05/21 20:28:56 | 001,889,472 | ---- | M] () -- C:\debug_KADECO_2009_05_20@18_05_24.log
[2009/05/22 05:07:45 | 000,023,033 | ---- | M] () -- C:\debug_KADECO_2009_05_22@05_46_57.log
[2009/05/26 06:59:26 | 004,721,706 | ---- | M] () -- C:\debug_KADECO_2009_05_23@08_06_02.log
[2009/05/27 05:24:03 | 000,018,973 | ---- | M] () -- C:\debug_KADECO_2009_05_27@06_16_51.log
[2009/06/04 04:34:35 | 011,116,010 | ---- | M] () -- C:\debug_KADECO_2009_05_28@05_56_46.log
[2009/06/05 18:05:56 | 001,106,036 | ---- | M] () -- C:\debug_KADECO_2009_06_05@04_49_53.log
[2009/06/07 00:07:42 | 000,069,615 | ---- | M] () -- C:\debug_KADECO_2009_06_06@23_33_11.log
[2009/06/07 14:07:41 | 000,313,000 | ---- | M] () -- C:\debug_KADECO_2009_06_07@11_54_31.log
[2009/06/07 22:03:41 | 000,116,808 | ---- | M] () -- C:\debug_KADECO_2009_06_07@21_15_05.log
[2009/06/08 05:20:21 | 000,269,265 | ---- | M] () -- C:\debug_KADECO_2009_06_07@23_06_43.log
[2009/06/09 05:11:31 | 001,572,581 | ---- | M] () -- C:\debug_KADECO_2009_06_08@06_21_35.log
[2009/06/14 21:06:02 | 000,527,565 | ---- | M] () -- C:\debug_KADECO_2009_06_14@16_24_26.log
[2009/06/15 05:28:46 | 000,043,594 | ---- | M] () -- C:\debug_KADECO_2009_06_15@05_38_03.log
[2009/06/16 23:00:35 | 001,035,255 | ---- | M] () -- C:\debug_KADECO_2009_06_16@11_07_14.log
[2009/06/17 12:09:53 | 000,233,162 | ---- | M] () -- C:\debug_KADECO_2009_06_17@10_35_28.log
[2009/06/17 12:56:23 | 000,053,684 | ---- | M] () -- C:\debug_KADECO_2009_06_17@13_28_30.log
[2009/06/17 19:12:40 | 000,117,360 | ---- | M] () -- C:\debug_KADECO_2009_06_17@19_13_09.log
[2009/06/18 07:38:17 | 000,018,962 | ---- | M] () -- C:\debug_KADECO_2009_06_18@08_33_02.log
[2009/06/18 07:43:46 | 000,018,275 | ---- | M] () -- C:\debug_KADECO_2009_06_18@08_40_20.log
[2009/06/18 19:08:45 | 000,108,043 | ---- | M] () -- C:\debug_KADECO_2009_06_18@19_04_34.log
[2009/06/22 08:22:23 | 004,752,024 | ---- | M] () -- C:\debug_KADECO_2009_06_19@09_21_16.log
[2009/06/23 17:29:54 | 001,312,807 | ---- | M] () -- C:\debug_KADECO_2009_06_22@10_09_58.log
[2009/06/23 17:32:36 | 000,013,299 | ---- | M] () -- C:\debug_KADECO_2009_06_23@18_31_19.log
[2009/06/25 16:13:06 | 000,787,556 | ---- | M] () -- C:\debug_KADECO_2009_06_25@08_29_27.log
[2009/06/29 07:13:26 | 004,158,198 | ---- | M] () -- C:\debug_KADECO_2009_06_26@08_41_22.log
[2009/07/02 07:56:15 | 004,493,983 | ---- | M] () -- C:\debug_KADECO_2009_06_29@12_14_24.log
[2009/07/02 17:58:27 | 000,101,478 | ---- | M] () -- C:\debug_KADECO_2009_07_02@17_53_41.log
[2009/07/05 16:42:58 | 002,937,328 | ---- | M] () -- C:\debug_KADECO_2009_07_03@09_03_27.log
[2009/07/06 13:41:24 | 000,024,593 | ---- | M] () -- C:\debug_KADECO_2009_07_06@14_34_45.log
[2009/07/09 11:15:15 | 003,600,927 | ---- | M] () -- C:\debug_KADECO_2009_07_07@06_58_28.log
[2009/07/10 09:16:11 | 001,383,983 | ---- | M] () -- C:\debug_KADECO_2009_07_09@12_55_11.log
[2009/07/11 12:46:49 | 001,872,090 | ---- | M] () -- C:\debug_KADECO_2009_07_10@10_52_01.log
[2009/07/12 08:18:44 | 001,022,395 | ---- | M] () -- C:\debug_KADECO_2009_07_11@14_46_53.log
[2009/07/14 07:59:02 | 001,658,401 | ---- | M] () -- C:\debug_KADECO_2009_07_13@08_18_58.log
[2009/07/15 02:13:06 | 001,273,102 | ---- | M] () -- C:\debug_KADECO_2009_07_14@09_38_27.log
[2009/07/16 08:30:00 | 001,750,275 | ---- | M] () -- C:\debug_KADECO_2009_07_15@07_06_50.log
[2009/07/16 12:49:24 | 000,395,095 | ---- | M] () -- C:\debug_KADECO_2009_07_16@09_30_58.log
[2009/07/16 20:04:39 | 000,458,950 | ---- | M] () -- C:\debug_KADECO_2009_07_16@15_57_24.log
[2009/07/17 08:42:05 | 000,572,270 | ---- | M] () -- C:\debug_KADECO_2009_07_16@21_18_20.log
[2009/07/17 13:52:49 | 000,460,509 | ---- | M] () -- C:\debug_KADECO_2009_07_17@09_44_14.log
[2009/07/18 10:40:01 | 001,315,071 | ---- | M] () -- C:\debug_KADECO_2009_07_17@14_54_19.log
[2009/07/21 07:56:52 | 004,050,486 | ---- | M] () -- C:\debug_KADECO_2009_07_18@12_47_37.log
[2009/07/23 07:41:56 | 002,035,654 | ---- | M] () -- C:\debug_KADECO_2009_07_21@09_44_58.log
[2009/07/23 15:03:19 | 000,429,655 | ---- | M] () -- C:\debug_KADECO_2009_07_23@11_19_16.log
[2009/07/27 13:46:18 | 006,147,303 | ---- | M] () -- C:\debug_KADECO_2009_07_23@17_54_19.log
[2009/07/29 23:31:56 | 002,792,731 | ---- | M] () -- C:\debug_KADECO_2009_07_28@09_17_17.log
[2009/08/04 07:50:13 | 007,414,194 | ---- | M] () -- C:\debug_KADECO_2009_07_30@15_13_18.log
[2009/08/06 14:09:28 | 003,315,822 | ---- | M] () -- C:\debug_KADECO_2009_08_04@13_47_00.log
[2009/08/08 17:25:18 | 000,421,098 | ---- | M] () -- C:\debug_KADECO_2009_08_08@13_31_48.log
[2009/08/10 00:07:13 | 001,189,283 | ---- | M] () -- C:\debug_KADECO_2009_08_09@09_53_40.log
[2009/08/12 02:11:12 | 002,403,661 | ---- | M] () -- C:\debug_KADECO_2009_08_10@15_12_28.log
[2009/08/13 19:38:27 | 002,589,993 | ---- | M] () -- C:\debug_KADECO_2009_08_12@08_56_23.log
[2009/08/15 15:44:11 | 002,786,807 | ---- | M] () -- C:\debug_KADECO_2009_08_13@21_19_16.log
[2009/08/15 17:57:07 | 002,227,147 | ---- | M] () -- C:\debug_KADECO_2009_08_15@18_56_56.log
[2009/08/18 02:07:41 | 001,027,354 | ---- | M] () -- C:\debug_KADECO_2009_08_17@13_20_56.log
[2009/08/21 22:42:54 | 006,803,385 | ---- | M] () -- C:\debug_KADECO_2009_08_18@07_04_17.log
[2009/08/27 00:08:58 | 008,551,461 | ---- | M] () -- C:\debug_KADECO_2009_08_22@15_23_44.log
[2009/08/29 10:08:33 | 004,143,388 | ---- | M] () -- C:\debug_KADECO_2009_08_27@08_18_27.log
[2009/08/30 11:37:13 | 001,424,348 | ---- | M] () -- C:\debug_KADECO_2009_08_29@17_36_52.log
[2009/08/30 13:43:46 | 000,228,732 | ---- | M] () -- C:\debug_KADECO_2009_08_30@12_40_35.log
[2009/08/30 14:02:07 | 000,045,615 | ---- | M] () -- C:\debug_KADECO_2009_08_30@14_43_57.log
[2009/09/03 16:33:59 | 008,181,247 | ---- | M] () -- C:\debug_KADECO_2009_08_30@15_05_15.log
[2009/09/07 16:32:44 | 008,171,562 | ---- | M] () -- C:\debug_KADECO_2009_09_03@19_16_10.log
[2009/09/09 02:11:00 | 001,656,374 | ---- | M] () -- C:\debug_KADECO_2009_09_08@08_29_11.log
[2009/09/09 19:35:01 | 000,506,032 | ---- | M] () -- C:\debug_KADECO_2009_09_09@16_00_06.log
[2009/09/10 20:13:31 | 001,346,516 | ---- | M] () -- C:\debug_KADECO_2009_09_10@09_06_58.log
[2009/09/10 21:12:29 | 000,057,624 | ---- | M] () -- C:\debug_KADECO_2009_09_10@21_42_56.log
[2009/09/10 22:59:34 | 000,032,118 | ---- | M] () -- C:\debug_KADECO_2009_09_10@23_33_38.log
[2009/09/13 22:47:04 | 005,433,618 | ---- | M] () -- C:\debug_KADECO_2009_09_11@09_58_11.log
[2009/09/13 23:23:20 | 000,025,655 | ---- | M] () -- C:\debug_KADECO_2009_09_14@00_08_36.log
[2009/09/15 15:30:32 | 003,349,757 | ---- | M] () -- C:\debug_KADECO_2009_09_14@00_56_01.log
[2009/09/17 15:47:03 | 004,139,396 | ---- | M] () -- C:\debug_KADECO_2009_09_15@16_32_45.log
[2009/09/17 17:33:34 | 001,621,478 | ---- | M] () -- C:\debug_KADECO_2009_09_17@18_33_16.log
[2009/09/28 05:23:10 | 019,211,985 | ---- | M] () -- C:\debug_KADECO_2009_09_18@18_04_09.log
[2009/09/30 09:31:16 | 004,527,008 | ---- | M] () -- C:\debug_KADECO_2009_09_28@06_34_29.log
[2009/10/01 14:12:29 | 000,926,463 | ---- | M] () -- C:\debug_KADECO_2009_10_01@06_35_07.log
[2009/10/04 16:25:19 | 002,062,530 | ---- | M] () -- C:\debug_KADECO_2009_10_02@11_54_37.log
[2009/10/04 20:16:54 | 000,418,373 | ---- | M] () -- C:\debug_KADECO_2009_10_04@17_28_02.log
[2009/10/06 02:14:14 | 001,762,390 | ---- | M] () -- C:\debug_KADECO_2009_10_05@07_31_09.log
[2009/10/08 13:45:06 | 004,680,771 | ---- | M] () -- C:\debug_KADECO_2009_10_06@09_05_55.log
[2009/10/11 12:56:31 | 005,358,624 | ---- | M] () -- C:\debug_KADECO_2009_10_08@21_17_05.log
[2009/10/14 10:24:16 | 005,827,202 | ---- | M] () -- C:\debug_KADECO_2009_10_11@14_00_24.log
[2009/10/14 22:22:33 | 000,847,764 | ---- | M] () -- C:\debug_KADECO_2009_10_14@14_40_43.log
[2009/10/21 06:28:14 | 012,080,394 | ---- | M] () -- C:\debug_KADECO_2009_10_15@07_28_01.log
[2009/10/21 12:08:38 | 000,628,091 | ---- | M] () -- C:\debug_KADECO_2009_10_21@07_28_21.log
[2009/10/25 10:12:19 | 003,501,075 | ---- | M] () -- C:\debug_KADECO_2009_10_22@08_48_50.log
[2009/10/26 21:18:02 | 001,199,013 | ---- | M] () -- C:\debug_KADECO_2009_10_25@13_58_34.log
[2009/10/27 10:07:52 | 000,131,189 | ---- | M] () -- C:\debug_KADECO_2009_10_27@08_52_32.log
[2009/10/27 14:36:42 | 000,160,895 | ---- | M] () -- C:\debug_KADECO_2009_10_27@12_31_49.log
[2009/10/29 19:38:43 | 000,995,426 | ---- | M] () -- C:\debug_KADECO_2009_10_28@17_22_15.log
[2009/10/31 18:51:14 | 000,999,769 | ---- | M] () -- C:\debug_KADECO_2009_10_30@10_06_03.log
[2009/11/02 14:21:36 | 000,753,691 | ---- | M] () -- C:\debug_KADECO_2009_11_01@14_42_30.log
[2009/11/04 10:28:48 | 002,899,720 | ---- | M] () -- C:\debug_KADECO_2009_11_02@14_21_39.log
[2009/11/04 11:16:52 | 000,098,600 | ---- | M] () -- C:\debug_KADECO_2009_11_04@10_28_53.log
[2009/11/05 10:29:13 | 001,471,494 | ---- | M] () -- C:\debug_KADECO_2009_11_04@12_32_14.log
[2009/11/05 13:40:25 | 000,178,583 | ---- | M] () -- C:\debug_KADECO_2009_11_05@11_42_40.log
[2010/09/26 14:25:07 | 001,089,840 | ---- | M] () -- C:\debug_KC_2010_09_25@13_28_47.log
[2010/09/30 12:50:02 | 027,746,689 | ---- | M] () -- C:\debug_KC_2010_09_27@07_33_50.log
[2010/09/30 14:41:32 | 000,000,443 | ---- | M] () -- C:\debug_KC_2010_09_30@15_40_22.log
[2010/10/04 08:43:54 | 018,872,041 | ---- | M] () -- C:\debug_KC_2010_10_01@13_41_15.log
[2010/10/09 10:42:44 | 032,666,781 | ---- | M] () -- C:\debug_KC_2010_10_07@10_03_19.log
[2010/10/09 10:44:04 | 011,312,016 | ---- | M] () -- C:\debug_KC_2010_10_09@11_43_53.log
[2010/10/18 13:32:46 | 026,378,194 | ---- | M] () -- C:\debug_KC_2010_10_14@12_14_49.log
[2010/10/18 13:59:56 | 025,314,965 | ---- | M] () -- C:\debug_KC_2010_10_18@14_44_44.log
[2010/11/10 11:08:28 | 017,753,480 | ---- | M] () -- C:\debug_KC_2010_11_02@06_32_43.log
[2010/11/11 17:01:01 | 000,257,401 | ---- | M] () -- C:\debug_KC_2010_11_11@05_41_57.log
[2010/11/16 21:30:37 | 012,746,322 | ---- | M] () -- C:\debug_KC_2010_11_15@11_05_50.log
[2010/11/19 09:27:35 | 008,467,022 | ---- | M] () -- C:\debug_KC_2010_11_17@13_26_28.log
[2010/11/25 00:32:12 | 036,713,169 | ---- | M] () -- C:\debug_KC_2010_11_19@10_52_30.log
[2010/11/28 15:00:57 | 000,846,586 | ---- | M] () -- C:\debug_KC_2010_11_26@02_10_29.log
[2010/12/02 07:22:06 | 005,726,268 | ---- | M] () -- C:\debug_KC_2010_12_01@15_48_59.log
[2010/12/02 07:24:42 | 000,030,002 | ---- | M] () -- C:\debug_KC_2010_12_02@07_22_48.log
[2010/12/04 09:56:37 | 018,930,808 | ---- | M] () -- C:\debug_KC_2010_12_02@07_24_50.log
[2010/12/05 16:18:57 | 001,467,312 | ---- | M] () -- C:\debug_KC_2010_12_04@14_18_06.log
[2010/12/13 02:17:16 | 021,221,516 | ---- | M] () -- C:\debug_KC_2010_12_06@15_50_05.log
[2010/12/15 03:52:49 | 015,022,487 | ---- | M] () -- C:\debug_KC_2010_12_13@02_42_25.log
[2010/12/16 03:25:43 | 007,134,080 | ---- | M] () -- C:\debug_KC_2010_12_15@04_08_35.log
[2010/12/16 08:32:19 | 000,002,147 | ---- | M] () -- C:\debug_KC_2010_12_16@08_15_14.log
[2010/12/17 12:48:28 | 007,499,268 | ---- | M] () -- C:\debug_KC_2010_12_16@14_51_21.log
[2010/12/28 07:33:33 | 035,066,298 | ---- | M] () -- C:\debug_KC_2010_12_22@16_19_15.log
[2010/12/28 14:16:41 | 022,914,672 | ---- | M] () -- C:\debug_KC_2010_12_28@14_02_01.log
[2010/12/31 19:06:04 | 000,000,462 | ---- | M] () -- C:\debug_KC_2010_12_31@18_49_05.log
[2011/01/08 11:44:03 | 037,962,526 | ---- | M] () -- C:\debug_KC_2011_01_02@22_14_40.log
[2011/01/13 03:25:46 | 022,044,775 | ---- | M] () -- C:\debug_KC_2011_01_08@12_01_32.log
[2011/01/15 13:38:18 | 017,585,757 | ---- | M] () -- C:\debug_KC_2011_01_13@06_36_24.log
[2011/01/22 03:44:50 | 049,605,588 | ---- | M] () -- C:\debug_KC_2011_01_15@14_05_47.log
[2011/01/28 10:04:55 | 007,083,231 | ---- | M] () -- C:\debug_KC_2011_01_26@07_12_28.log
[2011/02/02 08:20:51 | 003,556,976 | ---- | M] () -- C:\debug_KC_2011_01_28@17_30_43.log
[2011/02/05 15:36:51 | 020,146,660 | ---- | M] () -- C:\debug_KC_2011_02_02@11_32_29.log
[2011/02/10 02:20:27 | 004,457,990 | ---- | M] () -- C:\debug_KC_2011_02_07@10_54_02.log
[2011/02/10 08:13:52 | 000,000,732 | ---- | M] () -- C:\debug_KC_2011_02_10@07_55_06.log
[2009/11/05 17:07:31 | 000,170,563 | ---- | M] () -- C:\debug_MOM_2009_11_05@15_23_05.log
[2009/11/07 14:48:54 | 002,248,601 | ---- | M] () -- C:\debug_MOM_2009_11_06@07_29_20.log
[2009/11/08 10:54:20 | 001,268,689 | ---- | M] () -- C:\debug_MOM_2009_11_07@14_55_08.log
[2009/11/10 08:36:50 | 001,804,792 | ---- | M] () -- C:\debug_MOM_2009_11_09@06_36_57.log
[2009/11/10 10:26:46 | 000,164,355 | ---- | M] () -- C:\debug_MOM_2009_11_10@08_36_55.log
[2009/11/10 11:24:39 | 000,019,173 | ---- | M] () -- C:\debug_MOM_2009_11_10@11_18_39.log
[2009/11/11 03:20:58 | 001,076,339 | ---- | M] () -- C:\debug_MOM_2009_11_10@11_28_16.log
[2009/11/14 15:27:07 | 005,218,155 | ---- | M] () -- C:\debug_MOM_2009_11_11@10_55_38.log
[2009/11/18 21:38:44 | 005,283,832 | ---- | M] () -- C:\debug_MOM_2009_11_15@16_57_16.log
[2009/11/19 22:43:14 | 001,390,918 | ---- | M] () -- C:\debug_MOM_2009_11_19@06_06_29.log
[2009/11/23 08:42:47 | 005,363,273 | ---- | M] () -- C:\debug_MOM_2009_11_19@22_43_18.log
[2009/11/26 00:04:25 | 004,470,961 | ---- | M] () -- C:\debug_MOM_2009_11_23@08_44_21.log
[2009/12/02 10:20:59 | 003,874,336 | ---- | M] () -- C:\debug_MOM_2009_11_29@22_49_30.log
[2009/12/03 07:41:37 | 001,386,611 | ---- | M] () -- C:\debug_MOM_2009_12_02@10_21_04.log
[2009/12/03 12:49:05 | 000,434,102 | ---- | M] () -- C:\debug_MOM_2009_12_03@07_43_20.log
[2009/12/04 06:17:31 | 000,998,244 | ---- | M] () -- C:\debug_MOM_2009_12_03@13_40_57.log
[2009/12/04 10:25:21 | 000,019,417 | ---- | M] () -- C:\debug_MOM_2009_12_04@10_23_44.log
[2009/12/10 03:21:45 | 004,320,240 | ---- | M] () -- C:\debug_MOM_2009_12_07@10_56_54.log
[2009/12/11 07:56:24 | 001,846,457 | ---- | M] () -- C:\debug_MOM_2009_12_10@04_02_40.log
[2009/12/11 17:13:16 | 000,790,910 | ---- | M] () -- C:\debug_MOM_2009_12_11@07_56_29.log
[2009/12/13 19:25:17 | 002,461,292 | ---- | M] () -- C:\debug_MOM_2009_12_12@09_48_05.log
[2009/12/13 19:44:45 | 000,040,422 | ---- | M] () -- C:\debug_MOM_2009_12_13@19_25_22.log
[2009/12/15 10:24:49 | 000,135,993 | ---- | M] () -- C:\debug_MOM_2009_12_15@08_56_28.log
[2009/12/15 10:25:07 | 001,013,530 | ---- | M] () -- C:\debug_MOM_2009_12_15@10_24_52.log
[2009/12/19 13:56:48 | 004,936,209 | ---- | M] () -- C:\debug_MOM_2009_12_16@13_51_23.log
[2009/12/21 12:26:22 | 003,112,757 | ---- | M] () -- C:\debug_MOM_2009_12_19@14_07_03.log
[2009/12/21 13:53:10 | 000,271,816 | ---- | M] () -- C:\debug_MOM_2009_12_21@13_52_59.log
[2009/12/24 20:21:52 | 004,094,036 | ---- | M] () -- C:\debug_MOM_2009_12_22@10_50_47.log
[2009/12/27 11:05:26 | 000,033,238 | ---- | M] () -- C:\debug_MOM_2009_12_27@10_49_21.log
[2009/12/27 13:06:52 | 000,170,610 | ---- | M] () -- C:\debug_MOM_2009_12_27@11_05_30.log
[2009/12/28 11:26:38 | 000,826,884 | ---- | M] () -- C:\debug_MOM_2009_12_27@13_06_55.log
[2010/01/01 03:14:17 | 006,417,627 | ---- | M] () -- C:\debug_MOM_2009_12_28@11_32_01.log
[2010/01/03 17:27:48 | 003,924,640 | ---- | M] () -- C:\debug_MOM_2010_01_01@12_57_42.log
[2010/01/08 00:26:47 | 007,502,407 | ---- | M] () -- C:\debug_MOM_2010_01_03@17_39_32.log
[2010/01/08 08:25:36 | 000,422,311 | ---- | M] () -- C:\debug_MOM_2010_01_08@01_07_45.log
[2010/01/13 03:20:47 | 008,170,665 | ---- | M] () -- C:\debug_MOM_2010_01_08@08_39_28.log
[2010/01/14 09:06:23 | 001,823,807 | ---- | M] () -- C:\debug_MOM_2010_01_13@08_24_45.log
[2010/01/14 09:53:35 | 003,320,484 | ---- | M] () -- C:\debug_MOM_2010_01_14@09_27_38.log
[2010/01/16 16:07:14 | 000,369,395 | ---- | M] () -- C:\debug_MOM_2010_01_16@08_13_09.log
[2010/01/16 16:13:32 | 000,020,157 | ---- | M] () -- C:\debug_MOM_2010_01_16@16_07_46.log
[2010/01/16 19:16:46 | 000,091,226 | ---- | M] () -- C:\debug_MOM_2010_01_16@18_28_01.log
[2010/01/17 17:57:53 | 000,471,840 | ---- | M] () -- C:\debug_MOM_2010_01_17@13_00_00.log
[2010/01/18 10:05:24 | 000,022,301 | ---- | M] () -- C:\debug_MOM_2010_01_18@10_03_46.log
[2010/01/18 11:57:01 | 000,135,253 | ---- | M] () -- C:\debug_MOM_2010_01_18@10_30_08.log
[2010/01/19 21:21:27 | 002,594,912 | ---- | M] () -- C:\debug_MOM_2010_01_18@11_57_07.log
[2010/01/20 12:02:28 | 000,757,337 | ---- | M] () -- C:\debug_MOM_2010_01_19@22_07_31.log
[2010/01/20 12:23:34 | 000,004,551 | ---- | M] () -- C:\debug_MOM_2010_01_20@12_21_50.log
[2010/01/21 11:35:47 | 001,208,402 | ---- | M] () -- C:\debug_MOM_2010_01_20@12_38_48.log
[2010/01/21 15:38:08 | 000,031,169 | ---- | M] () -- C:\debug_MOM_2010_01_21@11_53_43.log
[2010/01/22 03:18:10 | 000,628,545 | ---- | M] () -- C:\debug_MOM_2010_01_21@17_32_11.log
[2010/01/23 09:45:24 | 001,531,021 | ---- | M] () -- C:\debug_MOM_2010_01_22@08_32_05.log
[2010/01/27 09:54:33 | 007,084,322 | ---- | M] () -- C:\debug_MOM_2010_01_23@10_27_03.log
[2010/02/03 08:47:33 | 029,573,251 | ---- | M] () -- C:\debug_MOM_2010_01_27@11_20_05.log
[2010/02/04 07:33:58 | 002,074,389 | ---- | M] () -- C:\debug_MOM_2010_02_03@16_28_03.log
[2010/02/04 18:20:03 | 000,731,308 | ---- | M] () -- C:\debug_MOM_2010_02_04@15_27_32.log
[2010/02/05 01:29:35 | 001,065,137 | ---- | M] () -- C:\debug_MOM_2010_02_04@18_20_08.log
[2010/02/05 13:44:35 | 000,900,886 | ---- | M] () -- C:\debug_MOM_2010_02_05@09_59_56.log
[2010/02/05 18:55:57 | 000,955,716 | ---- | M] () -- C:\debug_MOM_2010_02_05@15_11_29.log
[2010/02/09 11:51:59 | 012,488,088 | ---- | M] () -- C:\debug_MOM_2010_02_06@13_20_14.log
[2010/02/09 12:55:36 | 000,217,624 | ---- | M] () -- C:\debug_MOM_2010_02_09@11_52_02.log
[2010/02/09 17:11:29 | 001,009,864 | ---- | M] () -- C:\debug_MOM_2010_02_09@13_09_39.log
[2010/02/10 08:27:28 | 002,147,214 | ---- | M] () -- C:\debug_MOM_2010_02_09@17_11_32.log
[2010/02/10 09:06:26 | 000,124,743 | ---- | M] () -- C:\debug_MOM_2010_02_10@08_39_11.log
[2010/02/10 15:28:49 | 000,720,488 | ---- | M] () -- C:\debug_MOM_2010_02_10@12_39_25.log
[2010/02/12 10:48:51 | 005,748,883 | ---- | M] () -- C:\debug_MOM_2010_02_11@00_55_19.log
[2010/02/12 11:57:03 | 000,155,295 | ---- | M] () -- C:\debug_MOM_2010_02_12@11_23_40.log
[2010/02/18 23:52:02 | 034,469,839 | ---- | M] () -- C:\debug_MOM_2010_02_12@12_51_01.log
[2010/02/19 16:39:40 | 001,635,278 | ---- | M] () -- C:\debug_MOM_2010_02_19@11_23_04.log
[2010/02/20 16:16:32 | 005,109,067 | ---- | M] () -- C:\debug_MOM_2010_02_19@16_55_03.log
[2010/02/20 16:17:48 | 000,019,641 | ---- | M] () -- C:\debug_MOM_2010_02_20@16_16_44.log
[2010/02/20 16:31:43 | 000,016,109 | ---- | M] () -- C:\debug_MOM_2010_02_20@16_24_46.log
[2010/02/20 16:39:05 | 000,047,430 | ---- | M] () -- C:\debug_MOM_2010_02_20@16_32_54.log
[2010/02/20 16:43:12 | 000,036,286 | ---- | M] () -- C:\debug_MOM_2010_02_20@16_39_11.log
[2010/02/24 03:18:21 | 010,409,791 | ---- | M] () -- C:\debug_MOM_2010_02_22@11_07_34.log
[2010/02/24 06:46:10 | 000,001,654 | ---- | M] () -- C:\debug_MOM_2010_02_24@06_45_46.log
[2010/03/02 13:00:05 | 038,910,184 | ---- | M] () -- C:\debug_MOM_2010_02_25@08_09_34.log
[2010/03/07 08:18:27 | 033,833,038 | ---- | M] () -- C:\debug_MOM_2010_03_02@19_55_18.log
[2010/03/07 08:47:01 | 001,351,170 | ---- | M] () -- C:\debug_MOM_2010_03_07@08_46_56.log
[2010/03/07 13:24:37 | 000,000,304 | ---- | M] () -- C:\debug_MOM_2010_03_07@13_24_11.log
[2010/03/11 03:23:22 | 026,666,431 | ---- | M] () -- C:\debug_MOM_2010_03_07@13_56_16.log
[2010/03/11 10:12:08 | 034,748,717 | ---- | M] () -- C:\debug_MOM_2010_03_11@10_01_19.log
[2010/03/16 09:47:11 | 000,000,709 | ---- | M] () -- C:\debug_MOM_2010_03_16@10_46_22.log
[2010/03/17 08:06:53 | 000,004,157 | ---- | M] () -- C:\debug_MOM_2010_03_16@10_54_02.log
[2010/03/17 19:12:02 | 002,554,387 | ---- | M] () -- C:\debug_MOM_2010_03_17@10_48_08.log
[2010/03/19 08:38:09 | 011,652,206 | ---- | M] () -- C:\debug_MOM_2010_03_17@20_12_05.log
[2010/03/21 13:49:07 | 014,563,496 | ---- | M] () -- C:\debug_MOM_2010_03_19@16_07_38.log
[2010/03/24 15:47:48 | 015,949,389 | ---- | M] () -- C:\debug_MOM_2010_03_22@13_08_26.log
[2010/03/25 11:39:47 | 000,056,837 | ---- | M] () -- C:\debug_MOM_2010_03_25@12_32_36.log
[2010/03/27 10:21:54 | 013,402,996 | ---- | M] () -- C:\debug_MOM_2010_03_25@15_17_41.log
[2010/03/31 02:18:19 | 020,313,632 | ---- | M] () -- C:\debug_MOM_2010_03_28@10_32_47.log
[2010/03/31 07:29:28 | 000,000,304 | ---- | M] () -- C:\debug_MOM_2010_03_31@08_28_59.log
[2010/04/04 01:35:03 | 019,787,648 | ---- | M] () -- C:\debug_MOM_2010_04_01@11_16_55.log
[2010/04/05 08:45:08 | 005,481,262 | ---- | M] () -- C:\debug_MOM_2010_04_04@16_22_32.log
[2010/04/07 09:55:40 | 011,339,203 | ---- | M] () -- C:\debug_MOM_2010_04_05@21_48_32.log
[2010/04/07 12:54:35 | 000,927,273 | ---- | M] () -- C:\debug_MOM_2010_04_07@11_02_48.log
[2010/04/08 14:18:48 | 007,140,933 | ---- | M] () -- C:\debug_MOM_2010_04_07@16_37_00.log
[2010/04/10 11:23:29 | 008,724,939 | ---- | M] () -- C:\debug_MOM_2010_04_09@08_34_35.log
[2010/04/10 16:18:56 | 000,524,652 | ---- | M] () -- C:\debug_MOM_2010_04_10@15_37_46.log
[2010/04/10 17:50:31 | 013,942,020 | ---- | M] () -- C:\debug_MOM_2010_04_10@18_49_21.log
[2010/04/14 02:23:16 | 007,110,714 | ---- | M] () -- C:\debug_MOM_2010_04_12@17_02_15.log
[2010/04/14 07:29:04 | 000,213,167 | ---- | M] () -- C:\debug_MOM_2010_04_14@07_51_57.log
[2010/04/14 12:16:39 | 001,092,415 | ---- | M] () -- C:\debug_MOM_2010_04_14@09_52_29.log
[2010/04/14 12:29:38 | 000,000,709 | ---- | M] () -- C:\debug_MOM_2010_04_14@13_29_04.log
[2010/04/19 10:53:34 | 034,667,129 | ---- | M] () -- C:\debug_MOM_2010_04_14@21_57_32.log
[2010/04/21 14:50:10 | 009,212,686 | ---- | M] () -- C:\debug_MOM_2010_04_20@10_30_09.log
[2010/04/28 07:47:42 | 043,185,399 | ---- | M] () -- C:\debug_MOM_2010_04_22@12_27_00.log
[2010/05/06 16:04:32 | 063,771,262 | ---- | M] () -- C:\debug_MOM_2010_04_28@16_02_55.log
[2010/05/09 15:30:09 | 009,546,814 | ---- | M] () -- C:\debug_MOM_2010_05_07@19_05_27.log
[2010/05/11 12:30:14 | 008,972,299 | ---- | M] () -- C:\debug_MOM_2010_05_10@10_10_24.log
[2010/05/13 02:21:43 | 010,056,942 | ---- | M] () -- C:\debug_MOM_2010_05_11@20_41_23.log
[2010/05/13 07:49:24 | 000,001,654 | ---- | M] () -- C:\debug_MOM_2010_05_13@08_48_53.log
[2010/05/15 19:17:25 | 011,123,564 | ---- | M] () -- C:\debug_MOM_2010_05_14@10_28_43.log
[2010/05/16 19:06:45 | 002,551,091 | ---- | M] () -- C:\debug_MOM_2010_05_16@20_06_33.log
[2010/05/20 12:34:30 | 015,036,243 | ---- | M] () -- C:\debug_MOM_2010_05_18@15_00_28.log
[2010/05/20 12:43:11 | 010,499,570 | ---- | M] () -- C:\debug_MOM_2010_05_18@15_00_29.log
[2010/05/25 09:44:35 | 038,663,435 | ---- | M] () -- C:\debug_MOM_2010_05_20@13_34_34.log
[2010/05/28 17:13:26 | 025,135,609 | ---- | M] () -- C:\debug_MOM_2010_05_25@14_59_18.log
[2010/05/30 07:58:08 | 004,284,856 | ---- | M] () -- C:\debug_MOM_2010_05_29@11_50_14.log
[2010/05/31 15:40:24 | 011,239,573 | ---- | M] () -- C:\debug_MOM_2010_05_30@09_19_39.log
[2010/06/02 16:15:23 | 002,507,967 | ---- | M] () -- C:\debug_MOM_2010_06_02@09_38_19.log
[2010/06/03 09:14:17 | 000,418,406 | ---- | M] () -- C:\debug_MOM_2010_06_03@09_06_54.log
[2010/06/03 12:29:08 | 000,382,473 | ---- | M] () -- C:\debug_MOM_2010_06_03@12_29_19.log
[2010/06/04 08:19:17 | 004,751,451 | ---- | M] () -- C:\debug_MOM_2010_06_03@20_02_19.log
[2010/06/04 13:25:14 | 001,785,998 | ---- | M] () -- C:\debug_MOM_2010_06_04@09_19_20.log
[2010/06/06 19:46:21 | 017,712,909 | ---- | M] () -- C:\debug_MOM_2010_06_04@19_22_41.log
[2010/06/06 23:15:30 | 000,290,581 | ---- | M] () -- C:\debug_MOM_2010_06_06@23_29_58.log
[2010/06/07 10:36:55 | 000,153,816 | ---- | M] () -- C:\debug_MOM_2010_06_07@11_14_14.log
[2010/06/07 18:03:14 | 000,042,385 | ---- | M] () -- C:\debug_MOM_2010_06_07@18_59_46.log
[2010/06/07 23:29:08 | 000,177,657 | ---- | M] () -- C:\debug_MOM_2010_06_08@00_02_37.log
[2010/06/08 07:51:57 | 000,037,041 | ---- | M] () -- C:\debug_MOM_2010_06_08@08_47_29.log
[2010/06/09 01:04:36 | 006,047,432 | ---- | M] () -- C:\debug_MOM_2010_06_08@08_52_00.log
[2010/06/09 14:34:05 | 002,018,131 | ---- | M] () -- C:\debug_MOM_2010_06_09@09_56_05.log
[2010/06/11 09:17:24 | 001,246,178 | ---- | M] () -- C:\debug_MOM_2010_06_11@07_03_30.log
[2010/06/14 12:21:03 | 000,000,304 | ---- | M] () -- C:\debug_MOM_2010_06_14@13_20_39.log
[2010/06/17 08:34:54 | 005,278,173 | ---- | M] () -- C:\debug_MOM_2010_06_16@19_28_36.log
[2010/06/21 10:24:07 | 008,655,721 | ---- | M] () -- C:\debug_MOM_2010_06_20@12_11_27.log
[2010/06/24 02:23:46 | 023,109,733 | ---- | M] () -- C:\debug_MOM_2010_06_21@13_15_06.log
[2010/06/24 21:12:39 | 000,000,256 | ---- | M] () -- C:\debug_MOM_2010_06_24@22_08_51.log
[2010/06/24 21:17:41 | 000,047,869 | ---- | M] () -- C:\debug_MOM_2010_06_24@22_14_08.log
[2010/06/24 21:36:14 | 000,076,830 | ---- | M] () -- C:\debug_MOM_2010_06_24@22_27_04.log
[2010/06/25 00:56:02 | 000,029,809 | ---- | M] () -- C:\debug_MOM_2010_06_25@01_53_33.log
[2010/06/25 01:08:32 | 000,035,854 | ---- | M] () -- C:\debug_MOM_2010_06_25@02_05_40.log
[2010/06/25 05:47:46 | 000,044,678 | ---- | M] () -- C:\debug_MOM_2010_06_25@06_44_18.log
[2010/06/25 06:24:13 | 000,242,327 | ---- | M] () -- C:\debug_MOM_2010_06_25@06_48_05.log
[2010/06/26 16:13:36 | 007,845,824 | ---- | M] () -- C:\debug_MOM_2010_06_25@20_16_14.log
[2010/06/27 10:56:56 | 004,918,062 | ---- | M] () -- C:\debug_MOM_2010_06_26@23_17_41.log
[2010/06/29 21:21:17 | 006,607,494 | ---- | M] () -- C:\debug_MOM_2010_06_29@09_24_03.log
[2010/06/30 09:25:28 | 000,051,780 | ---- | M] () -- C:\debug_MOM_2010_06_30@10_24_06.log
[2010/06/30 12:10:51 | 001,006,329 | ---- | M] () -- C:\debug_MOM_2010_06_30@10_39_57.log
[2010/07/01 11:04:16 | 000,190,563 | ---- | M] () -- C:\debug_MOM_2010_07_01@11_36_58.log
[2010/07/01 18:43:28 | 002,050,778 | ---- | M] () -- C:\debug_MOM_2010_07_01@14_16_32.log
[2010/07/04 19:46:43 | 026,567,830 | ---- | M] () -- C:\debug_MOM_2010_07_01@19_58_38.log
[2010/07/05 15:11:26 | 003,453,840 | ---- | M] () -- C:\debug_MOM_2010_07_04@21_12_42.log
[2010/07/11 19:03:09 | 053,709,622 | ---- | M] () -- C:\debug_MOM_2010_07_05@16_50_40.log
[2010/07/12 14:06:35 | 001,537,849 | ---- | M] () -- C:\debug_MOM_2010_07_12@09_39_34.log
[2010/07/16 19:22:56 | 021,761,084 | ---- | M] () -- C:\debug_MOM_2010_07_14@09_22_32.log
[2010/07/18 14:52:57 | 015,287,331 | ---- | M] () -- C:\debug_MOM_2010_07_16@20_41_37.log
[2010/07/18 23:44:55 | 000,747,778 | ---- | M] () -- C:\debug_MOM_2010_07_18@16_35_13.log
[2010/07/19 10:31:06 | 015,815,998 | ---- | M] () -- C:\debug_MOM_2010_07_19@01_02_36.log
[2010/07/22 06:24:22 | 006,285,426 | ---- | M] () -- C:\debug_MOM_2010_07_21@07_52_15.log
[2010/07/27 07:19:34 | 040,427,136 | ---- | M] () -- C:\debug_MOM_2010_07_22@07_44_09.log
[2010/07/30 13:09:18 | 019,025,945 | ---- | M] () -- C:\debug_MOM_2010_07_27@08_30_54.log
[2010/07/31 14:34:10 | 012,055,436 | ---- | M] () -- C:\debug_MOM_2010_07_31@08_18_40.log
[2010/08/03 02:17:38 | 006,833,306 | ---- | M] () -- C:\debug_MOM_2010_08_02@08_38_29.log
[2010/08/03 22:01:06 | 004,715,306 | ---- | M] () -- C:\debug_MOM_2010_08_03@10_27_01.log
[2010/08/07 17:24:50 | 030,444,853 | ---- | M] () -- C:\debug_MOM_2010_08_04@08_26_06.log
[2010/08/09 11:59:22 | 000,043,920 | ---- | M] () -- C:\debug_MOM_2010_08_09@12_54_02.log
[2010/08/11 02:28:12 | 014,173,720 | ---- | M] () -- C:\debug_MOM_2010_08_09@12_59_26.log
[2010/08/14 11:25:36 | 028,394,048 | ---- | M] () -- C:\debug_MOM_2010_08_11@07_17_17.log
[2010/08/16 09:08:37 | 008,317,454 | ---- | M] () -- C:\debug_MOM_2010_08_15@11_16_00.log
[2010/08/27 08:03:06 | 096,366,074 | ---- | M] () -- C:\debug_MOM_2010_08_16@11_18_42.log
[2010/09/02 09:08:05 | 008,654,331 | ---- | M] () -- C:\debug_MOM_2010_08_27@09_22_23.log
[2010/09/08 13:23:33 | 028,506,543 | ---- | M] () -- C:\debug_MOM_2010_09_02@11_53_20.log
[2010/09/10 05:21:53 | 007,463,404 | ---- | M] () -- C:\debug_MOM_2010_09_09@10_10_36.log
[2010/09/11 20:41:10 | 012,211,030 | ---- | M] () -- C:\debug_MOM_2010_09_10@07_04_57.log
[2010/09/15 02:27:36 | 007,203,651 | ---- | M] () -- C:\debug_MOM_2010_09_13@09_38_52.log
[2010/09/17 05:15:57 | 004,103,397 | ---- | M] () -- C:\debug_MOM_2010_09_15@09_18_00.log
[2010/09/23 11:57:52 | 054,478,465 | ---- | M] () -- C:\debug_MOM_2010_09_17@08_01_20.log
[2010/09/23 18:17:32 | 000,000,309 | ---- | M] () -- C:\debug_MOM_2010_09_23@18_58_25.log
[2008/09/12 23:38:48 | 000,001,930 | ---- | M] () -- C:\drivez.log
[2006/04/13 21:55:44 | 000,000,529 | ---- | M] () -- C:\dsbHSM.inf
[2011/02/10 09:12:29 | 2137,305,088 | -HS- | M] () -- C:\hiberfil.sys
[2009/01/04 21:41:45 | 003,904,578 | ---- | M] () -- C:\HuskyInstallerLog.txt
[2006/04/29 23:13:35 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/10/09 10:42:47 | 000,000,062 | ---- | M] () -- C:\killed.lst
[2006/04/29 23:13:35 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2004/08/04 04:00:00 | 000,047,564 | ---- | M] () -- C:\NTDETECT.COM
[2008/09/28 12:10:06 | 000,250,048 | ---- | M] () -- C:\NTLDR
[2005/03/24 23:00:00 | 000,298,096 | ---- | M] () -- C:\NTLDR.PE
[2004/08/04 04:00:00 | 000,250,032 | ---- | M] () -- C:\NTLDR.XP
[2011/02/10 09:12:16 | 603,979,776 | -HS- | M] () -- C:\pagefile.sys
[2008/09/12 23:30:01 | 000,000,086 | ---- | M] () -- C:\setup.log
[2008/09/12 23:16:40 | 000,000,093 | ---- | M] () -- C:\syslevel.lgl
[2011/02/10 09:12:43 | 000,005,292 | ---- | M] () -- C:\TPHKLOCK.TXT
[2009/03/08 16:58:08 | 000,000,026 | ---- | M] () -- C:\UpdaterforApp.ini
[2005/10/04 00:35:50 | 000,000,182 | ---- | M] () -- C:\WINNT.SIF
[2008/09/16 11:23:04 | 000,000,146 | ---- | M] () -- C:\YServer.txt


< MD5 for: EXPLORER.EXE >
[2008/04/13 16:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\explorer.exe
[2008/04/13 16:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004/08/04 04:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: SFC.DLL >
[2008/04/13 16:12:05 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=96E1C926F22EE1BFBAE82901A35F6BF3 -- C:\WINDOWS\ServicePackFiles\i386\sfc.dll
[2008/04/13 16:12:05 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=96E1C926F22EE1BFBAE82901A35F6BF3 -- C:\WINDOWS\system32\sfc.dll
[2004/08/04 04:00:00 | 000,005,120 | ---- | M] (Microsoft Corporation) MD5=E8A12A12EA9088B4327D49EDCA3ADD3E -- C:\WINDOWS\$NtServicePackUninstall$\sfc.dll

< MD5 for: USERINIT.EXE >
[2004/08/04 04:00:00 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=39B1FFB03C2296323832ACBAE50D2AFF -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
[2008/04/13 16:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008/04/13 16:12:38 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=A93AEE1928A9D7CE3E16D24EC7380F89 -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2005/04/01 10:19:51 | 000,502,784 | ---- | M] (Microsoft Corporation) MD5=986EC72D788E00E8E397B7BB7F5A9E45 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008/04/13 16:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008/04/13 16:12:39 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=ED0EF0A136DEC83DF69F04118870003E -- C:\WINDOWS\system32\winlogon.exe

< >

< End of report >
kadeco
Regular Member
 
Posts: 22
Joined: June 2nd, 2010, 8:05 pm

Re: System runing very slow

Unread postby kadeco » February 11th, 2011, 6:58 am

I failed to inform you previously....I have been running avast! antivirus 5.1 since June 2010.
kadeco
Regular Member
 
Posts: 22
Joined: June 2nd, 2010, 8:05 pm

Re: System runing very slow

Unread postby askey127 » February 11th, 2011, 9:10 am

kadeco,
Please do the following tasks in the order shown.

OTL only produces the extras.txt file the first time it's run.

If you have used Limewire, Frostwire or OpenCandy, you can bet that is a reason for your machine to be infected.
-----------------------------------------------------------
Disable WinPatrol
- Right Click the 'Scotty Dog' icon in the system tray
- Click Options
- At the bottom of the options page, Uncheck Automatically Run WinPatrol When Computer Starts
-Click the X to end program.
- Right Click the 'Scotty Dog' icon in the system tray again
- Click Exit Program
WinPatrol is now disabled and will not start at bootup.
------------------------------------------------
Remove Programs Using Control Panel
From Start, Control Panel, click on Uninstall a program under the Programs heading.
If any of these are still present, right click each Entry, one by one, choose Uninstall/Change, and give permission to Continue:

Limewire
Frostwire
OpenCandy

Take extra care in answering questions posed by any Uninstaller.

-----------------------------------------------------------
If you do not specifically use ThinkVantage profiles to switch between Home and Work Network connections, you can perform the following correction:
It has resulted in performance improvement for users who don't need it.
This does not remove ThinkVantage; it only changes what starts automatically.

Remove Registry items with HijackThis. Start HijackThis. (Right-click and "Run as administrator" in Vista/Win7)
Click Do System Scan Only. When the Scan is complete, Check the following entries:
(Some of these lines may be missing)

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe

Make sure Every other window except HJT is closed (No other tabs showing in the bottom tray), and Click Fix Checked
Click the "X" in the upper right corner of the HiJackThis window to close it.
-----------------------------------------------------------
REBOOT (RESTART) Your Machine
-----------------------------------------------------------
Retrieve the List of Installed programs Using HJT
Open HijackThis, click Open The Misc Tools Section. Then scroll down the list if you need to, click Open Uninstall Manager and Save List...
The List of installed programs will automatically be saved as uninstall_list.txt in your HiJackThis folder.
In addition, the list opens in Notepad so you can also save as another name in another location if you wish.
Please paste the contents into your next reply.
----------------------------------------------
Perform a Custom Scan or Fix with OTL
Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following:
    Code: Select all
    :processes
    killallprocesses
    
    :OTL
    O15 - HKCU\..Trusted Domains: yahoo.com ([www] https in Trusted sites)
    O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
    O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
    O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No CLSID value found.
    O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - No CLSID value found.
    O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_20)
    O32 - AutoRun File - [2008/04/01 15:12:10 | 000,000,071 | -H-- | M] () - G:\autorun.inf -- [ FAT32 ]
    O32 - AutoRun File - [2008/07/12 16:09:12 | 000,000,000 | ---D | M] - G:\autorun -- [ FAT32 ]
    
    :Files
    C:\Program Files\Limewire
    C:\Program Files\Frostwire
    C:\Program Files\OpenCandy
    C:\Documents and Settings\Administrator\Application Data\LimeWire
    C:\Documents and Settings\Administrator\Application Data\FrostWire
    C:\Documents and Settings\Administrator\Application Data\OpenCandy
    C:\Documents and Settings\Administrator\Application Data\Uniblue
    
    :Commands
    [EMPTYTEMP]
    [Reboot]
    
  • Then click the Run Fix button at the top.
  • Let the program run unhindered and reboot the PC when it is done.
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

So we are looking for the log from OTL, and the HiJackThis Installed programs list.
Also any comments about how things worked.
askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 13903
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: System runing very slow

Unread postby kadeco » February 13th, 2011, 9:49 am

2007 Microsoft Office system
Access Help
Acrobat.com
Acrobat.com
Adobe AIR
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.4.1
Amazon Unbox Video
Apple Application Support
Apple Mobile Device Support
Apple Software Update
ArcSoft Magic-i 3
ArcSoft Panorama Maker 4
ArcSoft VideoImpression 2
Ask Toolbar
ASPCA Reminder V7F+AU by We-Care.com
avast! Pro Antivirus
Bonjour
Business Contact Manager for Outlook 2007 SP2
Business Contact Manager for Outlook 2007 SP2
Carbonite Online Backup Setup
CompanionLink
Conexant HD Audio
Critical Update for Windows Media Player 11 (KB959772)
Documents To Go Desktop for iPhone
Driver Detective
Epson Event Manager
Epson FAX Utility
Epson PC-FAX Driver
EPSON Printer Software
EPSON Scan
EPSON WorkForce 610 Series Printer Uninstall
EpsonNet Print
EpsonNet Setup
Evernote v. 4.1
File Uploader
Film Factory
GDR 4053 for SQL Server Database Services 2005 ENU (KB970892)
Glary Utilities 2.28.0.1011
Google Talk (remove only)
HDAUDIO Soft Data Fax Modem with SmartCP
Help Center
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Format 11 SDK (KB939209)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB2158563)
Hotfix for Windows XP (KB2443685)
Hotfix for Windows XP (KB915800-v4)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Hotfix for Windows XP (KB979306)
Hotfix for Windows XP (KB981793)
HP Button Manager
HP Image Capture
HP Photosmart Essential 2.0
HP Webcam User’s Guide
IBM Lotus Domino Access for Microsoft Outlook
IBM Lotus EasySync Pro
iLike Sidebar
Integrated Camera
Intel(R) Graphics Media Accelerator Driver
Intel(R) PROSet/Wireless Software
InterVideo WinDVD
InterVideo WinDVD Creator 3
iTunes
Java(TM) 6 Update 20
KhalInstallWrapper
Lotus Notes 8.0.2 (Basic)
Maintenance Manager
Malwarebytes' Anti-Malware
mCore
mDriver
MediaWidget 6.0
Message Center
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
Microsoft National Language Support Downlevel APIs
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional Hybrid 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Small Business Connectivity Components
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
mMHouse
Mozilla Firefox (3.6.6)
mPfMgr
mProSafe
MSN
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6.0 Parser (KB933579)
mWlsSafe
Nikon Message Center
Nikon Transfer
OGA Notifier 2.0.0048.0
On Screen Display
palmOne
PC-Doctor 5 for Windows
Picasa 2
Picture Control Utility
Presentation Director
Productivity Center Supplement for ThinkPad
QuickTime
RealPlayer
RealUpgrade 1.0
RecordNow Audio
RecordNow Copy
RecordNow Data
Remove Multimedia Center
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
Safari
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB2288931)
Security Update for 2007 Microsoft Office System (KB2289158)
Security Update for 2007 Microsoft Office System (KB2344875)
Security Update for 2007 Microsoft Office System (KB2345043)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB2345035)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office PowerPoint Viewer (KB2413381)
Security Update for Microsoft Office Publisher 2007 (KB2284697)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2344993)
Security Update for Step By Step Interactive Training (KB923723)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB938127-v2)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Internet Explorer 7 (KB963027)
Security Update for Windows Internet Explorer 8 (KB2183461)
Security Update for Windows Internet Explorer 8 (KB2360131)
Security Update for Windows Internet Explorer 8 (KB2416400)
Security Update for Windows Internet Explorer 8 (KB2482017)
Security Update for Windows Internet Explorer 8 (KB969897)
Security Update for Windows Internet Explorer 8 (KB971961)
Security Update for Windows Internet Explorer 8 (KB972260)
Security Update for Windows Internet Explorer 8 (KB974455)
Security Update for Windows Internet Explorer 8 (KB976325)
Security Update for Windows Internet Explorer 8 (KB978207)
Security Update for Windows Internet Explorer 8 (KB981332)
Security Update for Windows Internet Explorer 8 (KB982381)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Search 4 - KB963093
Security Update for Windows XP (KB2079403)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2121546)
Security Update for Windows XP (KB2160329)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2259922)
Security Update for Windows XP (KB2279986)
Security Update for Windows XP (KB2286198)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2296199)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2360937)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2436673)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2476687)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479628)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485376)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956744)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971468)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975561)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977165)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978037)
Security Update for Windows XP (KB978251)
Security Update for Windows XP (KB978262)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979559)
Security Update for Windows XP (KB979683)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB980195)
Security Update for Windows XP (KB980218)
Security Update for Windows XP (KB980232)
Security Update for Windows XP (KB980436)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981852)
Security Update for Windows XP (KB981957)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982214)
Security Update for Windows XP (KB982665)
Security Update for Windows XP (KB982802)
Simplify Media
Skype web features
Skype™ 4.1
Sonic DLA
Sonic Express Labeler
Sonic Icons for Lenovo
Sonic Update Manager
System Migration Assistant
System Update
ThinkPad EasyEject Utility
ThinkPad FullScreen Magnifier
ThinkPad PC Card Power Policy
ThinkPad Power Management Driver
ThinkPad Power Manager
ThinkPad UltraNav Driver
ThinkPad UltraNav Utility
ThinkVantage Active Protection System
ThinkVantage Productivity Center
ThinkVantage Technologies Welcome Message
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Microsoft Office Outlook 2007 (KB2412171)
Update for Outlook 2007 Junk Email Filter (KB2492475)
Update for Windows Internet Explorer 8 (KB976662)
Update for Windows Internet Explorer 8 (KB976749)
Update for Windows Internet Explorer 8 (KB980182)
Update for Windows XP (KB2141007)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2467659)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
ViewNX
Wallpapers
WD Diagnostics
WePrint
Windows Internet Explorer 8
Windows Media Connect
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows Media Player Firefox Plugin
Windows Search 4.0
Windows XP Service Pack 3
WinPatrol
XP Themes
Yahoo! Messenger
Yontoo Layers Client for Internet Explorer 1.03.02
ZapNotesAll processes killed
========== PROCESSES ==========
========== OTL ==========
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yahoo.com\www\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4B3803EA-5230-4DC3-A7FC-33638F3D3542} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4B3803EA-5230-4DC3-A7FC-33638F3D3542}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EE5D279F-081B-4404-994D-C6B60AAEBA6D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE5D279F-081B-4404-994D-C6B60AAEBA6D}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
G:\autorun.inf moved successfully.
File not found.
========== FILES ==========
C:\Program Files\LimeWire folder moved successfully.
C:\Program Files\FrostWire folder moved successfully.
File\Folder C:\Program Files\OpenCandy not found.
C:\Documents and Settings\Administrator\Application Data\LimeWire\xml\data folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\LimeWire\xml folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\LimeWire\themes\limewirePro_theme folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\LimeWire\themes folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\LimeWire\promotion folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\LimeWire\certificate folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\LimeWire\.AppSpecialShare folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\LimeWire folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\xml\data folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\xml folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\themes\frostwirePro_theme folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\themes folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\overlays folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus\torrents folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus\tmp folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus\plugins folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus\net folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus\logs\save folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus\logs folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus\dht folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus\active folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\azureus folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\.NetworkShare\Incomplete folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\.NetworkShare folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire\.AppSpecialShare folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\FrostWire folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\OpenCandy\OpenCandy_8D78B9DA24EF4555AC27D8532BB2A4D0 folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\OpenCandy\OpenCandy_5DDD97D2561242E5A6333B59E5DFE101 folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\OpenCandy folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\Uniblue\RegistryBooster\_temp folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\Uniblue\RegistryBooster\history folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\Uniblue\RegistryBooster\backup folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\Uniblue\RegistryBooster folder moved successfully.
C:\Documents and Settings\Administrator\Application Data\Uniblue folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 68603720 bytes
->Temporary Internet Files folder emptied: 125121414 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 112797427 bytes
->Google Chrome cache emptied: 0 bytes
->Apple Safari cache emptied: 4851712 bytes
->Flash cache emptied: 59094 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes

User: Humor

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 999424 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 10187574 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 26533878 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 266818629 bytes

Total Files Cleaned = 588.00 mb


OTL by OldTimer - Version 3.2.20.6 log created on 02132011_023010

Files\Folders moved on Reboot...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\R0BOWR0U\PugTracker[1].htm moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Q9FFPV7J\google[4].htm moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PKU1BLDL\c=419_rand=125966703_pv=y_rt=ifr[1].htm moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PKU1BLDL\px[2].htm moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\NRYGAR43\2554[1].htm moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\MV241VDC\viewtopic[1].htm moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
File\Folder C:\Documents and Settings\NetworkService\Local Settings\Temp\Perflib_Perfdata_d70.dat not found!
File move failed. C:\WINDOWS\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...
kadeco
Regular Member
 
Posts: 22
Joined: June 2nd, 2010, 8:05 pm

Re: System runing very slow

Unread postby askey127 » February 13th, 2011, 12:44 pm

kadeco,
-----------------------------------------------------------
Remove Programs Using Control Panel
From Start, Settings, Control Panel or Start, Control Panel, click Add/Remove Programs.
Highlight each Entry, as follows, one by one, if it exists, and choose Remove :

Java(TM) 6 Update 20
PC-Doctor 5 for Windows

Take extra care in answering questions posed by any Uninstaller.
------------------------------------------------------------
Download and Install the latest version of Java Runtime Environment from here : http://java.sun.com/javase/downloads/index.jsp, and install it to your computer.
In the first section on the page, labeled JDK 6 Update 23 (JDK or JRE), click on the button labeled Download JRE. Do NOT choose the button labeled "Download JDK".
Select the Platform Windows and check the box to agree to the license.
Choose the Windows Offline installation version and click on the link.
Download it, choose Save, and save it to your desktop.
Then doubleclick it on your desktop, and it will install the newest version of Java for you to use.
You can then remove the Installer from your desktop.
-----------------------------------------------------------
To increase your protection going forward I would recommend use of a HOSTS file.
It blocks inadvertent access to thousands of harmful websites.
Be sure to follow the whole two-part procedure, and get the DNS Client service disabled before installing the HOSTS file.

Replace the Current HOSTS File with MVPs
You can read about HOSTS files here : http://www.mvps.org/winhelp2002/hosts.htm

  • Disable DNS Client Service. This is necessary when installing a large HOSTS file.
    From Start, or Start, Run
    Type services.msc in the box and hit <Enter>
    Give permission to continue if necessary.
    Scroll down to DNS Client on the list, Right Click it and choose Properties.
    Under Service Status, click Stop. Wait until it reports the service stopped.
    Under Startup Type, choose Disabled.
    Then click Apply, OK
    If this procedure was successful, proceed with the installation as follows:
  • Use HostsXpert to Install the HOSTS File
    Download HostsXpert and unzip (extract) it to your computer, somewhere where you can find it.
    • Double click on HostsXpert.exe to launch the program. Give whatever Permissions are required.
    • In the bottom half of the left pane, click on File Handling
    • If the first button at the top is labeled Make Writeable?, click on it so the label changes to Make Read Only
    • Click third button from the bottom, labeled Download. A couple new buttons will appear at the top.
    • Click on the top button labeled MVPs Hosts and choose Replace
    • When asked to verify if you want to Replace present Hosts file, click OK.
    • When it finishes, click on File Handling again.
    • Click the button at the top labeled Make Read Only, so the label changes to Make Writeable?
    • Hit the X in the upper right corner to exit HostsXpert

If you have a separate third party firewall, or Winpatrol, you may have to give permissions at various times to Unlock the present default HOSTS file and install the new one.
Let me know how it's running.
askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 13903
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: System runing very slow

Unread postby askey127 » February 17th, 2011, 7:36 am

this topic is now closed.

We are pleased we could help you resolve your computer's malware issues.

If you would like to make a comment or leave a compliment regarding the help you have received, please see Feedback for Our Helpers - Say "Thanks" Here.
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 13903
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA
Advertisement
Register to Remove


  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 18 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware