OK I used "select all" so hopefully.........
Logfile of random's system information tool 1.05 (written by random/random)
Run by HP_Administrator at 2009-01-18 08:43:12
Microsoft Windows XP Professional Service Pack 3
System drive C: has 55 GB (30%) free of 182 GB
Total RAM: 1022 MB (45% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:43:29 AM, on 1/18/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\HP\KBD\KBD.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\3 Mobile\3 Mobile Broadband\3 Mobile Broadband.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\HP_Administrator\My Documents\00Temp Download\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\HP_Administrator.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktopR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktopR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://redirect.hp.com/svs/rdr?TYPE=4&t ... d=all&c=64O2 - BHO: StumbleUpon Launcher - {145B29F4-A56B-4b90-BBAC-45784EBEBBB7} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: StumbleUpon Toolbar - {5093EB4C-3E93-40AB-9266-B607BA87BDC8} - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll
O4 - HKLM\..\Run: [ehTray] "C:\WINDOWS\ehome\ehtray.exe"
O4 - HKLM\..\Run: [Recguard] "C:\WINDOWS\SMINST\RECGUARD.EXE"
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [EnGraph QuickTimeKiller] "C:\Program Files\EnGraph\QuickTimeKiller\QuickTimeKiller.exe"
O4 - HKLM\..\Run: [NvCplDaemon] "C:\WINDOWS\system32\RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe"
O4 - HKLM\..\Run: [PCDrProfiler] "C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe" -r
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [ctfmon.exe] "C:\WINDOWS\system32\ctfmon.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Startup: ProcessTamer.lnk = C:\Program Files\ProcessTamer\ProcessTamerTray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe-BackupByPhotoshopPortable\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: StumbleUpon PhotoBlog It! -
res://StumbleUponIEBar.dll/blogimageO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Bookmark Master - {5C2E94DC-F116-4B31-8CA4-36E22ECC5B15} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - c:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://download.bitdefender.com/resourc ... oscan8.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/windows ... 2340765343O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) - file:///J:/SuperCD/IntraLaunch.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/s ... wflash.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{C15F4EBA-5AAF-465D-93CA-5F3099B8E9B1}: NameServer = 202.124.81.2 202.124.84.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: secuload.dll,wiki.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: CachemanXP (CachemanXPService) - OuterTechnologies - C:\Program Files\CachemanXP\CachemanXP.exe
O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Imapi Helper - Alex Feinman - C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Registry Management Service (RegManServ) - Unknown owner - C:\Program Files\Advanced Registry Doctor\RegManServ.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. (
www.webroot.com) - C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe
O23 - Service: Webroot Client Service (WRConsumerService) - Webroot Software, Inc. - C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe
--
End of file - 11733 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\wrSpySweeper_L28FC0EAC4ECC446EBA70399DA0F836DD.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{145B29F4-A56B-4b90-BBAC-45784EBEBBB7}]
StumbleUpon Launcher - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll [2007-10-25 987832]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} - Easy-WebPrint - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll [2004-08-26 405504]
{5093EB4C-3E93-40AB-9266-B607BA87BDC8} - StumbleUpon Toolbar - C:\Program Files\StumbleUpon\StumbleUponIEBar.dll [2007-10-25 987832]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
"Recguard"=C:\WINDOWS\SMINST\RECGUARD.EXE [2005-07-22 237568]
"HPBootOp"=C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe [2006-02-15 249856]
"EnGraph QuickTimeKiller"=C:\Program Files\EnGraph\QuickTimeKiller\QuickTimeKiller.exe [2005-03-20 45056]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-12-05 8523776]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-28 221184]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"avgnt"=C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"RoxioEngineUtility"=C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe [2003-05-01 65536]
"RemoteControl"=C:\Program Files\Roxio\Roxio DVDMax Player\PDVDServ.exe [2003-10-27 32768]
"PCDrProfiler"=C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe -r []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-01-14 399504]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-01-11 1830128]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2008-11-18 21633320]
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe-BackupByPhotoshopPortable\Calibration\Adobe Gamma Loader.exe
C:\Documents and Settings\HP_Administrator\Start Menu\Programs\Startup
ProcessTamer.lnk - C:\Program Files\ProcessTamer\ProcessTamerTray.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="secuload.dll,wiki.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-01-11 356352]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= []
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WebrootSpySweeperService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WRConsumerService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WebrootSpySweeperService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WRConsumerService]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe"="C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe:*:Enabled:Updates from HP"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Game.exe"="C:\Program Files\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Game.exe:*:Enabled:Rainbow Six Vegas"
"C:\Program Files\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Launcher.exe"="C:\Program Files\Ubisoft\Tom Clancy's Rainbow Six Vegas\Binaries\R6Vegas_Launcher.exe:*:Enabled:Rainbow Six Vegas Updater"
"C:\Program Files\Ubisoft\Ghost Recon Advanced Warfighter\GRAW.exe"="C:\Program Files\Ubisoft\Ghost Recon Advanced Warfighter\GRAW.exe:*:Enabled:GRAW"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe"="C:\Program Files\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe:*:Enabled:Frontlines Game"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"="C:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe"="C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe:*:Enabled:Updates from HP"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{43f9db27-a0d7-11dd-ab0c-0018f33057fa}]
shell\AutoRun\command - F:\AutoRun.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{98e0e2ef-77dd-11dc-a988-806d6172696f}]
shell\AutoRun\command - K:\Autorun.exe
======List of files/folders created in the last 3 months======
2009-01-18 08:43:12 ----D---- C:\rsit
2009-01-17 19:47:41 ----D---- C:\WINDOWS\65F1CF6331E0450B96F34A88BE7361A6.TMP
2009-01-17 14:55:08 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\skypePM
2009-01-17 14:51:46 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Skype
2009-01-17 14:50:16 ----D---- C:\Program Files\Skype
2009-01-17 14:50:16 ----D---- C:\Program Files\Common Files\Skype
2009-01-17 14:50:05 ----D---- C:\Documents and Settings\All Users\Application Data\Skype
2009-01-17 14:10:49 ----D---- C:\WINDOWS\tessdata
2009-01-17 14:10:40 ----D---- C:\Program Files\Softi Software
2009-01-17 14:10:25 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Softi Software
2009-01-11 21:12:23 ----A---- C:\WINDOWS\IE4 Error Log.txt
2009-01-10 00:26:38 ----N---- C:\WINDOWS\system32\pxafs.dll
2009-01-09 22:43:48 ----D---- C:\Program Files\uTorrent
2009-01-09 22:43:42 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\uTorrent
2008-12-29 11:36:49 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Adobe
2008-12-24 17:56:41 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Ubisoft
2008-12-24 17:56:08 ----D---- C:\Documents and Settings\All Users\Application Data\Ubisoft
2008-12-23 17:44:14 ----D---- C:\WINDOWS\MVUNINST
2008-12-23 17:44:14 ----D---- C:\Program Files\SureThing
2008-12-20 22:32:36 ----D---- C:\Documents and Settings\All Users\Application Data\Webroot
2008-12-20 22:32:36 ----A---- C:\WINDOWS\WRSetup.dll
2008-12-20 22:32:35 ----D---- C:\Program Files\Webroot
2008-12-20 21:57:37 ----D---- C:\Program Files\Trend Micro
2008-12-20 11:44:41 ----D---- C:\Documents and Settings\All Users\Application Data\Tenebril
2008-12-19 23:36:18 ----D---- C:\Program Files\Avira
2008-12-19 23:36:18 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2008-12-19 06:35:10 ----D---- C:\Program Files\a-squared Free
2008-12-19 06:15:40 ----D---- C:\WINDOWS\system32\SpycatcherAgentSetupTemp
2008-12-19 05:53:52 ----D---- C:\Program Files\SpywareBlaster
2008-12-19 03:05:25 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-12-19 03:04:19 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2008-12-18 01:08:00 ----D---- C:\WINDOWS\Prefetch
2008-12-18 01:01:38 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2008-12-18 01:01:31 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2008-12-18 01:01:21 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$
2008-12-18 01:01:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2008-12-18 01:01:02 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2008-12-18 01:00:55 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2008-12-18 01:00:44 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2008-12-18 01:00:36 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2008-12-18 01:00:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2008-12-18 01:00:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-12-18 01:00:07 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-12-18 00:59:59 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-12-18 00:59:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-12-18 00:59:43 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-12-18 00:59:33 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
2008-12-18 00:59:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-12-18 00:59:14 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-12-18 00:59:07 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-12-18 00:58:58 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-12-18 00:58:49 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-12-18 00:51:36 ----D---- C:\WINDOWS\system32\scripting
2008-12-18 00:51:36 ----D---- C:\WINDOWS\l2schemas
2008-12-18 00:51:35 ----D---- C:\WINDOWS\system32\en
2008-12-18 00:51:35 ----D---- C:\WINDOWS\system32\bits
2008-12-18 00:48:14 ----D---- C:\WINDOWS\ServicePackFiles
2008-12-18 00:40:13 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2008-12-17 20:08:25 ----D---- C:\Program Files\Imagenomic
2008-12-17 17:57:56 ----D---- C:\WINDOWS\BDOSCAN8
2008-12-16 20:47:27 ----D---- C:\!KillBox
2008-12-16 18:06:36 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-12-16 18:05:46 ----D---- C:\Program Files\SUPERAntiSpyware
2008-12-16 18:05:46 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\SUPERAntiSpyware.com
2008-12-16 17:29:52 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Malwarebytes
2008-12-16 17:29:48 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2008-12-16 17:29:48 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-12-16 17:11:22 ----D---- C:\Program Files\CCleaner
2008-12-16 07:43:44 ----D---- C:\Program Files\HijackThis
2008-12-15 18:50:42 ----D---- C:\Program Files\TeaTimer (Spybot - Search & Destroy)
2008-12-15 18:50:41 ----D---- C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
2008-12-15 18:50:40 ----D---- C:\Program Files\SDHelper (Spybot - Search & Destroy)
2008-12-15 18:50:36 ----D---- C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
2008-12-14 11:27:02 ----D---- C:\Program Files\FastStone Photo Resizer
2008-12-12 23:33:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2008-12-12 23:33:33 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2008-12-12 23:29:17 ----HDC---- C:\WINDOWS\$NtUninstallKB954600_0$
2008-12-12 23:29:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2008-12-12 18:04:25 ----HDC---- C:\Documents and Settings\All Users\Application Data\{0691F710-1ECA-4B5A-9727-25554F1BFDC6}
2008-12-12 17:48:20 ----D---- C:\ProgramData
2008-12-10 18:47:05 ----D---- C:\Program Files\FSViewer36
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\setupempdrv03.exe
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\SectorCopy.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\ResizeNTFS.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\Partition.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\NTFSLib.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\NTFSFormat.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\NTFSFileSystemAnalyser.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\NTFSCopy.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\Fixup.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\FileSystemCheck.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\FileSystemAnalyser.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\FatResizeMove.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\FatLib.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\FatFormat.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\FATFileSystemAnalyser.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\FatCopy.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\EuEpmGdi.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\DeviceManager.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\DeviceAdapter.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\Device.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\CallbackOperator.dll
2008-12-03 20:16:43 ----A---- C:\WINDOWS\system32\BootMan.exe
2008-12-03 18:05:08 ----D---- C:\Program Files\AbleRAWer
2008-12-03 17:50:26 ----D---- C:\Program Files\Stepok's RAW Importer
2008-11-29 17:39:01 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Nik Software
2008-11-29 17:36:29 ----D---- C:\WINDOWS\MSSecurityNS
2008-11-29 17:36:29 ----D---- C:\WINDOWS\MSSecurityNi
2008-11-26 22:13:27 ----D---- C:\Documents and Settings\All Users\Application Data\Phase One
2008-11-26 21:21:48 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Pixmantec
2008-11-26 21:18:01 ----D---- C:\Program Files\Pixmantec
2008-11-23 15:51:55 ----D---- C:\Program Files\Alex Feinman
2008-11-23 14:49:04 ----A---- C:\Documents and Settings\All Users\Application Data\DragToDiscUserNameK.txt
2008-11-21 21:49:24 ----D---- C:\Program Files\MagicDVDCopier
2008-11-21 21:06:56 ----D---- C:\Program Files\ISL
2008-11-15 23:52:01 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\vlc
2008-11-13 06:54:54 ----HDC---- C:\WINDOWS\$NtUninstallKB957097_0$
2008-11-13 06:54:38 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2008-11-12 16:02:20 ----A---- C:\WINDOWS\system32\wrLZMA.dll
2008-11-12 16:02:12 ----A---- C:\WINDOWS\system32\SsiEfr.exe
2008-11-08 20:50:39 ----N---- C:\WINDOWS\system32\spmsg.dll
2008-11-08 20:31:02 ----RA---- C:\WINDOWS\system32\tmp1E8.tmp
2008-11-08 20:31:02 ----RA---- C:\WINDOWS\system32\tmp1E7.tmp
2008-11-08 13:40:08 ----DC---- C:\WINDOWS\system32\DRVSTORE
2008-11-08 13:39:56 ----D---- C:\WINDOWS\system32\AGEIA
2008-11-08 13:39:00 ----HDC---- C:\WINDOWS\$NtUninstallKB896256$
2008-11-08 13:37:53 ----D---- C:\Documents and Settings\All Users\Application Data\THQ
2008-11-08 00:31:08 ----D---- C:\Program Files\EndItAll
2008-11-04 07:24:40 ----D---- C:\Program Files\AVG
2008-11-04 07:24:40 ----D---- C:\Documents and Settings\All Users\Application Data\avg8
2008-10-27 18:11:45 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2008-10-27 18:11:45 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2008-10-27 18:11:45 ----A---- C:\WINDOWS\system32\pbsvc.exe
2008-10-27 17:56:40 ----RD---- C:\Program Files\Electronic Arts
2008-10-25 22:33:46 ----RA---- C:\WINDOWS\system32\tmp4DB.tmp
2008-10-25 21:38:10 ----D---- C:\awqtest
2008-10-25 01:15:42 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2008-10-24 20:40:55 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\wsInspector
2008-10-24 20:36:03 ----D---- C:\Program Files\Startup Inspector for Windows
2008-10-24 20:22:00 ----D---- C:\Program Files\Microsoft Bootvis
2008-10-24 01:42:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2008-10-24 01:42:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956391$
2008-10-24 01:42:14 ----HDC---- C:\WINDOWS\$NtUninstallKB957095_0$
2008-10-24 01:41:35 ----HDC---- C:\WINDOWS\$NtUninstallKB954211_0$
2008-10-24 01:41:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956841_0$
2008-10-23 18:21:36 ----A---- C:\WINDOWS\ModemLog_HUAWEI Mobile Connect - 3G Modem.txt
2008-10-23 17:49:58 ----D---- C:\Program Files\3 Mobile
2008-10-19 15:50:14 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Corel
2008-10-19 15:49:29 ----D---- C:\Documents and Settings\All Users\Application Data\Corel
2008-10-19 15:44:02 ----RD---- C:\Program Files\Corel
2008-10-19 15:44:02 ----D---- C:\Program Files\Common Files\Corel
======List of files/folders modified in the last 3 months======
2009-01-18 08:41:02 ----D---- C:\Program Files\Mozilla Firefox
2009-01-18 07:50:49 ----D---- C:\WINDOWS\Temp
2009-01-17 22:47:31 ----AD---- C:\WINDOWS
2009-01-17 22:11:19 ----D---- C:\Program Files\Photo Toolkit
2009-01-17 21:58:03 ----D---- C:\WINDOWS\system32\drivers
2009-01-17 21:53:39 ----SD---- C:\WINDOWS\Tasks
2009-01-17 21:51:22 ----D---- C:\WINDOWS\Registration
2009-01-17 21:50:49 ----D---- C:\WINDOWS\system32\CatRoot2
2009-01-17 21:49:48 ----D---- C:\WINDOWS\system32
2009-01-17 21:49:48 ----D---- C:\Program Files\Folder Guide
2009-01-17 21:48:14 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-01-17 20:37:01 ----D---- C:\Program Files
2009-01-17 20:09:52 ----SHD---- C:\WINDOWS\Installer
2009-01-17 19:47:34 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-01-17 15:40:39 ----D---- C:\Program Files\Flickr Uploadr
2009-01-17 14:50:36 ----HD---- C:\Config.Msi
2009-01-17 14:50:16 ----D---- C:\Program Files\Common Files
2009-01-17 13:43:17 ----A---- C:\WINDOWS\win.ini
2009-01-16 21:09:32 ----A---- C:\WINDOWS\system.ini
2009-01-16 21:08:50 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-01-11 11:31:31 ----D---- C:\Program Files\Google
2009-01-11 11:25:18 ----D---- C:\WINDOWS\system32\FxsTmp
2009-01-11 09:30:36 ----HD---- C:\hp
2009-01-11 09:15:59 ----D---- C:\Program Files\PC-Doctor for Windows
2009-01-11 09:13:54 ----D---- C:\Program Files\Qtpfsgui
2009-01-10 19:37:20 ----D---- C:\WINDOWS\system32\config
2009-01-10 00:24:32 ----RD---- C:\Program Files\Adobe
2009-01-09 06:51:24 ----D---- C:\Program Files\freeCommander2006
2009-01-01 17:36:45 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Flickr
2009-01-01 17:36:11 ----D---- C:\WINDOWS\WinSxS
2009-01-01 17:13:32 ----D---- C:\Program Files\Canon
2008-12-31 09:39:04 ----RSD---- C:\WINDOWS\assembly
2008-12-31 09:39:04 ----D---- C:\WINDOWS\Microsoft.NET
2008-12-30 22:23:00 ----D---- C:\Program Files\Common Files\Symantec Shared
2008-12-30 13:58:50 ----D---- C:\Program Files\Common Files\Adobe
2008-12-24 17:55:55 ----D---- C:\WINDOWS\system32\DirectX
2008-12-24 17:55:53 ----HD---- C:\WINDOWS\inf
2008-12-24 17:41:53 ----RD---- C:\Program Files\Ubisoft
2008-12-24 17:41:52 ----HD---- C:\Program Files\InstallShield Installation Information
2008-12-23 18:56:11 ----D---- C:\Program Files\Common Files\Roxio Shared
2008-12-23 17:44:15 ----D---- C:\Program Files\Common Files\SureThing Shared
2008-12-21 15:31:47 ----D---- C:\Program Files\EAZ-FIX
2008-12-21 15:31:47 ----D---- C:\EAZ-FIX
2008-12-21 08:10:20 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Mozilla
2008-12-20 11:36:59 ----D---- C:\WINDOWS\Downloaded Installations
2008-12-19 17:33:06 ----D---- C:\Program Files\Jpeg Enhancer
2008-12-19 17:32:53 ----D---- C:\Program Files\PlacesBar Constructor
2008-12-19 17:32:51 ----D---- C:\Program Files\TitleBarClock
2008-12-19 03:05:34 ----RSHD---- C:\WINDOWS\system32\dllcache
2008-12-19 03:04:53 ----HD---- C:\WINDOWS\$hf_mig$
2008-12-18 22:52:29 ----D---- C:\WINDOWS\Debug
2008-12-18 07:27:47 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2008-12-18 07:23:00 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-12-18 01:05:14 ----D---- C:\WINDOWS\system32\Setup
2008-12-18 01:05:14 ----D---- C:\WINDOWS\AppPatch
2008-12-18 01:05:12 ----D---- C:\WINDOWS\system32\wbem
2008-12-18 01:05:11 ----RSD---- C:\WINDOWS\Fonts
2008-12-18 01:05:04 ----D---- C:\Program Files\Spybot - Search & Destroy
2008-12-18 01:03:28 ----D---- C:\WINDOWS\security
2008-12-18 01:01:39 ----D---- C:\WINDOWS\system32\CatRoot
2008-12-18 00:58:59 ----D---- C:\Program Files\Messenger
2008-12-18 00:51:52 ----D---- C:\WINDOWS\system32\inetsrv
2008-12-18 00:51:51 ----D---- C:\WINDOWS\network diagnostic
2008-12-18 00:51:51 ----D---- C:\WINDOWS\ime
2008-12-18 00:51:51 ----D---- C:\WINDOWS\Help
2008-12-18 00:51:37 ----D---- C:\WINDOWS\system32\usmt
2008-12-18 00:51:37 ----D---- C:\WINDOWS\system32\en-us
2008-12-18 00:51:35 ----D---- C:\WINDOWS\PeerNet
2008-12-18 00:51:35 ----D---- C:\Program Files\Movie Maker
2008-12-18 00:48:04 ----D---- C:\WINDOWS\system32\Restore
2008-12-18 00:48:04 ----D---- C:\WINDOWS\system32\npp
2008-12-18 00:48:04 ----D---- C:\WINDOWS\mui
2008-12-18 00:48:02 ----D---- C:\WINDOWS\msagent
2008-12-18 00:48:00 ----D---- C:\WINDOWS\srchasst
2008-12-18 00:47:58 ----D---- C:\Program Files\NetMeeting
2008-12-18 00:47:56 ----D---- C:\WINDOWS\system32\Com
2008-12-18 00:47:52 ----D---- C:\Program Files\Windows NT
2008-12-18 00:47:51 ----D---- C:\Program Files\Outlook Express
2008-12-18 00:47:49 ----D---- C:\Program Files\Common Files\System
2008-12-18 00:47:30 ----D---- C:\WINDOWS\system32\oobe
2008-12-18 00:47:27 ----D---- C:\WINDOWS\system
2008-12-18 00:43:50 ----D---- C:\WINDOWS\system32\ReinstallBackups
2008-12-18 00:40:10 ----AD---- C:\WINDOWS\ehome
2008-12-17 22:34:43 ----D---- C:\Program Files\Lavasoft
2008-12-17 22:34:43 ----D---- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-12-17 22:30:40 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\Lavasoft
2008-12-17 17:57:59 ----SD---- C:\WINDOWS\Downloaded Program Files
2008-12-17 07:56:05 ----RD---- C:\WINDOWS\Web
2008-12-17 07:56:00 ----D---- C:\WINDOWS\ShellNew
2008-12-14 11:27:46 ----D---- C:\Documents and Settings\HP_Administrator\Application Data\FastStone
2008-12-13 17:10:02 ----A---- C:\WINDOWS\system32\mshtml.dll
2008-12-13 16:10:04 ----D---- C:\WINDOWS\system32\Macromed
2008-12-12 23:33:19 ----D---- C:\Program Files\Internet Explorer
2008-12-12 18:23:18 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2008-12-10 19:32:04 ----D---- C:\Program Files\Windows Media Player
2008-12-09 15:24:38 ----A---- C:\WINDOWS\system32\MRT.exe
2008-12-03 20:16:23 ----D---- C:\Program Files\Easeus
2008-11-22 13:12:08 ----D---- C:\Program Files\Panasonic
2008-11-22 13:11:44 ----D---- C:\Python22
2008-11-13 17:04:24 ----A---- C:\WINDOWS\system32\capicom.dll
2008-11-11 18:09:31 ----A---- C:\WINDOWS\patchw32.dll
2008-11-08 20:47:21 ----D---- C:\Program Files\GameShadow
2008-11-08 20:47:21 ----D---- C:\Program Files\Common Files\Microsoft Shared
2008-11-08 20:31:02 ----D---- C:\Program Files\OpenAL
2008-11-08 20:31:02 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2008-11-08 20:31:02 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2008-11-08 17:13:31 ----RD---- C:\Program Files\THQ
2008-11-08 13:40:05 ----D---- C:\Program Files\AGEIA Technologies
2008-11-07 23:24:30 ----D---- C:\unzipped
2008-11-06 17:06:52 ----A---- C:\WINDOWS\xpsyspad.ini
2008-11-02 10:39:52 ----SD---- C:\Documents and Settings\HP_Administrator\Application Data\Microsoft
2008-10-27 18:11:44 ----D---- C:\WINDOWS\system32\LogFiles
2008-10-25 22:51:04 ----D---- C:\Program Files\TrueLaunchBar
2008-10-25 22:06:14 ----D---- C:\Program Files\Driver Cleaner Pro
2008-10-25 00:38:53 ----AD---- C:\WINDOWS\CREATOR
2008-10-24 06:21:01 ----A---- C:\WINDOWS\cdplayer.ini
2008-10-23 23:06:14 ----A---- C:\WINDOWS\system32\gdi32.dll
2008-10-20 17:51:40 ----D---- C:\temp
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-10-30 75072]
R1 cdudf_xp;cdudf_xp; C:\WINDOWS\system32\drivers\cdudf_xp.sys [2005-06-23 291456]
R1 DVDVRRdr_xp;DVDVRRdr_xp; C:\WINDOWS\system32\drivers\DVDVRRdr_xp.sys [2005-06-23 141184]
R1 ELhid;EL hid Service; \??\C:\WINDOWS\System32\Drivers\Elhid.sys []
R1 ELkbd;EL KB Service; \??\C:\WINDOWS\System32\Drivers\Elkbd.sys []
R1 ELmon;EL Monitor Service; \??\C:\WINDOWS\System32\Drivers\Elmon.sys []
R1 ELmou;EL Mouse Service; \??\C:\WINDOWS\System32\Drivers\Elmou.sys []
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 36352]
R1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2003-10-10 52128]
R1 pwd_2k;pwd_2k; C:\WINDOWS\system32\drivers\pwd_2k.sys [2005-06-23 117760]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 SAVRKBootTasks;Boot Tasks Driver; \??\C:\WINDOWS\system32\SAVRKBootTasks.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-03-01 28352]
R1 UDFReadr;UDFReadr; C:\WINDOWS\system32\drivers\UDFReadr.sys [2005-06-23 202496]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2007-10-14 20747]
R2 symlcbrd;symlcbrd; \??\C:\WINDOWS\system32\drivers\symlcbrd.sys []
R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-12 2829696]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 avgntflt;avgntflt; \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 dvd_2K;dvd_2K; C:\WINDOWS\system32\drivers\dvd_2K.sys [2005-06-23 24320]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2006-01-13 163328]
R3 ELacpi;ELacpi; C:\WINDOWS\system32\DRIVERS\ELacpi.sys [2006-05-09 9728]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidIr;Microsoft Infrared HID Driver; C:\WINDOWS\system32\DRIVERS\hidir.sys [2008-04-14 19200]
R3 HidUsb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2008-04-17 101376]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-06-15 4299264]
R3 IrBus;Infrared bus filter driver for eHome remote controls; C:\WINDOWS\system32\DRIVERS\IrBus.sys [2008-04-14 46592]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-12-05 7435392]
R3 Pcouffin;Low level access layer for CD devices; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2008-11-21 47360]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
R3 StreamSurge;StreamSurge Driver (miniport); C:\WINDOWS\system32\DRIVERS\ss.sys [2005-06-18 19968]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbstor;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S1 Cdr4_xp;Cdr4_xp; C:\WINDOWS\system32\drivers\Cdr4_xp.sys [2005-08-19 2432]
S1 Cdralw2k;Cdralw2k; C:\WINDOWS\system32\drivers\Cdralw2k.sys [2005-08-19 2560]
S3 BIOSCHK;BIOSCHK; \??\C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\TII2D.tmp\disk1\BIOSCHK.SYS []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 epmntdrv;epmntdrv; \??\C:\WINDOWS\system32\epmntdrv.sys []
S3 EuGdiDrv;EuGdiDrv; \??\C:\WINDOWS\system32\EuGdiDrv.sys []
S3 FreshIO;FreshIO; \??\C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys []
S3 MEMSWEEP2;MEMSWEEP2; \??\C:\WINDOWS\system32\4B.tmp []
S3 MHNDRV;MHN driver; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 mmc_2K;mmc_2K; C:\WINDOWS\system32\drivers\mmc_2K.sys [2005-06-23 23808]
S3 MPE;BDA MPE Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nhcAcpi_driver;Notebook Hardware Control ACPI Driver; \??\C:\WINDOWS\system32\drivers\nhcAcpi.sys []
S3 nhcDriverDevice;Notebook Hardware Control Driver; \??\C:\WINDOWS\system32\drivers\nhcDriver.sys []
S3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2005-12-13 19072]
S3 RT73;Belkin Wireless G Plus MIMO USB Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\rt73.sys [2005-11-24 245248]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;USB Audio Driver (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 a2free;a-squared Free Service; C:\Program Files\a-squared Free\a2service.exe [2008-12-17 419448]
R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-09-10 611664]
R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Scheduler; C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-15 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-15 151297]
R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-10-09 237568]
R2 ehSched;Media Center Scheduler Service; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 102912]
R2 ELService;Intel(R) Quick Resume technology; C:\Program Files\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe [2006-06-01 180224]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2006-02-22 81920]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-12-05 155716]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-12-02 66872]
R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2007-06-05 177704]
R2 WebrootSpySweeperService;Webroot Spy Sweeper Engine; C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe [2008-11-12 3667312]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2001-05-01 53248]
R2 WRConsumerService;Webroot Client Service; C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe [2008-11-13 1086840]
S2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
S2 RegManServ;Registry Management Service; C:\Program Files\Advanced Registry Doctor\RegManServ.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 CachemanXPService;CachemanXP; C:\Program Files\CachemanXP\CachemanXP.exe [2006-03-22 208384]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 267776]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-12-31 168432]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]
S3 Imapi Helper;Imapi Helper; C:\Program Files\Alex Feinman\ISO Recorder\ImapiHelper.exe [2006-01-05 163840]
S3 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-06-21 49152]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
-----------------EOF-----------------