- Code: Select all
OTS logfile created on: 8/26/2009 11:06:36 PM - Run 1 OTS by OldTimer - Version 3.0.10.3 Folder = C:\Documents and Settings\Nina\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 254.00 Mb Total Physical Memory | 45.95 Mb Available Physical Memory | 18.09% Memory free 621.92 Mb Paging File | 243.13 Mb Available in Paging File | 39.09% Paging File free Paging file location(s): C:\pagefile.sys 1152 1152 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74.47 Gb Total Space | 60.06 Gb Free Space | 80.65% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: D19WTD41 Current User Name: Nina Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: On Skip Microsoft Files: Off File Age = 30 Days [Processes - Safe List] applemobiledeviceservice.exe -> C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> [2009/07/09 12:22:18 | 00,144,712 | ---- | M] (Apple Inc.) bcmsmmsg.exe -> C:\WINDOWS\BCMSMMSG.exe -> [2003/08/29 05:59:24 | 00,122,880 | ---- | M] (Broadcom Corporation) capfasem.exe -> C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe -> [2009/02/01 13:18:23 | 00,173,296 | ---- | M] (CA, Inc.) capfsem.exe -> C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfsem.exe -> [2009/02/01 13:18:23 | 00,181,488 | ---- | M] (CA, Inc.) cappactiveprotection.exe -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\CAPPActiveProtection.exe -> [2007/08/16 22:10:14 | 00,218,376 | ---- | M] (CA, Inc.) cavrid.exe -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe -> [2009/07/31 04:14:41 | 00,230,664 | ---- | M] (CA, Inc.) ccprovsp.exe -> C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe -> [2009/07/31 04:14:42 | 00,214,256 | ---- | M] (CA, Inc.) cctray.exe -> C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe -> [2009/07/31 04:14:42 | 00,177,392 | ---- | M] (CA, Inc.) elkctrl.exe -> C:\WINDOWS\System32\ElkCtrl.exe -> [2004/11/01 18:22:22 | 00,262,144 | ---- | M] (Logitech Inc.) explorer.exe -> C:\WINDOWS\Explorer.EXE -> [2008/04/13 17:12:19 | 01,033,728 | ---- | M] (Microsoft Corporation) iexplore.exe -> C:\Program Files\Internet Explorer\iexplore.exe -> [2009/03/08 14:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) iexplore.exe -> C:\Program Files\Internet Explorer\iexplore.exe -> [2009/03/08 14:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) ipodservice.exe -> C:\Program Files\iPod\bin\iPodService.exe -> [2009/07/13 14:02:50 | 00,542,496 | ---- | M] (Apple Inc.) isafe.exe -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe -> [2007/08/20 14:27:26 | 00,144,960 | ---- | M] (Computer Associates International, Inc.) itmrtsvc.exe -> C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe -> [2007/01/04 13:10:22 | 00,280,080 | ---- | M] (CA, Inc.) ituneshelper.exe -> C:\Program Files\iTunes\iTunesHelper.exe -> [2009/07/13 14:03:10 | 00,292,128 | ---- | M] (Apple Inc.) jqs.exe -> C:\Program Files\Java\jre6\bin\jqs.exe -> [2009/08/25 14:58:08 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) jusched.exe -> C:\Program Files\Java\jre6\bin\jusched.exe -> [2009/08/25 14:58:08 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) lvcomsx.exe -> C:\WINDOWS\System32\LVCOMSX.EXE -> [2005/12/09 16:32:18 | 00,225,280 | ---- | M] (Logitech Inc.) mdnsresponder.exe -> C:\Program Files\Bonjour\mDNSResponder.exe -> [2008/12/12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) ots.exe -> C:\Documents and Settings\Nina\Desktop\OTS.exe -> [2009/08/26 23:06:22 | 00,514,048 | ---- | M] (OldTimer Tools) ppctlpriv.exe -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe -> [2007/08/16 22:10:16 | 00,189,704 | ---- | M] (CA, Inc.) qoeloader.exe -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe -> [2009/02/01 13:15:26 | 00,014,088 | ---- | M] (CA) skype.exe -> C:\Program Files\Skype\Phone\Skype.exe -> [2009/03/27 09:55:06 | 24,103,720 | R--- | M] (Skype Technologies S.A.) sprtsvc.exe -> C:\Program Files\twc\medicsp2\bin\sprtsvc.exe -> [2007/03/07 12:54:06 | 00,202,280 | ---- | M] (SupportSoft, Inc.) tfswctrl.exe -> C:\WINDOWS\System32\dla\tfswctrl.exe -> [2003/08/06 00:04:00 | 00,114,741 | ---- | M] (Sonic Solutions) umxagent.exe -> C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe -> [2007/10/18 11:24:46 | 01,010,192 | ---- | M] (CA) umxcfg.exe -> C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe -> [2007/10/18 11:24:46 | 00,801,296 | ---- | M] (CA) umxfwhlp.exe -> C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe -> [2007/10/18 11:24:44 | 00,145,936 | ---- | M] (CA) umxpol.exe -> C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe -> [2008/06/24 20:10:30 | 00,281,104 | ---- | M] (CA) vetmsg.exe -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe -> [2009/07/31 04:14:41 | 00,242,952 | ---- | M] (CA, Inc.) yahooauservice.exe -> C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -> [2008/11/09 13:48:14 | 00,602,392 | ---- | M] (Yahoo! Inc.) [Win32 Services - Safe List] (Apple Mobile Device) Apple Mobile Device [Win32_Own | Auto | Running] -> C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -> [2009/07/09 12:22:18 | 00,144,712 | ---- | M] (Apple Inc.) (aspnet_state) ASP.NET State Service [Win32_Own | On_Demand | Stopped] -> C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -> [2008/07/25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) (Bonjour Service) Bonjour Service [Win32_Own | Auto | Running] -> C:\Program Files\Bonjour\mDNSResponder.exe -> [2008/12/12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) (CaCCProvSP) CaCCProvSP [Win32_Own | On_Demand | Running] -> C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe -> [2009/07/31 04:14:42 | 00,214,256 | ---- | M] (CA, Inc.) (CAISafe) CAISafe [Win32_Own | Auto | Running] -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe -> [2007/08/20 14:27:26 | 00,144,960 | ---- | M] (Computer Associates International, Inc.) (CCALib8) Canon Camera Access Library 8 [Win32_Own | Disabled | Stopped] -> C:\Program Files\Canon\CAL\CALMAIN.exe -> [2007/01/31 15:55:42 | 00,096,370 | ---- | M] (Canon Inc.) (clr_optimization_v2.0.50727_32) .NET Runtime Optimization Service v2.0.50727_X86 [Win32_Own | On_Demand | Stopped] -> C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -> [2008/07/25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) (DSBrokerService) DSBrokerService [Win32_Own | Disabled | Stopped] -> C:\Program Files\DellSupport\brkrsvc.exe -> [2007/03/07 15:47:46 | 00,076,848 | ---- | M] () (FontCache3.0.0.0) Windows Presentation Foundation Font Cache 3.0.0.0 [Win32_Own | On_Demand | Stopped] -> c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -> [2008/07/29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) (gusvc) Google Updater Service [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -> [2008/04/07 16:16:26 | 00,136,120 | ---- | M] (Google) (helpsvc) Help and Support [Win32_Shared | Auto | Running] -> C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -> [2008/04/13 17:12:02 | 00,038,400 | ---- | M] (Microsoft Corporation) (idsvc) Windows CardSpace [Win32_Shared | Unknown | Stopped] -> c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -> [2008/07/29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) (iPod Service) iPod Service [Win32_Own | On_Demand | Running] -> C:\Program Files\iPod\bin\iPodService.exe -> [2009/07/13 14:02:50 | 00,542,496 | ---- | M] (Apple Inc.) (ITMRTSVC) CA Pest Patrol Realtime Protection Service [Win32_Own | Auto | Running] -> C:\Program Files\CA\SharedComponents\PPRT\bin\ITMRTSVC.exe -> [2007/01/04 13:10:22 | 00,280,080 | ---- | M] (CA, Inc.) (JavaQuickStarterService) Java Quick Starter [Win32_Own | Auto | Running] -> C:\Program Files\Java\jre6\bin\jqs.exe -> [2009/08/25 14:58:08 | 00,153,376 | ---- | M] (Sun Microsystems, Inc.) (LVPrcSrv) Logitech Process Monitor [Win32_Own | Disabled | Stopped] -> c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe -> [2005/12/09 16:37:42 | 00,081,920 | ---- | M] (Logitech Inc.) (NetTcpPortSharing) Net.Tcp Port Sharing Service [Win32_Shared | Disabled | Stopped] -> c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -> [2008/07/29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) (Pml Driver HPZ12) Pml Driver HPZ12 [Win32_Own | Disabled | Stopped] -> C:\WINDOWS\System32\HPZipm12.exe -> [2007/08/09 00:27:52 | 00,073,728 | ---- | M] (HP) (PPCtlPriv) PPCtlPriv [Win32_Own | On_Demand | Running] -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spyware\PPCtlPriv.exe -> [2007/08/16 22:10:16 | 00,189,704 | ---- | M] (CA, Inc.) (sprtsvc_medicsp2) SupportSoft Sprocket Service (medicsp2) [Win32_Own | Auto | Running] -> C:\Program Files\twc\medicsp2\bin\sprtsvc.exe -> [2007/03/07 12:54:06 | 00,202,280 | ---- | M] (SupportSoft, Inc.) (SupportSoft RemoteAssist) SupportSoft RemoteAssist [Win32_Own | On_Demand | Stopped] -> C:\Program Files\Common Files\supportsoft\bin\ssrc.exe -> [2008/07/15 17:38:32 | 00,394,608 | ---- | M] (SupportSoft, Inc.) (UmxAgent) HIPS Event Manager [Win32_Own | Auto | Running] -> C:\Program Files\CA\SharedComponents\HIPSEngine\UmxAgent.exe -> [2007/10/18 11:24:46 | 01,010,192 | ---- | M] (CA) (UmxCfg) HIPS Configuration Interpreter [Win32_Own | Auto | Running] -> C:\Program Files\CA\SharedComponents\HIPSEngine\UmxCfg.exe -> [2007/10/18 11:24:46 | 00,801,296 | ---- | M] (CA) (UmxFwHlp) HIPS Firewall Helper [Win32_Own | Auto | Running] -> C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe -> [2007/10/18 11:24:44 | 00,145,936 | ---- | M] (CA) (UmxPol) HIPS Policy Manager [Win32_Own | Auto | Running] -> C:\Program Files\CA\SharedComponents\HIPSEngine\UmxPol.exe -> [2008/06/24 20:10:30 | 00,281,104 | ---- | M] (CA) (VETMSGNT) VET Message Service [Win32_Own | Auto | Running] -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe -> [2009/07/31 04:14:41 | 00,242,952 | ---- | M] (CA, Inc.) (WMPNetworkSvc) Windows Media Player Network Sharing Service [Win32_Own | Disabled | Stopped] -> C:\Program Files\Windows Media Player\WMPNetwk.exe -> [2006/10/18 20:05:24 | 00,913,408 | ---- | M] (Microsoft Corporation) (YahooAUService) Yahoo! Updater [Win32_Own | Auto | Running] -> C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -> [2008/11/09 13:48:14 | 00,602,392 | ---- | M] (Yahoo! Inc.) [Driver Services - Safe List] (aeaudio) aeaudio [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\aeaudio.sys -> [2002/04/01 12:15:00 | 00,004,816 | ---- | M] (Andrea Electronics Corporation) (AliIde) AliIde [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\aliide.sys -> [2001/08/17 12:51:56 | 00,005,248 | ---- | M] (Acer Laboratories Inc.) (amdagp) AMD AGP Bus Filter Driver [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\amdagp.sys -> [2008/04/13 11:36:39 | 00,043,008 | ---- | M] (Advanced Micro Devices, Inc.) (asc) asc [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\asc.sys -> [2001/08/17 12:52:00 | 00,026,496 | ---- | M] (Advanced System Products, Inc.) (asc3550) asc3550 [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\asc3550.sys -> [2001/08/17 12:51:58 | 00,014,848 | ---- | M] (Advanced System Products, Inc.) (bcm4sbxp) Broadcom 440x 10/100 Integrated Controller XP Driver [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\bcm4sbxp.sys -> [2003/05/23 11:58:30 | 00,043,136 | ---- | M] (Broadcom Corporation) (BCMModem) BCM V.92 56K Modem [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\BCMSM.sys -> [2003/08/29 05:59:24 | 01,101,696 | ---- | M] (Broadcom Corporation) (CmdIde) CmdIde [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\cmdide.sys -> [2001/08/17 12:51:54 | 00,006,656 | ---- | M] (CMD Technology, Inc.) (dac2w2k) dac2w2k [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\dac2w2k.sys -> [2001/08/17 12:52:16 | 00,179,584 | ---- | M] (Mylex Corporation) (drvmcdb) drvmcdb [Kernel | Boot | Running] -> C:\WINDOWS\system32\drivers\drvmcdb.sys -> [2003/07/31 02:21:00 | 00,084,576 | ---- | M] (Sonic Solutions) (drvnddm) drvnddm [File_System | Auto | Running] -> C:\WINDOWS\System32\drivers\drvnddm.sys -> [2003/06/20 01:56:00 | 00,040,448 | ---- | M] (Sonic Solutions) (DSproct) DSproct [Kernel | On_Demand | Stopped] -> C:\Program Files\DellSupport\GTAction\triggers\DSproct.sys -> [2006/10/05 16:07:28 | 00,004,736 | ---- | M] (Gteko Ltd.) (dsunidrv) DellSupport UniDriver [Kernel | Auto | Running] -> C:\WINDOWS\System32\DRIVERS\dsunidrv.sys -> [2007/02/25 12:10:48 | 00,005,376 | --S- | M] (Gteko Ltd.) (EL90XBC) 3Com EtherLink XL 90XB/C Adapter Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\el90xbc5.sys -> [2001/08/17 11:11:06 | 00,066,591 | ---- | M] (3Com Corporation) (GEARAspiWDM) GEAR ASPI Filter Driver [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\GEARAspiWDM.sys -> [2009/03/19 16:32:48 | 00,023,400 | ---- | M] (GEAR Software Inc.) (HPZid412) IEEE-1284.4 Driver HPZid412 [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\HPZid412.sys -> [2005/03/07 21:43:25 | 00,051,120 | R--- | M] (HP) (HPZipr12) Print Class Driver for IEEE-1284.4 HPZipr12 [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\HPZipr12.sys -> [2005/03/07 21:43:26 | 00,016,496 | R--- | M] (HP) (HPZius12) USB to IEEE-1284.4 Translation Driver HPZius12 [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\HPZius12.sys -> [2005/03/07 21:43:27 | 00,021,744 | R--- | M] (HP) (i81x) i81x [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\i81xnt5.sys -> [2004/08/03 22:29:36 | 00,161,020 | ---- | M] (Intel(R) Corporation) (iAimFP0) iAimFP0 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wADV01nt.sys -> [2004/08/03 22:29:37 | 00,012,415 | ---- | M] (Intel(R) Corporation) (iAimFP1) iAimFP1 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wADV02NT.sys -> [2004/08/03 22:29:37 | 00,012,127 | ---- | M] (Intel(R) Corporation) (iAimFP2) iAimFP2 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wADV05NT.sys -> [2004/08/03 22:29:37 | 00,011,775 | ---- | M] (Intel(R) Corporation) (iAimFP3) iAimFP3 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wSiINTxx.sys -> [2004/08/03 22:29:47 | 00,012,063 | ---- | M] (Intel(R) Corporation) (iAimFP4) iAimFP4 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wVchNTxx.sys -> [2004/08/03 22:29:49 | 00,019,455 | ---- | M] (Intel(R) Corporation) (iAimTV0) iAimTV0 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wATV01nt.sys -> [2004/08/03 22:29:41 | 00,029,311 | ---- | M] (Intel(R) Corporation) (iAimTV1) iAimTV1 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wATV02NT.sys -> [2004/08/03 22:29:42 | 00,019,551 | ---- | M] (Intel(R) Corporation) (iAimTV3) iAimTV3 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wATV04nt.sys -> [2004/08/03 22:29:43 | 00,033,599 | ---- | M] (Intel(R) Corporation) (iAimTV4) iAimTV4 [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\wCh7xxNT.sys -> [2004/08/03 22:29:45 | 00,023,615 | ---- | M] (Intel(R) Corporation) (ialm) ialm [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\ialmnt5.sys -> [2005/06/22 01:12:34 | 00,807,998 | ---- | M] (Intel Corporation) (ICAM3NT5) Intel USB Video Camera III [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\Drivers\Icam3.sys -> [2001/08/17 14:05:44 | 00,141,056 | ---- | M] (Microsoft Corporation) (KmxAgent) KmxAgent [Kernel | System | Running] -> C:\WINDOWS\System32\DRIVERS\kmxagent.sys -> [2008/06/24 20:08:36 | 00,063,504 | ---- | M] (CA) (KmxCF) KmxCF [Kernel | Auto | Running] -> C:\WINDOWS\System32\DRIVERS\KmxCF.sys -> [2008/06/24 20:08:42 | 00,134,648 | ---- | M] (CA) (KmxCfg) KmxCfg [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\kmxcfg.sys -> [2008/06/24 20:08:42 | 00,088,816 | ---- | M] (CA) (KmxFile) KmxFile [Kernel | System | Running] -> C:\WINDOWS\System32\DRIVERS\KmxFile.sys -> [2008/06/24 20:08:46 | 00,045,584 | ---- | M] (CA) (KmxFw) KmxFw [Kernel | System | Running] -> C:\WINDOWS\System32\DRIVERS\kmxfw.sys -> [2008/06/24 20:08:52 | 00,115,216 | ---- | M] (CA) (KmxSbx) KmxSbx [Kernel | Auto | Running] -> C:\WINDOWS\System32\DRIVERS\KmxSbx.sys -> [2008/06/24 20:08:56 | 00,066,576 | ---- | M] (CA) (KmxStart) KmxStart [Kernel | Boot | Running] -> C:\WINDOWS\System32\DRIVERS\kmxstart.sys -> [2008/06/24 20:08:58 | 00,093,712 | ---- | M] (CA) (Lvckap) Logitech Kernel Audio Processing Filter Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\Lvckap.sys -> [2005/12/09 16:35:54 | 02,174,464 | ---- | M] () (lvmvdrv) Logitech Machine Vision Engine Loader [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\lvmvdrv.sys -> [2005/12/09 16:37:42 | 02,400,256 | ---- | M] () (LVPrcMon) Logitech LVPrcMon Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\LVPrcMon.sys -> [2005/12/09 16:37:42 | 00,016,768 | ---- | M] () (LVUSBSta) Logitech USB Monitor Filter [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\lvusbsta.sys -> [2005/12/05 20:26:16 | 00,039,424 | R--- | M] (Logitech Inc.) (MDC8021X) AEGIS Protocol (IEEE 802.1x) v2.3.1.9 [Kernel | Auto | Running] -> C:\WINDOWS\System32\DRIVERS\mdc8021x.sys -> [2004/04/13 19:20:08 | 00,015,781 | R--- | M] (Meetinghouse Data Communications) (MODEMCSA) Unimodem Streaming Filter Device [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\MODEMCSA.sys -> [2001/08/17 12:57:38 | 00,016,128 | ---- | M] (Microsoft Corporation) (mraid35x) mraid35x [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\mraid35x.sys -> [2001/08/17 12:52:12 | 00,017,280 | ---- | M] (American Megatrends Inc.) (MxlW2k) MxlW2k [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\MxlW2k.sys -> [2007/05/19 19:08:57 | 00,028,256 | ---- | M] (MusicMatch, Inc.) (nv) nv [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\nv4_mini.sys -> [2004/08/03 22:29:54 | 01,897,408 | ---- | M] (NVIDIA Corporation) (omci) OMCI WDM Device Driver [Kernel | System | Running] -> C:\WINDOWS\System32\DRIVERS\omci.sys -> [2002/11/08 12:45:06 | 00,017,217 | ---- | M] (Dell Computer Corporation) (PID_0928) Logitech QuickCam Express(PID_0928) [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\LV561AV.SYS -> [2005/12/05 20:27:29 | 00,287,360 | R--- | M] (Logitech Inc.) (Ptilink) Direct Parallel Link Driver [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\ptilink.sys -> [2002/08/29 04:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) (PxHelp20) PxHelp20 [Kernel | Boot | Running] -> C:\WINDOWS\System32\DRIVERS\PxHelp20.sys -> [2008/11/20 12:19:06 | 00,043,872 | ---- | M] (Sonic Solutions) (ql1080) ql1080 [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\ql1080.sys -> [2001/08/17 12:52:20 | 00,040,320 | ---- | M] (QLogic Corporation) (ql12160) ql12160 [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\ql12160.sys -> [2001/08/17 12:52:20 | 00,045,312 | ---- | M] (QLogic Corporation) (ql1280) ql1280 [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\ql1280.sys -> [2001/08/17 12:52:18 | 00,049,024 | ---- | M] (QLogic Corporation) (ROOTMODEM) Microsoft Legacy Modem Driver [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\Drivers\RootMdm.sys -> [2002/08/29 04:00:00 | 00,005,888 | ---- | M] (Microsoft Corporation) (rtl8139) Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\DRIVERS\RTL8139.SYS -> [2004/08/03 22:31:32 | 00,020,992 | ---- | M] (Realtek Semiconductor Corporation) (Secdrv) Secdrv [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\secdrv.sys -> [2007/11/13 03:25:53 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) (sisagp) SIS AGP Bus Filter [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\sisagp.sys -> [2008/04/13 11:36:39 | 00,040,960 | ---- | M] (Silicon Integrated Systems Corporation) (smwdm) smwdm [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\smwdm.sys -> [2003/02/28 08:17:18 | 00,545,024 | ---- | M] (Analog Devices, Inc.) (Sparrow) Sparrow [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\sparrow.sys -> [2001/08/17 13:07:44 | 00,019,072 | ---- | M] (Adaptec, Inc.) (sscdbhk5) sscdbhk5 [File_System | System | Running] -> C:\WINDOWS\System32\drivers\sscdbhk5.sys -> [2003/07/14 10:28:40 | 00,005,621 | ---- | M] (Sonic Solutions) (ssrtln) ssrtln [File_System | System | Running] -> C:\WINDOWS\System32\drivers\ssrtln.sys -> [2003/07/14 10:28:22 | 00,023,219 | ---- | M] (Sonic Solutions) (symc810) symc810 [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\symc810.sys -> [2001/08/17 13:07:34 | 00,016,256 | ---- | M] (Symbios Logic Inc.) (symc8xx) symc8xx [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\symc8xx.sys -> [2001/08/17 13:07:36 | 00,032,640 | ---- | M] (LSI Logic) (sym_hi) sym_hi [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\sym_hi.sys -> [2001/08/17 13:07:40 | 00,028,384 | ---- | M] (LSI Logic) (sym_u3) sym_u3 [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\sym_u3.sys -> [2001/08/17 13:07:42 | 00,030,688 | ---- | M] (LSI Logic) (tfsnboio) tfsnboio [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsnboio.sys -> [2003/08/06 00:04:00 | 00,025,685 | ---- | M] (Sonic Solutions) (tfsncofs) tfsncofs [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsncofs.sys -> [2003/08/06 00:04:00 | 00,034,837 | ---- | M] (Sonic Solutions) (tfsndrct) tfsndrct [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsndrct.sys -> [2003/08/06 00:04:00 | 00,004,117 | ---- | M] (Sonic Solutions) (tfsndres) tfsndres [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsndres.sys -> [2003/08/06 00:04:00 | 00,002,233 | ---- | M] (Sonic Solutions) (tfsnifs) tfsnifs [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsnifs.sys -> [2003/08/06 00:04:00 | 00,083,284 | ---- | M] (Sonic Solutions) (tfsnopio) tfsnopio [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsnopio.sys -> [2003/08/06 00:04:00 | 00,014,229 | ---- | M] (Sonic Solutions) (tfsnpool) tfsnpool [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsnpool.sys -> [2003/08/06 00:04:00 | 00,006,357 | ---- | M] (Sonic Solutions) (tfsnudf) tfsnudf [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsnudf.sys -> [2003/08/06 00:04:00 | 00,098,068 | ---- | M] (Sonic Solutions) (tfsnudfa) tfsnudfa [File_System | Auto | Running] -> C:\WINDOWS\System32\dla\tfsnudfa.sys -> [2003/08/06 00:04:00 | 00,100,373 | ---- | M] (Sonic Solutions) (ultra) ultra [Kernel | Disabled | Stopped] -> C:\WINDOWS\System32\DRIVERS\ultra.sys -> [2001/08/17 12:52:22 | 00,036,736 | ---- | M] (Promise Technology, Inc.) (VET-FILT) VET File System Filter [Kernel | System | Running] -> C:\WINDOWS\System32\drivers\vet-filt.sys -> [2007/08/20 14:38:16 | 00,026,376 | ---- | M] (Computer Associates International, Inc.) (VET-REC) VET File System Recognizer [Kernel | System | Running] -> C:\WINDOWS\System32\drivers\vet-rec.sys -> [2007/08/20 14:38:16 | 00,021,128 | ---- | M] (Computer Associates International, Inc.) (VETEBOOT) VET Boot Scan Engine [Kernel | On_Demand | Running] -> C:\WINDOWS\System32\drivers\veteboot.sys -> [2009/02/01 13:18:19 | 00,108,368 | ---- | M] (Computer Associates International, Inc.) (VETEFILE) VET File Scan Engine [Kernel | System | Running] -> C:\WINDOWS\System32\drivers\vetefile.sys -> [2009/02/01 13:18:19 | 00,880,560 | ---- | M] (Computer Associates International, Inc.) (VETFDDNT) VET Floppy Boot Sector Monitor [Kernel | System | Running] -> C:\WINDOWS\System32\drivers\vetfddnt.sys -> [2007/08/20 14:38:20 | 00,021,512 | ---- | M] (Computer Associates International, Inc.) (VETMONNT) VET File Monitor [Kernel | System | Running] -> C:\WINDOWS\System32\drivers\vetmonnt.sys -> [2007/08/20 14:38:22 | 00,032,264 | ---- | M] (Computer Associates International, Inc.) (WlanUIG) 2Wire 802.11g USB Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\DRIVERS\WlanUIG.sys -> [2004/05/16 17:46:15 | 00,347,648 | R--- | M] ( ) ({6080A529-897E-4629-A488-ABA0C29B635E}) Intel(R) Graphics Platform (SoftBIOS) Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\ialmsbw.sys -> [2003/10/08 11:12:24 | 00,120,830 | ---- | M] (Intel Corporation) ({D31A0762-0CEB-444e-ACFF-B049A1F6FE91}) Intel(R) Graphics Chipset (KCH) Driver [Kernel | On_Demand | Stopped] -> C:\WINDOWS\System32\drivers\ialmkchw.sys -> [2003/10/08 11:12:16 | 00,098,842 | ---- | M] (Intel Corporation) [Registry - Safe List] < Internet Explorer Settings [HKEY_LOCAL_MACHINE\] > -> -> HKEY_LOCAL_MACHINE\: Main\\"Default_Page_URL" -> http://go.microsoft.com/fwlink/?LinkId=69157 -> HKEY_LOCAL_MACHINE\: Main\\"Default_Search_URL" -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\"Default_Secondary_Page_URL" -> [binary data] -> HKEY_LOCAL_MACHINE\: Main\\"Extensions Off Page" -> about:NoAdd-ons -> HKEY_LOCAL_MACHINE\: Main\\"Local Page" -> C:\WINDOWS\system32\blank.htm -> HKEY_LOCAL_MACHINE\: Main\\"Page_Transitions" -> 1 -> HKEY_LOCAL_MACHINE\: Main\\"Search Page" -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_LOCAL_MACHINE\: Main\\"Security Risk Page" -> about:SecurityRisk -> HKEY_LOCAL_MACHINE\: Main\\"Start Page" -> http://go.microsoft.com/fwlink/?LinkId=69157 -> < Internet Explorer Settings [HKEY_CURRENT_USER\] > -> -> HKEY_CURRENT_USER\: Main\\"Local Page" -> C:\WINDOWS\system32\blank.htm -> HKEY_CURRENT_USER\: Main\\"Page_Transitions" -> 1 -> HKEY_CURRENT_USER\: Main\\"Search Page" -> http://go.microsoft.com/fwlink/?LinkId=54896 -> HKEY_CURRENT_USER\: Main\\"SearchDefaultBranded" -> 1 -> HKEY_CURRENT_USER\: Main\\"SearchMigratedDefaultName" -> Yahoo! Search -> HKEY_CURRENT_USER\: Main\\"SearchMigratedDefaultURL" -> http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 -> HKEY_CURRENT_USER\: Main\\"Start Page" -> http://www.yahoo.com/ -> HKEY_CURRENT_USER\: SearchURL\\"" -> http://us.rd.yahoo.com/customize/ie/defaults/su/ymj/*http://www.yahoo.com -> HKEY_CURRENT_USER\: "ProxyEnable" -> 0 -> HKEY_CURRENT_USER\: "ProxyOverride" -> 127.0.0.1;<local>;*.local -> < FireFox Extensions [HKLM] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla HKLM\software\mozilla\Firefox\extensions -> -> HKLM\software\mozilla\Firefox\extensions\\{20a82645-c095-46ed-80e3-08825760534b} -> C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION [C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION\] -> [2009/04/24 17:26:48 | 00,000,000 | ---D | M] HKLM\software\mozilla\Firefox\extensions\\jqs@sun.com -> C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF [C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF] -> [2009/08/25 14:58:10 | 00,000,000 | ---D | M] < FireFox Extensions [User Folders] > -> -> C:\Documents and Settings\Nina\Application Data\mozilla\Firefox\Profiles\opmqne76.default\extensions -> [2008/11/08 18:00:56 | 00,000,000 | ---D | M] -> C:\Documents and Settings\Nina\Application Data\mozilla\Firefox\Profiles\opmqne76.default\extensions\{463F6CA5-EE3C-4be1-B7E6-7FEE11953374} -> [2008/11/08 18:00:56 | 00,000,000 | ---D | M] -> C:\Documents and Settings\Nina\Application Data\mozilla\Firefox\Profiles\opmqne76.default\extensions\{6aec4bf7-c16a-4e5c-a65a-114a57157969} -> [2008/11/08 18:00:56 | 00,000,000 | ---D | M] -> C:\Documents and Settings\Nina\Application Data\mozilla\Firefox\Profiles\opmqne76.default\extensions\{dd30bf68-268a-4815-ad48-8740b774c764} -> [2008/11/08 18:00:56 | 00,000,000 | ---D | M] < FireFox SearchPlugins [User Folders] > -> < HOSTS File > (2 bytes and 1 lines) -> C:\WINDOWS\System32\drivers\etc\Hosts -> Reset Hosts < BHO's [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} [HKLM] -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [Adobe PDF Link Helper] -> [2009/02/27 12:07:26 | 00,075,128 | ---- | M] (Adobe Systems Incorporated) {22BF413B-C6D2-4d91-82A9-A0F997BA588C} [HKLM] -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [Skype add-on (mastermind)] -> [2009/03/27 09:55:12 | 01,088,296 | ---- | M] (Skype Technologies S.A.) {5CA3D70E-1895-11CF-8E15-001234567890} [HKLM] -> C:\WINDOWS\System32\dla\tfswshx.dll [DriveLetterAccess] -> [2003/08/06 00:04:00 | 00,106,548 | ---- | M] (Sonic Solutions) {DBC80044-A445-435b-BC74-9C25C1C588A9} [HKLM] -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [Java(tm) Plug-In 2 SSV Helper] -> [2009/08/25 14:58:07 | 00,041,760 | ---- | M] (Sun Microsystems, Inc.) {E7E6F031-17CE-4C07-BC86-EABFE594F69C} [HKLM] -> C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [JQSIEStartDetectorImpl Class] -> [2009/08/25 14:58:10 | 00,073,728 | ---- | M] (Sun Microsystems, Inc.) < Internet Explorer ToolBars [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\ToolBar -> "Locked" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found < Internet Explorer ToolBars [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ -> ShellBrowser\\"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{0B53EAC3-8D69-4B9E-9B19-A37C9A5676A7}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found WebBrowser\\"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" [HKLM] -> Reg Error: Key error. [Reg Error: Key error.] -> File not found < Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> "" -> [] -> File not found "Adobe Reader Speed Launcher" -> C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe ["C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"] -> [2009/02/27 17:10:28 | 00,035,696 | ---- | M] (Adobe Systems Incorporated) "BCMSMMSG" -> C:\WINDOWS\BCMSMMSG.exe [BCMSMMSG.exe] -> [2003/08/29 05:59:24 | 00,122,880 | ---- | M] (Broadcom Corporation) "cafwc" -> C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe [C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\cafw.exe -cl] -> [2009/02/01 13:18:23 | 01,193,200 | ---- | M] (CA, Inc.) "capfasem" -> C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe [C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfasem.exe] -> [2009/02/01 13:18:23 | 00,173,296 | ---- | M] (CA, Inc.) "capfupgrade" -> C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe [C:\Program Files\CA\CA Internet Security Suite\CA Personal Firewall\capfupgrade.exe] -> [2009/02/01 13:18:23 | 00,259,312 | ---- | M] (CA, Inc.) "CAVRID" -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe ["C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe"] -> [2009/07/31 04:14:41 | 00,230,664 | ---- | M] (CA, Inc.) "cctray" -> C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe ["C:\Program Files\CA\CA Internet Security Suite\cctray\cctray.exe"] -> [2009/07/31 04:14:42 | 00,177,392 | ---- | M] (CA, Inc.) "dla" -> C:\WINDOWS\System32\dla\tfswctrl.exe [C:\WINDOWS\system32\dla\tfswctrl.exe] -> [2003/08/06 00:04:00 | 00,114,741 | ---- | M] (Sonic Solutions) "iTunesHelper" -> C:\Program Files\iTunes\iTunesHelper.exe ["C:\Program Files\iTunes\iTunesHelper.exe"] -> [2009/07/13 14:03:10 | 00,292,128 | ---- | M] (Apple Inc.) "LogitechCameraService(E)" -> C:\WINDOWS\System32\ElkCtrl.exe [C:\WINDOWS\system32\ElkCtrl.exe /automation] -> [2004/11/01 18:22:22 | 00,262,144 | ---- | M] (Logitech Inc.) "LVCOMSX" -> C:\WINDOWS\System32\LVCOMSX.EXE [C:\WINDOWS\system32\LVCOMSX.EXE] -> [2005/12/09 16:32:18 | 00,225,280 | ---- | M] (Logitech Inc.) "QOELOADER" -> C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe ["C:\Program Files\CA\CA Internet Security Suite\CA Anti-Spam\QSP-5.1.18.0\QOELoader.exe"] -> [2009/02/01 13:15:26 | 00,014,088 | ---- | M] (CA) "QuickTime Task" -> C:\Program Files\QuickTime\qttask.exe ["C:\Program Files\QuickTime\qttask.exe" -atboottime] -> [2009/05/26 17:18:30 | 00,413,696 | ---- | M] (Apple Inc.) "SunJavaUpdateSched" -> C:\Program Files\Java\jre6\bin\jusched.exe ["C:\Program Files\Java\jre6\bin\jusched.exe"] -> [2009/08/25 14:58:08 | 00,149,280 | ---- | M] (Sun Microsystems, Inc.) < Run [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run -> "Skype" -> C:\Program Files\Skype\Phone\Skype.exe ["C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized] -> [2009/03/27 09:55:06 | 24,103,720 | R--- | M] (Skype Technologies S.A.) < All Users Startup Folder > -> C:\Documents and Settings\All Users\Start Menu\Programs\Startup -> < Nina Startup Folder > -> C:\Documents and Settings\Nina\Start Menu\Programs\Startup -> < CurrentVersion Policy Settings - Explorer [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"HonorAutoRunSetting" -> [1] -> File not found < CurrentVersion Policy Settings - System [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System \\"dontdisplaylastusername" -> [0] -> File not found \\"legalnoticecaption" -> [] -> File not found \\"legalnoticetext" -> [] -> File not found \\"shutdownwithoutlogon" -> [1] -> File not found \\"undockwithoutlogon" -> [1] -> File not found < CurrentVersion Policy Settings - Explorer [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer \\"NoDriveTypeAutoRun" -> [145] -> File not found < Internet Explorer Menu Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\ -> Add to Google Photos Screensa&ver -> C:\WINDOWS\System32\GPhotos.scr [res://C:\WINDOWS\system32\GPhotos.scr/200] -> [2009/05/01 11:30:36 | 03,366,912 | ---- | M] (Google Inc.) < Internet Explorer Extensions [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\ -> {77BF5300-1474-4EC7-9980-D32B190E9B07}:{77BF5300-1474-4EC7-9980-D32B190E9B07} [HKLM] -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [Button: Skype] -> [2009/03/27 09:55:12 | 01,088,296 | ---- | M] (Skype Technologies S.A.) {e2e2dd38-d088-4134-82b7-f2ba38496583}:Exec [HKLM] -> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [Menu: @xpsp3res.dll,-20001] -> [2008/04/13 11:53:32 | 00,558,080 | ---- | M] (Microsoft Corporation) {FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> C:\Program Files\Messenger\msmsgs.exe [Button: Messenger] -> [2008/04/13 17:12:28 | 01,695,232 | ---- | M] (Microsoft Corporation) {FB5F1910-F110-11d2-BB9E-00C04F795683}:Exec [HKLM] -> C:\Program Files\Messenger\msmsgs.exe [Menu: Windows Messenger] -> [2008/04/13 17:12:28 | 01,695,232 | ---- | M] (Microsoft Corporation) < Internet Explorer Extensions [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions\ -> CmdMapping\\"{08B0E5C0-4FCB-11CF-AAA5-00401C608501}" [HKLM] -> C:\WINDOWS\System32\msjava.dll [Web Browser Applet Control] -> [2003/02/28 18:26:26 | 00,947,472 | ---- | M] (Microsoft Corporation) CmdMapping\\"{CD67F990-D8E9-11d2-98FE-00C0F0318AFE}" [HKLM] -> [Reg Error: Key error.] -> File not found CmdMapping\\"{e2e2dd38-d088-4134-82b7-f2ba38496583}" [HKLM] -> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [@xpsp3res.dll,-20001] -> [2008/04/13 11:53:32 | 00,558,080 | ---- | M] (Microsoft Corporation) CmdMapping\\"{FB5F1910-F110-11d2-BB9E-00C04F795683}" [HKLM] -> C:\Program Files\Messenger\msmsgs.exe [Messenger] -> [2008/04/13 17:12:28 | 01,695,232 | ---- | M] (Microsoft Corporation) < Default Prefix > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix "" -> http:// < Trusted Sites Domains [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Trusted Sites Domains [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ -> [Key] 0 domain(s) found. -> < Trusted Sites Ranges [HKEY_CURRENT_USER\] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\ -> [Key] 0 range(s) found. -> < Downloaded Program Files > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\ -> {01113300-3E00-11D2-8470-0060089874ED} [HKLM] -> http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab [Support.com Configuration Class] -> {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} [HKLM] -> http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab [QuickTime Object] -> {0CCA191D-13A6-4E29-B746-314DEE697D83} [HKLM] -> http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab [Facebook Photo Uploader 5 Control] -> {11260943-421B-11D0-8EAC-0000C07D88CF} [HKLM] -> http://www.ipix.com/download/ipixx.cab [iPIX ActiveX Control] -> {166B1BCA-3F9C-11CF-8075-444553540000} [HKLM] -> http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab [Reg Error: Key error.] -> {17492023-C23A-453E-A040-C7C580BBF700} [HKLM] -> http://download.microsoft.com/download/5/b/0/5b0d4654-aa20-495c-b89f-c1c34c691085/LegitCheckControl.cab [Windows Genuine Advantage Validation Tool] -> {19E28AFC-EAE3-4CE5-AC83-2407B42F57C9} [HKLM] -> http://download.microsoft.com/download/0/5/c/05c905f4-dd30-427d-a3de-373c3e5552fc/msSecAdv.cab?1083471839937 [MSSecurityAdvisor Class] -> {1F2F4C9E-6F09-47BC-970D-3C54734667FE} [HKLM] -> https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab [Reg Error: Key error.] -> {233C1507-6A77-46A4-9443-F871F945D258} [HKLM] -> http://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab [Shockwave ActiveX Control] -> {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} [HKLM] -> http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab [Symantec AntiVirus scanner] -> {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} [HKLM] -> http://www.napster.com/client/setup.exe [InstallShield Setup Player 2K2] -> {4F1E5B1A-2A80-42CA-8532-2D05CB959537} [HKLM] -> http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab [MSN Photo Upload Tool] -> {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} [HKLM] -> http://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1226371183062 [MUCatalogWebControl Class] -> {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} [HKLM] -> http://www.webshots.com/samplers/WSDownloader.ocx [WSDownloader Control] -> {5ED80217-570B-4DA9-BF44-BE107C0EC166} [HKLM] -> http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6662.cab [Windows Live Safety Center Base Module] -> {6414512B-B978-451D-A0D8-FCFDF33E833C} [HKLM] -> http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1232561623984 [WUWebControl Class] -> {644E432F-49D3-41A1-8DD5-E099162EEEC5} [HKLM] -> http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab [Symantec RuFSI Utility Class] -> {6A344D34-5231-452A-8A57-D064AC9B7862} [HKLM] -> https://webdl.symantec.com/activex/symdlmgr.cab [Symantec Download Manager] -> {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} [HKLM] -> http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1232561594484 [MUWebControl Class] -> {8AD9C840-044E-11D1-B3E9-00805F499D93} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab [Java Plug-in 1.6.0_16] -> {8C279F4E-917E-4CD2-8DF0-D9C73C0CE763} [HKLM] -> http://zone.msn.com/bingame/zpagames/zpa_wof.cab55579.cab [ZPA_WheelOfFortune Object] -> {B49C4597-8721-4789-9250-315DFBD9F525} [HKLM] -> http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_en_dl.cab [IWinAmpActiveX Class] -> {B8BE5E93-A60C-4D26-A2DC-220313175592} [HKLM] -> http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab [MSN Games - Installer] -> {BCBC9371-595D-11D4-A96D-00105A1CEF6C} [HKLM] -> http://hgtv1.view22.com/view22/app/view22rte.cab [View22RTE Class] -> {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab [Java Plug-in 1.6.0_16] -> {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [HKLM] -> http://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab [Java Plug-in 1.6.0_16] -> {D27CDB6E-AE6D-11CF-96B8-444553540000} [HKLM] -> http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab [Shockwave Flash Object] -> {DD3641E5-A9CF-11D1-9AA1-444553540000} [HKLM] -> http://www.sunterra.com/downloads/svh/svideo3.cab [Surround Video V3.0 Control Object] -> {E2883E8F-472F-4FB0-9522-AC9BF37916A7} [HKLM] -> http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab [Reg Error: Key error.] -> {E856B973-45FD-4559-8F82-EAB539144667} [HKLM] -> http://pccheckup.dellfix.com/rel/41/install/gtdownde.cab [Dell PC Checkup Installer Control] -> Microsoft XML Parser for Java [HKLM] -> file://C:\WINDOWS\Java\classes\xmldso.cab [Reg Error: Key error.] -> PackageCab [HKLM] -> http://ak.imgag.com/imgag/cp/install/AxCtp2.cab [Reg Error: Key error.] -> ppctlcab [HKLM] -> http://www.pestscan.com/scanner/ppctlcab.cab [Reg Error: Key error.] -> < Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ -> DhcpNameServer -> 209.18.47.61 209.18.47.62 -> < Name Servers [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ -> {5516AB57-14E4-4C9E-9435-08A3C2677C51}\\DhcpNameServer -> 209.18.47.61 209.18.47.62 (Realtek RTL8139 Family PCI Fast Ethernet NIC) -> IE Styles -> HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Styles < Winlogon settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon -> *Shell* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell -> Explorer.exe -> C:\WINDOWS\explorer.exe -> [2008/04/13 17:12:19 | 01,033,728 | ---- | M] (Microsoft Corporation) *MultiFile Done* -> -> < Winlogon\Notify settings [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ -> igfxcui -> C:\WINDOWS\System32\igfxsrvc.dll -> [2005/06/22 00:44:12 | 00,348,160 | ---- | M] (Intel Corporation) PFW -> C:\WINDOWS\System32\UmxWNP.dll -> [2007/05/18 14:30:00 | 00,079,368 | ---- | M] (CA) < Domain Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List -> "%windir%\Network Diagnostic\xpnetdiag.exe" -> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> [2008/04/13 11:53:32 | 00,558,080 | ---- | M] (Microsoft Corporation) "%windir%\system32\sessmgr.exe" -> C:\WINDOWS\System32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2008/04/13 17:12:34 | 00,141,312 | ---- | M] (Microsoft Corporation) "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" -> C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger] -> [2006/12/08 11:52:42 | 00,036,864 | ---- | M] (Logitech) "C:\Program Files\MSN Messenger\msncall.exe" -> C:\Program Files\MSN Messenger\msncall.exe [C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)] -> File not found "C:\Program Files\MSN Messenger\msnmsgr.exe" -> C:\Program Files\MSN Messenger\msnmsgr.exe [C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0] -> File not found < Standard Profile Authorized Applications List > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List -> "%windir%\Network Diagnostic\xpnetdiag.exe" -> C:\WINDOWS\Network Diagnostic\xpnetdiag.exe [%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000] -> [2008/04/13 11:53:32 | 00,558,080 | ---- | M] (Microsoft Corporation) "%windir%\system32\sessmgr.exe" -> C:\WINDOWS\System32\sessmgr.exe [%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019] -> [2008/04/13 17:12:34 | 00,141,312 | ---- | M] (Microsoft Corporation) "C:\Program Files\Bonjour\mDNSResponder.exe" -> C:\Program Files\Bonjour\mDNSResponder.exe [C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour] -> [2008/12/12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) "C:\Program Files\Google\Google Talk\googletalk.exe" -> C:\Program Files\Google\Google Talk\googletalk.exe [C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk] -> File not found "C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe [C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe] -> [2005/05/12 09:34:58 | 00,151,635 | ---- | M] (Hewlett-Packard) "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe [C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe] -> [2005/05/24 03:34:36 | 00,057,344 | ---- | M] (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe [C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe] -> [2005/05/24 03:17:46 | 00,225,280 | ---- | M] (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe" -> C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe [C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe] -> [2005/05/24 03:18:00 | 00,040,960 | ---- | M] (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" -> C:\Program Files\HP\Digital Imaging\bin\hposid01.exe [C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe] -> [2005/05/24 03:13:32 | 00,081,920 | ---- | M] (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe [C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe] -> [2005/05/24 03:42:00 | 00,172,032 | ---- | M] (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe [C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe] -> [2005/05/12 08:28:02 | 01,081,344 | ---- | M] (Hewlett-Packard) "C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe [C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe] -> [2005/05/12 11:06:08 | 00,200,704 | ---- | M] () "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe [C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe] -> [2005/05/12 01:40:38 | 00,204,800 | ---- | M] (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe] -> [2005/05/12 00:23:26 | 00,282,624 | ---- | M] (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" -> C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe [C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe] -> [2005/05/24 03:18:52 | 00,458,752 | ---- | M] (Hewlett-Packard Co.) "C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" -> C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe [C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe] -> [2005/03/15 16:17:50 | 00,704,512 | ---- | M] ( ) "C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" -> C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe [C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe] -> [2005/03/15 16:12:10 | 00,417,792 | ---- | M] () "C:\Program Files\Internet Explorer\iexplore.exe" -> C:\Program Files\Internet Explorer\iexplore.exe [C:\Program Files\Internet Explorer\iexplore.exe:*:Disabled:Internet Explorer] -> [2009/03/08 14:09:26 | 00,638,816 | ---- | M] (Microsoft Corporation) "C:\Program Files\iTunes\iTunes.exe" -> C:\Program Files\iTunes\iTunes.exe [C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes] -> [2009/07/13 14:02:56 | 14,074,656 | ---- | M] (Apple Inc.) "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" -> C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger] -> [2006/12/08 11:52:42 | 00,036,864 | ---- | M] (Logitech) "C:\Program Files\Messenger\msmsgs.exe" -> C:\Program Files\Messenger\msmsgs.exe [C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger] -> [2008/04/13 17:12:28 | 01,695,232 | ---- | M] (Microsoft Corporation) "C:\Program Files\MSN Messenger\msncall.exe" -> C:\Program Files\MSN Messenger\msncall.exe [C:\Program Files\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)] -> File not found "C:\Program Files\MSN Messenger\msnmsgr.exe" -> C:\Program Files\MSN Messenger\msnmsgr.exe [C:\Program Files\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.0] -> File not found "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_server.exe" -> C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_server.exe [C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_server.exe:*:Disabled:TODO: <File description>] -> [2003/10/06 09:05:42 | 00,081,920 | ---- | M] (TODO: <Company name>) "C:\Program Files\Skype\Phone\Skype.exe" -> C:\Program Files\Skype\Phone\Skype.exe [C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype] -> [2009/03/27 09:55:06 | 24,103,720 | R--- | M] (Skype Technologies S.A.) "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -> C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger] -> File not found "C:\Program Files\Yahoo!\Messenger\YServer.exe" -> C:\Program Files\Yahoo!\Messenger\YServer.exe [C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server] -> File not found < SafeBoot AlternateShell [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot -> "AlternateShell" -> cmd.exe -> < CDROM Autorun Setting [HKEY_LOCAL_MACHINE]> -> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom -> "AutoRun" -> 1 -> "DisplayName" -> CD-ROM Driver -> "ImagePath" -> [System32\DRIVERS\cdrom.sys] -> File not found < MountPoints2 [HKEY_CURRENT_USER] > -> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2 -> \E HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\Shell \E\Shell\\"" -> [AutoRun] -> File not found HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\Shell\AutoRun \E\Shell\AutoRun\\"" -> [Auto&Play] -> File not found HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E\Shell\AutoRun\command \E\Shell\AutoRun\command\\"" -> E:\LaunchU3.exe [E:\LaunchU3.exe -a] -> File not found [Files/Folders - Created Within 30 Days] 4 C:\Documents and Settings\All Users\Application Data\*.tmp files -> C:\Documents and Settings\All Users\Application Data\*.tmp -> OTS.exe -> C:\Documents and Settings\Nina\Desktop\OTS.exe -> [2009/08/26 23:06:18 | 00,514,048 | ---- | C] (OldTimer Tools) Malwarebytes -> C:\Documents and Settings\Nina\Application Data\Malwarebytes -> [2009/08/25 15:53:03 | 00,000,000 | ---D | C] Malwarebytes' Anti-Malware.lnk -> C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk -> [2009/08/25 15:52:50 | 00,000,696 | ---- | C] () mbamswissarmy.sys -> C:\WINDOWS\System32\drivers\mbamswissarmy.sys -> [2009/08/25 15:52:46 | 00,038,160 | ---- | C] (Malwarebytes Corporation) mbam.sys -> C:\WINDOWS\System32\drivers\mbam.sys -> [2009/08/25 15:52:43 | 00,019,096 | ---- | C] (Malwarebytes Corporation) Malwarebytes' Anti-Malware -> C:\Program Files\Malwarebytes' Anti-Malware -> [2009/08/25 15:52:43 | 00,000,000 | ---D | C] Malwarebytes -> C:\Documents and Settings\All Users\Application Data\Malwarebytes -> [2009/08/25 15:52:43 | 00,000,000 | ---D | C] mbam-setup.1.2D0D17.exe -> C:\Documents and Settings\Nina\Desktop\mbam-setup.1.2D0D17.exe -> [2009/08/25 15:50:49 | 03,942,048 | ---- | C] (Malwarebytes Corporation ) Acrobat.com.lnk -> C:\Documents and Settings\All Users\Desktop\Acrobat.com.lnk -> [2009/08/25 14:35:58 | 00,000,734 | ---- | C] () Adobe Reader 9.lnk -> C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk -> [2009/08/25 14:34:03 | 00,001,729 | ---- | C] () Adobe Reader 9 Installer -> C:\Documents and Settings\All Users\Desktop\Adobe Reader 9 Installer -> [2009/08/25 14:31:13 | 00,000,000 | ---D | C] Adobe AIR -> C:\Program Files\Common Files\Adobe AIR -> [2009/08/25 14:30:58 | 00,000,000 | ---D | C] gmer.zip -> C:\Documents and Settings\Nina\Desktop\gmer.zip -> [2009/08/22 12:35:08 | 00,280,282 | ---- | C] () rsit -> C:\rsit -> [2009/08/19 20:28:39 | 00,000,000 | ---D | C] NortonInstaller -> C:\Documents and Settings\All Users\Application Data\NortonInstaller -> [2009/08/19 19:08:05 | 00,000,000 | ---D | C] HijackThis.lnk -> C:\Documents and Settings\Nina\Desktop\HijackThis.lnk -> [2009/08/13 18:03:37 | 00,001,734 | ---- | C] () Trend Micro -> C:\Program Files\Trend Micro -> [2009/08/13 18:03:36 | 00,000,000 | ---D | C] Prescription number (Rx#).wpd -> C:\Documents and Settings\Nina\My Documents\Prescription number (Rx#).wpd -> [2009/08/13 17:26:15 | 00,015,462 | ---- | C] () dhtmled.ocx -> C:\WINDOWS\System32\dllcache\dhtmled.ocx -> [2009/08/11 23:43:59 | 00,128,512 | ---- | C] (Microsoft Corporation) msoe.dll -> C:\WINDOWS\System32\dllcache\msoe.dll -> [2009/08/11 23:43:39 | 01,315,328 | ---- | C] (Microsoft Corporation) NOS -> C:\Documents and Settings\All Users\Application Data\NOS -> [2009/08/10 16:13:08 | 00,000,000 | ---D | C] mswebdvd.dll -> C:\WINDOWS\System32\dllcache\mswebdvd.dll -> [2009/08/05 02:01:48 | 00,204,800 | ---- | C] (Microsoft Corporation) WlanUIG.sys -> C:\WINDOWS\System32\drivers\WlanUIG.sys -> [2007/06/02 12:51:25 | 00,347,648 | R--- | C] ( ) wkiwjnsh.ini -> C:\WINDOWS\System32\wkiwjnsh.ini -> [2007/04/26 19:05:53 | 00,000,463 | -HS- | C] () mlnmp.ini2 -> C:\WINDOWS\System32\mlnmp.ini2 -> [2007/04/25 22:37:07 | 01,375,741 | -HS- | C] () mlnmp.ini -> C:\WINDOWS\System32\mlnmp.ini -> [2007/04/24 08:37:08 | 01,356,390 | -HS- | C] () bccdd.ini -> C:\WINDOWS\System32\bccdd.ini -> [2007/04/23 21:48:24 | 00,000,377 | -HS- | C] () stutv.ini -> C:\WINDOWS\System32\stutv.ini -> [2007/04/23 21:48:24 | 00,000,353 | -HS- | C] () lvcoinst.ini -> C:\WINDOWS\System32\lvcoinst.ini -> [2006/11/21 16:03:58 | 00,013,126 | R--- | C] () InstExec.ini -> C:\WINDOWS\System32\InstExec.ini -> [2006/11/21 15:53:54 | 00,000,719 | R--- | C] () HP_CounterReport_Update_HPSU.ini -> C:\WINDOWS\HP_CounterReport_Update_HPSU.ini -> [2006/05/18 11:23:35 | 00,000,227 | ---- | C] () HPGdiPlus.ini -> C:\WINDOWS\HPGdiPlus.ini -> [2006/05/18 11:22:22 | 00,000,206 | ---- | C] () HP_RedboxHprblog_HPSU.ini -> C:\WINDOWS\HP_RedboxHprblog_HPSU.ini -> [2006/05/18 11:21:20 | 00,000,221 | ---- | C] () HP_48BitScanUpdatePatch.ini -> C:\WINDOWS\HP_48BitScanUpdatePatch.ini -> [2006/03/19 11:14:48 | 00,000,214 | ---- | C] () hpqEmlSz.INI -> C:\WINDOWS\hpqEmlSz.INI -> [2006/01/15 15:57:51 | 00,000,000 | ---- | C] () DXFLib.dll -> C:\WINDOWS\System32\DXFLib.dll -> [2006/01/12 18:09:14 | 00,090,112 | ---- | C] () opcode.dll -> C:\WINDOWS\System32\opcode.dll -> [2006/01/12 18:08:06 | 00,143,360 | ---- | C] () LVMVdrv.sys -> C:\WINDOWS\System32\drivers\LVMVdrv.sys -> [2005/12/09 16:37:42 | 02,400,256 | ---- | C] () LVPrcMon.sys -> C:\WINDOWS\System32\drivers\LVPrcMon.sys -> [2005/12/09 16:37:42 | 00,016,768 | ---- | C] () Lvckap.sys -> C:\WINDOWS\System32\drivers\Lvckap.sys -> [2005/12/09 16:35:54 | 02,174,464 | ---- | C] () ipixActivex.ini -> C:\WINDOWS\ipixActivex.ini -> [2005/05/17 19:53:12 | 00,000,037 | ---- | C] () uccspecb.sys -> C:\WINDOWS\uccspecb.sys -> [2005/03/28 19:43:55 | 00,000,004 | ---- | C] () winamp.ini -> C:\WINDOWS\winamp.ini -> [2005/01/16 17:04:33 | 00,000,192 | ---- | C] () Mfts50.dll -> C:\WINDOWS\System32\Mfts50.dll -> [2004/08/04 00:56:42 | 00,004,608 | ---- | C] () msoffice.ini -> C:\WINDOWS\msoffice.ini -> [2004/07/08 18:22:23 | 00,000,002 | ---- | C] () cdPlayer.ini -> C:\WINDOWS\cdPlayer.ini -> [2004/03/20 00:12:05 | 00,005,020 | ---- | C] () VTruck3.ini -> C:\WINDOWS\VTruck3.ini -> [2004/02/26 20:14:23 | 00,000,545 | ---- | C] () VTruck2.ini -> C:\WINDOWS\VTruck2.ini -> [2004/02/26 20:06:40 | 00,000,568 | ---- | C] () AdslCfg.ini -> C:\WINDOWS\System32\AdslCfg.ini -> [2004/02/26 19:55:30 | 00,002,498 | ---- | C] () AdslCfg.ini -> C:\WINDOWS\AdslCfg.ini -> [2004/02/26 19:55:29 | 00,002,498 | ---- | C] () VTruck1.ini -> C:\WINDOWS\VTruck1.ini -> [2004/02/26 19:54:52 | 00,000,404 | ---- | C] () ntsautodial.ini -> C:\WINDOWS\ntsautodial.ini -> [2004/02/25 19:52:59 | 00,000,017 | ---- | C] () smscfg.ini -> C:\WINDOWS\smscfg.ini -> [2004/02/19 05:09:52 | 00,000,061 | ---- | C] () wininit.ini -> C:\WINDOWS\wininit.ini -> [2004/02/19 04:56:07 | 00,000,360 | ---- | C] () psisdecd.dll -> C:\WINDOWS\System32\psisdecd.dll -> [2004/02/19 04:42:28 | 00,363,520 | ---- | C] () fxsperf.ini -> C:\WINDOWS\System32\fxsperf.ini -> [2004/02/19 04:42:10 | 00,001,793 | ---- | C] () OEMINFO.INI -> C:\WINDOWS\System32\OEMINFO.INI -> [2004/02/19 04:28:48 | 00,000,549 | ---- | C] () BDEMERGE.INI -> C:\WINDOWS\System32\BDEMERGE.INI -> [2003/08/19 12:40:04 | 00,000,258 | ---- | C] () ORUN32.INI -> C:\WINDOWS\ORUN32.INI -> [2003/08/19 12:38:56 | 00,000,788 | ---- | C] () px.ini -> C:\WINDOWS\System32\px.ini -> [2003/08/13 21:54:00 | 00,000,000 | ---- | C] () WIN.INI -> C:\WINDOWS\WIN.INI -> [2002/09/03 07:59:58 | 00,000,878 | ---- | C] () SYSTEM.INI -> C:\WINDOWS\SYSTEM.INI -> [2002/09/03 07:50:58 | 00,000,227 | ---- | C] () hptcpmon.ini -> C:\WINDOWS\System32\hptcpmon.ini -> [2001/07/06 16:30:00 | 00,003,399 | ---- | C] () indounin.dll -> C:\WINDOWS\System32\indounin.dll -> [1999/01/27 14:39:06 | 00,065,024 | ---- | C] () Iyvu9_32.dll -> C:\WINDOWS\System32\Iyvu9_32.dll -> [1997/06/13 08:56:08 | 00,056,832 | ---- | C] () [Files/Folders - Modified Within 30 Days] 5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> 3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> OTS.exe -> C:\Documents and Settings\Nina\Desktop\OTS.exe -> [2009/08/26 23:06:22 | 00,514,048 | ---- | M] (OldTimer Tools) WPA.DBL -> C:\WINDOWS\System32\WPA.DBL -> [2009/08/26 22:59:54 | 00,001,170 | ---- | M] () Perflib_Perfdata_1c8.dat -> C:\WINDOWS\Temp\Perflib_Perfdata_1c8.dat -> [2009/08/26 22:58:19 | 00,016,384 | ---- | M] () SA.DAT -> C:\WINDOWS\tasks\SA.DAT -> [2009/08/26 22:58:03 | 00,000,006 | -H-- | M] () BOOTSTAT.DAT -> C:\WINDOWS\BOOTSTAT.DAT -> [2009/08/26 22:57:46 | 00,002,048 | --S- | M] () hiberfil.sys -> C:\hiberfil.sys -> [2009/08/26 22:57:37 | 26,640,7936 | -HS- | M] () kmxcfg.u2k7 -> C:\WINDOWS\System32\drivers\kmxcfg.u2k7 -> [2009/08/26 22:56:56 | 00,000,064 | ---- | M] () kmxcfg.u2k6 -> C:\WINDOWS\System32\drivers\kmxcfg.u2k6 -> [2009/08/26 22:56:56 | 00,000,064 | ---- | M] () kmxcfg.u2k5 -> C:\WINDOWS\System32\drivers\kmxcfg.u2k5 -> [2009/08/26 22:56:56 | 00,000,064 | ---- | M] () kmxcfg.u2k4 -> C:\WINDOWS\System32\drivers\kmxcfg.u2k4 -> [2009/08/26 22:56:56 | 00,000,064 | ---- | M] () kmxcfg.u2k0 -> C:\WINDOWS\System32\drivers\kmxcfg.u2k0 -> [2009/08/26 22:56:55 | 00,139,094 | ---- | M] () kmxcfg.u2k3 -> C:\WINDOWS\System32\drivers\kmxcfg.u2k3 -> [2009/08/26 22:56:55 | 00,000,064 | ---- | M] () kmxcfg.u2k2 -> C:\WINDOWS\System32\drivers\kmxcfg.u2k2 -> [2009/08/26 22:56:55 | 00,000,064 | ---- | M] () kmxcfg.u2k1 -> C:\WINDOWS\System32\drivers\kmxcfg.u2k1 -> [2009/08/26 22:56:55 | 00,000,064 | ---- | M] () ntuser.dat -> C:\Documents and Settings\Nina\ntuser.dat -> [2009/08/26 22:56:27 | 04,214,784 | ---- | M] () NTUSER.INI -> C:\Documents and Settings\Nina\NTUSER.INI -> [2009/08/26 22:56:27 | 00,000,178 | -HS- | M] () User_Feed_Synchronization-{2D22FF8A-63E5-4EAB-AE03-ED4760958CAE}.job -> C:\WINDOWS\tasks\User_Feed_Synchronization-{2D22FF8A-63E5-4EAB-AE03-ED4760958CAE}.job -> [2009/08/26 15:19:53 | 00,000,420 | -H-- | M] () sfdb.dat -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\engine\bases\sfdb.dat -> [2009/08/25 18:56:39 | 00,000,084 | ---- | M] () kosglue-7.0.26.0.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\kosglue-7.0.26.0.dll -> [2009/08/25 18:21:17 | 00,729,152 | ---- | M] (Kaspersky Lab) msvcr80.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\msvcr80.dll -> [2009/08/25 18:21:16 | 00,626,688 | ---- | M] (Microsoft Corporation) msvcp80.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\msvcp80.dll -> [2009/08/25 18:21:16 | 00,548,864 | ---- | M] (Microsoft Corporation) prLoader.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\prLoader.dll -> [2009/08/25 18:21:16 | 00,184,320 | ---- | M] (Kaspersky Lab) prremote.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\prremote.dll -> [2009/08/25 18:21:16 | 00,090,112 | ---- | M] (Kaspersky Lab) kave.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\kave.dll -> [2009/08/25 18:21:15 | 00,282,624 | ---- | M] (Kaspersky Lab.) ikave.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\ikave.dll -> [2009/08/25 18:21:15 | 00,065,536 | ---- | M] () ScanningProcess.exe -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\ScanningProcess.exe -> [2009/08/25 18:21:13 | 00,139,264 | ---- | M] (Kaspersky Lab.) FSSync.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\FSSync.dll -> [2009/08/25 18:21:12 | 00,038,400 | ---- | M] (Kaspersky Lab) msvcm80.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\jkos-Nina\binaries\msvcm80.dll -> [2009/08/25 18:21:11 | 00,479,232 | ---- | M] (Microsoft Corporation) Malwarebytes' Anti-Malware.lnk -> C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk -> [2009/08/25 15:52:50 | 00,000,696 | ---- | M] () mbam-setup.1.2D0D17.exe -> C:\Documents and Settings\Nina\Desktop\mbam-setup.1.2D0D17.exe -> [2009/08/25 15:50:59 | 03,942,048 | ---- | M] (Malwarebytes Corporation ) QMGR1.DAT -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\QMGR1.DAT -> [2009/08/25 15:37:22 | 00,004,646 | ---- | M] () QMGR0.DAT -> C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\QMGR0.DAT -> [2009/08/25 15:37:22 | 00,004,232 | ---- | M] () Acrobat.com.lnk -> C:\Documents and Settings\All Users\Desktop\Acrobat.com.lnk -> [2009/08/25 14:35:58 | 00,000,734 | ---- | M] () Adobe Reader 9.lnk -> C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk -> [2009/08/25 14:34:04 | 00,001,729 | ---- | M] () CAAntiSpywareScan_Daily as Nina at 1 15 PM.job -> C:\WINDOWS\tasks\CAAntiSpywareScan_Daily as Nina at 1 15 PM.job -> [2009/08/25 13:17:19 | 00,000,454 | ---- | M] () gmer.zip -> C:\Documents and Settings\Nina\Desktop\gmer.zip -> [2009/08/22 12:35:11 | 00,280,282 | ---- | M] () AppleSoftwareUpdate.job -> C:\WINDOWS\tasks\AppleSoftwareUpdate.job -> [2009/08/20 15:57:19 | 00,000,284 | ---- | M] () iTunes.lnk -> C:\Documents and Settings\All Users\Desktop\iTunes.lnk -> [2009/08/13 18:59:33 | 00,002,137 | ---- | M] () HijackThis.lnk -> C:\Documents and Settings\Nina\Desktop\HijackThis.lnk -> [2009/08/13 18:03:38 | 00,001,734 | ---- | M] () Prescription number (Rx#).wpd -> C:\Documents and Settings\Nina\My Documents\Prescription number (Rx#).wpd -> [2009/08/13 17:26:15 | 00,015,462 | ---- | M] () imsins.BAK -> C:\WINDOWS\imsins.BAK -> [2009/08/12 03:09:30 | 00,001,374 | ---- | M] () MSN.com.url -> C:\Documents and Settings\Nina\Desktop\MSN.com.url -> [2009/08/05 16:03:28 | 00,006,206 | ---- | M] () mswebdvd.dll -> C:\WINDOWS\System32\mswebdvd.dll -> [2009/08/05 02:01:48 | 00,204,800 | ---- | M] (Microsoft Corporation) mswebdvd.dll -> C:\WINDOWS\System32\dllcache\mswebdvd.dll -> [2009/08/05 02:01:48 | 00,204,800 | ---- | M] (Microsoft Corporation) mbamswissarmy.sys -> C:\WINDOWS\System32\drivers\mbamswissarmy.sys -> [2009/08/03 13:36:28 | 00,038,160 | ---- | M] (Malwarebytes Corporation) mbam.sys -> C:\WINDOWS\System32\drivers\mbam.sys -> [2009/08/03 13:36:06 | 00,019,096 | ---- | M] (Malwarebytes Corporation) MRT.exe -> C:\WINDOWS\System32\MRT.exe -> [2009/07/29 17:49:14 | 24,281,536 | ---- | M] (Microsoft Corporation) YLPGSCAT.DAT -> C:\Documents and Settings\All Users\Application Data\Microsoft\Money\12.0\Webcache\YLPGSCAT.DAT -> [2003/06/18 11:00:00 | 12,283,223 | ---- | M] () COLLEGE.DAT -> C:\Documents and Settings\All Users\Application Data\Microsoft\Money\12.0\Webcache\COLLEGE.DAT -> [2003/06/18 11:00:00 | 00,327,746 | ---- | M] () ABOUT.DAT -> C:\Documents and Settings\All Users\Application Data\Microsoft\Money\12.0\Webcache\ABOUT.DAT -> [2003/06/18 11:00:00 | 00,001,528 | ---- | M] () MOREINFO.DAT -> C:\Documents and Settings\All Users\Application Data\Microsoft\Money\12.0\Webcache\MOREINFO.DAT -> [2003/06/18 11:00:00 | 00,000,102 | ---- | M] () AcroRd32.exe -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\AcroRd32.exe -> [2001/03/27 22:44:58 | 03,870,784 | R--- | M] (Adobe Systems Incorporated) WHA Library.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\WHA Library.dll -> [2001/03/15 07:14:38 | 00,167,936 | R--- | M] (Adobe Systems Incorporated) QT4.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\plug_ins\Movie\QT4.dll -> [2001/03/15 07:01:02 | 00,036,864 | R--- | M] (Adobe Systems, Inc.) QT3.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\plug_ins\Movie\QT3.dll -> [2001/03/15 07:00:42 | 00,032,768 | R--- | M] (Adobe Systems, Inc.) QT2.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\plug_ins\Movie\QT2.dll -> [2001/03/15 07:00:24 | 00,024,576 | R--- | M] (Adobe Systems, Inc.) SVGControl.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\SVG Files\SVGControl.dll -> [2001/03/14 15:14:00 | 00,491,574 | R--- | M] (Adobe Systems Incorporated) NPSVGVw.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\SVG Files\NPSVGVw.dll -> [2001/03/14 15:10:56 | 00,299,059 | R--- | M] (Adobe Systems Inc.) SVGView.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\SVG Files\SVGView.dll -> [2001/03/14 15:07:52 | 01,597,491 | R--- | M] (Adobe Systems Incorporated) SVGRSRC.DLL -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\SVG Files\SVGRSRC.DLL -> [2001/03/14 15:06:24 | 00,012,288 | R--- | M] () CoolType.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\CoolType.dll -> [2001/03/14 11:06:02 | 01,441,792 | R--- | M] (Adobe Systems, Incorporated) Agm.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\Agm.dll -> [2001/03/14 11:06:02 | 01,138,688 | R--- | M] (Adobe Systems, Incorporated) NPDocBox.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\plug_ins\InterTrust\NPDocBox.dll -> [2001/03/14 05:52:06 | 00,225,280 | R--- | M] (InterTrust Technologies Corporation, Inc.) AceLite.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\AceLite.dll -> [2001/02/28 10:29:36 | 00,397,312 | R--- | M] (Adobe Systems, Incorporated) nppdf32.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\Browser\nppdf32.dll -> [2001/02/26 22:48:44 | 00,103,312 | R--- | M] (Adobe Systems Inc.) Uninst.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\Uninstall\Uninst.dll -> [2001/02/26 22:48:44 | 00,081,920 | R--- | M] (Adobe Systems, Inc.) Bib.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\Bib.dll -> [2001/01/20 23:13:36 | 00,147,456 | R--- | M] (Adobe Systems, Incorporated) ACROFX32.DLL -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\ACROFX32.DLL -> [2000/05/12 19:30:02 | 00,053,248 | R--- | M] () msvcp60.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\msvcp60.dll -> [1999/12/01 01:40:28 | 00,401,462 | R--- | M] (Microsoft Corporation) msvcrt.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\msvcrt.dll -> [1999/02/11 04:33:58 | 00,266,293 | R--- | M] (Microsoft Corporation) Setup.exe -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Setup.exe -> [1999/01/12 12:42:20 | 00,073,728 | R--- | M] (InstallShield Software Corporation) lang.dat -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\lang.dat -> [1999/01/12 11:34:42 | 00,023,541 | R--- | M] () _ISDel.exe -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\_ISDel.exe -> [1998/10/27 13:06:48 | 00,027,648 | R--- | M] (InstallShield Software Corporation) _Setup.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\_Setup.dll -> [1998/09/29 17:34:56 | 00,034,816 | R--- | M] (InstallShield Software Corporation) os.dat -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\os.dat -> [1998/07/27 18:41:06 | 00,000,450 | R--- | M] () oleaut32.dll -> C:\Documents and Settings\Nina\Local Settings\Temp\pft1FE~tmp\Reader\oleaut32.dll -> [1998/06/18 12:33:08 | 00,598,288 | R--- | M] (Microsoft Corporation) < End of report >
Free Malware Removal Forum
community support for infected computers
- Please let me know if you still are having problems with your computer and what these problems are.
