Logfile of random's system information tool 1.07 (written by random/random)
Run by [removed] at 2010-06-22 02:38:29
Microsoft? Windows Vista? Home Premium  Service Pack 1
System drive C: has 84 GB (37%) free of 226 GB
Total RAM: 2045 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:38:39 AM, on 22/6/2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Dell\DellDock\DellDock.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Taskbar Shuffle\taskbarshuffle.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Mozilla Firefox\FirefoxPreloader\FirefoxPreloader.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\Window Hide Tool\Window Hide Tool.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Thunder Network\MiniThunder\MiniThunder.exe
C:\Program Files\Common Files\Thunder Network\DS\Ver1\1.0.2.61\ThunderService.exe
C:\Users\user\Desktop\RSIT.exe
C:\Program Files\trend micro\user.exe

R3 - URLSearchHook: PIPI Link Helper - {1E315374-71A5-471A-B683-4C4ADB5C588B} - C:\Program Files\StarTV\core\pipi\JfCheck.dll
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: PIPI Link Helper - {1A3440C6-F123-4CAB-84EE-C814E1AE0D8F} - C:\Program Files\StarTV\core\pipi\JfCheck.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKCU\..\Run: [Taskbar Shuffle] C:\Program Files\Taskbar Shuffle\taskbarshuffle.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe
O4 - Startup: Window Hide Tool.lnk = C:\Program Files\Window Hide Tool\Window Hide Tool.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Firefox Preloader.lnk = C:\Program Files\Mozilla Firefox\FirefoxPreloader\FirefoxPreloader.exe
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: ʹ�ù�Ӱ�༭������ - C:\Program Files\nEO iMAGING\NeoOpenNeo.htm
O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Acronis OS Selector Reinstall Service (AcronisOSSReinstallSvc) - Unknown owner - C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe (file missing)
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 7595 bytes

======Scheduled tasks folder======

C:\Windows\tasks\At1.job
C:\Windows\tasks\At10.job
C:\Windows\tasks\At2.job
C:\Windows\tasks\At3.job
C:\Windows\tasks\At4.job
C:\Windows\tasks\At5.job
C:\Windows\tasks\At6.job
C:\Windows\tasks\At7.job
C:\Windows\tasks\At8.job
C:\Windows\tasks\At9.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\User_Feed_Synchronization-{81A76683-2D7E-4FFC-996D-F04B3F4A2DC7}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}]
Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll [2010-05-07 240912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1A3440C6-F123-4CAB-84EE-C814E1AE0D8F}]
PIPI Link Helper - C:\Program Files\StarTV\core\pipi\JfCheck.dll [2010-06-09 237464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-03-05 251504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll [2009-01-02 657904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll [2009-03-05 522224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-03-05 251504]
{C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll [2010-05-07 666816]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\DellTPad\Apoint.exe [2007-09-24 159744]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-02-21 1093208]
"Broadcom Wireless Manager UI"=C:\Windows\system32\WLTRAY.exe [2010-05-12 3444736]
"SigmatelSysTrayApp"=C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [2007-09-13 405504]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2009-10-20 111928]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"NVHotkey"=C:\Windows\system32\nvHotkey.dll [2010-03-16 88168]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"dellsupportcenter"=C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2009-05-21 206064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Taskbar Shuffle"=C:\Program Files\Taskbar Shuffle\taskbarshuffle.exe [2008-04-17 818176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-25 952768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter]
C:\Program Files\Dell Support Center\bin\sprtcmd.exe [2009-05-21 206064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dscactivate]
C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe [2008-03-11 16384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mspaint]
C:\Windows\system32\Paint.exe -autocheck []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]
C:\Program Files\Dell\MediaDirect\PCMService.exe [2007-12-21 184320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SigmatelSysTrayApp]
C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe [2007-09-13 405504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-01-02 39408]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
Firefox Preloader.lnk - C:\Program Files\Mozilla Firefox\FirefoxPreloader\FirefoxPreloader.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dell Dock.lnk - C:\Program Files\Dell\DellDock\DellDock.exe
Window Hide Tool.lnk - C:\Program Files\Window Hide Tool\Window Hide Tool.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\GoToAssist]
C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll [2008-07-29 10536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AF2C392C-AC67-43E3-9B71-FAAF85C36892}"= []
"{39B15A4A-8C87-43B7-9859-E98F429DDEBB}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
C:\Windows\system32\geBqNdbC

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\GoToAssist]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoInternetIcon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1920e0bf-5f8c-11dd-aac1-001ec9089b10}]
shell\AutoRun\command - MadFona.exe
shell\explore\command - MadFona.exe
shell\open\command - MadFona.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2e89beaa-0621-11de-bf83-001ec9089b10}]
shell\AutoRun\command - flash.exe D:\
shell\Explore\command - flash.exe D:\
shell\Open\command - flash.exe D:\


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.reg - open - regedit.exe "%1" %*
.scr - open - "%1" %*

======List of files/folders created in the last 1 months======

2010-06-22 02:23:41 ----D---- C:\rsit
2010-06-22 02:23:41 ----D---- C:\Program Files\trend micro
2010-06-21 19:04:39 ----D---- C:\Program Files\WinPcap
2010-06-21 18:04:55 ----D---- C:\Users\user\AppData\Roaming\Locktime
2010-06-21 18:02:38 ----D---- C:\ProgramData\Locktime
2010-06-21 00:49:47 ----D---- C:\MGADiagToolOutput
2010-06-21 00:45:21 ----D---- C:\Users\user\AppData\Roaming\Template
2010-06-18 22:12:40 ----D---- C:\ProgramData\Office Genuine Advantage
2010-06-18 14:37:55 ----D---- C:\ProgramData\KONAMI
2010-06-16 18:11:17 ----A---- C:\Windows\system32\rmoc3260.dll
2010-06-16 18:11:17 ----A---- C:\Windows\system32\pndx5032.dll
2010-06-16 18:11:17 ----A---- C:\Windows\system32\pndx5016.dll
2010-06-16 18:11:14 ----A---- C:\Windows\avisplitter.ini
2010-06-16 18:11:12 ----A---- C:\Windows\system32\yv12vfw.dll
2010-06-16 18:11:12 ----A---- C:\Windows\system32\huffyuv.dll
2010-06-16 18:11:11 ----A---- C:\Windows\system32\xvidvfw.dll
2010-06-16 18:11:11 ----A---- C:\Windows\system32\xvidcore.dll
2010-06-16 18:11:11 ----A---- C:\Windows\system32\vp7vfw.dll
2010-06-16 18:11:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-06-16 18:11:10 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-06-16 18:11:10 ----A---- C:\Windows\system32\ff_vfw.dll
2010-06-16 18:11:10 ----A---- C:\Windows\system32\dpl100.dll
2010-06-16 18:11:10 ----A---- C:\Windows\system32\divx.dll
2010-06-16 18:11:05 ----D---- C:\Program Files\K-Lite Codec Pack
2010-06-16 13:39:34 ----D---- C:\Users\user\AppData\Roaming\DassaultSystemes
2010-06-16 13:39:34 ----D---- C:\ProgramData\DassaultSystemes
2010-06-12 20:04:35 ----A---- C:\Windows\user.ini
2010-06-12 20:04:04 ----D---- C:\Users\user\AppData\Roaming\Tencent
2010-06-12 20:03:10 ----D---- C:\Users\user\AppData\Roaming\PPLive
2010-06-12 15:39:30 ----D---- C:\Users\user\AppData\Roaming\PIPI
2010-06-12 08:44:58 ----D---- C:\Program Files\Left 4 Dead 2
2010-06-11 13:56:43 ----D---- C:\Users\user\AppData\Roaming\vlc
2010-06-11 13:55:05 ----D---- C:\Program Files\VideoLAN
2010-06-10 18:57:56 ----A---- C:\Windows\ntbtlog.txt
2010-06-10 16:25:46 ----D---- C:\Windows\temp
2010-06-10 10:39:31 ----HD---- C:\VJVod_Cache
2010-06-09 22:28:59 ----D---- C:\Program Files\Common Files\Real
2010-06-09 19:39:24 ----D---- C:\Users\user\AppData\Roaming\Media Player Classic
2010-06-09 13:39:05 ----A---- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2010-06-09 13:37:18 ----D---- C:\ProgramData\Soluto
2010-06-07 19:44:56 ----D---- C:\Users\user\AppData\Roaming\Malwarebytes
2010-06-07 19:44:49 ----D---- C:\ProgramData\Malwarebytes
2010-06-07 19:44:48 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-06-07 17:28:18 ----D---- C:\Program Files\Windows Installer Clean Up
2010-06-06 18:03:14 ----D---- C:\Windows\system32\Death_Aboard_II_V1
2010-06-04 22:18:58 ----A---- C:\Windows\system32\shdoclc.dll
2010-06-04 22:18:35 ----D---- C:\Windows\system32\tools
2010-06-04 22:18:35 ----D---- C:\Windows\system32\core
2010-06-04 22:18:35 ----D---- C:\Program Files\StarTV
2010-06-04 22:18:19 ----A---- C:\Windows\system32\FT_ET99_API.dll
2010-06-04 22:18:19 ----A---- C:\Windows\system32\et99_full.dll
2010-06-04 03:52:41 ----A---- C:\Windows\powerlist.ini
2010-06-04 03:52:41 ----A---- C:\Windows\msgtn.ini
2010-06-04 01:05:49 ----A---- C:\Windows\system32\ET99_MOD.dll
2010-06-04 01:05:49 ----A---- C:\Windows\system32\b.bat
2010-06-03 21:08:35 ----A---- C:\Windows\psnetwork.ini
2010-06-03 09:19:41 ----D---- C:\Users\user\AppData\Roaming\FastStone
2010-06-03 09:19:22 ----D---- C:\Program Files\FastStone Image Viewer
2010-06-03 08:48:08 ----D---- C:\Program Files\FotoSketcher
2010-06-01 22:46:15 ----A---- C:\Windows\system32\CmdLineExt.dll
2010-06-01 20:32:47 ----D---- C:\Users\user\AppData\Roaming\YCanPDF
2010-06-01 20:32:05 ----D---- C:\Program Files\PDF OCR
2010-05-31 20:43:10 ----A---- C:\Windows\pro iToolSoft PPT To Video.ini
2010-05-31 20:43:10 ----A---- C:\Windows\iToolSoft PPT To Video.ini
2010-05-31 20:42:05 ----D---- C:\Program Files\iToolSoft Software
2010-05-31 06:29:10 ----A---- C:\Windows\system32\inetcomm.dll
2010-05-31 06:29:04 ----A---- C:\Windows\system32\tzres.dll
2010-05-29 18:23:12 ----D---- C:\Program Files\Null DC 1.6
2010-05-29 06:05:54 ----A---- C:\Windows\powerplayer.ini
2010-05-29 06:05:45 ----A---- C:\Windows\PPSMediaList.ini
2010-05-29 06:03:19 ----D---- C:\Users\user\AppData\Roaming\PPStream
2010-05-29 06:03:19 ----D---- C:\Program Files\PPS.tv

======List of files/folders modified in the last 1 months======

2010-06-22 02:23:41 ----D---- C:\Program Files
2010-06-22 01:18:23 ----D---- C:\Windows\inf
2010-06-22 01:18:23 ----AD---- C:\Windows\System32
2010-06-22 01:18:23 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-21 22:45:14 ----D---- C:\Program Files\Taskbar Shuffle
2010-06-21 22:26:34 ----D---- C:\Users\user\AppData\Roaming\Orbit
2010-06-21 21:25:45 ----SHD---- C:\System Volume Information
2010-06-21 20:59:52 ----D---- C:\Program Files\Common Files\System
2010-06-21 19:53:06 ----D---- C:\Windows\system32\drivers
2010-06-21 18:02:38 ----HD---- C:\ProgramData
2010-06-21 17:49:02 ----SHD---- C:\Windows\Installer
2010-06-21 17:06:51 ----AD---- C:\Windows
2010-06-21 16:59:45 ----D---- C:\Windows\system32\catroot
2010-06-21 05:10:49 ----D---- C:\Windows\Tasks
2010-06-21 05:10:49 ----D---- C:\Windows\system32\Tasks
2010-06-21 00:45:25 ----D---- C:\Windows\Prefetch
2010-06-21 00:38:37 ----D---- C:\ProgramData\Microsoft Help
2010-06-21 00:38:32 ----RSD---- C:\Windows\assembly
2010-06-21 00:38:16 ----SD---- C:\ProgramData\Microsoft
2010-06-21 00:38:16 ----D---- C:\Program Files\Common Files\microsoft shared
2010-06-21 00:38:15 ----D---- C:\Program Files\Microsoft Office
2010-06-21 00:38:15 ----D---- C:\Program Files\Common Files
2010-06-21 00:38:12 ----D---- C:\Windows\ShellNew
2010-06-21 00:38:02 ----D---- C:\Program Files\MSBuild
2010-06-21 00:37:45 ----RSD---- C:\Windows\Fonts
2010-06-21 00:35:30 ----A---- C:\Windows\win.ini
2010-06-21 00:32:49 ----D---- C:\Windows\system32\catroot2
2010-06-20 20:31:21 ----D---- C:\Program Files\Bonjour
2010-06-20 16:08:31 ----D---- C:\Documents and Settings
2010-06-19 13:15:18 ----D---- C:\Program Files\Garena
2010-06-18 14:37:55 ----D---- C:\Program Files\KONAMI
2010-06-14 22:25:42 ----D---- C:\Program Files\Lingoes
2010-06-12 10:58:46 ----D---- C:\Windows\nvidia icons
2010-06-11 13:37:38 ----D---- C:\Users\user\AppData\Roaming\dvdcss
2010-06-11 10:26:19 ----D---- C:\Windows\system32\config
2010-06-11 10:26:05 ----SD---- C:\Windows\Downloaded Program Files
2010-06-11 10:26:05 ----D---- C:\Windows\system32\spool
2010-06-11 10:26:05 ----D---- C:\Windows\system32\en-US
2010-06-11 10:26:01 ----D---- C:\Windows\system32\wbem
2010-06-11 10:26:01 ----D---- C:\Windows\registration
2010-06-11 10:25:05 ----SHD---- C:\$Recycle.Bin
2010-06-11 07:27:03 ----D---- C:\Boot
2010-06-10 23:20:55 ----D---- C:\Windows\Debug
2010-06-10 16:25:15 ----D---- C:\Users\user\AppData\Roaming\Adobe
2010-06-10 16:22:27 ----D---- C:\Windows\AppPatch
2010-06-10 10:44:15 ----D---- C:\ProgramData\DivX
2010-06-09 22:29:06 ----A---- C:\Windows\system32\msvcr71.dll
2010-06-09 20:43:50 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-06-09 14:18:32 ----DC---- C:\Windows\system32\DRVSTORE
2010-06-07 20:42:42 ----HD---- C:\Windows\PIF
2010-06-07 19:12:31 ----D---- C:\Windows\system
2010-06-07 17:27:26 ----D---- C:\Program Files\MSECACHE
2010-06-07 17:15:45 ----D---- C:\Windows\system32\CodeIntegrity
2010-06-07 17:15:42 ----D---- C:\Program Files\Total Video Converter
2010-06-07 17:15:42 ----D---- C:\Program Files\MeteorNetTV
2010-06-06 17:18:07 ----D---- C:\Windows\en-US
2010-06-05 16:38:15 ----D---- C:\Program Files\IObit
2010-06-05 06:42:49 ----D---- C:\Program Files\Mozilla Firefox
2010-05-31 07:19:48 ----D---- C:\Windows\rescache
2010-05-31 06:32:17 ----D---- C:\Windows\winsxs
2010-05-31 06:32:17 ----D---- C:\Program Files\Windows Mail
2010-05-28 19:40:09 ----D---- C:\Users\user\AppData\Roaming\LocalLow
2010-05-28 12:37:36 ----A---- C:\Windows\system32\mrt.exe
2010-05-27 20:37:58 ----SHD---- C:\Windows\ftpcache
2010-05-27 06:29:23 ----HD---- C:\Program Files\InstallShield Installation Information
2010-05-27 06:20:43 ----D---- C:\Windows\system32\SWC
2010-05-26 03:30:00 ----D---- C:\Program Files\Street Fighter IV
2010-05-24 03:55:58 ----D---- C:\Program Files\Songr

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-18 26024]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2009-12-02 149040]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-20 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-11-27 32256]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2006-11-27 43520]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-27 37376]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-05 8192]
R3 ApfiltrService;Alps Touch Pad Filter Driver for Windows 2000/XP/Vista; C:\Windows\system32\DRIVERS\Apfiltr.sys [2007-09-24 155136]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2007-05-21 179712]
R3 BCM43XX;Dell Wireless WLAN Card Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2008-05-16 1044984]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-11-03 986624]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-11-03 206848]
R3 KMWDFILTER;HIDUASDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2010-03-17 11597416]
R3 OEM02Dev;Creative Camera OEM002 Driver; C:\Windows\system32\DRIVERS\OEM02Dev.sys [2007-12-03 235648]
R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver; C:\Windows\system32\DRIVERS\OEM02Vfx.sys [2007-12-03 7424]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\Windows\system32\drivers\stwrt.sys [2007-09-13 330240]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2009-08-10 29696]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-11-03 659968]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]
S2 9158CAP;9158cap, WDM Video Capture; C:\Windows\system32\DRIVERS\9158cap.sys [2009-10-20 317082]
S3 Ad-Watch Connect Filter;Ad-Watch Connect Kernel Filter; \??\C:\Windows\system32\drivers\NSDriver.sys []
S3 Ad-Watch Real-Time Scanner;AW Real-Time Scanner; \??\C:\Windows\system32\drivers\AWRTPD.sys []
S3 BCM42RLY;BCM42RLY; C:\Windows\system32\drivers\BCM42RLY.sys []
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-04-29 19456]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2006-11-07 78128]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2006-11-07 80176]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2006-11-07 16560]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-01-21 220672]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\Users\user\AppData\Local\Temp\DSI3303.tmp [2010-06-19 25616]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 npkcusb;npkcusb; \??\C:\Windows\system32\npkcusb.sys []
S3 p2pfilter;p2pfilter; \??\D:\Program Files\LanQos\p2pfilter.sys []
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-01-21 49664]
S3 s0017bus;Sony Ericsson Device 0017 driver (WDM); C:\Windows\system32\DRIVERS\s0017bus.sys [2008-05-27 90536]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 XDva248;XDva248; \??\C:\Windows\system32\XDva248.sys []
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\system32\aestsrv.exe [2007-09-20 73728]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 DockLoginService;Dock Login Service; C:\Program Files\Dell\DellDock\DockLogin.exe [2008-04-28 161048]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2009-12-09 17904]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-03-16 129640]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-05-16 66872]
R2 sprtsvc_dellsupportcenter;SupportSoft Sprocket Service (dellsupportcenter); C:\Program Files\Dell Support Center\bin\sprtsvc.exe [2008-08-14 201968]
R2 STacSV;SigmaTel Audio Service; C:\Windows\system32\STacSV.exe [2007-09-13 102400]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R2 wltrysvc;Dell Wireless WLAN Tray Service; C:\Windows\System32\WLTRYSVC.EXE [2010-05-12 24064]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-05 386560]
S2 AcronisOSSReinstallSvc;Acronis OS Selector Reinstall Service; C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall_svc.exe []
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-22 136176]
S2 vvdsvc;VJVodClientServices; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-08-06 654848]
S3 GoToAssist;GoToAssist; C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe [2008-07-29 16680]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2009-02-17 2736890]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2009-10-21 117264]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2008-03-24 74384]
S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.exe [2008-01-21 21504]

-----------------EOF-----------------