1
For Sale / Wanted / Hello all
« on: October 07, 2015, 07:55:45 PM »queers
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
2
Tech Clinic / Limited Internet access (Wireless and Direct connect)
« on: February 03, 2013, 06:45:48 PM »Alright recently i purchased a new laptop for school, everything was working fine and i had no problem with it.
Then the other day my internet icon shows up with yellow caution sign on it. I have full signal strength but it my access to the internet is being limited.
I read that it could be number of thing but im not sure how to go about solving this.
I have tried resetting the modem and router multiple times, still nothing helps.
My router is a NETGEAR WNR2000 v3 and i have a CISCO DPC3010 Cable modem.
i have tried turning off all my firewalls for both my desktop and laptop but still nothing helps.
3
General Discussion / Why
« on: April 08, 2011, 11:06:51 PM »
you reply'd inside a quote box. Just say'n.
4
General Discussion / Why
« on: April 02, 2011, 11:23:19 PM »
Why do i find myself playing this game again.
5
General Discussion / Real World Item Trading / Wilderness Coming Back
« on: April 02, 2011, 11:21:55 PM »
[quote name='Hey man I need pants too' date='02 April 2011 - 04:58 AM' timestamp='1301738285' post='477654']
i just opened my window... just for you jony
[/quote]
k
i just opened my window... just for you jony
[/quote]
k
6
General Discussion / Real World Item Trading / Wilderness Coming Back
« on: March 08, 2011, 04:52:26 PM »
[quote name='eloyman' date='28 January 2011 - 04:25 PM' timestamp='1296253538' post='475391']
It's like a mini-reunion in this thread.
[/quote]
Nope
It's like a mini-reunion in this thread.
[/quote]
Nope
7
Tech Clinic / OS question, and Download error.
« on: March 01, 2011, 12:49:24 AM »
[quote name='guestolo' date='28 February 2011 - 11:48 PM' timestamp='1298958517' post='476641']
How is everything running on your end now?
[/quote]
Very smooth
How is everything running on your end now?
[/quote]
Very smooth
8
Tech Clinic / OS question, and Download error.
« on: March 01, 2011, 12:44:23 AM »
Here you are.
OTL logfile created on: 2/28/2011 9:40:40 PM - Run 2
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Jonathon\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 73.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 84.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 175.12 Gb Free Space | 37.60% Space Free | Partition Type: NTFS
Computer Name: JONATHONB | User Name: Jonathon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
PRC - [2010/12/05 13:43:48 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2009/11/23 15:53:58 | 004,781,352 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchUser.exe
PRC - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchService.exe
PRC - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Pen_Tablet.exe
PRC - [2009/04/22 20:11:32 | 001,675,776 | ---- | M] (Flagship Industries, Inc.) -- C:\Program Files\Ventrilo\Ventrilo.exe
PRC - [2009/02/02 08:46:42 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
PRC - [2009/02/02 08:46:40 | 001,443,144 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
PRC - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
PRC - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/13 20:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/11/15 09:09:56 | 000,059,920 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\LBTWiz.exe
PRC - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
========== Modules (SafeList) ==========
MOD - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
MOD - [2008/04/13 20:42:52 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010/04/24 22:04:55 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/15 10:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 10:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/25 10:00:54 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2010/01/22 08:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2010/01/15 04:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\WTouch\WTouchService.exe -- (WTouchService)
SRV - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\WINDOWS\system32\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2009/08/30 11:17:30 | 003,407,412 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
SRV - [2009/02/02 08:46:40 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC)
SRV - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2007/08/11 20:05:27 | 003,093,872 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)
========== Driver Services (SafeList) ==========
DRV - [2011/01/21 20:40:40 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm) Virtual Audio Cable (WDM)
DRV - [2010/12/17 01:00:00 | 001,360,760 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110228.024\NAVEX15.SYS -- (NAVEX15)
DRV - [2010/12/17 01:00:00 | 000,086,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110228.024\NAVENG.SYS -- (NAVENG)
DRV - [2010/09/10 22:32:20 | 000,167,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WpsHelper.sys -- (WpsHelper)
DRV - [2010/05/27 00:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/27 00:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/03/29 09:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/08/27 14:06:32 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/06/29 21:42:00 | 000,027,136 | ---- | M] (NCH Swift Sound) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nchssvad.sys -- (NCHSSVAD)
DRV - [2009/05/20 10:54:06 | 000,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2009/03/28 11:01:08 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009/03/27 13:23:12 | 000,023,064 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/02/02 08:46:44 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS)
DRV - [2009/02/02 08:46:42 | 000,319,664 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2009/02/02 08:46:42 | 000,279,600 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2009/02/02 08:46:42 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2009/02/02 08:46:40 | 000,092,488 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys -- (SysPlant)
DRV - [2009/02/02 08:46:40 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2)
DRV - [2009/02/02 08:46:36 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2009/02/02 08:46:36 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2009/02/02 08:46:34 | 000,420,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009/02/02 08:46:34 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2008/07/03 01:03:14 | 004,745,216 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/02/20 13:47:36 | 000,162,824 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\FTT3.sys -- (FTT3)
DRV - [2008/01/03 06:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007/10/11 17:40:12 | 000,009,096 | R--- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdide.sys -- (amdide)
DRV - [2007/09/21 02:10:54 | 000,078,992 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2007/09/21 02:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007/09/21 02:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007/09/21 02:10:26 | 000,063,120 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2007/09/21 02:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007/04/16 16:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2007/02/16 10:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacommousefilter.sys -- (wacommousefilter)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A4 1A 25 59 CD D7 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=ConduitEngine&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=&SearchSource=13"
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: [email protected]:4.0.21.0
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:4.5
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0.071301000019
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: {0CDC78A2-05A1-47F9-8810-A36BA7576D00}:1.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.14908
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=BABTDF&PC=BBLN&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/06/17 14:21:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\MSN Toolbar\Platform\4.0.0417.0\Firefox [2010/10/09 16:00:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/10/09 16:01:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/26 21:37:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/27 13:36:00 | 000,000,000 | ---D | M]
[2009/04/30 14:29:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Extensions
[2011/02/28 20:51:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions
[2010/04/07 15:42:15 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010/05/11 18:14:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/12/28 01:15:04 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2009/07/16 23:33:11 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2009/06/04 14:21:28 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/10/28 12:43:34 | 000,001,840 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\bing.xml
[2010/04/11 20:36:02 | 000,001,201 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\winamp-search.xml
[2011/02/28 20:51:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/02/28 20:11:59 | 000,000,000 | ---D | M] (The Browser Highlighter) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\[email protected]
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\PFU1LARR.DEFAULT\EXTENSIONS\[email protected]
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\PFU1LARR.DEFAULT\EXTENSIONS\[email protected]
[2010/06/17 14:21:58 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3
File not found (No name found) -- C:\PROGRAM FILES\INTERNET SAVING OPTIMIZER\3.6.0.4470\FF
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}
[2010/12/09 02:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
O1 HOSTS File: ([2007/08/10 22:58:33 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Bluetooth Connection Assistant] File not found
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/08 16:27:48 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/02/28 21:25:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2011/02/28 21:25:35 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft XNA
[2011/02/28 21:12:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Application Data\Malwarebytes
[2011/02/28 21:12:06 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/02/28 21:12:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/02/28 21:12:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/02/28 21:12:02 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/02/28 21:12:02 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/02/28 21:11:20 | 007,734,240 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Jonathon\Desktop\mbam-setup.exe
[2011/02/28 21:04:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2011/02/28 21:00:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Dial-a-fix-v0.60.0.24
[2011/02/28 20:50:58 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/02/28 15:41:41 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/18 10:27:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15
[2011/02/07 16:41:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Logs
[2010/12/31 21:24:24 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\JavaSetup6u23.exe
[2010/12/31 21:05:48 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\jre-6u23-windows-i586-iftw-k.exe
[2010/12/12 21:21:08 | 006,274,424 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Silverlight.exe
[2010/12/03 16:08:27 | 002,728,440 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcsetup.exe
[2010/12/03 15:40:19 | 003,324,232 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vc_web.exe
[2004/01/12 00:00:00 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/28 21:23:08 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/02/28 21:22:39 | 000,013,486 | ---- | M] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2011/02/28 21:22:25 | 000,200,819 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/02/28 21:21:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/28 21:12:06 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/28 21:11:29 | 007,734,240 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Jonathon\Desktop\mbam-setup.exe
[2011/02/28 21:04:51 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2011/02/28 21:04:51 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2011/02/28 21:00:35 | 000,335,992 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Dial-a-fix-v0.60.0.24.zip
[2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/27 22:30:29 | 000,096,968 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 17:41:51 | 000,000,476 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Jonathon.job
[2011/02/27 13:57:16 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2011/02/27 13:40:23 | 000,000,215 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/26 14:17:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/02/18 10:27:45 | 001,402,518 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/13 20:54:55 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/02/13 20:54:55 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/12 08:09:12 | 000,456,304 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/02/12 08:09:12 | 000,075,210 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/28 21:12:06 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/28 21:00:34 | 000,335,992 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Dial-a-fix-v0.60.0.24.zip
[2011/02/27 22:29:55 | 000,096,968 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 13:40:23 | 000,000,215 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/18 10:27:43 | 001,402,518 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/13 20:54:55 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/01/29 10:33:01 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/29 10:33:01 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/21 20:40:53 | 000,031,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\vrtaucbl.sys
[2010/12/31 23:08:16 | 000,835,440 | ---- | C] () -- C:\Program Files\pbsvc.exe
[2010/12/31 22:53:25 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2010/12/27 23:34:47 | 005,430,783 | ---- | C] () -- C:\Program Files\WMV r506 32bit DEVWORK.rar
[2010/12/24 00:00:04 | 001,661,959 | ---- | C] () -- C:\Program Files\wowmodelview0.5.07.zip
[2010/12/10 21:13:05 | 001,985,823 | ---- | C] () -- C:\Program Files\AtlasLoot-v6.01.01.zip
[2010/12/07 18:29:56 | 000,001,456 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs
[2010/12/04 14:55:53 | 000,022,222 | ---- | C] () -- C:\Program Files\souper3.zip
[2010/12/04 11:39:28 | 000,980,215 | ---- | C] () -- C:\Program Files\msvcdll-90.zip
[2010/12/04 11:36:56 | 007,683,072 | ---- | C] () -- C:\Program Files\WMV_Installer_v0701_r500_Win64.msi
[2010/12/04 11:33:47 | 000,000,000 | ---- | C] () -- C:\Program Files\wowmodelview-0.5.06beta.zip
[2010/12/03 16:37:20 | 005,928,476 | ---- | C] () -- C:\Program Files\WMV_Binary_v0701_r490_Win32_DevWork.zip
[2010/12/03 16:25:15 | 003,728,716 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.3_Win32_Release.zip
[2010/12/03 16:10:54 | 005,167,176 | ---- | C] () -- C:\Program Files\WoW-2.4.0.8089-to-2.4.1.8125-enUS-patch.exe
[2010/12/03 15:36:37 | 007,091,330 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.1_Win32_Debug.zip
[2010/10/10 00:56:26 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2010/08/16 08:54:25 | 000,013,486 | ---- | C] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2010/08/03 15:54:23 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\Adobe PNG Format CS5 Prefs
[2010/06/17 19:29:26 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat.temp
[2010/06/17 19:29:26 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat.temp
[2010/06/17 14:13:10 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat
[2010/06/17 14:13:10 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat
[2010/05/16 06:44:30 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2009/10/10 20:51:36 | 000,058,004 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/10/08 16:28:11 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/05/10 15:48:01 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/04/30 14:29:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/04/27 20:49:35 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/04/27 20:05:16 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\setup_ldm.iss
[2009/03/12 20:02:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/03/12 20:00:08 | 003,767,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/12 13:55:32 | 000,138,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009/03/12 13:55:32 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\PnkBstrK.sys
[2009/03/12 13:55:13 | 000,835,440 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2009/03/12 13:55:13 | 000,270,904 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009/03/12 13:55:13 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2009/03/12 13:32:45 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009/03/12 13:18:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/03/12 13:14:03 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/01/13 14:22:56 | 002,163,200 | ---- | C] () -- C:\Program Files\WoWModelViewer.exe
[2009/01/12 12:19:56 | 000,288,056 | ---- | C] () -- C:\Program Files\logo.bmp
[2008/11/03 01:27:22 | 000,245,760 | ---- | C] () -- C:\Program Files\glew32.dll
[2008/10/06 21:33:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/10/06 21:33:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008/10/06 21:33:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008/10/06 21:33:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008/10/06 21:33:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/10/06 21:33:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008/10/06 21:33:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008/10/06 21:33:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008/10/06 21:33:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/06/05 08:58:26 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/13 20:55:28 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2006/12/30 22:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/08/23 03:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 03:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 03:00:00 | 000,456,304 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 03:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 03:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 03:00:00 | 000,075,210 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 03:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 03:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 03:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 03:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== LOP Check ==========
[2010/05/10 20:52:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2010/06/16 11:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2009/06/29 21:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2010/10/09 16:00:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2010/08/16 10:53:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2010/06/22 12:38:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2010/02/25 17:06:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Screaming Bee
[2011/02/28 21:22:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/10/07 18:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/10/10 17:55:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010/09/01 15:53:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/10/28 19:38:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/05/10 20:52:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\DAEMON Tools Lite
[2010/06/29 15:52:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Datel
[2009/10/18 11:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\GetRightToGo
[2009/04/27 20:05:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Leadertech
[2010/08/19 18:58:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\MsgCnf
[2010/06/16 11:37:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\NCH Swift Sound
[2011/02/28 19:14:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Octoshape
[2010/04/19 16:14:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\RadioBar
[2011/02/28 19:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\RayV
[2009/12/07 21:12:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Screaming Bee
[2009/05/24 11:16:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\SPORE
[2010/12/05 08:33:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/02/28 20:44:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\uTorrent
[2009/03/28 11:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Windows Desktop Search
[2009/06/30 20:00:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Windows Search
[2010/06/16 19:52:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\WTouch
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >
OTL logfile created on: 2/28/2011 9:40:40 PM - Run 2
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Jonathon\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 73.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 84.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 175.12 Gb Free Space | 37.60% Space Free | Partition Type: NTFS
Computer Name: JONATHONB | User Name: Jonathon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
PRC - [2010/12/05 13:43:48 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2009/11/23 15:53:58 | 004,781,352 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchUser.exe
PRC - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchService.exe
PRC - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Pen_Tablet.exe
PRC - [2009/04/22 20:11:32 | 001,675,776 | ---- | M] (Flagship Industries, Inc.) -- C:\Program Files\Ventrilo\Ventrilo.exe
PRC - [2009/02/02 08:46:42 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
PRC - [2009/02/02 08:46:40 | 001,443,144 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
PRC - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
PRC - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/13 20:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/11/15 09:09:56 | 000,059,920 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\LBTWiz.exe
PRC - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
========== Modules (SafeList) ==========
MOD - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
MOD - [2008/04/13 20:42:52 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010/04/24 22:04:55 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/15 10:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 10:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/25 10:00:54 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2010/01/22 08:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2010/01/15 04:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\WTouch\WTouchService.exe -- (WTouchService)
SRV - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\WINDOWS\system32\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2009/08/30 11:17:30 | 003,407,412 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
SRV - [2009/02/02 08:46:40 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC)
SRV - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2007/08/11 20:05:27 | 003,093,872 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)
========== Driver Services (SafeList) ==========
DRV - [2011/01/21 20:40:40 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm) Virtual Audio Cable (WDM)
DRV - [2010/12/17 01:00:00 | 001,360,760 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110228.024\NAVEX15.SYS -- (NAVEX15)
DRV - [2010/12/17 01:00:00 | 000,086,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110228.024\NAVENG.SYS -- (NAVENG)
DRV - [2010/09/10 22:32:20 | 000,167,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WpsHelper.sys -- (WpsHelper)
DRV - [2010/05/27 00:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/27 00:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/03/29 09:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/08/27 14:06:32 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/06/29 21:42:00 | 000,027,136 | ---- | M] (NCH Swift Sound) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nchssvad.sys -- (NCHSSVAD)
DRV - [2009/05/20 10:54:06 | 000,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2009/03/28 11:01:08 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009/03/27 13:23:12 | 000,023,064 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/02/02 08:46:44 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS)
DRV - [2009/02/02 08:46:42 | 000,319,664 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2009/02/02 08:46:42 | 000,279,600 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2009/02/02 08:46:42 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2009/02/02 08:46:40 | 000,092,488 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys -- (SysPlant)
DRV - [2009/02/02 08:46:40 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2)
DRV - [2009/02/02 08:46:36 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2009/02/02 08:46:36 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2009/02/02 08:46:34 | 000,420,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009/02/02 08:46:34 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2008/07/03 01:03:14 | 004,745,216 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/02/20 13:47:36 | 000,162,824 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\FTT3.sys -- (FTT3)
DRV - [2008/01/03 06:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007/10/11 17:40:12 | 000,009,096 | R--- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdide.sys -- (amdide)
DRV - [2007/09/21 02:10:54 | 000,078,992 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2007/09/21 02:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007/09/21 02:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007/09/21 02:10:26 | 000,063,120 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2007/09/21 02:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007/04/16 16:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2007/02/16 10:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacommousefilter.sys -- (wacommousefilter)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A4 1A 25 59 CD D7 CB 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=ConduitEngine&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.selectedEngine: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=&SearchSource=13"
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: [email protected]:4.0.21.0
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:4.5
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0.071301000019
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: {0CDC78A2-05A1-47F9-8810-A36BA7576D00}:1.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.14908
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..extensions.enabledItems: ""
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=BABTDF&PC=BBLN&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/06/17 14:21:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\MSN Toolbar\Platform\4.0.0417.0\Firefox [2010/10/09 16:00:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/10/09 16:01:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/26 21:37:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/27 13:36:00 | 000,000,000 | ---D | M]
[2009/04/30 14:29:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Extensions
[2011/02/28 20:51:05 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions
[2010/04/07 15:42:15 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010/05/11 18:14:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/12/28 01:15:04 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2009/07/16 23:33:11 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2009/06/04 14:21:28 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/10/28 12:43:34 | 000,001,840 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\bing.xml
[2010/04/11 20:36:02 | 000,001,201 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\winamp-search.xml
[2011/02/28 20:51:05 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011/02/28 20:11:59 | 000,000,000 | ---D | M] (The Browser Highlighter) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\[email protected]
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\PFU1LARR.DEFAULT\EXTENSIONS\[email protected]
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\PFU1LARR.DEFAULT\EXTENSIONS\[email protected]
[2010/06/17 14:21:58 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3
File not found (No name found) -- C:\PROGRAM FILES\INTERNET SAVING OPTIMIZER\3.6.0.4470\FF
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}
File not found (No name found) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}
[2010/12/09 02:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
O1 HOSTS File: ([2007/08/10 22:58:33 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Bluetooth Connection Assistant] File not found
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/08 16:27:48 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/02/28 21:25:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood
[2011/02/28 21:25:35 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft XNA
[2011/02/28 21:12:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Application Data\Malwarebytes
[2011/02/28 21:12:06 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2011/02/28 21:12:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011/02/28 21:12:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2011/02/28 21:12:02 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/02/28 21:12:02 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011/02/28 21:11:20 | 007,734,240 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Jonathon\Desktop\mbam-setup.exe
[2011/02/28 21:04:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2011/02/28 21:00:51 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Dial-a-fix-v0.60.0.24
[2011/02/28 20:50:58 | 000,000,000 | ---D | C] -- C:\_OTL
[2011/02/28 15:41:41 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/18 10:27:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15
[2011/02/07 16:41:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Logs
[2010/12/31 21:24:24 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\JavaSetup6u23.exe
[2010/12/31 21:05:48 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\jre-6u23-windows-i586-iftw-k.exe
[2010/12/12 21:21:08 | 006,274,424 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Silverlight.exe
[2010/12/03 16:08:27 | 002,728,440 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcsetup.exe
[2010/12/03 15:40:19 | 003,324,232 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vc_web.exe
[2004/01/12 00:00:00 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/28 21:23:08 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/02/28 21:22:39 | 000,013,486 | ---- | M] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2011/02/28 21:22:25 | 000,200,819 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/02/28 21:21:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/28 21:12:06 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/28 21:11:29 | 007,734,240 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Jonathon\Desktop\mbam-setup.exe
[2011/02/28 21:04:51 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2011/02/28 21:04:51 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2011/02/28 21:00:35 | 000,335,992 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Dial-a-fix-v0.60.0.24.zip
[2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/27 22:30:29 | 000,096,968 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 17:41:51 | 000,000,476 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Jonathon.job
[2011/02/27 13:57:16 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2011/02/27 13:40:23 | 000,000,215 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/26 14:17:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/02/18 10:27:45 | 001,402,518 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/13 20:54:55 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/02/13 20:54:55 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/12 08:09:12 | 000,456,304 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/02/12 08:09:12 | 000,075,210 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/28 21:12:06 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/02/28 21:00:34 | 000,335,992 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Dial-a-fix-v0.60.0.24.zip
[2011/02/27 22:29:55 | 000,096,968 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 13:40:23 | 000,000,215 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/18 10:27:43 | 001,402,518 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/13 20:54:55 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/01/29 10:33:01 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/29 10:33:01 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/21 20:40:53 | 000,031,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\vrtaucbl.sys
[2010/12/31 23:08:16 | 000,835,440 | ---- | C] () -- C:\Program Files\pbsvc.exe
[2010/12/31 22:53:25 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2010/12/27 23:34:47 | 005,430,783 | ---- | C] () -- C:\Program Files\WMV r506 32bit DEVWORK.rar
[2010/12/24 00:00:04 | 001,661,959 | ---- | C] () -- C:\Program Files\wowmodelview0.5.07.zip
[2010/12/10 21:13:05 | 001,985,823 | ---- | C] () -- C:\Program Files\AtlasLoot-v6.01.01.zip
[2010/12/07 18:29:56 | 000,001,456 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs
[2010/12/04 14:55:53 | 000,022,222 | ---- | C] () -- C:\Program Files\souper3.zip
[2010/12/04 11:39:28 | 000,980,215 | ---- | C] () -- C:\Program Files\msvcdll-90.zip
[2010/12/04 11:36:56 | 007,683,072 | ---- | C] () -- C:\Program Files\WMV_Installer_v0701_r500_Win64.msi
[2010/12/04 11:33:47 | 000,000,000 | ---- | C] () -- C:\Program Files\wowmodelview-0.5.06beta.zip
[2010/12/03 16:37:20 | 005,928,476 | ---- | C] () -- C:\Program Files\WMV_Binary_v0701_r490_Win32_DevWork.zip
[2010/12/03 16:25:15 | 003,728,716 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.3_Win32_Release.zip
[2010/12/03 16:10:54 | 005,167,176 | ---- | C] () -- C:\Program Files\WoW-2.4.0.8089-to-2.4.1.8125-enUS-patch.exe
[2010/12/03 15:36:37 | 007,091,330 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.1_Win32_Debug.zip
[2010/10/10 00:56:26 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2010/08/16 08:54:25 | 000,013,486 | ---- | C] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2010/08/03 15:54:23 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\Adobe PNG Format CS5 Prefs
[2010/06/17 19:29:26 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat.temp
[2010/06/17 19:29:26 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat.temp
[2010/06/17 14:13:10 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat
[2010/06/17 14:13:10 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat
[2010/05/16 06:44:30 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2009/10/10 20:51:36 | 000,058,004 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/10/08 16:28:11 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/05/10 15:48:01 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/04/30 14:29:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/04/27 20:49:35 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/04/27 20:05:16 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\setup_ldm.iss
[2009/03/12 20:02:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/03/12 20:00:08 | 003,767,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/12 13:55:32 | 000,138,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009/03/12 13:55:32 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\PnkBstrK.sys
[2009/03/12 13:55:13 | 000,835,440 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2009/03/12 13:55:13 | 000,270,904 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009/03/12 13:55:13 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2009/03/12 13:32:45 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009/03/12 13:18:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/03/12 13:14:03 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/01/13 14:22:56 | 002,163,200 | ---- | C] () -- C:\Program Files\WoWModelViewer.exe
[2009/01/12 12:19:56 | 000,288,056 | ---- | C] () -- C:\Program Files\logo.bmp
[2008/11/03 01:27:22 | 000,245,760 | ---- | C] () -- C:\Program Files\glew32.dll
[2008/10/06 21:33:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/10/06 21:33:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008/10/06 21:33:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008/10/06 21:33:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008/10/06 21:33:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/10/06 21:33:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008/10/06 21:33:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008/10/06 21:33:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008/10/06 21:33:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/06/05 08:58:26 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/13 20:55:28 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2006/12/30 22:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/08/23 03:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 03:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 03:00:00 | 000,456,304 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 03:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 03:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 03:00:00 | 000,075,210 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 03:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 03:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 03:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 03:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== LOP Check ==========
[2010/05/10 20:52:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2010/06/16 11:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2009/06/29 21:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2010/10/09 16:00:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2010/08/16 10:53:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2010/06/22 12:38:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2010/02/25 17:06:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Screaming Bee
[2011/02/28 21:22:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/10/07 18:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/10/10 17:55:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010/09/01 15:53:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/10/28 19:38:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/05/10 20:52:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\DAEMON Tools Lite
[2010/06/29 15:52:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Datel
[2009/10/18 11:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\GetRightToGo
[2009/04/27 20:05:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Leadertech
[2010/08/19 18:58:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\MsgCnf
[2010/06/16 11:37:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\NCH Swift Sound
[2011/02/28 19:14:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Octoshape
[2010/04/19 16:14:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\RadioBar
[2011/02/28 19:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\RayV
[2009/12/07 21:12:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Screaming Bee
[2009/05/24 11:16:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\SPORE
[2010/12/05 08:33:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/02/28 20:44:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\uTorrent
[2009/03/28 11:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Windows Desktop Search
[2009/06/30 20:00:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Windows Search
[2010/06/16 19:52:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\WTouch
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >
9
Tech Clinic / OS question, and Download error.
« on: March 01, 2011, 12:27:17 AM »
You are the [censored]ing man. I can now install things again.
10
Tech Clinic / OS question, and Download error.
« on: March 01, 2011, 12:19:03 AM »
Heres the mbam-log.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5910
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
2/28/2011 9:17:14 PM
mbam-log-2011-02-28 (21-17-14).txt
Scan type: Quick scan
Objects scanned: 149817
Time elapsed: 3 minute(s), 23 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 34
Registry Values Infected: 6
Registry Data Items Infected: 0
Folders Infected: 30
Files Infected: 288
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\Typelib\{883DFC00-8A21-411D-956C-73A4E4B7D16F} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{480098C6-F6AD-4C61-9B5C-2BAE228A34D1} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{C28A0312-C403-417B-A425-A915BC0519CD} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{877F3EAB-4462-44DF-8475-6064EAFD7FBF} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{0ED403E8-470A-4a8a-85A4-D7688CFE39A3} (Adware.Gamevance) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0ED403E8-470A-4a8a-85A4-D7688CFE39A3} (Adware.Gamevance) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{258C9770-1713-4021-8D7E-1F184A2BD754} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{258C9770-1713-4021-8D7E-1F184A2BD754} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDBFB47B-58A8-4111-BF95-06178DCE326D} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDBFB47B-58A8-4111-BF95-06178DCE326D} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{35B8D58C-B0CB-46B0-BA64-05B3804E4E86} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BEAC7DC8-E106-4C6A-931E-5A42E7362883} (Adware.GameVance) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ExplorerBar.FunExplorer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ExplorerBar.FunExplorer.1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ExplorerBar.FunRedirector (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ExplorerBar.FunRedirector.1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\clickpotatolitesa (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\ShoppingReport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\AppDataLow\gvtl (Adware.GameVance) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\QuestBrowse (Adware.QuestBrowse) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1FB52AB3-5987-45a2-85E0-F3EC30DDDC29}}_is1 (Adware.DoubleD) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Value: {5617ECA9-488D-4BA2-8562-9710B9AB78D2} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419D-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Value: {5617ECA9-488D-4BA2-8562-9710B9AB78D2} -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
c:\documents and settings\all users\application data\2aca5cc3-0f83-453d-a079-1076fe1a8b65 (Adware.Seekmo) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\application data\clickpotatolite (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0 (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions\plugins (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\DoubleD\gamingharbor toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\gamevance (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470 (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Bin (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Bin\2.7.32 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\clickpotato (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD\gamingharbor toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD\gamingharbor toolbar\4.2.2.21960 (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD\gamingharbor toolbar\4.2.2.21960\bin (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470 (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\application data\Mozilla\extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] (Adware.GamesVance) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\application data\Mozilla\extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected]\chrome (Adware.GamesVance) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\application data\Mozilla\extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected]\components (Adware.GamesVance) -> Quarantined and deleted successfully.
c:\program files\questbrwsearch (Adware.QuestBrowse) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\questbrwsearch (Adware.QuestBrowse) -> Quarantined and deleted successfully.
Files Infected:
c:\documents and settings\Jonathon\Desktop\clickpotatoinstaller.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesa.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesaabout.mht (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesaau.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesaeula.mht (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesa_kyf.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\clickpotatolitesaax.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\clickpotatolitesabho.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\clickpotatolitesahook.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\clickpotatoliteuninstaller.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions\chrome.manifest (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions\install.rdf (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions\plugins\npclntax_clickpotatolitesa.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\gamevance\ars.cfg (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\gamevance32.exe (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\gamevancelib32.dll (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\gvtl.dll (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\gvun.exe (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\icon.ico (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470\Data\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Uninst.exe (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Bin\2.7.32\shoppingreport.dll (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\clickpotato\About Us.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\clickpotato\clickpotato customer support.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\clickpotato\clickpotato uninstall instructions.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD\gamingharbor toolbar\4.2.2.21960\bin\stbup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-161010.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-165549.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-165549.937.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-184849.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-184851.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-194617.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-194618.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-205628.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-205629.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-210150.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-210150.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-224609.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-224609.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-004923.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-102925.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-102926.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-104335.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-104335.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-105612.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-105612.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-123650.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-123650.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-123728.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-130141.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-141922.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-141947.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-144120.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-144755.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-154525.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-154936.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-155135.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-155211.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-155844.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-222356.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-222357.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-000252.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-000252.937.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-021215.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-021215.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-095259.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-095301.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-114939.270.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-161010.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-004924.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-144756.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-114939.691.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-181140.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-233346.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-161225.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-125313.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-004239.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-121130.786.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-115010.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090815-175326.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-225246.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-141934.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-141253.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090820-190650.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-124816.707.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-124817.129.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-163115.551.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-163115.988.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-211846.723.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-005049.988.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-005050.551.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-102800.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-102801.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-103102.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-103102.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-161900.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-161901.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-181139.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-191905.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-191905.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-200747.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-200747.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-013301.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-013302.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-114636.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-114647.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-114649.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-115544.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-115545.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-152006.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-152006.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-233346.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-002821.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-002822.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-004711.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-004711.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-012132.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-012133.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-102937.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-102938.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-105805.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-105805.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-115358.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-115359.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-134058.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-134058.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-161225.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-113157.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-113158.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-162736.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-162736.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-192239.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-192239.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-020231.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-020231.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-111917.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-111918.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-112534.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-112534.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-125313.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-134643.937.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-134644.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-161616.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-161617.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-161901.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-161901.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-180916.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-180917.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-182021.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-182022.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-233750.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-233751.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-004201.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-004238.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-143640.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-143641.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-143739.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-143739.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-161859.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-161859.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-181436.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-181436.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-014139.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-014140.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-112218.332.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-112219.270.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-112442.504.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-112442.957.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-121131.207.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-145926.848.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-145927.286.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-153900.707.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-153901.145.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-161336.332.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-161415.411.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-161416.129.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-174723.082.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-174723.582.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-175641.770.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-175642.192.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-112818.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-112819.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-125040.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-141101.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-141759.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-141800.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-115010.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-134703.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-134704.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-162135.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-162135.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-211554.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-211555.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-214220.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-214220.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090814-221111.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090814-221112.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090815-143658.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090815-143659.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090815-175325.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-001357.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-001405.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-001417.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-001418.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-003402.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-003402.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-104004.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-104005.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-125020.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-125021.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-151212.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-151212.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-224346.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-224347.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-225247.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-225441.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-225442.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-002840.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-110911.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-110914.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-144040.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-144041.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-191644.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-120116.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-120117.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-140646.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-140646.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-141933.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-164211.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-164212.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-165024.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-165025.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-005639.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-005640.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-102903.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-102905.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-103114.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-103114.828.log (Adwa
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5910
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
2/28/2011 9:17:14 PM
mbam-log-2011-02-28 (21-17-14).txt
Scan type: Quick scan
Objects scanned: 149817
Time elapsed: 3 minute(s), 23 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 34
Registry Values Infected: 6
Registry Data Items Infected: 0
Folders Infected: 30
Files Infected: 288
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\Typelib\{883DFC00-8A21-411D-956C-73A4E4B7D16F} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{480098C6-F6AD-4C61-9B5C-2BAE228A34D1} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{C28A0312-C403-417B-A425-A915BC0519CD} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{877F3EAB-4462-44DF-8475-6064EAFD7FBF} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{0ED403E8-470A-4a8a-85A4-D7688CFE39A3} (Adware.Gamevance) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0ED403E8-470A-4a8a-85A4-D7688CFE39A3} (Adware.Gamevance) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{258C9770-1713-4021-8D7E-1F184A2BD754} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{258C9770-1713-4021-8D7E-1F184A2BD754} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDBFB47B-58A8-4111-BF95-06178DCE326D} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDBFB47B-58A8-4111-BF95-06178DCE326D} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{35B8D58C-B0CB-46B0-BA64-05B3804E4E86} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BEAC7DC8-E106-4C6A-931E-5A42E7362883} (Adware.GameVance) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ExplorerBar.FunExplorer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ExplorerBar.FunExplorer.1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ExplorerBar.FunRedirector (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\ExplorerBar.FunRedirector.1 (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\clickpotatolitesa (Adware.ClickPotato) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\ShoppingReport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\AppDataLow\gvtl (Adware.GameVance) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Internet Saving Optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Media Access Startup (Adware.DoubleD) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\QuestBrowse (Adware.QuestBrowse) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1FB52AB3-5987-45a2-85E0-F3EC30DDDC29}}_is1 (Adware.DoubleD) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Value: {5617ECA9-488D-4BA2-8562-9710B9AB78D2} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419D-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5617ECA9-488D-4BA2-8562-9710B9AB78D2} (Adware.DoubleD) -> Value: {5617ECA9-488D-4BA2-8562-9710B9AB78D2} -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
c:\documents and settings\all users\application data\2aca5cc3-0f83-453d-a079-1076fe1a8b65 (Adware.Seekmo) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\application data\clickpotatolite (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0 (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions\plugins (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\DoubleD\gamingharbor toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\gamevance (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470 (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470\Data (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Bin (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Bin\2.7.32 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\clickpotato (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD\gamingharbor toolbar (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD\gamingharbor toolbar\4.2.2.21960 (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD\gamingharbor toolbar\4.2.2.21960\bin (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470 (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\application data\Mozilla\extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] (Adware.GamesVance) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\application data\Mozilla\extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected]\chrome (Adware.GamesVance) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\application data\Mozilla\extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected]\components (Adware.GamesVance) -> Quarantined and deleted successfully.
c:\program files\questbrwsearch (Adware.QuestBrowse) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\questbrwsearch (Adware.QuestBrowse) -> Quarantined and deleted successfully.
Files Infected:
c:\documents and settings\Jonathon\Desktop\clickpotatoinstaller.exe (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesa.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesaabout.mht (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesaau.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesaeula.mht (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\application data\clickpotatolitesa\clickpotatolitesa_kyf.dat (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\clickpotatolitesaax.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\clickpotatolitesabho.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\clickpotatolitesahook.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\clickpotatoliteuninstaller.exe (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions\chrome.manifest (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions\install.rdf (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\clickpotatolite\bin\10.0.659.0\firefox\extensions\plugins\npclntax_clickpotatolitesa.dll (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\program files\gamevance\ars.cfg (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\gamevance32.exe (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\gamevancelib32.dll (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\gvtl.dll (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\gvun.exe (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\gamevance\icon.ico (Adware.Gamevance) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470\unins000.dat (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470\unins000.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\internet saving optimizer\3.6.0.4470\Data\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Uninst.exe (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\program files\shoppingreport2\Bin\2.7.32\shoppingreport.dll (Adware.ShoppingReport2) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\clickpotato\About Us.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\clickpotato\clickpotato customer support.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\all users\start menu\Programs\clickpotato\clickpotato uninstall instructions.lnk (Adware.ClickPotato) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\DoubleD\gamingharbor toolbar\4.2.2.21960\bin\stbup.exe (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\config.md (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\ipdata.md (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-161010.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-165549.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-165549.937.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-184849.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-184851.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-194617.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-194618.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-205628.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-205629.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-210150.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-210150.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-224609.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-224609.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-004923.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-102925.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-102926.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-104335.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-104335.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-105612.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-105612.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-123650.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-123650.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-123728.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-130141.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-141922.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-141947.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-144120.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-144755.687.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-154525.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-154936.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-155135.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-155211.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-155844.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-222356.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-222357.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-000252.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-000252.937.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-021215.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-021215.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-095259.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-095301.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-114939.270.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-161010.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-004924.031.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090804-144756.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-114939.691.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-181140.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-233346.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-161225.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-125313.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-004239.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-121130.786.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-115010.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090815-175326.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-225246.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-141934.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-141253.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090820-190650.406.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-124816.707.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-124817.129.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-163115.551.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-163115.988.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090805-211846.723.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-005049.988.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-005050.551.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-102800.281.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-102801.671.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-103102.156.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-103102.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-161900.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-161901.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-181139.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-191905.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-191905.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-200747.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090806-200747.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-013301.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-013302.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-114636.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-114647.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-114649.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-115544.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-115545.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-152006.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-152006.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090807-233346.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-002821.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-002822.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-004711.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-004711.984.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-012132.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-012133.328.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-102937.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-102938.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-105805.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-105805.796.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-115358.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-115359.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-134058.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-134058.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090808-161225.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-113157.921.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-113158.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-162736.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-162736.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-192239.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090809-192239.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-020231.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-020231.953.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-111917.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-111918.140.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-112534.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-112534.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-125313.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-134643.937.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-134644.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-161616.859.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-161617.375.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-161901.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-161901.781.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-180916.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-180917.421.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-182021.843.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-182022.312.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-233750.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090810-233751.187.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-004201.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-004238.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-143640.640.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-143641.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-143739.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-143739.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-161859.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-161859.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-181436.093.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090811-181436.562.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-014139.609.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-014140.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-112218.332.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-112219.270.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-112442.504.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-112442.957.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-121131.207.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-145926.848.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-145927.286.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-153900.707.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-153901.145.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-161336.332.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-161415.411.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-161416.129.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-174723.082.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-174723.582.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-175641.770.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090812-175642.192.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-112818.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-112819.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-125040.125.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-141101.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-141759.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090803-141800.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-115010.890.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-134703.703.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-134704.218.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-162135.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-162135.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-211554.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-211555.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-214220.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090813-214220.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090814-221111.046.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090814-221112.296.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090815-143658.515.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090815-143659.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090815-175325.578.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-001357.812.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-001405.656.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-001417.437.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-001418.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-003402.171.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-003402.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-104004.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-104005.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-125020.484.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-125021.359.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-151212.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-151212.906.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-224346.968.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-224347.750.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-225247.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-225441.828.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090816-225442.250.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-002840.625.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-110911.718.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-110914.015.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-144040.593.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-144041.265.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090817-191644.500.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-120116.468.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-120117.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-140646.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-140646.875.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-141933.734.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-164211.343.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-164212.109.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-165024.765.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090818-165025.234.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-005639.531.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-005640.000.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-102903.453.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-102905.546.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-103114.390.log (Adware.DoubleD) -> Quarantined and deleted successfully.
c:\documents and settings\Jonathon\local settings\application data\internet saving optimizer\3.6.0.4470\np_20090819-103114.828.log (Adwa
11
Tech Clinic / OS question, and Download error.
« on: March 01, 2011, 12:16:09 AM »
( almost done with the Malwarebytes scan. )
while thats scanning heres this.
On startup, Allow OTL to run if prompted
A log should open, can you save it to a convenient location, I want to see it later
A copy of this log can also be found in
C:\_OTL\Moved Files folder
All processes killed
========== OTL ==========
Service Viewpoint Manager Service stopped successfully!
Service Viewpoint Manager Service deleted successfully!
Service ResultBrowse Service stopped successfully!
Service ResultBrowse Service deleted successfully!
Service QuestBrowse Service stopped successfully!
Service QuestBrowse Service deleted successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}\ deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{73f3dd36-3464-4aa4-a815-de51290fb05e} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73f3dd36-3464-4aa4-a815-de51290fb05e}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Conduit Engine Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "http://search.condui...&q={searchTerms}" removed from browser.search.defaulturl
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "Conduit Engine Customized Web Search" removed from browser.search.selectedEngine
Prefs.js: "http://search.condui...SearchSource=13" removed from browser.startup.homepage
Prefs.js: [email protected]:3.5.1.110 removed from extensions.enabledItems
Prefs.js: [email protected]:3.2.5.2 removed from extensions.enabledItems
Prefs.js: {2224E955-00E9-4613-A844-CE69FCCAAE91}:3.6.0.4470 removed from extensions.enabledItems
Prefs.js: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0 removed from extensions.enabledItems
Prefs.js: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2 removed from extensions.enabledItems
Prefs.js: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1 removed from extensions.enabledItems
Prefs.js: {D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}:1.0 removed from extensions.enabledItems
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2224E955-00E9-4613-A844-CE69FCCAAE91} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2224E955-00E9-4613-A844-CE69FCCAAE91}\ not found.
C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF\components folder moved successfully.
C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF\chrome\content folder moved successfully.
C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF\chrome folder moved successfully.
C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\searchplugin folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\META-INF folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\lib folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\DualPackage folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\defaults folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\components folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected] folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\searchplugins folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\logs folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\defaults\preferences folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\defaults folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome\temp\ff-config.Tue-02-Mar-2010-05-33-58-GMT folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome\temp folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome\skin folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome\content folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected] folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\askcom.xml moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\conduit.xml moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}\defaults\preferences folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}\defaults folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00} folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\defaults\preferences folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\defaults folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0} folder moved successfully.
Folder C:\PROGRAM FILES\INTERNET SAVING OPTIMIZER\3.6.0.4470\FF\ not found.
Folder C:\PROGRAM FILES\PRICEGONG\2.1.0\FF\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ not found.
C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
C:\Program Files\ConduitEngine\ConduitEngine.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73f3dd36-3464-4aa4-a815-de51290fb05e}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73f3dd36-3464-4aa4-a815-de51290fb05e}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CDBFB47B-58A8-4111-BF95-06178DCE326D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDBFB47B-58A8-4111-BF95-06178DCE326D}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{73f3dd36-3464-4aa4-a815-de51290fb05e} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73f3dd36-3464-4aa4-a815-de51290fb05e}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{73F3DD36-3464-4AA4-A815-DE51290FB05E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73F3DD36-3464-4AA4-A815-DE51290FB05E}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{73F3DD36-3464-4AA4-A815-DE51290FB05E} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73F3DD36-3464-4AA4-A815-DE51290FB05E}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mnumsg.exe deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk moved successfully.
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\ not found.
File E:\system\viewer\FlipVideoforPC.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\ not found.
File E:\system\viewer\FlipVideoforPC.exe not found.
C:\WINDOWS\tasks\RMSchedule.job moved successfully.
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job moved successfully.
C:\WINDOWS\tasks\RMSmartUpdate.job moved successfully.
Folder C:\Documents and Settings\All Users\Application Data\ResultBrowse\ not found.
C:\Documents and Settings\All Users\Application Data\Viewpoint folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\MyShoppingGenie folder moved successfully.
Folder C:\Documents and Settings\Jonathon\Application Data\PriceGong\ not found.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2\cs\report folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2\cs\dwld folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2\cs\db folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2\cs folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2 folder moved successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:24051EFF deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:63238B95 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Alcmtr deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent deleted successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Jonathon\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Jonathon\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 41620 bytes
User: Jonathon
->Temp folder emptied: 9137717819 bytes
->Temporary Internet Files folder emptied: 71870777 bytes
->FireFox cache emptied: 69237196 bytes
->Google Chrome cache emptied: 6641196 bytes
->Apple Safari cache emptied: 3002368 bytes
->Flash cache emptied: 3507822 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1348591 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 579642 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2402044 bytes
%systemroot%\System32 .tmp files removed: 2577 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 106701702 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23943056 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 770095 bytes
RecycleBin emptied: 440473636 bytes
Total Files Cleaned = 9,411.00 mb
[EMPTYFLASH]
User: All Users
User: Default User
->Flash cache emptied: 0 bytes
User: Jonathon
->Flash cache emptied: 0 bytes
User: LocalService
User: NetworkService
Total Flash Files Cleaned = 0.00 mb
OTL by OldTimer - Version 3.2.22.2 log created on 02282011_205058
Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DF7EFB.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDBB1.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDC00.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDCF3.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDD20.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDF8E.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFE182.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temporary Internet Files\Content.Word\~WRS{0DF35EAE-484B-46E5-ABC9-E2BE270538DD}.tmp not found!
C:\Documents and Settings\Jonathon\Local Settings\Temporary Internet Files\Content.IE5\T7Q9VV2W\index[1].php moved successfully.
C:\Documents and Settings\Jonathon\Local Settings\Temporary Internet Files\Content.IE5\T7Q9VV2W\showthread[1].htm moved successfully.
Registry entries deleted on Reboot...
while thats scanning heres this.
On startup, Allow OTL to run if prompted
A log should open, can you save it to a convenient location, I want to see it later
A copy of this log can also be found in
C:\_OTL\Moved Files folder
All processes killed
========== OTL ==========
Service Viewpoint Manager Service stopped successfully!
Service Viewpoint Manager Service deleted successfully!
Service ResultBrowse Service stopped successfully!
Service ResultBrowse Service deleted successfully!
Service QuestBrowse Service stopped successfully!
Service QuestBrowse Service deleted successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}\ deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{57BCA5FA-5DBB-45a2-B558-1755C3F6253B}\ not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{73f3dd36-3464-4aa4-a815-de51290fb05e} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73f3dd36-3464-4aa4-a815-de51290fb05e}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\ not found.
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Conduit Engine Customized Web Search" removed from browser.search.defaultthis.engineName
Prefs.js: "http://search.condui...&q={searchTerms}" removed from browser.search.defaulturl
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "Conduit Engine Customized Web Search" removed from browser.search.selectedEngine
Prefs.js: "http://search.condui...SearchSource=13" removed from browser.startup.homepage
Prefs.js: [email protected]:3.5.1.110 removed from extensions.enabledItems
Prefs.js: [email protected]:3.2.5.2 removed from extensions.enabledItems
Prefs.js: {2224E955-00E9-4613-A844-CE69FCCAAE91}:3.6.0.4470 removed from extensions.enabledItems
Prefs.js: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0 removed from extensions.enabledItems
Prefs.js: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2 removed from extensions.enabledItems
Prefs.js: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1 removed from extensions.enabledItems
Prefs.js: {D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}:1.0 removed from extensions.enabledItems
Registry value HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2224E955-00E9-4613-A844-CE69FCCAAE91} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2224E955-00E9-4613-A844-CE69FCCAAE91}\ not found.
C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF\components folder moved successfully.
C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF\chrome\content folder moved successfully.
C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF\chrome folder moved successfully.
C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\searchplugin folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\META-INF folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\lib folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\DualPackage folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\defaults folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\components folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected] folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\searchplugins folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\logs folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\defaults\preferences folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\defaults folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome\temp\ff-config.Tue-02-Mar-2010-05-33-58-GMT folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome\temp folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome\skin folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome\content folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]\chrome folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected] folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\askcom.xml moved successfully.
C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\conduit.xml moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}\defaults\preferences folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}\defaults folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00} folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\defaults\preferences folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\defaults folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\chrome folder moved successfully.
C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0} folder moved successfully.
Folder C:\PROGRAM FILES\INTERNET SAVING OPTIMIZER\3.6.0.4470\FF\ not found.
Folder C:\PROGRAM FILES\PRICEGONG\2.1.0\FF\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ not found.
C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ deleted successfully.
C:\Program Files\ConduitEngine\ConduitEngine.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73f3dd36-3464-4aa4-a815-de51290fb05e}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73f3dd36-3464-4aa4-a815-de51290fb05e}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CDBFB47B-58A8-4111-BF95-06178DCE326D}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CDBFB47B-58A8-4111-BF95-06178DCE326D}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{73f3dd36-3464-4aa4-a815-de51290fb05e} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73f3dd36-3464-4aa4-a815-de51290fb05e}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{73F3DD36-3464-4AA4-A815-DE51290FB05E} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73F3DD36-3464-4AA4-A815-DE51290FB05E}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{73F3DD36-3464-4AA4-A815-DE51290FB05E} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73F3DD36-3464-4AA4-A815-DE51290FB05E}\ not found.
File C:\Program Files\Recording_Engineer_Helper\tbRec2.dll not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\mnumsg.exe deleted successfully.
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk moved successfully.
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe moved successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\ not found.
File E:\system\viewer\FlipVideoforPC.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\ not found.
File E:\system\viewer\FlipVideoforPC.exe not found.
C:\WINDOWS\tasks\RMSchedule.job moved successfully.
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job moved successfully.
C:\WINDOWS\tasks\RMSmartUpdate.job moved successfully.
Folder C:\Documents and Settings\All Users\Application Data\ResultBrowse\ not found.
C:\Documents and Settings\All Users\Application Data\Viewpoint folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\MyShoppingGenie folder moved successfully.
Folder C:\Documents and Settings\Jonathon\Application Data\PriceGong\ not found.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2\cs\report folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2\cs\dwld folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2\cs\db folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2\cs folder moved successfully.
C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2 folder moved successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:24051EFF deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:63238B95 deleted successfully.
ADS C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Alcmtr deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent deleted successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Documents and Settings\Jonathon\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Jonathon\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 41620 bytes
User: Jonathon
->Temp folder emptied: 9137717819 bytes
->Temporary Internet Files folder emptied: 71870777 bytes
->FireFox cache emptied: 69237196 bytes
->Google Chrome cache emptied: 6641196 bytes
->Apple Safari cache emptied: 3002368 bytes
->Flash cache emptied: 3507822 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1348591 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 579642 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2402044 bytes
%systemroot%\System32 .tmp files removed: 2577 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 106701702 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23943056 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 770095 bytes
RecycleBin emptied: 440473636 bytes
Total Files Cleaned = 9,411.00 mb
[EMPTYFLASH]
User: All Users
User: Default User
->Flash cache emptied: 0 bytes
User: Jonathon
->Flash cache emptied: 0 bytes
User: LocalService
User: NetworkService
Total Flash Files Cleaned = 0.00 mb
OTL by OldTimer - Version 3.2.22.2 log created on 02282011_205058
Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DF7EFB.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDBB1.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDC00.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDCF3.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDD20.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFDF8E.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temp\~DFE182.tmp not found!
File\Folder C:\Documents and Settings\Jonathon\Local Settings\Temporary Internet Files\Content.Word\~WRS{0DF35EAE-484B-46E5-ABC9-E2BE270538DD}.tmp not found!
C:\Documents and Settings\Jonathon\Local Settings\Temporary Internet Files\Content.IE5\T7Q9VV2W\index[1].php moved successfully.
C:\Documents and Settings\Jonathon\Local Settings\Temporary Internet Files\Content.IE5\T7Q9VV2W\showthread[1].htm moved successfully.
Registry entries deleted on Reboot...
12
Tech Clinic / OS question, and Download error.
« on: February 28, 2011, 11:10:56 PM »DTVblizzcon
Winwonk OpenTarget - I use this to open the folders of my programs.
Google Toolbar for Internet Explorer
Just uninstalled all of these.
13
Tech Clinic / OS question, and Download error.
« on: February 28, 2011, 10:39:44 PM »
Also ive noticed that i cant uninstall some programs that use the Windows installer.
-------------------------------------------------------------------------------
OTL logfile created on: 2/28/2011 7:34:49 PM - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Jonathon\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 78.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 166.14 Gb Free Space | 35.67% Space Free | Partition Type: NTFS
Computer Name: JONATHONB | User Name: Jonathon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
[color="#e56717"]========== Processes (SafeList) ==========[/color]
PRC - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
PRC - [2010/12/28 01:15:04 | 000,396,152 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2010/12/05 13:43:48 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2010/01/15 04:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009/11/23 15:53:58 | 004,781,352 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchUser.exe
PRC - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchService.exe
PRC - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Pen_Tablet.exe
PRC - [2009/02/02 08:46:42 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
PRC - [2009/02/02 08:46:40 | 001,443,144 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
PRC - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
PRC - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/13 20:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/11/15 09:09:56 | 000,059,920 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\LBTWiz.exe
PRC - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
[color="#e56717"]========== Modules (SafeList) ==========[/color]
MOD - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
MOD - [2008/04/13 20:42:52 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[color="#e56717"]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [Auto | Stopped] -- -- (Viewpoint Manager Service)
SRV - File not found [Auto | Stopped] -- -- (ResultBrowse Service)
SRV - File not found [Auto | Stopped] -- -- (QuestBrowse Service)
SRV - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010/04/24 22:04:55 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/15 10:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 10:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/25 10:00:54 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus®
SRV - [2010/01/22 08:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2010/01/15 04:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\WTouch\WTouchService.exe -- (WTouchService)
SRV - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\WINDOWS\system32\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2009/08/30 11:17:30 | 003,407,412 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
SRV - [2009/02/02 08:46:40 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC)
SRV - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2007/08/11 20:05:27 | 003,093,872 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)
[color="#e56717"]========== Driver Services (SafeList) ==========[/color]
DRV - [2011/01/21 20:40:40 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm) Virtual Audio Cable (WDM)
DRV - [2010/12/17 01:00:00 | 001,360,760 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110228.024\NAVEX15.SYS -- (NAVEX15)
DRV - [2010/12/17 01:00:00 | 000,086,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110228.024\NAVENG.SYS -- (NAVENG)
DRV - [2010/09/10 22:32:20 | 000,167,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WpsHelper.sys -- (WpsHelper)
DRV - [2010/05/27 00:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/27 00:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/03/29 09:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/08/27 14:06:32 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/06/29 21:42:00 | 000,027,136 | ---- | M] (NCH Swift Sound) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nchssvad.sys -- (NCHSSVAD)
DRV - [2009/05/20 10:54:06 | 000,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2009/03/28 11:01:08 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009/03/27 13:23:12 | 000,023,064 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/02/02 08:46:44 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS)
DRV - [2009/02/02 08:46:42 | 000,319,664 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2009/02/02 08:46:42 | 000,279,600 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2009/02/02 08:46:42 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2009/02/02 08:46:40 | 000,092,488 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys -- (SysPlant)
DRV - [2009/02/02 08:46:40 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2)
DRV - [2009/02/02 08:46:36 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2009/02/02 08:46:36 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2009/02/02 08:46:34 | 000,420,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009/02/02 08:46:34 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2008/07/03 01:03:14 | 004,745,216 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/02/20 13:47:36 | 000,162,824 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\FTT3.sys -- (FTT3)
DRV - [2008/01/03 06:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007/10/11 17:40:12 | 000,009,096 | R--- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdide.sys -- (amdide)
DRV - [2007/09/21 02:10:54 | 000,078,992 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2007/09/21 02:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007/09/21 02:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007/09/21 02:10:26 | 000,063,120 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2007/09/21 02:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007/04/16 16:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2007/02/16 10:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacommousefilter.sys -- (wacommousefilter)
[color="#e56717"]========== Standard Registry (SafeList) ==========[/color]
[color="#e56717"]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - File not found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.condui...&ctid=CT2786678
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - File not found
IE - HKCU\..\URLSearchHook: {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[color="#e56717"]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.defaultthis.engineName: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.condui...&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.condui...SearchSource=13"
FF - prefs.js..extensions.enabledItems: [email protected]:3.5.1.110
FF - prefs.js..extensions.enabledItems: [email protected]:4.0.21.0
FF - prefs.js..extensions.enabledItems: [email protected]:3.2.5.2
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:4.5
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0.071301000019
FF - prefs.js..extensions.enabledItems: {2224E955-00E9-4613-A844-CE69FCCAAE91}:3.6.0.4470
FF - prefs.js..extensions.enabledItems: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0
FF - prefs.js..extensions.enabledItems: {0CDC78A2-05A1-47F9-8810-A36BA7576D00}:1.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.14908
FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1
FF - prefs.js..extensions.enabledItems: {D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}:1.0
FF - prefs.js..keyword.URL: "http://www.bing.com/...ABTDF&PC=BBLN&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{2224E955-00E9-4613-A844-CE69FCCAAE91}: C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF [2009/08/03 11:49:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/06/17 14:21:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\MSN Toolbar\Platform\4.0.0417.0\Firefox [2010/10/09 16:00:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/10/09 16:01:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/26 21:37:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/27 13:36:00 | 000,000,000 | ---D | M]
[2009/04/30 14:29:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Extensions
[2011/02/27 22:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions
[2010/04/07 15:42:15 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010/05/11 18:14:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/12/28 01:15:04 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2009/07/16 23:33:11 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/12/28 01:15:06 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2009/06/04 14:21:28 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/03/04 16:01:07 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/02/04 16:45:40 | 000,002,254 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\askcom.xml
[2010/10/28 12:43:34 | 000,001,840 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\bing.xml
[2010/12/28 01:15:06 | 000,000,913 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\conduit.xml
[2010/04/11 20:36:02 | 000,001,201 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\winamp-search.xml
[2011/02/27 22:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/10/20 20:18:39 | 000,000,000 | ---D | M] (ResultBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}
[2011/01/29 10:35:20 | 000,000,000 | ---D | M] (QuestBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}
[2011/02/28 19:10:10 | 000,000,000 | ---D | M] (The Browser Highlighter) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
[2010/12/27 23:33:13 | 000,000,000 | ---D | M] (Gamevance TextLinks) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\[email protected]
[2010/06/17 14:21:58 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3
[2009/08/03 11:49:28 | 000,000,000 | ---D | M] ("NP Helper Class") -- C:\PROGRAM FILES\INTERNET SAVING OPTIMIZER\3.6.0.4470\FF
[2010/10/20 20:15:49 | 000,000,000 | ---D | M] (PriceGong) -- C:\PROGRAM FILES\PRICEGONG\2.1.0\FF
[2010/12/09 02:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
O1 HOSTS File: ([2007/08/10 22:58:33 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (PriceGongBHO Class) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll (PriceGong)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - File not found
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Recording Engineer Helper Toolbar) - {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O2 - BHO: (System Search Dispatcher) - {CDBFB47B-58A8-4111-BF95-06178DCE326D} - File not found
O3 - HKLM\..\Toolbar: (Recording Engineer Helper Toolbar) - {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (Recording Engineer Helper Toolbar) - {73F3DD36-3464-4AA4-A815-DE51290FB05E} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Recording Engineer Helper Toolbar) - {73F3DD36-3464-4AA4-A815-DE51290FB05E} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Bluetooth Connection Assistant] File not found
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [mnumsg.exe] File not found
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/08 16:27:48 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\Shell\AutoRun\command - "" = E:\system\viewer\FlipVideoforPC.exe
O33 - MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\Shell\Flip Video for PC\command - "" = E:\system\viewer\FlipVideoforPC.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color="#e56717"]========== Files/Folders - Created Within 30 Days ==========[/color]
[2011/02/28 15:41:41 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/18 10:27:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15
[2011/02/07 16:41:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Logs
[2010/12/31 21:24:24 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\JavaSetup6u23.exe
[2010/12/31 21:05:48 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\jre-6u23-windows-i586-iftw-k.exe
[2010/12/12 21:21:08 | 006,274,424 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Silverlight.exe
[2010/12/03 16:08:27 | 002,728,440 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcsetup.exe
[2010/12/03 15:40:19 | 003,324,232 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vc_web.exe
[2004/01/12 00:00:00 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color="#e56717"]========== Files - Modified Within 30 Days ==========[/color]
[2011/02/28 19:26:07 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/02/28 19:25:17 | 000,200,819 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/02/28 19:24:58 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/28 19:24:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/28 19:09:00 | 000,000,890 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/28 19:05:21 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job
[2011/02/28 19:01:00 | 000,000,240 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/02/28 16:56:05 | 000,000,458 | ---- | M] () -- C:\WINDOWS\tasks\RMSmartUpdate.job
[2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/27 22:30:29 | 000,096,968 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 17:41:51 | 000,000,476 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Jonathon.job
[2011/02/27 13:57:16 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2011/02/27 13:40:23 | 000,000,215 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/26 14:17:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/02/18 10:27:45 | 001,402,518 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/14 22:08:43 | 000,013,486 | ---- | M] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2011/02/13 20:54:55 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/02/13 20:54:55 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/12 08:09:12 | 000,456,304 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/02/12 08:09:12 | 000,075,210 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color="#e56717"]========== Files Created - No Company Name ==========[/color]
[2011/02/27 22:29:55 | 000,096,968 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 13:40:23 | 000,000,215 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/18 10:27:43 | 001,402,518 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/13 20:54:55 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/01/29 10:33:01 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/29 10:33:01 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/21 20:40:53 | 000,031,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\vrtaucbl.sys
[2010/12/31 23:08:16 | 000,835,440 | ---- | C] () -- C:\Program Files\pbsvc.exe
[2010/12/31 22:53:25 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2010/12/27 23:34:47 | 005,430,783 | ---- | C] () -- C:\Program Files\WMV r506 32bit DEVWORK.rar
[2010/12/24 00:00:04 | 001,661,959 | ---- | C] () -- C:\Program Files\wowmodelview0.5.07.zip
[2010/12/10 21:13:05 | 001,985,823 | ---- | C] () -- C:\Program Files\AtlasLoot-v6.01.01.zip
[2010/12/07 18:29:56 | 000,001,456 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs
[2010/12/04 14:55:53 | 000,022,222 | ---- | C] () -- C:\Program Files\souper3.zip
[2010/12/04 11:39:28 | 000,980,215 | ---- | C] () -- C:\Program Files\msvcdll-90.zip
[2010/12/04 11:36:56 | 007,683,072 | ---- | C] () -- C:\Program Files\WMV_Installer_v0701_r500_Win64.msi
[2010/12/04 11:33:47 | 000,000,000 | ---- | C] () -- C:\Program Files\wowmodelview-0.5.06beta.zip
[2010/12/03 16:37:20 | 005,928,476 | ---- | C] () -- C:\Program Files\WMV_Binary_v0701_r490_Win32_DevWork.zip
[2010/12/03 16:25:15 | 003,728,716 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.3_Win32_Release.zip
[2010/12/03 16:10:54 | 005,167,176 | ---- | C] () -- C:\Program Files\WoW-2.4.0.8089-to-2.4.1.8125-enUS-patch.exe
[2010/12/03 15:36:37 | 007,091,330 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.1_Win32_Debug.zip
[2010/10/10 00:56:26 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2010/08/16 08:54:25 | 000,013,486 | ---- | C] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2010/08/03 15:54:23 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\Adobe PNG Format CS5 Prefs
[2010/06/17 19:29:26 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat.temp
[2010/06/17 19:29:26 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat.temp
[2010/06/17 14:13:10 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat
[2010/06/17 14:13:10 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat
[2010/05/16 06:44:30 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2009/10/10 20:51:36 | 000,058,004 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/10/08 16:28:11 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/05/10 15:48:01 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/04/30 14:29:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/04/27 20:49:35 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/04/27 20:05:16 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\setup_ldm.iss
[2009/03/12 20:02:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/03/12 20:00:08 | 003,767,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/12 13:55:32 | 000,138,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009/03/12 13:55:32 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\PnkBstrK.sys
[2009/03/12 13:55:13 | 000,835,440 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2009/03/12 13:55:13 | 000,270,904 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009/03/12 13:55:13 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2009/03/12 13:32:45 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009/03/12 13:18:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/03/12 13:14:03 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/01/13 14:22:56 | 002,163,200 | ---- | C] () -- C:\Program Files\WoWModelViewer.exe
[2009/01/12 12:19:56 | 000,288,056 | ---- | C] () -- C:\Program Files\logo.bmp
[2008/11/03 01:27:22 | 000,245,760 | ---- | C] () -- C:\Program Files\glew32.dll
[2008/10/06 21:33:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/10/06 21:33:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008/10/06 21:33:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008/10/06 21:33:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008/10/06 21:33:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/10/06 21:33:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008/10/06 21:33:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008/10/06 21:33:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008/10/06 21:33:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/06/05 08:58:26 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/13 20:55:28 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2006/12/30 22:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/08/23 03:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 03:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 03:00:00 | 000,456,304 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 03:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 03:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 03:00:00 | 000,075,210 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 03:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 03:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 03:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 03:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[color="#e56717"]========== LOP Check ==========[/color]
[2011/01/29 10:32:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
[2011/01/29 10:49:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ClickPotatoLiteSA
[2010/05/10 20:52:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2010/06/16 11:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2009/06/29 21:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2010/10/09 16:00:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2010/08/16 10:53:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2011/02/04 07:04:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuestBrwSearch
[2010/06/22 12:38:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2011/01/05 16:23:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ResultBrowse
[2010/02/25 17:06:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Screaming Bee
[2011/02/28 19:25:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/06/16 11:37:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/10/07 18:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/10/10 17:55:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010/09/01 15:53:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/01/29 10:32:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\ClickPotatoLite
[2010/10/28 19:38:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/05/10 20:52:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\DAEMON Tools Lite
[2010/06/29 15:52:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Datel
[2009/10/18 11:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\GetRightToGo
[2009/04/27 20:05:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Leadertech
[2010/08/19 18:58:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\MsgCnf
[2010/08/20 08:29:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\MyShoppingGenie
[2010/06/16 11:37:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\NCH Swift Sound
[2011/02/28 19:14:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Octoshape
[2011/02/28 19:26:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\PriceGong
[2010/04/19 16:14:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\RadioBar
[2011/02/28 19:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\RayV
[2009/12/07 21:12:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Screaming Bee
[2011/01/29 12:02:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2
[2009/05/24 11:16:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\SPORE
[2010/12/05 08:33:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/02/28 19:35:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\uTorrent
[2009/03/28 11:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Windows Desktop Search
[2009/06/30 20:00:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Windows Search
[2010/06/16 19:52:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\WTouch
[2011/02/28 19:05:21 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\RMSchedule.job
[2011/02/28 16:56:05 | 000,000,458 | ---- | M] () -- C:\WINDOWS\Tasks\RMSmartUpdate.job
[2011/02/28 19:01:00 | 000,000,240 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
[color="#e56717"]========== Purity Check ==========[/color]
[color="#e56717"]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24051EFF
@Alternate Data Stream - 495 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 163 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:63238B95
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >
-------------------------------------------------------------------------------
OTL logfile created on: 2/28/2011 7:34:49 PM - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Jonathon\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 3.00 Gb Available Physical Memory | 78.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 87.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 166.14 Gb Free Space | 35.67% Space Free | Partition Type: NTFS
Computer Name: JONATHONB | User Name: Jonathon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
[color="#e56717"]========== Processes (SafeList) ==========[/color]
PRC - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
PRC - [2010/12/28 01:15:04 | 000,396,152 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2010/12/05 13:43:48 | 001,242,448 | ---- | M] (Valve Corporation) -- C:\Program Files\Steam\Steam.exe
PRC - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2010/01/15 04:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009/11/23 15:53:58 | 004,781,352 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchUser.exe
PRC - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchService.exe
PRC - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Pen_Tablet.exe
PRC - [2009/02/02 08:46:42 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
PRC - [2009/02/02 08:46:40 | 001,443,144 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
PRC - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
PRC - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/13 20:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/11/15 09:09:56 | 000,059,920 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\LBTWiz.exe
PRC - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
[color="#e56717"]========== Modules (SafeList) ==========[/color]
MOD - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
MOD - [2008/04/13 20:42:52 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
[color="#e56717"]========== Win32 Services (SafeList) ==========[/color]
SRV - File not found [Auto | Stopped] -- -- (Viewpoint Manager Service)
SRV - File not found [Auto | Stopped] -- -- (ResultBrowse Service)
SRV - File not found [Auto | Stopped] -- -- (QuestBrowse Service)
SRV - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010/04/24 22:04:55 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/15 10:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 10:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/25 10:00:54 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus®
SRV - [2010/01/22 08:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2010/01/15 04:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\WTouch\WTouchService.exe -- (WTouchService)
SRV - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\WINDOWS\system32\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2009/08/30 11:17:30 | 003,407,412 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
SRV - [2009/02/02 08:46:40 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC)
SRV - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2007/08/11 20:05:27 | 003,093,872 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)
[color="#e56717"]========== Driver Services (SafeList) ==========[/color]
DRV - [2011/01/21 20:40:40 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm) Virtual Audio Cable (WDM)
DRV - [2010/12/17 01:00:00 | 001,360,760 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110228.024\NAVEX15.SYS -- (NAVEX15)
DRV - [2010/12/17 01:00:00 | 000,086,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110228.024\NAVENG.SYS -- (NAVENG)
DRV - [2010/09/10 22:32:20 | 000,167,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WpsHelper.sys -- (WpsHelper)
DRV - [2010/05/27 00:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/27 00:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/03/29 09:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/08/27 14:06:32 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/06/29 21:42:00 | 000,027,136 | ---- | M] (NCH Swift Sound) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nchssvad.sys -- (NCHSSVAD)
DRV - [2009/05/20 10:54:06 | 000,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2009/03/28 11:01:08 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009/03/27 13:23:12 | 000,023,064 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/02/02 08:46:44 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS)
DRV - [2009/02/02 08:46:42 | 000,319,664 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2009/02/02 08:46:42 | 000,279,600 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2009/02/02 08:46:42 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2009/02/02 08:46:40 | 000,092,488 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys -- (SysPlant)
DRV - [2009/02/02 08:46:40 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2)
DRV - [2009/02/02 08:46:36 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2009/02/02 08:46:36 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2009/02/02 08:46:34 | 000,420,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009/02/02 08:46:34 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2008/07/03 01:03:14 | 004,745,216 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/02/20 13:47:36 | 000,162,824 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\FTT3.sys -- (FTT3)
DRV - [2008/01/03 06:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007/10/11 17:40:12 | 000,009,096 | R--- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdide.sys -- (amdide)
DRV - [2007/09/21 02:10:54 | 000,078,992 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2007/09/21 02:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007/09/21 02:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007/09/21 02:10:26 | 000,063,120 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2007/09/21 02:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007/04/16 16:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2007/02/16 10:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacommousefilter.sys -- (wacommousefilter)
[color="#e56717"]========== Standard Registry (SafeList) ==========[/color]
[color="#e56717"]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - File not found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.condui...&ctid=CT2786678
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - File not found
IE - HKCU\..\URLSearchHook: {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
[color="#e56717"]========== FireFox ==========[/color]
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.defaultthis.engineName: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.condui...&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.condui...SearchSource=13"
FF - prefs.js..extensions.enabledItems: [email protected]:3.5.1.110
FF - prefs.js..extensions.enabledItems: [email protected]:4.0.21.0
FF - prefs.js..extensions.enabledItems: [email protected]:3.2.5.2
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:4.5
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0.071301000019
FF - prefs.js..extensions.enabledItems: {2224E955-00E9-4613-A844-CE69FCCAAE91}:3.6.0.4470
FF - prefs.js..extensions.enabledItems: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0
FF - prefs.js..extensions.enabledItems: {0CDC78A2-05A1-47F9-8810-A36BA7576D00}:1.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.14908
FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1
FF - prefs.js..extensions.enabledItems: {D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}:1.0
FF - prefs.js..keyword.URL: "http://www.bing.com/...ABTDF&PC=BBLN&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{2224E955-00E9-4613-A844-CE69FCCAAE91}: C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF [2009/08/03 11:49:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/06/17 14:21:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\MSN Toolbar\Platform\4.0.0417.0\Firefox [2010/10/09 16:00:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/10/09 16:01:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/26 21:37:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/27 13:36:00 | 000,000,000 | ---D | M]
[2009/04/30 14:29:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Extensions
[2011/02/27 22:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions
[2010/04/07 15:42:15 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010/05/11 18:14:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/12/28 01:15:04 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2009/07/16 23:33:11 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/12/28 01:15:06 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2009/06/04 14:21:28 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/03/04 16:01:07 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/02/04 16:45:40 | 000,002,254 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\askcom.xml
[2010/10/28 12:43:34 | 000,001,840 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\bing.xml
[2010/12/28 01:15:06 | 000,000,913 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\conduit.xml
[2010/04/11 20:36:02 | 000,001,201 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\winamp-search.xml
[2011/02/27 22:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/10/20 20:18:39 | 000,000,000 | ---D | M] (ResultBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}
[2011/01/29 10:35:20 | 000,000,000 | ---D | M] (QuestBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}
[2011/02/28 19:10:10 | 000,000,000 | ---D | M] (The Browser Highlighter) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
[2010/12/27 23:33:13 | 000,000,000 | ---D | M] (Gamevance TextLinks) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\[email protected]
[2010/06/17 14:21:58 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3
[2009/08/03 11:49:28 | 000,000,000 | ---D | M] ("NP Helper Class") -- C:\PROGRAM FILES\INTERNET SAVING OPTIMIZER\3.6.0.4470\FF
[2010/10/20 20:15:49 | 000,000,000 | ---D | M] (PriceGong) -- C:\PROGRAM FILES\PRICEGONG\2.1.0\FF
[2010/12/09 02:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
O1 HOSTS File: ([2007/08/10 22:58:33 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (PriceGongBHO Class) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll (PriceGong)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - File not found
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Recording Engineer Helper Toolbar) - {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O2 - BHO: (System Search Dispatcher) - {CDBFB47B-58A8-4111-BF95-06178DCE326D} - File not found
O3 - HKLM\..\Toolbar: (Recording Engineer Helper Toolbar) - {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (Recording Engineer Helper Toolbar) - {73F3DD36-3464-4AA4-A815-DE51290FB05E} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Recording Engineer Helper Toolbar) - {73F3DD36-3464-4AA4-A815-DE51290FB05E} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Bluetooth Connection Assistant] File not found
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [mnumsg.exe] File not found
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/08 16:27:48 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\Shell\AutoRun\command - "" = E:\system\viewer\FlipVideoforPC.exe
O33 - MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\Shell\Flip Video for PC\command - "" = E:\system\viewer\FlipVideoforPC.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[color="#e56717"]========== Files/Folders - Created Within 30 Days ==========[/color]
[2011/02/28 15:41:41 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/18 10:27:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15
[2011/02/07 16:41:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Logs
[2010/12/31 21:24:24 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\JavaSetup6u23.exe
[2010/12/31 21:05:48 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\jre-6u23-windows-i586-iftw-k.exe
[2010/12/12 21:21:08 | 006,274,424 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Silverlight.exe
[2010/12/03 16:08:27 | 002,728,440 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcsetup.exe
[2010/12/03 15:40:19 | 003,324,232 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vc_web.exe
[2004/01/12 00:00:00 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color="#e56717"]========== Files - Modified Within 30 Days ==========[/color]
[2011/02/28 19:26:07 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/02/28 19:25:17 | 000,200,819 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/02/28 19:24:58 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/28 19:24:37 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/28 19:09:00 | 000,000,890 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/28 19:05:21 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job
[2011/02/28 19:01:00 | 000,000,240 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/02/28 16:56:05 | 000,000,458 | ---- | M] () -- C:\WINDOWS\tasks\RMSmartUpdate.job
[2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/27 22:30:29 | 000,096,968 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 17:41:51 | 000,000,476 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Jonathon.job
[2011/02/27 13:57:16 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2011/02/27 13:40:23 | 000,000,215 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/26 14:17:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/02/18 10:27:45 | 001,402,518 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/14 22:08:43 | 000,013,486 | ---- | M] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2011/02/13 20:54:55 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/02/13 20:54:55 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/12 08:09:12 | 000,456,304 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/02/12 08:09:12 | 000,075,210 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[color="#e56717"]========== Files Created - No Company Name ==========[/color]
[2011/02/27 22:29:55 | 000,096,968 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 13:40:23 | 000,000,215 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/18 10:27:43 | 001,402,518 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/13 20:54:55 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/01/29 10:33:01 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/29 10:33:01 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/21 20:40:53 | 000,031,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\vrtaucbl.sys
[2010/12/31 23:08:16 | 000,835,440 | ---- | C] () -- C:\Program Files\pbsvc.exe
[2010/12/31 22:53:25 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2010/12/27 23:34:47 | 005,430,783 | ---- | C] () -- C:\Program Files\WMV r506 32bit DEVWORK.rar
[2010/12/24 00:00:04 | 001,661,959 | ---- | C] () -- C:\Program Files\wowmodelview0.5.07.zip
[2010/12/10 21:13:05 | 001,985,823 | ---- | C] () -- C:\Program Files\AtlasLoot-v6.01.01.zip
[2010/12/07 18:29:56 | 000,001,456 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs
[2010/12/04 14:55:53 | 000,022,222 | ---- | C] () -- C:\Program Files\souper3.zip
[2010/12/04 11:39:28 | 000,980,215 | ---- | C] () -- C:\Program Files\msvcdll-90.zip
[2010/12/04 11:36:56 | 007,683,072 | ---- | C] () -- C:\Program Files\WMV_Installer_v0701_r500_Win64.msi
[2010/12/04 11:33:47 | 000,000,000 | ---- | C] () -- C:\Program Files\wowmodelview-0.5.06beta.zip
[2010/12/03 16:37:20 | 005,928,476 | ---- | C] () -- C:\Program Files\WMV_Binary_v0701_r490_Win32_DevWork.zip
[2010/12/03 16:25:15 | 003,728,716 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.3_Win32_Release.zip
[2010/12/03 16:10:54 | 005,167,176 | ---- | C] () -- C:\Program Files\WoW-2.4.0.8089-to-2.4.1.8125-enUS-patch.exe
[2010/12/03 15:36:37 | 007,091,330 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.1_Win32_Debug.zip
[2010/10/10 00:56:26 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2010/08/16 08:54:25 | 000,013,486 | ---- | C] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2010/08/03 15:54:23 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\Adobe PNG Format CS5 Prefs
[2010/06/17 19:29:26 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat.temp
[2010/06/17 19:29:26 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat.temp
[2010/06/17 14:13:10 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat
[2010/06/17 14:13:10 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat
[2010/05/16 06:44:30 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2009/10/10 20:51:36 | 000,058,004 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/10/08 16:28:11 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/05/10 15:48:01 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/04/30 14:29:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/04/27 20:49:35 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/04/27 20:05:16 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\setup_ldm.iss
[2009/03/12 20:02:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/03/12 20:00:08 | 003,767,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/12 13:55:32 | 000,138,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009/03/12 13:55:32 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\PnkBstrK.sys
[2009/03/12 13:55:13 | 000,835,440 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2009/03/12 13:55:13 | 000,270,904 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009/03/12 13:55:13 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2009/03/12 13:32:45 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009/03/12 13:18:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/03/12 13:14:03 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/01/13 14:22:56 | 002,163,200 | ---- | C] () -- C:\Program Files\WoWModelViewer.exe
[2009/01/12 12:19:56 | 000,288,056 | ---- | C] () -- C:\Program Files\logo.bmp
[2008/11/03 01:27:22 | 000,245,760 | ---- | C] () -- C:\Program Files\glew32.dll
[2008/10/06 21:33:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/10/06 21:33:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008/10/06 21:33:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008/10/06 21:33:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008/10/06 21:33:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/10/06 21:33:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008/10/06 21:33:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008/10/06 21:33:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008/10/06 21:33:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/06/05 08:58:26 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/13 20:55:28 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2006/12/30 22:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/08/23 03:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 03:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 03:00:00 | 000,456,304 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 03:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 03:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 03:00:00 | 000,075,210 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 03:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 03:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 03:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 03:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[color="#e56717"]========== LOP Check ==========[/color]
[2011/01/29 10:32:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
[2011/01/29 10:49:19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ClickPotatoLiteSA
[2010/05/10 20:52:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
[2010/06/16 11:28:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Electronic Arts
[2009/06/29 21:46:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
[2010/10/09 16:00:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Drivers HeadQuarters
[2010/08/16 10:53:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PMB Files
[2011/02/04 07:04:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\QuestBrwSearch
[2010/06/22 12:38:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\regid.1986-12.com.adobe
[2011/01/05 16:23:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ResultBrowse
[2010/02/25 17:06:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Screaming Bee
[2011/02/28 19:25:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP
[2010/06/16 11:37:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2010/10/07 18:27:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009/10/10 17:55:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010/09/01 15:53:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011/01/29 10:32:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\ClickPotatoLite
[2010/10/28 19:38:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2010/05/10 20:52:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\DAEMON Tools Lite
[2010/06/29 15:52:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Datel
[2009/10/18 11:57:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\GetRightToGo
[2009/04/27 20:05:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Leadertech
[2010/08/19 18:58:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\MsgCnf
[2010/08/20 08:29:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\MyShoppingGenie
[2010/06/16 11:37:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\NCH Swift Sound
[2011/02/28 19:14:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Octoshape
[2011/02/28 19:26:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\PriceGong
[2010/04/19 16:14:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\RadioBar
[2011/02/28 19:06:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\RayV
[2009/12/07 21:12:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Screaming Bee
[2011/01/29 12:02:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\ShoppingReport2
[2009/05/24 11:16:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\SPORE
[2010/12/05 08:33:34 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011/02/28 19:35:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\uTorrent
[2009/03/28 11:05:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Windows Desktop Search
[2009/06/30 20:00:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\Windows Search
[2010/06/16 19:52:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Jonathon\Application Data\WTouch
[2011/02/28 19:05:21 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\RMSchedule.job
[2011/02/28 16:56:05 | 000,000,458 | ---- | M] () -- C:\WINDOWS\Tasks\RMSmartUpdate.job
[2011/02/28 19:01:00 | 000,000,240 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
[color="#e56717"]========== Purity Check ==========[/color]
[color="#e56717"]========== Alternate Data Streams ==========[/color]
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24051EFF
@Alternate Data Stream - 495 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 163 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:63238B95
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
< End of report >
14
Tech Clinic / OS question, and Download error.
« on: February 28, 2011, 09:12:31 PM »
The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed. Contact your support personnel for assistance.
Internet Saving Optimizer Cant remember
System Search Dispatcher no idea
MyShoppingGenie Uninstalling right now...
DTVblizzcon For Blizzcon live stream
Recording_Engineer_Helper Toolbar No idea again
ResultBrowse 1.0 build 117 No idea
Software Informer 1.0 BETA No idea
Viewpoint Media Player No idea
Winwonk OpenTarget No idea
Winamp Toolbar Just came with Winamp
Yahoo! Toolbar No idea
Google Toolbar for Internet Explorer No idea.
Most of these im just going to go ahead and uninstall because they have no use to me.
Internet Saving Optimizer Cant remember
System Search Dispatcher no idea
MyShoppingGenie Uninstalling right now...
DTVblizzcon For Blizzcon live stream
Recording_Engineer_Helper Toolbar No idea again
ResultBrowse 1.0 build 117 No idea
Software Informer 1.0 BETA No idea
Viewpoint Media Player No idea
Winwonk OpenTarget No idea
Winamp Toolbar Just came with Winamp
Yahoo! Toolbar No idea
Google Toolbar for Internet Explorer No idea.
Most of these im just going to go ahead and uninstall because they have no use to me.
15
Tech Clinic / OS question, and Download error.
« on: February 28, 2011, 06:47:09 PM »
OTL logfile created on: 2/28/2011 3:42:20 PM - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Jonathon\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 76.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 86.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 166.90 Gb Free Space | 35.84% Space Free | Partition Type: NTFS
Computer Name: JONATHONB | User Name: Jonathon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
PRC - [2010/12/28 01:15:04 | 000,396,152 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2010/06/08 07:09:33 | 000,681,312 | ---- | M] (MyNetUniverse Inc.) -- C:\Program Files\MyShoppingGenie\mnumsg.exe
PRC - [2010/01/15 04:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009/11/23 15:53:58 | 004,781,352 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchUser.exe
PRC - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchService.exe
PRC - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Pen_Tablet.exe
PRC - [2009/02/02 08:46:42 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
PRC - [2009/02/02 08:46:40 | 001,443,144 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
PRC - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
PRC - [2009/01/08 05:44:06 | 000,070,936 | ---- | M] (Octoshape ApS) -- C:\Documents and Settings\Jonathon\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
PRC - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/13 20:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/11/15 09:09:56 | 000,059,920 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\LBTWiz.exe
PRC - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
========== Modules (SafeList) ==========
MOD - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
MOD - [2008/04/13 20:42:52 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (Viewpoint Manager Service)
SRV - File not found [Auto | Stopped] -- -- (ResultBrowse Service)
SRV - File not found [Auto | Stopped] -- -- (QuestBrowse Service)
SRV - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010/04/24 22:04:55 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/15 10:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 10:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/25 10:00:54 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2010/01/22 08:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2010/01/15 04:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\WTouch\WTouchService.exe -- (WTouchService)
SRV - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\WINDOWS\system32\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2009/08/30 11:17:30 | 003,407,412 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
SRV - [2009/02/02 08:46:40 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC)
SRV - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2007/08/11 20:05:27 | 003,093,872 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)
========== Driver Services (SafeList) ==========
DRV - [2011/01/21 20:40:40 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm) Virtual Audio Cable (WDM)
DRV - [2010/12/17 01:00:00 | 001,360,760 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110227.003\NAVEX15.SYS -- (NAVEX15)
DRV - [2010/12/17 01:00:00 | 000,086,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110227.003\NAVENG.SYS -- (NAVENG)
DRV - [2010/09/10 22:32:20 | 000,167,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WpsHelper.sys -- (WpsHelper)
DRV - [2010/05/27 00:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/27 00:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/03/29 09:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/08/27 14:06:32 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/06/29 21:42:00 | 000,027,136 | ---- | M] (NCH Swift Sound) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nchssvad.sys -- (NCHSSVAD)
DRV - [2009/05/20 10:54:06 | 000,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2009/03/28 11:01:08 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009/03/27 13:23:12 | 000,023,064 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/02/02 08:46:44 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS)
DRV - [2009/02/02 08:46:42 | 000,319,664 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2009/02/02 08:46:42 | 000,279,600 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2009/02/02 08:46:42 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2009/02/02 08:46:40 | 000,092,488 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys -- (SysPlant)
DRV - [2009/02/02 08:46:40 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2)
DRV - [2009/02/02 08:46:36 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2009/02/02 08:46:36 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2009/02/02 08:46:34 | 000,420,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009/02/02 08:46:34 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2008/07/03 01:03:14 | 004,745,216 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/02/20 13:47:36 | 000,162,824 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\FTT3.sys -- (FTT3)
DRV - [2008/01/03 06:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007/10/11 17:40:12 | 000,009,096 | R--- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdide.sys -- (amdide)
DRV - [2007/09/21 02:10:54 | 000,078,992 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2007/09/21 02:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007/09/21 02:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007/09/21 02:10:26 | 000,063,120 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2007/09/21 02:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007/04/16 16:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2007/02/16 10:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacommousefilter.sys -- (wacommousefilter)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - File not found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2786678
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - File not found
IE - HKCU\..\URLSearchHook: {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.defaultthis.engineName: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=ConduitEngine&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=&SearchSource=13"
FF - prefs.js..extensions.enabledItems: [email protected]:3.5.1.110
FF - prefs.js..extensions.enabledItems: [email protected]:4.0.21.0
FF - prefs.js..extensions.enabledItems: [email protected]:3.2.5.2
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:4.5
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0.071301000019
FF - prefs.js..extensions.enabledItems: {2224E955-00E9-4613-A844-CE69FCCAAE91}:3.6.0.4470
FF - prefs.js..extensions.enabledItems: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0
FF - prefs.js..extensions.enabledItems: {0CDC78A2-05A1-47F9-8810-A36BA7576D00}:1.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.14908
FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1
FF - prefs.js..extensions.enabledItems: {D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}:1.0
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=BABTDF&PC=BBLN&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{2224E955-00E9-4613-A844-CE69FCCAAE91}: C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF [2009/08/03 11:49:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/06/17 14:21:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\MSN Toolbar\Platform\4.0.0417.0\Firefox [2010/10/09 16:00:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/10/09 16:01:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/26 21:37:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/27 13:36:00 | 000,000,000 | ---D | M]
[2009/04/30 14:29:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Extensions
[2011/02/27 22:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions
[2010/04/07 15:42:15 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010/05/11 18:14:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/12/28 01:15:04 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2009/07/16 23:33:11 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/12/28 01:15:06 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2009/06/04 14:21:28 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/03/04 16:01:07 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/02/04 16:45:40 | 000,002,254 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\askcom.xml
[2010/10/28 12:43:34 | 000,001,840 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\bing.xml
[2010/12/28 01:15:06 | 000,000,913 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\conduit.xml
[2010/04/11 20:36:02 | 000,001,201 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\winamp-search.xml
[2011/02/27 22:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/10/20 20:18:39 | 000,000,000 | ---D | M] (ResultBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}
[2011/01/29 10:35:20 | 000,000,000 | ---D | M] (QuestBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}
[2011/02/27 20:11:14 | 000,000,000 | ---D | M] (The Browser Highlighter) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
[2010/12/27 23:33:13 | 000,000,000 | ---D | M] (Gamevance TextLinks) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\[email protected]
[2010/06/17 14:21:58 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3
[2009/08/03 11:49:28 | 000,000,000 | ---D | M] ("NP Helper Class") -- C:\PROGRAM FILES\INTERNET SAVING OPTIMIZER\3.6.0.4470\FF
[2010/10/20 20:15:49 | 000,000,000 | ---D | M] (PriceGong) -- C:\PROGRAM FILES\PRICEGONG\2.1.0\FF
[2010/12/09 02:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
O1 HOSTS File: ([2007/08/10 22:58:33 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (PriceGongBHO Class) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll (PriceGong)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - File not found
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Recording Engineer Helper Toolbar) - {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O2 - BHO: (System Search Dispatcher) - {CDBFB47B-58A8-4111-BF95-06178DCE326D} - File not found
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Recording Engineer Helper Toolbar) - {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Recording Engineer Helper Toolbar) - {73F3DD36-3464-4AA4-A815-DE51290FB05E} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Recording Engineer Helper Toolbar) - {73F3DD36-3464-4AA4-A815-DE51290FB05E} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Bluetooth Connection Assistant] File not found
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [fsm] File not found
O4 - HKCU..\Run: [mnumsg.exe] C:\Program Files\MyShoppingGenie\mnumsg.exe (MyNetUniverse Inc.)
O4 - HKCU..\Run: [Octoshape Streaming Services] C:\Documents and Settings\Jonathon\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe (Octoshape ApS)
O4 - HKCU..\Run: [RayV] C:\Program Files\RayV\RayV\RayV.exe (RayV)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll (Google Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/08 16:27:48 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\Shell\AutoRun\command - "" = E:\system\viewer\FlipVideoforPC.exe
O33 - MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\Shell\Flip Video for PC\command - "" = E:\system\viewer\FlipVideoforPC.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/02/28 15:41:41 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/28 15:11:48 | 008,669,472 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\Windows7UpgradeAdvisorSetup.exe
[2011/02/27 13:53:34 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_6.dll
[2011/02/27 13:53:34 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_4.dll
[2011/02/27 13:53:33 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_6.dll
[2011/02/27 13:53:33 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_7.dll
[2011/02/18 10:27:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15
[2011/02/13 20:52:52 | 008,582,536 | ---- | C] (Mozilla) -- C:\Documents and Settings\Jonathon\Desktop\Firefox Setup 3.6.13.exe
[2011/02/12 16:53:39 | 004,584,688 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsServer2003-KB898715-x64-enu.exe
[2011/02/12 16:53:22 | 005,960,944 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsServer2003-KB898715-ia64-enu.exe
[2011/02/12 16:51:20 | 002,585,872 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsInstaller-KB893803-v2-x86.exe
[2011/02/07 16:41:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Logs
[2010/12/31 21:24:24 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\JavaSetup6u23.exe
[2010/12/31 21:05:48 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\jre-6u23-windows-i586-iftw-k.exe
[2010/12/12 21:21:08 | 006,274,424 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Silverlight.exe
[2010/12/03 16:08:27 | 002,728,440 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcsetup.exe
[2010/12/03 15:40:19 | 003,324,232 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vc_web.exe
[2004/01/12 00:00:00 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/28 15:11:57 | 008,669,472 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\Windows7UpgradeAdvisorSetup.exe
[2011/02/28 15:09:00 | 000,000,890 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/28 15:09:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/28 15:01:00 | 000,000,240 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/02/28 11:56:03 | 000,000,458 | ---- | M] () -- C:\WINDOWS\tasks\RMSmartUpdate.job
[2011/02/28 07:47:05 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/02/28 07:45:12 | 000,200,819 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/02/28 07:44:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/27 22:30:29 | 000,096,968 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 19:01:39 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job
[2011/02/27 17:41:51 | 000,000,476 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Jonathon.job
[2011/02/27 14:19:28 | 002,585,872 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsInstaller-KB893803-v2-x86.exe
[2011/02/27 13:57:16 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2011/02/27 13:40:23 | 000,000,215 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/26 14:17:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/02/18 10:27:45 | 001,402,518 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/14 22:08:43 | 000,013,486 | ---- | M] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2011/02/13 20:54:55 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/02/13 20:54:55 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/13 20:53:42 | 008,582,536 | ---- | M] (Mozilla) -- C:\Documents and Settings\Jonathon\Desktop\Firefox Setup 3.6.13.exe
[2011/02/12 16:53:43 | 004,584,688 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsServer2003-KB898715-x64-enu.exe
[2011/02/12 16:53:27 | 005,960,944 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsServer2003-KB898715-ia64-enu.exe
[2011/02/12 08:09:12 | 000,456,304 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/02/12 08:09:12 | 000,075,210 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/02/04 20:24:20 | 000,883,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Jonathon\Desktop\jre-6u23-windows-i586-iftw-k.exe
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/27 22:29:55 | 000,096,968 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 13:40:23 | 000,000,215 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/18 10:27:43 | 001,402,518 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/13 20:54:55 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/01/29 10:33:01 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/29 10:33:01 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/21 20:40:53 | 000,031,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\vrtaucbl.sys
[2010/12/31 23:08:16 | 000,835,440 | ---- | C] () -- C:\Program Files\pbsvc.exe
[2010/12/31 22:53:25 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2010/12/27 23:34:47 | 005,430,783 | ---- | C] () -- C:\Program Files\WMV r506 32bit DEVWORK.rar
[2010/12/24 00:00:04 | 001,661,959 | ---- | C] () -- C:\Program Files\wowmodelview0.5.07.zip
[2010/12/10 21:13:05 | 001,985,823 | ---- | C] () -- C:\Program Files\AtlasLoot-v6.01.01.zip
[2010/12/07 18:29:56 | 000,001,456 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs
[2010/12/04 14:55:53 | 000,022,222 | ---- | C] () -- C:\Program Files\souper3.zip
[2010/12/04 11:39:28 | 000,980,215 | ---- | C] () -- C:\Program Files\msvcdll-90.zip
[2010/12/04 11:36:56 | 007,683,072 | ---- | C] () -- C:\Program Files\WMV_Installer_v0701_r500_Win64.msi
[2010/12/04 11:33:47 | 000,000,000 | ---- | C] () -- C:\Program Files\wowmodelview-0.5.06beta.zip
[2010/12/03 16:37:20 | 005,928,476 | ---- | C] () -- C:\Program Files\WMV_Binary_v0701_r490_Win32_DevWork.zip
[2010/12/03 16:25:15 | 003,728,716 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.3_Win32_Release.zip
[2010/12/03 16:10:54 | 005,167,176 | ---- | C] () -- C:\Program Files\WoW-2.4.0.8089-to-2.4.1.8125-enUS-patch.exe
[2010/12/03 15:36:37 | 007,091,330 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.1_Win32_Debug.zip
[2010/10/10 00:56:26 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2010/08/16 08:54:25 | 000,013,486 | ---- | C] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2010/08/03 15:54:23 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\Adobe PNG Format CS5 Prefs
[2010/06/17 19:29:26 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat.temp
[2010/06/17 19:29:26 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat.temp
[2010/06/17 14:13:10 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat
[2010/06/17 14:13:10 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat
[2010/05/16 06:44:30 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2009/10/10 20:51:36 | 000,058,004 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/10/08 16:28:11 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/05/10 15:48:01 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/04/30 14:29:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/04/27 20:49:35 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/04/27 20:05:16 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\setup_ldm.iss
[2009/03/12 20:02:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/03/12 20:00:08 | 003,767,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/12 13:55:32 | 000,138,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009/03/12 13:55:32 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\PnkBstrK.sys
[2009/03/12 13:55:13 | 000,835,440 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2009/03/12 13:55:13 | 000,270,904 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009/03/12 13:55:13 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2009/03/12 13:32:45 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009/03/12 13:18:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/03/12 13:14:03 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/01/13 14:22:56 | 002,163,200 | ---- | C] () -- C:\Program Files\WoWModelViewer.exe
[2009/01/12 12:19:56 | 000,288,056 | ---- | C] () -- C:\Program Files\logo.bmp
[2008/11/03 01:27:22 | 000,245,760 | ---- | C] () -- C:\Program Files\glew32.dll
[2008/10/06 21:33:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/10/06 21:33:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008/10/06 21:33:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008/10/06 21:33:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008/10/06 21:33:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/10/06 21:33:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008/10/06 21:33:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008/10/06 21:33:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008/10/06 21:33:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/06/05 08:58:26 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/13 20:55:28 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2006/12/30 22:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/08/23 03:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 03:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 03:00:00 | 000,456,304 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 03:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 03:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 03:00:00 | 000,075,210 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 03:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 03:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 03:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 03:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== Alternate Data Streams ==========
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24051EFF
@Alternate Data Stream - 495 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 163 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:63238B95
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1
< End of report >
OTL Extras logfile created on: 2/28/2011 3:42:20 PM - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Jonathon\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 76.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 86.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 166.90 Gb Free Space | 35.84% Space Free | Partition Type: NTFS
Computer Name: JONATHONB | User Name: Jonathon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP
"56718:TCP" = 56718:TCP:*:Enabled:Pando Media Booster
"56718:UDP" = 56718:UDP:*:Enabled:Pando Media Booster
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"3724:TCP" = 3724:TCP:*:Enabled:Blizzard Downloader: 3724
"6112:TCP" = 6112:TCP:*:Enabled:blizzard Downloader
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP
"56718:TCP" = 56718:TCP:*:Enabled:Pando Media Booster
"56718:UDP" = 56718:UDP:*:Enabled:Pando Media Booster
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\setup\hpznui01.exe" = D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.)
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe" = C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe:*:Enabled:SMC Service -- (Symantec Corporation)
"C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE" = C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE:*:Enabled:SNAC Service -- (Symantec Corporation)
"C:\Program Files\Common Files\Symantec Shared\ccApp.exe" = C:\Program Files\Common Files\Symantec Shared\ccApp.exe:*:Enabled:Symantec Email -- (Symantec Corporation)
"C:\Program Files\Ventrilo\Ventrilo.exe" = C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe -- (Flagship Industries, Inc.)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader
"C:\Program Files\AIM6\aim6.exe" = C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM
"C:\Program Files\World of Warcraft\Launcher.exe" = C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\Electronic Arts\EADM\Core.exe" = C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.0-enUS-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.0-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe" = C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10147-to-0.2.0.10170-enUS-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10147-to-0.2.0.10170-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10170-to-0.2.0.10179-enUS-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10170-to-0.2.0.10179-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft Public Test\Launcher.exe" = C:\Program Files\World of Warcraft Public Test\Launcher.exe:*:Enabled:Blizzard Launcher -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10179-to-0.2.0.10192-enUS-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10179-to-0.2.0.10192-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\Steam\steamapps\kazooy\team fortress 2\hl2.exe" = C:\Program Files\Steam\steamapps\kazooy\team fortress 2\hl2.exe:*:Enabled:hl2 -- ()
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10257-enUS-ptr-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10257-enUS-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\RayV\RayV\RayV.exe" = C:\Program Files\RayV\RayV\RayV.exe:*:Enabled:RayV -- (RayV)
"C:\Program Files\RayV\RayV\RayV.dll" = C:\Program Files\RayV\RayV\RayV.dll:*:Enabled:RayV -- (RayV)
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10357-to-0.2.2.10371-enUS-ptr-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10357-to-0.2.2.10371-enUS-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10371-to-0.2.2.10392-enUS-ptr-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10371-to-0.2.2.10392-enUS-ptr-downloader.exe:*:Enabled:Blizzard Downlo
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Jonathon\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 76.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 86.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 166.90 Gb Free Space | 35.84% Space Free | Partition Type: NTFS
Computer Name: JONATHONB | User Name: Jonathon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
PRC - [2010/12/28 01:15:04 | 000,396,152 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
PRC - [2010/06/08 07:09:33 | 000,681,312 | ---- | M] (MyNetUniverse Inc.) -- C:\Program Files\MyShoppingGenie\mnumsg.exe
PRC - [2010/01/15 04:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009/11/23 15:53:58 | 004,781,352 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchUser.exe
PRC - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) -- C:\Program Files\WTouch\WTouchService.exe
PRC - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) -- C:\WINDOWS\system32\Pen_Tablet.exe
PRC - [2009/02/02 08:46:42 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe
PRC - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
PRC - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
PRC - [2009/02/02 08:46:40 | 001,443,144 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
PRC - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
PRC - [2009/01/08 05:44:06 | 000,070,936 | ---- | M] (Octoshape ApS) -- C:\Documents and Settings\Jonathon\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
PRC - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/04/13 20:42:20 | 001,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/11/15 09:09:56 | 000,059,920 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\SetPoint\LBTWiz.exe
PRC - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
========== Modules (SafeList) ==========
MOD - [2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
MOD - [2008/04/13 20:42:52 | 001,054,208 | R--- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (Viewpoint Manager Service)
SRV - File not found [Auto | Stopped] -- -- (ResultBrowse Service)
SRV - File not found [Auto | Stopped] -- -- (QuestBrowse Service)
SRV - [2010/08/05 07:46:02 | 000,583,640 | ---- | M] (PC Tools) [Auto | Running] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2010/04/24 22:04:55 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/15 10:50:36 | 001,142,224 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2010/03/11 10:09:22 | 000,366,840 | ---- | M] (PC Tools) [On_Demand | Stopped] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2010/02/19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010/01/25 10:00:54 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2010/01/22 08:56:24 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto | Stopped] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2010/01/15 04:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/11/23 15:53:58 | 000,113,448 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Program Files\WTouch\WTouchService.exe -- (WTouchService)
SRV - [2009/11/23 15:53:56 | 004,497,704 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\WINDOWS\system32\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2009/08/30 11:17:30 | 003,407,412 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr)
SRV - [2009/02/02 08:46:42 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr)
SRV - [2009/02/02 08:46:40 | 001,795,400 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe -- (SmcService)
SRV - [2009/02/02 08:46:40 | 000,320,840 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE -- (SNAC)
SRV - [2009/02/02 08:46:38 | 002,440,120 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe -- (Symantec AntiVirus)
SRV - [2008/11/09 12:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2007/11/15 09:09:42 | 000,121,360 | ---- | M] (Logitech, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2007/08/11 20:05:27 | 003,093,872 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate)
========== Driver Services (SafeList) ==========
DRV - [2011/01/21 20:40:40 | 000,031,616 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\vrtaucbl.sys -- (EuMusDesignVirtualAudioCableWdm) Virtual Audio Cable (WDM)
DRV - [2010/12/17 01:00:00 | 001,360,760 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110227.003\NAVEX15.SYS -- (NAVEX15)
DRV - [2010/12/17 01:00:00 | 000,086,008 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110227.003\NAVENG.SYS -- (NAVENG)
DRV - [2010/09/10 22:32:20 | 000,167,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WpsHelper.sys -- (WpsHelper)
DRV - [2010/05/27 00:00:00 | 000,371,248 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2010/05/27 00:00:00 | 000,102,448 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)
DRV - [2010/03/29 09:06:14 | 000,218,592 | ---- | M] (PC Tools) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\PCTCore.sys -- (PCTCore)
DRV - [2009/08/27 14:06:32 | 000,016,168 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2009/06/29 21:42:00 | 000,027,136 | ---- | M] (NCH Swift Sound) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nchssvad.sys -- (NCHSSVAD)
DRV - [2009/05/20 10:54:06 | 000,013,736 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2009/03/28 11:01:08 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2009/03/27 13:23:12 | 000,023,064 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/02/02 08:46:44 | 000,042,312 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS)
DRV - [2009/02/02 08:46:42 | 000,319,664 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL)
DRV - [2009/02/02 08:46:42 | 000,279,600 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP)
DRV - [2009/02/02 08:46:42 | 000,043,824 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX)
DRV - [2009/02/02 08:46:40 | 000,092,488 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys -- (SysPlant)
DRV - [2009/02/02 08:46:40 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2)
DRV - [2009/02/02 08:46:36 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI)
DRV - [2009/02/02 08:46:36 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV)
DRV - [2009/02/02 08:46:34 | 000,420,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv)
DRV - [2009/02/02 08:46:34 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon)
DRV - [2008/07/03 01:03:14 | 004,745,216 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/02/20 13:47:36 | 000,162,824 | ---- | M] (Promise Technology, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\FTT3.sys -- (FTT3)
DRV - [2008/01/03 06:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007/10/11 17:40:12 | 000,009,096 | R--- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\amdide.sys -- (amdide)
DRV - [2007/09/21 02:10:54 | 000,078,992 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\LMouKE.Sys -- (LMouKE)
DRV - [2007/09/21 02:10:46 | 000,036,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007/09/21 02:10:40 | 000,035,088 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2007/09/21 02:10:26 | 000,063,120 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042mou.Sys -- (L8042mou)
DRV - [2007/09/21 02:10:20 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2007/04/16 16:46:34 | 000,033,792 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdPPM.sys -- (AmdPPM)
DRV - [2007/02/16 10:12:36 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\wacommousefilter.sys -- (wacommousefilter)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - File not found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.google.com/ [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2786678
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - File not found
IE - HKCU\..\URLSearchHook: {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.defaultthis.engineName: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=ConduitEngine&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Conduit Engine Customized Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://search.conduit.com/?ctid=&SearchSource=13"
FF - prefs.js..extensions.enabledItems: [email protected]:3.5.1.110
FF - prefs.js..extensions.enabledItems: [email protected]:4.0.21.0
FF - prefs.js..extensions.enabledItems: [email protected]:3.2.5.2
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:4.5
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0.071301000019
FF - prefs.js..extensions.enabledItems: {2224E955-00E9-4613-A844-CE69FCCAAE91}:3.6.0.4470
FF - prefs.js..extensions.enabledItems: {8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}:2.1.0
FF - prefs.js..extensions.enabledItems: {0CDC78A2-05A1-47F9-8810-A36BA7576D00}:1.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.14908
FF - prefs.js..extensions.enabledItems: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1
FF - prefs.js..extensions.enabledItems: {D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}:1.0
FF - prefs.js..keyword.URL: "http://www.bing.com/search?FORM=BABTDF&PC=BBLN&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{2224E955-00E9-4613-A844-CE69FCCAAE91}: C:\Program Files\Internet Saving Optimizer\3.6.0.4470\FF [2009/08/03 11:49:28 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010/06/17 14:21:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\MSN Toolbar\Platform\4.0.0417.0\Firefox [2010/10/09 16:00:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2010/10/09 16:01:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/02/26 21:37:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/02/27 13:36:00 | 000,000,000 | ---D | M]
[2009/04/30 14:29:50 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Extensions
[2011/02/27 22:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions
[2010/04/07 15:42:15 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010/05/11 18:14:21 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/12/28 01:15:04 | 000,000,000 | ---D | M] (uTorrentBar Community Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
[2009/07/16 23:33:11 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/12/28 01:15:06 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2009/06/04 14:21:28 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/03/04 16:01:07 | 000,000,000 | ---D | M] (Ask Toolbar) -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\extensions\[email protected]
[2010/02/04 16:45:40 | 000,002,254 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\askcom.xml
[2010/10/28 12:43:34 | 000,001,840 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\bing.xml
[2010/12/28 01:15:06 | 000,000,913 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\conduit.xml
[2010/04/11 20:36:02 | 000,001,201 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Mozilla\Firefox\Profiles\pfu1larr.default\searchplugins\winamp-search.xml
[2011/02/27 22:00:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/10/20 20:18:39 | 000,000,000 | ---D | M] (ResultBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{0CDC78A2-05A1-47F9-8810-A36BA7576D00}
[2011/01/29 10:35:20 | 000,000,000 | ---D | M] (QuestBrowse) -- C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}
[2011/02/27 20:11:14 | 000,000,000 | ---D | M] (The Browser Highlighter) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
[2010/12/27 23:33:13 | 000,000,000 | ---D | M] (Gamevance TextLinks) -- C:\DOCUMENTS AND SETTINGS\JONATHON\APPLICATION DATA\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\[email protected]
[2010/06/17 14:21:58 | 000,000,000 | ---D | M] (HP Smart Web Printing) -- C:\PROGRAM FILES\HP\DIGITAL IMAGING\SMART WEB PRINTING\MOZILLAADDON3
[2009/08/03 11:49:28 | 000,000,000 | ---D | M] ("NP Helper Class") -- C:\PROGRAM FILES\INTERNET SAVING OPTIMIZER\3.6.0.4470\FF
[2010/10/20 20:15:49 | 000,000,000 | ---D | M] (PriceGong) -- C:\PROGRAM FILES\PRICEGONG\2.1.0\FF
[2010/12/09 02:47:06 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npwachk.dll
O1 HOSTS File: ([2007/08/10 22:58:33 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 mpa.one.microsoft.com
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (PriceGongBHO Class) - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll (PriceGong)
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - File not found
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (Recording Engineer Helper Toolbar) - {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll (Google Inc.)
O2 - BHO: (FDMIECookiesBHO Class) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll ()
O2 - BHO: (System Search Dispatcher) - {CDBFB47B-58A8-4111-BF95-06178DCE326D} - File not found
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Recording Engineer Helper Toolbar) - {73f3dd36-3464-4aa4-a815-de51290fb05e} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - File not found
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Recording Engineer Helper Toolbar) - {73F3DD36-3464-4AA4-A815-DE51290FB05E} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Recording Engineer Helper Toolbar) - {73F3DD36-3464-4AA4-A815-DE51290FB05E} - C:\Program Files\Recording_Engineer_Helper\tbRec2.dll (Conduit Ltd.)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [Bluetooth Connection Assistant] File not found
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [fsm] File not found
O4 - HKCU..\Run: [mnumsg.exe] C:\Program Files\MyShoppingGenie\mnumsg.exe (MyNetUniverse Inc.)
O4 - HKCU..\Run: [Octoshape Streaming Services] C:\Documents and Settings\Jonathon\Application Data\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe (Octoshape ApS)
O4 - HKCU..\Run: [RayV] C:\Program Files\RayV\RayV\RayV.exe (RayV)
O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll (Google Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop WallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/10/08 16:27:48 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\Shell\AutoRun\command - "" = E:\system\viewer\FlipVideoforPC.exe
O33 - MountPoints2\{2e4fe6e8-b3a6-11de-a4f1-00218514b984}\Shell\Flip Video for PC\command - "" = E:\system\viewer\FlipVideoforPC.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/02/28 15:41:41 | 000,581,120 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/28 15:11:48 | 008,669,472 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\Windows7UpgradeAdvisorSetup.exe
[2011/02/27 13:53:34 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_6.dll
[2011/02/27 13:53:34 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_4.dll
[2011/02/27 13:53:33 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_6.dll
[2011/02/27 13:53:33 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_7.dll
[2011/02/18 10:27:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15
[2011/02/13 20:52:52 | 008,582,536 | ---- | C] (Mozilla) -- C:\Documents and Settings\Jonathon\Desktop\Firefox Setup 3.6.13.exe
[2011/02/12 16:53:39 | 004,584,688 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsServer2003-KB898715-x64-enu.exe
[2011/02/12 16:53:22 | 005,960,944 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsServer2003-KB898715-ia64-enu.exe
[2011/02/12 16:51:20 | 002,585,872 | ---- | C] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsInstaller-KB893803-v2-x86.exe
[2011/02/07 16:41:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Jonathon\Desktop\Logs
[2010/12/31 21:24:24 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\JavaSetup6u23.exe
[2010/12/31 21:05:48 | 000,883,488 | ---- | C] (Sun Microsystems, Inc.) -- C:\Program Files\jre-6u23-windows-i586-iftw-k.exe
[2010/12/12 21:21:08 | 006,274,424 | ---- | C] (Microsoft Corporation) -- C:\Program Files\Silverlight.exe
[2010/12/03 16:08:27 | 002,728,440 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vcsetup.exe
[2010/12/03 15:40:19 | 003,324,232 | ---- | C] (Microsoft Corporation) -- C:\Program Files\vc_web.exe
[2004/01/12 00:00:00 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Program Files\msvcr71.dll
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/02/28 15:42:17 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Jonathon\Desktop\OTL.exe
[2011/02/28 15:11:57 | 008,669,472 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\Windows7UpgradeAdvisorSetup.exe
[2011/02/28 15:09:00 | 000,000,890 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/02/28 15:09:00 | 000,000,886 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/02/28 15:01:00 | 000,000,240 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2011/02/28 11:56:03 | 000,000,458 | ---- | M] () -- C:\WINDOWS\tasks\RMSmartUpdate.job
[2011/02/28 07:47:05 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/02/28 07:45:12 | 000,200,819 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/02/28 07:44:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/02/27 22:30:29 | 000,096,968 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 19:01:39 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\RMSchedule.job
[2011/02/27 17:41:51 | 000,000,476 | -H-- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for Jonathon.job
[2011/02/27 14:19:28 | 002,585,872 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsInstaller-KB893803-v2-x86.exe
[2011/02/27 13:57:16 | 000,000,223 | RHS- | M] () -- C:\boot.ini
[2011/02/27 13:40:23 | 000,000,215 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/26 14:17:00 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/02/18 10:27:45 | 001,402,518 | ---- | M] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/14 22:08:43 | 000,013,486 | ---- | M] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2011/02/13 20:54:55 | 000,001,620 | ---- | M] () -- C:\Documents and Settings\Jonathon\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
[2011/02/13 20:54:55 | 000,001,602 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/02/13 20:53:42 | 008,582,536 | ---- | M] (Mozilla) -- C:\Documents and Settings\Jonathon\Desktop\Firefox Setup 3.6.13.exe
[2011/02/12 16:53:43 | 004,584,688 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsServer2003-KB898715-x64-enu.exe
[2011/02/12 16:53:27 | 005,960,944 | ---- | M] (Microsoft Corporation) -- C:\Documents and Settings\Jonathon\Desktop\WindowsServer2003-KB898715-ia64-enu.exe
[2011/02/12 08:09:12 | 000,456,304 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011/02/12 08:09:12 | 000,075,210 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011/02/04 20:24:20 | 000,883,488 | ---- | M] (Sun Microsystems, Inc.) -- C:\Documents and Settings\Jonathon\Desktop\jre-6u23-windows-i586-iftw-k.exe
[6 C:\Documents and Settings\Jonathon\My Documents\*.tmp files -> C:\Documents and Settings\Jonathon\My Documents\*.tmp -> ]
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/02/27 22:29:55 | 000,096,968 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\WauQuickStart.exe
[2011/02/27 13:40:23 | 000,000,215 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Magicka.url
[2011/02/18 10:27:43 | 001,402,518 | ---- | C] () -- C:\Documents and Settings\Jonathon\Desktop\Prat-3.0-3.4.15.zip
[2011/02/13 20:54:55 | 000,001,602 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk
[2011/01/29 10:33:01 | 000,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2011/01/29 10:33:01 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2011/01/21 20:40:53 | 000,031,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\vrtaucbl.sys
[2010/12/31 23:08:16 | 000,835,440 | ---- | C] () -- C:\Program Files\pbsvc.exe
[2010/12/31 22:53:25 | 002,434,856 | ---- | C] () -- C:\WINDOWS\System32\pbsvc_bc2.exe
[2010/12/27 23:34:47 | 005,430,783 | ---- | C] () -- C:\Program Files\WMV r506 32bit DEVWORK.rar
[2010/12/24 00:00:04 | 001,661,959 | ---- | C] () -- C:\Program Files\wowmodelview0.5.07.zip
[2010/12/10 21:13:05 | 001,985,823 | ---- | C] () -- C:\Program Files\AtlasLoot-v6.01.01.zip
[2010/12/07 18:29:56 | 000,001,456 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\Adobe Save for Web 12.0 Prefs
[2010/12/04 14:55:53 | 000,022,222 | ---- | C] () -- C:\Program Files\souper3.zip
[2010/12/04 11:39:28 | 000,980,215 | ---- | C] () -- C:\Program Files\msvcdll-90.zip
[2010/12/04 11:36:56 | 007,683,072 | ---- | C] () -- C:\Program Files\WMV_Installer_v0701_r500_Win64.msi
[2010/12/04 11:33:47 | 000,000,000 | ---- | C] () -- C:\Program Files\wowmodelview-0.5.06beta.zip
[2010/12/03 16:37:20 | 005,928,476 | ---- | C] () -- C:\Program Files\WMV_Binary_v0701_r490_Win32_DevWork.zip
[2010/12/03 16:25:15 | 003,728,716 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.3_Win32_Release.zip
[2010/12/03 16:10:54 | 005,167,176 | ---- | C] () -- C:\Program Files\WoW-2.4.0.8089-to-2.4.1.8125-enUS-patch.exe
[2010/12/03 15:36:37 | 007,091,330 | ---- | C] () -- C:\Program Files\WoWModelViewer_0.6.0.1_Win32_Debug.zip
[2010/10/10 00:56:26 | 000,037,336 | ---- | C] () -- C:\WINDOWS\System32\CleanMFT32.exe
[2010/08/16 08:54:25 | 000,013,486 | ---- | C] () -- C:\WINDOWS\System32\Pen_Tablet.dat
[2010/08/03 15:54:23 | 000,000,132 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\Adobe PNG Format CS5 Prefs
[2010/06/17 19:29:26 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat.temp
[2010/06/17 19:29:26 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat.temp
[2010/06/17 14:13:10 | 000,193,751 | ---- | C] () -- C:\WINDOWS\hpoins41.dat
[2010/06/17 14:13:10 | 000,001,253 | ---- | C] () -- C:\WINDOWS\hpomdl41.dat
[2010/05/16 06:44:30 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2009/10/10 20:51:36 | 000,058,004 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2009/10/08 16:28:11 | 000,017,920 | ---- | C] () -- C:\Documents and Settings\Jonathon\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/05/10 15:48:01 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009/04/30 14:29:50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2009/04/27 20:49:35 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/04/27 20:05:16 | 000,000,760 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\setup_ldm.iss
[2009/03/12 20:02:45 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2009/03/12 20:00:08 | 003,767,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/03/12 13:55:32 | 000,138,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2009/03/12 13:55:32 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\Jonathon\Application Data\PnkBstrK.sys
[2009/03/12 13:55:13 | 000,835,440 | ---- | C] () -- C:\WINDOWS\System32\pbsvc.exe
[2009/03/12 13:55:13 | 000,270,904 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2009/03/12 13:55:13 | 000,075,136 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2009/03/12 13:32:45 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2009/03/12 13:18:21 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2009/03/12 13:14:03 | 000,021,640 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2009/01/13 14:22:56 | 002,163,200 | ---- | C] () -- C:\Program Files\WoWModelViewer.exe
[2009/01/12 12:19:56 | 000,288,056 | ---- | C] () -- C:\Program Files\logo.bmp
[2008/11/03 01:27:22 | 000,245,760 | ---- | C] () -- C:\Program Files\glew32.dll
[2008/10/06 21:33:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008/10/06 21:33:00 | 001,630,208 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2008/10/06 21:33:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008/10/06 21:33:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2008/10/06 21:33:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008/10/06 21:33:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008/10/06 21:33:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2008/10/06 21:33:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2008/10/06 21:33:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008/06/11 09:02:34 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008/06/11 09:02:32 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008/06/05 08:58:26 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008/05/26 21:59:42 | 000,018,904 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2008/05/26 21:59:40 | 000,106,605 | ---- | C] () -- C:\WINDOWS\System32\structuredqueryschema.bin
[2008/04/13 20:55:28 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2007/09/27 10:51:02 | 000,020,698 | ---- | C] () -- C:\WINDOWS\System32\idxcntrs.ini
[2007/09/27 10:48:48 | 000,030,628 | ---- | C] () -- C:\WINDOWS\System32\gsrvctr.ini
[2007/09/27 10:48:28 | 000,031,698 | ---- | C] () -- C:\WINDOWS\System32\gthrctr.ini
[2006/12/30 22:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2001/08/23 03:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001/08/23 03:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2001/08/23 03:00:00 | 000,456,304 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2001/08/23 03:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2001/08/23 03:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2001/08/23 03:00:00 | 000,075,210 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2001/08/23 03:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2001/08/23 03:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2001/08/23 03:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2001/08/23 03:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
========== Alternate Data Streams ==========
@Alternate Data Stream - 99 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:24051EFF
@Alternate Data Stream - 495 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:05EE1EEF
@Alternate Data Stream - 163 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2
@Alternate Data Stream - 125 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:63238B95
@Alternate Data Stream - 109 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:A8ADE5D8
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1
< End of report >
OTL Extras logfile created on: 2/28/2011 3:42:20 PM - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Documents and Settings\Jonathon\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 76.00% Memory free
5.00 Gb Paging File | 4.00 Gb Available in Paging File | 86.00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 465.75 Gb Total Space | 166.90 Gb Free Space | 35.84% Space Free | Partition Type: NTFS
Computer Name: JONATHONB | User Name: Jonathon | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Bridge] -- C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP
"56718:TCP" = 56718:TCP:*:Enabled:Pando Media Booster
"56718:UDP" = 56718:UDP:*:Enabled:Pando Media Booster
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"3724:TCP" = 3724:TCP:*:Enabled:Blizzard Downloader: 3724
"6112:TCP" = 6112:TCP:*:Enabled:blizzard Downloader
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP
"56718:TCP" = 56718:TCP:*:Enabled:Pando Media Booster
"56718:UDP" = 56718:UDP:*:Enabled:Pando Media Booster
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\setup\hpznui01.exe" = D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- ()
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe" = C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\HP Software Update\HPWUCli.exe" = C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.)
"C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe" = C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe:*:Enabled:SMC Service -- (Symantec Corporation)
"C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE" = C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE:*:Enabled:SNAC Service -- (Symantec Corporation)
"C:\Program Files\Common Files\Symantec Shared\ccApp.exe" = C:\Program Files\Common Files\Symantec Shared\ccApp.exe:*:Enabled:Symantec Email -- (Symantec Corporation)
"C:\Program Files\Ventrilo\Ventrilo.exe" = C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe -- (Flagship Industries, Inc.)
"C:\Program Files\Common Files\AOL\Loader\aolload.exe" = C:\Program Files\Common Files\AOL\Loader\aolload.exe:*:Enabled:AOL Loader
"C:\Program Files\AIM6\aim6.exe" = C:\Program Files\AIM6\aim6.exe:*:Enabled:AIM
"C:\Program Files\World of Warcraft\Launcher.exe" = C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\Electronic Arts\EADM\Core.exe" = C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.0-enUS-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.0-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe" = C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10147-to-0.2.0.10170-enUS-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10147-to-0.2.0.10170-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10170-to-0.2.0.10179-enUS-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10170-to-0.2.0.10179-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft Public Test\Launcher.exe" = C:\Program Files\World of Warcraft Public Test\Launcher.exe:*:Enabled:Blizzard Launcher -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10179-to-0.2.0.10192-enUS-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.0.10179-to-0.2.0.10192-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\Steam\steamapps\kazooy\team fortress 2\hl2.exe" = C:\Program Files\Steam\steamapps\kazooy\team fortress 2\hl2.exe:*:Enabled:hl2 -- ()
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10257-enUS-ptr-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10257-enUS-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\RayV\RayV\RayV.exe" = C:\Program Files\RayV\RayV\RayV.exe:*:Enabled:RayV -- (RayV)
"C:\Program Files\RayV\RayV\RayV.dll" = C:\Program Files\RayV\RayV\RayV.dll:*:Enabled:RayV -- (RayV)
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10357-to-0.2.2.10371-enUS-ptr-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10357-to-0.2.2.10371-enUS-ptr-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enUS-downloader.exe" = C:\Program Files\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enUS-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10371-to-0.2.2.10392-enUS-ptr-downloader.exe" = C:\Program Files\World of Warcraft Public Test\WoW-0.2.2.10371-to-0.2.2.10392-enUS-ptr-downloader.exe:*:Enabled:Blizzard Downlo
16
Tech Clinic / OS question, and Download error.
« on: February 28, 2011, 06:17:38 PM »
Ok so when ever i go to download any type of Software, I get this error telling me that my windows installer is not working right.
Ive tried almost everything to fix this. My question is, if i upgrade from XP ( yes i still use xp...) to 7, will this problem go away or is it going to tell me once again that my windows installer can not install an OS upgrade?
( also i dont know much about computers ) >.<
Ive tried almost everything to fix this. My question is, if i upgrade from XP ( yes i still use xp...) to 7, will this problem go away or is it going to tell me once again that my windows installer can not install an OS upgrade?
( also i dont know much about computers ) >.<
17
General Discussion / HIIIIIII
« on: November 03, 2009, 08:24:01 PM »
[quote name=\'JB Lee\' post=\'466066\' date=\'Nov 1 2009, 09:53 PM\']Go die.
Slowly.
In a tire fire.[/quote]
I like this poem the best.
Slowly.
In a tire fire.[/quote]
I like this poem the best.
18
General Discussion / HIIIIIII
« on: September 13, 2009, 07:39:00 PM »
[quote name=\'JB Lee\' post=\'465103\' date=\'Sep 4 2009, 01:58 AM\']That's sad.[/quote]
omg did i miss the chat session?
omg did i miss the chat session?
20
Idle Chat / Well this sucks
« on: July 15, 2009, 02:48:50 AM »
So it turns out everyone that used to know me on this places is gone, so no point in making a gay drama list to express my feelings about you guys.
Non the less, you guys were pretty awesome back at Runecore.
Peace out,
Jonny ")
Non the less, you guys were pretty awesome back at Runecore.
Peace out,
Jonny ")