Actually, we found a old floppy of pictures and to view them you had download a viewier from seattle filmworks. We looked at them then the viewer was uninstalled. This was yesterday.OTL logfile created on: 8/23/2009 2:15:50 PM - Run 1OTL by OldTimer - Version 3.0.10.7 Folder = C:\Documents and Settings\Frank Wishinsky\DesktopWindows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstationInternet Explorer (Version = 7.0.5730.11)Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 1023.48 Mb Total Physical Memory | 556.32 Mb Available Physical Memory | 54.36% Memory free2.40 Gb Paging File | 1.98 Gb Available in Paging File | 82.34% Paging File freePaging file location(s): [Binary data over 100 bytes] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program FilesDrive C: | 232.88 Gb Total Space | 157.60 Gb Free Space | 67.67% Space Free | Partition Type: NTFSD: Drive not present or media not loadedDrive E: | 232.88 Gb Total Space | 198.36 Gb Free Space | 85.18% Space Free | Partition Type: NTFSF: Drive not present or media not loadedG: Drive not present or media not loadedH: Drive not present or media not loadedI: Drive not present or media not loaded Computer Name: FRANK-E1462E427Current User Name: Frank WishinskyLogged in as Administrator. Current Boot Mode: NormalScan Mode: Current userCompany Name Whitelist: OffSkip Microsoft Files: OffFile Age = 30 DaysOutput = Standard
========== Processes (SafeList) ========== PRC - [2009/02/25 17:27:41 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exePRC - [2004/09/13 12:49:42 | 01,192,050 | ---- | M] (Ahead Software AG) -- C:\Program Files\Ahead\InCD\InCDsrv.exePRC - [2009/02/25 17:27:41 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exePRC - [2008/04/13 20:12:19 | 01,033,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Explorer.EXEPRC - [2008/06/22 14:30:57 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exePRC - [2003/08/18 10:37:10 | 00,303,104 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\System32\LEXBCES.EXEPRC - [2003/08/18 10:32:56 | 00,174,592 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\System32\LEXPPS.EXEPRC - [2005/03/17 14:25:54 | 00,057,393 | ---- | M] (ScanSoft, Inc.) -- C:\Program Files\ScanSoft\PaperPort\pptd40nt.exePRC - [2006/06/28 07:46:30 | 00,622,592 | ---- | M] () -- C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exePRC - [2006/06/27 10:30:30 | 00,339,968 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\ControlCenter3\brccMCtl.exePRC - [2008/06/10 15:56:29 | 01,442,888 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft IntelliType Pro\itype.exePRC - [2008/12/18 14:32:52 | 00,049,152 | ---- | M] (Advanced Micro Devices Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exePRC - [2008/06/10 15:56:31 | 01,406,024 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exePRC - [2009/07/13 14:03:10 | 00,292,128 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.exePRC - [2008/06/10 15:56:27 | 00,447,560 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exePRC - [2007/03/15 19:16:42 | 00,454,784 | ---- | M] (Linksys, a Division of Cisco Systems, Inc.) -- C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exePRC - [2006/12/04 16:27:00 | 00,303,104 | ---- | M] (FUJIFILM Corporation) -- C:\Program Files\FinePixViewer\QuickDCF2.exePRC - [2008/12/18 13:19:44 | 00,049,152 | ---- | M] (ATI Technologies Inc.) -- C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exePRC - [2006/03/01 16:06:22 | 00,069,632 | ---- | M] (Brother Industries, Ltd.) -- C:\Program Files\Brother\Brmfcmon\BrMfcmon.exePRC - [2009/07/09 12:22:18 | 00,144,712 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exePRC - [2005/04/30 17:02:26 | 00,086,016 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\System32\bgsvcgen.exePRC - [2008/12/12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exePRC - [1999/12/12 21:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\System32\CTsvcCDA.exePRC - [2008/12/12 00:05:28 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exePRC - [2007/11/26 15:47:40 | 00,598,856 | ---- | M] (Webroot Software, Inc.) -- C:\Program Files\Webroot\Washer\WasherSvc.exePRC - [2009/07/13 14:02:50 | 00,542,496 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exePRC - [2009/08/23 14:15:22 | 00,514,048 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Frank Wishinsky\Desktop\OTL.exe
========== Win32 Services (SafeList) ========== SRV - [2008/06/22 14:30:57 | 00,611,664 | ---- | M] (Lavasoft) -- C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe -- (aawservice [Auto | Running])SRV - [2009/07/09 12:22:18 | 00,144,712 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device [Auto | Running])SRV - [2008/07/25 11:16:40 | 00,034,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe -- (aspnet_state [On_Demand | Stopped])SRV - [2009/02/25 17:27:41 | 00,602,112 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\Ati2evxx.exe -- (Ati HotKey Poller [Auto | Running])SRV - [2009/02/25 15:15:00 | 00,593,920 | ---- | M] () -- C:\WINDOWS\System32\ati2sgag.exe -- (ATI Smart [Auto | Stopped])SRV - [2005/04/30 17:02:26 | 00,086,016 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\System32\bgsvcgen.exe -- (bgsvcgen [Auto | Running])SRV - [2008/12/12 11:17:38 | 00,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service [Auto | Running])SRV - [2008/07/25 11:17:02 | 00,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32 [On_Demand | Stopped])SRV - [1999/12/12 21:01:00 | 00,044,032 | ---- | M] (Creative Technology Ltd) -- C:\WINDOWS\System32\CTsvcCDA.exe -- (Creative Service for CDROM Access [Auto | Running])SRV - [2008/07/29 21:10:04 | 00,046,104 | ---- | M] (Microsoft Corporation) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0 [On_Demand | Stopped])SRV - [2008/11/20 15:18:52 | 00,136,120 | ---- | M] (Google) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc [On_Demand | Stopped])SRV - [2008/04/13 20:12:02 | 00,038,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll -- (helpsvc [Auto | Running])SRV - [2004/10/22 04:24:18 | 00,073,728 | ---- | M] (Macrovision Corporation) -- C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT [On_Demand | Stopped])SRV - [2008/07/29 19:24:50 | 00,881,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc [Unknown | Stopped])SRV - [2004/09/13 12:49:42 | 01,192,050 | ---- | M] (Ahead Software AG) -- C:\Program Files\Ahead\InCD\InCDsrv.exe -- (InCDsrv [Auto | Running])SRV - [2009/07/13 14:02:50 | 00,542,496 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service [On_Demand | Running])SRV - [2008/12/12 00:05:28 | 00,152,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jqs.exe -- (JavaQuickStarterService [Auto | Running])SRV - [2003/08/18 10:37:10 | 00,303,104 | ---- | M] (Lexmark International, Inc.) -- C:\WINDOWS\System32\LEXBCES.EXE -- (LexBceS [Auto | Running])SRV - [2008/07/29 19:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing [Disabled | Stopped])SRV - [2009/08/18 15:11:42 | 00,117,640 | R--- | M] (Symantec Corporation) -- C:\Program Files\Norton Internet Security\Engine\16.7.2.10\ccSvcHst.exe -- (Norton Internet Security [Auto | Stopped])SRV - [2003/07/28 13:28:22 | 00,089,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose [On_Demand | Stopped])SRV - [2007/04/19 21:37:10 | 00,020,480 | ---- | M] (Intuit) -- C:\Program Files\Common Files\Intuit\QuickBooks\QBCFMonitorService.exe -- (QBCFMonitorService [Disabled | Stopped])SRV - [2006/11/09 15:30:14 | 00,065,536 | ---- | M] (Intuit Inc.) -- C:\Program Files\Common Files\Intuit\QuickBooks\FCS\Intuit.QuickBooks.FCS.exe -- (QBFCService [On_Demand | Stopped])SRV - [2006/10/18 21:05:24 | 00,913,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Media Player\WMPNetwk.exe -- (WMPNetworkSvc [On_Demand | Stopped])SRV - [2007/11/26 15:47:40 | 00,598,856 | ---- | M] (Webroot Software, Inc.) -- C:\Program Files\Webroot\Washer\WasherSvc.exe -- (wwEngineSvc [Auto | Running])
========== Driver Services (SafeList) ========== DRV - [2004/02/23 23:08:52 | 00,400,384 | ---- | M] (Sensaura) -- C:\WINDOWS\System32\drivers\ALCXSENS.SYS -- (ALCXSENS [On_Demand | Stopped])DRV - [2004/10/01 11:24:00 | 02,279,424 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS -- (ALCXWDM [On_Demand | Running])DRV - [2003/11/07 00:00:00 | 00,035,328 | R--- | M] (Advanced Micro Devices) -- C:\WINDOWS\System32\DRIVERS\AmdK8.sys -- (AmdK8 [System | Running])DRV - [2009/02/25 18:58:57 | 03,565,568 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys -- (ati2mtag [On_Demand | Running])DRV - [2003/03/06 15:48:08 | 00,003,840 | ---- | M] () -- C:\WINDOWS\System32\Drivers\BANTExt.sys -- (BANTExt [System | Running])DRV - [2009/08/18 15:11:43 | 00,259,632 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\NIS\1007020.00A\BHDrvx86.sys -- (BHDrvx86 [System | Running])DRV - [2004/10/15 12:50:20 | 00,015,295 | ---- | M] (Brother Industries Ltd.) -- C:\WINDOWS\System32\DRIVERS\BrScnUsb.sys -- (BrScnUsb [On_Demand | Running])DRV - [2006/01/18 22:44:46 | 00,053,248 | ---- | M] (Brother Industries Ltd.) -- C:\WINDOWS\System32\Drivers\BrSerIf.sys -- (BrSerIf [On_Demand | Running])DRV - [2006/01/19 03:17:38 | 00,011,904 | ---- | M] (Brother Industries Ltd.) -- C:\WINDOWS\System32\Drivers\BrUsbSer.sys -- (BrUsbSer [On_Demand | Running])DRV - [2009/08/18 21:12:55 | 00,482,432 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\NIS\1007020.00A\ccHPx86.sys -- (ccHP [System | Running])DRV - [2003/07/16 15:58:30 | 00,013,056 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\System32\drivers\cdrbsvsd.sys -- (cdrbsvsd [System | Running])DRV - [2009/03/31 04:00:00 | 00,371,248 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl [System | Running])DRV - [2007/03/22 13:57:14 | 00,028,672 | --S- | M] (Gteko Ltd.) -- C:\WINDOWS\System32\DRIVERS\elagopro.sys -- (elagopro [Auto | Running])DRV - [2007/03/22 13:57:14 | 00,005,376 | --S- | M] (Gteko Ltd.) -- C:\WINDOWS\System32\DRIVERS\elaunidr.sys -- (elaunidr [Auto | Running])DRV - [2009/03/31 04:00:00 | 00,101,936 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv [On_Demand | Running])DRV - [2009/03/19 16:32:48 | 00,023,400 | ---- | M] (GEAR Software Inc.) -- C:\WINDOWS\System32\DRIVERS\GEARAspiWDM.sys -- (GEARAspiWDM [On_Demand | Running])DRV - [2006/08/01 20:20:14 | 00,013,824 | ---- | M] (FSPro Labs) -- C:\WINDOWS\SYSTEM32\DRIVERS\HFXP2.SYS -- (HFXP2 [Boot | Running])DRV - [2009/07/11 15:34:12 | 00,276,344 | ---- | M] (Symantec Corporation) -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20090810.001\IDSxpx86.sys -- (IDSxpx86 [System | Running])DRV - [2004/09/13 12:54:06 | 00,093,440 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\InCDfs.sys -- (InCDfs [Disabled | Running])DRV - [2004/09/13 12:54:46 | 00,028,672 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\System32\DRIVERS\InCDPass.sys -- (InCDPass [System | Running])DRV - [2003/08/21 19:56:36 | 00,025,520 | ---- | M] (Ahead Software AG) -- C:\WINDOWS\System32\drivers\incdrm.sys -- (incdrm [System | Running])DRV - [2006/08/10 17:50:32 | 00,005,760 | ---- | M] (Sophos Plc) -- C:\WINDOWS\System32\SophosMEMSWEEP.SYS -- (MEMSWEEP2 [On_Demand | Stopped])DRV - [2009/08/19 04:00:00 | 00,087,888 | ---- | M] (Symantec Corporation) -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090822.019\NAVENG.SYS -- (NAVENG [On_Demand | Running])DRV - [2009/08/19 04:00:00 | 00,875,728 | ---- | M] (Symantec Corporation) -- C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090822.019\NAVEX15.SYS -- (NAVEX15 [On_Demand | Running])DRV - [2009/05/09 01:14:20 | 00,014,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\NuidFltr.sys -- (NuidFltr [On_Demand | Running])DRV - [2004/06/02 22:40:46 | 00,079,360 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys -- (nvatabus [Boot | Running])DRV - [2004/05/17 02:00:52 | 00,033,280 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\NVENETFD.sys -- (NVENETFD [On_Demand | Running])DRV - [2004/05/17 02:00:54 | 00,012,928 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\System32\DRIVERS\nvnetbus.sys -- (nvnetbus [On_Demand | Running])DRV - [2003/10/29 01:02:00 | 00,021,120 | R--- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\DRIVERS\nv_agp.sys -- (nv_agp [Boot | Running])DRV - [2006/12/30 10:21:42 | 00,047,360 | ---- | M] (VSO Software) -- C:\WINDOWS\System32\Drivers\Pcouffin.sys -- (Pcouffin [On_Demand | Running])DRV - [2003/12/05 06:46:36 | 00,010,368 | ---- | M] (Padus, Inc.) -- C:\WINDOWS\System32\drivers\pfc.sys -- (pfc [On_Demand | Running])DRV - [2008/06/10 16:04:26 | 00,031,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\DRIVERS\point32.sys -- (Point32 [On_Demand | Running])DRV - [2004/08/04 08:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys -- (Ptilink [On_Demand | Running])DRV - [2008/11/20 15:19:06 | 00,043,872 | ---- | M] (Sonic Solutions) -- C:\WINDOWS\System32\Drivers\PxHelp20.sys -- (PxHelp20 [Boot | Running])DRV - [2007/11/13 06:25:53 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys -- (Secdrv [Auto | Running])DRV - [2009/08/18 15:11:43 | 00,308,272 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\NIS\1007020.00A\SRTSP.SYS -- (SRTSP [On_Demand | Running])DRV - [2009/08/18 15:11:43 | 00,043,696 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\NIS\1007020.00A\SRTSPX.SYS -- (SRTSPX [System | Running])DRV - [2009/08/18 15:11:43 | 00,310,320 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\system32\drivers\NIS\1007020.00A\SYMEFA.SYS -- (SymEFA [Boot | Running])DRV - [2009/08/18 21:13:08 | 00,124,976 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\SYMEVENT.SYS -- (SymEvent [On_Demand | Running])DRV - [2009/08/18 15:11:43 | 00,089,904 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\NIS\1007020.00A\SYMFW.SYS -- (SYMFW [On_Demand | Running])DRV - [2009/08/18 15:11:43 | 00,033,072 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\NIS\1007020.00A\SYMIDS.SYS -- (SYMIDS [On_Demand | Running])DRV - [2009/08/18 15:11:17 | 00,036,400 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\System32\DRIVERS\SymIM.sys -- (SymIM [On_Demand | Stopped])DRV - [2009/08/18 15:11:17 | 00,036,400 | R--- | M] (Symantec Corporation) -- C:\WINDOWS\System32\DRIVERS\SymIM.sys -- (SymIMMP [On_Demand | Running])DRV - [2009/08/18 15:11:43 | 00,036,400 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\NIS\1007020.00A\SYMNDIS.SYS -- (SYMNDIS [On_Demand | Running])DRV - [2009/08/18 15:11:43 | 00,217,136 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\Drivers\NIS\1007020.00A\SYMTDI.SYS -- (SYMTDI [System | Running])DRV - [2007/12/21 09:17:51 | 00,030,360 | ---- | M] () -- C:\WINDOWS\TmComm.log -- (tmcomm [Auto | Stopped])DRV - [2006/06/08 21:02:10 | 00,023,600 | ---- | M] (EnTech Taiwan) -- C:\WINDOWS\System32\DRIVERS\TVICHW32.SYS -- (TVICHW32 [On_Demand | Stopped])
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.yahoo.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-onsIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htmIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRiskIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch =
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htmIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htmIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dll?p...amp;ar=iesearchIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.birdchannel.com/bird-magazines/...alk/default.aspIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ========== FF - prefs.js..browser.startup.homepage: "
http://www.rosyboa.com/"FF - prefs.js..extensions.enabledItems:
[email protected]:0.1FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}:6.0.01FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.0FF - prefs.js..extensions.enabledItems: {8545daff-ad1e-493f-a37e-eed1ac79682b}:1.0FF - prefs.js..extensions.enabledItems: {7BA52691-1876-45ce-9EE6-54BCB3B04BBC}:3.7FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.13 FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/07/21 07:58:58 | 00,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.0.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/08/16 19:14:44 | 00,000,000 | ---D | M]FF - HKLM\software\mozilla\Mozilla Firefox 3.0.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/08/16 19:14:44 | 00,000,000 | ---D | M] [2008/09/08 22:26:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Frank Wishinsky\Application Data\mozilla\Extensions[2008/09/08 22:26:44 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Frank Wishinsky\Application Data\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}[2009/08/21 15:19:57 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Frank Wishinsky\Application Data\mozilla\Firefox\Profiles\40mrv0lq.default\extensions[2009/04/19 10:50:20 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Frank Wishinsky\Application Data\mozilla\Firefox\Profiles\40mrv0lq.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}[2009/05/11 08:00:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Frank Wishinsky\Application Data\mozilla\Firefox\Profiles\40mrv0lq.default\extensions\
[email protected][2009/08/23 08:11:02 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions[2009/08/04 20:09:54 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}[2007/06/28 19:21:57 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}[2008/12/12 00:05:41 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}[2009/08/04 20:09:51 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll[2009/08/04 20:09:51 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll[2008/08/06 16:22:02 | 00,114,688 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\np32dsw.dll[2008/12/12 00:05:28 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll[2009/08/04 20:09:51 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll[2007/03/22 19:23:30 | 00,017,248 | ---- | M] (Microsoft Corporation) -- C:\Program Files\mozilla firefox\plugins\NPOFFICE.DLL[2008/05/20 12:18:49 | 00,144,984 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nppl3260.dll[2009/08/16 19:14:43 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin.dll[2009/08/16 19:14:43 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll[2009/08/16 19:14:43 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll[2009/08/16 19:14:44 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll[2009/08/16 19:14:44 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll[2009/08/16 19:14:44 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll[2009/08/16 19:14:44 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll[2008/05/20 12:19:12 | 00,008,192 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprjplug.dll[2008/05/20 12:18:36 | 00,094,208 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files\mozilla firefox\plugins\nprpjplug.dll[2006/01/18 12:50:00 | 00,319,488 | ---- | M] ( ) -- C:\Program Files\mozilla firefox\plugins\npsnapfish.dll[2008/09/17 00:28:48 | 00,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml[2008/09/17 00:28:48 | 00,002,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\answers.xml[2008/09/17 00:28:48 | 00,001,534 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml[2008/11/15 09:04:49 | 00,002,343 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml[2008/09/17 00:28:48 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml[2009/08/20 17:29:40 | 00,002,221 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\SafeSearch.xml[2008/09/17 00:28:48 | 00,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml[2008/09/17 00:28:48 | 00,000,792 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo.xml O1 HOSTS File: (698 bytes) - C:\WINDOWS\System32\drivers\etc\HostsO1 - Hosts: 127.0.0.1 localhostO2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.7.2.10\coIEPlg.dll (Symantec Corporation)O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.7.2.10\IPSBHO.DLL (Symantec Corporation)O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.7.2.10\coIEPlg.dll (Symantec Corporation)O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.7.2.10\coIEPlg.dll (Symantec Corporation)O4 - HKLM..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe ()O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)O4 - HKLM..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe (ScanSoft, Inc.)O4 - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)O4 - HKLM..\Run: [itype] C:\Program Files\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)O4 - HKLM..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe (ScanSoft, Inc.)O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)O4 - HKLM..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE (FUJI PHOTO FILM CO., LTD.)O4 - HKLM..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06b\BrStDvPt.exe (Brother Industories, Ltd.)O4 - HKLM..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Scansoft, Inc.)O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)O4 - HKCU..\Run: [EasyLinkAdvisor] C:\Program Files\Linksys EasyLink Advisor\LinksysAgent.exe (Linksys, a Division of Cisco Systems, Inc.)O4 - HKCU..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe File not foundO4 - HKCU..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe (Webroot Software, Inc.)O4 - HKCU..\RunOnce: [Index Washer] C:\Program Files\Webroot\Washer\WashIdx.exe (Webroot Software, Inc.)O4 - HKCU..\RunOnce: [Shockwave Updater] C:\WINDOWS\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1100465 -Mozilla\4.0 (compatible; MSIE 7.0; Windows NT 5.1; Mozilla\4.0 ( File not foundO4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ExifLauncher2.lnk = C:\Program Files\FinePixViewer\QuickDCF2.exe (FUJIFILM Corporation)O4 - Startup: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe (Intuit Inc.)O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions presentO7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 157O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 0O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)O8 - Extra context menu item: E&xport to Microsoft Excel - C:\MSOffice\OFFICE11\EXCEL.EXE (Microsoft Corporation)O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe ()O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\MSOffice\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation)O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)O12 - Plugin for: .UVR - C:\Program Files\Internet Explorer\Plugins\NPUPano.dll (Ulead Systems, Inc.)O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.O15 - HKCU\..Trusted Domains: //@surf.mar@/ ([]money in Local intranet)O15 - HKCU\..Trusted Domains: amsouth.com ([]https in Trusted sites)O15 - HKCU\..Trusted Domains: blockbuster.com ([www] https in Trusted sites)O15 - HKCU\..Trusted Domains: cichlid-forum.com ([www] https in Trusted sites)O15 - HKCU\..Trusted Domains: egreetings.com ([www.pickup.aol] https in Trusted sites)O15 - HKCU\..Trusted Domains: kaptest.com ([]https in Trusted sites)O15 - HKCU\..Trusted Domains: kaptest.com ([www] https in Trusted sites)O15 - HKCU\..Trusted Domains: microsoft.com ([windowsupdate] https in Trusted sites)O15 - HKCU\..Trusted Domains: msn.com ([]https in Trusted sites)O15 - HKCU\..Trusted Domains: nursingcenter.com ([]https in Trusted sites)O15 - HKCU\..Trusted Domains: uchcareers.org ([]https in Trusted sites)O15 - HKCU\..Trusted Domains: 104 domain(s) and sub-domain(s) not assigned to a zone.O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02}
http://housecall60.trendmicro.com/housecall/xscan60.cab (HouseCall Control)O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8}
http://download.microsoft.com/download/e/7.../OGAControl.cab (Office Genuine Advantage Validation Tool)O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533}
https://support.microsoft.com/OAS/ActiveX/MSDcode.cab (Microsoft Data Collection Control)O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94}
http://pcpitstop.com/betapit/PCPitStop.CAB (PCPitstop Utility)O16 - DPF: {15B782AF-55D8-11D1-B477-006097098764}
http://download.macromedia.com/pub/shockwa...re/awswax65.cab (Macromedia Authorware Web Player Control)O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
http://fpdownload.macromedia.com/get/shock...director/sw.cab (Shockwave ActiveX Control)O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}
http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A}
http://housecall65.trendmicro.com/housecal...ivex/hcImpl.cab (Trend Micro ActiveX Scan Agent 6.6)O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2}
http://download.ebay.com/turbo_lister/US/install.cab (Reg Error: Key error.)O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}
http://security.symantec.com/sscv6/SharedC...bin/AvSniff.cab (Symantec AntiVirus scanner)O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB}
http://us.dl1.yimg.com/download.yahoo.com/...nst20040510.cab (YInstStarter Class)O16 - DPF: {32305793-C19A-48E7-AD2F-D87FF7B264A4}
http://www.tenebril.com/assets/activeX/SpywareScanner.ocx (TenebrilSpywareScanner Control)O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE}
http://office.microsoft.com/officeupdate/content/opuc2.cab (Office Update Installation Engine)O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0}
http://www1.snapfish.com/SnapfishActivia.cab (Snapfish Activia)O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3}
http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-48.cab (EPUImageControl Class)O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
http://download.bitdefender.com/resources/scan8/oscan8.cab (BDSCANONLINE Control)O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5}
http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab (Symantec RuFSI Utility Class)O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
http://update.microsoft.com/microsoftupdat...b?1135110221890 (MUWebControl Class)O16 - DPF: {74C861A1-D548-4916-BC8A-FDE92EDFF62C}
http://mediaplayer.walmart.com/installer/install.cab (Reg Error: Key error.)O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103}
http://www3.ca.com/securityadvisor/virusinfo/webscan.cab (WScanCtl Class)O16 - DPF: {7FE26BE2-B923-4B41-9834-E84DA1CC1F96}
http://vsp.closetmaid.com/vsp/cmaidctl_vsp..._downloader.cab (Closet Control)O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_11)O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/flash...r/ultrashim.cab (Reg Error: Key error.)O16 - DPF: {B7D07999-2ADB-4AEB-997E-F61CB7B2E2CD}
http://www.trendsecure.com/easy_install/_a...asyInstallX.CAB (TSEasyInstallX Control)O16 - DPF: {BB383206-6DA1-4E80-B62A-3DF950FCC697}
http://ak.imgag.com/imgag/cp/install/AxCtp2.cab (Create & Print ActiveX Plug-in)O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
http://java.sun.com/products/plugin/autodl...indows-i586.cab (Java Plug-in 1.6.0_01)O16 - DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_11)O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_11)O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload.macromedia.com/get/flash...ent/swflash.cab (Shockwave Flash Object)O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8}
http://a532.g.akamai.net/f/532/6712/5m/vir...l/installer.exe (Virtools WebPlayer Class)O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941}
http://driveragent.com/files/driveragent.cab (Driver Agent ActiveX Control)O16 - DPF: PackageCab
http://ak.imgag.com/imgag/cp/install/AxCtp2.cab (Reg Error: Key error.)O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 65.32.5.111 65.32.5.112O18 - Protocol\Handler\belarc {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\Advisor\System\BAVoilaX.dll (Belarc, Inc.)O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)O18 - Protocol\Handler\ipp - No CLSID value foundO18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)O18 - Protocol\Handler\msdaipp - No CLSID value foundO18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)O18 - Protocol\Handler\symres {AA1061FE-6C41-421f-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.7.2.10\coIEPlg.dll (Symantec Corporation)O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation)O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\Ati2evxx.dll (ATI Technologies Inc.)O24 - Desktop Components:0 (My Current Home Page) - About:HomeO31 - SafeBoot: AlternateShell - cmd.exeO32 - HKLM CDRom: AutoRun - 1O32 - AutoRun File - [2008/12/12 01:58:28 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]O33 - MountPoints2\{8ec733cf-4feb-11d9-83f8-806d6172696f}\Shell - "" = AutoRunO33 - MountPoints2\{8ec733cf-4feb-11d9-83f8-806d6172696f}\Shell\AutoRun - "" = Auto&PlayO33 - MountPoints2\{8ec733cf-4feb-11d9-83f8-806d6172696f}\Shell\AutoRun\command - "" = D:\Setup.exe -- File not foundO34 - HKLM BootExecute: (autocheck) - File not foundO34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)O34 - HKLM BootExecute: (*) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\ApVxdWin.exe) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\asclient.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\AVCIC.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\BORLNDMM.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\cc3250mt.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\COMFLTNT.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\Config.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\ICL_CFG.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\ICL_TRF.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\INSTLSP.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\LANGM5.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\LocalSrv.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAV2WSC.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVALE.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVAMW.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVCOMDL.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVCPROX.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVDLL.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVEXCFG.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVFTP.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVHTTP.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\pavim.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVLSP.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVMICLI.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVNNTP.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\pavoepl.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVOLE.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVPOP3.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVSCR.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVSMTP.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVTFTP.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PAVTRC.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PavWeb.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PLATC.DLL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PLATCTRL.BPL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PlatMsg.dll) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExecute: (Software\Panda) - File not foundO34 - HKLM BootExecute: (Platinum) - File not foundO34 - HKLM BootExecute: (2005) - File not foundO34 - HKLM BootExecute: (Internet) - File not foundO34 - HKLM BootExecute: (Security\PNDCTRLA.BPL) - File not foundO34 - HKLM BootExecute: (PFDNNT) - File not foundO34 - HKLM BootExecute: (C:\Program) - File not foundO34 - HKLM BootExecute: (Files\Panda) - File not foundO34 - HKLM BootExe
