Oh oops. I thought followed this guide,
http://internetrotsyourbrain.com/rridgely/malwareremoval.htmOkay here are my logs again, thank you. Oh and a side note, my antivirus programs registered a trojan in the comedian file.
Malwarebytes' Anti-Malware 1.39
Database version: 2462
Windows 6.0.6001 Service Pack 1
7/20/2009 11:21:59 AM
mbam-log-2009-07-20 (11-21-59).txt
Scan type: Quick Scan
Objects scanned: 88285
Time elapsed: 8 minute(s), 16 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Rooter.exe (v1.0.2) by Eric_71
.
SeDebugPrivilege granted successfully ...
.
Windows Vista Home Edition (6.0.6001) Service Pack 1
[32_bits] - x86 Family 6 Model 23 Stepping 6, GenuineIntel
.
[wscsvc] (Security Center) RUNNING (state:4)
[MpsSvc] RUNNING (state:4)
Windows Firewall -> Enabled
Windows Defender -> Enabled
User Account Control (UAC) -> Enabled
.
Internet Explorer 8.0.6001.18783
Mozilla Firefox 3.0.11 (en-US)
.
C:\ [Fixed-NTFS] .. ( Total:116 Go - Free:55 Go )
D:\ [Fixed-NTFS] .. ( Total:106 Go - Free:106 Go )
E:\ [CD_Rom]
.
Scan : 11:22.39
Path : C:\Users\Administrator\Downloads\Rooter.exe
User : Administrator ( Administrator -> YES )
.
----------------------\\ Processes
.
Locked [System Process] (0)
Locked System (4)
______ \SystemRoot\System32\smss.exe (584)
______ C:\Windows\system32\csrss.exe (660)
______ C:\Windows\system32\wininit.exe (720)
______ C:\Windows\system32\csrss.exe (732)
______ C:\Windows\system32\services.exe (812)
______ C:\Windows\system32\lsass.exe (840)
______ C:\Windows\system32\lsm.exe (848)
______ C:\Windows\system32\winlogon.exe (956)
______ C:\Windows\system32\svchost.exe (1056)
______ C:\Windows\System32\svchost.exe (1100)
______ C:\Windows\system32\svchost.exe (1148)
Locked cmdagent.exe (1192)
______ C:\Windows\system32\svchost.exe (1284)
______ C:\Windows\System32\svchost.exe (1304)
______ C:\Windows\system32\Ati2evxx.exe (1380)
______ C:\Windows\System32\svchost.exe (1416)
______ C:\Windows\System32\svchost.exe (1456)
______ C:\Windows\system32\svchost.exe (1472)
Locked audiodg.exe (1548)
______ C:\Windows\system32\svchost.exe (1572)
______ C:\Windows\system32\SLsvc.exe (1588)
______ C:\Windows\system32\svchost.exe (1616)
______ C:\Program Files\ASUS\SmartLogon\smartlogon.exe (1844)
______ C:\Windows\system32\Ati2evxx.exe (1904)
______ C:\Program Files\ATK Hotkey\ASLDRSrv.exe (2008)
______ C:\Program Files\ATKGFNEX\GFNEXSrv.exe (2020)
______ C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (124)
______ C:\Windows\System32\spoolsv.exe (836)
______ C:\Windows\system32\taskeng.exe (992)
______ C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (1132)
______ C:\Windows\system32\svchost.exe (2148)
______ C:\Windows\system32\agrsmsvc.exe (2440)
______ C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe (2496)
______ C:\Windows\system32\svchost.exe (2528)
______ C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (2548)
______ C:\Windows\system32\ifxspmgt.exe (2776)
______ C:\PROGRA~1\AVG\AVG8\avgrsx.exe (2868)
______ C:\PROGRA~1\AVG\AVG8\avgnsx.exe (2888)
______ C:\Windows\System32\IFXTCS.exe (2984)
______ C:\Program Files\Common Files\LightScribe\LSSrvc.exe (3008)
______ C:\Windows\system32\IfxPsdSv.exe (3240)
______ C:\Windows\system32\svchost.exe (3320)
______ C:\Program Files\asus\NB Probe\SPM\spmgr.exe (3372)
______ C:\Windows\system32\svchost.exe (3416)
______ C:\Windows\System32\svchost.exe (3568)
______ C:\Windows\system32\SearchIndexer.exe (3596)
______ C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (3848)
______ C:\Windows\system32\wbem\unsecapp.exe (4008)
______ C:\Windows\system32\wbem\wmiprvse.exe (4068)
______ C:\Windows\system32\taskeng.exe (1880)
______ C:\Windows\system32\Dwm.exe (1872)
______ C:\Program Files\ASUS\SmartLogon\sensorsrv.exe (4112)
______ C:\Windows\Explorer.EXE (4120)
______ C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe (4144)
______ C:\Program Files\ATK Hotkey\Hcontrol.exe (4336)
______ C:\Program Files\ATK Hotkey\MsgTranAgt.exe (4368)
______ C:\Program Files\Wireless Console 2\wcourier.exe (4436)
______ C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe (4444)
______ C:\Program Files\P4G\BatteryLife.exe (4456)
______ C:\Program Files\ASUS\Splendid\ACMON.exe (4504)
______ C:\Windows\System32\ACEngSvr.exe (4612)
______ C:\Program Files\ATK Hotkey\ATKOSD.exe (4836)
______ C:\Program Files\ATK Hotkey\KBFiltr.exe (4932)
______ C:\Program Files\ATK Hotkey\WDC.exe (4968)
______ C:\Program Files\Windows Defender\MSASCui.exe (5092)
______ C:\Program Files\ATK Hotkey\HControlUser.exe (5124)
______ C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (5136)
______ C:\Program Files\ATKOSD2\ATKOSD2.exe (5216)
______ C:\Windows\RtHDVCpl.exe (5256)
______ C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (5284)
______ C:\Windows\ASScrPro.exe (5304)
______ C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (5352)
______ C:\Program Files\Java\jre6\bin\jusched.exe (5416)
Locked cfp.exe (5476)
______ C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (5492)
______ C:\Program Files\AVG\AVG8\avgtray.exe (5672)
______ C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (5748)
______ C:\Program Files\Steam\Steam.exe (5808)
______ C:\Program Files\Windows Live\Messenger\msnmsgr.exe (5844)
______ C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (5928)
______ C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (6036)
______ C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (6048)
______ C:\Program Files\Infineon\Security Platform Software\PSDrt.exe (6120)
______ C:\Program Files\Infineon\Security Platform Software\SpTna.exe (3748)
______ C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (4648)
______ C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (3900)
______ C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (1356)
______ C:\Program Files\Windows Live\Contacts\wlcomm.exe (1376)
______ C:\Program Files\Mozilla Firefox\firefox.exe (4132)
______ C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (4088)
______ C:\Program Files\Common Files\Steam\SteamService.exe (1236)
______ C:\Windows\system32\SearchProtocolHost.exe (5312)
______ C:\Windows\system32\SearchFilterHost.exe (1704)
______ C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32Info.exe (5804)
______ C:\Users\Administrator\Downloads\Rooter.exe (6976)
.
----------------------\\ Device\Harddisk0\
.
\Device\Harddisk0 [Sectors : 63 x 512 Bytes]
.
\Device\Harddisk0\Partition1 (Start_Offset:1048576 | Length:10485760000)
\Device\Harddisk0\Partition2 --[ MBR ]-- (Start_Offset:10486808576 | Length:125029056512)
\Device\Harddisk0\Partition0 (Start_Offset:135515865088 | Length:114542247936)
\Device\Harddisk0\Partition3 (Start_Offset:135516913664 | Length:114541199360)
.
----------------------\\ Scheduled Tasks
.
C:\Windows\Tasks\Ad-Aware Update (Weekly).job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - user.job
C:\Windows\Tasks\SA.DAT
C:\Windows\Tasks\SCHEDLGU.TXT
C:\Windows\Tasks\User_Feed_Synchronization-{115363CB-22DC-4F75-9764-E6B7FE238CF2}.job
.
----------------------\\ Registry
.
.
----------------------\\ Files & Folders
.
C:\Users\ADMINI~1\Desktop\sims3crackandkeygendzialajacy.exe
C:\Users\ADMINI~1\Desktop\sims3crackandkeygendzialajacy.exe
==> Cracks & Keygens <==.
----------------------\\ Scan completed at 11:22.53
.
C:\Rooter$\Rooter_1.txt - (20/07/2009 | 11:22.53).c
ROOTREPEAL © AD, 2007-2009
==================================================
Scan Start Time: 2009/07/20 11:25
Program Version: Version 1.3.2.0
Windows Version: Windows Vista SP1
==================================================
Processes
-------------------
Path: System
PID: 4 Status: Locked to the Windows API!
Path: C:\Windows\System32\audiodg.exe
PID: 1548 Status: Locked to the Windows API!
==EOF==
OTL logfile created on: 7/20/2009 11:26:19 AM - Run 1
OTL by OldTimer - Version 3.0.9.2 Folder = C:\Users\Administrator\Downloads
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18783)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.53 Gb Available Physical Memory | 76.69% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116.44 Gb Total Space | 55.68 Gb Free Space | 47.81% Space Free | Partition Type: NTFS
Drive D: | 106.67 Gb Total Space | 106.58 Gb Free Space | 99.91% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: USER-PC
Current User Name: Administrator
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ========== PRC - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
PRC - C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\ASUS\SmartLogon\smartlogon.exe (ASUS)
PRC - C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
PRC - C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Windows\System32\agrsmsvc.exe (Agere Systems)
PRC - C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (Broadcom Corporation.)
PRC - C:\Windows\System32\ifxspmgt.exe (Infineon Technologies AG)
PRC - C:\Program Files\AVG\AVG8\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Windows\System32\IFXTCS.exe (Infineon Technologies AG)
PRC - C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - C:\Windows\System32\IfxPsdSv.exe (Infineon Technologies AG)
PRC - C:\Program Files\asus\NB Probe\SPM\spmgr.exe ()
PRC - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
PRC - C:\Windows\System32\wbem\unsecapp.exe (Microsoft Corporation)
PRC - C:\Windows\System32\wbem\wmiprvse.exe (Microsoft Corporation)
PRC - C:\Program Files\ASUS\SmartLogon\sensorsrv.exe (ASUS)
PRC - C:\Windows\Explorer.EXE (Microsoft Corporation)
PRC - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe (Cognizance Corporation)
PRC - C:\Program Files\ATK Hotkey\Hcontrol.exe (ATK0100)
PRC - C:\Program Files\ATK Hotkey\MsgTranAgt.exe ()
PRC - C:\Program Files\Wireless Console 2\wcourier.exe ()
PRC - C:\Program Files\ASUS\ASUS CopyProtect\aspg.exe (ASUS)
PRC - C:\Program Files\P4G\BatteryLife.exe (ATK)
PRC - C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)
PRC - C:\Windows\System32\ACEngSvr.exe (ASUSTeK)
PRC - C:\Program Files\ATK Hotkey\ATKOSD.exe ()
PRC - C:\Program Files\ATK Hotkey\KBFiltr.exe ()
PRC - C:\Program Files\ATK Hotkey\WDC.exe ()
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Program Files\ATK Hotkey\HControlUser.exe ()
PRC - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files\ATKOSD2\ATKOSD2.exe ()
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
PRC - C:\Windows\ASScrPro.exe ()
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Advanced Micro Devices Inc.)
PRC - C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
PRC - C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company)
PRC - C:\Program Files\Steam\Steam.exe (Valve Corporation)
PRC - C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
PRC - C:\Program Files\Infineon\Security Platform Software\PSDrt.exe (Infineon Technologies AG)
PRC - C:\Program Files\Infineon\Security Platform Software\SpTna.exe (Infineon Technologies AG)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe (Broadcom Corporation.)
PRC - C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Synaptics, Inc.)
PRC - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
PRC - C:\Program Files\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
PRC - C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
PRC - C:\Users\Administrator\Downloads\OTL.exe (OldTimer Tools)
========== Win32 Services (SafeList) ========== SRV - (AgereModemAudio [Auto | Running]) -- C:\Windows\System32\agrsmsvc.exe (Agere Systems)
SRV - (ASBroker [Auto | Running]) -- C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll (Cognizance Corporation)
SRV - (ASChannel [Auto | Running]) -- C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll (Cognizance Corporation)
SRV - (ASLDRService [Auto | Running]) -- C:\Program Files\ATK Hotkey\ASLDRSrv.exe ()
SRV - (Ati External Event Utility [Auto | Running]) -- C:\Windows\System32\Ati2evxx.exe (ATI Technologies Inc.)
SRV - (ATKGFNEXSrv [Auto | Running]) -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe ()
SRV - (Automatic LiveUpdate Scheduler [Auto | Running]) -- C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)
SRV - (avg8wd [Auto | Running]) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (btwdins [Auto | Running]) -- C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (Broadcom Corporation.)
SRV - (ccEvtMgr [Auto | Running]) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (ccSetMgr [Auto | Running]) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (CLTNetCnService [Auto | Running]) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (cmdAgent [Auto | Running]) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
SRV - (comHost [On_Demand | Stopped]) -- C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe (Symantec Corporation)
SRV - (ehRecvr [On_Demand | Stopped]) -- C:\Windows\ehome\ehRecvr.exe (Microsoft Corporation)
SRV - (ehSched [On_Demand | Stopped]) -- C:\Windows\ehome\ehsched.exe (Microsoft Corporation)
SRV - (ehstart [Auto | Stopped]) -- C:\Windows\ehome\ehstart.dll (Microsoft Corporation)
SRV - (Eventlog [Auto | Running]) -- C:\Windows\System32\wevtsvc.dll (Microsoft Corporation)
SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) -- C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation)
SRV - (gupdate1c9d6376c3d4cdf [Auto | Stopped]) -- C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
SRV - (gusvc [On_Demand | Stopped]) -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (Google)
SRV - (idsvc [Unknown | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (IFXSpMgtSrv [Auto | Running]) -- C:\Windows\System32\ifxspmgt.exe (Infineon Technologies AG)
SRV - (IFXTCS [Auto | Running]) -- C:\Windows\System32\IFXTCS.exe (Infineon Technologies AG)
SRV - (Lavasoft Ad-Aware Service [Auto | Running]) -- C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (LightScribeService [Auto | Running]) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (LiveUpdate [On_Demand | Stopped]) -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE (Symantec Corporation)
SRV - (LiveUpdate Notice [Auto | Running]) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (Symantec Corporation)
SRV - (NetTcpPortSharing [Disabled | Stopped]) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (odserv [On_Demand | Stopped]) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose [On_Demand | Stopped]) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (PersonalSecureDriveService [Auto | Running]) -- C:\Windows\System32\IfxPsdSv.exe (Infineon Technologies AG)
SRV - (SBSDWSCService [Auto | Running]) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)
SRV - (spmgr [Auto | Running]) -- C:\Program Files\asus\NB Probe\SPM\spmgr.exe ()
SRV - (Steam Client Service [On_Demand | Running]) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (Symantec Core LC [On_Demand | Stopped]) -- C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe ()
SRV - (WinDefend [Auto | Running]) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc [On_Demand | Stopped]) -- C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
========== Driver Services (SafeList) ========== DRV - (adp94xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (adpahci [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (adpu160m [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (adpu320 [Disabled | Stopped]) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (AgereSoftModem [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\AGRSM.sys (Agere Systems)
DRV - (aic78xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (aliide [Disabled | Stopped]) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (arc [Disabled | Stopped]) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (arcsas [Disabled | Stopped]) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (ASMMAP [Auto | Running]) -- C:\Program Files\ATKGFNEX\ASMMAP.sys ()
DRV - (AtiHdmiService [On_Demand | Running]) -- C:\Windows\System32\drivers\AtiHdmi.sys (ATI Research Inc.)
DRV - (atikmdag [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\atikmdag.sys (ATI Technologies Inc.)
DRV - (ATSWPDRV [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\ATSwpDrv.sys (AuthenTec, Inc.)
DRV - (AvgLdx86 [System | Running]) -- C:\Windows\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86 [System | Running]) -- C:\Windows\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgTdiX [System | Running]) -- C:\Windows\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (BrFiltLo [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (Brserid [Disabled | Stopped]) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrSerWdm [Disabled | Stopped]) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm [Disabled | Stopped]) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer [On_Demand | Stopped]) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (btwaudio [On_Demand | Running]) -- C:\Windows\System32\drivers\btwaudio.sys (Broadcom Corporation.)
DRV - (btwavdt [On_Demand | Running]) -- C:\Windows\System32\drivers\btwavdt.sys (Broadcom Corporation.)
DRV - (btwl2cap [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\btwl2cap.sys (Broadcom Corporation.)
DRV - (btwrchid [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\btwrchid.sys (Broadcom Corporation.)
DRV - (cmdGuard [System | Running]) -- C:\Windows\System32\DRIVERS\cmdguard.sys (COMODO)
DRV - (cmdHlp [System | Running]) -- C:\Windows\System32\DRIVERS\cmdhlp.sys (COMODO)
DRV - (cmdide [Disabled | Stopped]) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (COH_Mon [On_Demand | Stopped]) -- C:\Windows\System32\Drivers\COH_Mon.sys (Symantec Corporation)
DRV - (CO_Mon [Auto | Running]) -- C:\Windows\System32\drivers\CO_Mon.sys (Symantec Corporation)
DRV - (E1G60 [On_Demand | Stopped]) -- C:\Windows\System32\DRIVERS\E1G60I32.sys (Intel Corporation)
DRV - (eeCtrl [System | Running]) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (elxstor [Disabled | Stopped]) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (EraserUtilRebootDrv [On_Demand | Running]) -- C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (ghaio [Auto | Running]) -- C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys ()
DRV - (HpCISSs [Disabled | Stopped]) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (iaStor [Boot | Running]) -- C:\Windows\system32\DRIVERS\iaStor.sys (Intel Corporation)
DRV - (iaStorV [Disabled | Stopped]) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (IDSvix86 [System | Running]) -- C:\ProgramData\Symantec\Definitions\SymcData\ipsdefs\20090715.003\IDSvix86.sys (Symantec Corporation)
DRV - (iirsp [Disabled | Stopped]) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (inspect [System | Running]) -- C:\Windows\System32\DRIVERS\inspect.sys (COMODO)
DRV - (IntcAzAudAddService [On_Demand | Running]) -- C:\Windows\System32\drivers\RTKVHDA.sys (Realtek Semiconductor Corp.)
DRV - (iteatapi [Disabled | Stopped]) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (itecir [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\itecir.sys (ITE Tech. Inc. )
DRV - (iteraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (kbfiltr [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\kbfiltr.sys ( )
DRV - (Lbd [Boot | Running]) -- C:\Windows\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (LSI_FC [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (LSI_SAS [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (LSI_SCSI [Disabled | Stopped]) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (megasas [Disabled | Stopped]) -- C:\Windows\system32\drivers\megasas.sys (LSI Corporation)
DRV - (MegaSR [Disabled | Stopped]) -- C:\Windows\system32\drivers\megasr.sys (LSI Corporation, Inc.)
DRV - (MODEMCSA [On_Demand | Running]) -- C:\Windows\System32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (Mraid35x [Disabled | Stopped]) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (MTsensor [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\ATKACPI.sys (ATK0100)
DRV - (NAVENG [On_Demand | Running]) -- C:\ProgramData\Symantec\Definitions\VirusDefs\20090719.004\NAVENG.SYS (Symantec Corporation)
DRV - (NAVEX15 [On_Demand | Running]) -- C:\ProgramData\Symantec\Definitions\VirusDefs\20090719.004\NAVEX15.SYS (Symantec Corporation)
DRV - (NETw5v32 [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\NETw5v32.sys (Intel Corporation)
DRV - (nfrd960 [Disabled | Stopped]) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (nmwcd [On_Demand | Running]) -- C:\Windows\System32\drivers\ccdcmb.sys (Nokia)
DRV - (nmwcdc [On_Demand | Running]) -- C:\Windows\System32\drivers\ccdcmbo.sys (Nokia)
DRV - (ntrigdigi [Disabled | Stopped]) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (nvraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nvstor [Disabled | Stopped]) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (PersonalSecureDrive [System | Running]) -- C:\Windows\System32\drivers\psd.sys (Infineon Technologies AG)
DRV - (ql2300 [Disabled | Stopped]) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (ql40xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (rimmptsk [Auto | Running]) -- C:\Windows\System32\DRIVERS\rimmptsk.sys (REDC)
DRV - (rimsptsk [Auto | Running]) -- C:\Windows\System32\DRIVERS\rimsptsk.sys (REDC)
DRV - (rismxdp [Auto | Running]) -- C:\Windows\System32\DRIVERS\rixdptsk.sys (REDC)
DRV - (RTL8169 [On_Demand | Stopped]) -- C:\Windows\System32\DRIVERS\Rtlh86.sys (Realtek Corporation )
DRV - (SCDEmu [System | Running]) -- C:\Windows\System32\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV - (secdrv [Auto | Running]) -- C:\Windows\System32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (SiSRaid4 [Disabled | Stopped]) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (smserial [On_Demand | Stopped]) -- C:\Windows\System32\DRIVERS\smserial.sys (Motorola Inc.)
DRV - (SNP2UVC [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\snp2uvc.sys ()
DRV - (SPBBCDrv [System | Running]) -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys (Symantec Corporation)
DRV - (SRTSP [On_Demand | Running]) -- C:\Windows\System32\Drivers\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPL [On_Demand | Stopped]) -- C:\Windows\System32\Drivers\SRTSPL.SYS (Symantec Corporation)
DRV - (SRTSPX [System | Running]) -- C:\Windows\System32\Drivers\SRTSPX.SYS (Symantec Corporation)
DRV - (Symc8xx [Disabled | Stopped]) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (SYMDNS [On_Demand | Running]) -- C:\Windows\System32\Drivers\SYMDNS.SYS (Symantec Corporation)
DRV - (SymEvent [On_Demand | Running]) -- C:\Windows\System32\Drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (SYMFW [On_Demand | Running]) -- C:\Windows\System32\Drivers\SYMFW.SYS (Symantec Corporation)
DRV - (SymIM [System | Running]) -- C:\Windows\System32\DRIVERS\SymIMv.sys (Symantec Corporation)
DRV - (SYMNDISV [On_Demand | Running]) -- C:\Windows\System32\Drivers\SYMNDISV.SYS (Symantec Corporation)
DRV - (SYMREDRV [On_Demand | Running]) -- C:\Windows\System32\Drivers\SYMREDRV.SYS (Symantec Corporation)
DRV - (SYMTDI [System | Running]) -- C:\Windows\System32\Drivers\SYMTDI.SYS (Symantec Corporation)
DRV - (Sym_hi [Disabled | Stopped]) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (Sym_u3 [Disabled | Stopped]) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (SynTP [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\SynTP.sys (Synaptics, Inc.)
DRV - (TPM [On_Demand | Stopped]) -- C:\Windows\System32\drivers\tpm.sys (Microsoft Corporation)
DRV - (uliahci [Disabled | Stopped]) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (UlSata [Disabled | Stopped]) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (ulsata2 [Disabled | Stopped]) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (upperdev [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\usbser_lowerflt.sys (Windows ® Codename Longhorn DDK provider)
DRV - (usbser [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\usbser.sys (Microsoft Corporation)
DRV - (UsbserFilt [On_Demand | Running]) -- C:\Windows\System32\DRIVERS\usbser_lowerfltj.sys (Windows ® Codename Longhorn DDK provider)
DRV - (viaide [Disabled | Stopped]) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (vsmraid [Disabled | Stopped]) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (yukonwlh [On_Demand | Stopped]) -- C:\Windows\System32\DRIVERS\yk60x86.sys (Marvell)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.asus.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.asus.comIE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.com/IE - URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
IE - URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5
FF - prefs.js..extensions.enabledItems: avg@igeared:2.506.014.001
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1
FF - prefs.js..extensions.enabledItems: web@veoh.com:1.4
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.11
FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/07/16 11:29:41 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009/07/16 12:34:58 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igeared: C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared [2009/07/16 12:36:08 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/07/19 11:03:31 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.11\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/07/19 11:03:31 | 00,000,000 | ---D | M]
[2009/06/04 12:35:15 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\mozilla\Extensions
[2009/06/04 12:35:15 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/07/19 15:58:04 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\donpiwok.default\extensions
[2009/07/18 10:23:57 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\donpiwok.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/07/19 15:57:49 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\mozilla\Firefox\Profiles\donpiwok.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2009/07/19 15:58:04 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions
[2009/06/15 09:54:41 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2009/06/30 21:46:47 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
[2009/07/02 09:56:40 | 00,000,000 | ---D | M] -- C:\Program Files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
[2009/06/15 09:54:38 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browserdirprovider.dll
[2009/06/15 09:54:38 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\brwsrcmp.dll
[2009/05/02 05:02:48 | 01,044,480 | ---- | M] (The OpenSSL Project,
http://www.openssl.org/) -- C:\Program Files\mozilla firefox\plugins\libdivx.dll
[2009/07/02 09:56:05 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeploytk.dll
[2009/05/13 02:46:20 | 01,650,992 | ---- | M] (DivX,Inc.) -- C:\Program Files\mozilla firefox\plugins\npdivx32.dll
[2009/05/19 06:41:32 | 00,098,304 | ---- | M] (DivX, Inc) -- C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll
[2009/06/15 09:54:40 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Program Files\mozilla firefox\plugins\npnul32.dll
[2009/05/02 05:02:48 | 00,200,704 | ---- | M] (The OpenSSL Project,
http://www.openssl.org/) -- C:\Program Files\mozilla firefox\plugins\ssldivx.dll
[2009/04/24 08:39:08 | 00,001,394 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom.xml
[2009/04/24 08:39:08 | 00,002,193 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\answers.xml
[2009/07/16 12:59:28 | 00,001,489 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml
[2009/04/24 08:39:08 | 00,001,534 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\creativecommons.xml
[2009/04/24 08:39:08 | 00,002,343 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay.xml
[2009/04/24 08:39:08 | 00,001,706 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2009/04/24 08:39:08 | 00,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia.xml
O1 HOSTS File: (317652 bytes) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.0scan.com
O1 - Hosts: 127.0.0.1 0scan.com
O1 - Hosts: 127.0.0.1 www.1000gratisproben.com
O1 - Hosts: 127.0.0.1 1000gratisproben.com
O1 - Hosts: 127.0.0.1 www.1001namen.com
O1 - Hosts: 127.0.0.1 1001namen.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 www.1-2005-search.com
O1 - Hosts: 10897 more lines...
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Common Files\Symantec Shared\IDS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll (Google Inc.)
O2 - BHO: (Google Dictionary Compression sdch) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (ASUS Security Protect Manager) - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Program Files\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll (Veoh Networks Inc)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Veoh Video Compass) - {52836EB0-631A-47B1-94A6-61F9D9112DAE} - C:\Program Files\Veoh Networks\Veoh Video Compass\SearchRecsPlugin.dll (Veoh Networks)
O3 - HKLM\..\Toolbar: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll (Google Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Show Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\CoIEPlg.dll (Symantec Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe ()
O4 - HKLM..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe ()
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ATKOSD2\ATKOSD2.exe ()
O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation)
O4 - HKLM..\Run: [CognizanceTS] C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASTSVCC.dll (Cognizance Corporation)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [HControlUser] C:\Program Files\ATK Hotkey\HcontrolUser.exe ()
O4 - HKLM..\Run: [IFXSPMGT] C:\Windows\System32\ifxspmgt.exe (Infineon Technologies AG)
O4 - HKLM..\Run: [Microsoft Pinyin IME Migration] C:\Program Files\Common Files\microsoft shared\IME12\IMESC\IMSCMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (Hewlett-Packard Company)
O4 - HKCU..\Run: [msnmsgr] C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [Steam] c:\program files\steam\steam.exe (Valve Corporation)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableRegistryTools = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskmgr = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ASUS Security Protect Manager e-Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll (Bioscrypt Inc.)
O9 - Extra 'Tools' menuitem : ASUS Security Protect Manager e-&Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll (Bioscrypt Inc.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe ()
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\System32\wshbth.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKLM\..Trusted Domains: 56 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 56 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
http://download.macromedia.com/pub/shockwa...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
http://download.bitdefender.com/resources/...can8/oscan8.cab (BDSCANONLINE Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-...indows-i586.cab (Java Plug-in 1.6.0_13)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 202.156.1.58 202.156.1.78 218.186.1.38
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8064.0206.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter: - text/xml - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter: - x-sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll (Google Inc.)
O20 - AppInit_DLLs: (APSHook.dll) - C:\Windows\System32\APSHook.dll (Cognizance Corporation)
O20 - AppInit_DLLs: (C:\Windows\system32\guard32.dll) - C:\Windows\System32\guard32.dll (COMODO)
O20 - AppInit_DLLs: (avgrsstx.dll) - C:\Windows\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/19 05:43:36 | 00,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\Windows\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\Windows\System32\lsdelete.exe ()
NetSvcs: FastUserSwitchingCompatibility - Service key not found. File not found
NetSvcs: Ias - Service key not found. File not found
NetSvcs: Irmon - Service key not found. File not found
NetSvcs: Nla - Service key not found. File not found
NetSvcs: Ntmssvc - Service key not found. File not found
NetSvcs: NWCWorkstation - Service key not found. File not found
NetSvcs: Nwsapagent - Service key not found. File not found
NetSvcs: SRService - Service key not found. File not found
NetSvcs: Wmi - Service key not found. File not found
NetSvcs: WmdmPmSp - Service key not found. File not found
NetSvcs: LogonHours - Service key not found. File not found
NetSvcs: PCAudit - Service key not found. File not found
NetSvcs: helpsvc - Service key not found. File not found
NetSvcs: uploadmgr - Service key not found. File not found
MsConfig - StartUpReg:
Google Quick Search Box - hkey= - key= - C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
MsConfig - StartUpReg:
Sidebar - hkey= - key= - C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
MsConfig - StartUpReg:
VeohPlugin - hkey= - key= - C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (Veoh Networks)
MsConfig - StartUpReg:
WindowsWelcomeCenter - hkey= - key= - File not found
MsConfig - State: "startup" - 2
SafeBootMin: AppMgmt - Service
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: EventLog - C:\Windows\System32\wevtsvc.dll (Microsoft Corporation)
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
SafeBootNet: AppMgmt - Service
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: EventLog - C:\Windows\System32\wevtsvc.dll (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Lavasoft Ad-Aware Service - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
Drivers32: msacm.clmp3enc - C:\Program Files\CyberLink\Power2Go\CLMP3Enc.ACM (CyberLink Corp.)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.siren - C:\Windows\System32\sirenacm.dll (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\VfWWDM32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: VIDC.FPS1 - C:\Windows\System32\frapsvid.dll (Beepa P/L)
Drivers32: vidc.VP60 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.VP61 - C:\Windows\System32\vp6vfw.dll (On2.com)
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: wave2 - C:\Windows\System32\serwvdrv.dll (Microsoft Corporation)
========== Files/Folders - Created Within 30 Days ========== [2009/07/20 11:23:24 | 00,034,304 | ---- | C] () -- C:\Windows\System32\drivers\rootrepeal.sys
[2009/07/20 11:22:52 | 00,000,000 | ---D | C] -- C:\Rooter$
[2009/07/19 13:57:15 | 00,000,630 | ---- | C] () -- C:\Users\Administrator\Documents\cc_20090719_135713.reg
[2009/07/19 13:50:02 | 00,000,000 | ---D | C] -- C:\Windows\BDOSCAN8
[2009/07/19 13:48:16 | 00,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Malwarebytes
[2009/07/19 13:48:09 | 00,038,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/07/19 13:48:08 | 00,019,096 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/07/19 13:48:08 | 00,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2009/07/19 13:48:07 | 00,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/07/19 11:17:03 | 00,000,000 | ---D | C] -- C:\ProgramData\SecTaskMan
[2009/07/19 11:16:56 | 00,000,000 | ---D | C] -- C:\Program Files\Security Task Manager
[2009/07/18 23:51:58 | 00,000,783 | ---- | C] () -- C:\Users\Administrator\Desktop\Garena.lnk
[2009/07/18 23:47:45 | 00,002,986 | ---- | C] () -- C:\Users\Administrator\Documents\cc_20090718_234743.reg
[2009/07/18 10:43:07 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/07/18 08:22:27 | 00,015,688 | ---- | C] () -- C:\Windows\System32\lsdelete.exe
[2009/07/18 00:43:19 | 00,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2009/07/18 00:43:19 | 00,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2009/07/17 23:38:03 | 00,064,160 | ---- | C] (Lavasoft AB) -- C:\Windows\System32\drivers\Lbd.sys
[2009/07/17 23:37:54 | 00,000,472 | ---- | C] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2009/07/17 23:37:53 | 00,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2009/07/17 23:35:56 | 00,000,000 | -H-D | C] -- C:\ProgramData\{EF63305C-BAD7-4144-9208-D65528260864}
[2009/07/17 23:35:33 | 00,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2009/07/17 23:35:33 | 00,000,000 | ---D | C] -- C:\Program Files\Lavasoft
[2009/07/17 23:32:56 | 00,031,226 | ---- | C] () -- C:\Users\Administrator\Documents\cc_20090717_233242.reg
[2009/07/17 23:17:18 | 00,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Yahoo!
[2009/07/17 23:17:18 | 00,000,000 | ---D | C] -- C:\ProgramData\Yahoo! Companion
[2009/07/17 23:17:10 | 00,000,000 | ---D | C] -- C:\Program Files\Yahoo!
[2009/07/17 23:17:02 | 00,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2009/07/16 16:15:19 | 00,000,000 | -H-D | C] -- C:\$AVG8.VAULT$
[2009/07/16 12:59:29 | 00,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\AVG Security Toolbar
[2009/07/16 12:39:58 | 39,069,030 | ---- | C] () -- C:\Windows\System32\drivers\Avg\incavi.avm
[2009/07/16 12:37:03 | 00,011,952 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\avgrsstx.dll
[2009/07/16 12:37:00 | 00,108,552 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgtdix.sys
[2009/07/16 12:36:53 | 00,335,752 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgldx86.sys
[2009/07/16 12:36:49 | 00,027,784 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgmfx86.sys
[2009/07/16 12:36:17 | 00,034,214 | ---- | C] () -- C:\Windows\System32\drivers\Avg\microavi.avg
[2009/07/16 12:36:16 | 00,463,779 | ---- | C] () -- C:\Windows\System32\drivers\Avg\miniavi.avg
[2009/07/16 12:36:12 | 06,061,540 | ---- | C] () -- C:\Windows\System32\drivers\Avg\avi7.avg
[2009/07/16 12:36:12 | 00,000,000 | ---D | C] -- C:\Windows\System32\drivers\Avg
[2009/07/16 12:36:08 | 00,000,000 | ---D | C] -- C:\ProgramData\AVG Security Toolbar
[2009/07/16 12:34:55 | 00,000,000 | ---D | C] -- C:\Program Files\AVG
[2009/07/16 12:34:53 | 00,000,000 | ---D | C] -- C:\ProgramData\avg8
[2009/07/15 08:29:47 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2009/07/15 08:29:46 | 00,289,792 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2009/07/15 08:29:46 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2009/07/15 08:29:46 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
[2009/07/14 23:43:15 | 00,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2009/07/14 23:42:55 | 00,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\skypePM
[2009/07/14 22:20:16 | 00,000,000 | ---D | C] -- C:\Windows\System32\Adobe
[2009/07/14 21:47:21 | 00,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Roaming\Skype
[2009/07/14 21:44:29 | 00,002,377 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2009/07/14 21:44:27 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2009/07/14 21:44:25 | 00,000,000 | R--D | C] -- C:\Program Files\Skype
[2009/07/14 21:44:04 | 00,000,000 | ---D | C] -- C:\ProgramData\Skype
[2009/07/12 11:05:53 | 00,000,000 | ---D | C] -- C:\Users\Administrator\AppData\Local\Macromedia
[2009/07/12 11:04:02 | 00,001,806 | ---- | C] () -- C:\Users\Public\Desktop\Macromedia Flash 8.lnk
[2009/07/12 11:00:22 | 00,000,000 | ---D | C] -- C:\Windows\System32\QuickTime
[2009/07/12 11:00:22 | 00,000,000 | ---D | C] -- C:\ProgramData\Macromedia
[2009/07/12 11:00:12 | 00,000,000 | ---D | C] -- C:\Program Files\Macromedia
[2009/07/12 11:00:12 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Macromedia
[2009/07/12 10:59:19 | 00,000,000 | ---D | C] -- C:\Windows\Downloaded Installations
[2009/07/11 11:04:04 | 00,035,731 | ---- | C] () -- C:\Users\Administrator\Desktop\cornsinpyjamas.png
[2009/07/06 10:36:18 | 00,000,000 | ---D | C] -- C:\Users\Administrator\Desktop\l4d files
[2009/07/02 09:56:34 | 00,410,984 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\deploytk.dll
[2009/07/02 09:56:34 | 00,148,888 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2009/07/02 09:56:34 | 00,144,792 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2009/07/02 09:56:33 | 00,144,792 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2009/06/30 22:00:02 | 00,000,000 | ---D | C] -- C:\Users\Administrator\Desktop\thesims3
[2009/06/30 21:49:01 | 00,000,000 | ---D | C] -- C:\Windows\Sun
[2009/06/30 21:45:53 | 00,000,000 | ---D | C] -- C:\Program Files\Java
[2009/06/30 21:45:23 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2009/06/30 21:12:06 | 00,000,811 | ---- | C] () -- C:\Users\Public\Desktop\PowerISO.lnk
[2009/06/30 21:12:05 | 00,000,000 | ---D | C] -- C:\Program Files\PowerISO
[2009/06/29 14:12:58 | 00,000,886 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2009/06/29 14:12:56 | 00,000,882 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2009/06/25 09:05:28 | 00,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
[2009/01/05 15:44:10 | 00,000,453 | ---- | C] () -- C:\Windows\bdoscandellang.ini
[2008/07/02 16:54:11 | 00,012,288 | ---- | C] () -- C:\Windows\impborl.dll
[2008/04/23 14:02:39 | 00,000,010 | ---- | C] () -- C:\Windows\System32\ABLKSR.ini
[2008/04/22 22:05:07 | 00,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2007/10/01 14:59:45 | 01,769,984 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2007/05/09 15:16:39 | 00,028,160 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys
[2007/01/24 18:08:39 | 00,005,632 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
[2006/11/02 20:35:32 | 00,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 18:23:31 | 00,000,238 | ---- | C] () -- C:\Windows\win.ini
[2006/11/02 18:23:31 | 00,000,219 | ---- | C] () -- C:\Windows\system.ini
[2006/11/02 15:40:29 | 00,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/03/09 09:57:59 | 01,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2005/04/03 07:29:59 | 00,110,592 | R--- | C] () -- C:\Windows\System32\scardsyn.dll
[2001/11/15 04:56:00 | 01,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll
[1998/05/06 12:09:59 | 00,069,632 | R--- | C] () -- C:\Windows\System32\ODMA32.dll
========== Files - Modified Within 30 Days ========== [2009/07/20 11:29:32 | 01,474,832 | ---- | M] () -- C:\Windows\System32\drivers\sfi.dat
[2009/07/20 11:28:22 | 00,000,438 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{115363CB-22DC-4F75-9764-E6B7FE238CF2}.job
[2009/07/20 11:23:24 | 00,034,304 | ---- | M] () -- C:\Windows\System32\drivers\rootrepeal.sys
[2009/07/20 11:17:01 | 00,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2009/07/20 11:10:26 | 00,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2009/07/20 11:10:16 | 00,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2009/07/20 11:09:53 | 00,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2009/07/20 11:09:53 | 00,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2009/07/20 11:09:51 | 00,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2009/07/20 11:09:46 | 00,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2009/07/20 11:08:30 | 00,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2009/07/20 10:58:14 | 39,069,030 | ---- | M] () -- C:\Windows\System32\drivers\Avg\incavi.avm
[2009/07/20 00:30:53 | 04,568,826 | -H-- | M] () -- C:\Users\Administrator\AppData\Local\IconCache.db
[2009/07/20 00:26:17 | 00,690,960 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2009/07/20 00:26:17 | 00,595,684 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2009/07/20 00:26:17 | 00,101,350 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2009/07/19 18:45:13 | 00,034,214 | ---- | M] () -- C:\Windows\System32\drivers\Avg\microavi.avg
[2009/07/19 13:57:17 | 00,000,630 | ---- | M] () -- C:\Users\Administrator\Documents\cc_20090719_135713.reg
[2009/07/19 11:17:50 | 00,000,238 | ---- | M] () -- C:\Windows\win.ini
[2009/07/19 04:18:10 | 00,001,978 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2009/07/18 23:51:58 | 00,000,783 | ---- | M] () -- C:\Users\Administrator\Desktop\Garena.lnk
[2009/07/18 23:47:47 | 00,002,986 | ---- | M] () -- C:\Users\Administrator\Documents\cc_20090718_234743.reg
[2009/07/18 23:04:49 | 00,000,472 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2009/07/18 10:25:49 | 00,317,652 | R--- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2009/07/18 08:47:35 | 00,335,752 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgldx86.sys
[2009/07/17 23:33:11 | 00,031,226 | ---- | M] () -- C:\Users\Administrator\Documents\cc_20090717_233242.reg
[2009/07/16 12:39:44 | 00,463,779 | ---- | M] () -- C:\Windows\System32\drivers\Avg\miniavi.avg
[2009/07/16 12:37:03 | 00,011,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\avgrsstx.dll
[2009/07/16 12:37:00 | 00,108,552 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgtdix.sys
[2009/07/16 12:36:50 | 00,027,784 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\System32\drivers\avgmfx86.sys
[2009/07/16 12:36:16 | 06,061,540 | ---- | M] () -- C:\Windows\System32\drivers\Avg\avi7.avg
[2009/07/16 11:22:35 | 00,415,856 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2009/07/15 11:02:53 | 00,002,377 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2009/07/15 08:36:03 | 00,074,328 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\inspect.sys
[2009/07/15 08:33:23 | 00,179,792 | ---- | M] (COMODO) -- C:\Windows\System32\guard32.dll
[2009/07/15 08:33:18 | 00,029,520 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\cmdhlp.sys
[2009/07/15 08:33:17 | 00,128,888 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\cmdguard.sys
[2009/07/14 23:43:15 | 00,000,056 | -H-- | M] () -- C:\Windows\System32\ezsidmv.dat
[2009/07/14 13:45:50 | 00,010,240 | ---- | M] () -- C:\Users\Administrator\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/07/13 13:36:34 | 00,038,160 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2009/07/13 13:36:12 | 00,019,096 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2009/07/12 12:30:06 | 00,106,184 | ---- | M] () -- C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
[2009/07/12 11:04:02 | 00,001,806 | ---- | M] () -- C:\Users\Public\Desktop\Macromedia Flash 8.lnk
[2009/07/07 23:10:56 | 24,539,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mrt.exe
[2009/07/06 20:00:00 | 00,000,544 | ---- | M] () -- C:\Windows\tasks\Norton Internet Security - Run Full System Scan - user.job
[2009/07/03 22:49:08 | 00,064,160 | ---- | M] (Lavasoft AB) -- C:\Windows\System32\drivers\Lbd.sys
[2009/07/03 22:49:07 | 00,015,688 | ---- | M] () -- C:\Windows\System32\lsdelete.exe
[2009/07/02 09:56:04 | 00,410,984 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\deploytk.dll
[2009/07/02 09:56:04 | 00,148,888 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaws.exe
[2009/07/02 09:56:04 | 00,144,792 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\javaw.exe
[2009/07/02 09:56:04 | 00,144,792 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\System32\java.exe
[2009/06/30 21:12:06 | 00,000,811 | ---- | M] () -- C:\Users\Public\Desktop\PowerISO.lnk
[2009/06/25 09:05:28 | 00,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
[2009/06/21 00:26:18 | 00,001,894 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 8.lnk
========== LOP Check ========== [2009/07/19 13:48:16 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming
[2009/05/14 16:23:47 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\ATI
[2009/05/14 16:23:14 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Infineon
[2006/11/02 20:37:34 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\Media Center Programs
[2009/05/14 16:59:22 | 00,000,000 | ---D | M] -- C:\Users\Administrator\AppData\Roaming\SeriousBit
[2009/07/18 23:04:49 | 00,000,472 | ---- | M] () -- C:\Windows\Tasks\Ad-Aware Update (Weekly).job
[2009/07/20 11:10:16 | 00,000,882 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
[2009/07/20 11:17:01 | 00,000,886 | ---- | M] () -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
[2009/07/06 20:00:00 | 00,000,544 | ---- | M] () -- C:\Windows\Tasks\Norton Internet Security - Run Full System Scan - user.job
[2009/07/20 11:09:51 | 00,000,006 | -H-- | M] () -- C:\Windows\Tasks\SA.DAT
[2009/07/20 11:08:30 | 00,032,588 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009/07/20 11:28:22 | 00,000,438 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{115363CB-22DC-4F75-9764-E6B7FE238CF2}.job
========== Purity Check ========== ========== Custom Scans ========== < %systemroot%\System32\antiwpa.dll > < %systemroot%\SYSTEM32\wpa.dll > < %systemroot%\setup\scripts\biestart.exe > < %systemroot%\system32\drivers\royal.sys > < %systemroot%\system32\oobe\AntiWPA_Crypt.dll > < %TEMP%\antiwpa_crypt.dll > < %TEMP%\antiwpa.dll /s > < %PROGRAMFILES%\antiwpa.dll /s > < %systemroot%\system32\crypt.dll > < %TEMP%\crypt.dll > < %SYSTEMDRIVE%\*. >[2009/07/20 11:12:16 | 00,000,000 | ---D | M] -- C:
[2009/07/20 11:06:33 | 00,000,000 | -H-D | M] -- C:\$AVG8.VAULT$
[2009/05/14 16:23:06 | 00,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2008/07/02 16:53:44 | 00,000,000 | -H-D | M] -- C:\ASUS.SYS
[2009/05/30 14:44:57 | 00,000,000 | ---D | M] -- C:\ATI
[2008/04/23 14:27:51 | 00,000,000 | -HSD | M] -- C:\Boot
[2006/11/02 21:02:03 | 00,000,000 | -HSD | M] -- C:\Documents and Settings
[2008/07/02 16:09:37 | 00,000,000 | ---D | M] -- C:\Intel
[2008/07/02 15:37:34 | 00,000,000 | RH-D | M] -- C:\MSOCache
[2008/01/21 10:32:31 | 00,000,000 | ---D | M] -- C:\PerfLogs
[2009/07/19 13:48:07 | 00,000,000 | R--D | M] -- C:\Program Files
[2009/07/19 13:48:08 | 00,000,000 | -H-D | M] -- C:\ProgramData
[2009/07/20 11:22:53 | 00,000,000 | ---D | M] -- C:\Rooter$
[2009/07/19 13:31:25 | 00,000,000 | -HSD | M] -- C:\System Volume Information
[2009/05/14 16:21:05 | 00,000,000 | R--D | M] -- C:\Users
[2009/07/20 11:09:36 | 00,000,000 | ---D | M] -- C:\Windows
< %SYSTEMDRIVE%\*.* >[2009/07/20 11:09:36 | 00,001,116 | ---- | M] () -- C:\aaw7boot.log
[2006/09/19 05:43:36 | 00,000,024 | ---- | M] () -- C:\autoexec.bat
[2008/01/21 10:24:42 | 00,333,203 | RHS- | M] () -- C:\bootmgr
[2008/04/23 14:27:52 | 00,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2007/06/22 21:48:58 | 00,000,018 | ---- | M] () -- C:\CC20.txt
[2006/09/19 05:43:37 | 00,000,010 | ---- | M] () -- C:\config.sys
[2008/07/02 17:01:29 | 00,022,651 | ---- | M] () -- C:\devlist.txt
[2008/05/19 17:52:34 | 00,000,016 | ---- | M] () -- C:\Extra.log
[2008/05/23 09:48:49 | 01,048,576 | RH-- | M] () -- C:\F8Va.BIN
[2008/06/11 11:06:54 | 00,000,013 | ---- | M] () -- C:\F8VA_F8VR_VISTA.10
[2008/07/02 17:01:20 | 00,000,009 | ---- | M] () -- C:\Finish.log
[2009/07/11 22:25:06 | 67,005,8200 | ---- | M] () -- C:\KillingFloor.exe.log
[2008/04/22 17:40:32 | 00,000,031 | ---- | M] () -- C:\NERO.LOG
[2008/02/02 03:29:55 | 00,000,013 | ---- | M] () -- C:\NIS2008.TXT
[2007/03/16 07:18:45 | 00,000,025 | ---- | M] () -- C:\OFFICE2007_C.TXT
[2009/07/20 11:09:37 | 35,338,77248 | -HS- | M] () -- C:\pagefile.sys
[2008/07/02 03:48:48 | 00,000,105 | ---- | M] () -- C:\Pass.txt
[2008/05/08 19:48:09 | 00,001,948 | ---- | M] () -- C:\Patch.LOG
[2008/04/29 22:30:30 | 00,000,020 | ---- | M] () -- C:\READER_C.TXT
[2008/06/11 11:06:54 | 00,000,012 | ---- | M] () -- C:\RECOVERY.DAT
[2009/07/11 21:59:08 | 00,002,071 | ---- | M] () -- C:\revLoader.exe.log
[2008/07/02 16:20:09 | 00,000,426 | ---- | M] () -- C:\RHDSetup.log
[2009/07/20 11:24:18 | 00,019,508 | ---- | M] () -- C:\RootRepeal report 07-20-09 (11-24-18).txt
[2009/07/20 11:24:40 | 00,000,862 | ---- | M] () -- C:\RootRepeal report 07-20-09 (11-24-40).txt
[2009/07/20 11:25:16 | 00,000,862 | ---- | M] () -- C:\RootRepeal report 07-20-09 (11-25-16).txt
[2008/07/02 16:53:05 | 00,000,194 | ---- | M] () -- C:\setup.log
[2008/07/02 16:15:57 | 00,000,166 | ---- | M] () -- C:\SumHidd.txt
[2008/07/02 16:14:54 | 00,000,098 | ---- | M] () -- C:\SumOS.txt
[2008/04/17 08:32:52 | 00,000,024 | ---- | M] () -- C:\V541.TXT
< %PROGRAMFILES%\*. >[2009/07/19 13:48:07 | 00,000,000 | R--D | M] -- C:\Program Files
[2009/05/08 13:16:06 | 00,000,000 | ---D | M] -- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[2009/06/01 00:05:04 | 00,000,000 | ---D | M] -- C:\Program Files\Adobe
[2009/05/08 13:25:39 | 00,000,000 | ---D | M] -- C:\Program Files\asus
[2008/07/02 16:32:08 | 00,000,000 | ---D | M] -- C:\Program Files\ASUS Security Center
[2009/07/05 10:41:27 | 00,000,000 | ---D | M] -- C:\Program Files\ATI
[2008/07/02 16:17:30 | 00,000,000 | ---D | M] -- C:\Program Files\ATI Technologies
[2008/07/02 16:14:01 | 00,000,000 | ---D | M] -- C:\Program Files\ATK Hotkey
[2008/07/02 16:13:09 | 00,000,000 | ---D | M] -- C:\Program Files\ATKGFNEX
[2008/07/02 16:14:25 | 00,000,000 | ---D | M] -- C:\Program Files\ATKOSD2
[2009/07/16 12:34:55 | 00,000,000 | ---D | M] -- C:\Program Files\AVG
[2009/05/22 22:53:39 | 00,000,000 | ---D | M] -- C:\Program Files\CamStudio
[2009/07/17 23:17:47 | 00,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2009/07/14 21:44:27 | 00,000,000 | ---D | M] -- C:\Program Files\Common Files
[2009/05/14 21:27:44 | 00,000,000 | ---D | M] -- C:\Program Files\COMODO
[2008/07/02 15:51:23 | 00,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2009/07/12 11:06:42 | 00,000,000 | ---D | M] -- C:\Program Files\DivX
[2009/06/19 07:33:07 | 00,000,000 | ---D | M] -- C:\Program Files\Electronic Arts
[2009/05/14 16:58:50 | 00,000,000 | ---D | M] -- C:\Program Files\EnhanceMyVista
[2008/07/02 16:31:16 | 00,000,000 | ---D | M] -- C:\Program Files\Fingerprint Sensor
[2009/05/30 15:03:54 | 00,000,000 | ---D | M] -- C:\Program Files\Fraps
[2009/07/19 10:44:09 | 00,000,000 | ---D | M] -- C:\Program Files\Garena
[2009/05/16 23:05:06 | 00,000,000 | ---D | M] -- C:\Program Files\Google
[2008/07/02 16:30:40 | 00,000,000 | ---D | M] -- C:\Program Files\Infineon
[2009/06/19 07:13:58 | 00,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2008/07/02 16:09:47 | 00,000,000 | ---D | M] -- C:\Program Files\Intel
[2009/06/25 09:04:04 | 00,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2009/07/02 09:55:58 | 00,000,000 | ---D | M] -- C:\Program Files\Java
[2009/07/17 23:35:33 | 00,000,000 | ---D | M] -- C:\Program Files\Lavasoft
[2009/07/12 11:01:11 | 00,000,000 | ---D | M] -- C:\Program Files\Macromedia
[2009/07/19 13:48:15 | 00,000,000 | ---D | M] -- C:\Program Files\Malwarebytes' Anti-Malware
[2009/05/14 19:53:19 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft
[2006/11/02 20:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2008/07/02 15:44:19 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2008/07/02 15:44:32 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio
[2009/05/16 12:53:27 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2009/06/19 07:32:31 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft WSE
[2008/07/02 15:44:12 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2008/04/23 14:19:52 | 00,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2009/07/20 11:12:16 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2006/11/02 20:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2009/05/14 16:19:19 | 00,000,000 | ---D | M] -- C:\Program Files\Norton Internet Security
[2008/07/02 16:52:32 | 00,000,000 | ---D | M] -- C:\Program Files\P4G
[2009/06/30 21:12:06 | 00,000,000 | ---D | M] -- C:\Program Files\PowerISO
[2008/07/02 16:19:03 | 00,000,000 | ---D | M] -- C:\Program Files\Realtek
[2006/11/02 20:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2009/07/19 11:17:48 | 00,000,000 | ---D | M] -- C:\Program Files\Security Task Manager
[2009/07/14 21:45:28 | 00,000,000 | R--D | M] -- C:\Program Files\Skype
[2009/07/18 23:04:35 | 00,000,000 | ---D | M] -- C:\Program Files\Spybot - Search & Destroy
[2009/07/20 11:11:38 | 00,000,000 | ---D | M] -- C:\Program Files\Steam
[2009/05/14 15:39:16 | 00,000,000 | ---D | M] -- C:\Program Files\Symantec
[2008/07/02 16:48:13 | 00,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2009/06/15 10:00:34 | 00,000,000 | ---D | M] -- C:\Program Files\SystemRequirementsLab
[2009/07/18 10:43:07 | 00,000,000 | ---D | M] -- C:\Program Files\Trend Micro
[2006/11/02 21:01:55 | 00,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2009/05/16 14:09:06 | 00,000,000 | ---D | M] -- C:\Program Files\Veoh Networks
[2009/06/15 15:56:03 | 00,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2008/07/02 16:33:19 | 00,000,000 | ---D | M] -- C:\Program Files\WIDCOMM
[2008/04/23 14:19:52 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Calendar
[2008/04/23 14:19:52 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Collaboration
[2008/04/23 14:19:52 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2008/04/23 14:19:52 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Journal
[2009/05/14 19:53:14 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Live
[2009/05/14 19:52:55 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Live SkyDrive
[2009/07/16 11:16:14 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2009/05/15 12:11:32 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2006/11/02 20:37:34 | 00,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2008/04/23 14:19:52 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Photo Gallery
[2008/04/23 14:19:52 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2009/05/14 19:53:56 | 00,000,000 | ---D | M] -- C:\Program Files\WinRAR
[2008/07/02 16:28:24 | 00,000,000 | ---D | M] -- C:\Program Files\Wireless Console 2
[2009/07/17 23:17:44 | 00,000,000 | ---D | M] -- C:\Program Files\Yahoo!
< set /c >ALLUSERSPROFILE=C:\ProgramData
APPDATA=C:\Users\Administrator\AppData\Roaming
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=USER-PC
ComSpec=C:\Windows\system32\cmd.exe
configsetroot=C:\Windows\ConfigSetRoot
DFSTRACINGON=FALSE
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Users\Administrator
LOCALAPPDATA=C:\Users\Administrator\AppData\Local
LOGONSERVER=\\USER-PC
MOZ_CRASHREPORTER_DATA_DIRECTORY=C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Crash Reports
MOZ_CRASHREPORTER_RESTART_ARG_0=C:\Program Files\Mozilla Firefox\firefox.exe
MOZ_CRASHREPORTER_STRINGS_OVERRIDE=C:\Program Files\Mozilla Firefox\crashreporter-override.ini
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\Program Files\Mozilla Firefox;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\bin;C:\Program Files\Common Files\DivX Shared\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 6 Model 23 Stepping 6, GenuineIntel
PROCESSOR_LEVEL=6
PROCESSOR_REVISION=1706
ProgramData=C:\ProgramData
ProgramFiles=C:\Program Files
PROMPT=$P$G
PUBLIC=C:\Users\Public
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\Windows
TEMP=C:\Users\ADMINI~1\AppData\Local\Temp
TMP=C:\Users\ADMINI~1\AppData\Local\Temp
TRACE_FORMAT_SEARCH_PATH=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
USERDOMAIN=user-PC
USERNAME=Administrator
USERPROFILE=C:\Users\Administrator
windir=C:\Windows
< End of report >
OTL Extras logfile created on: 7/20/2009 11:26:19 AM - Run 1
OTL by OldTimer - Version 3.0.9.2 Folder = C:\Users\Administrator\Downloads
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18783)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
2.00 Gb Total Physical Memory | 1.53 Gb Available Physical Memory | 76.69% Memory free
4.00 Gb Paging File | 4.00 Gb Available in Paging File | 100.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116.44 Gb Total Space | 55.68 Gb Free Space | 47.81% Space Free | Partition Type: NTFS
Drive D: | 106.67 Gb Total Space | 106.58 Gb Free Space | 99.91% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: USER-PC
Current User Name: Administrator
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{646FF092-82AD-44F8-B38B-A1205D0C80F9}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C34B2232-93CE-46F5-AD7B-8A8137EA29E2}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{D295ED4F-2AC9-41AF-9813-80F30D1B4B04}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0DBCC135-23DC-40DD-9982-2B5B5027FD6B}" = dir=in | app=c:\program files\avg\avg8\avgnsx.exe |
"{2221AE3A-3ADC-41D9-8FB5-3658BCB3BFE7}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2284B9E3-FDDF-4B89-8002-FBE313FF3721}" = dir=in | app=c:\program files\avg\avg8\avgupd.exe |
"{2D403164-A4BE-4390-AFF1-A6206A58A96F}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{40417F49-241B-4FD3-9AE1-699DCC9DF92F}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{606FE69A-8CE1-4594-A7BB-3DA211D861F4}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{79FC000D-3922-4DFD-8E7E-556BE988FE0E}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{BBD7AA59-C160-4DB8-8D05-EFC795B62BA8}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"TCP Query User{40BD8D24-F900-4459-88BA-1FB5990C1D14}C:\users\administrator\desktop\killingfloor.lovemaria.vnz\killingfloor.lovemaria.vnz\system\killingfloor.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\killingfloor.lovemaria.vnz\killingfloor.lovemaria.vnz\system\killingfloor.exe |
"TCP Query User{61FB08E3-67FB-4FDA-B6E5-7C924D5FB837}C:\program files\steam\steamapps\nuriko_1888\zombie panic! source\hl2.exe" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\nuriko_1888\zombie panic! source\hl2.exe |
"TCP Query User{8954FE70-81A7-4EA1-95DC-F3EC29C648B9}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
"TCP Query User{B50AD643-0F6F-4A5E-8FBB-8967278E1E20}C:\program files\garena\garena.exe" = protocol=6 | dir=in | app=c:\program files\garena\garena.exe |
"TCP Query User{EA191C83-C11E-4A41-B2AF-D804F686BACB}C:\users\administrator\desktop\left 4 dead\left4dead.exe" = protocol=6 | dir=in | app=c:\users\administrator\desktop\left 4 dead\left4dead.exe |
"TCP Query User{FF3F95BD-6557-4930-BA8A-371663C85438}C:\program files\steam\steamapps\nuriko_1888\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\nuriko_1888\team fortress 2\hl2.exe |
"UDP Query User{10203EA6-C28E-41D5-9798-28C93EA9658F}C:\program files\steam\steamapps\nuriko_1888\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\nuriko_1888\team fortress 2\hl2.exe |
"UDP Query User{123D3B43-D807-40B5-B3C6-AC55F1666C08}C:\program files\garena\garena.exe" = protocol=17 | dir=in | app=c:\program files\garena\garena.exe |
"UDP Query User{2F195544-FC52-4642-B6D4-72D2CD6D9429}C:\users\administrator\desktop\left 4 dead\left4dead.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\left 4 dead\left4dead.exe |
"UDP Query User{69DD4C5D-4947-4AB7-85B4-DA243CD8135C}C:\users\administrator\desktop\killingfloor.lovemaria.vnz\killingfloor.lovemaria.vnz\system\killingfloor.exe" = protocol=17 | dir=in | app=c:\users\administrator\desktop\killingfloor.lovemaria.vnz\killingfloor.lovemaria.vnz\system\killingfloor.exe |
"UDP Query User{A5FF9C8A-A1A1-4BBF-B845-8574AC180FD1}C:\program files\steam\steamapps\nuriko_1888\zombie panic! source\hl2.exe" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\nuriko_1888\zombie panic! source\hl2.exe |
"UDP Query User{D5A49030-4616-431E-B3E0-12E42C6BF8B0}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{004C5DA2-2051-4D25-94BA-51CF810C91EB}" = LightScribe System Software 1.12.37.1
"{02585BB1-50A4-B385-CBF8-249525AE5E52}" = Catalyst Control Center Localization Chinese Traditional
"{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = WIDCOMM Bluetooth Software
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0AAA9C97-74D4-47CE-B089-0B147EF3553C}" = Windows Live Messenger
"{0B405069-2014-9887-6991-3F39A9EB33B4}" = Catalyst Control Center Localization Turkish
"{0FBFB011-811D-3E67-1C3C-4C86AD24262A}" = CCC Help Turkish
"{109677F9-12C8-6858-2FCA-9968EE8836AD}" = CCC Help Thai
"{109EE843-C739-5A5B-43D3-8CA1DABE3503}" = CCC Help Norwegian
"{113E3C58-8E27-2442-799C-6F11C5235969}" = CCC Help Dutch
"{135FF936-8C84-E080-650F-E1627A3E03A5}" = CCC Help Swedish
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{14E82399-E221-43EE-B819-055A00E499C3}" = Infineon TPM Professional Package
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{25430F16-F6A6-B887-0363-1A5488F842C1}" = CCC Help Czech
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java™ 6 Update 13
"{2BD5C305-1B27-4D41-B690-7A61172D2FEB}" = Macromedia Flash 8
"{2BE474F5-0F89-AE2C-C5C4-9F541352D047}" = CCC Help Polish
"{2DDDED4C-A0F7-54D4-6BDB-9611D1E80666}" = Catalyst Control Center Localization Greek
"{31478BE1-CDE5-4753-A8B2-F6D4BC1FBE09}" = Component Framework
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java™ 6 Update 3
"{3258C57F-61D3-26AD-5282-B23981B80760}" = Catalyst Control Center Localization Dutch
"{329E4615-6C28-1F0C-84DC-3A2FFA2A507A}" = Catalyst Control Center Localization Russian
"{354ECAE4-F319-B1EF-CB21-7498BF1B2759}" = CCC Help Portuguese
"{3672B097-EA69-4BFE-B92F-29AE6D9D2B34}" = Norton Internet Security
"{3798B367-066B-E391-84D6-E9ADEA8159AB}" = Catalyst Control Center Localization Chinese Standard
"{379BD61E-2A5C-492D-88C2-E67415E87552}" = Symantec Real Time Storage Protection Component
"{37E2973D-BD2B-6406-08C9-CC9E5C9CC92B}" = Catalyst Control Center Localization Finnish
"{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}" = ATK Hotkey
"{3AA3045B-4598-CBB7-DB8A-761A1BD7A614}" = Skins
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40580068-9B10-40B5-9548-536CE88AB23C}" = ITECIR
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
"{4D59FEE2-B338-2225-2E0D-C4EF3AA9246D}" = Catalyst Control Center Localization Italian
"{508311BE-D8D1-EE89-0FA2-279C94B96C47}" = Catalyst Control Center Localization Danish
"{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}" = Macromedia Extension Manager
"{55A6283C-638A-4EE0-B491-51118554BDA2}" = Norton Confidential Core
"{563B259B-469F-3444-2F9F-2D3E075E1778}" = CCC Help Spanish
"{57CC35EF-9B38-0DE7-0708-054502D91E6E}" = Catalyst Control Center Localization Spanish
"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.55.01
"{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}" = ATKOSD2
"{5C4263A0-401F-AD0E-486F-C2403BA54CB1}" = CCC Help Greek
"{62120008-8E1E-4807-860D-A8B48F8552DB}" = Norton Protection Center
"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{6508E8D2-C9B6-4F06-0762-EDD2FDDC5226}" = CCC Help Finnish
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{689C81C6-4C6E-4842-AABE-E325037A985E}" = SymNet
"{6B77A7F6-DD63-4F13-A6FF-83137A5AC354}" = ASUS CopyProtect
"{6CF2BBB8-E098-2598-9C67-AD42B269E5BE}" = CCC Help Russian
"{6E32B134-CA8D-49DD-B94C-0DB155CE70B5}" = ccc-Branding
"{704C3F9F-A925-67CC-6F67-47E5A0EA2948}" = CCC Help English
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{77772678-817F-4401-9301-ED1D01A8DA56}" = SPBBC 32bit
"{77FFBA7E-0973-4F39-BBDB-AC2F537578D2}" = Norton AntiVirus
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{83F73CB1-7705-49D1-9852-84D839CA2A45}" = Wireless Console 2
"{8448D435-7543-411F-A0CC-7AA40D815E8F}" = Express Gate
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{885A63EA-382B-4DD4-A755-14809B8557D6}" = Macromedia Flash Player 8
"{88D0C4F4-4B5E-4855-D59C-507DDEB06444}" = Catalyst Control Center Graphics Full New
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8BF2C401-02CE-424D-BC26-6C4F9FB446B6}" = Macromedia Flash 8 Video Encoder
"{8CFEBE9C-F29F-4C49-80E0-7106970F8734}" = Power4Gear eXtreme
"{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}" = Choice Guard
"{90120000-0015-0404-0000-0000000FF1CE}" = Microsoft Office Access MUI (Chinese (Traditional)) 2007
"{90120000-0015-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0804-0000-0000000FF1CE}" = Microsoft Office Access MUI (Chinese (Simplified)) 2007
"{90120000-0015-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0015-0C04-0000-0000000FF1CE}" = Microsoft Office Access MUI (Chinese (Traditional)) 2007
"{90120000-0015-0C04-0000-0000000FF1CE}_PROHYBRIDR_{45EDF005-5D73-4D75-9BD7-3FC67DB6FD0D}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0404-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Chinese (Traditional)) 2007
"{90120000-0016-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0804-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Chinese (Simplified)) 2007
"{90120000-0016-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0C04-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Chinese (Traditional)) 2007
"{90120000-0016-0C04-0000-0000000FF1CE}_PROHYBRIDR_{45EDF005-5D73-4D75-9BD7-3FC67DB6FD0D}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0404-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007
"{90120000-0018-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0804-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Chinese (Simplified)) 2007
"{90120000-0018-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0C04-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Chinese (Traditional)) 2007
"{90120000-0018-0C04-0000-0000000FF1CE}_PROHYBRIDR_{45EDF005-5D73-4D75-9BD7-3FC67DB6FD0D}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0404-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Chinese (Traditional)) 2007
"{90120000-0019-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0804-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Chinese (Simplified)) 2007
"{90120000-0019-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0C04-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Chinese (Traditional)) 2007
"{90120000-0019-0C04-0000-0000000FF1CE}_PROHYBRIDR_{45EDF005-5D73-4D75-9BD7-3FC67DB6FD0D}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0404-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Chinese (Traditional)) 2007
"{90120000-001A-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0804-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Chinese (Simplified)) 2007
"{90120000-001A-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0C04-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Chinese (Traditional)) 2007
"{90120000-001A-0C04-0000-0000000FF1CE}_PROHYBRIDR_{45EDF005-5D73-4D75-9BD7-3FC67DB6FD0D}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0404-0000-0000000FF1CE}" = Microsoft Office Word MUI (Chinese (Traditional)) 2007
"{90120000-001B-0404-0000-0000000FF1CE}_PROHYBRIDR_{E600B433-47CB-4AFC-90BF-2958E8E7EF99}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0804-0000-0000000FF1CE}" = Microsoft Office Word MUI (Chinese (Simplified)) 2007
"{90120000-001B-0804-0000-0000000FF1CE}_PROHYBRIDR_{18EBA2E9-1310-46B3-91A2-536B0F314F2B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0C04-0000-0000000FF1CE}" = Microsoft Office Word MUI (Chinese (Traditional)) 2007
"{90120000-001B-0C04-0000-0000000FF1CE}_PROHYBRIDR_{45EDF005-5D73-4D75-9BD7-3FC67DB6FD0D}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0404-0000-0000000FF1CE}" = Microsoft Office Proof (Chinese (Traditional)) 2007
"{90120000-001F-0404-0000-0000000FF1CE}_PROHYBRIDR_{33FA7680-10ED-444E-BC72-214064317283}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROHYBRIDR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROHYBRIDR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0804-0000-0000000FF1CE}" = Microsoft Office Proof (Chinese (Simplified)) 2007
"{90120000-001F-0804-0000-0000000FF1CE}_PROHYBRIDR_{82E853AD-6911-4EA9-9EB0-2F9BE7747878}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROHYBRIDR_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0028-0404-0000-0000000FF1CE}" = Microsoft Office IME (Chinese (Traditional)) 2007
"{90120000-0028-0404-0000-0000000FF1CE}_PROHYBRIDR_{5E6C6E79-40BE-491B-9ABF-C665667E1B07}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0028-0804-0000-0000000FF1CE}" = Microsoft Office IME (Chinese (Simplified)) 2007
"{90120000-0028-0804-0000-0000000FF1CE}_PROHYBRIDR_{4029CB10-E410-41AD-BB3F-052C95243407}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0404-0000-0000000FF1CE}" = Microsoft Office Proofing (Chinese (Traditional)) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-002C-0804-0000-0000000FF1CE}" = Microsoft Office Proofing (Chinese (Simplified)) 2007
"{90120000-002C-0C04-0000-0000000FF1CE}" = Microsoft Office Proofing (Chinese (Traditional)) 2007
"{90120000-006E-0404-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Chinese (Traditional)) 2007
"{90120000-006E-0404-0000-0000000FF1CE}_PROHYBRIDR_{3F96DD0A-F509-4CBD-8130-B3B3194A9C3D}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0804-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Chinese (Simplified)) 2007
"{90120000-006E-0804-0000-0000000FF1CE}_PROHYBRIDR_{A844CE03-EE56-4609-808D-946E33AA9236}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0C04-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Chinese (Traditional)) 2007
"{90120000-006E-0C04-0000-0000000FF1CE}_PROHYBRIDR_{364CCAC1-F404-461B-8025-8586FC7CA772}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROHYBRIDR_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROHYBRIDR_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{9082C26C-5F9C-7413-8852-72C95AA270AD}" = CCC Help German
"{91120000-0031-0000-0000-0000000FF1CE}" = Microsoft Office Professional Hybrid 2007
"{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91271845-DC5C-2EBC-FF8E-C3048DB03681}" = Catalyst Control Center Localization German
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9790BE7A-1AEC-66F0-8690-E343EA59385E}" = Catalyst Control Center Core Implementation
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C466A40-D7B9-1CD5-37FC-B48E37F76BF3}" = Catalyst Control Center Graphics Light
"{9F9E65B2-9B11-376F-FD79-CE5254984483}" = Catalyst Control Center Localization Czech
"{A3DC5075-F249-4D4C-9615-F7F92F3B883F}" = ccc-core-static
"{A6CC1263-DB74-7345-1682-9201F5795AE3}" = Catalyst Control Center Localization French
"{A85DA7E8-7A70-5597-B843-524C9650EB55}" = CCC Help French
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AB35A68B-8CD1-5996-574B-7B2FDDDCD0ED}" = Catalyst Control Center Localization Thai
"{AC76BA86-7AD7-1033-7B44-A81300000003}" = Adobe Reader 8.1.5
"{AC76BA86-7AD7-1033-7B44-A81300000003}_814" = KB408682
"{ADB14A47-D542-8CCC-93EE-1918978BE77D}" = Catalyst Control Center Localization Norwegian
"{ADCE7F4F-8187-8A6F-FF55-AD5226FA3590}" = CCC Help Japanese
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B24E05CC-46FF-4787-BBB8-5CD516AFB118}" = ccCommon
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6104ADE-D653-C2D4-3074-68662F851E01}" = CCC Help Korean
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BB6FB731-1B29-0CDA-29D2-9479F809F08E}" = Catalyst Control Center Localization Swedish
"{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}" = Nokia Connectivity Cable Driver
"{BD0BF901-D727-7010-2CD6-2BA00D162F51}" = Catalyst Control Center Localization Portuguese
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology
"{C1C185CA-C531-49F5-A6FA-B838405A049D}" = Norton Internet Security
"{C29DCFCE-B9B5-0B1A-598C-9E35053EB60A}" = CCC Help Danish
"{C4C7E885-56B5-8546-1B02-A703BC876D35}" = Catalyst Control Center Graphics Full Existing
"{C5926336-2612-98F2-7A01-A80342FE3D42}" = Catalyst Control Center Localization Japanese
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C6CA8874-5F22-4AF0-9BE3-016BF299C536}" = Windows Live Essentials
"{CB7CEE02-C16F-FA3D-974A-338EBAA48229}" = Catalyst Control Center Graphics Previews Common
"{CE2C3382-74C8-FDE7-A431-DF27BDBAAA5A}" = ccc-utility
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEE5F860-7FAB-80D0-E7CF-022C18B95E25}" = ATI Catalyst Install Manager
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{D836FEAF-AEDB-E06E-56FE-1BDEFD57920C}" = CCC Help Italian
"{D8D4AF9A-6ADE-4B14-A7F5-BA858792729E}" = ASUS Security Protect Manager
"{DE10AB76-4756-4913-BE25-55D1C1051F9A}" = WinFlash
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{E099D6F3-1262-BD99-6787-B9AD7A8B8F59}" = Catalyst Control Center Localization Polish
"{E2941BAB-3298-1364-E3DE-044A0F366F7D}" = Catalyst Control Center Localization Hungarian
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E3EFA461-EB83-4C3B-9C47-2C1D58A01555}" = Norton AntiVirus Help
"{E531E030-962D-9829-FDB4-D7588A2076D9}" = Catalyst Control Center Graphics Previews Vista
"{E80F62FF-5D3C-4A19-8409-9721F2928206}" = LiveUpdate (Symantec Corporation)
"{EB4DF30B-102B-4F0C-927A-D50E037A325D}" = AuthenTec Fingerprint Sensor Minimum Install
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}" = AppCore
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1362843-0E0E-4F74-8662-724CF101ADCE}" = Skype web features
"{F3ADEBFD-2356-0A0B-E42D-AEE114CC54E1}" = CCC Help Chinese Traditional
"{F4AA81D1-CB54-E81C-B5D7-72FFF67A2B6C}" = Catalyst Control Center Localization Korean
"{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call
"{FA017236-DFDE-2780-F7BF-D6691A5A29CF}" = CCC Help Chinese Standard
"{FF11A41D-A188-D68E-469A-EE858A02A749}" = CCC Help Hungarian
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Ad-Aware" = Ad-Aware
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Agere Systems Soft Modem" = Agere Systems HDA Modem
"Asus_F8_ScreenSaver" = Asus_F8_ScreenSaver
"AVG8Uninstall" = AVG Free 8.5
"CamStudio" = CamStudio
"CCleaner" = CCleaner (remove only)
"COMODO Internet Security" = COMODO Internet Security
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"EADM" = EA Download Manager
"EnhanceMyVista_is1" = EnhanceMyVista
"Fraps" = Fraps (remove only)
"Garena" = Garena
"Google Chrome" = Google Chrome
"HijackThis" = HijackThis 2.0.2
"L4DSP" = Left 4 Dead Standalone Patch
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.0.11)" = Mozilla Firefox (3.0.11)
"PowerISO" = PowerISO
"PROHYBRIDR" = 2007 Microsoft Office system
"PsuedoLiveUpdate" = LiveUpdate (Symantec Corporation)
"Security Task Manager" = Security Task Manager 1.7h
"Steam App 17500" = Zombie Panic! Source
"Steam App 17520" = Synergy
"Steam App 211" = Source SDK
"Steam App 220" = Half-Life 2
"Steam App 440" = Team Fortress 2
"SymSetup.{C1C185CA-C531-49F5-A6FA-B838405A049D}" = Norton Internet Security (Symantec Corporation)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"SystemRequirementsLab" = System Requirements Lab
"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam
"Veoh Video Compass" = Veoh Video Compass
"Veoh Web Player Beta" = Veoh Web Player
"VLC media player" = VLC media player 0.9.9
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"Yahoo! Companion" = Yahoo! Toolbar
========== Last 10 Event Log Errors ========== [ Application Events ]
Error - 6/18/2009 5:03:16 AM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/18/2009 7:06:41 PM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/18/2009 7:32:19 PM | Computer Name = user-PC | Source = System Restore | ID = 8193
Description =
Error - 6/20/2009 2:21:21 AM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/21/2009 12:05:02 AM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/21/2009 10:22:25 PM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/22/2009 12:19:02 AM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/22/2009 11:22:05 AM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/22/2009 9:42:01 PM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
Error - 6/23/2009 5:28:59 AM | Computer Name = user-PC | Source = WinMgmt | ID = 10
Description =
[ ASUS Security Protect Manager Events ]
Error - 5/15/2009 11:59:03 PM | Computer Name = user-PC | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: Administrator@WIN-EG5CXIJ6N6R
Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 5/15/2009 11:59:13 PM | Computer Name = user-PC | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: Administrator@WIN-EG5CXIJ6N6R
Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 5/19/2009 1:04:26 AM | Computer Name = user-PC | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: Administrator@WIN-EG5CXIJ6N6R
Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 5/19/2009 1:04:40 AM | Computer Name = user-PC | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: Administrator@WIN-EG5CXIJ6N6R
Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 5/19/2009 1:05:02 AM | Computer Name = user-PC | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: Administrator@WIN-EG5CXIJ6N6R
Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
Error - 6/6/2009 10:34:10 PM | Computer Name = user-PC | Source = AuthWiz | ID = 100796068
Description = The submitted credentials were rejected. User: Administrator@WIN-EG5CXIJ6N6R
Credentials:
Password Error: (0xC516020B) The system could not log you on. Verify your user
name and domain are correct and then type your password again. Letters in passwords
must be typed using the correct case. Verify that Caps Lock is off.
[ System Events ]
Error - 7/4/2009 9:47:30 AM | Computer Name = user-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 7/4/2009 12:31:41 PM | Computer Name = user-PC | Source = DCOM | ID = 10010
Description =
Error - 7/4/2009 10:37:51 PM | Computer Name = user-PC | Source = HTTP | ID = 15016
Description =
Error - 7/4/2009 10:38:25 PM | Computer Name = user-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 7/5/2009 9:34:34 PM | Computer Name = user-PC | Source = HTTP | ID = 15016
Description =
Error - 7/5/2009 9:35:04 PM | Computer Name = user-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 7/7/2009 11:06:01 AM | Computer Name = user-PC | Source = HTTP | ID = 15016
Description =
Error - 7/7/2009 11:08:22 AM | Computer Name = user-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
Error - 7/7/2009 8:37:13 PM | Computer Name = user-PC | Source = HTTP | ID = 15016
Description =
Error - 7/7/2009 8:37:40 PM | Computer Name = user-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description =
< End of report >