OTL logfile created on: 11/8/2009 12:01:50 AM - Run 2
OTL by OldTimer - Version 3.1.4.0 Folder = C:\Documents and Settings\Laura\My Documents\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

510.48 Mb Total Physical Memory | 190.11 Mb Available Physical Memory | 37.24% Memory free
1.22 Gb Paging File | 0.90 Gb Available in Paging File | 73.81% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 74.53 Gb Total Space | 56.49 Gb Free Space | 75.80% Space Free | Partition Type: NTFS
Drive D: | 2.87 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: YOUR-E7NDL1JV3J
Current User Name: Laura
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Laura\My Documents\Downloads\OTL(2).exe (OldTimer Tools)
PRC - C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
PRC - C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
PRC - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files\AVG\AVG8\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\AVG\AVG8\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
PRC - C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
PRC - C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe (Viewpoint Corporation)
PRC - C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe (Viewpoint Corporation)
PRC - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe (Network Associates, Inc.)
PRC - C:\Program Files\Network Associates\VirusScan\vstskmgr.exe (Network Associates, Inc.)
PRC - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe (Network Associates, Inc.)
PRC - C:\WINDOWS\system32\ati2evxx.exe ()
PRC - C:\WINDOWS\system32\BCMWLTRY.EXE (Motorola Inc.)
PRC - C:\WINDOWS\system32\WLTRYSVC.EXE ()
PRC - C:\WINDOWS\system32\slserv.exe ( )
PRC - C:\Program Files\Common Files\AOL\ACS\acsd.exe (America Online, Inc.)
PRC - C:\WINDOWS\system32\opeia.exe (Andreas Hausladen)
PRC - C:\WINDOWS\system32\FastNetSrv.exe (Netopsystems AG)
PRC - C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)
PRC - C:\WINDOWS\system32\MsPMSPSv.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\MsPMSPSv.exe (Microsoft Corporation)


========== Modules (SafeList) ==========

MOD - C:\Documents and Settings\Laura\My Documents\Downloads\OTL(2).exe (OldTimer Tools)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll (Microsoft Corporation)
MOD - C:\WINDOWS\system32\wbem\framedyn.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (Pml Driver HPZ12) -- File not found
SRV - (avg8wd) -- C:\Program Files\AVG\AVG8\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (iPod Service) -- C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
SRV - (Apple Mobile Device) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Bonjour Service) -- C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
SRV - (FontCache3.0.0.0) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\Presen tationFontCache.exe (Microsoft Corporation)
SRV - (idsvc) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe (Microsoft Corporation)
SRV - (aspnet_state) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspn et_state.exe (Microsoft Corporation)
SRV - (helpsvc) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SRV - (Viewpoint Manager Service) -- C:\Program Files\Viewpoint\Common\ViewpointService.exe (Viewpoint Corporation)
SRV - (WMPNetworkSvc) -- C:\Program Files\Windows Media Player\WMPNetwk.exe (Microsoft Corporation)
SRV - (McTaskManager) -- C:\Program Files\Network Associates\VirusScan\vstskmgr.exe (Network Associates, Inc.)
SRV - (McAfeeFramework) -- C:\Program Files\Network Associates\Common Framework\FrameworkService.exe (Network Associates, Inc.)
SRV - (Ati HotKey Poller) -- C:\WINDOWS\system32\ati2evxx.exe ()
SRV - (WLTRYSVC) -- C:\WINDOWS\System32\wltrysvc.exe ()
SRV - (SLService) -- C:\WINDOWS\System32\slserv.exe ( )
SRV - (AOL ACS) -- C:\Program Files\Common Files\AOL\ACS\acsd.exe (America Online, Inc.)
SRV - (ose) -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (fastnetsrv) -- C:\WINDOWS\system32\FastNetSrv.exe (Netopsystems AG)
SRV - (BtwSrv) -- C:\WINDOWS\system32\BtwSrv.dll (FTD2XX Software Technology)
SRV - (WANMiniportService) -- C:\WINDOWS\wanmpsvc.exe (America Online, Inc.)
SRV - (WMDM PMSP Service) -- C:\WINDOWS\system32\MsPMSPSv.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (AvgTdiX) -- C:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgLdx86) -- C:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) -- C:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (GEARAspiWDM) -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV - (atapi) -- C:\WINDOWS\System32\DRIVERS\atapi.sys ()
DRV - (Secdrv) -- C:\WINDOWS\system32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (MDC8021X) -- C:\WINDOWS\system32\drivers\mdc8021x.sys (Meetinghouse Data Communications)
DRV - (FETND5BV) -- C:\WINDOWS\system32\drivers\fetnd5bv.sys (VIA Technologies, Inc. )
DRV - (NaiAvFilter1) -- C:\WINDOWS\system32\drivers\naiavf5x.sys (Network Associates, Inc.)
DRV - (NaiAvTdi1) -- C:\WINDOWS\system32\drivers\mvstdi5x.sys (Network Associates, Inc.)
DRV - (RecAgent) -- C:\WINDOWS\system32\drivers\recagent.sys (Smart Link)
DRV - (HPZius12) -- C:\WINDOWS\system32\drivers\HPZius12.sys (HP)
DRV - (HPZid412) -- C:\WINDOWS\system32\drivers\hpzid412.sys (HP)
DRV - (HPZipr12) -- C:\WINDOWS\system32\drivers\HPZipr12.sys (HP)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (ASCTRM) -- C:\WINDOWS\system32\drivers\asctrm.sys (Windows (R) 2000 DDK provider)
DRV - (ALCXWDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ALCXSENS) -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS (Sensaura Ltd)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (SynTP) -- C:\WINDOWS\system32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (LSWPCv4) -- C:\WINDOWS\system32\drivers\rtl8180.sys (Realtek Semiconductor Corporation )
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (Mtlstrm) -- C:\WINDOWS\system32\drivers\mtlstrm.sys ( )
DRV - (SlNtHal) -- C:\WINDOWS\system32\drivers\slnthal.sys ( )
DRV - (Slntamr) -- C:\WINDOWS\system32\drivers\slntamr.sys ( )
DRV - (NtMtlFax) -- C:\WINDOWS\system32\drivers\ntmtlfax.sys ( )
DRV - (Mtlmnt5) -- C:\WINDOWS\system32\drivers\mtlmnt5.sys ( )
DRV - (SlWdmSup) -- C:\WINDOWS\system32\drivers\slwdmsup.sys (Vireo Software)
DRV - (FETNDISB) -- C:\WINDOWS\system32\drivers\fetnd5b.sys (VIA Technologies, Inc. )
DRV - (NTSIM) -- C:\WINDOWS\system32\ntsim.sys (VIA Networking, Inc. )
DRV - (Ptilink) -- C:\WINDOWS\system32\drivers\ptilink.sys (Parallel Technologies, Inc.)
DRV - (wanatw) -- C:\WINDOWS\system32\drivers\wanatw4.sys (America Online, Inc.)
DRV - (viaagp1) -- C:\WINDOWS\System32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Bing
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = Bing
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Assistant = http://ie.search.msn.com/{sub_rfc1766}/srchasst/srchasst.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Bing
IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Bing
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = eMachines Official Site: Home
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\CNNSI, = search.sportsillustrated.cnn.com/pages/search.jsp?query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Dictionary, = dictionary.reference.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Google, = google.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleGroups, = groups-beta.google.com/groups?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleImages, = images.google.com/images?hl=en&lr=&q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\GoogleNews, = news.google.com/news?tab=gn&hl=en&ie=UTF-8&q=%s&btnG=Search+News
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\KB, = support.microsoft.com/search/default.aspx?query=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\KBDLL, = support.microsoft.com/dllhelp/default.aspx?dlltype=file&l=55&alpha=%s&S=1
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Movies, = fandango.com/my_box_office.asp?searchby=2&txtCityZip=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\MSN, = search.msn.com/results.asp?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Thesaurus, = thesaurus.reference.com/search?q=%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Weather, = weather.com/weather/local/%s
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\Yahoo, = search.yahoo.com/search?p=%s
IE - HKCU\..\URLSearchHook: *{03402f96-3dc7-4285-bc50-9e81fefafe43} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaulturl: "http://aim.search.aol.com/search/search?query={searchTerms}&invocationType=tb50-ff-aim-chromesbox-en-us"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.aol.com/?src=aim&ncid=snsusaimc00000001"
FF - prefs.js..extensions.enabledItems: {c2f863cd-0429-48c7-bb54-db756a951760}:5.96.5.1
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:8.5.0.424
FF - prefs.js..extensions.enabledItems: avg@igeared:2.609.002.003
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07
FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20091028
FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.4
FF - prefs.js..keyword.URL: "http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p="


FF - HKLM\software\mozilla\CompuServe 7.0\Extensions\\:
FF - HKLM\software\mozilla\CompuServe 7.0\Extensions\\Components: C:\Program Files\Common Files\csshare\plugins0942 [2009/11/02 01:56:01 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\CompuServe 7.0\Extensions\\Plugins: C:\Program Files\Common Files\csshare\plugins0942 [2009/11/02 01:56:01 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5 b-e555-4543-90e2-c3908898db71}: C:\Program Files\AVG\AVG8\Firefox [2009/11/03 11:51:38 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\avg@igea red: C:\Program Files\AVG\AVG8\Toolbar\Firefox\avg@igeared [2009/10/15 14:33:09 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{20a8264 5-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009/10/21 07:27:05 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009/11/07 02:54:24 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.4\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009/11/07 02:54:24 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Netscape 6 6.2.1\Extensions\\Components: C:\Program Files\Netscape\Netscape 6\Components [2009/10/15 19:46:37 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Netscape 6 6.2.1\Extensions\\Plugins: C:\Program Files\Netscape\Netscape 6\Plugins [2009/11/02 01:56:01 | 00,000,000 | ---D | M]

[2008/10/17 22:33:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\Mozilla\Extensions
[2008/10/17 22:33:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
[2009/11/07 01:26:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\Mozilla\Firefox\Profiles\jsyfhrre.default\ext ensions
[2009/10/21 16:43:29 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\Mozilla\Firefox\Profiles\jsyfhrre.default\ext ensions\{20a82645-c095-46ed-80e3-08825760534b}
[2009/11/07 01:26:24 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\Mozilla\Firefox\Profiles\jsyfhrre.default\ext ensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2009/10/22 23:18:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\Mozilla\Firefox\Profiles\jsyfhrre.default\ext ensions\{c2f863cd-0429-48c7-bb54-db756a951760}
[2009/10/13 22:26:11 | 00,004,207 | ---- | M] () -- C:\Documents and Settings\Laura\Application Data\Mozilla\Firefox\Profiles\jsyfhrre.default\sea rchplugins\aim-search-1.xml
[2009/10/22 23:18:50 | 00,004,546 | ---- | M] () -- C:\Documents and Settings\Laura\Application Data\Mozilla\Firefox\Profiles\jsyfhrre.default\sea rchplugins\aim-search-2.xml
[2008/11/02 01:53:33 | 00,001,769 | ---- | M] () -- C:\Documents and Settings\Laura\Application Data\Mozilla\Firefox\Profiles\jsyfhrre.default\sea rchplugins\aim-search.xml
[2009/11/07 01:26:32 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/11/07 02:54:24 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2008/10/19 14:28:24 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
[2009/11/07 02:53:37 | 00,023,544 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll
[2009/11/07 02:53:37 | 00,137,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll
[2007/04/10 16:21:08 | 00,163,256 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
[2006/02/07 15:41:38 | 00,049,152 | ---- | M] (Macromedia, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\np32dsw.dll
[2009/07/07 16:20:42 | 00,061,440 | ---- | M] (AOL LLC) -- C:\Program Files\Mozilla Firefox\plugins\npdnu.dll
[2009/07/07 16:20:42 | 00,065,536 | ---- | M] (AOL LLC) -- C:\Program Files\Mozilla Firefox\plugins\npdnupdater2.dll
[2009/11/07 02:54:01 | 00,065,016 | ---- | M] (mozilla.org) -- C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
[2007/03/22 18:23:30 | 00,017,248 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Mozilla Firefox\plugins\NPOFFICE.DLL
[2009/02/27 13:13:42 | 00,103,792 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll
[2009/10/15 19:46:32 | 00,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
[2009/10/15 19:46:33 | 00,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
[2009/10/15 19:46:33 | 00,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
[2009/10/15 19:46:34 | 00,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
[2009/10/15 19:46:34 | 00,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
[2009/10/15 19:46:34 | 00,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
[2009/10/15 19:46:34 | 00,159,744 | ---- | M] (Apple Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
[2005/08/09 13:42:53 | 00,057,344 | ---- | M] (America Online, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npunagi2.dll
[2007/04/16 12:07:12 | 00,180,293 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\npViewpoint.dll
[2009/11/07 02:54:08 | 00,001,394 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom.xml
[2009/11/07 02:54:09 | 00,002,193 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\answers.xml
[2009/08/03 20:53:53 | 00,001,489 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\avg_igeared.xml
[2009/11/07 02:54:09 | 00,001,534 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\creativecommons.xml
[2009/11/07 02:54:09 | 00,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay.xml
[2009/11/07 02:54:09 | 00,002,371 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\google.xml
[2009/10/22 20:42:29 | 00,001,210 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\search.xml
[2009/11/07 02:54:10 | 00,001,178 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia.xml
[2009/11/07 02:54:10 | 00,000,792 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo.xml

O1 HOSTS File: (1164 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 Igetnet.com
O1 - Hosts: 127.0.0.1 code.ignphrases.com
O1 - Hosts: 127.0.0.1 clear-search.com
O1 - Hosts: 127.0.0.1 r1.clrsch.com
O1 - Hosts: 127.0.0.1 sds.clrsch.com
O1 - Hosts: 127.0.0.1 status.clrsch.com
O1 - Hosts: 127.0.0.1 www.clrsch.com
O1 - Hosts: 127.0.0.1 clr-sch.com
O1 - Hosts: 127.0.0.1 sds-qckads.com
O1 - Hosts: 127.0.0.1 status.qckads.com
O1 - Hosts: 127.0.0.1 status.qckads.com
O1 - Hosts: 127.0.0.1 status.qckads.com
O1 - Hosts: 127.0.0.1 status.qckads.com
O1 - Hosts: 127.0.0.1 status.qckads.com
O1 - Hosts: 127.0.0.1 status.qckads.com
O2 - BHO: (Yahoo! Toolbar Helper) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (AVG Security Toolbar BHO) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (Star) - {024E9230-8808-4CEC-BE9D-C6273AF2A9E9} - C:\WINDOWS\System32\8d78.dll File not found
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Star) - {024E9230-8808-4CEC-BE9D-C6273AF2A9E9} - C:\WINDOWS\System32\8d78.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (AIM Search) - {40D41A8B-D79B-43D7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (AVG Security Toolbar) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG8\Toolbar\IEToolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVG8_TRAY] C:\Program Files\AVG\AVG8\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [Malwarebytes Anti-Malware (reboot)] C:\Documents and Settings\Laura\Desktop\Malwarebytes' Anti-Malware\mbam.exe File not found
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [UserFaultCheck] File not found
O4 - HKCU..\Run: [Aim] C:\Program Files\AIM7\aim.exe (AOL LLC)
O4 - HKCU..\Run: [Nsv] C:\WINDOWS\System32\nsvsvc\nsvsvc.exe File not found
O4 - HKCU..\Run: [picsvr] C:\WINDOWS\System32\picsvr\picsvr.exe File not found
O4 - Startup: C:\Documents and Settings\Laura\Start Menu\Programs\Startup\Clean Access Agent.lnk = C:\Program Files\Cisco Systems\Clean Access Agent\CCAAgent.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: undockwithoutlogon = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoDriveTypeAutoRun = 91
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoSaveSettings = 0
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\aim\aim.exe (America Online, Inc.)
O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe File not found
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Program Files\Internet Explorer\PLUGINS\NPDocBox.dll (Intertrust Technologies, Inc.)
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/downlo...22/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsu...?1125363955750 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} http://v4.windowsupdate.microsoft.co...AB?38167.48875 (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jin...ndows-i586.cab (Java Plug-in 1.5.0_01)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub...sh/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 24.25.5.61 24.25.5.60
O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\msdaipp - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Program Files\Common Files\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - C:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\WRNotifier: DllName - WRLogonNTF.dll - File not found
O24 - Desktop Components:0 (My Current Home Page) - About:Home
O27 - HKLM IFEO\brastk.exe: Debugger - svchost.exe (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/01/19 15:00:00 | 00,000,043 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{22f86a98-9c79-11de-9f19-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{22f86a98-9c79-11de-9f19-00038a000015}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{22f86a99-9c79-11de-9f19-00038a000015}\Shell - "" = AutoRun
O33 - MountPoints2\{22f86a99-9c79-11de-9f19-00038a000015}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck) - File not found
O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (*) - File not found
O34 - HKLM BootExecute: (SsiEfr.ex) - File not found
O34 - HKLM BootExecute: (otExecute) - File not found
O34 - HKLM BootExecute: (settings...) - File not found
O34 - HKLM BootExecute: (on\Exp) - File not found
O35 - comfile [open] -- "%1" %* File not found
O35 - exefile [open] -- "%1" %* File not found

NetSvcs: BtwSrv - C:\WINDOWS\system32\BtwSrv.dll (FTD2XX Software Technology)
NetSvcs: 6to4 - File not found
NetSvcs: Ias - C:\WINDOWS\system32\ias [2003/12/18 05:43:11 | 00,000,000 | ---D | M]
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: Wmi - C:\WINDOWS\system32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: helpsvc - C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
NetSvcs: Ip6FwHlp - File not found

MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^BigFix.lnk - C:\Program Files\BigFix\BigFix.exe - (BigFix Inc.)
MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe - (Hewlett-Packard Co.)
MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^MyTotalSearch Email Plugin.lnk - C:\Program Files\MyTotalSearch\bar\1.bin\MTSOEMON.EXE - (MyTotalSearch.com)
MsConfig - StartUpFolder: C:^Documents and Settings^All Users^Start Menu^Programs^Startup^MyWebSearch Email Plugin.lnk - Reg Error: Value error. - File not found
MsConfig - StartUpFolder: C:^Documents and Settings^User^Start Menu^Programs^Startup^MyTotalSearch Email Plugin.lnk - C:\Program Files\MyTotalSearch\bar\1.bin\MTSOEMON.EXE - (MyTotalSearch.com)
MsConfig - StartUpReg: 180ax - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: AIM - hkey= - key= - C:\PROGRA~1\aim\aim.exe -cnetwait.odl File not found
MsConfig - StartUpReg: app - hkey= - key= - File not found
MsConfig - StartUpReg: aqadcup - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: ATIModeChange - hkey= - key= - File not found
MsConfig - StartUpReg: ATIPTA - hkey= - key= - C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe File not found
MsConfig - StartUpReg: Create A Monster - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: Dmupoi - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: EbatesMoeMoneyMaker0 - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: ErrorGuard - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: exp.exe - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: fash - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: FlashIcon - hkey= - key= - C:\Program Files\Generic\USB Card Reader Driver v2.2e\FlashIcon.EXE File not found
MsConfig - StartUpReg: HP Component Manager - hkey= - key= - C:\Program Files\HP\hpcoretech\hpcmpmgr.exe (Hewlett-Packard Company)
MsConfig - StartUpReg: HP Software Update - hkey= - key= - C:\Program Files\HP\HP Software Update\HPWuSchd.exe (Hewlett-Packard)
MsConfig - StartUpReg: iTunesHelper - hkey= - key= - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
MsConfig - StartUpReg: Jawa32 - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: KernelFaultCheck - hkey= - key= - File not found
MsConfig - StartUpReg: kvern16.dll - hkey= - key= - File not found
MsConfig - StartUpReg: loads.exe - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: McAfeeUpdaterUI - hkey= - key= - C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe File not found
MsConfig - StartUpReg: me69N - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: mediamotor.exe - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: MSMSGS - hkey= - key= - C:\Program Files\Messenger\msmsgs.exe File not found
MsConfig - StartUpReg: MyTotalSearch Email Plugin - hkey= - key= - C:\Program Files\MyTotalSearch\bar\1.bin\MTSOEMON.EXE (MyTotalSearch.com)
MsConfig - StartUpReg: NaviSearch - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: pgtaff - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: pmr - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: prvtect - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\qttask.exe File not found
MsConfig - StartUpReg: r7oX33V - hkey= - key= - File not found
MsConfig - StartUpReg: RealTray - hkey= - key= - C:\Program Files\Real\RealPlayer\RealPlay.exe File not found
MsConfig - StartUpReg: RoxioAudioCentral - hkey= - key= - C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe File not found
MsConfig - StartUpReg: RoxioDragToDisc - hkey= - key= - C:\Program Files\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe File not found
MsConfig - StartUpReg: RoxioEngineUtility - hkey= - key= - C:\Program Files\Common Files\Roxio Shared\System\EngUtil.exe File not found
MsConfig - StartUpReg: Rxagik - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: ShStatEXE - hkey= - key= - C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE File not found
MsConfig - StartUpReg: sixtysix - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: STOPzilla - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: SurfSideKick 2 - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: SynTPEnh - hkey= - key= - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.)
MsConfig - StartUpReg: SynTPLpr - hkey= - key= - C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.)
MsConfig - StartUpReg: Tsa - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: vernn16.dll - hkey= - key= - File not found
MsConfig - StartUpReg: ViewMgr - hkey= - key= - C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe (Viewpoint Corporation)
MsConfig - StartUpReg: VVSN - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: Windows AdControl - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: WinTask driver - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: winupdtl - hkey= - key= - Reg Error: Value error. File not found
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 2

SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation)
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: UploadMgr - Service
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

ActiveX: {03F998B2-0E00-11D3-A498-00104B6EB52E} - Viewpoint Media Player
ActiveX: {057997dd-71e4-43cc-b161-3f8180691a9e} - Q824145
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vector Graphics Rendering (VML)
ActiveX: {1B00725B-C455-4DE6-BFB6-AD540AD427CD} - Viewpoint Media Player
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Macromedia Shockwave Director 10.1.1
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 10.1.1
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2cc9d512-6db6-4f1c-8979-9a41fae88de0} - Q837009
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML Data Binding for Java
ActiveX: {377483c2-e4b4-4ee8-b577-9aed264c8735} - Q822925
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Advanced Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser .NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {795d0712-722c-43ec-906a-fc5e678eada9} - Q831167
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {abcdf74f-9a64-4e6e-b8eb-6e5a41de6550} -
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Task Scheduler
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D} - Microsoft .NET Framework 1.1 Security Update (KB953297)
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {eddbec60-89cb-44ef-8291-0850fd28ff6a} - Q832894
ActiveX: {F5776D81-AE53-4935-8E84-B0B283D8BCEF} - Q330994
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSe tup SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
ActiveX: Microsoft Base Smart Card Crypto Provider Package -

Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.msg723 - msg723.acm File not found
Drivers32: msacm.sl_anet - sl_anet.acm File not found
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.LEAD - LCODCCMP.DLL File not found
Drivers32: vidc.wmv3 - C:\WINDOWS\System32\wmv9vcm.dll (Microsoft Corporation)

========== Files/Folders - Created Within 30 Days ==========

[2009/11/07 22:04:12 | 00,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2009/11/07 19:24:40 | 00,000,000 | ---D | C] -- C:\WINDOWS\Performance
[2009/11/07 19:23:24 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Microsoft Corporation
[2009/11/07 19:22:48 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Windows Vista Upgrade Advisor
[2009/11/07 03:10:27 | 00,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2009/11/07 02:56:44 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Laura\My Documents\Downloads
[2009/11/02 23:43:15 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rundll32.exe
[2009/11/02 23:43:15 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rundll32.exe
[2009/11/02 01:59:18 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Laura\Local Settings\Application Data\Adobe
[2009/11/02 01:54:29 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Adobe
[2009/11/02 01:50:48 | 27,386,280 | ---- | C] ( ) -- C:\Documents and Settings\Laura\Desktop\AdbeRdr920_en_US(2).exe
[2009/11/02 01:49:08 | 27,386,280 | ---- | C] ( ) -- C:\Documents and Settings\Laura\Desktop\AdbeRdr920_en_US.exe
[2009/10/28 00:09:08 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Laura\Application Data\U3
[2009/10/22 23:08:21 | 00,000,000 | ---D | C] -- C:\Program Files\Common Files\Software Update Utility
[2009/10/22 23:07:45 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AIM
[2009/10/22 23:07:17 | 00,000,000 | ---D | C] -- C:\Program Files\AIM7
[2009/10/22 22:01:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Laura\Local Settings\Application Data\AVG Security Toolbar
[2009/10/22 21:11:47 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Laura\Application Data\Malwarebytes
[2009/10/22 21:11:34 | 00,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2009/10/22 21:11:32 | 00,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2009/10/22 21:11:32 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes
[2009/10/22 21:05:45 | 03,550,592 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Documents and Settings\Laura\Desktop\procexp.exe
[2009/10/22 19:39:44 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\Application Data\24bb5
[2009/10/20 18:37:04 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\Laura\IECompatCache
[2009/10/19 20:00:04 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2009/10/19 19:59:48 | 00,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2009/10/19 19:59:26 | 00,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2009/10/19 19:58:06 | 00,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2009/10/19 19:58:05 | 00,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\printfilterpipelinesv c.exe
[2009/10/19 19:58:05 | 00,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsshhdr.dll
[2009/10/19 19:58:05 | 00,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpsshhdr.dll
[2009/10/19 19:58:05 | 00,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\filterpipelineprintpr oc.dll
[2009/10/19 19:58:04 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll
[2009/10/19 19:58:04 | 01,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpssvcs.dll
[2009/10/19 19:58:02 | 00,000,000 | ---D | C] -- C:\859a169f865c6af65e3a2699dc50
[2009/10/18 12:45:53 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\Laura\PrivacIE
[2009/10/18 12:37:48 | 00,000,000 | -HSD | C] -- C:\Documents and Settings\Laura\IETldCache
[2009/10/17 22:14:38 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpshims.dll
[2009/10/17 22:14:32 | 00,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieproxy.dll
[2009/10/17 22:14:22 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2009/10/17 22:13:51 | 00,092,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iecompat.dll
[2009/10/17 22:07:31 | 00,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedssync.exe
[2009/10/15 19:49:28 | 00,000,000 | ---D | C] -- C:\Program Files\iPod
[2009/10/15 19:49:03 | 00,000,000 | ---D | C] -- C:\Program Files\iTunes
[2009/10/15 19:49:03 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009/10/15 19:47:19 | 00,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2009/10/15 19:45:26 | 00,000,000 | ---D | C] -- C:\Program Files\QuickTime
[2009/10/15 12:06:40 | 01,315,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoe.dll
[2009/10/15 12:02:21 | 00,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\triedit.dll
[2009/10/15 12:02:17 | 00,128,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dhtmled.ocx
[2009/10/15 11:41:44 | 00,215,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\muweb.dll
[2009/10/15 11:41:44 | 00,016,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui
[2009/10/15 11:41:43 | 00,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll
[2009/10/14 23:30:55 | 00,000,000 | ---D | C] -- C:\Program Files\AIM Toolbar
[2009/10/14 21:45:40 | 00,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2009/10/13 22:25:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Laura\Local Settings\Application Data\AIM
[2009/10/13 22:24:06 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AIM Toolbar
[2009/10/13 22:24:04 | 00,000,000 | ---D | C] -- C:\Documents and Settings\Laura\Local Settings\Application Data\AIM Toolbar
[2009/10/13 22:23:43 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\acccore
[2003/12/18 05:52:33 | 00,014,976 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\winddx.sys
[2003/12/17 12:30:48 | 01,301,704 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[2003/12/17 12:30:48 | 00,548,888 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slntamr.sys
[2003/12/17 12:30:48 | 00,221,736 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2003/12/17 12:30:48 | 00,167,352 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2003/12/17 12:30:48 | 00,086,512 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slnthal.sys
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Documents and Settings\Laura\*.tmp files -> C:\Documents and Settings\Laura\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2009/11/08 00:09:00 | 00,000,364 | ---- | M] () -- C:\WINDOWS\tasks\Symantec NetDetect.job
[2009/11/07 23:59:26 | 00,001,170 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009/11/07 23:49:32 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2009/11/07 23:49:27 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2009/11/07 23:49:24 | 53,535,1296 | -HS- | M] () -- C:\hiberfil.sys
[2009/11/07 22:04:17 | 04,718,592 | ---- | M] () -- C:\Documents and Settings\Laura\NTUser.dat
[2009/11/07 22:04:14 | 00,001,734 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\HijackThis.lnk
[2009/11/07 19:38:09 | 00,001,905 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2009/11/07 19:38:09 | 00,001,905 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2009/11/07 19:23:19 | 00,063,104 | ---- | M] () -- C:\Documents and Settings\Laura\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2009/11/07 19:22:52 | 00,001,976 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\Windows Vista Upgrade Advisor.lnk
[2009/11/07 18:57:13 | 00,006,078 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257638023544s.jpg
[2009/11/07 16:06:04 | 00,000,278 | -HS- | M] () -- C:\Documents and Settings\Laura\ntuser.ini
[2009/11/07 14:36:51 | 00,000,422 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{32491F5F-B34F-4F29-8F8F-9AB8B01E7AFC}.job
[2009/11/07 14:34:11 | 00,000,512 | ---- | M] () -- C:\WINDOWS\randseed.rnd
[2009/11/07 14:31:09 | 00,086,275 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\microavi.avg
[2009/11/07 14:31:08 | 44,777,068 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\incavi.avm
[2009/11/07 03:54:15 | 00,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2009/11/07 03:53:13 | 03,768,008 | -H-- | M] () -- C:\Documents and Settings\Laura\Local Settings\Application Data\IconCache.db
[2009/11/04 22:58:14 | 00,030,769 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\14261_1173012771648_1417890 480_30630720_7234912_n.jpg
[2009/11/04 22:58:09 | 00,024,736 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\14261_1173012731647_1417890 480_30630719_1178678_n.jpg
[2009/11/04 02:49:51 | 00,202,201 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257320524962.jpg
[2009/11/02 23:43:16 | 00,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\rundll32.exe
[2009/11/02 23:43:16 | 00,033,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rundll32.exe
[2009/11/02 02:31:38 | 00,003,658 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257147131051s.jpg
[2009/11/02 02:31:30 | 00,002,503 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257147093187s.jpg
[2009/11/02 02:30:31 | 00,006,599 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257146138673s.jpg
[2009/11/02 02:30:02 | 00,010,263 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257146723994s.jpg
[2009/11/02 02:28:13 | 00,005,418 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257146626806s.jpg
[2009/11/02 02:27:55 | 00,006,405 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257146023003s.jpg
[2009/11/02 02:26:49 | 00,005,740 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257145966767s.jpg
[2009/11/02 02:26:30 | 00,105,153 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257146332836.png
[2009/11/02 02:25:32 | 00,006,040 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257145642844s.jpg
[2009/11/02 02:25:11 | 00,005,669 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257143544805s.jpg
[2009/11/02 02:10:41 | 00,007,963 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257145826006s.jpg
[2009/11/02 01:56:08 | 00,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2009/11/02 01:51:06 | 27,386,280 | ---- | M] ( ) -- C:\Documents and Settings\Laura\Desktop\AdbeRdr920_en_US(2).exe
[2009/11/02 01:49:58 | 27,386,280 | ---- | M] ( ) -- C:\Documents and Settings\Laura\Desktop\AdbeRdr920_en_US.exe
[2009/11/02 00:39:55 | 15,748,4384 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\OOo_3.1.1_Win32Intel_instal l_wJRE_en-US.exe
[2009/11/02 00:19:29 | 06,244,025 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\love20001.pdf
[2009/11/01 23:31:23 | 00,444,596 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2009/11/01 23:31:22 | 00,525,770 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2009/11/01 23:31:22 | 00,072,306 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2009/11/01 03:26:36 | 00,077,662 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1257058580267.jpg
[2009/10/30 00:28:28 | 00,058,469 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1256879777199.jpg
[2009/10/29 12:59:47 | 00,032,768 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\Personality Psychology Oct.doc
[2009/10/28 23:55:42 | 00,002,599 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1256772981436s.jpg
[2009/10/28 23:55:33 | 00,005,306 | ---- | M] () -- C:\Documents and Settings\Laura\Desktop\1256771406985s.jpg
[2009/10/22 23:08:08 | 00,005,098 | -H-- | M] () -- C:\IPH.PH
[2009/10/22 23:07:44 | 00,001,587 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\AIM.lnk
[2009/10/22 21:05:51 | 03,550,592 | ---- | M] (Sysinternals - www.sysinternals.com) -- C:\Documents and Settings\Laura\Desktop\procexp.exe
[2009/10/22 20:41:52 | 00,001,164 | RHS- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2009/10/22 04:19:04 | 05,939,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\mshtml.dll
[2009/10/22 04:19:04 | 05,939,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshtml.dll
[2009/10/20 07:55:07 | 00,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2009/10/19 21:37:57 | 00,237,552 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2009/10/19 02:09:12 | 00,001,048 | ---- | M] () -- C:\WINDOWS\win.ini
[2009/10/15 19:50:51 | 00,001,804 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2009/10/15 19:46:06 | 00,001,604 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2009/10/15 19:22:02 | 00,000,011 | -H-- | M] () -- C:\Documents and Settings\All Users\Documents\71F.VS7-ncn
[2009/10/13 20:37:59 | 00,492,629 | ---- | M] () -- C:\WINDOWS\System32\drivers\Avg\miniavi.avg
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Documents and Settings\Laura\*.tmp files -> C:\Documents and Settings\Laura\*.tmp -> ]

========== Files Created - No Company Name ==========

[2009/11/07 22:04:14 | 00,001,734 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\HijackThis.lnk
[2009/11/07 19:22:52 | 00,001,976 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\Windows Vista Upgrade Advisor.lnk
[2009/11/07 19:21:16 | 00,001,905 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2009/11/07 19:21:16 | 00,001,905 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2009/11/07 18:57:11 | 00,006,078 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257638023544s.jpg
[2009/11/04 22:58:13 | 00,030,769 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\14261_1173012771648_1417890 480_30630720_7234912_n.jpg
[2009/11/04 22:58:06 | 00,024,736 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\14261_1173012731647_1417890 480_30630719_1178678_n.jpg
[2009/11/04 02:49:47 | 00,202,201 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257320524962.jpg
[2009/11/02 02:31:38 | 00,003,658 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257147131051s.jpg
[2009/11/02 02:31:29 | 00,002,503 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257147093187s.jpg
[2009/11/02 02:30:30 | 00,006,599 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257146138673s.jpg
[2009/11/02 02:30:01 | 00,010,263 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257146723994s.jpg
[2009/11/02 02:28:12 | 00,005,418 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257146626806s.jpg
[2009/11/02 02:27:54 | 00,006,405 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257146023003s.jpg
[2009/11/02 02:26:49 | 00,005,740 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257145966767s.jpg
[2009/11/02 02:26:29 | 00,105,153 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257146332836.png
[2009/11/02 02:25:32 | 00,006,040 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257145642844s.jpg
[2009/11/02 02:25:10 | 00,005,669 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257143544805s.jpg
[2009/11/02 02:10:39 | 00,007,963 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257145826006s.jpg
[2009/11/02 01:56:08 | 00,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Adobe Reader 9.lnk
[2009/11/02 00:23:30 | 15,748,4384 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\OOo_3.1.1_Win32Intel_instal l_wJRE_en-US.exe
[2009/11/02 00:19:20 | 06,244,025 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\love20001.pdf
[2009/11/01 03:26:26 | 00,077,662 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1257058580267.jpg
[2009/10/30 00:28:27 | 00,058,469 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1256879777199.jpg
[2009/10/29 12:54:13 | 00,032,768 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\Personality Psychology Oct.doc
[2009/10/28 23:55:41 | 00,002,599 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1256772981436s.jpg
[2009/10/28 23:55:32 | 00,005,306 | ---- | C] () -- C:\Documents and Settings\Laura\Desktop\1256771406985s.jpg
[2009/10/22 23:07:44 | 00,001,587 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\AIM.lnk
[2009/10/20 18:37:01 | 00,000,422 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{32491F5F-B34F-4F29-8F8F-9AB8B01E7AFC}.job
[2009/10/20 18:27:18 | 01,089,593 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ntprint.cat
[2009/10/15 19:50:51 | 00,001,804 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\iTunes.lnk
[2009/10/15 19:46:05 | 00,001,604 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\QuickTime Player.lnk
[2009/10/15 19:22:02 | 00,000,011 | -H-- | C] () -- C:\Documents and Settings\All Users\Documents\71F.VS7-ncn
[2008/10/26 21:05:32 | 00,000,029 | ---- | C] () -- C:\WINDOWS\atid.ini
[2006/06/29 13:58:52 | 00,030,808 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalUserInterface.CompositeFont
[2006/06/29 13:53:56 | 00,026,489 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalSansSerif.CompositeFont
[2006/04/18 14:39:28 | 00,029,779 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalSerif.CompositeFont
[2006/04/18 14:39:28 | 00,026,040 | ---- | C] () -- C:\WINDOWS\Fonts\GlobalMonospace.CompositeFont
[2006/02/04 17:31:33 | 00,684,032 | ---- | C] () -- C:\WINDOWS\libeay32.dll
[2006/02/04 17:31:33 | 00,155,648 | ---- | C] () -- C:\WINDOWS\ssleay32.dll
[2005/06/10 09:35:01 | 00,011,264 | ---- | C] () -- C:\Documents and Settings\Laura\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005/04/07 15:26:46 | 00,000,128 | ---- | C] () -- C:\Documents and Settings\Laura\Local Settings\Application Data\fusioncache.dat
[2005/04/04 17:27:04 | 00,063,104 | ---- | C] () -- C:\Documents and Settings\Laura\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2005/04/03 20:10:25 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\Laura\Application Data\desktop.ini
[2005/04/03 20:10:24 | 03,768,008 | -H-- | C] () -- C:\Documents and Settings\Laura\Local Settings\Application Data\IconCache.db
[2005/02/11 03:35:37 | 00,000,340 | ---- | C] () -- C:\WINDOWS\usta33.ini
[2005/02/10 19:25:22 | 00,000,076 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2004/12/29 23:26:45 | 00,147,456 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2004/12/29 23:26:44 | 00,651,264 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2004/11/24 17:20:32 | 00,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI
[2004/11/09 09:35:28 | 00,000,039 | ---- | C] () -- C:\WINDOWS\wininit.ini_
[2004/11/01 17:42:54 | 00,151,552 | ---- | C] () -- C:\WINDOWS\System32\cacore.dll
[2004/10/23 16:39:44 | 00,031,232 | ---- | C] () -- C:\WINDOWS\System32\zilla.dll
[2004/10/23 08:37:26 | 00,000,478 | ---- | C] () -- C:\WINDOWS\System32\sysfile.dll
[2004/10/22 22:06:26 | 00,005,030 | ---- | C] () -- C:\WINDOWS\Muahxzkb.ini
[2004/10/22 21:42:30 | 00,081,972 | ---- | C] () -- C:\WINDOWS\System32\zlib.dll
[2004/10/20 17:37:29 | 00,099,328 | ---- | C] () -- C:\WINDOWS\System32\lvwwv.dll
[2004/10/05 20:12:17 | 00,000,045 | ---- | C] () -- C:\WINDOWS\BGKJFLI.ini
[2004/09/17 17:37:42 | 00,061,440 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll
[2004/09/13 11:58:01 | 00,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2004/08/25 17:58:20 | 00,000,446 | ---- | C] () -- C:\WINDOWS\System32\MSrev23.dll
[2004/08/25 17:58:18 | 00,001,806 | ---- | C] () -- C:\WINDOWS\System32\MSrev43.dll
[2004/08/25 17:57:44 | 00,081,920 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2004/08/25 17:57:44 | 00,053,248 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2004/08/25 15:24:59 | 00,001,129 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\hpzinstall.log
[2004/02/26 01:18:04 | 00,565,248 | ---- | C] () -- C:\WINDOWS\System32\hpotscl.dll
[2004/02/20 20:27:46 | 00,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll_
[2003/12/18 08:38:45 | 00,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2003/12/18 06:47:09 | 00,000,132 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2003/12/18 06:46:18 | 00,000,310 | ---- | C] () -- C:\WINDOWS\net2fone.ini
[2003/12/18 06:26:09 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2003/12/18 05:54:33 | 00,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2003/12/18 05:52:33 | 00,475,136 | ---- | C] () -- C:\WINDOWS\System32\SLLights.dll
[2003/12/18 05:52:33 | 00,155,648 | ---- | C] () -- C:\WINDOWS\System32\amr_cpl.dll
[2003/12/18 05:52:33 | 00,135,168 | ---- | C] () -- C:\WINDOWS\System32\SLMOHServ.dll_
[2003/12/18 05:50:45 | 00,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll
[2003/12/17 21:35:32 | 00,000,062 | -HS- | C] () -- C:\Documents and Settings\All Users\Application Data\desktop.ini
[2003/12/17 12:30:48 | 00,188,416 | ---- | C] () -- C:\WINDOWS\System32\slextspk.dll
[2003/12/17 12:30:48 | 00,163,840 | ---- | C] () -- C:\WINDOWS\System32\SLGen.dll
[2003/12/17 12:30:48 | 00,049,152 | ---- | C] () -- C:\WINDOWS\System32\coinst.dll_
[2003/12/17 12:30:41 | 00,001,094 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2003/12/17 12:30:41 | 00,000,465 | ---- | C] () -- C:\WINDOWS\System32\emver.ini
[2003/12/17 12:30:15 | 00,001,048 | ---- | C] () -- C:\WINDOWS\win.ini
[2003/12/17 12:30:11 | 00,000,227 | ---- | C] () -- C:\WINDOWS\system.ini
[2003/10/08 12:34:26 | 00,121,440 | ---- | C] () -- C:\WINDOWS\System32\MSDRMCtrl.dll
[2003/09/24 21:32:13 | 00,061,440 | ---- | C] () -- C:\WINDOWS\System32\FlashIcon.dll
[2003/03/31 07:00:00 | 00,000,008 | ---- | C] () -- C:\WINDOWS\System32\FInstall.sys
[2003/01/07 14:05:08 | 00,002,695 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[2002/08/28 20:27:50 | 00,096,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\atapi.sys

========== LOP Check ==========

[2009/10/22 21:35:18 | 00,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\24bb5
[2009/10/13 22:23:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\acccore
[2009/10/22 23:07:45 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AIM
[2009/10/13 22:24:06 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AIM Toolbar
[2005/08/30 19:23:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Network Associates
[2004/10/24 15:10:49 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\SecTaskMan
[2009/10/14 23:30:12 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Viewpoint
[2009/10/15 19:50:32 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2008/10/26 21:12:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\acccore
[2005/04/03 20:52:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\Aim
[2003/12/18 06:27:10 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\InterTrust
[2005/04/27 18:05:14 | 00,000,000 | ---D | M] -- C:\Documents and Settings\Laura\Application Data\Webshots
[2003/03/31 07:00:00 | 00,000,065 | RH-- | M] () -- C:\WINDOWS\Tasks\desktop.ini
[2009/11/07 23:49:32 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\Tasks\SA.DAT
[2009/11/07 14:36:51 | 00,000,422 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{32491F5F-B34F-4F29-8F8F-9AB8B01E7AFC}.job

========== Purity Check ==========



========== Custom Scans ==========


< >

< %systemroot%\System32\antiwpa.dll >

< %systemroot%\SYSTEM32\wpa.dll >

< %systemroot%\setup\scripts\biestart.exe >

< %systemroot%\system32\drivers\royal.sys >

< %systemroot%\system32\oobe\AntiWPA_Crypt.dll >

< %TEMP%\antiwpa_crypt.dll >

< %TEMP%\antiwpa.dll /s >

< %PROGRAMFILES%\antiwpa.dll /s >

< %systemroot%\system32\crypt.dll >

< %TEMP%\crypt.dll >

< %SYSTEMDRIVE%\*. >
[2009/11/07 22:25:55 | 00,000,000 | -H-D | M] -- C:\$AVG8.VAULT$
[2009/10/19 19:59:05 | 00,000,000 | ---D | M] -- C:\859a169f865c6af65e3a2699dc50
[2004/03/08 21:51:06 | 00,000,000 | -H-D | M] -- C:\bundle
[2009/07/26 19:50:38 | 00,000,000 | ---D | M] -- C:\Documents and Settings
[2004/02/28 02:47:25 | 00,000,000 | ---D | M] -- C:\Drivers
[2004/09/13 11:49:54 | 00,000,000 | RH-D | M] -- C:\MSOCache
[2005/08/30 19:21:03 | 00,000,000 | ---D | M] -- C:\muvs8i
[2003/12/18 06:41:14 | 00,000,000 | ---D | M] -- C:\My Music
[2009/11/07 22:04:12 | 00,000,000 | ---D | M] -- C:\Program Files
[2006/08/09 20:09:07 | 00,000,000 | -HSD | M] -- C:\RECYCLER
[2006/02/04 16:03:36 | 00,000,000 | -HSD | M] -- C:\System Volume Information
[2004/11/11 09:22:14 | 00,000,000 | ---D | M] -- C:\vscan71
[2009/11/07 19:24:40 | 00,000,000 | ---D | M] -- C:\WINDOWS

< %SYSTEMDRIVE%\*.* >
[2004/08/25 04:20:36 | 00,000,606 | ---- | M] () -- C:\aol.ini
[2005/08/29 21:24:25 | 00,000,211 | RHS- | M] () -- C:\boot.ini
[2003/12/18 05:43:41 | 00,000,000 | RHS- | M] () -- C:\CONFIG.SYS
[2004/12/31 10:50:57 | 00,000,055 | ---- | M] () -- C:\DVDPATH.TXT
[2006/02/04 16:49:46 | 00,002,421 | ---- | M] () -- C:\eradicate.txt
[2001/09/05 21:00:58 | 01,700,352 | ---- | M] (Microsoft Corporation) -- C:\gdiplus.dll
[2009/11/07 23:49:24 | 53,535,1296 | -HS- | M] () -- C:\hiberfil.sys
[2003/12/18 05:43:41 | 00,000,000 | RHS- | M] () -- C:\IO.SYS
[2009/10/22 23:08:08 | 00,005,098 | -H-- | M] () -- C:\IPH.PH
[2005/10/04 19:33:55 | 00,000,048 | -HS- | M] () -- C:\LSWMV.INI
[2003/12/18 05:43:41 | 00,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2005/08/29 21:10:40 | 00,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2008/10/19 23:27:07 | 00,250,048 | RHS- | M] () -- C:\ntldr
[2009/11/07 23:49:22 | 80,530,6368 | -HS- | M] () -- C:\pagefile.sys
[2006/02/03 17:00:51 | 00,003,267 | ---- | M] () -- C:\scan.txt
[2004/12/15 12:11:33 | 00,087,623 | ---- | M] () -- C:\tmp.txt

< %PROGRAMFILES%\*. >
[2009/11/02 01:52:33 | 00,000,000 | ---D | M] -- C:\Program Files\Adobe
[2009/10/13 22:20:33 | 00,000,000 | ---D | M] -- C:\Program Files\aim
[2009/10/22 23:13:20 | 00,000,000 | ---D | M] -- C:\Program Files\AIM Toolbar
[2009/10/22 23:07:33 | 00,000,000 | ---D | M] -- C:\Program Files\AIM7
[2009/10/22 23:03:45 | 00,000,000 | ---D | M] -- C:\Program Files\America Online 9.0
[2005/04/03 20:52:14 | 00,000,000 | ---D | M] -- C:\Program Files\AOD
[2003/12/18 06:41:50 | 00,000,000 | ---D | M] -- C:\Program Files\AOL Companion
[2008/10/30 17:39:23 | 00,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2004/02/20 20:30:47 | 00,000,000 | ---D | M] -- C:\Program Files\ATI Technologies
[2009/08/03 20:48:11 | 00,000,000 | ---D | M] -- C:\Program Files\AVG
[2004/08/25 04:20:49 | 00,000,000 | ---D | M] -- C:\Program Files\AWS
[2003/12/18 06:33:11 | 00,000,000 | ---D | M] -- C:\Program Files\BigFix
[2009/10/15 19:47:22 | 00,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2005/08/21 19:11:21 | 00,000,000 | ---D | M] -- C:\Program Files\Cisco Systems
[2009/08/17 09:58:58 | 00,000,000 | ---D | M] -- C:\Program Files\CNS Vital Signs
[2009/10/22 23:08:21 | 00,000,000 | ---D | M] -- C:\Program Files\Common Files
[2003/12/18 05:41:11 | 00,000,000 | ---D | M] -- C:\Program Files\ComPlus Applications
[2009/10/22 23:18:11 | 00,000,000 | ---D | M] -- C:\Program Files\CompuServe 7.0
[2004/02/20 20:01:16 | 00,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2004/10/12 23:47:00 | 00,000,000 | ---D | M] -- C:\Program Files\FunWebProducts-MyTotalSearch
[2004/02/24 17:46:41 | 00,000,000 | ---D | M] -- C:\Program Files\Generic
[2004/06/30 05:26:35 | 00,000,000 | ---D | M] -- C:\Program Files\HighMAT CD Writing Wizard
[2004/08/25 15:48:25 | 00,000,000 | ---D | M] -- C:\Program Files\HP
[2005/04/07 16:33:48 | 00,000,000 | ---D | M] -- C:\Program Files\ICQ
[2004/10/05 10:16:40 | 00,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2004/11/24 15:48:25 | 00,000,000 | ---D | M] -- C:\Program Files\InterActual
[2009/11/07 03:16:21 | 00,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2009/10/15 19:49:28 | 00,000,000 | ---D | M] -- C:\Program Files\iPod
[2009/10/22 23:35:36 | 00,000,000 | ---D | M] -- C:\Program Files\IrfanView
[2009/10/15 19:50:32 | 00,000,000 | ---D | M] -- C:\Program Files\iTunes
[2008/10/19 14:28:21 | 00,000,000 | ---D | M] -- C:\Program Files\Java
[2003/12/18 06:43:58 | 00,000,000 | ---D | M] -- C:\Program Files\JavaSoft
[2009/10/15 19:23:59 | 00,000,000 | ---D | M] -- C:\Program Files\LimeWire
[2009/10/22 21:45:34 | 00,000,000 | ---D | M] -- C:\Program Files\Messenger
[2004/09/13 11:56:45 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft ActiveSync
[2003/12/18 05:43:53 | 00,000,000 | ---D | M] -- C:\Program Files\microsoft frontpage
[2003/12/18 06:34:53 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Money
[2004/09/13 11:56:05 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2009/10/22 23:59:27 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Picture It! 9
[2009/10/14 21:45:40 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2009/11/07 19:22:49 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Windows Vista Upgrade Advisor
[2003/12/18 06:36:47 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft Works
[2004/09/13 11:52:01 | 00,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2008/10/19 23:36:24 | 00,000,000 | ---D | M] -- C:\Program Files\Movie Maker
[2009/11/08 00:00:07 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2009/10/19 19:59:48 | 00,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2003/12/18 05:40:29 | 00,000,000 | ---D | M] -- C:\Program Files\MSN
[2003/12/18 06:14:05 | 00,000,000 | ---D | M] -- C:\Program Files\MSN Encarta Plus
[2003/12/18 05:40:19 | 00,000,000 | ---D | M] -- C:\Program Files\MSN Gaming Zone
[2004/06/30 05:28:24 | 00,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2004/10/12 23:47:02 | 00,000,000 | ---D | M] -- C:\Program Files\MyTotalSearch
[2005/04/04 16:12:44 | 00,000,000 | ---D | M] -- C:\Program Files\myTunes Redux
[2008/10/17 23:47:49 | 00,000,000 | ---D | M] -- C:\Program Files\Netflix
[2009/10/23 14:10:02 | 00,000,000 | ---D | M] -- C:\Program Files\NetMeeting
[2003/12/18 06:46:04 | 00,000,000 | ---D | M] -- C:\Program Files\Netscape
[2005/08/30 19:22:44 | 00,000,000 | ---D | M] -- C:\Program Files\Network Associates
[2004/10/24 16:05:20 | 00,000,000 | ---D | M] -- C:\Program Files\NoAdware
[2003/12/18 05:42:14 | 00,000,000 | ---D | M] -- C:\Program Files\Online Services
[2009/10/22 21:35:15 | 00,000,000 | ---D | M] -- C:\Program Files\Outlook Express
[2004/06/30 05:21:29 | 00,000,000 | ---D | M] -- C:\Program Files\Program Shortcuts
[2004/08/26 10:20:43 | 00,000,000 | ---D | M] -- C:\Program Files\PWRSMND1
[2009/10/23 00:06:22 | 00,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2003/12/18 06:41:09 | 00,000,000 | ---D | M] -- C:\Program Files\Real
[2009/10/19 19:59:26 | 00,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2005/04/07 16:52:44 | 00,000,000 | ---D | M] -- C:\Program Files\Security Task Manager
[2009/10/23 00:07:34 | 00,000,000 | ---D | M] -- C:\Program Files\Spybot - Search & Destroy
[2004/10/27 14:04:13 | 00,000,000 | ---D | M] -- C:\Program Files\STOPzilla!
[2004/11/18 09:44:41 | 00,000,000 | ---D | M] -- C:\Program Files\StreamCast
[2008/10/19 14:28:48 | 00,000,000 | ---D | M] -- C:\Program Files\Sun
[2005/08/30 19:13:12 | 00,000,000 | ---D | M] -- C:\Program Files\Symantec
[2003/12/18 05:50:45 | 00,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2009/11/07 22:04:12 | 00,000,000 | ---D | M] -- C:\Program Files\Trend Micro
[2003/12/18 06:25:19 | 00,000,000 | -H-D | M] -- C:\Program Files\Uninstall Information
[2008/10/26 21:42:50 | 00,000,000 | ---D | M] -- C:\Program Files\Viewpoint
[2006/02/04 17:31:28 | 00,000,000 | ---D | M] -- C:\Program Files\Webroot
[2009/10/23 00:09:10 | 00,000,000 | ---D | M] -- C:\Program Files\Webshots
[2006/02/04 17:06:55 | 00,000,000 | ---D | M] -- C:\Program Files\WildTangent
[2009/11/07 18:43:17 | 00,000,000 | ---D | M] -- C:\Program Files\Winamp
[2006/02/04 17:29:54 | 00,000,000 | ---D | M] -- C:\Program Files\Windows FormatAd
[2009/10/23 00:09:18 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Media Connect 2
[2009/10/23 00:42:14 | 00,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2009/10/23 00:10:01 | 00,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2005/05/04 23:52:53 | 00,000,000 | -H-D | M] -- C:\Program Files\WindowsUpdate
[2005/04/07 16:35:43 | 00,000,000 | ---D | M] -- C:\Program Files\WinMX
[2003/12/18 05:43:53 | 00,000,000 | ---D | M] -- C:\Program Files\xerox
[2005/02/15 20:21:40 | 00,000,000 | ---D | M] -- C:\Program Files\XML
[2006/04/22 16:54:05 | 00,000,000 | ---D | M] -- C:\Program Files\Yahoo!

========== Alternate Data Streams ==========

@Alternate Data Stream - 2628 bytes -> C:\WINDOWS\System32\OEMLOGO.BMP:Q30lsldxJoudresxA aaqpcawXc
< End of report >

You will need to download ComboFix.exe. Download Combofix from any of the links below. You must rename it before saving it. Name it ComFx, and Save it to your desktop.


http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe


* IMPORTANT !!! Save ComboFix.exe to your Desktop
It is important that it is saved and renamed following this process directly to your desktop**

========================================
Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.
1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Open *notepad* and copy/paste the red text in the quotebox below into it:
Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.


Refering to the picture above, drag CFScript.txt into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt
Please copy and paste the ComboFix.txt in your next reply please.

*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.Altering this script in any way could damage your computer*