Author Topic: I have now thousands on the objects on my computer infected... What do I do? (Read 18709 times)

jzown · « **Reply #15 on:** February 26, 2010, 09:47:49 PM »

OTL.txt

[Saving space, attachment deleted by admin]

jzown · « **Reply #16 on:** February 26, 2010, 09:48:22 PM »

Extras.txt

[Saving space, attachment deleted by admin]

Dr Jay · « **Reply #17 on:** February 27, 2010, 08:40:20 AM »

Hi. Will you post the contents of those logs in to 2 or 3 replies here, instead of attaching. Thanks.

jzown · « **Reply #18 on:** March 02, 2010, 05:19:27 PM »

OTL logfile created on: 2/27/2010 12:29:22 PM - Run 1
OTL by OldTimer - Version 3.1.30.3 Folder = C:\Users\asus\Desktop
Starter Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 65.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 71.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116.34 Gb Total Space | 81.64 Gb Free Space | 70.18% Space Free | Partition Type: NTFS
Drive D: | 181.65 Gb Total Space | 177.75 Gb Free Space | 97.85% Space Free | Partition Type: NTFS
Drive E: | 1.14 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 964.00 Mb Total Space | 16.74 Mb Free Space | 1.74% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JZOWN
Current User Name: asus
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Processes (SafeList) ==========

PRC - [2010/02/27 12:28:01 | 000,549,888 | ---- | M] (OldTimer Tools) -- C:\Users\asus\Desktop\OTL.exe
PRC - [2010/02/12 02:53:39 | 000,040,384 | ---- | M] (ALWIL Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010/01/22 19:16:42 | 000,141,608 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.exe
PRC - [2010/01/22 19:16:30 | 000,545,576 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe
PRC - [2009/12/11 19:46:27 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre6\bin\jusched.exe
PRC - [2009/12/01 09:19:35 | 000,122,368 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe
PRC - [2009/12/01 09:19:35 | 000,039,408 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2009/11/27 20:43:46 | 003,054,136 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2009/11/10 23:08:18 | 000,417,792 | ---- | M] (Apple Inc.) -- C:\Program Files\QuickTime\QTTask.exe
PRC - [2009/11/10 14:39:26 | 005,244,216 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
PRC - [2009/10/31 13:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/10/09 13:11:12 | 025,623,336 | R--- | M] (Skype Technologies S.A.) -- C:\Program Files\Skype\Phone\Skype.exe
PRC - [2009/08/28 19:42:54 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2009/07/28 17:36:02 | 000,231,992 | ---- | M] (ATK) -- C:\Program Files\P4G\BatteryLife.exe
PRC - [2009/07/28 08:19:10 | 000,199,184 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe
PRC - [2009/07/24 09:32:50 | 001,593,344 | ---- | M] () -- C:\Program Files\ASUS\Wireless Console 3\wcourier.exe
PRC - [2009/07/23 16:13:38 | 000,306,232 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Windows\System32\Fast Boot\FastBootAgent.exe
PRC - [2009/07/23 09:30:06 | 000,544,768 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2009/07/22 16:58:46 | 000,017,976 | ---- | M] () -- C:\Program Files\ASUS\ControlDeck\ControlDeckStartUp.exe
PRC - [2009/07/16 09:07:54 | 000,178,744 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControl.exe
PRC - [2009/07/14 09:14:50 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WUDFHost.exe
PRC - [2009/07/14 09:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009/07/14 09:14:12 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2009/07/13 10:53:10 | 001,474,560 | R--- | M] (VIA) -- C:\Program Files\VIA\VIAudioi\VDeck\VDECK.EXE
PRC - [2009/07/12 11:23:26 | 000,141,848 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxtray.exe
PRC - [2009/07/12 11:23:24 | 000,252,952 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxsrvc.exe
PRC - [2009/07/12 11:23:22 | 000,150,552 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxpers.exe
PRC - [2009/07/12 11:23:18 | 000,174,104 | ---- | M] (Intel Corporation) -- C:\Windows\System32\hkcmd.exe
PRC - [2009/07/07 10:20:56 | 008,493,624 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe
PRC - [2009/06/29 09:39:50 | 000,157,752 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ASUS CopyProtect\ASPG.exe
PRC - [2009/06/19 09:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
PRC - [2009/06/19 09:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\ATKOSD.exe
PRC - [2009/06/15 16:30:42 | 000,084,536 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe
PRC - [2009/06/12 11:35:26 | 000,497,536 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDCtrl.exe
PRC - [2009/05/18 14:58:38 | 000,305,720 | ---- | M] (ASUS) -- C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
PRC - [2009/04/20 10:09:30 | 000,159,744 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Media\DMedia.exe
PRC - [2009/04/09 21:17:08 | 000,237,568 | ---- | M] (AlcorMicro Co., Ltd.) -- C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
PRC - [2009/02/03 21:15:18 | 000,111,856 | ---- | M] (Yahoo! Inc) -- C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
PRC - [2008/12/22 16:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\WDC.exe
PRC - [2008/12/12 11:17:38 | 000,238,888 | ---- | M] (Apple Inc.) -- C:\Program Files\Bonjour\mDNSResponder.exe
PRC - [2008/11/10 04:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/10/25 11:44:34 | 000,031,072 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2008/08/13 20:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files\ASUS\ATK Hotkey\KBFiltr.exe
PRC - [2008/07/18 18:52:16 | 000,104,936 | ---- | M] (CyberLink) -- C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2008/04/02 18:09:50 | 000,087,336 | ---- | M] (Cyberlink Corp.) -- C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
PRC - [2007/11/30 10:20:44 | 000,051,768 | ---- | M] () -- C:\Program Files\ASUS\ASUS Live Update\ALU.exe
PRC - [2007/11/20 12:50:36 | 001,145,400 | ---- | M] (ASUS) -- C:\Program Files\ASUS\Net4Switch\Net4Switch.exe
PRC - [2007/08/07 23:08:40 | 000,094,208 | ---- | M] () -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe
PRC - [2007/08/03 11:24:54 | 000,125,496 | ---- | M] () -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
PRC - [2007/01/09 10:25:29 | 000,272,024 | R--- | M] () -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe
PRC - [2006/01/17 01:05:20 | 001,527,895 | ---- | M] (The Firebird Project) -- C:\Program Files\DRoster\Firebird\bin\fbserver.exe
PRC - [2006/01/17 01:05:20 | 000,065,536 | ---- | M] (The Firebird Project) -- C:\Program Files\DRoster\Firebird\bin\fbguard.exe
PRC - [2005/07/06 14:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\Windows\System32\ACEngSvr.exe

jzown · « **Reply #19 on:** March 02, 2010, 05:20:36 PM »

========== Modules (SafeList) ==========

MOD - [2010/02/27 12:28:01 | 000,549,888 | ---- | M] (OldTimer Tools) -- C:\Users\asus\Desktop\OTL.exe
MOD - [2009/07/14 09:16:15 | 000,099,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sspicli.dll
MOD - [2009/07/14 09:16:13 | 000,092,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sechost.dll
MOD - [2009/07/14 09:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\profapi.dll
MOD - [2009/07/14 09:15:35 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\KernelBase.dll
MOD - [2009/07/14 09:15:13 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmapi.dll
MOD - [2009/07/14 09:15:11 | 000,064,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\devobj.dll
MOD - [2009/07/14 09:15:07 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptbase.dll
MOD - [2009/07/14 09:15:02 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cfgmgr32.dll
MOD - [2009/07/14 09:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
MOD - [2009/06/12 10:52:32 | 000,248,832 | ---- | M] (ELAN Microelectronic Corp.) -- C:\Program Files\Elantech\ETDApix.dll

========== Win32 Services (SafeList) ==========

SRV - [2010/02/12 02:53:39 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/02/12 02:53:39 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/02/12 02:53:39 | 000,040,384 | ---- | M] (ALWIL Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/01/27 14:09:23 | 000,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Google Update Service (gupdate)
SRV - [2010/01/22 19:16:30 | 000,545,576 | ---- | M] (Apple Inc.) [On_Demand | Running] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2009/12/01 09:19:34 | 000,182,768 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2009/08/28 19:42:54 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009/07/23 16:13:38 | 000,306,232 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\System32\Fast Boot\FastBootAgent.exe -- (FastBootAgent)
SRV - [2009/07/14 09:16:21 | 000,185,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wwansvc.dll -- (WwanSvc)
SRV - [2009/07/14 09:16:17 | 000,151,552 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\wbiosrvc.dll -- (WbioSrvc)
SRV - [2009/07/14 09:16:17 | 000,119,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\umpo.dll -- (Power)
SRV - [2009/07/14 09:16:16 | 000,037,376 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\themeservice.dll -- (Themes)
SRV - [2009/07/14 09:16:15 | 000,053,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sppuinotify.dll -- (sppuinotify)
SRV - [2009/07/14 09:16:13 | 000,043,520 | ---- | M] (Microsoft Corporation) [Unknown | Running] -- C:\Windows\System32\RpcEpMap.dll -- (RpcEptMapper)
SRV - [2009/07/14 09:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (PNRPsvc)
SRV - [2009/07/14 09:16:12 | 000,269,824 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\pnrpsvc.dll -- (p2pimsvc)
SRV - [2009/07/14 09:16:12 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\System32\provsvc.dll -- (HomeGroupProvider)
SRV - [2009/07/14 09:16:12 | 000,020,480 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\pnrpauto.dll -- (PNRPAutoReg)
SRV - [2009/07/14 09:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/07/14 09:15:36 | 000,194,560 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\ListSvc.dll -- (HomeGroupListener)
SRV - [2009/07/14 09:15:21 | 000,797,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009/07/14 09:15:11 | 000,253,440 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\dhcpcore.dll -- (Dhcp)
SRV - [2009/07/14 09:15:10 | 000,218,624 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\defragsvc.dll -- (defragsvc)
SRV - [2009/07/14 09:14:59 | 000,076,800 | ---- | M] (Microsoft Corporation) [Unknown | Stopped] -- C:\Windows\System32\bdesvc.dll -- (BDESVC)
SRV - [2009/07/14 09:14:58 | 000,088,064 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\AxInstSv.dll -- (AxInstSV) ActiveX Installer (AxInstSV)
SRV - [2009/07/14 09:14:53 | 000,027,648 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\appidsvc.dll -- (AppIDSvc)
SRV - [2009/07/14 09:14:29 | 003,179,520 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\System32\sppsvc.exe -- (sppsvc)
SRV - [2009/06/15 16:30:42 | 000,084,536 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files\ASUS\ATK Hotkey\AsLdrSrv.exe -- (ASLDRService)
SRV - [2008/12/12 11:17:38 | 000,238,888 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Bonjour\mDNSResponder.exe -- (Bonjour Service)
SRV - [2008/11/10 04:48:14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008/11/04 01:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2008/10/25 11:44:08 | 000,065,888 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2007/08/07 23:08:40 | 000,094,208 | ---- | M] () [Auto | Running] -- C:\Program Files\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2007/08/03 11:24:54 | 000,125,496 | ---- | M] () [On_Demand | Running] -- C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe -- (spmgr)
SRV - [2007/01/09 10:25:29 | 000,272,024 | R--- | M] () [On_Demand | Running] -- C:\Program Files\CyberLink\Shared Files\RichVideo.exe -- (RichVideo) Cyberlink RichVideo Service(CRVS)
SRV - [2006/10/26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006/01/17 01:05:20 | 001,527,895 | ---- | M] (The Firebird Project) [On_Demand | Running] -- C:\Program Files\DRoster\Firebird\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2006/01/17 01:05:20 | 000,065,536 | ---- | M] (The Firebird Project) [Auto | Running] -- C:\Program Files\DRoster\Firebird\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ph.msn.com/?rd=1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A2 85 F5 46 D4 7E CA 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,XMLHTTP_UUID_Default = 9D EB 60 01 41 72 FA 4C 94 48 0E DF 21 A8 04 7E [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginen ame: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.livingtohim.com/"
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:3.3.0.3971
FF - prefs.js..keyword.URL: ""

FF - HKLM\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\MyWebSearch\bar\1.bin File not found
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/28 19:29:39 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/28 19:29:37 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/01/28 19:29:39 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/01/28 19:29:37 | 000,000,000 | ---D | M]

[2010/01/23 09:41:34 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\mozilla\Extensions
[2010/01/23 09:41:34 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\mozilla\Extensions\[email protected]
[2010/02/24 16:36:43 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\mozilla\Firefox\Profiles\zrgt56v5.default\extensions
[2009/12/31 20:03:08 | 000,002,258 | ---- | M] () -- C:\Users\asus\AppData\Roaming\Mozilla\FireFox\Profiles\zrgt56v5.default\searchplugins\askcom.xml
[2010/02/24 16:17:26 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2007/03/10 07:16:44 | 000,189,496 | ---- | M] (Yahoo! Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npyaxmpb.dll

O1 HOSTS File: ([2010/02/24 16:27:42 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll (Yahoo! Inc)
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe (AlcorMicro Co., Ltd.)
O4 - HKLM..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe (Apple Inc.)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files\ASUS\ATKOSD2\ATKOSD2.exe (ASUS)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [ETDWare] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKCU..\Run: [AnumanLive] C:\Users\asus\AppData\Roaming\Anuman Interactive\AnumanLive\AnumanLive.exe (Anuman Interactive)
O4 - HKCU..\Run: [Messenger (Yahoo!)] C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - HKCU..\Run: [Search Protection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKCU..\Run: [Speech Recognition] C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe (Yahoo! Inc)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O8 - Extra context menu item: Save video on Savevid.com - C:\\Program Files\\savevid\\redirect.htm ()
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Program Files\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll (Installation Support)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 121.1.3.81 121.1.3.16 121.1.3.66
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\Windows\System32\igfxdev.dll (Intel Corporation)
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - Reg Error: Key error. File not found
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/11 05:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

jzown · « **Reply #20 on:** March 02, 2010, 05:21:50 PM »

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias [2009/07/14 10:37:08 | 000,000,000 | ---D | M]
NetSvcs: Irmon - C:\Windows\System32\irmon.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: Wmi - C:\Windows\System32\wmi.dll (Microsoft Corporation)
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found
NetSvcs: Themes - C:\Windows\System32\themeservice.dll (Microsoft Corporation)
NetSvcs: BDESVC - C:\Windows\System32\bdesvc.dll (Microsoft Corporation)

MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: ASUS Camera ScreenSaver - hkey= - key= - C:\Windows\AsScrProlog.exe (ASUS)
MsConfig - StartUpReg: ASUS Screen Saver Protector - hkey= - key= - C:\Windows\AsScrPro.exe (ASUS)
MsConfig - StartUpReg: CLMLServer - hkey= - key= - C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe (CyberLink)
MsConfig - StartUpReg: LanguageShortcut - hkey= - key= - C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
MsConfig - StartUpReg: RemoteControl - hkey= - key= - C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe (Cyberlink Corp.)

SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Power - C:\Windows\System32\umpo.dll (Microsoft Corporation)
SafeBootMin: Primary disk - Driver Group
SafeBootMin: RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: Dhcp - C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: ndiscap - C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Power - C:\Windows\System32\umpo.dll (Microsoft Corporation)
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: RpcEptMapper - C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {0291E591-EA41-4c82-8106-3DC6CE7F7664} - Reg Error: Value error.
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} - Reg Error: Value error.
ActiveX: {347B0667-C7ED-429B-BDE3-CC8D3BACAA31} - Reg Error: Value error.
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Reg Error: Value error.
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)

========== Files/Folders - Created Within 14 Days ==========

[2010/02/27 12:27:49 | 000,549,888 | ---- | C] (OldTimer Tools) -- C:\Users\asus\Desktop\OTL.exe
[2010/02/26 07:19:24 | 000,356,431 | ---- | C] (The Firebird Project) -- C:\Windows\System32\fbclient.dll
[2010/02/26 07:19:24 | 000,299,008 | ---- | C] (http://www.progdigy.com) -- C:\Windows\System32\dbexpUIBfire15.dll
[2010/02/26 07:19:23 | 000,000,000 | ---D | C] -- C:\Program Files\DRoster
[2010/02/24 18:29:07 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Anuman Interactive
[2010/02/24 17:22:18 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Playrix Entertainment
[2010/02/24 17:21:57 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\AlawarWrapper
[2010/02/24 17:21:57 | 000,000,000 | ---D | C] -- C:\ProgramData\AlawarWrapper
[2010/02/24 17:20:10 | 000,000,000 | ---D | C] -- C:\Program Files\Alawar
[2010/02/24 16:27:47 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2010/02/24 16:25:23 | 000,000,000 | ---D | C] -- C:\Device
[2010/02/24 16:18:36 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2010/02/24 15:50:50 | 000,212,480 | ---- | C] (SteelWerX) -- C:\Windows\SWXCACLS.exe
[2010/02/24 15:50:47 | 000,000,000 | ---D | C] -- C:\32788R22FWJFW
[2010/02/24 15:47:44 | 000,161,792 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2010/02/24 15:47:44 | 000,136,704 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2010/02/24 15:47:44 | 000,031,232 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2010/02/24 15:47:01 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2010/02/24 15:46:48 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/02/24 13:09:11 | 000,347,648 | ---- | C] (Anuman Interactive) -- C:\Users\asus\Documents\Archi3D_1_5.exe
[2010/02/18 22:41:01 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN
[2010/02/18 22:35:48 | 000,000,000 | ---D | C] -- C:\Users\asus\AppData\Roaming\Malwarebytes
[2010/02/18 22:35:41 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010/02/18 22:35:39 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010/02/18 22:35:39 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010/02/18 22:35:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010/02/18 09:07:18 | 000,162,512 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswSP.sys
[2010/02/18 09:07:18 | 000,019,024 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2010/02/18 09:07:17 | 000,023,376 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2010/02/18 09:07:16 | 000,051,792 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2010/02/18 09:07:16 | 000,046,672 | ---- | C] (ALWIL Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2010/02/18 09:06:45 | 000,153,184 | ---- | C] (ALWIL Software) -- C:\Windows\System32\aswBoot.exe
[2010/02/18 09:06:45 | 000,038,848 | ---- | C] (ALWIL Software) -- C:\Windows\System32\avastSS.scr
[2010/02/15 10:31:29 | 000,055,656 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2010/02/14 23:25:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Windows Live
[2010/02/14 13:45:01 | 000,000,000 | ---D | C] -- C:\Program Files\Safari
[2010/02/13 15:05:41 | 000,000,000 | ---D | C] -- C:\Users\asus\Documents\sarah
[2009/11/27 20:28:31 | 000,150,072 | ---- | C] (ASUS) -- C:\ProgramData\AsDIPM.exe
[2009/11/27 20:28:18 | 000,013,880 | ---- | C] ( ) -- C:\Windows\System32\drivers\kbfiltr.sys
[2008/08/11 20:45:20 | 000,155,648 | ---- | C] (ASUS) -- C:\Program Files\Common Files\MSIactionall.dll

========== Files - Modified Within 14 Days ==========

jzown · « **Reply #21 on:** March 02, 2010, 05:23:26 PM »

[2010/02/27 12:31:21 | 004,194,304 | -HS- | M] () -- C:\Users\asus\ntuser.dat
[2010/02/27 12:28:01 | 000,549,888 | ---- | M] (OldTimer Tools) -- C:\Users\asus\Desktop\OTL.exe
[2010/02/27 12:25:00 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010/02/27 11:41:44 | 008,121,344 | ---- | M] () -- C:\Users\asus\Documents\Important notes about the Journey.doc
[2010/02/27 11:11:52 | 001,080,320 | ---- | M] () -- C:\Users\asus\Documents\Shepherds' Reading Material.doc
[2010/02/27 10:40:24 | 001,021,440 | ---- | M] () -- C:\Users\asus\Documents\Reading materials.doc
[2010/02/27 10:36:20 | 001,486,336 | ---- | M] () -- C:\Users\asus\Documents\Journey Introduction.doc
[2010/02/27 10:25:31 | 000,045,056 | ---- | M] () -- C:\Windows\System32\acovcnt.exe
[2010/02/27 10:25:30 | 000,000,878 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010/02/27 10:20:25 | 000,011,056 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010/02/27 10:20:25 | 000,011,056 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010/02/27 10:17:33 | 000,713,888 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010/02/27 10:17:33 | 000,615,360 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010/02/27 10:17:33 | 000,103,702 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010/02/27 10:13:17 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010/02/27 10:13:10 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010/02/27 10:13:03 | 1583,153,152 | -HS- | M] () -- C:\hiberfil.sys
[2010/02/27 01:52:50 | 001,965,561 | -H-- | M] () -- C:\Users\asus\AppData\Local\IconCache.db
[2010/02/26 18:30:29 | 000,100,352 | ---- | M] () -- C:\Users\asus\Documents\My Weekly Planner V1.4.xls
[2010/02/26 18:13:12 | 000,104,960 | ---- | M] () -- C:\Users\asus\Documents\My Weekly Planner.xls
[2010/02/26 07:19:25 | 000,001,761 | ---- | M] () -- C:\Users\asus\Desktop\DRoster.lnk
[2010/02/25 20:54:34 | 000,085,797 | ---- | M] () -- C:\Users\asus\Desktop\Cheetah-Anti-Rogue.cmd
[2010/02/25 20:54:24 | 000,001,465 | ---- | M] () -- C:\Users\asus\Desktop\Cheetah-Anti-Rogue - Shortcut.lnk
[2010/02/24 17:20:59 | 000,001,992 | ---- | M] () -- C:\Users\asus\Desktop\Alawar Games.lnk
[2010/02/24 16:27:47 | 000,000,215 | ---- | M] () -- C:\Windows\system.ini
[2010/02/24 16:27:42 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2010/02/24 15:45:06 | 000,000,996 | ---- | M] () -- C:\Users\asus\Desktop\ComboFix - Shortcut.lnk
[2010/02/24 13:09:13 | 000,347,648 | ---- | M] (Anuman Interactive) -- C:\Users\asus\Documents\Archi3D_1_5.exe
[2010/02/24 00:11:49 | 000,078,564 | ---- | M] () -- C:\Users\asus\Documents\arch things keeper2.skp
[2010/02/23 22:59:41 | 000,439,781 | ---- | M] () -- C:\Users\asus\Documents\Gazeebo.jpg
[2010/02/23 09:37:03 | 000,011,028 | ---- | M] () -- C:\Users\asus\Documents\eng10 poem.docx
[2010/02/23 09:36:51 | 000,017,218 | ---- | M] () -- C:\Users\asus\Documents\Reaction paper.docx
[2010/02/19 09:42:26 | 000,028,291 | ---- | M] () -- C:\Users\asus\Documents\Expenses.xlsx
[2010/02/19 08:28:38 | 000,110,000 | ---- | M] () -- C:\Users\asus\AppData\Local\GDIPFONTCACHEV1.DAT
[2010/02/19 03:21:56 | 000,403,456 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010/02/19 03:02:02 | 000,000,478 | ---- | M] () -- C:\Windows\win.ini
[2010/02/18 22:41:20 | 000,001,024 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2010/02/18 22:35:44 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/02/18 22:00:53 | 000,001,984 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/02/18 09:12:02 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2010/02/18 09:07:18 | 000,002,005 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2010/02/17 19:06:43 | 005,958,682 | ---- | M] () -- C:\Users\asus\Documents\Gazeebo.skp
[2010/02/17 18:40:16 | 005,199,296 | ---- | M] () -- C:\Users\asus\Documents\AutoSave_Untitled.skp
[2010/02/15 14:54:10 | 000,000,024 | ---- | M] () -- C:\Windows\ATKPF.ini
[2010/02/15 12:40:16 | 000,246,272 | ---- | M] () -- C:\Users\asus\Documents\Menu(1).xls
[2010/02/15 12:20:30 | 000,007,589 | ---- | M] () -- C:\Users\asus\Desktop\PlantsVsZombies - Shortcut.lnk
[2010/02/15 09:22:24 | 000,002,560 | ---- | M] () -- C:\Windows\_MSRSTRT.EXE
[2010/02/14 14:13:59 | 000,002,429 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk

========== Files Created - No Company Name ==========

[2010/02/27 11:56:26 | 001,486,336 | ---- | C] () -- C:\Users\asus\Documents\Journey Introduction.doc
[2010/02/27 11:56:26 | 001,080,320 | ---- | C] () -- C:\Users\asus\Documents\Shepherds' Reading Material.doc
[2010/02/27 11:56:26 | 001,021,440 | ---- | C] () -- C:\Users\asus\Documents\Reading materials.doc
[2010/02/27 11:41:42 | 008,121,344 | ---- | C] () -- C:\Users\asus\Documents\Important notes about the Journey.doc
[2010/02/26 18:08:22 | 000,104,960 | ---- | C] () -- C:\Users\asus\Documents\My Weekly Planner.xls
[2010/02/26 17:12:48 | 000,100,352 | ---- | C] () -- C:\Users\asus\Documents\My Weekly Planner V1.4.xls
[2010/02/26 07:19:25 | 000,001,761 | ---- | C] () -- C:\Users\asus\Desktop\DRoster.lnk
[2010/02/25 20:54:00 | 000,001,465 | ---- | C] () -- C:\Users\asus\Desktop\Cheetah-Anti-Rogue - Shortcut.lnk
[2010/02/24 17:20:59 | 000,001,992 | ---- | C] () -- C:\Users\asus\Desktop\Alawar Games.lnk
[2010/02/24 15:47:45 | 000,077,312 | ---- | C] () -- C:\Windows\MBR.exe
[2010/02/24 15:47:44 | 000,261,632 | ---- | C] () -- C:\Windows\PEV.exe
[2010/02/24 15:47:44 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2010/02/24 15:47:44 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2010/02/24 15:47:44 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2010/02/24 15:45:06 | 000,000,996 | ---- | C] () -- C:\Users\asus\Desktop\ComboFix - Shortcut.lnk
[2010/02/24 00:11:49 | 000,078,564 | ---- | C] () -- C:\Users\asus\Documents\arch things keeper2.skp
[2010/02/23 22:59:40 | 000,439,781 | ---- | C] () -- C:\Users\asus\Documents\Gazeebo.jpg
[2010/02/23 11:11:28 | 000,085,797 | ---- | C] () -- C:\Users\asus\Desktop\Cheetah-Anti-Rogue.cmd
[2010/02/23 09:37:03 | 000,011,028 | ---- | C] () -- C:\Users\asus\Documents\eng10 poem.docx
[2010/02/23 09:36:50 | 000,017,218 | ---- | C] () -- C:\Users\asus\Documents\Reaction paper.docx
[2010/02/18 22:41:20 | 000,001,024 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2010/02/18 22:35:44 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010/02/18 22:00:53 | 000,001,984 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010/02/18 09:07:18 | 000,002,005 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2010/02/17 19:06:32 | 005,958,682 | ---- | C] () -- C:\Users\asus\Documents\Gazeebo.skp
[2010/02/17 18:40:15 | 005,067,554 | ---- | C] () -- C:\Users\asus\Documents\AutoSave_Untitled.skb
[2010/02/15 09:22:23 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2010/02/14 14:13:59 | 000,002,429 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010/01/30 12:20:15 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/01/27 19:04:33 | 000,001,372 | ---- | C] () -- C:\Users\asus\AppData\Roaming\AObWg.vbs
[2010/01/27 06:59:18 | 000,001,372 | ---- | C] () -- C:\Users\asus\AppData\Roaming\votKE.vbs
[2010/01/26 21:20:07 | 000,001,372 | ---- | C] () -- C:\Users\asus\AppData\Roaming\W6K0v4t.vbs
[2010/01/26 04:26:49 | 000,000,034 | ---- | C] () -- C:\Users\asus\AppData\Roaming\63a694a
[2010/01/26 04:17:42 | 000,001,372 | ---- | C] () -- C:\Users\asus\AppData\Roaming\x26h5.vbs
[2010/01/23 10:08:14 | 000,001,372 | ---- | C] () -- C:\Users\asus\AppData\Roaming\HdYkQO4STRSKoMB.vbs
[2010/01/23 10:06:24 | 000,001,372 | ---- | C] () -- C:\Users\asus\AppData\Roaming\apPkh7A.vbs
[2010/01/19 21:19:55 | 000,000,000 | ---- | C] () -- C:\Windows\PROTOCOL.INI
[2010/01/19 21:19:45 | 000,049,152 | ---- | C] () -- C:\Windows\System32\PALMDB.DLL
[2009/11/28 21:43:06 | 000,000,024 | ---- | C] () -- C:\Windows\ATKPF.ini
[2009/11/28 20:22:53 | 000,007,168 | ---- | C] () -- C:\Users\asus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009/11/27 20:43:38 | 000,053,248 | ---- | C] () -- C:\Windows\System32\LogonStart.dll
[2009/11/27 20:36:22 | 001,766,592 | ---- | C] () -- C:\Windows\System32\drivers\snp2uvc.sys
[2009/11/27 20:36:22 | 000,035,264 | ---- | C] () -- C:\Windows\System32\drivers\sncduvc.sys
[2009/11/27 20:31:30 | 000,140,288 | ---- | C] () -- C:\Windows\System32\igfxtvcx.dll
[2009/07/14 07:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009/07/14 07:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009/04/08 09:31:56 | 000,106,496 | ---- | C] () -- C:\Program Files\Common Files\CPInstallAction.dll
[2008/05/22 07:35:54 | 000,051,962 | ---- | C] () -- C:\Program Files\Common Files\banner.jpg
[2007/06/12 08:34:50 | 000,035,822 | ---- | C] () -- C:\Program Files\Common Files\ASPG_icon.ico

========== LOP Check ==========

[2010/02/24 18:29:07 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Anuman Interactive
[2010/01/19 22:06:41 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\ICE Book Reader Professional
[2010/02/24 17:22:18 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Playrix Entertainment
[2010/01/19 20:35:29 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Uniblue
[2010/02/09 08:30:09 | 000,000,000 | ---D | M] -- C:\Users\asus\AppData\Roaming\Windows SideBar
[2010/02/03 15:41:22 | 000,032,598 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< %systemroot%\*. /mp /s >

< c:\$recycle.bin\*.* /s >
[2010/02/24 18:28:46 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I0BVNJE.skp
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I0FJC1Z.zip
[2010/02/26 23:59:58 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I1HPRTS.txt
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I2532NN.zip
[2010/02/24 20:06:21 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I27JX92.zip
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I2IP4GM.zip
[2010/02/24 19:29:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I4IWVUO.skb
[2010/02/24 19:29:31 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I6JZQV0.jpg
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I70BNTE.zip
[2010/02/27 00:00:00 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I80RH6Z.txt
[2010/02/24 19:29:27 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I8A3R8U.skp
[2010/02/24 18:28:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I8NWJXH.skp
[2010/02/24 18:31:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I8R6RMN.lnk
[2010/02/24 19:30:19 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I9I1KJ1.skp
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I9JEQ5J.zip
[2010/02/24 18:28:25 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$I9MEQUI.skb
[2010/02/24 18:28:35 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IA0B1U0.pptx
[2010/02/24 20:06:17 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IDEM52K.zip
[2010/02/24 18:28:08 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IEO9849.exe
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IEUCSAZ.zip
[2010/02/24 18:28:59 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IF7U8IG
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IFS0VKJ.zip
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IG4529T.zip
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IGGO80M.zip
[2010/02/24 20:06:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IK6G4UI.zip
[2010/02/24 18:28:50 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IL2LLBG.skb
[2010/02/24 19:28:24 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IPJBBZX.exe
[2010/02/24 19:28:15 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IQUT4OH.skp
[2010/02/25 15:00:03 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IS11BVC.lnk
[2010/02/24 19:29:38 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IULFRIY.skp
[2010/02/24 18:30:12 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IVCZ0LR.docx
[2010/02/27 00:00:02 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IVWISAY.txt
[2010/02/24 19:28:18 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IW3S5MB.skb
[2010/02/26 23:59:52 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IWG2RXO.txt
[2010/02/24 18:29:29 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IYWTDLQ
[2010/02/24 19:29:22 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$IZJTT78.pdf
[2010/02/17 17:24:18 | 005,947,777 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R0BVNJE.skp
[2010/02/24 19:53:54 | 004,883,731 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R0FJC1Z.zip
[2010/02/26 18:58:50 | 000,614,198 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R1HPRTS.txt
[2010/02/24 19:46:54 | 003,939,285 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R2532NN.zip
[2010/02/24 20:04:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R27JX92.zip
[2010/02/24 19:45:43 | 002,313,663 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R2IP4GM.zip
[2010/02/12 15:41:44 | 000,201,123 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R4IWVUO.skb
[2010/02/16 22:55:26 | 000,307,524 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R6JZQV0.jpg
[2010/02/24 19:45:49 | 004,141,366 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R70BNTE.zip
[2010/02/26 19:05:43 | 000,286,613 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R80RH6Z.txt
[2010/02/12 13:46:27 | 000,872,120 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R8A3R8U.skp
[2010/01/19 16:24:39 | 000,128,355 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R8NWJXH.skp
[2010/02/24 17:20:58 | 000,001,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R8R6RMN.lnk
[2010/02/12 17:28:56 | 000,304,152 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R9I1KJ1.skp
[2010/02/24 19:55:26 | 006,555,070 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R9JEQ5J.zip
[2010/01/19 01:01:04 | 000,127,459 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$R9MEQUI.skb
[2010/02/17 00:16:17 | 003,809,266 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RA0B1U0.pptx
[2010/02/24 19:43:42 | 002,038,997 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RDEM52K.zip
[2010/02/24 13:52:27 | 095,467,984 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$REO9849.exe
[2010/02/24 19:50:25 | 001,869,815 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$REUCSAZ.zip
[2010/02/24 19:50:28 | 002,795,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RFS0VKJ.zip
[2010/02/24 19:54:29 | 004,840,353 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RG4529T.zip
[2010/02/24 19:55:09 | 005,345,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RGGO80M.zip
[2010/02/24 19:54:31 | 004,879,040 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RK6G4UI.zip
[2010/02/12 14:11:44 | 005,927,130 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RL2LLBG.skb
[2010/02/15 10:29:14 | 030,909,992 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RPJBBZX.exe
[2010/02/12 16:50:49 | 000,292,628 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RQUT4OH.skp
[2010/02/24 18:29:11 | 000,001,093 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RS11BVC.lnk
[2010/02/12 14:11:06 | 000,531,811 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RULFRIY.skp
[2010/01/23 00:07:21 | 000,013,481 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RVCZ0LR.docx
[2010/02/26 19:05:58 | 000,578,844 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RVWISAY.txt
[2010/02/12 15:47:32 | 000,270,922 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RW3S5MB.skb
[2010/02/25 20:54:59 | 000,000,295 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RWG2RXO.txt
[2010/02/24 13:59:07 | 021,317,561 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RZJTT78.pdf
[2010/02/24 16:27:47 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\desktop.ini
[2010/01/19 22:51:30 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RF7U8IG\myviewpad.cfg
[2010/01/19 21:47:37 | 000,000,301 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RF7U8IG\Licenses\icp.lic
[2004/08/13 12:10:08 | 000,665,600 | ---- | M] (DC & Co.) -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\iSilo.exe
[2009/03/25 21:35:48 | 013,048,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\BIBLE\Full RcV Bible + Concordance.pdb
[2006/02/07 23:33:10 | 000,004,349 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\BIBLE\Subjects of the Bible.pdb
[2003/07/19 20:20:28 | 002,542,868 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\BIBLE\The NT RV(with footnotes).pdb
[2005/07/02 16:20:02 | 001,552,017 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\HYMNS\Campus Songbook.pdb
[2009/03/25 11:00:16 | 001,836,596 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\HYMNS\HYMNS--Taglish.pdb
[2010/01/19 22:26:14 | 000,079,872 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\HYMNS\NWC (New hymns with chords).doc
[2006/06/19 13:39:14 | 000,026,938 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\HYMNS\NWC (New hymns with chords).pdb
[2010/01/19 22:25:50 | 000,125,695 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\HYMNS\NWC (New hymns with chords).pdf
[2007/05/26 14:52:44 | 000,247,254 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\HYMNS\YP SONGS.pdb
[2010/01/19 22:37:45 | 000,421,319 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\HYMNS\YP SONGS.pdf
[2008/08/16 22:11:54 | 004,298,899 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WATCHMAN NEE\Collected Works of W. Nee-Set1.pdb
[2006/03/24 20:01:04 | 004,574,328 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WATCHMAN NEE\Collected Works of W. Nee-Set2.pdb
[2008/08/16 22:11:04 | 003,861,481 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WATCHMAN NEE\Collected Works of W. Nee-Set3.pdb
[2004/12/13 16:57:38 | 000,157,893 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WATCHMAN NEE\Love Not The World.pdb
[2004/12/13 16:48:28 | 000,173,454 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WATCHMAN NEE\The Normal Christian Life.pdb
[2008/10/04 15:17:52 | 000,192,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WATCHMAN NEE\The Spritual Man -WatchmanNee.pdb
[2004/12/13 16:32:28 | 001,199,251 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WATCHMAN NEE\W. Nee-Selected Titles.pdb
[2006/02/11 06:47:24 | 000,208,219 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WATCHMAN NEE\Watchman Nee.pdb
[2006/02/14 20:38:06 | 000,008,923 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\Four Pillars.pdb
[2006/02/11 19:08:18 | 004,357,581 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\High Peak Books.pdb
[2009/02/01 20:22:22 | 000,068,317 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\HIGH PEAK TRUTHS.pdb
[2009/05/22 07:27:40 | 015,322,488 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\LIFE-STUDY of the Bible.pdb
[2009/02/15 12:53:02 | 024,505,822 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\MINISTRY BOOKS.pdb
[2008/12/30 19:57:40 | 000,297,661 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\SEER of the DIVINE REVELATION.pdb
[2005/03/11 23:35:54 | 000,078,992 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\Witness Lee.pdb
[2008/12/18 20:37:50 | 000,787,304 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\tagalog_LS-of the Bible\HEBREO.PDB
[2008/11/20 23:06:14 | 000,874,264 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\tagalog_LS-of the Bible\MATEO.PDB
[2008/01/22 19:27:10 | 000,181,467 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#001-20.PDB
[2005/06/07 14:04:12 | 000,112,005 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#050-62.PDB
[2005/06/07 14:04:12 | 000,146,160 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#063-78.PDB
[2005/06/07 14:04:10 | 000,166,588 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#079-98.PDB
[2005/06/07 14:04:10 | 000,138,665 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#099-113.PDB
[2005/06/07 14:04:10 | 000,182,995 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#135-156.PDB
[2005/06/07 14:04:08 | 000,142,963 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#157-171.PDB
[2005/06/07 14:04:08 | 000,142,377 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#172-188.PDB
[2005/06/07 14:04:08 | 000,121,004 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#189-204.PDB
[2005/06/07 14:04:08 | 000,119,598 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#205-220.PDB
[2005/06/07 14:04:06 | 000,163,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#221-239.PDB
[2005/06/07 14:04:06 | 000,065,572 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#254-264.PDB
[2005/06/07 14:04:06 | 000,074,752 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3700249225-377167718-3011753198-1000\$RYWTDLQ\WITNESS LEE\WLee Conclusion of the New Testament\#265-277.PDB

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2010-02-25 23:17:17

jzown · « **Reply #22 on:** March 02, 2010, 05:24:28 PM »

< MD5 for: AGP440.SYS >
[2009/07/14 09:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\ERDNT\cache\AGP440.sys
[2009/07/14 09:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/14 09:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_65848c2d7375a720\AGP440.sys
[2009/07/14 09:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_b9e9435f20046eeb\AGP440.sys

< MD5 for: ATAPI.SYS >
[2009/07/14 09:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\ERDNT\cache\atapi.sys
[2009/07/14 09:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 09:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_f64b9c35a3a5be81\atapi.sys
[2009/07/14 09:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_dd0e7e3d82dd640d\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2009/07/14 09:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\System32\autochk.exe
[2009/07/14 09:14:12 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=41E4C8EBA464E7D6A5BA5E8827732AEB -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7600.16385_none_e1ca436d2314b860\autochk.exe

< MD5 for: BEEP.SYS >
[2009/07/14 07:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\ERDNT\cache\beep.sys
[2009/07/14 07:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\System32\drivers\beep.sys
[2009/07/14 07:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_c3f6f77668f0ddcc\beep.sys

< MD5 for: CNGAUDIT.DLL >
[2009/07/14 09:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\ERDNT\cache\cngaudit.dll
[2009/07/14 09:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/14 09:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

< MD5 for: EVENTLOG.DLL >
[2007/01/12 21:30:08 | 000,007,216 | ---- | M] () MD5=C2A279A458A06DE2C83D842AA042B5A8 -- C:\Program Files\CyberLink\PowerDirector\EventLog.dll

< MD5 for: EXPLORER.EXE >
[2009/07/14 09:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2009/10/31 13:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\ERDNT\cache\explorer.exe
[2009/10/31 13:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\explorer.exe
[2009/10/31 13:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2009/08/03 13:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009/08/03 13:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009/10/31 14:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe

< MD5 for: IASTOR.SYS >
[2009/06/04 18:43:16 | 000,330,264 | ---- | M] (Intel Corporation) MD5=D483687EACE0C065EE772481A96E05F5 -- C:\Windows\System32\drivers\iaStor.sys
[2009/06/04 18:43:16 | 000,330,264 | ---- | M] (Intel Corporation) MD5=D483687EACE0C065EE772481A96E05F5 -- C:\Windows\System32\DriverStore\FileRepository\iaahci.inf_x86_neutral_4f144d6467fc7c22\iaStor.sys

< MD5 for: IASTORV.SYS >
[2009/07/14 09:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\drivers\iaStorV.sys
[2009/07/14 09:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_18cccb83b34e1453\iaStorV.sys
[2009/07/14 09:20:36 | 000,332,352 | ---- | M] (Intel Corporation) MD5=934AF4D7C5F457B9F0743F4299B77B67 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_aee7a89be91b9000\iaStorV.sys

< MD5 for: IMM32.DLL >
[2009/07/14 09:15:32 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=5DF8132ADF721329234403189FC94E16 -- C:\Windows\ERDNT\cache\imm32.dll
[2009/07/14 09:15:32 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=5DF8132ADF721329234403189FC94E16 -- C:\Windows\System32\imm32.dll
[2009/07/14 09:15:32 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=5DF8132ADF721329234403189FC94E16 -- C:\Windows\winsxs\x86_microsoft-windows-imm32_31bf3856ad364e35_6.1.7600.16385_none_5c2c7439dbbe9273\imm32.dll

< MD5 for: KERNEL32.DLL >
[2009/12/08 19:33:31 | 000,857,088 | ---- | M] (Microsoft Corporation) MD5=0369BA73CE6D918745579B24339765E8 -- C:\Windows\ERDNT\cache\kernel32.dll
[2009/12/08 19:33:31 | 000,857,088 | ---- | M] (Microsoft Corporation) MD5=0369BA73CE6D918745579B24339765E8 -- C:\Windows\System32\kernel32.dll
[2009/12/08 19:33:31 | 000,857,088 | ---- | M] (Microsoft Corporation) MD5=0369BA73CE6D918745579B24339765E8 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16481_none_93903c22b7a2b5ea\kernel32.dll
[2009/07/14 09:15:35 | 000,857,088 | ---- | M] (Microsoft Corporation) MD5=4605F7EE9805F7E1C98D6C959DD2949C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.16385_none_93943b64b79f1e1f\kernel32.dll
[2009/12/08 19:57:44 | 000,857,088 | ---- | M] (Microsoft Corporation) MD5=EB7B2309A2B16EEB73C2C13477FEF8FB -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7600.20591_none_940f0901d0c871a5\kernel32.dll

< MD5 for: MSWSOCK.DLL >
[2009/07/14 09:15:51 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=11A41F17527ED75D6B758FDD7F4FD00D -- C:\Windows\ERDNT\cache\mswsock.dll
[2009/07/14 09:15:51 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=11A41F17527ED75D6B758FDD7F4FD00D -- C:\Windows\System32\mswsock.dll
[2009/07/14 09:15:51 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=11A41F17527ED75D6B758FDD7F4FD00D -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7600.16385_none_b829ad298e9f53ff\mswsock.dll

< MD5 for: NDIS.SYS >
[2009/07/14 09:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\ERDNT\cache\ndis.sys
[2009/07/14 09:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\System32\drivers\ndis.sys
[2009/07/14 09:20:44 | 000,710,720 | ---- | M] (Microsoft Corporation) MD5=23759D175A0A9BAAF04D05047BC135A8 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_a79d81ea7d62a289\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009/07/14 09:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\ERDNT\cache\netlogon.dll
[2009/07/14 09:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\System32\netlogon.dll
[2009/07/14 09:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_fd8e0d66994d7dc8\netlogon.dll

< MD5 for: NTFS.SYS >
[2009/07/14 09:20:44 | 001,210,432 | ---- | M] (Microsoft Corporation) MD5=3795DCD21F740EE799FB7223234215AF -- C:\Windows\ERDNT\cache\ntfs.sys
[2009/07/14 09:20:44 | 001,210,432 | ---- | M] (Microsoft Corporation) MD5=3795DCD21F740EE799FB7223234215AF -- C:\Windows\System32\drivers\ntfs.sys
[2009/07/14 09:20:44 | 001,210,432 | ---- | M] (Microsoft Corporation) MD5=3795DCD21F740EE799FB7223234215AF -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7600.16385_none_a6477fe07e3f2f04\ntfs.sys

< MD5 for: NVSTOR.SYS >
[2009/07/14 09:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\drivers\nvstor.sys
[2009/07/14 09:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_5bde3fe2945bce9e\nvstor.sys
[2009/07/14 09:20:44 | 000,142,416 | ---- | M] (NVIDIA Corporation) MD5=C99F251A5DE63C6F129CF71933ACED0F -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_39b1194b205239d8\nvstor.sys

< MD5 for: PROQUOTA.EXE >
[2009/07/14 09:14:29 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=8CDF71E78469BE54C29C1AD2FC8DE611 -- C:\Windows\System32\proquota.exe
[2009/07/14 09:14:29 | 000,028,160 | ---- | M] (Microsoft Corporation) MD5=8CDF71E78469BE54C29C1AD2FC8DE611 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7600.16385_none_279d4dfaf3b8bd5a\proquota.exe

< MD5 for: QMGR.DLL >
[2009/07/14 09:16:12 | 000,589,312 | ---- | M] (Microsoft Corporation) MD5=53F476476F55A27F580661BDE09C4EC4 -- C:\Windows\ERDNT\cache\qmgr.dll
[2009/07/14 09:16:12 | 000,589,312 | ---- | M] (Microsoft Corporation) MD5=53F476476F55A27F580661BDE09C4EC4 -- C:\Windows\System32\qmgr.dll
[2009/07/14 09:16:12 | 000,589,312 | ---- | M] (Microsoft Corporation) MD5=53F476476F55A27F580661BDE09C4EC4 -- C:\Windows\winsxs\x86_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7600.16385_none_23671b105ac5a0fd\qmgr.dll

< MD5 for: SCECLI.DLL >
[2009/07/14 09:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\ERDNT\cache\scecli.dll
[2009/07/14 09:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\System32\scecli.dll
[2009/07/14 09:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_37e4387f3a6f0483\scecli.dll

< MD5 for: SPOOLSV.EXE >
[2009/07/14 09:14:41 | 000,316,416 | ---- | M] (Microsoft Corporation) MD5=49B6DD6AB3715B7A67965F17194E98A9 -- C:\Windows\ERDNT\cache\spoolsv.exe
[2009/07/14 09:14:41 | 000,316,416 | ---- | M] (Microsoft Corporation) MD5=49B6DD6AB3715B7A67965F17194E98A9 -- C:\Windows\System32\spoolsv.exe
[2009/07/14 09:14:41 | 000,316,416 | ---- | M] (Microsoft Corporation) MD5=49B6DD6AB3715B7A67965F17194E98A9 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7600.16385_none_d621f94522dc5a87\spoolsv.exe

< MD5 for: SVCHOST.EXE >
[2009/07/14 09:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\ERDNT\cache\svchost.exe
[2009/07/14 09:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 09:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe

< MD5 for: TERMSRV.DLL >
[2009/07/14 09:16:15 | 000,543,232 | ---- | M] (Microsoft Corporation) MD5=A01E50A04D7B1960B33E92B9080E6A94 -- C:\Windows\ERDNT\cache\termsrv.dll
[2009/07/14 09:16:15 | 000,543,232 | ---- | M] (Microsoft Corporation) MD5=A01E50A04D7B1960B33E92B9080E6A94 -- C:\Windows\System32\termsrv.dll
[2009/07/14 09:16:15 | 000,543,232 | ---- | M] (Microsoft Corporation) MD5=A01E50A04D7B1960B33E92B9080E6A94 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7600.16385_none_8e7597ebb597acd3\termsrv.dll

< MD5 for: USERINIT.EXE >
[2009/07/14 09:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\ERDNT\cache\userinit.exe
[2009/07/14 09:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009/07/14 09:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe

< MD5 for: WS2_32.DLL >
[2009/07/14 09:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\ERDNT\cache\ws2_32.dll
[2009/07/14 09:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\System32\ws2_32.dll
[2009/07/14 09:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7600.16385_none_f28e06e62fa99b35\ws2_32.dll

< %systemroot%\system32\*.dll /lockedfiles >
[2009/07/14 09:15:13 | 000,346,112 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtmsft.dll
[2009/07/14 09:15:13 | 000,215,552 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\dxtrans.dll
[2009/07/14 09:15:36 | 000,226,816 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\Windows\System32\LocationApi.dll

< %systemroot%\Tasks\*.job /lockedfiles >

========== Alternate Data Streams ==========

@Alternate Data Stream - 95 bytes -> C:\ProgramData\Temp:91D5509A
< End of report >

sorry... 2 or 3 replies won't do I guess due to the limit... this is just for the OTL

jzown · « **Reply #23 on:** March 02, 2010, 05:30:18 PM »

OTL Extras logfile created on: 2/27/2010 12:29:22 PM - Run 1
OTL by OldTimer - Version 3.1.30.3 Folder = C:\Users\asus\Desktop
Starter Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.00 Gb Total Physical Memory | 1.00 Gb Available Physical Memory | 65.00% Memory free
4.00 Gb Paging File | 3.00 Gb Available in Paging File | 71.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 116.34 Gb Total Space | 81.64 Gb Free Space | 70.18% Space Free | Partition Type: NTFS
Drive D: | 181.65 Gb Total Space | 177.75 Gb Free Space | 97.85% Space Free | Partition Type: NTFS
Drive E: | 1.14 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 964.00 Mb Total Space | 16.74 Mb Free Space | 1.74% Space Free | Partition Type: FAT32
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: JZOWN
Current User Name: asus
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{06585B02-F20D-4AB2-9A64-86EF2AE0F8F0}" = ASUS AI Recovery
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP1300" = Canon iP1300
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
"{3AC54383-31D1-4907-961B-B12CBB1D0AE8}" = MobileMe Control Panel
"{3B05F2FB-745B-4012-ADF2-439F36B2E70B}" = ATKOSD2
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5A22D889-FBDD-4AE8-86EC-089D45FC133E}" = Alcor Micro USB Card Reader
"{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck
"{60D6618B-153F-4353-8185-908E676E5888}" = ASUS FancyStart
"{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}" = NB Probe
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = CyberLink PowerDVD
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6B77A7F6-DD63-4F13-A6FF-83137A5AC354}" = ASUS CopyProtect
"{6EFA70F2-D6C3-4ECA-BEA9-C1A31277C63A}_is1" = FLV Converter 2.5
"{710ffd13-fed5-4692-9116-deb869c42be7}" = Nero 9 Lite
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7C05592D-424B-46CB-B505-E0013E8E75C9}" = ATK Hotkey
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{9D48531D-2135-49FC-BC29-ACCDA5396A76}" = ASUS MultiFrame
"{9D6D7811-43B3-463C-BC79-5D1755269989}" = Net4Switch
"{A16656CE-4B17-4484-A13F-22B9500E5223}" = Fast Boot
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.1
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D1E5870E-E3E5-4475-98A6-ADD614524ADF}" = ATK Media
"{D36DD326-7280-11D8-97C8-000129760CBE}" = CyberLink PhotoNow
"{D3D54F3E-C5C3-443D-978F-87A72E5616E8}" = ATK Generic Function Service
"{D5A9B7C0-8751-11D8-9D75-000129760D75}" = MediaShow
"{D6E4E5D6-7693-4BB4-95BA-21F38FAFEE90}" = Safari
"{E209F988-EF49-4B3D-84A6-3CBB67F058AC}" = Google SketchUp 7
"{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}" = ASUS Live Update
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}" = iTunes
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Asus_Camera_ScreenSaver" = Asus_Camera_ScreenSaver
"avast5" = avast! Free Antivirus
"Declan's Korean FlashCards_is1" = Declan's Korean FlashCards v2.3
"DRosterByKappix_is1" = DRoster
"Easy-PhotoPrint" = Canon Utilities Easy-PhotoPrint
"Easy-PrintToolBox" = Canon Utilities Easy-PrintToolBox
"El Dorado Quest_is1" = El Dorado Quest
"Elantech" = ETDWare PS/2-x86 7.0.5.5_WHQL
"Encyclopaedia Britannica Ultimate Reference Suite CD-ROM 2004" = Encyclopaedia Britannica Ultimate Reference Suite CD-ROM 2004
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Gardenscapes" = Gardenscapes
"Globe Broadband" = Globe Broadband
"Google Chrome" = Google Chrome
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{5A22D889-FBDD-4AE8-86EC-089D45FC133E}" = Alcor Micro USB Card Reader
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}" = CyberLink PhotoNow
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McAfee Security Scan" = McAfee Security Scan
"Mozilla Firefox (3.6)" = Mozilla Firefox (3.6)
"TVWiz" = Intel(R) TV Wizard
"USB 2.0 1.3M UVC WebCam" = USB 2.0 1.3M UVC WebCam
"VLC media player" = VLC media player 1.0.5
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Search Defender" = Yahoo! Search Protection
"Yahoo! Software Update" = Yahoo! Software Update
"YInstHelper" = Yahoo! Install Manager

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Yahoo! BrowserPlus" = Yahoo! BrowserPlus

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2/19/2010 4:20:05 AM | Computer Name = Jzown | Source = Google Update | ID = 20
Description =

Error - 2/22/2010 6:20:05 AM | Computer Name = Jzown | Source = Google Update | ID = 20
Description =

Error - 2/22/2010 7:20:15 AM | Computer Name = Jzown | Source = Google Update | ID = 20
Description =

Error - 2/23/2010 11:13:01 AM | Computer Name = Jzown | Source = Application Hang | ID = 1002
Description = The program firefox.exe version 1.9.2.3667 stopped interacting with
Windows and was closed. To see if more information about the problem is available,
check the problem history in the Action Center control panel. Process ID: 16e8 Start
Time: 01cab4938b1cb148 Termination Time: 43 Application Path: C:\Program Files\Mozilla
Firefox\firefox.exe Report Id: e0630820-208d-11df-9d63-90e6ba4717d1

Error - 2/24/2010 7:06:45 AM | Computer Name = Jzown | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBE R_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

Error - 2/24/2010 10:20:10 AM | Computer Name = Jzown | Source = Google Update | ID = 20
Description =

Error - 2/25/2010 6:20:05 AM | Computer Name = Jzown | Source = Google Update | ID = 20
Description =

Error - 2/25/2010 6:52:51 AM | Computer Name = Jzown | Source = SideBySide | ID = 16842815
Description = Activation context generation failed for "c:\Program Files\Common
Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "c:\Program
Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBE R_MAJOR.BUILD_NUMBER_MINOR"
of attribute "version" in element "assemblyIdentity" is invalid.

Error - 2/25/2010 7:20:05 AM | Computer Name = Jzown | Source = Google Update | ID = 20
Description =

Error - 2/25/2010 8:20:08 AM | Computer Name = Jzown | Source = Google Update | ID = 20
Description =

[ System Events ]
Error - 2/25/2010 12:41:25 AM | Computer Name = Jzown | Source = Schannel | ID = 36888
Description = The following fatal alert was generated: 10. The internal error state
is 10.

Error - 2/25/2010 12:41:25 AM | Computer Name = Jzown | Source = Schannel | ID = 36888
Description = The following fatal alert was generated: 10. The internal error state
is 10.

Error - 2/25/2010 7:33:36 AM | Computer Name = Jzown | Source = volsnap | ID = 393252
Description = The shadow copies of volume C: were aborted because the shadow copy
storage could not grow due to a user imposed limit.

Error - 2/25/2010 7:19:26 PM | Computer Name = Jzown | Source = Service Control Manager | ID = 7030
Description = The Firebird Guardian - DefaultInstance service is marked as an interactive
service. However, the system is configured to not allow interactive services.
This service may not function properly.

Error - 2/25/2010 7:19:26 PM | Computer Name = Jzown | Source = Service Control Manager | ID = 7030
Description = The Firebird Server - DefaultInstance service is marked as an interactive
service. However, the system is configured to not allow interactive services.
This service may not function properly.

Error - 2/26/2010 4:15:14 AM | Computer Name = Jzown | Source = Schannel | ID = 36888
Description = The following fatal alert was generated: 10. The internal error state
is 10.

Error - 2/26/2010 4:15:19 AM | Computer Name = Jzown | Source = Schannel | ID = 36888
Description = The following fatal alert was generated: 10. The internal error state
is 10.

Error - 2/26/2010 4:15:19 AM | Computer Name = Jzown | Source = Schannel | ID = 36888
Description = The following fatal alert was generated: 10. The internal error state
is 10.

Error - 2/26/2010 10:58:08 PM | Computer Name = Jzown | Source = Schannel | ID = 36888
Description = The following fatal alert was generated: 10. The internal error state
is 10.

Error - 2/26/2010 10:58:50 PM | Computer Name = Jzown | Source = Schannel | ID = 36888
Description = The following fatal alert was generated: 10. The internal error state
is 10.

< End of report >

Dr Jay · « **Reply #24 on:** March 02, 2010, 10:43:38 PM »

Please re-run ComboFix and post a new log.

Computer Hope Forum

News:

Author Topic: I have now thousands on the objects on my computer infected... What do I do? (Read 18709 times)

jzown

Re: I have now thousands on the objects on my computer infected... What do I do?

jzown

Re: I have now thousands on the objects on my computer infected... What do I do?

Dr Jay

Re: I have now thousands on the objects on my computer infected... What do I do?

jzown

Re: I have now thousands on the objects on my computer infected... What do I do?

jzown

Re: I have now thousands on the objects on my computer infected... What do I do?

jzown

Re: I have now thousands on the objects on my computer infected... What do I do?

jzown

Re: I have now thousands on the objects on my computer infected... What do I do?

jzown

Re: I have now thousands on the objects on my computer infected... What do I do?

jzown

Re: I have now thousands on the objects on my computer infected... What do I do?

Dr Jay

Re: I have now thousands on the objects on my computer infected... What do I do?