OTL logfile created on: 3/10/2010 6:12:51 PM - Run
OTLPE by OldTimer - Version 3.1.35.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000C09 | Country: Australia | Language: ENA | Date Format: d/MM/yyyy
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 87.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 97.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 64.74 Gb Total Space | 15.67 Gb Free Space | 24.21% Space Free | Partition Type: NTFS
Drive D: | 39.06 Gb Total Space | 20.66 Gb Free Space | 52.89% Space Free | Partition Type: NTFS
Drive E: | 45.25 Gb Total Space | 11.29 Gb Free Space | 24.94% Space Free | Partition Type: NTFS
Drive F: | 39.06 Gb Total Space | 4.55 Gb Free Space | 11.65% Space Free | Partition Type: NTFS
Drive G: | 199.73 Gb Total Space | 135.39 Gb Free Space | 67.79% Space Free | Partition Type: NTFS
Drive H: | 296.53 Gb Total Space | 13.07 Gb Free Space | 4.41% Space Free | Partition Type: NTFS
Drive I: | 329.06 Gb Total Space | 214.31 Gb Free Space | 65.13% Space Free | Partition Type: NTFS
Drive J: | 3.75 Gb Total Space | 1.64 Gb Free Space | 43.63% Space Free | Partition Type: FAT32
Drive X: | 276.79 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO
Current User Name: SYSTEM
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 14 Days
Output = Standard
Quick Scan
Using ControlSet: ControlSet001
========== Win32 Services (SafeList) ========== SRV - File not found [Auto] -- -- (ssrcc)
SRV - File not found [Auto] -- -- (msrvc)
SRV - File not found [Auto] -- -- (DNTVSchedulerPro)
SRV - [2010/02/19 03:31:44 | 000,067,360 | ---- | M] (NOS Microsystems Ltd.) [On_Demand] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2010/02/11 13:53:39 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Web Scanner)
SRV - [2010/02/11 13:53:39 | 000,040,384 | ---- | M] (ALWIL Software) [On_Demand] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Mail Scanner)
SRV - [2010/02/11 13:53:39 | 000,040,384 | ---- | M] (ALWIL Software) [Auto] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010/01/07 00:07:10 | 000,236,368 | ---- | M] (Malwarebytes Corporation) [Auto] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2009/11/09 18:28:08 | 000,112,592 | ---- | M] (Threat Expert Ltd.) [Auto] -- C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe -- (Browser Defender Update Service)
SRV - [2009/11/05 22:29:22 | 001,141,712 | ---- | M] (PC Tools) [On_Demand] -- C:\Program Files\Spyware Doctor\pctsSvc.exe -- (sdCoreService)
SRV - [2009/10/29 19:18:16 | 000,359,624 | ---- | M] (PC Tools) [On_Demand] -- C:\Program Files\Spyware Doctor\pctsAuxs.exe -- (sdAuxService)
SRV - [2009/07/19 20:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2009/05/18 20:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) [Auto] -- C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2009/02/15 09:10:22 | 002,402,184 | ---- | M] (Check Point Software Technologies LTD) [Auto] -- C:\WINDOWS\System32\ZoneLabs\vsmon.exe -- (vsmon)
SRV - [2001/04/05 22:57:46 | 000,238,080 | ---- | M] (O&O Software GmbH) [Auto] -- C:\WINDOWS\System32\OOD2000.exe -- (OOD2000)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\Software\Microsoft\Internet Explorer\Search,Local Page =
http://www.Google.com/IE - HKLM\Software\Microsoft\Internet Explorer\Search,Local Page Restore =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\CS_Chung_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\Guest_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\M_Chung_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page =
http://g.ninemsn.com.au/0SEENAU/SAOS01?FORM=TOOLBRIE - HKU\M_Chung_ON_C\..\URLSearchHook: {00A6FAF6-072E-44cf-8957-5838F569A31D} - Reg Error: Key error. File not found
IE - HKU\M_Chung_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S_Chung_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page =
http://google.com/IE - HKU\S_Chung_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
http://ninemsn.com.au/?ocid=iehpIE - HKU\S_Chung_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-au
IE - HKU\S_Chung_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP =
IE - HKU\S_Chung_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S_Chung_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local
IE - HKU\S_Chung_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:8080
FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\Documents and Settings\All Users.WINDOWS\Application Data\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2009/10/14 06:33:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010/02/21 02:47:10 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010/02/21 02:47:09 | 000,000,000 | ---D | M]
[2010/03/06 06:04:42 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009/06/08 06:29:36 | 000,239,432 | ---- | M] (Pando Networks) -- C:\Program Files\Mozilla Firefox\plugins\npPandoWebInst.dll
O1 HOSTS File: ([2010/02/04 03:21:29 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Easy-WebPrint) - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll ()
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKU\CS_Chung_ON_C\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKU\CS_Chung_ON_C\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\Guest_ON_C\..\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No CLSID value found.
O3 - HKU\M_Chung_ON_C\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\M_Chung_ON_C\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKU\S_Chung_ON_C\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKU\S_Chung_ON_C\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (ALWIL Software)
O4 - HKLM..\Run: [DNTVSchedulerProTray Icon] C:\Program Files\DNTV Scheduler Pro\DNTVSchedulerProTray.exe (Renura Enterprises Pty Ltd)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [OpwareSE2] C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe (ScanSoft, Inc.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O4 - HKU\.DEFAULT..\Run: [DWQueuedReporting] C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE (Microsoft Corporation)
O4 - HKU\S_Chung_ON_C..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.)
O4 - HKU\S_Chung_ON_C..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKU\.DEFAULT..\RunOnce: [RunNarrator] C:\WINDOWS\System32\narrator.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [tscuninstall] C:\WINDOWS\system32\tscupgrd.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\CS_Chung_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Guest_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService.NT_AUTHORITY_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\M_Chung_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService.NT_AUTHORITY_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S_Chung_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S_Chung_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S_Chung_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}
http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501}
http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258}
http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE}
http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab (Symantec AntiVirus scanner)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24}
http://messenger.zone.msn.com/EN-AU/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1256421470390 (WUWebControl Class)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5}
http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Symantec RuFSI Utility Class)
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616}
http://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592}
http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab (MSN Games - Installer)
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8}
http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab (CBreakshotControl Class)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072}
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48}
http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab (Minesweeper Flags Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O20 - Winlogon\Notify\LBTWlgn: DllName - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005/04/06 08:15:00 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2005/04/06 08:15:00 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (sprestrt) - C:\WINDOWS\System32\sprestrt.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (sprestrt) - C:\WINDOWS\System32\sprestrt.exe (Microsoft Corporation)
O34 - HKLM BootExecute: (sprestrt) - C:\WINDOWS\System32\sprestrt.exe (Microsoft Corporation)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
========== Files/Folders - Created Within 14 Days ========== [2010/03/09 22:27:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\S Chung\My Documents\8R
[2010/03/07 05:14:08 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010/03/07 05:14:08 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010/03/07 05:14:08 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010/03/07 05:14:08 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010/03/07 05:13:55 | 000,000,000 | --SD | C] -- C:\ComboFix
[2010/03/07 04:39:30 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010/03/06 23:37:55 | 000,155,648 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\Oemdspif.dll
[2010/03/06 23:37:54 | 000,043,520 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\ati2edxx.dll
[2010/03/06 23:37:53 | 000,208,896 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\atipdlxx.dll
[2010/03/06 23:37:53 | 000,026,112 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\Ati2mdxx.exe
[2010/03/06 23:37:53 | 000,024,064 | ---- | C] (ATI Technologies, Inc.) -- C:\WINDOWS\System32\ativcoxx.dll
[2010/03/06 23:37:16 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2010/03/06 23:37:11 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2010/03/06 23:36:29 | 000,000,000 | ---D | C] -- C:\ATI
[2010/03/06 23:17:13 | 000,000,000 | ---D | C] -- C:\Program Files\Phyxion.net
[2010/03/05 23:41:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\maxdriver
[2010/03/05 18:03:07 | 000,000,000 | -HSD | C] -- C:\WINDOWS\system32\config\systemprofile\Cookies
[2010/03/04 02:39:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\S Chung\Application Data\mIRC
[2010/03/03 05:04:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\S Chung\My Documents\8R Buttons
[2010/03/02 04:08:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NSS
[2010/03/02 04:08:56 | 000,000,000 | ---D | C] -- C:\Program Files\Norton Security Scan
[2010/03/02 04:08:56 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NSS\0207000.034
[2010/03/02 04:08:51 | 000,000,000 | ---D | C] -- C:\Program Files\NortonInstaller
[2010/03/02 03:08:38 | 000,000,000 | ---D | C] -- C:\_OTS
[2010/03/02 02:57:18 | 000,000,000 | ---D | C] -- C:\_OTL
[2010/02/28 03:43:11 | 000,632,832 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\S Chung\Desktop\OTS.exe
[2010/02/26 23:40:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\CS Chung\Application Data\Logitech
[2010/02/26 18:36:01 | 000,000,000 | ---D | C] -- C:\Program Files\WhoCrashed
[2010/02/25 03:24:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\S Chung\Desktop\Ratings
[2010/02/25 03:15:25 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/02/25 02:28:05 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010/02/25 01:13:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\S Chung\Desktop\avenger
[9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[6 C:\Documents and Settings\M Chung\My Documents\*.tmp files -> C:\Documents and Settings\M Chung\My Documents\*.tmp -> ]
[32 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[14 C:\Documents and Settings\S Chung\My Documents\*.tmp files -> C:\Documents and Settings\S Chung\My Documents\*.tmp -> ]
========== Files - Modified Within 14 Days ========== [2010/03/09 20:21:14 | 000,524,288 | ---- | M] () -- C:\Documents and Settings\Administrator\NTUSER.DAT
[2010/03/07 05:43:08 | 000,262,144 | ---- | M] () -- C:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT
[2010/03/07 05:43:08 | 000,233,472 | ---- | M] () -- C:\Documents and Settings\LocalService.NT AUTHORITY\NTUSER.DAT
[2010/03/07 05:43:07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/03/07 05:43:00 | 009,437,184 | ---- | M] () -- C:\Documents and Settings\S Chung\NTUSER.DAT
[2010/03/07 05:42:58 | 000,000,278 | -HS- | M] () -- C:\Documents and Settings\S Chung\ntuser.ini
[2010/03/07 05:31:10 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/03/07 05:30:24 | 000,350,192 | ---- | M] () -- C:\WINDOWS\System32\vsconfig.xml
[2010/03/07 05:30:13 | 000,000,868 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010/03/07 05:29:55 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010/03/07 05:29:26 | 2147,012,608 | -HS- | M] () -- C:\hiberfil.sys
[2010/03/07 05:29:25 | 2145,386,496 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2010/03/07 05:00:18 | 004,121,899 | R--- | M] () -- C:\Documents and Settings\S Chung\Desktop\ComboFix.exe
[2010/03/07 04:14:37 | 000,051,200 | ---- | M] () -- C:\Documents and Settings\S Chung\My Documents\maths PROBLEMS Part 4.doc
[2010/03/06 23:13:09 | 000,000,051 | ---- | M] () -- C:\WINDOWS\WININIT.INI
[2010/03/06 22:21:40 | 000,000,508 | ---- | M] () -- C:\Documents and Settings\S Chung\Desktop\Combat Arms.lnk
[2010/03/06 00:52:28 | 003,932,160 | ---- | M] () -- C:\Documents and Settings\CS Chung\ntuser.dat.rmbak
[2010/03/06 00:52:28 | 000,233,472 | ---- | M] () -- C:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.dat.rmbak
[2010/03/06 00:51:45 | 009,699,328 | ---- | M] () -- C:\Documents and Settings\S Chung\ntuser.dat.rmbak
[2010/03/06 00:51:17 | 003,731,456 | ---- | M] () -- C:\Documents and Settings\M Chung\NTUSER.DAT
[2010/03/06 00:51:17 | 000,774,144 | ---- | M] () -- C:\Documents and Settings\Guest\NTUSER.DAT
[2010/03/06 00:51:17 | 000,462,848 | ---- | M] () -- C:\Documents and Settings\Administrator\s-1-5-21-1935655697-688789844-1801674531-500.rrr
[2010/03/06 00:51:15 | 003,702,784 | ---- | M] () -- C:\Documents and Settings\CS Chung\NTUSER.DAT
[2010/03/06 00:50:53 | 000,233,472 | ---- | M] () -- C:\Documents and Settings\LocalService.NT AUTHORITY\s-1-5-19.rrr
[2010/03/05 20:13:49 | 000,007,410 | ---- | M] () -- C:\Documents and Settings\CS Chung\My Documents\cc_20100306_121346.reg
[2010/03/05 18:57:28 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/03/05 18:57:28 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/03/05 18:57:28 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/03/05 18:57:28 | 000,000,472 | ---- | M] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/03/05 18:00:06 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\CS Chung\ntuser.ini
[2010/03/05 17:59:52 | 000,000,082 | ---- | M] () -- C:\WINDOWS\SuperUtil.ini
[2010/03/05 17:59:22 | 000,443,588 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/03/05 17:59:22 | 000,071,846 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/03/05 05:40:27 | 000,164,864 | ---- | M] () -- C:\Documents and Settings\S Chung\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/03/04 05:33:46 | 000,038,197 | ---- | M] () -- C:\Documents and Settings\S Chung\My Documents\flashvortex1.swf
[2010/03/04 05:11:47 | 000,086,038 | ---- | M] () -- C:\Documents and Settings\S Chung\My Documents\flashvortex.swf
[2010/03/04 03:08:51 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/03/04 03:05:24 | 000,060,056 | ---- | M] () -- C:\Documents and Settings\CS Chung\My Documents\cc_20100304_190440.reg
[2010/03/04 00:40:52 | 001,138,992 | ---- | M] () -- C:\Documents and Settings\S Chung\Desktop\maxlook.exe
[2010/03/03 03:56:21 | 000,172,335 | ---- | M] () -- C:\Documents and Settings\S Chung\My Documents\avatar_1218.gif
[2010/03/03 00:41:40 | 000,047,616 | ---- | M] () -- C:\Documents and Settings\S Chung\Desktop\Win32kDiag.exe
[2010/03/02 07:24:28 | 000,023,552 | ---- | M] () -- C:\Documents and Settings\S Chung\My Documents\China Essay.doc
[2010/03/02 05:45:59 | 000,000,784 | ---- | M] () -- C:\Documents and Settings\S Chung\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/03/02 05:45:28 | 007,520,288 | ---- | M] () -- C:\Documents and Settings\S Chung\My Documents\SUPERAntiSpyware.exe
[2010/03/02 05:41:16 | 000,000,476 | ---- | M] () -- C:\WINDOWS\tasks\Norton Security Scan for S Chung.job
[2010/03/02 04:08:56 | 000,000,172 | ---- | M] () -- C:\WINDOWS\System32\drivers\NSS\0207000.034\isolate.ini
[2010/03/02 03:16:23 | 000,100,908 | ---- | M] () -- C:\Documents and Settings\S Chung\Desktop\SystemLook.exe
[2010/03/01 06:21:08 | 000,000,490 | ---- | M] () -- C:\WINDOWS\tasks\Install_NSS.job
[2010/02/28 03:43:15 | 000,632,832 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\S Chung\Desktop\OTS.exe
[2010/02/27 01:53:10 | 000,028,160 | ---- | M] () -- C:\Documents and Settings\S Chung\My Documents\test.doc
[2010/02/26 23:40:38 | 000,149,440 | ---- | M] () -- C:\Documents and Settings\CS Chung\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
[2010/02/26 20:01:07 | 000,638,548 | ---- | M] () -- C:\Documents and Settings\S Chung\Desktop\GetSystemInfo_CSC2_S Chung_2010_02_27_11_54_57.zip
[2010/02/26 18:36:01 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\S Chung\Desktop\WhoCrashed.lnk
[2010/02/26 06:32:31 | 003,729,202 | -H-- | M] () -- C:\Documents and Settings\S Chung\Local Settings\Application Data\IconCache.db
[2010/02/26 06:13:46 | 000,000,882 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cab6d4c3b7d16a.job
[2010/02/26 01:07:29 | 000,000,162 | -H-- | M] () -- C:\Documents and Settings\S Chung\My Documents\~$THS PROBLEMS Part 4.doc
[2010/02/25 05:23:35 | 001,190,400 | ---- | M] () -- C:\Documents and Settings\S Chung\My Documents\Should Australia Have An R Rating For Games.ppt
[2010/02/25 02:59:28 | 000,009,654 | ---- | M] () -- C:\Documents and Settings\CS Chung\My Documents\cc_20100225_185909.reg
[2010/02/25 02:45:12 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010/02/25 02:28:12 | 000,000,330 | RHS- | M] () -- C:\boot.ini
[9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[6 C:\Documents and Settings\M Chung\My Documents\*.tmp files -> C:\Documents and Settings\M Chung\My Documents\*.tmp -> ]
[32 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[14 C:\Documents and Settings\S Chung\My Documents\*.tmp files -> C:\Documents and Settings\S Chung\My Documents\*.tmp -> ]
========== Files Created - No Company Name ========== [2010/03/07 05:14:08 | 000,261,632 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010/03/07 05:14:08 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010/03/07 05:14:08 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010/03/07 05:14:08 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010/03/07 05:14:08 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010/03/06 23:44:18 | 2147,012,608 | -HS- | C] () -- C:\hiberfil.sys
[2010/03/06 23:37:55 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2010/03/06 23:37:54 | 000,455,520 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.cap
[2010/03/06 23:37:53 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\ATIODE.exe
[2010/03/06 23:37:53 | 000,198,341 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2010/03/06 23:37:53 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ATIODCLI.exe
[2010/03/06 23:37:53 | 000,031,240 | ---- | C] () -- C:\WINDOWS\System32\atiapfxx.blb
[2010/03/06 23:37:53 | 000,020,274 | ---- | C] () -- C:\WINDOWS\atiogl.xml
[2010/03/06 23:37:53 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010/03/06 06:43:07 | 000,000,508 | ---- | C] () -- C:\Documents and Settings\S Chung\Desktop\Combat Arms.lnk
[2010/03/05 20:13:47 | 000,007,410 | ---- | C] () -- C:\Documents and Settings\CS Chung\My Documents\cc_20100306_121346.reg
[2010/03/05 17:45:39 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
[2010/03/05 17:45:39 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
[2010/03/05 17:45:39 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
[2010/03/05 17:45:39 | 000,000,472 | ---- | C] () -- C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
[2010/03/05 06:47:19 | 000,000,082 | ---- | C] () -- C:\WINDOWS\SuperUtil.ini
[2010/03/04 05:33:46 | 000,038,197 | ---- | C] () -- C:\Documents and Settings\S Chung\My Documents\flashvortex1.swf
[2010/03/04 05:11:47 | 000,086,038 | ---- | C] () -- C:\Documents and Settings\S Chung\My Documents\flashvortex.swf
[2010/03/04 03:04:41 | 000,060,056 | ---- | C] () -- C:\Documents and Settings\CS Chung\My Documents\cc_20100304_190440.reg
[2010/03/04 00:40:51 | 001,138,992 | ---- | C] () -- C:\Documents and Settings\S Chung\Desktop\maxlook.exe
[2010/03/03 03:56:20 | 000,172,335 | ---- | C] () -- C:\Documents and Settings\S Chung\My Documents\avatar_1218.gif
[2010/03/03 00:41:39 | 000,047,616 | ---- | C] () -- C:\Documents and Settings\S Chung\Desktop\Win32kDiag.exe
[2010/03/02 05:45:59 | 000,000,784 | ---- | C] () -- C:\Documents and Settings\S Chung\Desktop\SUPERAntiSpyware Free Edition.lnk
[2010/03/02 05:45:24 | 007,520,288 | ---- | C] () -- C:\Documents and Settings\S Chung\My Documents\SUPERAntiSpyware.exe
[2010/03/02 05:41:16 | 000,000,476 | ---- | C] () -- C:\WINDOWS\tasks\Norton Security Scan for S Chung.job
[2010/03/02 04:08:56 | 000,000,172 | ---- | C] () -- C:\WINDOWS\System32\drivers\NSS\0207000.034\isolate.ini
[2010/03/02 03:16:23 | 000,100,908 | ---- | C] () -- C:\Documents and Settings\S Chung\Desktop\SystemLook.exe
[2010/03/02 02:52:56 | 000,023,552 | ---- | C] () -- C:\Documents and Settings\S Chung\My Documents\China Essay.doc
[2010/03/01 06:21:08 | 000,000,490 | ---- | C] () -- C:\WINDOWS\tasks\Install_NSS.job
[2010/02/27 01:52:58 | 000,028,160 | ---- | C] () -- C:\Documents and Settings\S Chung\My Documents\test.doc
[2010/02/26 23:06:08 | 004,121,899 | R--- | C] () -- C:\Documents and Settings\S Chung\Desktop\ComboFix.exe
[2010/02/26 19:55:08 | 000,638,548 | ---- | C] () -- C:\Documents and Settings\S Chung\Desktop\GetSystemInfo_CSC2_S Chung_2010_02_27_11_54_57.zip
[2010/02/26 18:36:01 | 000,000,654 | ---- | C] () -- C:\Documents and Settings\S Chung\Desktop\WhoCrashed.lnk
[2010/02/26 06:13:46 | 000,000,882 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cab6d4c3b7d16a.job
[2010/02/26 01:07:29 | 000,000,162 | -H-- | C] () -- C:\Documents and Settings\S Chung\My Documents\~$THS PROBLEMS Part 4.doc
[2010/02/26 00:47:19 | 000,085,797 | ---- | C] () -- C:\Documents and Settings\S Chung\Desktop\Cheetah-Anti-Rogue.cmd
[2010/02/25 04:05:09 | 001,190,400 | ---- | C] () -- C:\Documents and Settings\S Chung\My Documents\Should Australia Have An R Rating For Games.ppt
[2010/02/25 02:59:11 | 000,009,654 | ---- | C] () -- C:\Documents and Settings\CS Chung\My Documents\cc_20100225_185909.reg
[2010/02/25 02:28:11 | 000,000,260 | ---- | C] () -- C:\Boot.bak
[2010/02/25 02:28:08 | 000,260,272 | ---- | C] () -- C:\cmldr
[2010/02/23 06:16:57 | 000,819,200 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/02/23 06:16:57 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/02/16 04:48:20 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\WinVd32.sys
[2010/02/16 04:48:18 | 000,017,984 | ---- | C] () -- C:\WINDOWS\System32\WinFLdrv.sys
[2010/02/16 04:48:17 | 000,000,990 | -HS- | C] () -- C:\Documents and Settings\S Chung\Application Data\systemfl.$dk
[2010/02/16 01:37:31 | 000,000,067 | ---- | C] () -- C:\WINDOWS\AudioMidRecorder.INI
[2010/01/25 22:08:06 | 000,767,952 | ---- | C] () -- C:\WINDOWS\BDTSupport.dll
[2010/01/25 00:03:25 | 000,000,532 | ---- | C] () -- C:\WINDOWS\MAXLINK.INI
[2009/12/14 23:08:59 | 000,000,355 | ---- | C] () -- C:\WINDOWS\Sonic3K.INI
[2009/12/14 03:02:54 | 000,075,600 | ---- | C] () -- C:\Documents and Settings\S Chung\Application Data\ReplayMusicLog.log
[2009/11/24 05:45:51 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\rmc_rtspdl.dll
[2009/11/23 06:02:51 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009/11/09 14:17:25 | 000,000,036 | ---- | C] () -- C:\Documents and Settings\CS Chung\Local Settings\Application Data\housecall.guid.cache
[2009/10/26 06:13:43 | 000,000,068 | ---- | C] () -- C:\WINDOWS\MyProg.ini
[2009/10/24 04:07:25 | 000,298,752 | ---- | C] () -- C:\WINDOWS\System32\drivers\yk51x86.sys
[2009/09/10 19:00:34 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2009/08/03 00:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2009/07/28 06:28:32 | 000,305,408 | ---- | C] () -- C:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\FontCache3.0.0.0.dat
[2009/07/25 05:36:54 | 000,000,131 | ---- | C] () -- C:\Documents and Settings\CS Chung\Local Settings\Application Data\fusioncache.dat
[2009/07/24 04:00:27 | 000,000,262 | ---- | C] () -- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2009/07/04 00:06:18 | 000,000,130 | ---- | C] () -- C:\Documents and Settings\S Chung\Local Settings\Application Data\fusioncache.dat
[2009/05/27 05:40:54 | 000,001,814 | ---- | C] () -- C:\WINDOWS\HprSnap.INI
[2009/05/26 04:19:33 | 000,000,051 | ---- | C] () -- C:\WINDOWS\WININIT.INI
[2009/05/22 08:10:40 | 000,016,384 | ---- | C] () -- C:\WINDOWS\System32\ood2kmsg.dll
[2009/05/22 08:10:39 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\OODCSPRO.dll
[2008/11/11 15:59:33 | 000,000,118 | ---- | C] () -- C:\WINDOWS\System32\MRT.INI
[2008/11/05 06:58:55 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2008/10/11 17:36:19 | 000,000,022 | ---- | C] () -- C:\WINDOWS\REGPSD20.INI
[2008/10/11 17:36:11 | 000,000,037 | ---- | C] () -- C:\WINDOWS\Viewer.ini
[2008/10/11 17:36:06 | 000,000,778 | ---- | C] () -- C:\WINDOWS\PSDEWIN.INI
[2008/10/11 17:36:06 | 000,000,080 | ---- | C] () -- C:\WINDOWS\psdxport.ini
[2008/08/18 16:07:05 | 000,011,264 | ---- | C] () -- C:\Documents and Settings\CS Chung\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/07/03 02:38:01 | 000,138,576 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2008/07/03 02:38:01 | 000,022,328 | ---- | C] () -- C:\Documents and Settings\S Chung\Application Data\PnkBstrK.sys
[2008/01/28 06:05:33 | 000,047,104 | ---- | C] () -- C:\WINDOWS\System32\KMVIDC32.DLL
[2007/12/06 00:59:26 | 000,003,584 | ---- | C] () -- C:\Documents and Settings\M Chung\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/10/22 04:47:36 | 000,000,059 | ---- | C] () -- C:\Documents and Settings\S Chung\Application Data\AVSDVDPlayer.m3u
[2007/09/08 02:06:57 | 000,000,745 | ---- | C] () -- C:\WINDOWS\CoD.INI
[2007/08/25 00:38:36 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\CS Chung\Application Data\AVSDVDPlayer.m3u
[2007/08/04 06:51:55 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2007/07/04 06:26:05 | 000,164,864 | ---- | C] () -- C:\Documents and Settings\S Chung\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007/06/30 00:02:36 | 000,000,000 | ---- | C] () -- C:\WINDOWS\VPC32.INI
[2007/06/27 02:11:04 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2007/06/18 05:09:05 | 000,000,376 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2007/06/15 05:12:31 | 000,087,808 | ---- | C] () -- C:\WINDOWS\System32\cpwmon2k.dll
[2007/06/15 04:01:19 | 000,008,704 | ---- | C] () -- C:\WINDOWS\System32\CNMVS7M.DLL
[2007/06/14 06:28:12 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2004/11/28 17:09:03 | 000,086,016 | -H-- | C] () -- C:\WINDOWS\System32\DNT4.dll
[2004/11/28 17:05:56 | 000,086,016 | -H-- | C] () -- C:\WINDOWS\System32\DNT3.dll
[2004/11/27 23:28:03 | 000,086,016 | -H-- | C] () -- C:\WINDOWS\System32\DNT2.dll
[2004/11/27 23:11:01 | 000,086,016 | -H-- | C] () -- C:\WINDOWS\System32\DNT1.dll
[2004/08/03 19:56:46 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2003/07/08 07:04:46 | 000,000,015 | ---- | C] () -- C:\WINDOWS\System32\caacedfedaadeca.dll
========== LOP Check ========== [2009/05/30 20:05:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\CS Chung\Application Data\Canon
[2008/06/29 01:45:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\CS Chung\Application Data\CD-LabelPrint
[2009/07/25 05:54:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\CS Chung\Application Data\Cuttermaran
[2009/01/28 02:33:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\CS Chung\Application Data\HiYo
[2009/07/28 06:19:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\CS Chung\Application Data\Pegasys Inc
[2009/11/09 14:31:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\CS Chung\Application Data\QuickScan
[2009/08/09 08:10:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\CS Chung\Application Data\VideoReDo-TVSuite
[2009/08/05 07:04:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\CS Chung\Application Data\VideoReDoPlus
[2009/02/28 18:28:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\M Chung\Application Data\HiYo
[2009/07/24 18:49:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\M Chung\Application Data\My Battle for Middle-earth Files
[2007/07/01 21:16:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\M Chung\Application Data\Sierra
[2007/11/24 06:25:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\M Chung\Application Data\Thunderbird
[2009/11/25 06:26:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\Any Video Converter
[2010/01/29 02:54:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\Auslogics
[2010/01/25 01:03:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\Error Fix
[2010/01/22 19:38:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\Leadertech
[2009/11/26 03:29:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\Mp3tag
[2009/12/13 22:06:51 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\My Battle for Middle-earth(tm) II Files
[2009/11/19 05:14:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\Registry Mechanic
[2010/01/25 00:03:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\ScanSoft
[2010/01/25 23:16:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\Simply Super Software
[2009/11/19 18:15:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\Ubisoft
[2010/03/05 07:42:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\S Chung\Application Data\uTorrent
[2010/03/05 18:57:28 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 1).job
[2010/03/05 18:57:28 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 2).job
[2010/03/05 18:57:28 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 3).job
[2010/03/05 18:57:28 | 000,000,472 | ---- | M] () -- C:\WINDOWS\Tasks\Ad-Aware Update (Daily 4).job
[2010/03/01 06:21:08 | 000,000,490 | ---- | M] () -- C:\WINDOWS\Tasks\Install_NSS.job
========== Purity Check ========== ========== Custom Scans ========== < MD5 for: ATAPI.SYS >[2004/08/04 07:00:00 | 018,738,937 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2009/10/24 17:20:50 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2009/10/24 17:20:50 | 023,852,652 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] () MD5=2A7506584BB54EB87CA6F1BCF1DBBE15 -- C:\WINDOWS\maxdriver\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] () MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\ComboFix\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\SoftwareDistribution\Download\385cb67dda0ffd4dea8c0d990dc65796\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\dllcache\atapi.sys
[2008/04/13 13:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/04 07:00:00 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: EXPLORER.EXE >[2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\explorer.exe
[2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2008/04/13 19:12:19 | 001,033,728 | ---- | M] (Microsoft Corporation) MD5=12896823FB95BFB3DC9B46BCAEDC9923 -- C:\WINDOWS\SoftwareDistribution\Download\385cb67dda0ffd4dea8c0d990dc65796\explorer.exe
[2007/06/13 06:26:03 | 001,033,216 | ---- | M] (Microsoft Corporation) MD5=7712DF0CDDE3A5AC89843E61CD5B3658 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2004/08/04 07:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2004/08/04 07:00:00 | 001,032,192 | ---- | M] (Microsoft Corporation) MD5=A0732187050030AE399B241436565E64 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
< MD5 for: LSASS.EXE >[2004/08/04 07:00:00 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=84885F9B82F4D55C6146EBF6065D75D2 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008/04/13 19:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008/04/13 19:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008/04/13 19:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\SoftwareDistribution\Download\385cb67dda0ffd4dea8c0d990dc65796\lsass.exe
[2008/04/13 19:12:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=BF2466B3E18E970D8A976FB95FC1CA85 -- C:\WINDOWS\system32\lsass.exe
< End of report >